last executing test programs: 10.786412547s ago: executing program 4 (id=203): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='mand\x00', &(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="59eb6e0919e9a92b1c845775c88c82cdb081611b6380af47cf87716ba25897c99ce341fa16fe26031af4cf681679fc96be745b77dee8bad8bc4a3e53fa64a35f4e360eb79605c1c4ee0d87860851de0378ccd75cf01fd0f4150191d7fbe2d9e7985f5ffb05e5fd9e0f40083b771dab9b59cde20e06b315b28c96f77d27279cf61c85b174c78b865750dddf177e699c06cc6febb8c7df93693a561b8fee74f0409127e4e0219049687cbdd4938fd377723bf11a23ce2954294598a95e7658bdda41c22d59beabf4dca34a343e87a9f715eb4240709e5912356616c43b51e30769168b408b660d83f3f9b9af49653ae15572eda6d455c8dbcf91aacef7c76d0c34b2024addd9790bd611e6a4a6dde25ad5b3a15eb251f7110872f0cd22ba468a8ff5c0abcc282e939a65b6a13c33358989003435f7f4747d52f1bc68e3afbca6c7edc3e3e95af13498e8ae5a6e00b027b536d61aa22df1cb272162bef205c45ce635666667bc70106d27fd527d92c8b90623cac454fb9a266fa91db8c974c65ae6bceac90fcbb5", 0x186, 0x400480c, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x4040054, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000180)={[0x0, 0x0]}, &(0x7f00000001c0)={[0x0]}, 0x800) syz_usb_connect$midi(0x0, 0x4e, 0x0, 0x0) add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'}) recvmmsg(r2, &(0x7f0000000380), 0x8000000000001ac, 0x2140, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='yeah', 0x4) recvfrom$inet(r0, &(0x7f0000000400)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 8.826714725s ago: executing program 2 (id=214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffec100f4b, 0xd, 0xe000, 0xf, 0x2, 0x0, 0x0, 0x40, 0x20ffff}}, 0x50) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffec100f4b, 0xd, 0xe000, 0xf, 0x2, 0x0, 0x0, 0x40, 0x20ffff}}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x44, 0x3, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/133, 0x85}], 0x1}, 0xa15ca00d7db50300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f00000005c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000600)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r5, &(0x7f0000000640)=[{&(0x7f0000000680)="3f2a6a1bc4", 0x5}], 0x1) recvfrom(r5, &(0x7f0000001340)=""/4059, 0xfdb, 0x17, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002340)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002340)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12, r7, 0x7a656000) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12, r7, 0x7a656000) writev(r5, &(0x7f0000002380)=[{&(0x7f0000002400)="58ddb007a47a8b1f458ab677d557ca50006fcb5d15966b46ca64f7e76268cd64007095adfef77465b69ec03139854d6f07d5f9bd01000046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f00000024c0)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000002580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000002640)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000002680)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd7", 0x845}], 0x5) (async) writev(r5, &(0x7f0000002380)=[{&(0x7f0000002400)="58ddb007a47a8b1f458ab677d557ca50006fcb5d15966b46ca64f7e76268cd64007095adfef77465b69ec03139854d6f07d5f9bd01000046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f00000024c0)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000002580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000002640)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000002680)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a085852456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd7", 0x845}], 0x5) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000002f00)=0xffff1884, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000002f00)=0xffff1884, 0x4) 7.562473974s ago: executing program 4 (id=225): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) r6 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="20c81e0000004d61501d01000000000000001000000400008007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000740)={0x20, 0x7, 0xd, "650b400823c7c084f67ad7d101"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x3, r5, 0x0, 0x80000001, 0xb1, &(0x7f0000000480)="7dfbe2820e6c213f50aba30a6f1611223b16adadcd6f51dbe396f24fcb027faa452377f5cc06242e50a72069d6e6d0caf6aee54846f1b75025601d2ec29eb4b5c2a538929edab42cc47001719fea14de87044a288c1e567aa06fc9e45183fb4c19ac0d165f81fc8d2569f32d1d23ba3f9905a6d90741196f7f6964ce8669433132c07257db9e67b00090147669f3b21b75c9d90e6b02c4f5b43779ef61bfdb61e47abcc47d09b67ea2c4dbe68dfb376fb3"}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000001c0)={0x28, 0x3, r3, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r7 = add_key$user(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, &(0x7f0000000880)="166ec4b1", 0x4, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000980)={r7, r8, r7}, 0x0, 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff) bind$netlink(r9, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000020001070000003000018014000400fe880000000000000000000000000001060005004e22000008000700", @ANYRES32=0x0, @ANYBLOB="060001000a"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) close(r0) 7.205475003s ago: executing program 0 (id=226): sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) fsopen(&(0x7f0000001840)='adfs\x00', 0x0) 7.20528213s ago: executing program 2 (id=227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000005c40)=@updpolicy={0x17c, 0x19, 0xfd3649826d894c67, 0x270bd28, 0x7000000, {{@in6=@mcast1, @in=@multicast1, 0xffbe, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x100}, {0x0, 0x0, 0xfffffffffffffffe}}, [@tmpl={0xc4, 0x5, [{{@in6=@private2, 0x4d6, 0x2b}, 0xa, @in=@loopback, 0x3507, 0x4, 0x1, 0x6, 0x4, 0x9, 0x1}, {{@in6=@empty, 0x4d5, 0x3c}, 0xa, @in=@broadcast, 0x3502, 0x5, 0x0, 0xff, 0xe2, 0x5, 0x8}, {{@in=@local, 0x4d5, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x4, 0x0, 0xcb, 0x8, 0x4, 0x7fffffff}]}]}, 0x17c}}, 0x0) 7.159881807s ago: executing program 2 (id=228): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300)='syz_tun\x00', 0x8) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008ace8cc0200000000000109022400010000a0020904000502030084000921010040012218009505810340a8e51587"], 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x7, @local}, 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000400001c0002800500030000000000080001400000000c08000240000000050900010073797a30"], 0xe0}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_usb_connect(0x5, 0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109023400170e0610030904e40503b956da020905080000040112fc09050b00200007029a0705d15b89f26d0905090340007a0a84"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) ioctl$XFS_IOC_FSCOUNTS(r2, 0x80205871, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x805, 0x0) r4 = fsopen(0x0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000003e80)={0x8, 0x2, 0x8004, 0x7, 0x401, 0x7, 0xfffffffc, 0x3}, 0x20) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='gidO\xcb%R\xff\xf0~>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00\x00\x00\x00\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000007c0), 0x400000000a882, 0x0) io_uring_setup(0x7059, &(0x7f0000000280)={0x0, 0x55bf, 0x8, 0x3, 0x336}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000440), 0x651, 0x0) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x7c1f1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000001a00)=""/4060, &(0x7f00000001c0)=0xfdc) socket$inet(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) 7.116244096s ago: executing program 0 (id=229): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x43, 0x107, 0x70bd2a, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x8, 0x145, 0x0, 0x1, [@typed={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x2004c000) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f00000004c0), 0x800001d, 0x1c) gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000500), 0x242, 0x0) write$dsp(r6, &(0x7f0000000540)='`', 0x1) r7 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r7, 0xc0505510, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000600)={0x0, 0xa1, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r8, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000b5403340861a2275363501020301090212"], 0x0) syz_usb_control_io$sierra_net(r9, 0x0, &(0x7f0000000700)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r9, 0x0, 0x0) 5.60434543s ago: executing program 2 (id=236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x6, 0x5, 0x93, 0x1, 0x0, 0x5f, 0xb, 0x20, 0xa6, 0x2, 0x5, 0x9, 0xfffffffe}, {0xfffffffd, 0xfffa, 0x0, 0x4, 0xfa, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x1, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x80, 0x0, 0x4, 0x1, 0x19, 0xe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0x7f}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x2e, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.114232297s ago: executing program 2 (id=238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x6, 0x8, 0x93, 0x1, 0x0, 0x5f, 0xb, 0x20, 0xa6, 0x2, 0x5, 0x9, 0xfffffffe}, {0xfffffffd, 0xfffa, 0x0, 0x4, 0xfa, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x1, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x80, 0x0, 0x4, 0x1, 0x19, 0xe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0x7f}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000019c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000001a00)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000001a40)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0x40103e05, &(0x7f0000001a80)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/4081, 0xff1}, {&(0x7f0000001500)=""/209, 0xd1}, {&(0x7f0000001600)=""/172, 0xac}, {&(0x7f00000016c0)=""/161, 0xa1}, {&(0x7f0000001780)=""/93, 0x5d}], 0x5}, 0x9}], 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001880)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1000000050ae1cdcc911182efbe62669e86121cff40b3c936bf368cc4c8116ba33c71985a8824637d1d93b3501000000000000009c23abafb404b18112a69acbd78d66", @ANYRES16=0x0, @ANYBLOB="010625bd7000fcdbdf25090000000500080000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x4044004) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x2e, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) mknod(&(0x7f0000001840)='./file0\x00', 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0), 0x0, &(0x7f0000001c00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r8, &(0x7f0000001c80)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000003cc0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000003d00)={0x50, 0xfffffffffffffffe, r9, {0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x50) read$FUSE(r8, &(0x7f0000003d80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r8, &(0x7f0000005dc0)={0x10, 0xffffffffffffffda, r10}, 0x10) r11 = open$dir(&(0x7f0000005e00)='./file0\x00', 0x0, 0x0) fcntl$lock(r11, 0x7, &(0x7f0000005e40)={0x0, 0x0, 0x0, 0x200000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000001900)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) 4.616569166s ago: executing program 1 (id=242): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x248, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) mknod(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101001, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="02171a00000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.280003558s ago: executing program 4 (id=247): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20040400) unshare(0x4000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x200, 0x0}, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000010b80)={0x9, 0x4, &(0x7f00000009c0)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYBLOB="1d1e8f89a21e905bb76276f19121343c66341f30cd823c84501eab50f9ad0c675c2d1675a05a0ee6dc4b468a4977e937c2ba3dc82ffc03877e3ba8156457d96aa96d368599c835041e73a2f62112d9514a8e98f2792737e9e52e726055d8c737886150b5599625a502645f611a0adc0bd7f22d059d0a459385ca2cfd64ecceefec45954bf0ec633d6de4cf746852c63d5664b4352eda6c15de6c977e91192485e2c837ce2f9953544210a0729ffd8bee28442a7dfa6a433f25d6f17853f8a15d7f5ddfe82ee16e0dbe3526d5182adf660cd650530e99f090cbd260f9f1bb47133b6e858bac6ffd5b8de9b483b1642dcd4de8914905e3eed0faef326937001e9c66bf0f41d0152ef7ef1f6c9db8fe02b934094c8c282382938339ec7df6c5da", @ANYRES64=0x0, @ANYRESDEC=r0, @ANYRESHEX=r3, @ANYRES8=r2], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000080)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='vers\x00', &(0x7f0000000600)='-\xf2B\xd3\xd1]\xc4\x85RB \x9a,\x03\xe9\x1e\xfb\x88\xd8g\x1f\xe2\xfaWy\xf8\x82\xe3\x8b\x05 2\"/\x9b\xad>\xe54Z \xd2\x84F\xf6\xb9\x06Yc\xdfIGQ\xa0B\xb1*0\xd0\xe2\x91\x92\xe3\xd4V&\x8bS\x85\xab\x93\x02\xc9\xe5\xd8mZ\x03\xee\xd3\x1e\xf6)`s\xe5\xe5\xd3A\xedk!\x1dO\x8dw\xeb\xec\xd8\r\xe5\xeb\xb6z\x81\xaa\xbb\xf4\b\xaa\x89\x0f\"\xf5\xb0R\xe3L\xc6L\a\xf1\xb0\x1e\x04|Zu\bWG4\x0e\b&\xde\xba\xb2\x1d\xe1[G\r', 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r4, 0x0, 0x0, r7, &(0x7f0000000300)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000280)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000400)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f00000006c0)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r8, 0x7a5, &(0x7f0000000940)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r8, 0x7a6, &(0x7f0000000980)={0xc, 0xf7fffffffffffffc, 0x240000, 0x7fffffffffffffff, 0x80000f, 0x9}) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x88002, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0xd) open(&(0x7f0000000140)='./file0\x00', 0x143142, 0xc0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x40a903, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r10, 0x3b85, &(0x7f00000004c0)={0x28, 0x7, r11, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r10, 0x3ba0, &(0x7f0000000500)={0x48, 0x5, r11, 0x0, 0xffffffffffffffff, 0x1}) 4.011459369s ago: executing program 0 (id=250): r0 = fsopen(&(0x7f0000001840)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000200)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xa9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) 3.906907463s ago: executing program 0 (id=251): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) syz_usb_connect(0x0, 0x147, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRESOCT], 0x0) 3.764023671s ago: executing program 1 (id=252): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x279, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x10000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xb0d, 0x0, 0x0, 0x1000, 0x80000001, 0x0, 0x0, 0x103}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r1, r7, &(0x7f0000000540)={0x0, 0x80002, 0x0, 0x3, 0x1fffc, 0x0, r2}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4465, 0x1, 0x0, 0x220, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x68, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fdf, 0x4, 0x1, 0x18}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40006252, 0x0, 0x1, 0xfffffffa}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0x6, 0xfb9, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 3.517022181s ago: executing program 4 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000001400)=""/158, 0x9e}, {&(0x7f00000015c0)=""/191, 0xbf}], 0x3}, 0x1}], 0x4, 0x2000, 0x0) 3.456505866s ago: executing program 3 (id=256): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000980)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) 3.372234659s ago: executing program 4 (id=257): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000240)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x3454, &(0x7f00000002c0)={0x0, 0x0, 0x8000, 0x2, 0x295}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/4095, 0x440000}], 0x100000000000011a) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000015c0)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000366000/0x2000)=nil, 0x2000}}) r3 = openat$kvm(0x0, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000400)={0x7c, 0x3000, 0x0, r5}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000440)={0x5, 0x3000, 0x0, r5, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000001640)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 3.196875519s ago: executing program 3 (id=258): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000005c0)={0x0, 0xd00, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0xc0c4) 3.147619863s ago: executing program 3 (id=259): openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) request_key(&(0x7f00000002c0)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r3, 0x3b88, &(0x7f0000000040)={0xc, 0x0, 0x2, 0xfdfd}) sendmsg$nl_generic(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000007c0)={0x18, 0x26, 0x101, 0x70bd26, 0xfffffffc, {0x1d}, [@nested={0x4, 0x12b}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.739278078s ago: executing program 1 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000400)=""/4084, 0xff4}, {&(0x7f0000001400)=""/158, 0x9e}, {&(0x7f00000014c0)=""/256, 0x100}, {&(0x7f00000015c0)=""/191, 0xbf}], 0x5}, 0x1}], 0x4, 0x2000, 0x0) 2.630347848s ago: executing program 1 (id=261): r0 = fsopen(&(0x7f0000001840)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000200)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xa9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) 2.523350704s ago: executing program 1 (id=262): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "c800002000", "fff600"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)=""/65, 0x41}], 0x1}, 0xfff}, {{0x0, 0xfffffcbf, 0x0}, 0x1}], 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59e", 0x4a}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000440)=0xffff1884, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000280)=0x4008, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0], 0x50}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', 0x1}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[], 0x20}, 0x1, 0x100000000000, 0x0, 0x40001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22040085}, 0x11) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000740)) unshare(0x64000600) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1.868925732s ago: executing program 3 (id=263): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xf, 0xf, 0xfffffdfffffffffd, 0x2, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x155081) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x1}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f000063b000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x238, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@ip={@empty, @empty, 0xff, 0xff000000, 'bond0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x84, 0x1, 0x74}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x5, 0xffff, 'netbios-ns\x00', {0xdd0fdaa}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @multicast2, 0xffffffff, 0xffffffff, 'macvtap0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x1, 0x2, 0x19}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x1, 0x2}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7fffffff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000000206010800000000efff0000000000000900020073797a310000000005000400000000001400078005001500090000000800114000000000050001000600000005000500000000000d000300686173683a6d616300"], 0x5c}}, 0x404c804) sendmmsg$inet(r3, &(0x7f0000000740)=[{{&(0x7f0000000780)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) socket(0x2d, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000800)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000880)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000008c0), 0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0xc0803, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f0000000940)={0x8f, 0x0, 0x2}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000009c0)=[@text64={0x40, &(0x7f0000000100)="b9100400000f320f5ee2b98a0a0000b800000000ba000000800f30ad660fc77496176426660f388173df410fc733640f4363963e0f381e812500000066ba4300ed", 0x41}], 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000a00)=[@textreal={0x8, 0x0}], 0x1, 0x32, 0x0, 0x0) 1.841583233s ago: executing program 1 (id=264): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x100, 0x1, 0x8}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000280), 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000003c0)=[0x1, 0xef]) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000400)=[0x1, 0xb]) sendmmsg$unix(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x2, 0x20000040) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000540)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000580)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000600)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000640)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000680)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x8, "cbe0c5dc"}, 0x0, 0x2, {&(0x7f0000000700)}, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000740)=0x2) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000780)=0x1) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000007c0)=@multiplanar_mmap={0x8bd, 0x1, 0x4, 0x4000, 0x7, {}, {0x3, 0x8, 0x80, 0x1, 0x1, 0x1, "cd5c9d4a"}, 0x3ff, 0x1, {0x0}, 0x4, 0x0, r4}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="200000653a9d3681000c000280000000c86c3c85b96401a8402bcd2c620315c4b6a8b0b1ebc3c3d4d25cfa381577ff7186180ef08959faf25856e4124eb71d1751e78337eed1ee3a01e783fc7e579e21e34adfb5612beaf110c0c6cb39867e867f864a8eb45717cfca3e5e56cfd54bedac450c5ef7a7affcaed2ba27361d837494ccdeead6a89f239a7d427622b21959e88ed11e6b64209559cd40be4a47086cd86f4ccb04135757cac9b2fe266e82e62435c977a9a8e98a6c4fb7c0c3ecb32875d0d38dce424c00000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.751704381s ago: executing program 2 (id=265): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x100, 0x1, 0x8}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000280), 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f00000003c0)=[0x1, 0xef]) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000400)=[0x1, 0xb]) sendmmsg$unix(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x2, 0x20000040) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000540)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000580)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000600)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000640)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000680)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x8, "cbe0c5dc"}, 0x0, 0x2, {&(0x7f0000000700)}, 0x9, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000740)=0x2) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000780)=0x1) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000007c0)=@multiplanar_mmap={0x8bd, 0x1, 0x4, 0x4000, 0x7, {}, {0x3, 0x8, 0x80, 0x1, 0x1, 0x1, "cd5c9d4a"}, 0x3ff, 0x1, {0x0}, 0x4, 0x0, r4}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="200000653a9d3681000c000280000000c86c3c85b96401a8402bcd2c620315c4b6a8b0b1ebc3c3d4d25cfa381577ff7186180ef08959faf25856e4124eb71d1751e78337eed1ee3a01e783fc7e579e21e34adfb5612beaf110c0c6cb39867e867f864a8eb45717cfca3e5e56cfd54bedac450c5ef7a7affcaed2ba27361d837494ccdeead6a89f239a7d427622b21959e88ed11e6b64209559cd40be4a47086cd86f4ccb04135757cac9b2fe266e82e62435c977a9a8e98a6c4fb7c0c3ecb32875d0d38dce424c00000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 709.533118ms ago: executing program 0 (id=266): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000008400)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f0000008440)={&(0x7f0000008480)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f00000084c0)=[{&(0x7f0000008500)="b2", 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x20048844) (fail_nth: 43) 219.881687ms ago: executing program 0 (id=267): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000001400)=""/158, 0x9e}, {&(0x7f00000015c0)=""/191, 0xbf}], 0x3}, 0x1}], 0x4, 0x2000, 0x0) 159.377815ms ago: executing program 3 (id=268): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000002100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000e00000000000008004500007000670000fb019078ac1e0001ac1414aa03006f78032400004500000000010004000100077f00000164010102863dffffffff000808c82ce8da6e0502000b7434954373561de5840205cf0a0006040000071173bc23f9ffffffa30900a301c846000008c8f46976e79e0000006da410bda30c86bef56a22d089f3f2ccf120"], 0x0) 101.709084ms ago: executing program 4 (id=269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0xd000, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 0s ago: executing program 3 (id=270): ioprio_set$pid(0x2, 0x0, 0x6000) io_setup(0x2, &(0x7f0000000080)=0x0) eventfd(0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000d80), 0x0, 0x10, &(0x7f0000000dc0), 0xfffffffffffffdbb}, 0x48) io_submit(r0, 0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): [ 84.509004][ T5611] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.520860][ T1218] usb 1-1: device descriptor read/64, error -71 [ 84.540255][ T5611] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.540299][ T5611] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1392, setting to 1024 [ 84.540322][ T5611] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.582624][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.582651][ T5611] usb 5-1: Product: syz [ 84.582664][ T5611] usb 5-1: Manufacturer: syz [ 84.582677][ T5611] usb 5-1: SerialNumber: syz [ 84.636092][ T1218] usb usb1-port1: attempt power cycle [ 84.961380][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.982502][ T1218] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.014521][ T1218] usb 1-1: device descriptor read/8, error -71 [ 85.115796][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.115843][ T10] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 85.119706][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 85.119737][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.164328][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.164350][ T10] usb 4-1: Product: syz [ 85.164358][ T10] usb 4-1: Manufacturer: syz [ 85.164365][ T10] usb 4-1: SerialNumber: syz [ 85.171809][ T5695] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.207411][ T5786] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 85.260860][ T1218] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.282098][ T1218] usb 1-1: device descriptor read/8, error -71 [ 85.332109][ T5695] usb 2-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 85.335689][ T5695] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.335728][ T5695] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.339539][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 85.339562][ T5695] usb 2-1: Product: syz [ 85.339575][ T5695] usb 2-1: Manufacturer: syz [ 85.413399][ T1218] usb usb1-port1: unable to enumerate USB device [ 85.434624][ T5695] hso 2-1:1.0: Can't find BULK endpoints [ 85.644138][ T5786] Cannot find set identified by id 0 to match [ 85.741773][ T5611] cdc_ncm 5-1:1.0: bind() failure [ 85.798876][ T5611] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 85.798927][ T5611] cdc_ncm 5-1:1.1: bind() failure [ 86.205666][ T5708] usb 2-1: USB disconnect, device number 2 [ 86.581531][ T5801] tipc: Trying to set illegal importance in message [ 86.832174][ T29] cfg80211: failed to load regulatory.db [ 87.111878][ T5708] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 87.116566][ T9] usb 5-1: USB disconnect, device number 2 [ 87.263861][ T5708] usb 1-1: Using ep0 maxpacket: 32 [ 87.266575][ T5708] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 87.291444][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.291471][ T5708] usb 1-1: Product: syz [ 87.291483][ T5708] usb 1-1: Manufacturer: syz [ 87.291492][ T5708] usb 1-1: SerialNumber: syz [ 87.303510][ T5708] usb 1-1: config 0 descriptor?? [ 87.311028][ T5687] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 87.358367][ T5708] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 87.358597][ T5708] dvb-usb: bulk message failed: -22 (4/0) [ 87.358607][ T5708] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 87.358675][ T5708] dvb-usb: bulk message failed: -22 (5/0) [ 87.358681][ T5708] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 87.429949][ T5708] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 87.448166][ T5708] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 87.448208][ T5708] usb 1-1: media controller created [ 87.469178][ T5687] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 87.475974][ T5687] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 87.476025][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 87.476047][ T5687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 87.530308][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.530327][ T5687] usb 2-1: Product: syz [ 87.530334][ T5687] usb 2-1: Manufacturer: syz [ 87.530341][ T5687] usb 2-1: SerialNumber: syz [ 87.563308][ T5687] usb 2-1: config 0 descriptor?? [ 87.625613][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 87.704769][ T5816] FAULT_INJECTION: forcing a failure. [ 87.704769][ T5816] name failslab, interval 1, probability 0, space 0, times 0 [ 87.704801][ T5816] CPU: 0 UID: 0 PID: 5816 Comm: syz.4.34 Not tainted syzkaller #0 PREEMPT(full) [ 87.704822][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.704835][ T5816] Call Trace: [ 87.704842][ T5816] [ 87.704849][ T5816] dump_stack_lvl+0xe8/0x150 [ 87.704881][ T5816] should_fail_ex+0x410/0x560 [ 87.704912][ T5816] should_failslab+0xa8/0x100 [ 87.704939][ T5816] __kmalloc_noprof+0xfe/0x720 [ 87.704952][ T5816] ? rcu_is_watching+0x16/0xb0 [ 87.704966][ T5816] ? tomoyo_realpath_from_path+0xef/0x640 [ 87.704976][ T5816] ? tomoyo_realpath_from_path+0xef/0x640 [ 87.704989][ T5816] tomoyo_realpath_from_path+0xef/0x640 [ 87.705005][ T5816] tomoyo_check_open_permission+0x229/0x470 [ 87.705020][ T5816] ? tomoyo_check_open_permission+0x1d3/0x470 [ 87.705033][ T5816] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 87.705047][ T5816] ? __asan_memset+0x22/0x50 [ 87.705060][ T5816] ? lockdep_hardirqs_on+0x7b/0x110 [ 87.705085][ T5816] ? tomoyo_file_open+0x163/0x220 [ 87.705098][ T5816] security_file_open+0xa9/0x240 [ 87.705112][ T5816] do_dentry_open+0x4a0/0x1380 [ 87.705137][ T5816] vfs_open+0x3b/0x340 [ 87.705149][ T5816] ? path_openat+0x16a4/0x2090 [ 87.705162][ T5816] path_openat+0x16bf/0x2090 [ 87.705182][ T5816] do_file_open+0x23e/0x4a0 [ 87.705195][ T5816] ? __pfx_do_file_open+0x10/0x10 [ 87.705217][ T5816] ? _raw_spin_unlock+0x28/0x50 [ 87.705227][ T5816] ? alloc_fd+0x651/0x6c0 [ 87.705245][ T5816] do_sys_openat2+0x115/0x200 [ 87.705260][ T5816] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.705273][ T5816] ? exc_page_fault+0x6a/0xc0 [ 87.705286][ T5816] ? do_user_addr_fault+0xc4c/0x1340 [ 87.705298][ T5816] __x64_sys_openat+0x138/0x170 [ 87.705314][ T5816] do_syscall_64+0x166/0x520 [ 87.705325][ T5816] ? trace_irq_disable+0x3b/0x140 [ 87.705336][ T5816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.705346][ T5816] ? clear_bhb_loop+0x70/0xc0 [ 87.705358][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.705368][ T5816] RIP: 0033:0x7fd206b5ed8e [ 87.705378][ T5816] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 87.705386][ T5816] RSP: 002b:00007fd207a44ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.705398][ T5816] RAX: ffffffffffffffda RBX: 00007fd207a476c0 RCX: 00007fd206b5ed8e [ 87.705405][ T5816] RDX: 0000000000000002 RSI: 00007fd206c34e4a RDI: ffffffffffffff9c [ 87.705411][ T5816] RBP: 00007fd207a47090 R08: 0000000000000000 R09: 0000000000000000 [ 87.705417][ T5816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 87.705423][ T5816] R13: 0000200000000640 R14: 0000000000000000 R15: 00007fd206f4fa48 [ 87.705438][ T5816] [ 87.720917][ T5816] ERROR: Out of memory at tomoyo_realpath_from_path. [ 87.796317][ T5708] usb 1-1: selecting invalid altsetting 3 [ 87.796336][ T5708] ttusb2: set interface to alts=3 failed [ 88.067909][ T5687] powermate: unknown product id 0240 [ 88.067924][ T5687] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 88.068149][ T5687] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 88.128661][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.128726][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 88.150560][ T5687] usb 2-1: USB disconnect, device number 3 [ 88.251133][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.294614][ T5708] DVB: Unable to find symbol tda10086_attach() [ 88.294625][ T5708] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 88.302539][ T5708] dvb-usb: bulk message failed: -22 (4/0) [ 88.302559][ T5708] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 88.302679][ T5708] dvb-usb: bulk message failed: -22 (5/0) [ 88.302692][ T5708] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 88.302753][ T5708] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 88.401522][ T5708] usb 1-1: USB disconnect, device number 6 [ 88.438688][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 88.480448][ T9] usb 5-1: config 0 has no interfaces? [ 88.480474][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.499624][ T9] usb 5-1: config 0 descriptor?? [ 88.626899][ T5828] FAULT_INJECTION: forcing a failure. [ 88.626899][ T5828] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.626932][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz.2.37 Not tainted syzkaller #0 PREEMPT(full) [ 88.626950][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.626960][ T5828] Call Trace: [ 88.626966][ T5828] [ 88.626974][ T5828] dump_stack_lvl+0xe8/0x150 [ 88.627005][ T5828] should_fail_ex+0x410/0x560 [ 88.627036][ T5828] _copy_to_user+0x31/0xb0 [ 88.627055][ T5828] simple_read_from_buffer+0xe1/0x170 [ 88.627085][ T5828] proc_fail_nth_read+0x1bb/0x230 [ 88.627105][ T5828] ? common_file_perm+0x20e/0x2b0 [ 88.627135][ T5828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.627158][ T5828] ? rw_verify_area+0x24a/0x4c0 [ 88.627176][ T5828] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 88.627195][ T5828] vfs_read+0x213/0xa80 [ 88.627213][ T5828] ? __pfx___mutex_lock+0x10/0x10 [ 88.627233][ T5828] ? __pfx_vfs_read+0x10/0x10 [ 88.627251][ T5828] ? __fget_files+0x2a/0x420 [ 88.627268][ T5828] ? __fget_files+0x3a2/0x420 [ 88.627284][ T5828] ? __fget_files+0x2a/0x420 [ 88.627308][ T5828] ksys_read+0x150/0x270 [ 88.627327][ T5828] ? __pfx_ksys_read+0x10/0x10 [ 88.627356][ T5828] do_syscall_64+0x166/0x520 [ 88.627373][ T5828] ? trace_irq_disable+0x3b/0x140 [ 88.627392][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.627410][ T5828] ? clear_bhb_loop+0x70/0xc0 [ 88.627432][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.627449][ T5828] RIP: 0033:0x7f1a2c75ed8e [ 88.627466][ T5828] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.627480][ T5828] RSP: 002b:00007f1a2d6ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.627499][ T5828] RAX: ffffffffffffffda RBX: 00007f1a2d6de6c0 RCX: 00007f1a2c75ed8e [ 88.627512][ T5828] RDX: 000000000000000f RSI: 00007f1a2d6de0a0 RDI: 0000000000000004 [ 88.627523][ T5828] RBP: 00007f1a2d6de090 R08: 0000000000000000 R09: 0000000000000000 [ 88.627533][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.627544][ T5828] R13: 00007f1a2ca26038 R14: 00007f1a2ca25fa0 R15: 00007f1a2cb4fa48 [ 88.627574][ T5828] [ 88.632512][ T5708] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 88.997147][ T5832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38'. [ 88.997587][ T5832] FAULT_INJECTION: forcing a failure. [ 88.997587][ T5832] name failslab, interval 1, probability 0, space 0, times 0 [ 88.997614][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz.3.38 Not tainted syzkaller #0 PREEMPT(full) [ 88.997634][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.997644][ T5832] Call Trace: [ 88.997652][ T5832] [ 88.997660][ T5832] dump_stack_lvl+0xe8/0x150 [ 88.997690][ T5832] should_fail_ex+0x410/0x560 [ 88.997721][ T5832] ? __alloc_skb+0x1db/0x7a0 [ 88.997739][ T5832] should_failslab+0xa8/0x100 [ 88.997765][ T5832] ? __alloc_skb+0x1db/0x7a0 [ 88.997781][ T5832] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 88.997802][ T5832] ? __alloc_skb+0x18d/0x7a0 [ 88.997820][ T5832] ? __alloc_skb+0x1db/0x7a0 [ 88.997843][ T5832] __alloc_skb+0x1db/0x7a0 [ 88.997866][ T5832] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 88.997899][ T5832] rtmsg_ifinfo+0x8c/0x1a0 [ 88.997932][ T5832] __dev_notify_flags+0x257/0x510 [ 88.997959][ T5832] ? __pfx___dev_notify_flags+0x10/0x10 [ 88.997973][ T5832] ? __dev_change_flags+0x5f1/0x820 [ 88.997999][ T5832] ? __pfx___dev_change_flags+0x10/0x10 [ 88.998026][ T5832] ? lock_acquire+0x115/0x350 [ 88.998051][ T5832] netif_change_flags+0xde/0x1b0 [ 88.998075][ T5832] do_setlink+0xdd6/0x4670 [ 88.998100][ T5832] ? __flush_work+0xb05/0xca0 [ 88.998140][ T5832] ? __pfx___flush_work+0x10/0x10 [ 88.998167][ T5832] ? __pfx_do_setlink+0x10/0x10 [ 88.998191][ T5832] ? rcu_is_watching+0x16/0xb0 [ 88.998227][ T5832] ? enable_work+0x17f/0x230 [ 88.998244][ T5832] ? lockdep_hardirqs_on+0x7b/0x110 [ 88.998265][ T5832] ? enable_work+0x1fd/0x230 [ 88.998286][ T5832] ? __cancel_work_sync+0xf8/0x110 [ 88.998315][ T5832] ? bond_option_arp_interval_set+0x269/0x4a0 [ 88.998343][ T5832] ? __bond_opt_set+0x40e/0xd50 [ 88.998369][ T5832] ? bond_changelink+0x251c/0x2870 [ 88.998395][ T5832] ? __pfx_bond_changelink+0x10/0x10 [ 88.998412][ T5832] ? rtnl_newlink+0xc10/0x1c30 [ 88.998432][ T5832] ? __pfx___mutex_lock+0x10/0x10 [ 88.998464][ T5832] ? ns_capable+0x89/0xe0 [ 88.998489][ T5832] ? rtnl_nets_add+0x16c/0x300 [ 88.998507][ T5832] ? refcount_inc+0x46/0x70 [ 88.998535][ T5832] rtnl_newlink+0x15a3/0x1c30 [ 88.998566][ T5832] ? __pfx_rtnl_newlink+0x10/0x10 [ 88.998583][ T5832] ? do_syscall_64+0x166/0x520 [ 88.998603][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.998657][ T5832] ? kasan_quarantine_put+0xbb/0x1f0 [ 88.998679][ T5832] ? lockdep_hardirqs_on+0x7b/0x110 [ 88.998704][ T5832] ? nlmon_xmit+0xb0/0x100 [ 88.998728][ T5832] ? kmem_cache_free+0x182/0x650 [ 88.998761][ T5832] ? __lock_acquire+0x747/0x2de0 [ 88.998791][ T5832] ? __local_bh_enable_ip+0xd6/0x140 [ 88.998815][ T5832] ? lockdep_hardirqs_on+0x7b/0x110 [ 88.998841][ T5832] ? __dev_queue_xmit+0x29b/0x3920 [ 88.998862][ T5832] ? __local_bh_enable_ip+0xd6/0x140 [ 88.998898][ T5832] ? lock_acquire+0x115/0x350 [ 88.998933][ T5832] ? __pfx_rtnl_newlink+0x10/0x10 [ 88.998949][ T5832] rtnetlink_rcv_msg+0x802/0xc00 [ 88.998972][ T5832] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 88.998990][ T5832] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.999007][ T5832] ? ref_tracker_free+0x689/0x830 [ 88.999037][ T5832] ? __pfx_ref_tracker_free+0x10/0x10 [ 88.999064][ T5832] ? __asan_memcpy+0x40/0x70 [ 88.999082][ T5832] ? __skb_clone+0x5c/0x6c0 [ 88.999109][ T5832] netlink_rcv_skb+0x226/0x4a0 [ 88.999139][ T5832] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.999160][ T5832] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.999196][ T5832] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.999219][ T5832] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.999248][ T5832] netlink_unicast+0x8ef/0xa80 [ 88.999287][ T5832] netlink_sendmsg+0x813/0xb40 [ 88.999320][ T5832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.999352][ T5832] ? apparmor_socket_sendmsg+0x98/0x360 [ 88.999380][ T5832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.999403][ T5832] sock_sendmsg_nosec+0x13a/0x180 [ 88.999432][ T5832] ____sys_sendmsg+0x54e/0x850 [ 88.999457][ T5832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.999485][ T5832] ? import_iovec+0x73/0xa0 [ 88.999505][ T5832] ___sys_sendmsg+0x2a5/0x360 [ 88.999524][ T5832] ? __lock_acquire+0x747/0x2de0 [ 88.999548][ T5832] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.999605][ T5832] ? __fget_files+0x2a/0x420 [ 88.999622][ T5832] ? __fget_files+0x3a2/0x420 [ 88.999649][ T5832] __x64_sys_sendmsg+0x1b1/0x290 [ 88.999672][ T5832] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 88.999715][ T5832] do_syscall_64+0x166/0x520 [ 88.999736][ T5832] ? trace_irq_disable+0x3b/0x140 [ 88.999756][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.999774][ T5832] ? clear_bhb_loop+0x70/0xc0 [ 88.999798][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.999816][ T5832] RIP: 0033:0x7f60d719e559 [ 88.999834][ T5832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.999848][ T5832] RSP: 002b:00007f60d7fcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.999868][ T5832] RAX: ffffffffffffffda RBX: 00007f60d7425fa0 RCX: 00007f60d719e559 [ 88.999882][ T5832] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 88.999893][ T5832] RBP: 00007f60d7fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 88.999904][ T5832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.999915][ T5832] R13: 00007f60d7426038 R14: 00007f60d7425fa0 R15: 00007f60d754fa48 [ 88.999946][ T5832] [ 89.209744][ T29] usb 5-1: USB disconnect, device number 3 [ 89.215142][ T10] usb 4-1: USB disconnect, device number 2 [ 89.685947][ T5838] syzkaller1: entered promiscuous mode [ 89.685962][ T5838] syzkaller1: entered allmulticast mode [ 90.872910][ T5855] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.910818][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.063505][ T29] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 91.068422][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.068483][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.091327][ T29] usb 5-1: config 0 descriptor?? [ 91.127505][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 91.141698][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.272966][ T10] usb 2-1: device descriptor read/64, error -71 [ 91.466651][ T30] audit: type=1326 audit(1792420491.022:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.1.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b9e559 code=0x7ffc0000 [ 91.495547][ T30] audit: type=1326 audit(1792420491.042:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.1.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b9e559 code=0x7ffc0000 [ 91.498360][ T30] audit: type=1326 audit(1792420491.062:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.1.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff599b9e559 code=0x7ffc0000 [ 91.510892][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.609644][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 91.622969][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 91.624897][ T29] pwc: recv_control_msg error -32 req 02 val 2c00 [ 91.628599][ T29] pwc: recv_control_msg error -32 req 04 val 1000 [ 91.629249][ T29] pwc: recv_control_msg error -32 req 04 val 1300 [ 91.638763][ T29] pwc: recv_control_msg error -32 req 04 val 1400 [ 91.642319][ T5851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.671694][ T5851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.692924][ T29] pwc: recv_control_msg error -32 req 02 val 2000 [ 91.696875][ T29] pwc: recv_control_msg error -32 req 02 val 2100 [ 91.698687][ T5851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.708036][ T5851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.730980][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.873664][ T30] audit: type=1326 audit(1792420491.442:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.1.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b9e559 code=0x7ffc0000 [ 91.874606][ T30] audit: type=1326 audit(1792420491.442:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.1.47" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b9e559 code=0x7ffc0000 [ 91.895933][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 91.907963][ T9] usb 4-1: config 0 has no interfaces? [ 91.907989][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.920545][ T9] usb 4-1: config 0 descriptor?? [ 91.958627][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 92.026332][ T5878] gretap0: entered promiscuous mode [ 92.036950][ T5878] macsec1: entered promiscuous mode [ 92.037180][ T5878] macsec1: entered allmulticast mode [ 92.037195][ T5878] gretap0: entered allmulticast mode [ 92.082996][ T5878] gretap0: left allmulticast mode [ 92.083164][ T5878] gretap0: left promiscuous mode [ 92.169390][ T5870] FAULT_INJECTION: forcing a failure. [ 92.169390][ T5870] name failslab, interval 1, probability 0, space 0, times 0 [ 92.169420][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: syz.3.52 Not tainted syzkaller #0 PREEMPT(full) [ 92.169440][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.169457][ T5870] Call Trace: [ 92.169467][ T5870] [ 92.169475][ T5870] dump_stack_lvl+0xe8/0x150 [ 92.169504][ T5870] should_fail_ex+0x410/0x560 [ 92.169535][ T5870] should_failslab+0xa8/0x100 [ 92.169563][ T5870] __kmalloc_cache_noprof+0xa3/0x600 [ 92.169583][ T5870] ? do_vfs_ioctl+0x116f/0x1530 [ 92.169606][ T5870] ? kvm_vcpu_ioctl+0x40e/0xfd0 [ 92.169625][ T5870] ? kvm_vcpu_ioctl+0x40e/0xfd0 [ 92.169651][ T5870] kvm_vcpu_ioctl+0x40e/0xfd0 [ 92.169677][ T5870] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 92.169696][ T5870] ? hook_file_ioctl+0x1f2/0x600 [ 92.169741][ T5870] ? __fget_files+0x2a/0x420 [ 92.169761][ T5870] ? __fget_files+0x2a/0x420 [ 92.169776][ T5870] ? __fget_files+0x3a2/0x420 [ 92.169791][ T5870] ? __fget_files+0x2a/0x420 [ 92.169810][ T5870] ? bpf_lsm_file_ioctl+0x9/0x20 [ 92.169829][ T5870] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 92.169848][ T5870] __se_sys_ioctl+0xfc/0x170 [ 92.169872][ T5870] do_syscall_64+0x166/0x520 [ 92.169894][ T5870] ? trace_irq_disable+0x3b/0x140 [ 92.169913][ T5870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.169932][ T5870] ? clear_bhb_loop+0x70/0xc0 [ 92.169954][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.169972][ T5870] RIP: 0033:0x7f60d719e1eb [ 92.169989][ T5870] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 92.170004][ T5870] RSP: 002b:00007f60d7fca450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.170024][ T5870] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007f60d719e1eb [ 92.170037][ T5870] RDX: 00007f60d7fcaa90 RSI: 000000008138ae83 RDI: 0000000000000009 [ 92.170049][ T5870] RBP: ffffffffffffffff R08: 0aaaaaaaaaaaac8f R09: 0000000000000044 [ 92.170061][ T5870] R10: ffffffffffffffff R11: 0000000000000246 R12: 00000000fec00000 [ 92.170073][ T5870] R13: 00007f60d7fcabd0 R14: 0000200000018000 R15: 0000000000000018 [ 92.170103][ T5870] [ 92.438043][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 92.438555][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 92.439081][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 92.456692][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 92.470040][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 92.477305][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 92.478894][ T5687] usb 4-1: USB disconnect, device number 3 [ 92.511924][ T29] pwc: Registered as video103. [ 92.515307][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 92.519099][ T29] usb 5-1: USB disconnect, device number 4 [ 93.242538][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 93.403460][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 93.404772][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.404794][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 93.404839][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.416941][ T10] usb 2-1: config 0 descriptor?? [ 93.453707][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 93.453765][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 93.485775][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 93.488778][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 93.488812][ T10] usb 2-1: media controller created [ 93.499059][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.530542][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 93.530621][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 93.560619][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 93.581666][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 93.581691][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 93.742684][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 93.742720][ T10] dvb-usb: error while querying for an remote control event. [ 93.744730][ T5695] usb 2-1: USB disconnect, device number 6 [ 93.815665][ T5906] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 93.919309][ T5695] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 94.051299][ T5917] input: syz1 as /devices/virtual/input/input8 [ 94.224087][ T5919] FAULT_INJECTION: forcing a failure. [ 94.224087][ T5919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.224117][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: syz.4.65 Not tainted syzkaller #0 PREEMPT(full) [ 94.224136][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.224147][ T5919] Call Trace: [ 94.224154][ T5919] [ 94.224162][ T5919] dump_stack_lvl+0xe8/0x150 [ 94.224194][ T5919] should_fail_ex+0x410/0x560 [ 94.224225][ T5919] _copy_from_user+0x2d/0xb0 [ 94.224243][ T5919] dev_ethtool+0xdb/0x29e0 [ 94.224269][ T5919] ? __lock_acquire+0x747/0x2de0 [ 94.224303][ T5919] ? __pfx_dev_ethtool+0x10/0x10 [ 94.224330][ T5919] ? kasan_quarantine_put+0xbb/0x1f0 [ 94.224356][ T5919] ? lock_acquire+0x115/0x350 [ 94.224384][ T5919] ? dev_load+0x21/0x1f0 [ 94.224404][ T5919] ? dev_load+0x21/0x1f0 [ 94.224423][ T5919] dev_ioctl+0x392/0x1150 [ 94.224444][ T5919] sock_do_ioctl+0x23e/0x320 [ 94.224471][ T5919] ? __pfx_sock_do_ioctl+0x10/0x10 [ 94.224493][ T5919] ? hook_file_ioctl+0x1f2/0x600 [ 94.224533][ T5919] sock_ioctl+0x57a/0x7e0 [ 94.224558][ T5919] ? __pfx_sock_ioctl+0x10/0x10 [ 94.224582][ T5919] ? __fget_files+0x2a/0x420 [ 94.224598][ T5919] ? __fget_files+0x3a2/0x420 [ 94.224613][ T5919] ? __fget_files+0x2a/0x420 [ 94.224632][ T5919] ? bpf_lsm_file_ioctl+0x9/0x20 [ 94.224650][ T5919] ? __pfx_sock_ioctl+0x10/0x10 [ 94.224673][ T5919] __se_sys_ioctl+0xfc/0x170 [ 94.224698][ T5919] do_syscall_64+0x166/0x520 [ 94.224719][ T5919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.224746][ T5919] ? clear_bhb_loop+0x70/0xc0 [ 94.224768][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.224787][ T5919] RIP: 0033:0x7fd206b9e559 [ 94.224804][ T5919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.224818][ T5919] RSP: 002b:00007fd207a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.224837][ T5919] RAX: ffffffffffffffda RBX: 00007fd206e25fa0 RCX: 00007fd206b9e559 [ 94.224850][ T5919] RDX: 0000200000000580 RSI: 0000000000008946 RDI: 0000000000000003 [ 94.224862][ T5919] RBP: 00007fd207a47090 R08: 0000000000000000 R09: 0000000000000000 [ 94.224872][ T5919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.224883][ T5919] R13: 00007fd206e26038 R14: 00007fd206e25fa0 R15: 00007fd206f4fa48 [ 94.224911][ T5919] [ 94.823068][ T30] audit: type=1326 audit(1792420494.392:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.3.70" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60d719e559 code=0x0 [ 94.850711][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.948141][ T30] audit: type=1326 audit(1792420494.512:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.3.70" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 94.954069][ T30] audit: type=1326 audit(1792420494.512:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.3.70" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 94.959670][ T30] audit: type=1326 audit(1792420494.522:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.3.70" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 94.959720][ T30] audit: type=1326 audit(1792420494.522:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.3.70" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 95.011719][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 95.013173][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.013234][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.019923][ T10] usb 3-1: config 0 descriptor?? [ 95.057371][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 95.340894][ T5695] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 95.471461][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 95.476263][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 95.481263][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 95.482020][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 95.482676][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 95.484939][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 95.487490][ T5611] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.489485][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.489959][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.496410][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 95.497053][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 95.498362][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.505001][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.603416][ T5695] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 95.604451][ T5695] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 95.604497][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.604520][ T5695] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.604543][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.604565][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.605528][ T5695] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 95.605569][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.605593][ T5695] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.605615][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.605637][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.606668][ T5695] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 95.606708][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 95.606732][ T5695] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.606753][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.606775][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 95.692199][ T5695] usb 1-1: string descriptor 0 read error: -22 [ 95.692339][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.716551][ T5611] usb 5-1: device descriptor read/64, error -71 [ 95.833632][ T5695] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 95.951413][ T5611] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.050843][ T5943] Zero length message leads to an empty skb [ 96.100896][ T5611] usb 5-1: device descriptor read/64, error -71 [ 96.132099][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 96.132725][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 96.133155][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 96.135447][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 96.139334][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 96.151285][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 96.201688][ T10] pwc: Registered as video103. [ 96.212767][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 96.215799][ T5611] usb usb5-port1: attempt power cycle [ 96.273244][ T10] usb 3-1: USB disconnect, device number 2 [ 96.461031][ T5695] usb 1-1: USB disconnect, device number 7 [ 96.571721][ T5611] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.592513][ T5611] usb 5-1: device descriptor read/8, error -71 [ 96.841106][ T5611] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 96.872661][ T5611] usb 5-1: device descriptor read/8, error -71 [ 96.968073][ T5959] process 'syz.2.77' launched '/dev/fd/6' with NULL argv: empty string added [ 96.981905][ T5611] usb usb5-port1: unable to enumerate USB device [ 97.330852][ T5611] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 97.453634][ T5968] FAULT_INJECTION: forcing a failure. [ 97.453634][ T5968] name failslab, interval 1, probability 0, space 0, times 0 [ 97.453659][ T5968] CPU: 0 UID: 0 PID: 5968 Comm: syz.3.80 Not tainted syzkaller #0 PREEMPT(full) [ 97.453671][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.453677][ T5968] Call Trace: [ 97.453681][ T5968] [ 97.453686][ T5968] dump_stack_lvl+0xe8/0x150 [ 97.453706][ T5968] should_fail_ex+0x410/0x560 [ 97.453723][ T5968] should_failslab+0xa8/0x100 [ 97.453738][ T5968] ? skb_clone+0x212/0x3a0 [ 97.453750][ T5968] kmem_cache_alloc_noprof+0xa1/0x600 [ 97.453763][ T5968] ? skb_clone+0x212/0x3a0 [ 97.453777][ T5968] skb_clone+0x212/0x3a0 [ 97.453790][ T5968] __netlink_deliver_tap+0x413/0x860 [ 97.453809][ T5968] ? netlink_deliver_tap+0x2e/0x1b0 [ 97.453821][ T5968] netlink_deliver_tap+0x19c/0x1b0 [ 97.453834][ T5968] netlink_unicast+0x8c1/0xa80 [ 97.453854][ T5968] netlink_sendmsg+0x813/0xb40 [ 97.453871][ T5968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.453887][ T5968] ? apparmor_socket_sendmsg+0x98/0x360 [ 97.453903][ T5968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.453914][ T5968] sock_sendmsg_nosec+0x13a/0x180 [ 97.453936][ T5968] ____sys_sendmsg+0x54e/0x850 [ 97.453950][ T5968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.453968][ T5968] ? import_iovec+0x73/0xa0 [ 97.453979][ T5968] ___sys_sendmsg+0x2a5/0x360 [ 97.453990][ T5968] ? __lock_acquire+0x747/0x2de0 [ 97.454003][ T5968] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.454032][ T5968] ? __fget_files+0x2a/0x420 [ 97.454041][ T5968] ? __fget_files+0x3a2/0x420 [ 97.454055][ T5968] __x64_sys_sendmsg+0x1b1/0x290 [ 97.454067][ T5968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 97.454088][ T5968] do_syscall_64+0x166/0x520 [ 97.454100][ T5968] ? trace_irq_disable+0x3b/0x140 [ 97.454110][ T5968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.454120][ T5968] ? clear_bhb_loop+0x70/0xc0 [ 97.454132][ T5968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.454142][ T5968] RIP: 0033:0x7f60d719e559 [ 97.454152][ T5968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.454160][ T5968] RSP: 002b:00007f60d7fcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.454171][ T5968] RAX: ffffffffffffffda RBX: 00007f60d7425fa0 RCX: 00007f60d719e559 [ 97.454178][ T5968] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000003 [ 97.454184][ T5968] RBP: 00007f60d7fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 97.454190][ T5968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.454195][ T5968] R13: 00007f60d7426038 R14: 00007f60d7425fa0 R15: 00007f60d754fa48 [ 97.454211][ T5968] [ 97.511152][ T5611] usb 1-1: Using ep0 maxpacket: 8 [ 97.518167][ T5611] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 97.595884][ T5611] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 97.595903][ T5611] usb 1-1: config 0 has no interface number 1 [ 97.595933][ T5611] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.595943][ T5611] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 97.595955][ T5611] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 97.595967][ T5611] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 97.595978][ T5611] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.595997][ T5611] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 97.596008][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 97.596018][ T5611] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 97.646820][ T5611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.646845][ T5611] usb 1-1: Product: syz [ 97.646858][ T5611] usb 1-1: Manufacturer: syz [ 97.646871][ T5611] usb 1-1: SerialNumber: syz [ 97.652359][ T987] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 97.801734][ T5611] usb 1-1: config 0 descriptor?? [ 97.802668][ T5962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.806354][ T5611] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.810552][ T5611] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.910850][ T987] usb 2-1: Using ep0 maxpacket: 16 [ 97.912805][ T987] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=1d.90 [ 97.923116][ T987] usb 2-1: config 5 has an invalid interface number: 142 but max is 0 [ 97.923140][ T987] usb 2-1: config 5 has no interface number 0 [ 97.923178][ T987] usb 2-1: config 5 interface 142 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 64 [ 97.923198][ T987] usb 2-1: config 5 interface 142 has no altsetting 0 [ 97.971317][ T987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.971342][ T987] usb 2-1: Product: syz [ 97.971373][ T987] usb 2-1: Manufacturer: syz [ 97.971386][ T987] usb 2-1: SerialNumber: syz [ 97.988656][ T5956] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.087139][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.093405][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.113011][ T5611] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 98.279798][ T5956] netlink: 'syz.1.76': attribute type 5 has an invalid length. [ 98.318528][ T5956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.332726][ T5956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.393866][ T987] aircable 2-1:5.142: aircable converter detected [ 98.504886][ T987] usb 2-1: aircable converter now attached to ttyUSB0 [ 98.563774][ T987] usb 2-1: USB disconnect, device number 7 [ 98.617199][ T987] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 98.618050][ T987] aircable 2-1:5.142: device disconnected [ 98.648010][ T5708] usb 1-1: USB disconnect, device number 8 [ 99.481284][ T5708] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.520954][ T5611] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 99.641736][ T5708] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 99.643071][ T5708] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.643118][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.661072][ T5708] usb 3-1: config 0 descriptor?? [ 99.670852][ T5611] usb 2-1: Using ep0 maxpacket: 32 [ 99.671589][ T5611] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 99.673431][ T5611] usb 2-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 99.673461][ T5611] usb 2-1: config 0 interface 0 altsetting 14 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 99.673482][ T5611] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.673512][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.676386][ T5611] usb 2-1: config 0 descriptor?? [ 99.725859][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 99.747485][ T5687] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.765504][ T5708] pwc: Askey VC010 type 2 USB webcam detected. [ 99.784660][ T6003] veth3: entered allmulticast mode [ 99.915304][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.915446][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 99.917287][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 99.920693][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.961373][ T5687] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 99.962017][ T10] usb 1-1: Product: syz [ 99.962719][ T10] usb 1-1: Manufacturer: syz [ 99.962734][ T10] usb 1-1: SerialNumber: syz [ 99.963066][ T5687] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.963107][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 99.963129][ T5687] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.967408][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.967430][ T5687] usb 4-1: Product: syz [ 99.967442][ T5687] usb 4-1: Manufacturer: syz [ 99.967455][ T5687] usb 4-1: SerialNumber: syz [ 100.046410][ T5687] usb 4-1: config 0 descriptor?? [ 100.052325][ T5687] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 100.059724][ T5687] usb 4-1: Detected SIO [ 100.059745][ T5687] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 100.066080][ T5687] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 100.088489][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.097286][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.107909][ T5611] usb 2-1: string descriptor 0 read error: -71 [ 100.127181][ T5611] usbhid 2-1:0.0: can't add hid device: -71 [ 100.127288][ T5611] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 100.146614][ T5611] usb 2-1: USB disconnect, device number 8 [ 100.156946][ T987] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 100.180562][ T5708] pwc: recv_control_msg error -32 req 02 val 2b00 [ 100.189871][ T5708] pwc: recv_control_msg error -32 req 02 val 2700 [ 100.190625][ T5708] pwc: recv_control_msg error -32 req 02 val 2c00 [ 100.203025][ T5708] pwc: recv_control_msg error -32 req 04 val 1000 [ 100.203848][ T5708] pwc: recv_control_msg error -32 req 04 val 1300 [ 100.204475][ T5708] pwc: recv_control_msg error -32 req 04 val 1400 [ 100.206489][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.211650][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.217998][ T5708] pwc: recv_control_msg error -32 req 02 val 2000 [ 100.218759][ T5708] pwc: recv_control_msg error -32 req 02 val 2100 [ 100.222059][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.224683][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.352996][ T987] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 100.357419][ T987] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 100.357446][ T987] usb 5-1: config 0 has no interface number 0 [ 100.357483][ T987] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.357502][ T987] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 100.357525][ T987] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 100.357563][ T987] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 100.357585][ T987] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 100.357607][ T987] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 100.357645][ T987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.361881][ T987] usb 5-1: config 0 descriptor?? [ 100.384732][ T6005] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 100.384952][ T6005] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 100.433459][ T987] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 100.439003][ T987] usb 4-1: USB disconnect, device number 4 [ 100.452509][ T987] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 100.452985][ T987] ftdi_sio 4-1:0.0: device disconnected [ 100.725540][ T5708] pwc: recv_control_msg error -71 req 02 val 2400 [ 100.728975][ T5708] pwc: recv_control_msg error -71 req 02 val 2600 [ 100.730340][ T5708] pwc: recv_control_msg error -71 req 02 val 2900 [ 100.730650][ T5708] pwc: recv_control_msg error -71 req 02 val 2800 [ 100.751553][ T5708] pwc: recv_control_msg error -71 req 04 val 1100 [ 100.767246][ T5708] pwc: recv_control_msg error -71 req 04 val 1200 [ 100.770515][ T5708] pwc: Registered as video103. [ 100.783973][ T5708] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 100.815877][ T5708] usb 3-1: USB disconnect, device number 3 [ 101.067609][ T6016] FAULT_INJECTION: forcing a failure. [ 101.067609][ T6016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.067641][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.1.95 Not tainted syzkaller #0 PREEMPT(full) [ 101.067662][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.067672][ T6016] Call Trace: [ 101.067679][ T6016] [ 101.067687][ T6016] dump_stack_lvl+0xe8/0x150 [ 101.067720][ T6016] should_fail_ex+0x410/0x560 [ 101.067750][ T6016] _copy_from_user+0x2d/0xb0 [ 101.067770][ T6016] ___sys_sendmsg+0x1c6/0x360 [ 101.067791][ T6016] ? __lock_acquire+0x747/0x2de0 [ 101.067816][ T6016] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.067870][ T6016] ? __fget_files+0x2a/0x420 [ 101.067887][ T6016] ? __fget_files+0x3a2/0x420 [ 101.067913][ T6016] __x64_sys_sendmsg+0x1b1/0x290 [ 101.067937][ T6016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 101.067978][ T6016] do_syscall_64+0x166/0x520 [ 101.068003][ T6016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.068021][ T6016] ? clear_bhb_loop+0x70/0xc0 [ 101.068044][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.068062][ T6016] RIP: 0033:0x7ff599b9e559 [ 101.068079][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.068093][ T6016] RSP: 002b:00007ff59a990028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.068113][ T6016] RAX: ffffffffffffffda RBX: 00007ff599e25fa0 RCX: 00007ff599b9e559 [ 101.068126][ T6016] RDX: 0000000000000854 RSI: 0000200000000240 RDI: 0000000000000005 [ 101.068137][ T6016] RBP: 00007ff59a990090 R08: 0000000000000000 R09: 0000000000000000 [ 101.068148][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.068158][ T6016] R13: 00007ff599e26038 R14: 00007ff599e25fa0 R15: 00007ff599f4fa48 [ 101.068188][ T6016] [ 101.269448][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 101.278043][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 101.392609][ T10] usb 1-1: USB disconnect, device number 9 [ 101.404501][ T6023] FAULT_INJECTION: forcing a failure. [ 101.404501][ T6023] name failslab, interval 1, probability 0, space 0, times 0 [ 101.404533][ T6023] CPU: 1 UID: 0 PID: 6023 Comm: syz.1.97 Not tainted syzkaller #0 PREEMPT(full) [ 101.404551][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.404562][ T6023] Call Trace: [ 101.404569][ T6023] [ 101.404576][ T6023] dump_stack_lvl+0xe8/0x150 [ 101.404607][ T6023] should_fail_ex+0x410/0x560 [ 101.404637][ T6023] should_failslab+0xa8/0x100 [ 101.404661][ T6023] ? do_getname+0x2e/0x250 [ 101.404686][ T6023] kmem_cache_alloc_noprof+0xa1/0x600 [ 101.404707][ T6023] ? do_getname+0x2e/0x250 [ 101.404735][ T6023] do_getname+0x2e/0x250 [ 101.404756][ T6023] ? getname_flags+0x11/0x20 [ 101.404781][ T6023] do_sys_openat2+0xcc/0x200 [ 101.404808][ T6023] ? __pfx_do_sys_openat2+0x10/0x10 [ 101.404833][ T6023] ? ksys_write+0x242/0x270 [ 101.404853][ T6023] ? __pfx_ksys_write+0x10/0x10 [ 101.404874][ T6023] __x64_sys_openat+0x138/0x170 [ 101.404903][ T6023] do_syscall_64+0x166/0x520 [ 101.404924][ T6023] ? trace_irq_disable+0x3b/0x140 [ 101.404943][ T6023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.404960][ T6023] ? clear_bhb_loop+0x70/0xc0 [ 101.404981][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.404999][ T6023] RIP: 0033:0x7ff599b9e559 [ 101.405015][ T6023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.405028][ T6023] RSP: 002b:00007ff597df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.405050][ T6023] RAX: ffffffffffffffda RBX: 00007ff599e26090 RCX: 00007ff599b9e559 [ 101.405063][ T6023] RDX: 0000000000000400 RSI: 0000200000000480 RDI: ffffffffffffff9c [ 101.405074][ T6023] RBP: 00007ff597df6090 R08: 0000000000000000 R09: 0000000000000000 [ 101.405085][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.405095][ T6023] R13: 00007ff599e26128 R14: 00007ff599e26090 R15: 00007ff599f4fa48 [ 101.405122][ T6023] [ 101.643394][ T6031] fuse: Bad value for 'fd' [ 101.682736][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.951377][ T10] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 102.081270][ T10] usb 1-1: device descriptor read/64, error -71 [ 102.321063][ T10] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 102.451925][ T10] usb 1-1: device descriptor read/64, error -71 [ 102.563508][ T10] usb usb1-port1: attempt power cycle [ 102.898462][ T5687] usb 5-1: USB disconnect, device number 9 [ 102.907619][ T10] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 102.924693][ T10] usb 1-1: device descriptor read/8, error -71 [ 102.928959][ T5687] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 102.968169][ T6040] veth5: entered allmulticast mode [ 103.145210][ T6042] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 103.161203][ T10] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 103.181509][ T10] usb 1-1: device descriptor read/8, error -71 [ 103.292750][ T10] usb usb1-port1: unable to enumerate USB device [ 103.700847][ T6028] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 103.711171][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.712976][ T6028] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 104.300110][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.110'. [ 104.340563][ T6028] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 104.367753][ T6028] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.367847][ T6028] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.392628][ T6028] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.396309][ T6028] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.396571][ T6028] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.400049][ T6028] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.428676][ T6028] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.428756][ T6028] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.440234][ T6028] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.455525][ T6028] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.455789][ T6028] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 104.488243][ T6028] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 104.635796][ T6072] FAULT_INJECTION: forcing a failure. [ 104.635796][ T6072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.635829][ T6072] CPU: 1 UID: 0 PID: 6072 Comm: syz.2.113 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.635852][ T6072] Tainted: [L]=SOFTLOCKUP [ 104.635858][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.635867][ T6072] Call Trace: [ 104.635874][ T6072] [ 104.635882][ T6072] dump_stack_lvl+0xe8/0x150 [ 104.635913][ T6072] should_fail_ex+0x410/0x560 [ 104.635951][ T6072] _copy_from_user+0x2d/0xb0 [ 104.635969][ T6072] kstrtouint_from_user+0xd6/0x180 [ 104.635995][ T6072] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 104.636028][ T6072] ? lock_acquire+0x115/0x350 [ 104.636054][ T6072] proc_fail_nth_write+0x8e/0x210 [ 104.636074][ T6072] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.636101][ T6072] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 104.636121][ T6072] vfs_write+0x296/0xba0 [ 104.636147][ T6072] ? __pfx_vfs_write+0x10/0x10 [ 104.636168][ T6072] ? __fget_files+0x2a/0x420 [ 104.636187][ T6072] ? __fget_files+0x3a2/0x420 [ 104.636202][ T6072] ? __fget_files+0x2a/0x420 [ 104.636226][ T6072] ksys_write+0x150/0x270 [ 104.636246][ T6072] ? __pfx_ksys_write+0x10/0x10 [ 104.636273][ T6072] do_syscall_64+0x166/0x520 [ 104.636293][ T6072] ? trace_irq_disable+0x3b/0x140 [ 104.636312][ T6072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.636331][ T6072] ? clear_bhb_loop+0x70/0xc0 [ 104.636353][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.636371][ T6072] RIP: 0033:0x7f1a2c75ed8e [ 104.636388][ T6072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.636402][ T6072] RSP: 002b:00007f1a2d6ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 104.636419][ T6072] RAX: ffffffffffffffda RBX: 00007f1a2d6de6c0 RCX: 00007f1a2c75ed8e [ 104.636431][ T6072] RDX: 0000000000000001 RSI: 00007f1a2d6de0a0 RDI: 0000000000000004 [ 104.636443][ T6072] RBP: 00007f1a2d6de090 R08: 0000000000000000 R09: 0000000000000000 [ 104.636454][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.636465][ T6072] R13: 00007f1a2ca26038 R14: 00007f1a2ca25fa0 R15: 00007f1a2cb4fa48 [ 104.636496][ T6072] [ 104.720163][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.721198][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.822344][ T5611] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 104.840362][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 104.960437][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.967448][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.994596][ T5611] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 104.997847][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.018751][ T29] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 105.031797][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.031852][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.038325][ T29] usb 5-1: config 0 descriptor?? [ 105.064957][ T5611] usb 2-1: config 0 descriptor?? [ 105.094544][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 105.094985][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 105.202215][ T1119] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.202273][ T1119] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.202303][ T1119] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.202349][ T1119] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.241107][ T9] usb 3-1: device descriptor read/64, error -71 [ 105.279325][ T5611] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 105.318273][ T6086] netlink: 9 bytes leftover after parsing attributes in process `syz.3.116'. [ 105.318538][ T6086] 0: renamed from hsr0 [ 105.345173][ T6086] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.345209][ T6086] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.345287][ T6086] 0: entered allmulticast mode [ 105.345295][ T6086] hsr_slave_0: entered allmulticast mode [ 105.345304][ T6086] hsr_slave_1: entered allmulticast mode [ 105.346527][ T6086] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 105.432096][ T6083] x_tables: duplicate underflow at hook 3 [ 105.482169][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 105.522673][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 105.537838][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 105.548520][ T29] pwc: recv_control_msg error -32 req 02 val 2c00 [ 105.549952][ T29] pwc: recv_control_msg error -32 req 04 val 1000 [ 105.571347][ T29] pwc: recv_control_msg error -32 req 04 val 1300 [ 105.573502][ T5611] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 105.573526][ T5611] [drm] Initialized udl on minor 1 [ 105.576273][ T29] pwc: recv_control_msg error -32 req 04 val 1400 [ 105.578567][ T6060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.578950][ T6060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.595420][ T29] pwc: recv_control_msg error -32 req 02 val 2000 [ 105.615572][ T6060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.616675][ T29] pwc: recv_control_msg error -32 req 02 val 2100 [ 105.621053][ T9] usb 3-1: device descriptor read/64, error -71 [ 105.653947][ T6060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.656690][ T6089] fuse: Unknown parameter 'g' [ 105.727205][ T9] usb usb3-port1: attempt power cycle [ 105.780930][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.064158][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 106.082468][ T9] usb 3-1: device descriptor read/8, error -71 [ 106.136824][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 106.140829][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 106.154259][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 106.154768][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 106.155609][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 106.156147][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 106.174248][ T29] pwc: Registered as video103. [ 106.200321][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 106.228030][ T29] usb 5-1: USB disconnect, device number 10 [ 106.341849][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 106.374261][ T9] usb 3-1: device descriptor read/8, error -71 [ 106.420850][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.420887][ T4931] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.481360][ T9] usb usb3-port1: unable to enumerate USB device [ 106.502130][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.503429][ T4931] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.541520][ T5708] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 106.694384][ T5708] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 106.700927][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.120843][ T5687] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 107.271738][ T5687] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 107.273609][ T5687] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.274536][ T5687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.291599][ T5687] usb 5-1: config 0 descriptor?? [ 107.344421][ T5687] pwc: Askey VC010 type 2 USB webcam detected. [ 107.508175][ T5687] pwc: send_video_command error -71 [ 107.508212][ T5687] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 107.508308][ T5687] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 107.526982][ T5687] usb 5-1: USB disconnect, device number 11 [ 107.861082][ T4931] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.861147][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 108.013483][ T5687] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 108.015008][ T9] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 108.016509][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.019176][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.019190][ T9] usb 4-1: Product: syz [ 108.019200][ T9] usb 4-1: Manufacturer: syz [ 108.019213][ T9] usb 4-1: SerialNumber: syz [ 108.030225][ T9] usb 4-1: config 0 descriptor?? [ 108.086508][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 108.161917][ T5687] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 108.163448][ T5687] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.163505][ T5687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.203207][ T5687] usb 5-1: config 0 descriptor?? [ 108.245252][ T5687] pwc: Askey VC010 type 2 USB webcam detected. [ 108.500859][ T4931] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.500897][ T4931] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.562937][ T6118] openvswitch: netlink: Tunnel attr 1807 out of range max 16 [ 108.581690][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 108.581729][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.616842][ T5687] pwc: recv_control_msg error -32 req 02 val 2b00 [ 108.822332][ T5708] cxacru_cm: 303 callbacks suppressed [ 108.822357][ T5708] cxacru 1-1:1.0: send of cm 0x90 failed (-104) [ 108.864883][ T6122] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 108.864906][ T6122] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 108.957978][ T9] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 108.958071][ T9] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 109.014518][ T9] usb 4-1: USB disconnect, device number 5 [ 109.085303][ T24] usb 1-1: USB disconnect, device number 14 [ 109.479490][ T5687] pwc: recv_control_msg error -71 req 02 val 2c00 [ 109.489319][ T5687] pwc: recv_control_msg error -71 req 04 val 1000 [ 109.515894][ T5687] pwc: recv_control_msg error -71 req 04 val 1300 [ 109.518663][ T5687] pwc: recv_control_msg error -71 req 04 val 1400 [ 109.522009][ T5687] pwc: recv_control_msg error -71 req 02 val 2000 [ 109.522492][ T5687] pwc: recv_control_msg error -71 req 02 val 2100 [ 109.523380][ T5687] pwc: recv_control_msg error -71 req 04 val 1500 [ 109.524024][ T5687] pwc: recv_control_msg error -71 req 02 val 2500 [ 109.525968][ T5687] pwc: recv_control_msg error -71 req 02 val 2400 [ 109.527860][ T5687] pwc: recv_control_msg error -71 req 02 val 2600 [ 109.529875][ T5687] pwc: recv_control_msg error -71 req 02 val 2900 [ 109.531252][ T5687] pwc: recv_control_msg error -71 req 02 val 2800 [ 109.535060][ T5687] pwc: recv_control_msg error -71 req 04 val 1100 [ 109.536124][ T5687] pwc: recv_control_msg error -71 req 04 val 1200 [ 109.555482][ T5687] pwc: Registered as video103. [ 109.569211][ T5687] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 109.639751][ T5687] usb 5-1: USB disconnect, device number 12 [ 109.740757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.041322][ T6131] x_tables: duplicate underflow at hook 3 [ 110.271291][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.381047][ T5687] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.443679][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 110.444403][ T29] usb 4-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 110.445758][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.451983][ T29] usb 4-1: config 0 descriptor?? [ 110.490897][ T29] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 110.532702][ T5687] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 110.533745][ T5687] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.533777][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.542923][ T5687] usb 3-1: config 0 descriptor?? [ 110.552585][ T5687] pwc: Askey VC010 type 2 USB webcam detected. [ 110.586171][ T4931] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.586213][ T4931] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.605910][ T5611] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 110.626715][ T5611] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 110.661750][ T4931] Bluetooth: hci4: command 0x0c1a tx timeout [ 110.661801][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.664618][ T5611] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 110.668984][ T5611] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 110.669353][ T5611] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 110.672189][ T9] usb 2-1: USB disconnect, device number 9 [ 110.729130][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 110.796867][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.813814][ T29] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 110.813868][ T29] usb 4-1: media controller created [ 110.844810][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.913074][ T29] DVB: Unable to find symbol lgdt330x_attach() [ 110.913090][ T29] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 110.913893][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 110.913909][ T29] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 111.152004][ T5708] usb 4-1: USB disconnect, device number 6 [ 111.214612][ T5687] pwc: recv_control_msg error -32 req 02 val 2b00 [ 111.239777][ T5687] pwc: recv_control_msg error -32 req 02 val 2700 [ 111.252907][ T5687] pwc: recv_control_msg error -32 req 02 val 2c00 [ 111.260101][ T5687] pwc: recv_control_msg error -32 req 04 val 1000 [ 111.276852][ T5687] pwc: recv_control_msg error -32 req 04 val 1300 [ 111.288387][ T5708] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 111.290919][ T5687] pwc: recv_control_msg error -32 req 04 val 1400 [ 111.294852][ T6139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.295331][ T6139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.300965][ T5687] pwc: recv_control_msg error -32 req 02 val 2000 [ 111.339154][ T5687] pwc: recv_control_msg error -32 req 02 val 2100 [ 111.351896][ T6139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.352203][ T6139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.640901][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 111.802757][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 111.803378][ T9] usb 2-1: config 0 has no interfaces? [ 111.803409][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.812784][ T9] usb 2-1: config 0 descriptor?? [ 111.898770][ T5687] pwc: recv_control_msg error -71 req 02 val 2400 [ 111.900981][ T5687] pwc: recv_control_msg error -71 req 02 val 2600 [ 111.901416][ T5687] pwc: recv_control_msg error -71 req 02 val 2900 [ 111.902883][ T5687] pwc: recv_control_msg error -71 req 02 val 2800 [ 111.906795][ T5687] pwc: recv_control_msg error -71 req 04 val 1100 [ 111.912733][ T5687] pwc: recv_control_msg error -71 req 04 val 1200 [ 111.924335][ T5687] pwc: Registered as video103. [ 111.959220][ T5687] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 111.975274][ T5687] usb 3-1: USB disconnect, device number 8 [ 112.123297][ T29] usb 2-1: USB disconnect, device number 10 [ 112.400827][ T987] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.528443][ T6180] FAULT_INJECTION: forcing a failure. [ 112.528443][ T6180] name failslab, interval 1, probability 0, space 0, times 0 [ 112.528485][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: syz.2.141 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.528510][ T6180] Tainted: [L]=SOFTLOCKUP [ 112.528516][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.528527][ T6180] Call Trace: [ 112.528534][ T6180] [ 112.528543][ T6180] dump_stack_lvl+0xe8/0x150 [ 112.528585][ T6180] should_fail_ex+0x410/0x560 [ 112.528617][ T6180] should_failslab+0xa8/0x100 [ 112.528644][ T6180] __kmalloc_cache_noprof+0xa3/0x600 [ 112.528668][ T6180] ? vb2_vmalloc_get_userptr+0x5f/0x440 [ 112.528692][ T6180] ? vb2_vmalloc_get_userptr+0x5f/0x440 [ 112.528718][ T6180] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 112.528744][ T6180] vb2_vmalloc_get_userptr+0x5f/0x440 [ 112.528768][ T6180] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 112.528795][ T6180] __buf_prepare+0xe4a/0x4840 [ 112.528836][ T6180] ? __pfx___buf_prepare+0x10/0x10 [ 112.528863][ T6180] ? is_bpf_text_address+0x26/0x2b0 [ 112.528893][ T6180] ? is_bpf_text_address+0x292/0x2b0 [ 112.528923][ T6180] ? is_bpf_text_address+0x26/0x2b0 [ 112.528949][ T6180] ? kernel_text_address+0xa5/0xe0 [ 112.528972][ T6180] ? __kernel_text_address+0xd/0x30 [ 112.528992][ T6180] ? unwind_get_return_address+0x4d/0x90 [ 112.529014][ T6180] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 112.529041][ T6180] ? lockdep_unlock+0x5c/0xd0 [ 112.529058][ T6180] ? __lock_acquire+0x1511/0x2de0 [ 112.529086][ T6180] ? stack_trace_save+0xa9/0x100 [ 112.529104][ T6180] ? __pfx_stack_trace_save+0x10/0x10 [ 112.529121][ T6180] ? kasan_save_track+0x4f/0x80 [ 112.529203][ T6180] vb2_core_prepare_buf+0xad/0x2c0 [ 112.529228][ T6180] v4l2_m2m_ioctl_prepare_buf+0x15d/0x450 [ 112.529257][ T6180] ? v4l_prepare_buf+0x71/0xd0 [ 112.529279][ T6180] __video_do_ioctl+0x8af/0xc70 [ 112.529312][ T6180] ? __pfx___video_do_ioctl+0x10/0x10 [ 112.529349][ T6180] video_usercopy+0x860/0x1430 [ 112.529380][ T6180] ? __pfx___video_do_ioctl+0x10/0x10 [ 112.529406][ T6180] ? __pfx_video_usercopy+0x10/0x10 [ 112.529440][ T6180] ? __fget_files+0x2a/0x420 [ 112.529460][ T6180] ? __fget_files+0x2a/0x420 [ 112.529475][ T6180] ? __fget_files+0x3a2/0x420 [ 112.529496][ T6180] v4l2_ioctl+0x18d/0x1e0 [ 112.529519][ T6180] ? __pfx_v4l2_ioctl+0x10/0x10 [ 112.529541][ T6180] __se_sys_ioctl+0xfc/0x170 [ 112.529566][ T6180] do_syscall_64+0x166/0x520 [ 112.529587][ T6180] ? trace_irq_disable+0x3b/0x140 [ 112.529607][ T6180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.529625][ T6180] ? clear_bhb_loop+0x70/0xc0 [ 112.529648][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.529667][ T6180] RIP: 0033:0x7f1a2c79e559 [ 112.529693][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.529707][ T6180] RSP: 002b:00007f1a2d6de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.529730][ T6180] RAX: ffffffffffffffda RBX: 00007f1a2ca25fa0 RCX: 00007f1a2c79e559 [ 112.529743][ T6180] RDX: 00002000000005c0 RSI: 00000000c058565d RDI: 0000000000000005 [ 112.529755][ T6180] RBP: 00007f1a2d6de090 R08: 0000000000000000 R09: 0000000000000000 [ 112.529766][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.529776][ T6180] R13: 00007f1a2ca26038 R14: 00007f1a2ca25fa0 R15: 00007f1a2cb4fa48 [ 112.529807][ T6180] [ 112.590838][ T5708] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 112.740573][ T987] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 112.745768][ T5708] usb 5-1: not running at top speed; connect to a high speed hub [ 112.745801][ T5708] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 112.747343][ T5708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 112.747372][ T5708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 112.747400][ T5708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 112.747422][ T5708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 112.747443][ T5708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 112.747465][ T5708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 112.761361][ T987] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 112.858836][ T987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.858858][ T987] usb 4-1: Product: syz [ 112.858871][ T987] usb 4-1: Manufacturer: syz [ 112.858884][ T987] usb 4-1: SerialNumber: syz [ 112.939888][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.939915][ T5708] usb 5-1: Product: syz [ 112.939934][ T5708] usb 5-1: Manufacturer: syz [ 112.939947][ T5708] usb 5-1: SerialNumber: syz [ 113.086475][ T987] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 113.086510][ T987] dvb-usb: bulk message failed: -22 (3/0) [ 113.087544][ T6180] loop7: detected capacity change from 0 to 7 [ 113.100635][ T6178] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 113.113098][ T6178] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 113.113246][ T6178] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 113.113364][ T6178] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 113.113479][ T6178] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 113.162674][ T5708] usb 5-1: USB2VGA dongle found at address 13 [ 113.166399][ T987] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.169049][ T5708] usb 5-1: Allocated 8 output buffers [ 113.169070][ T5708] usb 5-1: Not attached to USB 2.0 hub, deferring init [ 113.174709][ T987] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 113.174742][ T987] usb 4-1: media controller created [ 113.271795][ T987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.469913][ T6180] Dev loop7: unable to read RDB block 7 [ 113.469963][ T6180] loop7: unable to read partition table [ 113.482561][ T6180] loop7: partition table beyond EOD, truncated [ 113.482611][ T6180] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 113.514895][ T6178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.515209][ T6178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.518083][ T6176] dibusb: i2c wr: len=61 is too big! [ 113.518083][ T6176] [ 113.573466][ T6178] usb 5-1: Device not attached to USB 2.0 hub [ 113.575173][ T29] usb 5-1: USB disconnect, device number 13 [ 113.632639][ T5978] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.632992][ T5978] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.633243][ T5978] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.633500][ T5978] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.633776][ T5978] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.682688][ T987] DVB: Unable to find symbol mt352_attach() [ 113.682704][ T987] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 113.717855][ T987] dvb-usb: bulk message failed: -22 (3/0) [ 113.730810][ T987] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 113.887221][ T6192] FAULT_INJECTION: forcing a failure. [ 113.887221][ T6192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.887266][ T6192] CPU: 1 UID: 0 PID: 6192 Comm: syz.2.143 Tainted: G L syzkaller #0 PREEMPT(full) [ 113.887290][ T6192] Tainted: [L]=SOFTLOCKUP [ 113.887296][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.887306][ T6192] Call Trace: [ 113.887314][ T6192] [ 113.887322][ T6192] dump_stack_lvl+0xe8/0x150 [ 113.887353][ T6192] should_fail_ex+0x410/0x560 [ 113.887378][ T6192] _copy_from_user+0x2d/0xb0 [ 113.887396][ T6192] __sys_sendto+0x2a9/0x5a0 [ 113.887414][ T6192] ? ksys_write+0x1e6/0x270 [ 113.887436][ T6192] ? __pfx___sys_sendto+0x10/0x10 [ 113.887451][ T6192] ? __mutex_unlock_slowpath+0x731/0x900 [ 113.887497][ T6192] ? __pfx_ksys_write+0x10/0x10 [ 113.887521][ T6192] __x64_sys_sendto+0xde/0x100 [ 113.887541][ T6192] do_syscall_64+0x166/0x520 [ 113.887562][ T6192] ? trace_irq_disable+0x3b/0x140 [ 113.887579][ T6192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.887598][ T6192] ? clear_bhb_loop+0x70/0xc0 [ 113.887619][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.887637][ T6192] RIP: 0033:0x7f1a2c79e559 [ 113.887653][ T6192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.887668][ T6192] RSP: 002b:00007f1a2d6de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 113.887685][ T6192] RAX: ffffffffffffffda RBX: 00007f1a2ca25fa0 RCX: 00007f1a2c79e559 [ 113.887697][ T6192] RDX: 000000000000fdef RSI: 0000200000000fc0 RDI: 0000000000000005 [ 113.887708][ T6192] RBP: 00007f1a2d6de090 R08: 0000200000001000 R09: 0000000000000014 [ 113.887719][ T6192] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 113.887729][ T6192] R13: 00007f1a2ca26038 R14: 00007f1a2ca25fa0 R15: 00007f1a2cb4fa48 [ 113.887756][ T6192] [ 113.888087][ T9] usb 4-1: USB disconnect, device number 7 [ 113.960895][ T5708] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 114.140844][ T5708] usb 2-1: unable to get BOS descriptor or descriptor too short [ 114.141368][ T5708] usb 2-1: not running at top speed; connect to a high speed hub [ 114.141398][ T5708] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 114.142573][ T5708] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 114.142596][ T5708] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 114.142613][ T5708] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 114.142629][ T5708] usb 2-1: config 14 has no interface number 0 [ 114.142642][ T5708] usb 2-1: config 14 has no interface number 1 [ 114.142699][ T5708] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 114.142717][ T5708] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 114.142739][ T5708] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.142761][ T5708] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.142781][ T5708] usb 2-1: config 14 interface 57 has no altsetting 0 [ 114.142796][ T5708] usb 2-1: config 14 interface 228 has no altsetting 0 [ 114.160428][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.160453][ T5708] usb 2-1: Product: syz [ 114.160466][ T5708] usb 2-1: Manufacturer: syz [ 114.160478][ T5708] usb 2-1: SerialNumber: syz [ 114.304614][ T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 114.550470][ T6194] x_tables: duplicate underflow at hook 3 [ 114.774469][ T6206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.837564][ T5708] legousbtower 2-1:14.57: interrupt endpoints not found [ 115.079936][ T6213] netlink: 44 bytes leftover after parsing attributes in process `syz.3.149'. [ 115.088392][ T5708] legousbtower 2-1:14.228: get version request failed: -71 [ 115.088489][ T5708] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 115.133026][ T5708] usb 2-1: USB disconnect, device number 11 [ 115.411151][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 115.513552][ T6221] program syz.2.154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.572000][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 115.573223][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.573255][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.580246][ T9] usb 5-1: config 0 descriptor?? [ 115.609431][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 116.073685][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 116.091973][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 116.099537][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 116.100324][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 116.123270][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 116.123819][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 116.127441][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.127745][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.166884][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 116.174883][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 116.187269][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.187850][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.278906][ T6228] binder: 6227:6228 ioctl c008744c 200000000500 returned -22 [ 116.449503][ T6233] ip_tables: iptables: counters copy to user failed while replacing table [ 116.753663][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 116.757796][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 116.758131][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 116.760862][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 116.761327][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 116.761715][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 116.766436][ T9] pwc: Registered as video103. [ 116.772407][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 116.849675][ T9] usb 5-1: USB disconnect, device number 14 [ 117.288543][ T6237] fuse: Bad value for 'fd' [ 117.706850][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'. [ 117.761835][ T6253] af_packet: tpacket_rcv: packet too big, clamped from 4096 to 3952. macoff=96 [ 117.810843][ T29] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 117.961535][ T29] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.962904][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.962932][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.962951][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.962988][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.023473][ T29] usb 2-1: config 0 descriptor?? [ 118.125956][ T6254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.501180][ T29] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 118.602802][ T6268] warning: `syz.4.168' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.611510][ T6268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.753436][ T6270] netlink: 36 bytes leftover after parsing attributes in process `syz.4.169'. [ 119.036337][ T6282] raw_sendmsg: syz.2.172 forgot to set AF_INET. Fix it! [ 119.288225][ T6289] netlink: 'syz.0.175': attribute type 4 has an invalid length. [ 119.421542][ T5687] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 119.571518][ T5687] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 119.572531][ T5687] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.572579][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.577920][ T5687] usb 4-1: config 0 descriptor?? [ 119.587788][ T5687] pwc: Askey VC010 type 2 USB webcam detected. [ 119.680844][ T5708] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 119.763999][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 119.831087][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 119.831980][ T5708] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 119.833211][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.846950][ T5708] usb 5-1: config 0 descriptor?? [ 119.927447][ T6308] syzkaller1: entered promiscuous mode [ 119.927480][ T6308] syzkaller1: entered allmulticast mode [ 119.943345][ T29] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 120.006351][ T5687] pwc: recv_control_msg error -32 req 02 val 2b00 [ 120.008276][ T5687] pwc: recv_control_msg error -32 req 02 val 2700 [ 120.008820][ T5687] pwc: recv_control_msg error -32 req 02 val 2c00 [ 120.009558][ T5687] pwc: recv_control_msg error -32 req 04 val 1000 [ 120.010101][ T5687] pwc: recv_control_msg error -32 req 04 val 1300 [ 120.010674][ T5687] pwc: recv_control_msg error -32 req 04 val 1400 [ 120.054661][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.056659][ T5708] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 120.058229][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.061955][ T5687] pwc: recv_control_msg error -32 req 02 val 2000 [ 120.066520][ T5708] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.066730][ T5687] pwc: recv_control_msg error -32 req 02 val 2100 [ 120.072948][ T5708] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 120.073021][ T5708] usb 5-1: media controller created [ 120.078377][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.084652][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.116235][ T29] usb 2-1: device descriptor read/64, error -32 [ 120.132155][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.260135][ T6299] fuse: Bad value for 'group_id' [ 120.260156][ T6299] fuse: Bad value for 'group_id' [ 120.269886][ T5708] az6027: usb out operation failed. (-71) [ 120.271063][ T5708] az6027: usb out operation failed. (-71) [ 120.271076][ T5708] stb0899_attach: Driver disabled by Kconfig [ 120.271084][ T5708] az6027: no front-end attached [ 120.271084][ T5708] [ 120.271737][ T5708] az6027: usb out operation failed. (-71) [ 120.271749][ T5708] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 120.287431][ T5708] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 120.305312][ T5708] dvb-usb: schedule remote query interval to 400 msecs. [ 120.305334][ T5708] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 120.329277][ T5708] usb 5-1: USB disconnect, device number 15 [ 120.402954][ T29] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 120.443501][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.443971][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.445852][ T5708] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 120.468679][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.485357][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.551366][ T29] usb 2-1: device descriptor read/64, error -32 [ 120.615421][ T5687] pwc: recv_control_msg error -71 req 02 val 2400 [ 120.616698][ T5687] pwc: recv_control_msg error -71 req 02 val 2600 [ 120.617110][ T5687] pwc: recv_control_msg error -71 req 02 val 2900 [ 120.617501][ T5687] pwc: recv_control_msg error -71 req 02 val 2800 [ 120.620670][ T5687] pwc: recv_control_msg error -71 req 04 val 1100 [ 120.621581][ T5687] pwc: recv_control_msg error -71 req 04 val 1200 [ 120.624971][ T5687] pwc: Registered as video103. [ 120.635283][ T5687] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 120.683133][ T5687] usb 4-1: USB disconnect, device number 8 [ 120.810867][ T29] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 120.833951][ T29] usb 2-1: device descriptor read/8, error -32 [ 120.872756][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 120.872814][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.185'. [ 120.875642][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 120.875666][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.185'. [ 121.053075][ T6324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.053499][ T6324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.081954][ T29] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 121.101046][ T29] usb 2-1: device descriptor read/8, error -32 [ 121.169360][ T6331] netlink: 76 bytes leftover after parsing attributes in process `syz.1.187'. [ 121.210987][ T29] raw-gadget.0 gadget.1: failed to queue suspend event [ 121.218404][ T5611] usb 2-1: USB disconnect, device number 12 [ 121.267851][ T5611] raw-gadget.0 gadget.1: failed to queue reset event [ 121.325137][ T6335] ip_tables: iptables: counters copy to user failed while replacing table [ 121.340944][ T5611] raw-gadget.0 gadget.1: failed to queue resume event [ 121.400827][ T5611] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 121.401049][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 121.401196][ T5611] raw-gadget.0 gadget.1: failed to queue reset event [ 121.471867][ T5611] raw-gadget.0 gadget.1: failed to queue resume event [ 121.487010][ T6353] input: syz1 as /devices/virtual/input/input19 [ 121.530802][ T5611] usb 2-1: device descriptor read/64, error -32 [ 121.537327][ T30] audit: type=1326 audit(1792420521.102:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b919e559 code=0x7ffc0000 [ 121.537375][ T30] audit: type=1326 audit(1792420521.102:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b919e559 code=0x7ffc0000 [ 121.537411][ T30] audit: type=1326 audit(1792420521.102:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b919e559 code=0x7ffc0000 [ 121.537445][ T30] audit: type=1326 audit(1792420521.102:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b919e559 code=0x7ffc0000 [ 121.537480][ T30] audit: type=1326 audit(1792420521.102:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f69b919e559 code=0x7ffc0000 [ 121.537515][ T30] audit: type=1326 audit(1792420521.102:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b919e559 code=0x7ffc0000 [ 121.538236][ T30] audit: type=1326 audit(1792420521.102:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b919e559 code=0x7ffc0000 [ 121.538616][ T30] audit: type=1326 audit(1792420521.102:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b919e559 code=0x7ffc0000 [ 121.538655][ T30] audit: type=1326 audit(1792420521.102:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b919e559 code=0x7ffc0000 [ 121.538690][ T30] audit: type=1326 audit(1792420521.102:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.0.194" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f69b919e559 code=0x7ffc0000 [ 121.646626][ T5611] raw-gadget.0 gadget.1: failed to queue suspend event [ 121.646957][ T5611] raw-gadget.0 gadget.1: failed to queue reset event [ 121.740852][ T5687] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.745330][ T5611] raw-gadget.0 gadget.1: failed to queue resume event [ 121.790905][ T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 121.850893][ T5611] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 121.851190][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 121.851324][ T5611] raw-gadget.0 gadget.1: failed to queue reset event [ 121.891663][ T5687] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 121.892694][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.894527][ T5687] usb 3-1: config 0 descriptor?? [ 121.924156][ T5611] raw-gadget.0 gadget.1: failed to queue resume event [ 121.942825][ T10] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 121.943874][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.943900][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 121.943918][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 121.945960][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.945981][ T10] usb 5-1: Product: syz [ 121.945993][ T10] usb 5-1: Manufacturer: syz [ 121.946005][ T10] usb 5-1: SerialNumber: syz [ 121.948269][ T10] usb 5-1: config 0 descriptor?? [ 121.950046][ T6353] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 121.994790][ T5611] usb 2-1: device descriptor read/64, error -32 [ 122.031967][ T10] rc_core: IR keymap rc-streamzap not found [ 122.031984][ T10] Registered IR keymap rc-empty [ 122.037032][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 122.040101][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 122.063093][ T5708] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.097740][ T5687] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 122.108341][ T5611] raw-gadget.0 gadget.1: failed to queue suspend event [ 122.108522][ T5611] usb usb2-port1: attempt power cycle [ 122.108614][ T5611] raw-gadget.0 gadget.1: failed to queue disconnect event [ 122.110513][ T5611] raw-gadget.0 gadget.1: failed to queue reset event [ 122.138278][ T5687] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 122.138386][ T5687] [drm] Initialized udl on minor 1 [ 122.143790][ T5687] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 122.145413][ T5687] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 122.201598][ T5611] raw-gadget.0 gadget.1: failed to queue resume event [ 122.202038][ T5611] raw-gadget.0 gadget.1: failed to queue reset event [ 122.216638][ T5708] usb 4-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 122.218162][ T5708] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.218276][ T5708] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.224293][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 122.224317][ T5708] usb 4-1: Product: syz [ 122.224329][ T5708] usb 4-1: Manufacturer: syz [ 122.277837][ T5708] hso 4-1:1.0: Can't find BULK endpoints [ 122.364776][ T6357] loop7: detected capacity change from 0 to 16384 [ 122.403104][ T6365] loop7: detected capacity change from 16384 to 16383 [ 122.423161][ T5611] raw-gadget.0 gadget.1: failed to queue resume event [ 122.481572][ T5611] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 122.503825][ T6366] netlink: 36 bytes leftover after parsing attributes in process `syz.4.191'. [ 122.511428][ T6365] loop7: detected capacity change from 16383 to 16384 [ 122.512126][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 122.535741][ T5611] usb 2-1: device descriptor read/8, error -32 [ 122.581509][ T987] usb 4-1: USB disconnect, device number 9 [ 122.651944][ T5611] raw-gadget.0 gadget.1: failed to queue suspend event [ 122.652201][ T5611] raw-gadget.0 gadget.1: failed to queue reset event [ 122.720985][ T5611] raw-gadget.0 gadget.1: failed to queue resume event [ 122.780844][ T5611] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 122.803148][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 122.803251][ T5611] usb 2-1: device descriptor read/8, error -32 [ 122.911156][ T5611] raw-gadget.0 gadget.1: failed to queue suspend event [ 122.911550][ T5611] usb usb2-port1: unable to enumerate USB device [ 124.105634][ T6375] FAULT_INJECTION: forcing a failure. [ 124.105634][ T6375] name failslab, interval 1, probability 0, space 0, times 0 [ 124.105703][ T6375] CPU: 0 UID: 0 PID: 6375 Comm: syz.1.196 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.105718][ T6375] Tainted: [L]=SOFTLOCKUP [ 124.105722][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.105729][ T6375] Call Trace: [ 124.105733][ T6375] [ 124.105738][ T6375] dump_stack_lvl+0xe8/0x150 [ 124.105757][ T6375] should_fail_ex+0x410/0x560 [ 124.105776][ T6375] should_failslab+0xa8/0x100 [ 124.105790][ T6375] ? skb_clone+0x212/0x3a0 [ 124.105802][ T6375] kmem_cache_alloc_noprof+0xa1/0x600 [ 124.105815][ T6375] ? skb_clone+0x212/0x3a0 [ 124.105829][ T6375] skb_clone+0x212/0x3a0 [ 124.105839][ T6375] ? nfnetlink_rcv+0x4b0/0x28c0 [ 124.105852][ T6375] nfnetlink_rcv+0x4de/0x28c0 [ 124.105864][ T6375] ? __dev_queue_xmit+0x29b/0x3920 [ 124.105878][ T6375] ? __local_bh_enable_ip+0xd6/0x140 [ 124.105892][ T6375] ? lockdep_hardirqs_on+0x7b/0x110 [ 124.105903][ T6375] ? __dev_queue_xmit+0x29b/0x3920 [ 124.105920][ T6375] ? __local_bh_enable_ip+0xd6/0x140 [ 124.105941][ T6375] ? __dev_queue_xmit+0x29b/0x3920 [ 124.105959][ T6375] ? __dev_queue_xmit+0x1efb/0x3920 [ 124.105978][ T6375] ? do_syscall_64+0x166/0x520 [ 124.106001][ T6375] ? __dev_queue_xmit+0x29b/0x3920 [ 124.106017][ T6375] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 124.106036][ T6375] ? ref_tracker_free+0x689/0x830 [ 124.106052][ T6375] ? __pfx_ref_tracker_free+0x10/0x10 [ 124.106065][ T6375] ? __asan_memcpy+0x40/0x70 [ 124.106075][ T6375] ? __skb_clone+0x5c/0x6c0 [ 124.106088][ T6375] ? __skb_clone+0x449/0x6c0 [ 124.106102][ T6375] ? skb_clone+0x246/0x3a0 [ 124.106114][ T6375] ? __netlink_deliver_tap+0x811/0x860 [ 124.106126][ T6375] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.106141][ T6375] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.106153][ T6375] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.106167][ T6375] netlink_unicast+0x8ef/0xa80 [ 124.106194][ T6375] netlink_sendmsg+0x813/0xb40 [ 124.106225][ T6375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.106254][ T6375] ? apparmor_socket_sendmsg+0x98/0x360 [ 124.106273][ T6375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.106285][ T6375] sock_sendmsg_nosec+0x13a/0x180 [ 124.106300][ T6375] ____sys_sendmsg+0x54e/0x850 [ 124.106314][ T6375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.106329][ T6375] ? import_iovec+0x73/0xa0 [ 124.106341][ T6375] ___sys_sendmsg+0x2a5/0x360 [ 124.106351][ T6375] ? __lock_acquire+0x747/0x2de0 [ 124.106365][ T6375] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.106392][ T6375] ? __fget_files+0x2a/0x420 [ 124.106401][ T6375] ? __fget_files+0x3a2/0x420 [ 124.106415][ T6375] __x64_sys_sendmsg+0x1b1/0x290 [ 124.106427][ T6375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.106448][ T6375] do_syscall_64+0x166/0x520 [ 124.106459][ T6375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.106470][ T6375] ? clear_bhb_loop+0x70/0xc0 [ 124.106482][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.106492][ T6375] RIP: 0033:0x7ff599b9e559 [ 124.106502][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.106511][ T6375] RSP: 002b:00007ff59a990028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.106522][ T6375] RAX: ffffffffffffffda RBX: 00007ff599e25fa0 RCX: 00007ff599b9e559 [ 124.106530][ T6375] RDX: 0000000000000000 RSI: 00002000000022c0 RDI: 0000000000000003 [ 124.106536][ T6375] RBP: 00007ff59a990090 R08: 0000000000000000 R09: 0000000000000000 [ 124.106542][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.106548][ T6375] R13: 00007ff599e26038 R14: 00007ff599e25fa0 R15: 00007ff599f4fa48 [ 124.106563][ T6375] [ 124.479731][ T987] usb 5-1: USB disconnect, device number 16 [ 124.585373][ T5611] usb 3-1: USB disconnect, device number 9 [ 124.983296][ T5708] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 125.131988][ T5708] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 125.133136][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.133184][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.138438][ T5708] usb 4-1: config 0 descriptor?? [ 125.139973][ T6395] ======================================================= [ 125.139973][ T6395] WARNING: The mand mount option has been deprecated and [ 125.139973][ T6395] and is ignored by this kernel. Remove the mand [ 125.139973][ T6395] option from the mount to silence this warning. [ 125.139973][ T6395] ======================================================= [ 125.215606][ T5708] pwc: Askey VC010 type 2 USB webcam detected. [ 125.503035][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.509881][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.556778][ T5708] pwc: recv_control_msg error -32 req 02 val 2b00 [ 125.557761][ T5708] pwc: recv_control_msg error -32 req 02 val 2700 [ 125.558263][ T5708] pwc: recv_control_msg error -32 req 02 val 2c00 [ 125.558770][ T5708] pwc: recv_control_msg error -32 req 04 val 1000 [ 125.559239][ T5708] pwc: recv_control_msg error -32 req 04 val 1300 [ 125.559721][ T5708] pwc: recv_control_msg error -32 req 04 val 1400 [ 125.560665][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.565988][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.618417][ T5708] pwc: recv_control_msg error -32 req 02 val 2000 [ 125.625581][ T5708] pwc: recv_control_msg error -32 req 02 val 2100 [ 125.626613][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.626946][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.680825][ T5687] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 125.831847][ T5687] usb 3-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 125.833487][ T5687] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.833528][ T5687] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.836159][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 125.836183][ T5687] usb 3-1: Product: syz [ 125.836196][ T5687] usb 3-1: Manufacturer: syz [ 125.843488][ T5687] hso 3-1:1.0: Can't find BULK endpoints [ 126.055602][ T6409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.056017][ T6409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.126634][ T5708] pwc: recv_control_msg error -71 req 02 val 2400 [ 126.127102][ T5708] pwc: recv_control_msg error -71 req 02 val 2600 [ 126.127578][ T5708] pwc: recv_control_msg error -71 req 02 val 2900 [ 126.128767][ T5708] pwc: recv_control_msg error -71 req 02 val 2800 [ 126.130979][ T5708] pwc: recv_control_msg error -71 req 04 val 1100 [ 126.133857][ T5708] pwc: recv_control_msg error -71 req 04 val 1200 [ 126.141839][ T5708] pwc: Registered as video103. [ 126.152438][ T5708] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 126.168500][ T5708] usb 4-1: USB disconnect, device number 10 [ 126.239880][ T5687] usb 3-1: USB disconnect, device number 10 [ 126.686428][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.686843][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.554939][ T6436] netlink: 964 bytes leftover after parsing attributes in process `syz.3.216'. [ 127.740413][ T50] IPVS: starting estimator thread 0... [ 127.761186][ T6441] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 127.820974][ T6444] IPVS: using max 54 ests per chain, 129600 per kthread [ 127.999575][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.001081][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.146469][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.146899][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.158631][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.176038][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.206329][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 128.206342][ T30] audit: type=1326 audit(1792420527.772:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.3.224" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 128.206372][ T30] audit: type=1326 audit(1792420527.772:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.3.224" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 128.206393][ T30] audit: type=1326 audit(1792420527.772:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.3.224" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 128.206413][ T30] audit: type=1326 audit(1792420527.772:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.3.224" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 128.206433][ T30] audit: type=1326 audit(1792420527.772:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.3.224" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 128.206452][ T30] audit: type=1326 audit(1792420527.772:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.3.224" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 128.206472][ T30] audit: type=1326 audit(1792420527.772:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.3.224" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 128.311947][ T30] audit: type=1326 audit(1792420527.872:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.3.224" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 128.311997][ T30] audit: type=1326 audit(1792420527.872:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.3.224" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 128.312033][ T30] audit: type=1326 audit(1792420527.872:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.3.224" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d719e559 code=0x7ffc0000 [ 128.517542][ T6461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.600940][ T5687] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 128.751021][ T5687] usb 4-1: Using ep0 maxpacket: 16 [ 128.752215][ T5687] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 128.754081][ T5687] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 128.766062][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.766088][ T5687] usb 4-1: Product: syz [ 128.766102][ T5687] usb 4-1: Manufacturer: syz [ 128.766114][ T5687] usb 4-1: SerialNumber: syz [ 128.771051][ T987] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 128.783324][ T5687] usb 4-1: config 0 descriptor?? [ 128.828306][ T5687] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 128.829131][ T5687] usb 4-1: Detected FT232R [ 128.951364][ T987] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 128.952409][ T987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.952455][ T987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.952475][ T987] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 128.952495][ T987] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.952532][ T987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.971731][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 128.992906][ T5687] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 129.044743][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.045245][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.049399][ T6456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.062258][ T6456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.121573][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 129.123392][ T9] usb 3-1: New USB device found, idVendor=e8ac, idProduct=02cc, bcdDevice= 0.00 [ 129.128336][ T9] usb 3-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 129.128369][ T9] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.128415][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.128447][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.143108][ T9] usb 3-1: config 0 descriptor?? [ 129.192410][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 129.348666][ T6473] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 129.404732][ T5687] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 129.428206][ T5687] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 129.431915][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.432312][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.440640][ T5687] usb 4-1: USB disconnect, device number 11 [ 129.453297][ T5687] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 129.453806][ T5687] ftdi_sio 4-1:0.0: device disconnected [ 129.569205][ T9] usb 3-1: USB disconnect, device number 11 [ 130.069419][ T6485] loop1: detected capacity change from 0 to 2640 [ 130.090422][ T6485] Buffer I/O error on dev loop1, logical block 0, async page read [ 130.090469][ T6485] Buffer I/O error on dev loop1, logical block 0, async page read [ 130.090495][ T6485] Buffer I/O error on dev loop1, logical block 0, async page read [ 130.094450][ T6485] Buffer I/O error on dev loop1, logical block 0, async page read [ 130.094485][ T6485] Buffer I/O error on dev loop1, logical block 0, async page read [ 130.094529][ T6485] Buffer I/O error on dev loop1, logical block 0, async page read [ 130.094567][ T6485] Buffer I/O error on dev loop1, logical block 0, async page read [ 130.094592][ T6485] Buffer I/O error on dev loop1, logical block 0, async page read [ 130.094605][ T6485] ldm_validate_partition_table(): Disk read failed. [ 130.094629][ T6485] Buffer I/O error on dev loop1, logical block 0, async page read [ 130.094655][ T6485] Buffer I/O error on dev loop1, logical block 0, async page read [ 130.094713][ T6485] Dev loop1: unable to read RDB block 0 [ 130.094899][ T6485] loop1: unable to read partition table [ 130.095140][ T6485] loop_reread_partitions: partition scan of loop1 (3 ) failed (rc=-5) [ 130.278605][ T6485] loop1: detected capacity change from 2640 to 524288000 [ 130.368983][ T6490] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 130.408205][ T6490] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 130.408646][ T6490] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 130.408673][ T6490] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 130.408694][ T6490] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 130.408715][ T6490] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 130.408736][ T6490] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 130.412697][ T6490] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 130.426580][ T6490] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 130.426629][ T6490] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 131.096847][ T6513] fuse: Unknown parameter '' [ 131.254734][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.255144][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.483258][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.484629][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.530448][ T5687] usb 5-1: USB disconnect, device number 17 [ 131.669240][ T6527] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 131.748380][ T6532] capability: warning: `syz.3.249' uses deprecated v2 capabilities in a way that may be insecure [ 132.151751][ T6542] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 132.770863][ T5708] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 132.903986][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.904066][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.924504][ T5708] usb 5-1: Using ep0 maxpacket: 8 [ 132.941907][ T5708] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 132.943074][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.978156][ T5708] usb 5-1: config 0 descriptor?? [ 133.018011][ T5708] usb 5-1: probing VID:PID(0424:012C) [ 133.021986][ T5708] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 133.022017][ T5708] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 133.022035][ T5708] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 133.022053][ T5708] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 133.022070][ T5708] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 133.512841][ T5708] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 133.715541][ T5708] usb 5-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 133.824017][ T6557] Set syz1 is full, maxelem 6117 reached [ 134.115156][ T6576] input: syz1 as /devices/virtual/input/input22 [ 134.216940][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.217199][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.311143][ T6574] x_tables: duplicate underflow at hook 3 [ 134.354342][ T6579] input: syz1 as /devices/virtual/input/input23 [ 134.573696][ T6582] netlink: 36 bytes leftover after parsing attributes in process `syz.1.264'. [ 134.730876][ T5687] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 134.823451][ T5708] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 134.830127][ T9] usb 5-1: USB disconnect, device number 18 [ 134.860202][ T5708] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 134.901862][ T5687] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 134.903979][ T5687] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.904008][ T5687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 134.904032][ T5687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 134.907898][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.907922][ T5687] usb 3-1: Product: syz [ 134.907935][ T5687] usb 3-1: Manufacturer: syz [ 134.907948][ T5687] usb 3-1: SerialNumber: syz [ 134.982466][ T9] USB vub300 remote SDIO host controller[0] now disconnected [ 134.987338][ T5687] usb 3-1: config 0 descriptor?? [ 134.989121][ T6581] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 135.150823][ T5687] rc_core: IR keymap rc-streamzap not found [ 135.150843][ T5687] Registered IR keymap rc-empty [ 135.152093][ T5687] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 135.155729][ T5687] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 135.213485][ T6587] FAULT_INJECTION: forcing a failure. [ 135.213485][ T6587] name failslab, interval 1, probability 0, space 0, times 0 [ 135.213525][ T6587] CPU: 1 UID: 0 PID: 6587 Comm: syz.0.266 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.213554][ T6587] Tainted: [L]=SOFTLOCKUP [ 135.213561][ T6587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.213572][ T6587] Call Trace: [ 135.213579][ T6587] [ 135.213587][ T6587] dump_stack_lvl+0xe8/0x150 [ 135.213619][ T6587] should_fail_ex+0x410/0x560 [ 135.213637][ T6587] should_failslab+0xa8/0x100 [ 135.213652][ T6587] __kmalloc_cache_noprof+0xa3/0x600 [ 135.213668][ T6587] ? __kmalloc_cache_noprof+0x14d/0x600 [ 135.213687][ T6587] ? sctp_add_bind_addr+0x8c/0x370 [ 135.213711][ T6587] ? sctp_add_bind_addr+0x8c/0x370 [ 135.213742][ T6587] sctp_add_bind_addr+0x8c/0x370 [ 135.213772][ T6587] sctp_copy_local_addr_list+0x31a/0x4e0 [ 135.213800][ T6587] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 135.213816][ T6587] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 135.213831][ T6587] ? sctp_v6_is_any+0x64/0x80 [ 135.213849][ T6587] ? sctp_copy_one_addr+0x93/0x360 [ 135.213868][ T6587] sctp_bind_addr_copy+0xb3/0x3c0 [ 135.213895][ T6587] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 135.213922][ T6587] sctp_connect_new_asoc+0x2ff/0x6b0 [ 135.213945][ T6587] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 135.213967][ T6587] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 135.213987][ T6587] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 135.214002][ T6587] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 135.214013][ T6587] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 135.214023][ T6587] ? security_sctp_bind_connect+0x7e/0x2c0 [ 135.214038][ T6587] sctp_sendmsg+0x159b/0x2d00 [ 135.214057][ T6587] ? __pfx_sctp_sendmsg+0x10/0x10 [ 135.214081][ T6587] ? __lock_acquire+0x747/0x2de0 [ 135.214116][ T6587] ? aa_sock_msg_perm+0xf5/0x210 [ 135.214142][ T6587] ? sock_rps_record_flow+0x19/0x350 [ 135.214172][ T6587] ? inet_sendmsg+0x298/0x320 [ 135.214193][ T6587] ? apparmor_socket_sendmsg+0x274/0x360 [ 135.214207][ T6587] ? __pfx_inet_sendmsg+0x10/0x10 [ 135.214220][ T6587] sock_sendmsg_nosec+0x10e/0x180 [ 135.214235][ T6587] ____sys_sendmsg+0x54e/0x850 [ 135.214252][ T6587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.214283][ T6587] ? import_iovec+0x73/0xa0 [ 135.214305][ T6587] ___sys_sendmsg+0x2a5/0x360 [ 135.214324][ T6587] ? __lock_acquire+0x747/0x2de0 [ 135.214349][ T6587] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.214396][ T6587] ? __fget_files+0x2a/0x420 [ 135.214405][ T6587] ? __fget_files+0x3a2/0x420 [ 135.214420][ T6587] __x64_sys_sendmsg+0x1b1/0x290 [ 135.214432][ T6587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.214470][ T6587] do_syscall_64+0x166/0x520 [ 135.214492][ T6587] ? trace_irq_disable+0x3b/0x140 [ 135.214512][ T6587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.214531][ T6587] ? clear_bhb_loop+0x70/0xc0 [ 135.214555][ T6587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.214572][ T6587] RIP: 0033:0x7f69b919e559 [ 135.214583][ T6587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.214592][ T6587] RSP: 002b:00007f69b9f81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.214604][ T6587] RAX: ffffffffffffffda RBX: 00007f69b9425fa0 RCX: 00007f69b919e559 [ 135.214611][ T6587] RDX: 0000000020048844 RSI: 0000200000008440 RDI: 0000000000000003 [ 135.214618][ T6587] RBP: 00007f69b9f81090 R08: 0000000000000000 R09: 0000000000000000 [ 135.214624][ T6587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.214632][ T6587] R13: 00007f69b9426038 R14: 00007f69b9425fa0 R15: 00007f69b954fa48 [ 135.214662][ T6587] [ 135.870956][ C1] [ 135.873377][ C1] ============================= [ 135.878295][ C1] WARNING: suspicious RCU usage [ 135.883223][ C1] syzkaller #0 Tainted: G L [ 135.889260][ C1] ----------------------------- [ 135.894275][ C1] kernel/sched/core.c:9226 Illegal context switch in RCU-sched read-side critical section! [ 135.904311][ C1] [ 135.904311][ C1] other info that might help us debug this: [ 135.904311][ C1] [ 135.914585][ C1] [ 135.914585][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 135.922705][ C1] locks held by syz-executor/5629: 9, last CPU#1: [ 135.929149][ C1] #0: ffffffff8fe365f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 135.937913][ C1] #1: ffff888078a31bc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 135.947053][ C1] #2: ffff88802d8b5900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 135.956346][ C1] #3: ffffffff8fd5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 135.965952][ C1] #4: ffff888035305558 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 135.976481][ C1] #5: ffffffff8fd5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 135.986073][ C1] #6: ffff88807d13fd98 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 135.996458][ C1] #7: ffffffff8fd5c9e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 136.005952][ C1] #8: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 136.016843][ C1] [ 136.016843][ C1] stack backtrace: [ 136.022812][ C1] CPU: 1 UID: 0 PID: 5629 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 136.033862][ C1] Tainted: [L]=SOFTLOCKUP [ 136.038177][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.048262][ C1] Call Trace: [ 136.051542][ C1] [ 136.054381][ C1] dump_stack_lvl+0xe8/0x150 [ 136.058993][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 136.060771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.072526][ C1] __might_resched+0xbb/0x4c0 [ 136.077206][ C1] ? __cancel_work_sync+0x5c/0x110 [ 136.082325][ C1] __cancel_work_sync+0x6d/0x110 [ 136.087266][ C1] mmc_free_host+0x19/0x40 [ 136.091701][ C1] call_timer_fn+0x18d/0x5f0 [ 136.096317][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 136.100766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 136.111303][ C1] ? call_timer_fn+0xd5/0x5f0 [ 136.115986][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 136.120744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 136.129331][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.134522][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 136.141228][ C1] __run_timer_base+0x652/0x8b0 [ 136.146113][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 136.151500][ C1] ? ktime_get+0x1f5/0x220 [ 136.155943][ C1] ? lapic_next_event+0x11/0x20 [ 136.160900][ C1] run_timer_softirq+0xb7/0x170 [ 136.165754][ C1] handle_softirqs+0x226/0x860 [ 136.170514][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 136.175303][ C1] __irq_exit_rcu+0xcb/0x220 [ 136.179913][ C1] irq_exit_rcu+0x9/0x30 [ 136.180773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.192300][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 136.197951][ C1] [ 136.200888][ C1] [ 136.203814][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.209807][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x20/0x40 [ 136.216063][ C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d bb ba 91 05 00 74 1d 83 3d 8a ea 91 05 00 74 14 65 48 8b 0d 08 54 ad 08 <31> c0 83 b9 a4 0b 00 00 00 0f 94 c0 e9 0f ff 02 00 cc cc cc cc cc [ 136.235683][ C1] RSP: 0018:ffffc90004827248 EFLAGS: 00000202 [ 136.241775][ C1] RAX: 0000000000000000 RBX: ffffffff8244e50a RCX: ffff888078ac5dc0 [ 136.249761][ C1] RDX: 0000000089136d27 RSI: ffffffff8e6f2205 RDI: ffffffff8c6ddc80 [ 136.257780][ C1] RBP: ffffc90004827570 R08: ffffffff8244e50a R09: 0000000000000000 [ 136.265766][ C1] R10: dffffc0000000000 R11: ffffed100b5ed805 R12: dffffc0000000000 [ 136.273737][ C1] R13: 00007fd206df0000 R14: 0000000000013f6f R15: ffff88813fe07040 [ 136.280752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.289851][ C1] ? pfn_valid+0xba/0x490 [ 136.294198][ C1] ? pfn_valid+0xba/0x490 [ 136.298548][ C1] ? pfn_valid+0xd6/0x490 [ 136.302874][ C1] pfn_valid+0xdf/0x490 [ 136.307030][ C1] page_table_check_set+0x25/0x530 [ 136.312164][ C1] copy_pmd_range+0x4adc/0x5c10 [ 136.317024][ C1] ? anon_vma_clone+0x3f3/0x9f0 [ 136.321909][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 136.327116][ C1] ? lock_acquire+0x115/0x350 [ 136.331829][ C1] copy_page_range+0xc82/0x1290 [ 136.336701][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 136.340794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.350160][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 136.355636][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 136.362578][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 136.369165][ C1] dup_mmap+0xf17/0x1dc0 [ 136.373426][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 136.378102][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 136.383146][ C1] ? lock_acquire+0x115/0x350 [ 136.387847][ C1] copy_mm+0x115/0x480 [ 136.391941][ C1] copy_process+0x1ea3/0x4480 [ 136.396639][ C1] ? __lock_acquire+0x747/0x2de0 [ 136.401604][ C1] ? copy_process+0xd1c/0x4480 [ 136.406390][ C1] ? __pfx_copy_process+0x10/0x10 [ 136.411430][ C1] kernel_clone+0x2d7/0x940 [ 136.415964][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 136.421023][ C1] __x64_sys_clone+0x1b6/0x230 [ 136.425804][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 136.430783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.439315][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 136.444596][ C1] do_syscall_64+0x166/0x520 [ 136.449285][ C1] ? trace_irq_disable+0x3b/0x140 [ 136.454308][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.460386][ C1] ? clear_bhb_loop+0x70/0xc0 [ 136.460755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.470755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.481347][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.487285][ C1] RIP: 0033:0x7fd206bc6fd2 [ 136.491716][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 136.511421][ C1] RSP: 002b:00007fd206f4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 136.519842][ C1] RAX: ffffffffffffffda RBX: 00007fd206f4fc60 RCX: 00007fd206bc6fd2 [ 136.527828][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 136.535796][ C1] RBP: 00007fd206f4fdec R08: 0000000000000000 R09: 0000000000000001 [ 136.543793][ C1] R10: 0000555565c107d0 R11: 0000000000000246 R12: 0000000000000001 [ 136.551778][ C1] R13: 00000000000927c0 R14: 0000000000021070 R15: 00007fd206f4fe40 [ 136.559783][ C1] [ 136.562847][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 136.562863][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5629, name: syz-executor [ 136.562881][ C1] preempt_count: 103, expected: 0 [ 136.562892][ C1] RCU nest depth: 2, expected: 0 [ 136.562901][ C1] locks held by syz-executor/5629: 9, last CPU#1: [ 136.562917][ C1] #0: ffffffff8fe365f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 136.562987][ C1] #1: ffff888078a31bc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 136.563033][ C1] #2: ffff88802d8b5900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 136.563063][ C1] #3: ffffffff8fd5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 136.563108][ C1] #4: ffff888035305558 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 136.563177][ C1] #5: ffffffff8fd5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 136.563232][ C1] #6: ffff88807d13fd98 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 136.563263][ C1] #7: ffffffff8fd5c9e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 136.563313][ C1] #8: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 136.563374][ C1] Preemption disabled at: [ 136.563379][ C1] [<0000000000000000>] 0x0 [ 136.563406][ C1] CPU: 1 UID: 0 PID: 5629 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 136.563422][ C1] Tainted: [L]=SOFTLOCKUP [ 136.563427][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.563434][ C1] Call Trace: [ 136.563439][ C1] [ 136.563443][ C1] dump_stack_lvl+0xe8/0x150 [ 136.563461][ C1] __might_resched+0x36a/0x4c0 [ 136.563499][ C1] __cancel_work_sync+0x6d/0x110 [ 136.563536][ C1] mmc_free_host+0x19/0x40 [ 136.563568][ C1] call_timer_fn+0x18d/0x5f0 [ 136.563597][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 136.563613][ C1] ? call_timer_fn+0xd5/0x5f0 [ 136.563627][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 136.563646][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.563662][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 136.563693][ C1] __run_timer_base+0x652/0x8b0 [ 136.563733][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 136.563763][ C1] ? ktime_get+0x1f5/0x220 [ 136.563788][ C1] ? lapic_next_event+0x11/0x20 [ 136.563809][ C1] run_timer_softirq+0xb7/0x170 [ 136.563823][ C1] handle_softirqs+0x226/0x860 [ 136.563839][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 136.563861][ C1] __irq_exit_rcu+0xcb/0x220 [ 136.563891][ C1] irq_exit_rcu+0x9/0x30 [ 136.563917][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 136.563943][ C1] [ 136.563950][ C1] [ 136.563959][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 136.563983][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x20/0x40 [ 136.564000][ C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d bb ba 91 05 00 74 1d 83 3d 8a ea 91 05 00 74 14 65 48 8b 0d 08 54 ad 08 <31> c0 83 b9 a4 0b 00 00 00 0f 94 c0 e9 0f ff 02 00 cc cc cc cc cc [ 136.564010][ C1] RSP: 0018:ffffc90004827248 EFLAGS: 00000202 [ 136.564019][ C1] RAX: 0000000000000000 RBX: ffffffff8244e50a RCX: ffff888078ac5dc0 [ 136.564027][ C1] RDX: 0000000089136d27 RSI: ffffffff8e6f2205 RDI: ffffffff8c6ddc80 [ 136.564035][ C1] RBP: ffffc90004827570 R08: ffffffff8244e50a R09: 0000000000000000 [ 136.564043][ C1] R10: dffffc0000000000 R11: ffffed100b5ed805 R12: dffffc0000000000 [ 136.564055][ C1] R13: 00007fd206df0000 R14: 0000000000013f6f R15: ffff88813fe07040 [ 136.564075][ C1] ? pfn_valid+0xba/0x490 [ 136.564104][ C1] ? pfn_valid+0xba/0x490 [ 136.564137][ C1] ? pfn_valid+0xd6/0x490 [ 136.564162][ C1] pfn_valid+0xdf/0x490 [ 136.564187][ C1] page_table_check_set+0x25/0x530 [ 136.564211][ C1] copy_pmd_range+0x4adc/0x5c10 [ 136.564225][ C1] ? anon_vma_clone+0x3f3/0x9f0 [ 136.564261][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 136.564290][ C1] ? lock_acquire+0x115/0x350 [ 136.564331][ C1] copy_page_range+0xc82/0x1290 [ 136.564375][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 136.564393][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 136.564406][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 136.564419][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 136.564439][ C1] dup_mmap+0xf17/0x1dc0 [ 136.564481][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 136.564504][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 136.564551][ C1] ? lock_acquire+0x115/0x350 [ 136.564576][ C1] copy_mm+0x115/0x480 [ 136.564592][ C1] copy_process+0x1ea3/0x4480 [ 136.564607][ C1] ? __lock_acquire+0x747/0x2de0 [ 136.564631][ C1] ? copy_process+0xd1c/0x4480 [ 136.564677][ C1] ? __pfx_copy_process+0x10/0x10 [ 136.564719][ C1] kernel_clone+0x2d7/0x940 [ 136.564754][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 136.564779][ C1] __x64_sys_clone+0x1b6/0x230 [ 136.564797][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 136.564834][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 136.564869][ C1] do_syscall_64+0x166/0x520 [ 136.564894][ C1] ? trace_irq_disable+0x3b/0x140 [ 136.564919][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.564940][ C1] ? clear_bhb_loop+0x70/0xc0 [ 136.564955][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.564966][ C1] RIP: 0033:0x7fd206bc6fd2 [ 136.564977][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 136.564986][ C1] RSP: 002b:00007fd206f4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 136.564998][ C1] RAX: ffffffffffffffda RBX: 00007fd206f4fc60 RCX: 00007fd206bc6fd2 [ 136.565013][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 136.565026][ C1] RBP: 00007fd206f4fdec R08: 0000000000000000 R09: 0000000000000001 [ 136.565040][ C1] R10: 0000555565c107d0 R11: 0000000000000246 R12: 0000000000000001 [ 136.565054][ C1] R13: 00000000000927c0 R14: 0000000000021070 R15: 00007fd206f4fe40 [ 136.565086][ C1] [ 136.565636][ C1] [ 137.152905][ C1] ============================= [ 137.157753][ C1] WARNING: suspicious RCU usage [ 137.162642][ C1] syzkaller #0 Tainted: G W L [ 137.168636][ C1] ----------------------------- [ 137.173514][ C1] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 137.185523][ C1] [ 137.185523][ C1] other info that might help us debug this: [ 137.185523][ C1] [ 137.195792][ C1] [ 137.195792][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 137.203886][ C1] locks held by syz-executor/5629: 9, last CPU#1: [ 137.210291][ C1] #0: ffffffff8fe365f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 137.219028][ C1] #1: ffff888078a31bc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 137.228113][ C1] #2: ffff88802d8b5900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 137.237443][ C1] #3: ffffffff8fd5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 137.247081][ C1] #4: ffff888035305558 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 137.257613][ C1] #5: ffffffff8fd5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 137.267182][ C1] #6: ffff88807d13fd98 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 137.277542][ C1] #7: ffffffff8fd5c9e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 137.287022][ C1] #8: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 137.297555][ C1] [ 137.297555][ C1] stack backtrace: [ 137.303508][ C1] CPU: 1 UID: 0 PID: 5629 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 137.314548][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 137.319746][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.329799][ C1] Call Trace: [ 137.333085][ C1] [ 137.335929][ C1] dump_stack_lvl+0xe8/0x150 [ 137.340550][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 137.345949][ C1] __synchronize_srcu+0x157/0x2f0 [ 137.351003][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 137.356564][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.361660][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.367465][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 137.373037][ C1] ? synchronize_srcu+0x20a/0x260 [ 137.378078][ C1] wakeup_source_unregister+0x129/0x3f0 [ 137.383649][ C1] mmc_host_classdev_release+0x47/0x100 [ 137.389219][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 137.395382][ C1] device_release+0xc4/0x1f0 [ 137.399987][ C1] kobject_put+0x222/0x550 [ 137.404405][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 137.409184][ C1] call_timer_fn+0x18d/0x5f0 [ 137.413772][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 137.420443][ C1] ? call_timer_fn+0xd5/0x5f0 [ 137.425133][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 137.430271][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 137.435475][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 137.442176][ C1] __run_timer_base+0x652/0x8b0 [ 137.447048][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 137.452513][ C1] ? ktime_get+0x1f5/0x220 [ 137.456921][ C1] ? lapic_next_event+0x11/0x20 [ 137.461782][ C1] run_timer_softirq+0xb7/0x170 [ 137.466642][ C1] handle_softirqs+0x226/0x860 [ 137.471409][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 137.476165][ C1] __irq_exit_rcu+0xcb/0x220 [ 137.480770][ C1] irq_exit_rcu+0x9/0x30 [ 137.485027][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 137.490654][ C1] [ 137.493665][ C1] [ 137.496637][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 137.502637][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x20/0x40 [ 137.508878][ C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d bb ba 91 05 00 74 1d 83 3d 8a ea 91 05 00 74 14 65 48 8b 0d 08 54 ad 08 <31> c0 83 b9 a4 0b 00 00 00 0f 94 c0 e9 0f ff 02 00 cc cc cc cc cc [ 137.528487][ C1] RSP: 0018:ffffc90004827248 EFLAGS: 00000202 [ 137.534588][ C1] RAX: 0000000000000000 RBX: ffffffff8244e50a RCX: ffff888078ac5dc0 [ 137.542578][ C1] RDX: 0000000089136d27 RSI: ffffffff8e6f2205 RDI: ffffffff8c6ddc80 [ 137.550558][ C1] RBP: ffffc90004827570 R08: ffffffff8244e50a R09: 0000000000000000 [ 137.558537][ C1] R10: dffffc0000000000 R11: ffffed100b5ed805 R12: dffffc0000000000 [ 137.566545][ C1] R13: 00007fd206df0000 R14: 0000000000013f6f R15: ffff88813fe07040 [ 137.574535][ C1] ? pfn_valid+0xba/0x490 [ 137.578890][ C1] ? pfn_valid+0xba/0x490 [ 137.583232][ C1] ? pfn_valid+0xd6/0x490 [ 137.587571][ C1] pfn_valid+0xdf/0x490 [ 137.591747][ C1] page_table_check_set+0x25/0x530 [ 137.596881][ C1] copy_pmd_range+0x4adc/0x5c10 [ 137.601773][ C1] ? anon_vma_clone+0x3f3/0x9f0 [ 137.606713][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 137.611924][ C1] ? lock_acquire+0x115/0x350 [ 137.616652][ C1] copy_page_range+0xc82/0x1290 [ 137.621520][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 137.626828][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 137.632278][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 137.639224][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 137.645837][ C1] dup_mmap+0xf17/0x1dc0 [ 137.650098][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 137.654770][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.659799][ C1] ? lock_acquire+0x115/0x350 [ 137.664487][ C1] copy_mm+0x115/0x480 [ 137.668560][ C1] copy_process+0x1ea3/0x4480 [ 137.673245][ C1] ? __lock_acquire+0x747/0x2de0 [ 137.678191][ C1] ? copy_process+0xd1c/0x4480 [ 137.682976][ C1] ? __pfx_copy_process+0x10/0x10 [ 137.688024][ C1] kernel_clone+0x2d7/0x940 [ 137.692554][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 137.697602][ C1] __x64_sys_clone+0x1b6/0x230 [ 137.702403][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 137.707721][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 137.713109][ C1] do_syscall_64+0x166/0x520 [ 137.717711][ C1] ? trace_irq_disable+0x3b/0x140 [ 137.722743][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.728809][ C1] ? clear_bhb_loop+0x70/0xc0 [ 137.733478][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.739365][ C1] RIP: 0033:0x7fd206bc6fd2 [ 137.743784][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 137.763382][ C1] RSP: 002b:00007fd206f4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 137.771808][ C1] RAX: ffffffffffffffda RBX: 00007fd206f4fc60 RCX: 00007fd206bc6fd2 [ 137.779775][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 137.787758][ C1] RBP: 00007fd206f4fdec R08: 0000000000000000 R09: 0000000000000001 [ 137.795740][ C1] R10: 0000555565c107d0 R11: 0000000000000246 R12: 0000000000000001 [ 137.803718][ C1] R13: 00000000000927c0 R14: 0000000000021070 R15: 00007fd206f4fe40 [ 137.811704][ C1] [ 137.814798][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 137.814808][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5629, name: syz-executor [ 137.814817][ C1] preempt_count: 103, expected: 0 [ 137.814823][ C1] RCU nest depth: 2, expected: 0 [ 137.814829][ C1] locks held by syz-executor/5629: 9, last CPU#1: [ 137.814837][ C1] #0: ffffffff8fe365f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 137.814893][ C1] #1: ffff888078a31bc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 137.814947][ C1] #2: ffff88802d8b5900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 137.814998][ C1] #3: ffffffff8fd5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 137.815030][ C1] #4: ffff888035305558 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 137.815082][ C1] #5: ffffffff8fd5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 137.815143][ C1] #6: ffff88807d13fd98 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 137.815198][ C1] #7: ffffffff8fd5c9e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 137.815227][ C1] #8: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 137.815271][ C1] Preemption disabled at: [ 137.815277][ C1] [<0000000000000000>] 0x0 [ 137.815304][ C1] CPU: 1 UID: 0 PID: 5629 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 137.815335][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 137.815343][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.815356][ C1] Call Trace: [ 137.815364][ C1] [ 137.815372][ C1] dump_stack_lvl+0xe8/0x150 [ 137.815393][ C1] __might_resched+0x36a/0x4c0 [ 137.815413][ C1] __synchronize_srcu+0x1a1/0x2f0 [ 137.815428][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 137.815445][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.815490][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 137.815512][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 137.815539][ C1] ? synchronize_srcu+0x20a/0x260 [ 137.815565][ C1] wakeup_source_unregister+0x129/0x3f0 [ 137.815586][ C1] mmc_host_classdev_release+0x47/0x100 [ 137.815605][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 137.815629][ C1] device_release+0xc4/0x1f0 [ 137.815655][ C1] kobject_put+0x222/0x550 [ 137.815685][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 137.815711][ C1] call_timer_fn+0x18d/0x5f0 [ 137.815740][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 137.815763][ C1] ? call_timer_fn+0xd5/0x5f0 [ 137.815777][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 137.815796][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 137.815807][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 137.815830][ C1] __run_timer_base+0x652/0x8b0 [ 137.815872][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 137.815903][ C1] ? ktime_get+0x1f5/0x220 [ 137.815927][ C1] ? lapic_next_event+0x11/0x20 [ 137.815953][ C1] run_timer_softirq+0xb7/0x170 [ 137.815967][ C1] handle_softirqs+0x226/0x860 [ 137.815983][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 137.816002][ C1] __irq_exit_rcu+0xcb/0x220 [ 137.816027][ C1] irq_exit_rcu+0x9/0x30 [ 137.816054][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 137.816079][ C1] [ 137.816086][ C1] [ 137.816096][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 137.816119][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x20/0x40 [ 137.816142][ C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d bb ba 91 05 00 74 1d 83 3d 8a ea 91 05 00 74 14 65 48 8b 0d 08 54 ad 08 <31> c0 83 b9 a4 0b 00 00 00 0f 94 c0 e9 0f ff 02 00 cc cc cc cc cc [ 137.816152][ C1] RSP: 0018:ffffc90004827248 EFLAGS: 00000202 [ 137.816162][ C1] RAX: 0000000000000000 RBX: ffffffff8244e50a RCX: ffff888078ac5dc0 [ 137.816170][ C1] RDX: 0000000089136d27 RSI: ffffffff8e6f2205 RDI: ffffffff8c6ddc80 [ 137.816178][ C1] RBP: ffffc90004827570 R08: ffffffff8244e50a R09: 0000000000000000 [ 137.816186][ C1] R10: dffffc0000000000 R11: ffffed100b5ed805 R12: dffffc0000000000 [ 137.816194][ C1] R13: 00007fd206df0000 R14: 0000000000013f6f R15: ffff88813fe07040 [ 137.816213][ C1] ? pfn_valid+0xba/0x490 [ 137.816241][ C1] ? pfn_valid+0xba/0x490 [ 137.816275][ C1] ? pfn_valid+0xd6/0x490 [ 137.816300][ C1] pfn_valid+0xdf/0x490 [ 137.816330][ C1] page_table_check_set+0x25/0x530 [ 137.816348][ C1] copy_pmd_range+0x4adc/0x5c10 [ 137.816362][ C1] ? anon_vma_clone+0x3f3/0x9f0 [ 137.816387][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 137.816415][ C1] ? lock_acquire+0x115/0x350 [ 137.816455][ C1] copy_page_range+0xc82/0x1290 [ 137.816505][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 137.816529][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 137.816542][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 137.816555][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 137.816570][ C1] dup_mmap+0xf17/0x1dc0 [ 137.816604][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 137.816634][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 137.816680][ C1] ? lock_acquire+0x115/0x350 [ 137.816715][ C1] copy_mm+0x115/0x480 [ 137.816731][ C1] copy_process+0x1ea3/0x4480 [ 137.816745][ C1] ? __lock_acquire+0x747/0x2de0 [ 137.816763][ C1] ? copy_process+0xd1c/0x4480 [ 137.816807][ C1] ? __pfx_copy_process+0x10/0x10 [ 137.816849][ C1] kernel_clone+0x2d7/0x940 [ 137.816886][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 137.816916][ C1] __x64_sys_clone+0x1b6/0x230 [ 137.816934][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 137.816963][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 137.816996][ C1] do_syscall_64+0x166/0x520 [ 137.817021][ C1] ? trace_irq_disable+0x3b/0x140 [ 137.817045][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.817068][ C1] ? clear_bhb_loop+0x70/0xc0 [ 137.817091][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.817102][ C1] RIP: 0033:0x7fd206bc6fd2 [ 137.817115][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 137.817124][ C1] RSP: 002b:00007fd206f4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 137.817135][ C1] RAX: ffffffffffffffda RBX: 00007fd206f4fc60 RCX: 00007fd206bc6fd2 [ 137.817143][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 137.817155][ C1] RBP: 00007fd206f4fdec R08: 0000000000000000 R09: 0000000000000001 [ 137.817169][ C1] R10: 0000555565c107d0 R11: 0000000000000246 R12: 0000000000000001 [ 137.817183][ C1] R13: 00000000000927c0 R14: 0000000000021070 R15: 00007fd206f4fe40 [ 137.817215][ C1] [ 137.817227][ C1] ODEBUG: object ffffc90000a08a80 is NOT on stack ffffc90004820000, but annotated. [ 137.817706][ C1] ------------[ cut here ]------------ [ 137.817713][ C1] 1 [ 137.817720][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz-executor/5629 [ 138.483007][ C1] Modules linked in: [ 138.486919][ C1] CPU: 1 UID: 0 PID: 5629 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 138.497941][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 138.503136][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 138.513200][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 138.519100][ C1] Code: ff 06 cc 41 ff c7 44 89 3d 69 85 e7 16 48 c7 c1 80 e5 6d 8c 48 c7 c7 e0 e5 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ed 6d 3b fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 01 84 6c 0b 3b 05 ff [ 138.538730][ C1] RSP: 0018:ffffc90000a089b8 EFLAGS: 00010046 [ 138.544819][ C1] RAX: 0000000000000050 RBX: ffffc90000a08a80 RCX: 3bf15d9aac4fa800 [ 138.552825][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 138.560844][ C1] RBP: ffff888078ac5de0 R08: 0000000000000100 R09: 1ffffffff20d24e8 [ 138.568828][ C1] R10: dffffc0000000000 R11: fffffbfff20d24e9 R12: 1ffff9200014114c [ 138.576794][ C1] R13: ffff88802aee59d8 R14: dffffc0000000000 R15: 0000000000000001 [ 138.584783][ C1] FS: 0000555565c10500(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 138.593728][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.600327][ C1] CR2: 00007f1a2d69cd58 CR3: 00000000798f4000 CR4: 00000000003526f0 [ 138.608322][ C1] Call Trace: [ 138.611610][ C1] [ 138.614469][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 138.620142][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 138.625214][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 138.630763][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 138.635828][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 138.641652][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 138.647240][ C1] ? synchronize_srcu+0x20a/0x260 [ 138.652264][ C1] wakeup_source_unregister+0x129/0x3f0 [ 138.657842][ C1] mmc_host_classdev_release+0x47/0x100 [ 138.663418][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 138.669606][ C1] device_release+0xc4/0x1f0 [ 138.674211][ C1] kobject_put+0x222/0x550 [ 138.678659][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 138.683426][ C1] call_timer_fn+0x18d/0x5f0 [ 138.688037][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 138.694717][ C1] ? call_timer_fn+0xd5/0x5f0 [ 138.699456][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 138.704623][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.710084][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 138.716771][ C1] __run_timer_base+0x652/0x8b0 [ 138.721642][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 138.727021][ C1] ? ktime_get+0x1f5/0x220 [ 138.731441][ C1] ? lapic_next_event+0x11/0x20 [ 138.736304][ C1] run_timer_softirq+0xb7/0x170 [ 138.741174][ C1] handle_softirqs+0x226/0x860 [ 138.745978][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 138.750836][ C1] __irq_exit_rcu+0xcb/0x220 [ 138.755437][ C1] irq_exit_rcu+0x9/0x30 [ 138.759687][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 138.765337][ C1] [ 138.768280][ C1] [ 138.771208][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 138.777232][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x20/0x40 [ 138.783510][ C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d bb ba 91 05 00 74 1d 83 3d 8a ea 91 05 00 74 14 65 48 8b 0d 08 54 ad 08 <31> c0 83 b9 a4 0b 00 00 00 0f 94 c0 e9 0f ff 02 00 cc cc cc cc cc [ 138.803120][ C1] RSP: 0018:ffffc90004827248 EFLAGS: 00000202 [ 138.809206][ C1] RAX: 0000000000000000 RBX: ffffffff8244e50a RCX: ffff888078ac5dc0 [ 138.817203][ C1] RDX: 0000000089136d27 RSI: ffffffff8e6f2205 RDI: ffffffff8c6ddc80 [ 138.825191][ C1] RBP: ffffc90004827570 R08: ffffffff8244e50a R09: 0000000000000000 [ 138.833205][ C1] R10: dffffc0000000000 R11: ffffed100b5ed805 R12: dffffc0000000000 [ 138.841194][ C1] R13: 00007fd206df0000 R14: 0000000000013f6f R15: ffff88813fe07040 [ 138.849176][ C1] ? pfn_valid+0xba/0x490 [ 138.853519][ C1] ? pfn_valid+0xba/0x490 [ 138.857859][ C1] ? pfn_valid+0xd6/0x490 [ 138.862203][ C1] pfn_valid+0xdf/0x490 [ 138.866385][ C1] page_table_check_set+0x25/0x530 [ 138.871508][ C1] copy_pmd_range+0x4adc/0x5c10 [ 138.876360][ C1] ? anon_vma_clone+0x3f3/0x9f0 [ 138.881270][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 138.886479][ C1] ? lock_acquire+0x115/0x350 [ 138.891172][ C1] copy_page_range+0xc82/0x1290 [ 138.896076][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 138.901393][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 138.906874][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 138.913841][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 138.920497][ C1] dup_mmap+0xf17/0x1dc0 [ 138.924821][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 138.929542][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 138.934592][ C1] ? lock_acquire+0x115/0x350 [ 138.939322][ C1] copy_mm+0x115/0x480 [ 138.943414][ C1] copy_process+0x1ea3/0x4480 [ 138.948118][ C1] ? __lock_acquire+0x747/0x2de0 [ 138.953070][ C1] ? copy_process+0xd1c/0x4480 [ 138.957837][ C1] ? __pfx_copy_process+0x10/0x10 [ 138.962891][ C1] kernel_clone+0x2d7/0x940 [ 138.967411][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 138.972487][ C1] __x64_sys_clone+0x1b6/0x230 [ 138.977274][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 138.982571][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 138.987908][ C1] do_syscall_64+0x166/0x520 [ 138.992535][ C1] ? trace_irq_disable+0x3b/0x140 [ 138.997603][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.003762][ C1] ? clear_bhb_loop+0x70/0xc0 [ 139.008458][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.014349][ C1] RIP: 0033:0x7fd206bc6fd2 [ 139.018955][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 139.038590][ C1] RSP: 002b:00007fd206f4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 139.047010][ C1] RAX: ffffffffffffffda RBX: 00007fd206f4fc60 RCX: 00007fd206bc6fd2 [ 139.055007][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 139.062981][ C1] RBP: 00007fd206f4fdec R08: 0000000000000000 R09: 0000000000000001 [ 139.070953][ C1] R10: 0000555565c107d0 R11: 0000000000000246 R12: 0000000000000001 [ 139.078935][ C1] R13: 00000000000927c0 R14: 0000000000021070 R15: 00007fd206f4fe40 [ 139.086935][ C1] [ 139.089956][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.097256][ C1] CPU: 1 UID: 0 PID: 5629 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 139.108312][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 139.113536][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.123616][ C1] Call Trace: [ 139.126907][ C1] [ 139.129845][ C1] vpanic+0x56d/0xa60 [ 139.133852][ C1] ? __pfx__printk+0x10/0x10 [ 139.138543][ C1] ? __pfx_vpanic+0x10/0x10 [ 139.143080][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 139.148389][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 139.153692][ C1] panic+0xc5/0xd0 [ 139.157413][ C1] ? __pfx_panic+0x10/0x10 [ 139.161854][ C1] __warn+0x315/0x4c0 [ 139.165836][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 139.171140][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 139.176453][ C1] __report_bug+0x276/0x570 [ 139.180973][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 139.186456][ C1] ? __pfx___report_bug+0x10/0x10 [ 139.191488][ C1] ? __wake_up_klogd+0xf0/0x130 [ 139.196374][ C1] ? vprintk_emit+0x4ee/0x560 [ 139.201082][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 139.206142][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 139.211454][ C1] report_bug+0x16b/0x220 [ 139.215785][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 139.221073][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 139.226368][ C1] handle_bug+0x9c/0x200 [ 139.230612][ C1] exc_invalid_op+0x1a/0x50 [ 139.235128][ C1] asm_exc_invalid_op+0x1a/0x20 [ 139.239990][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 139.245908][ C1] Code: ff 06 cc 41 ff c7 44 89 3d 69 85 e7 16 48 c7 c1 80 e5 6d 8c 48 c7 c7 e0 e5 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ed 6d 3b fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 01 84 6c 0b 3b 05 ff [ 139.265523][ C1] RSP: 0018:ffffc90000a089b8 EFLAGS: 00010046 [ 139.271699][ C1] RAX: 0000000000000050 RBX: ffffc90000a08a80 RCX: 3bf15d9aac4fa800 [ 139.279687][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 139.287654][ C1] RBP: ffff888078ac5de0 R08: 0000000000000100 R09: 1ffffffff20d24e8 [ 139.295646][ C1] R10: dffffc0000000000 R11: fffffbfff20d24e9 R12: 1ffff9200014114c [ 139.303639][ C1] R13: ffff88802aee59d8 R14: dffffc0000000000 R15: 0000000000000001 [ 139.311638][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 139.316965][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 139.322534][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 139.327562][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 139.333111][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 139.338149][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 139.343962][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 139.349530][ C1] ? synchronize_srcu+0x20a/0x260 [ 139.354554][ C1] wakeup_source_unregister+0x129/0x3f0 [ 139.360115][ C1] mmc_host_classdev_release+0x47/0x100 [ 139.365699][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 139.371853][ C1] device_release+0xc4/0x1f0 [ 139.376459][ C1] kobject_put+0x222/0x550 [ 139.380889][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 139.385675][ C1] call_timer_fn+0x18d/0x5f0 [ 139.390284][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 139.396956][ C1] ? call_timer_fn+0xd5/0x5f0 [ 139.401689][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 139.406827][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.412021][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 139.418743][ C1] __run_timer_base+0x652/0x8b0 [ 139.423615][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 139.428999][ C1] ? ktime_get+0x1f5/0x220 [ 139.433431][ C1] ? lapic_next_event+0x11/0x20 [ 139.438297][ C1] run_timer_softirq+0xb7/0x170 [ 139.443161][ C1] handle_softirqs+0x226/0x860 [ 139.447936][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 139.452729][ C1] __irq_exit_rcu+0xcb/0x220 [ 139.457319][ C1] irq_exit_rcu+0x9/0x30 [ 139.461569][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 139.467209][ C1] [ 139.470139][ C1] [ 139.473076][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.479046][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x20/0x40 [ 139.485294][ C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d bb ba 91 05 00 74 1d 83 3d 8a ea 91 05 00 74 14 65 48 8b 0d 08 54 ad 08 <31> c0 83 b9 a4 0b 00 00 00 0f 94 c0 e9 0f ff 02 00 cc cc cc cc cc [ 139.504932][ C1] RSP: 0018:ffffc90004827248 EFLAGS: 00000202 [ 139.511017][ C1] RAX: 0000000000000000 RBX: ffffffff8244e50a RCX: ffff888078ac5dc0 [ 139.518996][ C1] RDX: 0000000089136d27 RSI: ffffffff8e6f2205 RDI: ffffffff8c6ddc80 [ 139.526979][ C1] RBP: ffffc90004827570 R08: ffffffff8244e50a R09: 0000000000000000 [ 139.534954][ C1] R10: dffffc0000000000 R11: ffffed100b5ed805 R12: dffffc0000000000 [ 139.542924][ C1] R13: 00007fd206df0000 R14: 0000000000013f6f R15: ffff88813fe07040 [ 139.550908][ C1] ? pfn_valid+0xba/0x490 [ 139.555239][ C1] ? pfn_valid+0xba/0x490 [ 139.559564][ C1] ? pfn_valid+0xd6/0x490 [ 139.563987][ C1] pfn_valid+0xdf/0x490 [ 139.568170][ C1] page_table_check_set+0x25/0x530 [ 139.573308][ C1] copy_pmd_range+0x4adc/0x5c10 [ 139.578169][ C1] ? anon_vma_clone+0x3f3/0x9f0 [ 139.583046][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 139.588451][ C1] ? lock_acquire+0x115/0x350 [ 139.593162][ C1] copy_page_range+0xc82/0x1290 [ 139.598033][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 139.603446][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 139.608918][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 139.615868][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 139.622489][ C1] dup_mmap+0xf17/0x1dc0 [ 139.626800][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 139.631509][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 139.636590][ C1] ? lock_acquire+0x115/0x350 [ 139.641291][ C1] copy_mm+0x115/0x480 [ 139.645387][ C1] copy_process+0x1ea3/0x4480 [ 139.650109][ C1] ? __lock_acquire+0x747/0x2de0 [ 139.655077][ C1] ? copy_process+0xd1c/0x4480 [ 139.659865][ C1] ? __pfx_copy_process+0x10/0x10 [ 139.664909][ C1] kernel_clone+0x2d7/0x940 [ 139.669442][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 139.674508][ C1] __x64_sys_clone+0x1b6/0x230 [ 139.679293][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 139.684611][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 139.689921][ C1] do_syscall_64+0x166/0x520 [ 139.694531][ C1] ? trace_irq_disable+0x3b/0x140 [ 139.699566][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.705634][ C1] ? clear_bhb_loop+0x70/0xc0 [ 139.710324][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.716218][ C1] RIP: 0033:0x7fd206bc6fd2 [ 139.720679][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 139.740310][ C1] RSP: 002b:00007fd206f4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 139.748728][ C1] RAX: ffffffffffffffda RBX: 00007fd206f4fc60 RCX: 00007fd206bc6fd2 [ 139.756724][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 139.764722][ C1] RBP: 00007fd206f4fdec R08: 0000000000000000 R09: 0000000000000001 [ 139.772703][ C1] R10: 0000555565c107d0 R11: 0000000000000246 R12: 0000000000000001 [ 139.780688][ C1] R13: 00000000000927c0 R14: 0000000000021070 R15: 00007fd206f4fe40 [ 139.788678][ C1] [ 139.791967][ C1] Kernel Offset: disabled [ 139.796296][ C1] Rebooting in 86400 seconds..