last executing test programs: 7.477208537s ago: executing program 3 (id=2845): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 7.410881283s ago: executing program 3 (id=2846): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 7.321045937s ago: executing program 3 (id=2848): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r8, 0x14, 0x0, @val=@perf_event={0x2}}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x128, 0x700001b, 0x148, 0x128, 0x148, 0x220, 0x206, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0x158, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@cluster={{0x30}, {0x9, 0xa, 0x7, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x1, 0x2, 0x4, 0x1, 0x2], 0x1, 0x6}, {0xffffffffffffffff, [0x0, 0x1, 0x1, 0x0, 0x7, 0x2], 0x0, 0x2}}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0xffffff00, 'virt_wifi0\x00', 'syzkaller1\x00', {0xff}, {}, 0x9d, 0x2, 0x18}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x0, 0x3, 0x0, 0x1, 0x5], 0x3, 0x7}, {0xffffffffffffffff, [0x1, 0x6, 0x4, 0x0, 0x2, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) socket$inet6(0xa, 0x3, 0x7) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r11, 0x84, 0xf, 0x0, &(0x7f0000000240)=0x9700) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000f07000)}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa0042, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r12, &(0x7f0000000180)='100', 0x3) r13 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r13, &(0x7f0000000200)='1', 0x1) r14 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r14, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x19}], 0x1) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) 7.119898641s ago: executing program 3 (id=2851): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}}, 0x40) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x80000, 0x1, 0x4e}, &(0x7f00000001c0), &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f0000000040)) syz_io_uring_submit(r11, r8, r9, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}) io_uring_enter(r7, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120108001964d408861a92e009000000030109022400010200100309041f0202e917f30009050202000202000009058a020002"], 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70200001400000090030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000a600000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.553762401s ago: executing program 3 (id=2858): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) ptrace$getregs(0xc, r0, 0x10000000000004, &(0x7f0000000140)=""/199) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000204e040b12000000000001090224000100006b2c090400feffffff0000092100800901221800090581031000fc0800"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) unshare(0x22020600) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xe}, @l2cap_cid_le_signaling={{0xa}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x6}, {0xffbd, 0xff46, [0x8e]}}}}, 0x13) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) fdatasync(r2) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) socket$kcm(0x29, 0x5, 0x0) 5.316768246s ago: executing program 0 (id=2860): socket$inet6(0xa, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xde9f, 0x1000, 0x2, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r5, r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x800, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b75, 0x800, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b6e, 0x200, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x6, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 5.218903393s ago: executing program 1 (id=2861): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d640500000000007504040000100000206a07fefe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1eee000000f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0d"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r8, 0x14, 0x0, @val=@perf_event={0x2}}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x128, 0x700001b, 0x148, 0x128, 0x148, 0x220, 0x206, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0x158, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@cluster={{0x30}, {0x9, 0xa, 0x7, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x1, 0x2, 0x4, 0x1, 0x2], 0x1, 0x6}, {0xffffffffffffffff, [0x0, 0x1, 0x1, 0x0, 0x7, 0x2], 0x0, 0x2}}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0xffffff00, 'virt_wifi0\x00', 'syzkaller1\x00', {0xff}, {}, 0x9d, 0x2, 0x18}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x0, 0x3, 0x0, 0x1, 0x5], 0x3, 0x7}, {0xffffffffffffffff, [0x1, 0x6, 0x4, 0x0, 0x2, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) socket$inet6(0xa, 0x3, 0x7) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r11, 0x84, 0xf, 0x0, &(0x7f0000000240)=0x9700) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r12, &(0x7f0000000180)='100', 0x3) r13 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r13, &(0x7f0000000200)='1', 0x1) r14 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r14, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x19}], 0x1) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) 5.160932944s ago: executing program 0 (id=2863): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe801af1e75255d74aed0eabf2fe00000000000000210000000000bbfe8000000000009128000000000000bbac1e000100000000000000000000008a00"/116, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000007f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005007f000001000000000000000000000000000000003c00000000000000ff01000000000000000000000000000100"/204], 0x174}}, 0x0) 5.024925123s ago: executing program 2 (id=2864): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r3, &(0x7f0000000840)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000680)="5f150f107ac3e05b42b4425cd3c8b40437ea0213fe93ef7b865e907684d2faa297c7ccc1adac82421e8f8951b2277448e812f3f56164a3d6f7b80a24d275f6", 0x3f}, {&(0x7f00000006c0)}], 0x3}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x110, 0x2c8, 0xfeffffff, 0x2c8, 0x2c8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7, 0x1}}, @common=@inet=@multiport={{0x50}, {0x1, 0x7, [0x4e20, 0x4e22, 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4f24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x4e1f], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x0, 0x0, 0x0, 0x3]}}}, @common=@ttl={{0x28}, {0x3, 0xb}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66, @gre_key=0x9}}}}, {{@ip={@local, @remote, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) clock_gettime(0x0, &(0x7f0000002c80)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000580)=""/74, 0x4a}, {&(0x7f0000000880)=""/208, 0xd0}, {&(0x7f0000002d00)=""/4109, 0x100d}, {&(0x7f0000001980)=""/223, 0xdf}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x5, &(0x7f0000002b00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}], 0x1, 0x40, &(0x7f0000002cc0)={r6, r7+10000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r5, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) r8 = socket(0xa, 0x3, 0x3a) getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.723486094s ago: executing program 1 (id=2865): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) r1 = socket(0x10, 0x803, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000000)=0x80000001) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000100)={0xfee00000, 0x10000}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="68100000100039042cbd7000ffdbdf3506000003", @ANYRES32=0x0, @ANYBLOB="8300040000000000480012800b00010069703667726500003800028006000f000600000005001700000000000500170000000000060010004e2000001400070000000000000000000000ffffac1414bb"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 4.469519805s ago: executing program 1 (id=2867): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="20c81e7603152fe103a999b6836d8ad040abd00000004d61501d01000000000000003100b09245c689ac5dc275b2f5560000cf9d1bc774a0f636cee55acf0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x11, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x7, 0x2, 0x0, 0x3}, {0x2f6, 0x29, 0x8, 0x7f}, {0x0, 0x80, 0xa5, 0xdd2f}, {0x2, 0x1, 0x7, 0x8}, {0x2, 0x80, 0xa, 0x5}]}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0xfb, 0x0, 0xfffff010}, {0x6}]}, 0x10) r5 = socket(0x2b, 0x1, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xb, 0xe}, {0x10, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x400cc00}, 0x200c0090) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x38, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3a86dd6c00001e00022b01fe880000000000000000000000000101ff02000000000000fcb55c00000000000000"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, 0x0) r8 = mq_open(&(0x7f0000000040)='eth0\x00', 0x42, 0x0, 0x0) r9 = mq_open(&(0x7f00000002c0)='eth0\x00', 0x1, 0x40, 0x0) mq_notify(r9, &(0x7f0000000540)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}) r10 = syz_open_dev$sndctrl(&(0x7f0000001300), 0x7cda, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r10, 0xc10c5541, &(0x7f0000001340)={0x0, 0x6, 0x1}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r10, 0xc0045516, &(0x7f0000000000)=0x40) mq_timedsend(r8, 0x0, 0x0, 0x1, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f0000000000)={r13, 0xfffa, 0x0, 0x9, 0x7fffffff, 0x6fea}, 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000080)={0x8574, 0xa, 0x8, 0x5, r13}, &(0x7f00000000c0)=0x10) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) 3.395167931s ago: executing program 0 (id=2868): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}}, 0x40) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x80000, 0x1, 0x4e}, &(0x7f00000001c0), &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f0000000040)) syz_io_uring_submit(r11, r8, r9, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}) io_uring_enter(r7, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120108001964d408861a92e009000000030109022400010200100309041f0202e917f30009050202000202000009058a020002"], 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000bf030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000a600000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.350229735s ago: executing program 2 (id=2869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0118020003110000240012800b000100697036746e6c00001400028008000100", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x8000}, 0x0) 3.305402671s ago: executing program 1 (id=2870): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00') mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={{0x0, 0x2710}, {r2, r3/1000+10000}}, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)='\b\x00\x00\x00', 0x4}], 0x1) ioctl(r0, 0x5, &(0x7f0000000400)="d390bad4efd102299b0fca105a0a929bd8c2c401ce06f75f445c2318acda243d41b8429e41726bd28422ac3b76fca573b56478ef5ac54e803fb017ff1d9bad1d6981be9a64cfb6126d4cede94d61737566d917d1fa1e6e7cef5b3243fc97b8aab6818e8f7fea427fca3d5568fe3fd093") setrlimit(0x1, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20054000}, 0x440d0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r5) recvmmsg(r5, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f00000000c0)=""/139, 0x8b}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000440)=""/159, 0x9f}], 0x6}, 0xa}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x2, 0x2062, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e00010000000000000000000c000100050004000000b595"], 0x1c}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_trace', 0x20000, 0x24) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000680)={{&(0x7f0000003000/0x2000)=nil, 0x2000}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES64=r9, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x444c1}, 0x40040d4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x751, 0x1, 0x1, 0x9, {{0x5, 0x4, 0x0, 0x19, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @private=0xa0100ff, @rand_addr=0x640100fd}}}}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf25010000000800050000000000140002007767300000000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x42000085}, 0x80004) add_key(&(0x7f00000013c0)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xffee, 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r4) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r11, 0x200, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x20000001) getdents(r0, &(0x7f0000000f40)=""/243, 0xf3) 3.18542195s ago: executing program 2 (id=2871): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8083, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x69f9, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000005500)={0x1, 0x0, {0x20003fc, 0x80000000, 0x3007, 0x0, 0xc, 0x7, 0x1}}) r2 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r2, &(0x7f0000005b00)={0x2020}, 0x2020) 3.109818306s ago: executing program 4 (id=2872): r0 = socket(0xa, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) keyctl$clear(0x3, 0xfffffffffffffffc) request_key(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000240)='$\x00', 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000100), 0x0, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000140)=0xd, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000000c0)={0x6}) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fcntl$setstatus(r3, 0x4, 0x2000) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000040)) shutdown(r3, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) 3.060084081s ago: executing program 1 (id=2873): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bf001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x7c, &(0x7f0000000600)={0x40, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00000003c0)) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x4, 0x60800) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x303000, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000001840)={&(0x7f00000017c0)=[{0xfffe, 0x1810, 0xcc, &(0x7f0000000240)="543fd25736d4f992637cc6275fdfbc80a1aa96e75b070f2e4b26d39a8954ab5e2cc0e31d07c7b2da5280f176d747b7441f40767a986f17256dc6c88aaef40e00c2dafba43dea527a6f651a728f43d29fb897a317337dc6f28b7180b6b64fc8923e4ca567ba7be3a695f1a73ef3f3990dc639bb8f08865291901948271325ebd3d0e3b8b7882176e6065857a9b5c5e618db0b30dd780f0d55a67c03b7c58f9cf41c2a949986fdee8d7e42db2a0a8f88f974652528c7b3949355f6563068f89765f8116f43ab9e9d32bc32225a"}, {0xff22, 0x2000, 0xaf, &(0x7f0000000340)="a69c70d23fead78ec34f8931e900066bb7bd17fcd6b988a76e362ba0f9adbcf1a0601c1e611e01e1077da5f974ffd6087f903e87d6f7edef9255a1f3a47eb839775f2f2629c2dddd363ad2d6d36aa90bd6f62e50a0de3991ec4e35024fdc6579e34d456ed082e4c92e4f4103b77107955bfea04815edc54ab0f5d74d97cd6591779d79bd2e3663a748a466f1565e6cb4681ca49d843320bfa453b6883174857bfd5586d642d66c2025b49cd353307a"}, {0x9, 0x8001, 0x4, &(0x7f0000000400)="f79feb73"}, {0xfff, 0x800, 0x1000, &(0x7f0000000640)="ef248e30ab8b85c89d2428e537696549dd2740d9134ac18d1da29ac4b7a806ae9511dcfe30af9af9f1b09b9f9861b5cd6fef81132bf41a6fc0cbd9d8fd6b9e0a7fa42b35830d1b64a9e63082821ea63aec2c0275161c93870f6e9ea0dd89bbcabba16414f435f756ed02dc8487543e2fe3b9b1badf905df1da0b7e1eff52df4295ebf412cb5aaa9d631c35d7104a815722defc739d0994b3c369a4f9b47615e7eee72da43606ee0279d870ba1437208bcaf588e844fc1fa9873ac95ef5c570331e1a68c41ebeaf57d3b2182af8f609147ad05e68502886562e090822eb5cc3b49aa617b851048f3dda099a1bba28d33e827ea6da5d0dbe5d02089022e5943b718b2b72a3cced9ac6bc0b964f7408c8dd462e7034986506686f3215cf242a5cff57a460fb681bd0131eaebce2ebcacef28265f594b6b9d011e0f809f3484e279ce64afbb1f1a30428c46747dc90c2fa3bff9ccebfcf090b0af228290bad8cae2e346091279edecf281a6465f4d045825230b3b3d3589fd49588a934fedf14a3c5af693f9a680a422fb154e2f4cda5ee5015d4d6cba08fa934ce4c1d3b42c7079954f998841a0c3fc053bd1660eb54d7320650052e863d8394fbedd747c293c75f13a0ed75d7d652c09d2cb982986c24a05a47dc45a254f9812da61cc136cfec37641aaf98f93d77bc597ee56e9ccfa908226a28fb817f54d140927ba1b115267487986b6c250e0296aa9ad6f6b35c31b42fb962d54b149201b713690204dd256c7bcb6191f43db8bdf1a0a79a4b2280e3d6997acd1c8ed06de772de36c11c4c8bbe611fc469c1416a3be86b0eeae8399a77e6ffb5cef06d844c92259a55a576ea5f8ecd794a54d1a82e1a0e617513d58b55743aa5715f6bedcab4281c9dd7f418640cb2e482f399c6462448cd6094e112b4317d6a8e837a03fb8a2ddf5f6cb06df4400a59d9bbf3521bfecf9f5ae802f3c5566fafa1ae934e2ff15df4eaa61f92d36a65f9647d937196d7725e9b01c3aa18c45acc0634c82dcb1c4ab9d477afb98c4e59a89f4cf25c9e637d2c0cb7260f16618d4da18ef03a25fd779ae5b2b798ef500f5e017082cda9b14c8fd8d1a1f0691080b06945b88ad174f9cbbb249050ce977e8094fb6c66b3cf3d62f90df19f3cda33b1b97b93e7c6f9c392f70ed61a89ed51cbd1abcbab77818e985e945acf09653c7cd2281e4372cc0b50a2265ac4c6e98acba369b62990e2e29aa31d83bd18d0c366df51bd40db44ea338bd2132d2fb670a3c142738a9b869714e76cca767e59a1699d53047abe4f17911b8731c75dafe26e0e92ab3e6a4367bda259a7b00ac3ffd963e5c6e67b440a7d2c08173654577d0d8d71d6aeb395e62e3a6df94f46873ebd9938131c1bcbd651733ec67314575ec3d748647981ad10185fc2c8c48e621af9374881c0a9bb9fc0f414517b08afe5a859e04f44f83c5d62efbce4bde9f47f959c85047dbb81f80e239f30b49057865886bb0555b78bf69137dfc4ea97abdd20d58d7d9a0ccf917332e54556b9ec722dee3137ec65ab685f61a116f985b1e9d34b267d0c3df3223fae8509e26775d2618ad4bec9de48c2bfadd4da897e29bed5e0356b6d3cfae5e678c889ff887961b7a3980eaee182df35550cb5e9c6aa838d3191af5afd79bc593034f788d89d1d0a2adebd4063295e02795422a9ae5c64b15e7b17f8d090ddbc621844073fd73d4a2e358df40089a6809002946dab8ffcef6df95ea062dcb184062e865d5cf96bc1b032fe5941649836e655517ba491c2ed46514c5f04ae8d6f840f30bd0598bcf3b52b9b9cbf795bf9a8f60816d1775e8756ed2f7f36553148090e4fb8274eeee31330f69a552de09410e74a4979eb248c8c4fe8d1710144ca09e7995139f1537c6dc7ea1bfd8afb9d2b58f45cb7463914bcdf6c5de9dc464d121839064a9410eb43cef427bd8983fb104f7572f2e8253ba6435f903dd7147de33d24a921fcaa52d04c9b1e3d795cdef36a67c6d9bc2b1b32367fd5a8a514d7432c263fd718765539fd3c27dc8b121bee8b0300ee141af0324822300c6e7a0128d319e8923828071b14a4a7dab32b81dae6d55cd7023d1c9ceb766839ebbc3152a32fc4231c32bd31e083fa26faf199f0d0a504b6fe620914b4acbda959f5b3bd181dae2a87ffd080f290b6a26b6b2fc92cc03a80057220d87b1116e1c9f68702bf2d5c6e4f85ebf82c9be3141c846bb5025e963f660b871c264d12652b7f53d3d65a5ea1d7affcd5f1c9697f821aa38dd1ab27b453eb8bc5ee8794d79c4af0b17cd4fd0b9def93f40c23649a473f360af6d523fbc92aac71484bafa8b698a79b410306ca7840acf6ac98161b34694c5ca828bc54fe1c7fe04de6a8eeceed8ec439c021b34bea1a4c6a23e481100475785a26acf1c1ebc27bb609791affcac1a0f76e6a76c175a5c4f1120179ce2d27d5035d9712510e083d8682e1a1c099a34964e55ed638b9e1b4ab9a58eb1820123d088df56ea6a9644fe13b8174e35322cde7587da1d4088ce8d2f50fe6075c6f08dfc1cb0b8e395e4b97ea61478028ce480d33ff12be50a055667012a0874a878a962dd9eb6b3ef2e456cdfec0c6a08a9a3b5fba8fab27bcb91b808e76fe6165a82451fff064c5f64e2151cd170cf29fb3be8fb1c07046a0b6608b470d3396f3e6b993a57569244581248b59bacb8f48445aaefd71e9ac3ddd68e3a1dd894aa88ee58b7cf2ee05ccfcde7d0a185ffe7233f6f961aea87b8a47ca69e333ea6c18e7b9957868ed5fa6f9b8c70dc1c75d178eb260704001ac2f906fddc7029dfadb11156a60539cfc1ce8248150d98d4b1065faac7e94bca3df54d9a5bf5bfe9f8c0eb12bbe1b0253ec17348042fdffef643e6447640de5fce2618b08170c87fe41add1e84791bbc43bd50b02017e6008844321c8530433965472f03ec514720103b41e6a0b0250daec8bcccfa9fd5cb99c2bb95b50f61e2970d26851f4f9b15f915a403f16b8f2b43b7166d829e86cb11f7dc6d37c86ef3445e8ded8f439823cbbcb73f90fb632901f1cc8776c1004bb99b3141601f5fa541c721c089f753e36454aa3f0ee637c70c9642a7a48cc5cdc1d7ee9432c54a1ebdbbec548fc8d32028c44df1dadb499334078cf5e41807dda1d94bcb7a015578054b21c1d615400fd680d63d55c396bae1e77dc1f867d9b44951d151c34d99349f3c8813a9d8442d9a8b98eb7007db03b842d3b82948d488d63c5cfd2de0a051ca0563b180152027568be64103926f9a777996b052216d6489e391b3c5e080760892de70c7ccfab88de88a1b9daa4123bd3dbf4d1df85ad164b679a7d4143bc318f982524bac21d6ff7a5b8afcaf79f8378510de9c5d74cd32d78b3bde1eac17f9c0e6676be3144dbb9ff3e91de0bbf4d80ddd23f1f74625185c9ff730bce06d2e6868cda17f35a8b4530e0ee026c34ed38733f1bc86616c8d181a95d80998b382ae4e4b9f0472ec28542d0e834901a9739fc0f925f097fd2b54ad390dd1efb3ae9a103166c741771c1d727612c093a9c01793e75d72de44842c2bc614645e6a88b865a7dfd10c843d27aa8910e23df6045d2458b52fc83b50d9eb3ef65a9f83b834e971fb57ef960751c5b473acb6aac15591e48dac9b019031b1fd5513ad22837e7773208c011b259b4a37c8ffb052348adaf37e50a1abceed9341f4d9748f190ad80b42cde243a24fc9359984397a849c3196721bab281ad5bed1dbdaff382e5045925f54dd58e81fe61fa4f9daffd54a71167f51f3ac91fdbc8929511a114c0701b975491766505a3330a755ca8f35db25536d774adf7b6ff8b30e42195a4c0a1c4331479c5a82211c0bf16734dc7a991bc0ea15cf84e3f4b154c6e23c5607f17d503cce2453a9e2944e34710af1b56b1197027702fb024d6ee2857275d560f1e81deeb15632993e5b3aac5c3b6b00db500a34a59ede5c2bbbed4e6b00eba1e0a1a421985ff0ff9ecbc61a4ffdc39b352add8a0335917f531d3fb5d924cbf5e3276809ddac7182667f07b0fbde9f19f1307feafa304a6cf6ed1d8562244f8ecc9e74cbc28e4c2767c90359dfed3cc1fcc2f1442756b87fff3ce71639d5f38ff84dc1bba232f1a40126c2643b6576b1c500a7c3bcc9574c89d3ac00357fd382a3cb48d36a0a81951c095a337a84d75efb542fb1d01a8c1cda020744e318d388c83d610f8f5e3a49c6eae552783a40ef6ce8a8a0a614df220d6cfa2aad8f2ead510087b40e538b24d7eddf3572e71453d5257f4782f33cb049e9c50b14de296a1e38c306382fc74e004c4f0958b1596c94e3a494402de34aa3c43344350fce194f16ef0ea781b722892a4f265014747b72e9d7a4c9857b45acd7d9a80a039c6dbb769194db7a41bef1c930004972f4e399da74ead812309dbe2c937c1f6657477f990040e78e6d7217700e0fb358289ca32553a483fdef161296bf6de9539561bb6ebe4933bd6e0a45b3b093cce4975911ecdb6e46b3c33355fe7be6116de8e529382123c4c7eef296b1ac9bb087b46e6da749a97515d96f285e0e33a7f9ade226f696fd9413bccbd60f9b9b8e6dad7fca5ebf8caab7791ff898c6b051b0689124ff37fd7e0f0cff082d11f3f5ad54791e777fd9a7aae588e16107205f94232b659e9ab86ee94396e37a911ac5a414048f71964a41079b2736c35a8122b30d5378e824ec309aa01456bfc59a79017a5735000104de3c75bbe3dde12162a61c75f8c316a5c92d3f6de9eb0c4aa2fbc9078f427908a7c68c8f1dd45ea2862ee3e6cba7b936411abb6ef8e8c8efa77a6722a779ddb5efb5da893e04ce79009f0a094e5746ebf484ed8de1d8a10f6bbcfeda9c98f8b17ec53cb117856989b888ea8a7089f6a91ac84639a26daf77b4a077ea25a9232b641f34d5efa4370ebff016710ce2630c37b14d31283bb7ee10d4cb9aa5284abe445c93bc08cd25d56171eda5bd8c0a51bf9c5b7a36cb0cf225c8622da1ccc2f4c6c55b86c2b42d4763d9200834674ae9e4393ff1923b9481a536e31e7f95506ad2eaf62d98facf7433a92cdc31f07125988b5162122c15d2cb63926a3c2188db011fccad7140ea731997aedb57bcc41f5859615da9b31364188709f19b781a999905dd7947aee62128cc65d7304258b1286f149cdb5cedb753df9b88da704c095424656f332c2d0dff6593a64996887537a6e863b37d3b1e9d851a7ce325fc10717fda9a55bb80ab12f81aba412e3dc43bc0742e8a4785b2fcbd7c7464f564decb4b65f46645d9cede1bf7e77335ea0aa9d1815c55fdb3ea66d89cc9a65086f6fa16d75fd7e7a9a141b64686f963718e7bb256e96fb960f2ba08db0f8298fa510582cfb178b2a11e500ead8b65d2f097bca5c7e2386f4fdddf28379daf8e00cfffbd98685fa06f4c7b43191a151682f48e8fb6cc3d24864de1d118e72ae17d1bdd119b4a0ad8ec67833404c769642ef6ea0e0ed4ca9334d0107e00cd42d7967bba3de242beb0e372f83ba27f8036208972ec9cb0e3d8c9abc54cc0f558d68ca9c8c3965b5025ee007a61231460ff6c7ca3f448cc2f08c6a60f69ccc8b65a9b66b1ad52cc41a4ae9dc4a9fb034009cbb53da0ddb475620623a6dc0f99fcca26d58ac84f9202e8ea0be1e094482c1e2ba5e986ba5eed3f258139354e9f6150ebd9b0846abf511476b48960e1eb10fd4c8b7be794b93878f7055e3080d31fe224f053b8637e6ec933298ba4935b89794215194bbc721f282a65bec7f8d334890e54a6f18ba7967f7dffd"}, {0x401, 0x1000, 0xe8, &(0x7f0000001640)="02146edce426fd4d741223bcf9952f9f7cfdf76c67335433cb8388bd20507db023fe561a6942c58e5cc3594c188f7daa8a9408645349db18aa4fa3f748e533298a9eb5a2204d0a0f374790a35bbb34cfd44e21902e5ca0c25251a25b8877608a9741ccb5f45e9ca6d8c60a1ca1d098be03dbe3524857a69f3c012fb0c8f5508b724de9b967b5aa354cb0b1a15536b832ef00cb33fec557b5f44af552aeef0a04deb8d696eb868177fda4ef5fd8b1a3d14f6ccdb8835f9d62370a8e81e2c8c33044993edd5011d0dbe0b4671fa74c9240a0d78ead2014db650b0c7e6fdb5f48c3fd6f818f850ee581"}, {0x101, 0x1001, 0x62, &(0x7f0000001740)="84dd1a55a69e4d87abf3f950719845f689cc6a83db8c03667cde731b3ee5089980bab78fa45b4009adf096f7d9658bf87ea0484b6162b10ed70c78984b4159b8427dd30d8c5b9c0e0ee25c3355da1483d628f14fdafadebc2f57f3897c53f832b354"}], 0x6}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x79, &(0x7f0000000440)={{0x12, 0x1, 0x151, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x81, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "dfe1d174"}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x40, 0x1000, 0x9}, {0x6, 0x24, 0x1a, 0x7, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x2, 0x4, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x5e, 0x4, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xfc, 0xf, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xe, 0x5, 0xfa}}}}}}}]}}, &(0x7f0000001e00)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0x6, 0xf0, 0x8, 0xff, 0x4}, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="050f05fd00"], 0xa, [{0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x843}}, {0xb8, &(0x7f0000001940)=@string={0xb8, 0x3, "7ef1d7f0651ceeadeaa5439c10e45345c89379f9e11d29279386c761d713f2f68511c4aacea005cde6437fa92ecd493c015bda68b2e6116e40ce00b81ec5cf952fc7daf489f3b9d77b14b1a6c3a84c3e7c612ae145e4883823b497665277a5dd7b42882712c15dd182e7221fe0ac3e81b0c4cc5109acbdff48ecb824ed659db228872119d3678fe5e62efa9ece7894cff3d078767e08e2b48da86fdebfb89c9e8ad3dfc6e808a1859478f0270ed19387c1a931868fd2"}}, {0xcc, &(0x7f0000001a00)=@string={0xcc, 0x3, "05887339f66fd3aaf9ddbedee969e7399408ffb994c3b8fb76519effadc6ef0fbeac9718c4756dabef32ee48eb20203b78d8bb275c9c3e4301f8354e8e118b6a3a11e7ea9ba6551d1cd477afda6345f63b428c2a0c2fbdd6df8ae6d6a63c8f0184a6bed5e93ca1f805f160bd7272f5e9796fae206b8fd1531d63101dd9da739f1cb73cb0a66f5735eeec880f02bd1ac8de744e1cc21eac1ad2273d482f7b9c279e8ca13d8b85aac0be4d4b27914e618d543ee0baf114c94dcfe0c71823a7a081e804c964be436e260f6b"}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x409}}, {0xe2, &(0x7f0000001b40)=@string={0xe2, 0x3, "7ce5c9842f50286ec7b7a3815bde98563683c4baa42eb336c15dba1acea9d54280d81f960719baf0e9b07cb813472ab2b4d7b2ae94c625e61ef5530de9d3e616e23cf660e76d6e54b018b4e7f5d92e325746eb0d06573d9d17c6f6f1c55f9b6a2c3eb1c531e0d11d0af9c23f54dc1d342becc387ca06af3eefd27a9f96b744ed6abf7e74dc169504d458776648b73a07a29a01f66f5b4d7ef2fecc170de5255d1455ccf24cb1014f3d64b338aa0bb976730e67048fd6cc02a5c7fdda135992952b473523d15c68796cf5f7d82b0e629ab4f59d7fee16ea32d4bf383783dfe605"}}, {0xd8, &(0x7f0000001c40)=@string={0xd8, 0x3, "7772ba1716c3646831d73f03d8741b70e594fe672649afb64d0565191dd7d9f57c9d4826d72d8b8d20f7772157da5278e827a382785e672aa81d15b86064099e2c66d6eb59c40c927487508508ff315865eb3cd80ccf5c6552c8da768128bc5b52c66ed2d61a417286850e9e0356cac877535483abb7835f89a82103cfbc6a15e80cca4587a5b6a962fd263d0b0499ced2656696fa21d010e864dfde5c73535914f7f2f181d70213cfadb4c014b95b33bafffeeb0eec8066014bfebf9d1052956e09146d01bc78ae26aa9acabf44ffe0949d226f79dd"}}, {0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x403}}, {0x52, &(0x7f0000001d80)=@string={0x52, 0x3, "0f020fc1fdf438ea49640a9b8137ccbf63303a64551b91588ad52766c5bc27c1d643dff658c922a71704950198e9e5b001903313899c661056f6d72b8ebf6e71064301eb67f375bc4e0bc461047f5b63"}}]}) syz_usb_control_io(r0, 0x0, 0x0) 3.030725981s ago: executing program 2 (id=2874): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a4000000ffffbe88007d01ff020000000000000000000000000001"], 0xfdef) 2.745007834s ago: executing program 2 (id=2875): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d640500000000007504040000100000206a07fefe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1eee000000f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0d"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r8, 0x14, 0x0, @val=@perf_event={0x2}}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x128, 0x700001b, 0x148, 0x128, 0x148, 0x220, 0x206, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0x158, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@cluster={{0x30}, {0x9, 0xa, 0x7, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x1, 0x2, 0x4, 0x1, 0x2], 0x1, 0x6}, {0xffffffffffffffff, [0x0, 0x1, 0x1, 0x0, 0x7, 0x2], 0x0, 0x2}}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0xffffff00, 'virt_wifi0\x00', 'syzkaller1\x00', {0xff}, {}, 0x9d, 0x2, 0x18}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x0, 0x3, 0x0, 0x1, 0x5], 0x3, 0x7}, {0xffffffffffffffff, [0x1, 0x6, 0x4, 0x0, 0x2, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) socket$inet6(0xa, 0x3, 0x7) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r11, 0x84, 0xf, 0x0, &(0x7f0000000240)=0x9700) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r12, &(0x7f0000000180)='100', 0x3) r13 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r13, &(0x7f0000000200)='1', 0x1) r14 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r14, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x19}], 0x1) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) 2.363140777s ago: executing program 2 (id=2876): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x106, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000001380)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @in={0x2, 0x4e20, @private=0xa010101}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000001380)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @in={0x2, 0x4e20, @private=0xa010101}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, r2, 0x73}}, 0x48) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x501800) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x4001af84, &(0x7f0000001500)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001200)={'sit0\x00', &(0x7f0000001440)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x2, 0x7, {{0x1c, 0x4, 0x2, 0x8, 0x70, 0x64, 0x0, 0x6, 0x2f, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x32, 0x3, 0x3, [{@remote, 0xd79f}]}, @generic={0x48, 0x5, "ab7aef"}, @generic={0x94, 0x6, "2489e95b"}, @generic={0x86, 0x7, "e4aae6be3e"}, @timestamp={0x44, 0x8, 0x96, 0x0, 0x3, [0x8001]}, @end, @timestamp_prespec={0x44, 0x34, 0x4f, 0x3, 0x8, [{@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0xfe}, 0x2}, {@empty, 0xffff}, {@local, 0x7f}, {@multicast2, 0x4}, {@empty, 0x40}]}]}}}}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)=ANY=[@ANYRESOCT, @ANYRESHEX=r1, @ANYBLOB='\v\x00'/20, @ANYRES32=r2, @ANYRES8=r5, @ANYRES8], 0x50) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) close(r6) tee(r3, r6, 0xffffffffffffffff, 0x8) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CAP_X2APIC_API(r8, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x2}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000001000)) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x2, 0x0, 0x0, @irqchip={0x3, 0xffff5540}}]}) (async) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x2, 0x0, 0x0, @irqchip={0x3, 0xffff5540}}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001180)={{0x1, 0x1, 0x18, r6, {0xfffffffffffffff0}}, './file0\x00'}) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000800)={0x1, 0x1}) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r2, 0x2}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000c40)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r2, 0x2}}, 0x18) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffd) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffd) 2.306271276s ago: executing program 3 (id=2877): r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe170005"], 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x402, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000580)) syz_usb_control_io$uac2(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0x12, 0x3a, {0x3a, 0x2, "900febc7c8d84d0b29356c8aa48c036482bbebe5065639d961a0b2be36bc5d1662f814b6068b533087164706733531f3e6ecf72c406f256b"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x0, 0xe, 0x17, "898d49bec66457a9bc37ea3dac53ee4a784fee59589ed9"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000001c0)={0x20, 0x81, 0x3, "a0e06f"}, &(0x7f0000000200)={0x20, 0x82, 0x1, "da"}, &(0x7f0000000240)={0x20, 0x83, 0x3, "5946c5"}, &(0x7f0000000280)={0x20, 0x84, 0x4, "8827a0a1"}, &(0x7f00000002c0)={0x20, 0x85, 0x3, "4ccc9e"}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048050) 2.129571381s ago: executing program 4 (id=2878): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bond\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a7563f", 0x3, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe801af1e75255d74aed0eabf2fe00000000000000210000000000bbfe8000000000009128000000000000bbac1e000100000000000000000000008a00"/116, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000007f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000440005007f000001000000000000000000000000000000003c00000000000000ff01000000000000000000000000000100"/204], 0x174}}, 0x0) 1.741256837s ago: executing program 0 (id=2879): r0 = userfaultfd(0x80001) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xeeee0000, 0x3, 0x8, 0xbfb, 0x0, [{0x8, 0x5, 0xf, '\x00', 0xd}, {0x52, 0x6, 0x8, '\x00', 0x7}, {0x9, 0x1, 0x7, '\x00', 0x8}, {0x1f, 0x9, 0x8, '\x00', 0x4}, {0x8, 0xc, 0xda, '\x00', 0x3}, {0x9, 0x3, 0x83, '\x00', 0x2}, {0x0, 0x2, 0xa, '\x00', 0xa0}, {0x6, 0xa, 0x81, '\x00', 0xe}, {0x8, 0x8, 0x0, '\x00', 0x8}, {0x1, 0x40, 0x6, '\x00', 0x7f}, {0x7, 0x4, 0x2, '\x00', 0x8}, {0x7f, 0xbf, 0xfd, '\x00', 0x8}, {0x3, 0x5, 0x9, '\x00', 0x81}, {0x9, 0xf9, 0x3, '\x00', 0xa}, {0x8, 0x8, 0xf, '\x00', 0x8}, {0xc, 0x5, 0x80, '\x00', 0x5}, {0xff, 0x85, 0x9, '\x00', 0x1}, {0x1, 0x4, 0x6, '\x00', 0x5}, {0x3, 0xea, 0x3, '\x00', 0x6}, {0x7, 0xb, 0x8, '\x00', 0x80}, {0x1, 0x1, 0x4, '\x00', 0xa}, {0x0, 0xa8, 0x8, '\x00', 0x7f}, {0xa, 0xf4, 0x7f, '\x00', 0xf0}, {0x10, 0x4, 0x20, '\x00', 0x1a}]}}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x21, 0x0, "a386bcb957f6ee650a88e8065cb3b0852da5b6b12cf609fdffffff0f392be7124f3883ab73ec229f5fab90b052c3572db8ed729eed0700001400000000de12709700"}, 0xd8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x10, 0x3, 0x93, 0x0, 0x1, 0x1, 0xba, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x7, 0x90, 0xd}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/57, 0x39}, {&(0x7f0000000140)=""/12, 0xc}], 0x2) 1.403125854s ago: executing program 0 (id=2880): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="20c81e7603152fe103a999b6836d8ad040abd00000004d61501d01000000000000003100b09245c689ac5dc275b2f5560000cf9d1bc774a0f636cee55acf0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x11, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x7, 0x2, 0x0, 0x3}, {0x2f6, 0x29, 0x8, 0x7f}, {0x0, 0x80, 0xa5, 0xdd2f}, {0x2, 0x1, 0x7, 0x8}, {0x2, 0x80, 0xa, 0x5}]}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0xfb, 0x0, 0xfffff010}, {0x6}]}, 0x10) r5 = socket(0x2b, 0x1, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xb, 0xe}, {0x10, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x400cc00}, 0x200c0090) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x38, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3a86dd6c00001e00022b01fe880000000000000000000000000101ff02000000000000fcb55c00000000000000"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4188aec6, 0x0) r8 = mq_open(&(0x7f0000000040)='eth0\x00', 0x42, 0x0, 0x0) r9 = mq_open(&(0x7f00000002c0)='eth0\x00', 0x1, 0x40, 0x0) mq_notify(r9, &(0x7f0000000540)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}) r10 = syz_open_dev$sndctrl(&(0x7f0000001300), 0x7cda, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r10, 0xc10c5541, &(0x7f0000001340)={0x0, 0x6, 0x1}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r10, 0xc0045516, &(0x7f0000000000)=0x40) mq_timedsend(r8, 0x0, 0x0, 0x1, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f0000000000)={r13, 0xfffa, 0x0, 0x9, 0x7fffffff, 0x6fea}, 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000080)={0x8574, 0xa, 0x8, 0x5, r13}, &(0x7f00000000c0)=0x10) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) 1.266593029s ago: executing program 4 (id=2881): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0118020003110000240012800b000100697036746e6c00001400028008000100", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x8000}, 0x0) 1.224009339s ago: executing program 4 (id=2882): ptrace(0x10, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)={0x20, 0xa02da726a9b588e2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="48000000100037040100000000000000000000005de6945580ae39aa8b39f4eb3ee7631f7717f4ca57e7afa2a13d4f0606389ecf01061102cc3aa4ae0082fc4d14368c543b1ceb4118365a46d1020777e24d32823e39caa30f5714a89d3cce0b0789b719bd355ff6785e1777133bf50a7d6e3a7b29b2ad", @ANYRES32=r5, @ANYBLOB="c30803000b2ebe262800128008000100736974001c00028008000300e000000206000f000100000006001000af0d0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r2, &(0x7f0000002e40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x63}}}}], 0x20}}, {{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f0000002b80)=[{&(0x7f0000000480)="74862d526cb4d2194c41788a5931a0bd569b93e992a68480419f0acbcd8ac9f955a81abb1ea673a936d4b36e5607c03652075e045560d5471ca0d3979331bd5503319e5119a11314180c372f29c7daed499917d3e61c86c88f71620b02b303382ed4660ebd259cab1b4fd2676468a279b9", 0x71}, {&(0x7f0000000500)="63cf059b62cb854e4c09e5729dfeb02a10e7a709b269808974570a303374dc0e914952898608950550682c6a2588e7daf6bff99f36aa75264a23e8d53ecc6364a81313a99d76b33126f30d5c4109a00d120bdccf7fe27edc8b8b5edae5d46374e944dd49a96709b15f31cf4c2bc6c350c2aa24499653058dc4cc811179fb7af5b7a19b5615371ecea4df2fe922b83630f6966203c1fa1aed5c3159", 0x9b}, {&(0x7f0000000640)="3cec88fba8247c7fce3cfdc43b4ef597c06d85d6b6c3ae58823492addc9953c9a42623ddeefa67db08410346d1d6613ad2a9c6e9733c33e15570ccae1f71896bc0d8f42c4c46db7aaf0581f3ac81c951312f0c2cbe5f469c586cc5", 0x5b}, {&(0x7f00000006c0)="c7fa41b7a64e0ca8a19a1d088db64de79f24c25d892c5b1f5b8376fea52938d3a6b7032297270a36aaccc90f2ca9432e34822279aa687f66771a2fe8535fbe7ce5e11a9b0b7aed7d2484aee80782b09f1309b5e661272841225f3d1afcf510bd2ed66591bc24e1410161fe468fbb39bc0c0da6b86844334ea66b9b4a3fb8ed9e41e227e5545b784c829d8bbdf11d6fe055e1fe0e076398f85acbff2380a1d9a127f6f5ba62fcc587660d3a0aa3f0e363dede45d8acbefe2fb65613", 0xbb}, {&(0x7f0000000a80)="6ee12762fb7e06bf7a473cf3bbecc8789eb12a49007189b43d13", 0x1a}, {&(0x7f0000001900)="0d85f8325265f5537a566dc0fa3598a117c1cd2093f8b6be2c8cc64699885405083622b0031d5c3ac4d691adffff506826f78f541a63e2b55f5d19f7437d540973104dec9feefd2918bd5e7478bf2e1a0a30627f3b0444081cc4aa3b2243e1fcf3d707978dc84c56089630310ed8d926319c5797ed504befd7c0a82608cdf7eb1250aafb6ada4ca418b567c38a0da7ae8924e168aebcde007678642e94aa82eb729d99ec6c30e81c3801bacdba573b70ebb26c23132729bc1da44efaaff7f8c4d5e0d9f2adadb846a7221b0d356e0efd26168efd1aabc70308c53fcc4469e4e9c69502cbc83841532e1c8a08a896bf0772a492669aa7eab2be292b09119b41817fb84a8a18ada43eb712240b524b4fe268ecb4e1540a9b264911b87182f54f86fd481bb4b0ee34a2462835ebc318569102cd7271a69adecabf9b8d545b588185fad3d429a8e40808d93d4c145f1e86950dbae1244ed9c1a6f001309ba75a149fe7b84fd308a6c41dfd4910f0169df2e67de7838860dffa7c6235549077ab3146ec8b61125fe791029625cd51c7a3ea0078c99e929a8f9da92d4511861e0d83a653b35cb50f65c001979d829ad8607491171ce1c821ef5262c6a0812144d58624c44b71e808f441c4c89891cc1f34a5e0cc58917906b6629fa8ce4a5d2f94ab29f91c274c2cf11058bf2da780cda6682b7981cfbed7d5defabb724fd8ae13310a472b9230a87ccecf0719a2778bae27fe729c272ae0faabb3461baa1d661e4b72630ac556084b00568846d740d78f305a2aee2c7e928f340d4f052664a1192cc9531c3c539808965cd17f16d5904f146e4d73728554f1e479918e7a604673e2931a05ec3389442c3cfd5dc22bd03ffb2b61b5d9e3cbbf65f1aac48faa786ba2fa1d9f9786a6bd1abf52f4e2548fc813573e7ce07c76419df160af1c10cf1bac5e10c6b63d8198b9b5668cb98a454d288dd7b53397b9536ddcc541d8a5ddba5d68681eb36f906e455bf8f7d18ff91efbb7c01be25e3854e4188571be9a99161fb8317653fb54525b7b550f91d46ad743354ddb84d5090bf187d1235b3b2a5091dbc8126e3befc0f217fb763f0a2fe9841dbcb34fa658d139ec745514526e8373fddf4c8ed5d8984053d56129df8c741b7189f207e001d04e091bc7121caabc79f6f02cbaf4b6d4e2622ada0dcefb61219f6ee583d6fa83bb5486fc892770d1d0932697fd8a32f92f9b8bb699ccac95564a80cfe7413e256a764eb5cf442020c6f9747c6989d20062ac19dfaf53c3cefca4c88f113d218487da5adf483ead114d0d2a12a588607e4a762eacc47c2e55b1b918f1eb0417433fa9b7972760e45aed104627893c3e7e716b26d632ef42d0a1da4feca7134e8beaa7904d87493b2a64e743212e4245ca567a3d53c2863e84179881cf09ee8bf1fb89c06695b0e2ee7e96e9aa90933ac90d882554be339c9fe1a8f8aada8f2a4123b8b77c9784dfb50d48682d9b589a999602850621338614643f5570c5948b3a38e8221fbe5873389d148db03e34d112290d36c247e0c212e7f278bfeb91ca95ce9ed57ab3bbe22d6b68ca01162c53c953c26e287415d698d043304ec2dd85deac75b736d400eaf708b9544525ef8c3f7bf2bc25f5a7d4517af0e8a1fbfb18060eb2b14044516cef9850c104e3a945b7e0585970b4d98dc17f9a819c97f97944f8db05a80c0aef11e9ccbf05247449447f3c0779c2f8a0e0854fc5200b55fba46f1b2fb681aa5be4cabf7ae6734dd1684a3c9c72a217114e82a364239ea483e3bbb72a5a6391a1eae2275f380d8a8644a662157af1dbfe0b7c564c1c424ae7a8a6d2cafef99ceef9074ac7ab196bfd6f9c1bb0890c91a3da6dce644b8cd3ac7eb11b7344a1bb49a5cc95b6a96c19e7e6b68ef8b3f32830b76debf012864740c299fa3191fe723053eeb005e6fada52bcacca141484e2a5664a281c1aa76efe8cb6c818827ae3984995af8fbf239b76c53182d7e0156074066892ab5c2526c0db4897b9cf429f644e476a1da295b2cffb69388cbf0f3fb28d8e063644dade2d010c6755e39825ab5e54a6327e27caf3a9e084929e75b9a0455b699ca647639ab3bbcef1d6bde31967dafacc2ea9dd565e5089fbde0944795789934f8b2495d25942a41be4b04f295e5cacb509acfe23cd5ae963eed792e753a4fb194a3d25cdc5ed5df93ddbd535eb1bc37dd65880c85913cca9fced3c6c8fd456366fbf67f6e8172d6938d247bb08c2b0ef938dd19e03f8ef6f36cadf3f613e4e65bf97f70ae26f77f58e64d617af4d569581a6c0114d4bbf4eefc59b1112fce75ae076251b75756446ab996398b3afb356b7724108948e3bcf39b500f7fd89ea205554afd5afae53a295398998121bf642ea91f638e9e97f5a01af04b24c41bf29083460489d993eb23f7bf16d1ef659074c712da781c37b8fcaf86fbd7ba185f5f55caca8a01e97ba669f60b0a8ffb0aec196d4a215a678f4e77e92359457c39bc72ac2e4641002c93f2f763311a74b9832356a4db3b29c15d0bd3e10a8f9dd494d0326421ca95f9270f9c6a3d01f64013ebf86694d02f4d7bc367bb6bb3ae1e3892c5325387442822aa74820374e4e3daabd91d04024b39f0b4fe4963dab26d48d3711b559ba234ad2c76cca21889d86734a1e3cb14585f1e66962e193059a72d7cb8e69b71f16bd488cb394195cc492744b7494b89125ed533c3c3d068114fee28b1fc0bab0028070f4ffa6c4933f938d6e3b958c3da70796be694006fe0b09c832d1b9d2e31b115874df58a1fc46a624e2871df468ad5336222057b7471373aebb6fba5e4adbfd0aad91b9522b31441890d272da22f578d0c71366193aab0dd4e856b0ebad60473687e2e07cfe7466317afabd4d9d9cc1d87fe203c118dd907310636b591a0780aef6689c654f2c5c7017f6cf23a03cfe0729990cff39bb0a48a15939241bf4cb95a04fe290b606108c6683b175c16f218c6e20a0aaca9dd9613f8fea13e54098505a7842f2ea6030818c5bde0f431e122165afbf6f1ca1e8c39817e4290f3ec2ccbb9f4efc568371ca5893e77c83c913aa84f8436870933352db415cace6fa5ec09bf84400b671a78cb42922b9a91f384a503360e512f9ff2b85791e050332356b6cd5188e5c938caf89431e0591320ad7f386f2548857261d49fefc9359af58ec99bbd3076b9ecae6f0c40349991915b20aa58e423d4c8698c86682212ec48bb1595f2681107d969ecb213f996a0761f73a392e213c287d9a92c298568b4fdc3ccaec01fa1b1f2a01a1b8e42ed4a9d1781db3e43eea4421b81dc097eeba5ba29d67da420cb0e87da01d436fe09c0fdb4927d5e33a5352ce3a4f4ae8c2778aaf5002a23148f562d00fcc8c429cb0fa11568f6b213cd033ad34a7cf77886ed58f0be8097fdfd31edfa74a0265e61ee6fbf848715b88dd3a0c9d1e7ecc5bbf06f3baf3a52f91b7ae3df0e3ac82815f8606ada43236ef268bffdf9d6983dcdcf4f200b61a55e982996c494ac12b638bf5189fce4d691e28cf6b573df2fa3e1c4e7a968a889f4e181bcb7191deb78eb947029529d7c1551b69815605b07eb44b1a8a0ab2b1692182d1d9f4d35ef2bfc8365a491b9a65248c1946c86f84f423b47b5fd6d793db2b68e24d6022afb70004de85ff5c22a4480d8ecee6705b162e0ad2b37f09d7060f6f2f5db28b8f9ab9e4332b6ab1cef37db7bdbc66f6cd2e1c40e446632b0852e2afb98448350c97855e39632e330663492685d6e07237e65ca330a907bf2bd171682ca4c52b77f218c46cddb9a4f408b99bdd678101842680dbe97b9c482b02128fedc77220d0f38dcbe09262da944ffa2f91107d7fcdc067c1f8d66126e7252150570c8b3a7c79c6fbee1657af7689728b6a5d04612eeb3aa24dc2d43e1c4ac0a19a9ac4eb256f7e072ff9fe8fcef110e24c6da7b3ee8a9d8817079e8d6ed778c6c2f63680276928d48464da3e12967b1a81fc5e6ef163f6f1fda2c61f3428c2b819c9cf0b8e8a8555bf52535cc9e763838fff975e1e4310af5dcb1eba30290fe7d874beaa74a5af482085be24971a435bf5c726180db0c97e6fe584c9d74f04fa4d5b878735679824a2db819c5a2a8e0a2c54160acd6323d43b752d1b34007e69518777985666bb0575a8c7bba36abcb68ae4c185c265ad73670a4593e700b8a2187e84c47164c390b733a3722b6555645d2816bd09926b187a3195040bdc455cffa0dc0ac1697062d34e66cd4823f554fe8bb35ab204e79b8af9fe602f555c906b12a706c61509219d460a469aa528faad37b842b8802e84fbe9eda4be60a8be203c51543670ea248fc4acd0c45efd03c5a193a00304461cc6841bf493fc191586cb47209954eeeb0a9c701488525191247107c206cca7d4d056dddbfc17007f4f01917516acfc57b2f2f4f57c854479682f7a6f2929f0cad22a37708db99c1435ea9a840bcc78ffd8b9001e2ffcdc1d4116cb0c7b591b148378b21478859270588c76c6c1ce68015a3ad24fc07d0e0d3737f7d2ae85718db9f4b29ec1b3d9eb143c6f50207b4ae09ed1bb138764b8765e7e7452f38ea4a7d71a5eabc40d140fe8a55d23558ef1a47ba9649b685502cb33e01213f01d0da00bda0d929eba8c22f9c3b62b4ccac95479439ef369e9f03af7ec132b2d47f1f39d3a8e3548ac3416c120588936454b0e175ec381f3b88f3ace9dbc1e149d32e2fbf0eb93f5e5ae550f51dc1019caff34321e34927e068783728b2c760bd4f63caddedb8d5e49f4eb2be85d2c3184d4d6cecfe5accd0cf94cecf7b48000b435135f508062cdf44c076f9fafa1d951fd752ead684a0609d41e1194588ce801be76a19fd93547f1b5f6e610225a9701aedb67d7d57bfcdc092170efeb9509d27dc5cc79f50378cf64e782f6e26c775ece911277184ab8050fceb23a557d01e9f9b9c5239b93638b5f06d2e606aab98bb2468258b7b9d552184064ffb02b8778632c1aa9c4989ce7be5352aa78697aac238249d295b1fc5a701706ba487890f93d315ebed786f4228b09b87cb0848ff0d7a82640acba9b9e11923ed8dd621ba25dc640ac62cf5e39158fdaaaa77d888500053161be34b7ea3aace0c3ab8e150065892e317e64e8db96f2951992f38c15f59483b82476328643a123e42b15ac5f09d0bfbc73a40c76cb1a893e4bebf1ead8c5d80c2045c0cbf812a9033fb3a51f6dc3fa4aa2fc46201e5be959b4f1e0d7edc81212b462889883d967edd328263ed67f3145b3d193fd5b582302650142052a2fb7c16f7189bd49cd16fc660b956828a1bc4ae7a603541a44b94dbe61497ae9d273c642ca8f40a9a01c9df38103d5a035be356c2f3f68c370cddbc572f9ef79bd67ecf88416aaf4f68b497c27efeb39dc77fb715765d5458554760b69f3dbdadc021ad25eeaac98ea882dcfa3123398aec285eb71c7afaefa379cfb32f00c47d96fa448cb256004486fedbe989b95260ce03ff35cee430c336f96eff858de55dfcccd24e84ed8158edea944c03a7d0892cf12ed6c23669d05c17c6d625af86e212e833d675c9cb099b7455d608823cdd3b6c3a0162a6f2007638513587da453a0e22fdc2002cea390e616cfc0c5d7139ba6ee9f12ab7c84afc2c41a04adfb14a44e17f180de8d4a484fd78365b67818898038243c66d5c5b86dc69d3f5d93de574e2594eeafd7732bd911d9a66208f08a724cfb89bc44368fb13ef78a83b2b0080d94b0690b488a3460b870cf4477b446365cf071547a9277ed", 0x1000}, {&(0x7f0000002900)="86be7c4c538f46295c74a4f8bfa9f40d52ed949f009ead36ea4ab36ad18ed7882fc47a1b07793ec1c4e0f012f9e8c882aa54396182343de4b2e4b456f2e8573844be186fdf75f1efb75f5a13eeb80e7ff2960fb39da453190ad9e2ce0b8f2dd4b012252ed27bcc880b34f8dcdd9ede8904b8beaece91539ca0722b8b445fc3e5e58928fe3574f85701641b00cb0f142959e32d82d26093c4fc99c039aa79095bd5bb6c9753cb64d199ef1ea793eed9c664b7cbd460c1bbfdf7a9a7d3869bc2744f8f3df096a17de4075ee76ebcac7a435eca57d8a2f121db0ece325d858d03ba7d50d0039c26ae8422401e9e7d84671ec85931e1", 0xf4}, {&(0x7f0000000ac0)="446667a1ad37c5bab3d46ea66c07a5ce792f9d48a873537a4c5daf5f38963b36497e76b95d457e0a3d873cc0086542683c7693eacf08c410db5dd0fa395073a87d2a8851beedbf5ac1722411a14e7bb9538fa7da40a06f1047237e9a8f6b50cc56c5fde4af", 0x65}, {&(0x7f0000002a80)="025acc7312cd70023ec6a2c46afbda33400849c1e7b3beed9438b92f3078d9d1cf", 0x21}, {&(0x7f0000000b40)="2e53165c78fda4bb9b7902f85e7b0b95083d28d0e79b0e988b96ba076d07afc2fa4ff748e19d12289fe2ef3944d8dd4e3ba94137873837f5e024015034bfd3d9fa589e281899a7435f19e3fb4b971d62f3b436b7a85427664bf4d005f7e7b26b39077f1224a9b25e1974544ec99291eb77f13c395a01a6efe0629789151addfd7ff83e4144d1b0aff085bb2a702becf827d5e031d79d198794c79762", 0x9c}], 0xa, &(0x7f0000002c40)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="ac1e00017f000001000000005c0000000000000000000000070000000044444833e000000100000006ac1e0001000003edffffffff00000236ffffffff00000006e000000200000008fffffffffffffff9ac1414aa00000080ffffffff000000049404000000000000000000"], 0x1f0}}], 0x2, 0x48894) r6 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x255, 0x0, r12}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20002, 0x1, 0xffffffeb}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4, 0x5, 0x0, 0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) 408.463308ms ago: executing program 0 (id=2883): syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @empty}]}, &(0x7f0000000180)=0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x3, 0x0, 0xa, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x4000004, 0x80010, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2e, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) madvise(&(0x7f0000391000/0x1000)=nil, 0x1000, 0x10) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000001c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000000)='net/ip_vs\x00') r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4300) readahead(r6, 0x6, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24) r8 = epoll_create(0x1002) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1000000d}) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) fanotify_init(0x201, 0x0) 205.083866ms ago: executing program 1 (id=2884): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080700, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) ioctl$SNDRV_TIMER_IOCTL_INFO(r9, 0x80e85411, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c000680"], 0x78}}, 0x0) r11 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x10, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2, 0x15a, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1fff, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r13, 0xc0045103, &(0x7f0000000000)=0x2) ioctl$HIDIOCGSTRING(r12, 0x81044804, &(0x7f00000003c0)={0x49, "22fc0c0143cba99e438f26fc251a0d47ffea770329de0662be5e5303788675d7e65dffea16a50f3ee7ca3837c55f5fa8cba36732479dba8122544a1cbde08bb345f8c9c11fd0dffa9b"}) 189.912384ms ago: executing program 4 (id=2885): timer_create(0x3, 0x0, &(0x7f00000001c0)) (async) timer_create(0x3, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x3000, 0x1) (async) mknod$loop(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x3000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000300000008001b00000000000800290041010000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4048801) openat$kvm(0xffffffffffffff9c, 0x0, 0x541500, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x541500, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x400000000) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4ea2, @empty}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0xc622, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0000000206010800000000000000000000fffd14000780080011408856ddb105001500030000000500010006000000050005000a0000000500040000000000090084b773797a300000000012000300686173683a6e65742c706f7274000000090002"], 0x6c}}, 0x80) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0000000206010800000000000000000000fffd14000780080011408856ddb105001500030000000500010006000000050005000a0000000500040000000000090084b773797a300000000012000300686173683a6e65742c706f7274000000090002"], 0x6c}}, 0x80) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r7, @ANYBLOB="0200330072ff00008f8269c59ed678f58616c02d092f00e2308c4b92d0b623621358267526c8b906cebe5a197be94e83688a4417ce17394538ccd08f846be7c5ffb4e8bee03447f546e9e35d968e4f30d2c72eeef5ec61945a40ac54b66ba703c42eedef7a356501d342d6bdc6200b2c006a391399c2092ce1d15cc3306d5e5269d004616801aff0663adcb9cbbcac88627d334b4095a192aae1f63c11b179b295e9b4f4e51678"], 0x24}}, 0x18) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fefffffffcdbdf25024000000c00990001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fefffffffcdbdf25024000000c00990001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) 0s ago: executing program 4 (id=2886): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r8, 0x14, 0x0, @val=@perf_event={0x2}}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x128, 0x700001b, 0x148, 0x128, 0x148, 0x220, 0x206, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0x158, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@cluster={{0x30}, {0x9, 0xa, 0x7, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x1, 0x2, 0x4, 0x1, 0x2], 0x1, 0x6}, {0xffffffffffffffff, [0x0, 0x1, 0x1, 0x0, 0x7, 0x2], 0x0, 0x2}}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0xffffff00, 'virt_wifi0\x00', 'syzkaller1\x00', {0xff}, {}, 0x9d, 0x2, 0x18}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x0, 0x3, 0x0, 0x1, 0x5], 0x3, 0x7}, {0xffffffffffffffff, [0x1, 0x6, 0x4, 0x0, 0x2, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) socket$inet6(0xa, 0x3, 0x7) fsopen(&(0x7f00000014c0)='proc\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r11, 0x84, 0xf, 0x0, &(0x7f0000000240)=0x9700) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r12, &(0x7f0000000180)='100', 0x3) r13 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r13, &(0x7f0000000200)='1', 0x1) r14 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r14, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x19}], 0x1) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) kernel console output (not intermixed with test programs): set to 874272095 [ 590.800062][T20514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.091714][T20542] fuse: Bad value for 'fd' [ 591.285687][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 591.508372][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'. [ 591.514895][ T31] audit: type=1326 audit(1790569859.676:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20570 comm="syz.4.2566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2f39e159 code=0x7ffc0000 [ 591.515015][ T31] audit: type=1326 audit(1790569859.676:6718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20570 comm="syz.4.2566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a2f39e159 code=0x7ffc0000 [ 591.515137][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'. [ 591.515359][ T31] audit: type=1326 audit(1790569859.676:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20570 comm="syz.4.2566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2f39e159 code=0x7ffc0000 [ 591.552278][ T31] audit: type=1326 audit(1790569859.716:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20570 comm="syz.4.2566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2f39e159 code=0x7ffc0000 [ 591.552318][ T31] audit: type=1326 audit(1790569859.716:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20570 comm="syz.4.2566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2f39e159 code=0x7ffc0000 [ 591.635679][ T31] audit: type=1326 audit(1790569859.796:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20570 comm="syz.4.2566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2f39e159 code=0x7ffc0000 [ 591.635727][ T31] audit: type=1326 audit(1790569859.796:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20570 comm="syz.4.2566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2f39e159 code=0x7ffc0000 [ 591.635765][ T31] audit: type=1326 audit(1790569859.796:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20570 comm="syz.4.2566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2f39e159 code=0x7ffc0000 [ 591.636201][ T31] audit: type=1326 audit(1790569859.806:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20570 comm="syz.4.2566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8a2f39e159 code=0x7ffc0000 [ 591.636240][ T31] audit: type=1326 audit(1790569859.806:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20570 comm="syz.4.2566" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2f39e159 code=0x7ffc0000 [ 591.645811][T20572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.646260][T20572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.877668][T20582] fuse: Unknown parameter 'user_id00000000000000000000' [ 592.325691][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 592.477998][T20462] tipc: Resetting bearer [ 592.525172][T20462] tipc: Disabling bearer [ 592.713594][T20612] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2570'. [ 593.365692][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 593.466374][T20669] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 593.466394][T20669] PKCS7: Only support pkcs7_signedData type [ 593.675798][ T5697] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 593.704535][T20682] input: syz1 as /devices/virtual/input/input64 [ 593.756223][T20690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.896086][T20690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.916653][ T5697] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 593.920231][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.920256][ T5697] usb 1-1: Product: syz [ 593.920271][ T5697] usb 1-1: Manufacturer: syz [ 593.920286][ T5697] usb 1-1: SerialNumber: syz [ 594.253711][T20696] fuse: Bad value for 'fd' [ 594.405684][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 594.426892][ T5697] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 594.427032][ T5697] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 594.543386][T20703] loop5: detected capacity change from 0 to 7 [ 594.554801][T20703] loop5: [ 594.554825][T20703] loop5: partition table partially beyond EOD, truncated [ 594.814024][T20717] ip6gre1: entered allmulticast mode [ 594.831788][T20716] netlink: 'syz.4.2581': attribute type 1 has an invalid length. [ 594.847599][ T5705] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 594.908305][T20716] bond6: option mode: invalid value (34) [ 594.910276][T20716] bond6 (unregistering): Released all slaves [ 595.012293][ T5705] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 595.028854][T20718] gretap0: left allmulticast mode [ 595.028876][T20718] gretap0: left promiscuous mode [ 595.029128][T20718] bridge0: port 1(gretap0) entered disabled state [ 595.031720][ T5705] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 595.031751][ T5705] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 595.031777][ T5705] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 595.031827][ T5705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 595.031860][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.130088][ T5705] usb 2-1: config 0 descriptor?? [ 595.131792][T20702] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 595.208798][T20718] bond0: (slave bond_slave_0): Releasing backup interface [ 595.214916][T20718] bond0: (slave bond_slave_1): Releasing backup interface [ 595.259758][T20718] team0: Port device team_slave_0 removed [ 595.280029][T20718] team0: Port device team_slave_1 removed [ 595.282117][T20718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.282137][T20718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.309630][T20718] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 595.445688][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 595.584575][ T5705] usbhid 2-1:0.0: can't add hid device: -71 [ 595.584701][ T5705] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 595.619717][ T5705] usb 2-1: USB disconnect, device number 25 [ 595.738300][T20670] netlink: 'syz.0.2576': attribute type 61 has an invalid length. [ 595.743501][ T5697] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 595.838368][T20801] tipc: Enabled bearer , priority 0 [ 595.840052][T20801] syzkaller0: entered promiscuous mode [ 595.840074][T20801] syzkaller0: entered allmulticast mode [ 595.891326][T20801] tipc: Resetting bearer [ 595.906234][T20801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.911143][T20801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.952655][ T5697] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 595.954662][ T5697] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 595.954718][ T5697] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 596.017553][T20813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2583'. [ 596.021729][T20800] tipc: Resetting bearer [ 596.088262][ T5697] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 596.091723][T20815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2583'. [ 596.117154][ T5697] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 596.122686][T20800] tipc: Disabling bearer [ 596.181010][ T5697] usb 1-1: USB disconnect, device number 81 [ 596.485999][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 596.595781][ T30] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 596.605453][T20850] warn_alloc: 2 callbacks suppressed [ 596.605465][T20850] syz.0.2588: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 596.605542][T20850] CPU: 1 UID: 0 PID: 20850 Comm: syz.0.2588 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.605558][T20850] Tainted: [L]=SOFTLOCKUP [ 596.605562][T20850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 596.605569][T20850] Call Trace: [ 596.605637][T20850] [ 596.605703][T20850] dump_stack_lvl+0xe8/0x150 [ 596.605844][T20850] warn_alloc+0x24d/0x270 [ 596.605889][T20850] ? kasan_save_track+0x4f/0x80 [ 596.605943][T20850] ? kasan_save_track+0x3e/0x80 [ 596.605968][T20850] ? __pfx_warn_alloc+0x10/0x10 [ 596.605987][T20850] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 596.606103][T20850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.606157][T20850] __vmalloc_node_range_noprof+0x127/0x1540 [ 596.606218][T20850] ? rcu_is_watching+0x16/0xb0 [ 596.606276][T20850] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 596.606308][T20850] ? __kmalloc_cache_noprof+0x321/0x600 [ 596.606330][T20850] ? __kmalloc_cache_noprof+0x14d/0x600 [ 596.606352][T20850] ? xskq_create+0x56/0x220 [ 596.606460][T20850] xskq_create+0x148/0x220 [ 596.606486][T20850] ? xsk_init_queue+0x8a/0xe0 [ 596.606512][T20850] xsk_init_queue+0x8a/0xe0 [ 596.606540][T20850] xsk_setsockopt+0x52a/0x960 [ 596.606567][T20850] ? __pfx_xsk_setsockopt+0x10/0x10 [ 596.606590][T20850] ? put_files_struct+0x24f/0x350 [ 596.606628][T20850] ? __pfx_aa_sk_perm+0x10/0x10 [ 596.606742][T20850] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 596.606787][T20850] ? __pfx_xsk_setsockopt+0x10/0x10 [ 596.606812][T20850] do_sock_setsockopt+0x17c/0x1b0 [ 596.606846][T20850] __x64_sys_setsockopt+0x13d/0x1b0 [ 596.606881][T20850] do_syscall_64+0x166/0x520 [ 596.606939][T20850] ? trace_irq_disable+0x3b/0x140 [ 596.606974][T20850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.606995][T20850] ? clear_bhb_loop+0x70/0xc0 [ 596.607022][T20850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.607042][T20850] RIP: 0033:0x7fc75039e159 [ 596.607091][T20850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.607135][T20850] RSP: 002b:00007fc7511b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 596.607184][T20850] RAX: ffffffffffffffda RBX: 00007fc750625fa0 RCX: 00007fc75039e159 [ 596.607200][T20850] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 596.607213][T20850] RBP: 00007fc75043506b R08: 0000000000000029 R09: 0000000000000000 [ 596.607238][T20850] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.607252][T20850] R13: 00007fc750626038 R14: 00007fc750625fa0 R15: 00007fc75074fa48 [ 596.607285][T20850] [ 596.608767][T20850] Mem-Info: [ 596.608781][T20850] active_anon:10151 inactive_anon:30 isolated_anon:0 [ 596.608781][T20850] active_file:4169 inactive_file:59969 isolated_file:0 [ 596.608781][T20850] unevictable:0 dirty:294 writeback:0 [ 596.608781][T20850] slab_reclaimable:12573 slab_unreclaimable:99138 [ 596.608781][T20850] mapped:31443 shmem:3914 pagetables:1950 [ 596.608781][T20850] sec_pagetables:0 bounce:0 [ 596.608781][T20850] kernel_misc_reclaimable:0 [ 596.608781][T20850] free:1257793 free_pcp:20834 free_cma:0 [ 596.608835][T20850] Node 0 active_anon:40604kB inactive_anon:120kB active_file:16676kB inactive_file:239612kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125720kB dirty:1176kB writeback:0kB shmem:15656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14092kB pagetables:7628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 596.608907][T20850] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 596.608959][T20850] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.609017][T20850] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 596.609054][T20850] Node 0 DMA32 free:1076348kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:40604kB inactive_anon:120kB active_file:16676kB inactive_file:239612kB unevictable:0kB writepending:1176kB zspages:968kB present:3129332kB managed:2546880kB mlocked:0kB bounce:0kB free_pcp:66688kB local_pcp:53108kB free_cma:0kB [ 596.609115][T20850] lowmem_reserve[]: 0 0 0 0 0 [ 596.609148][T20850] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.609202][T20850] lowmem_reserve[]: 0 0 0 0 0 [ 596.609236][T20850] Node 1 Normal free:3939464kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:16648kB local_pcp:16648kB free_cma:0kB [ 596.609294][T20850] lowmem_reserve[]: 0 0 0 0 0 [ 596.609328][T20850] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 596.609451][T20850] Node 0 DMA32: 2157*4kB (UME) 1783*8kB (UME) 1289*16kB (UME) 663*32kB (UME) 299*64kB (UM) 109*128kB (UME) 190*256kB (UM) 92*512kB (UM) 54*1024kB (UM) 30*2048kB (UME) 187*4096kB (UM) = 1076252kB [ 596.609606][T20850] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 596.609735][T20850] Node 1 Normal: 4*4kB (UM) 7*8kB (U) 10*16kB (U) 3*32kB (U) 1*64kB (U) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (U) 2*2048kB (M) 960*4096kB (UM) = 3939464kB [ 596.609891][T20850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.609909][T20850] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=1 hugepages_size=2048kB [ 596.609927][T20850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.609944][T20850] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 596.609960][T20850] 68048 total pagecache pages [ 596.609969][T20850] 6 pages in swap cache [ 596.609976][T20850] Free swap = 124316kB [ 596.609984][T20850] Total swap = 124996kB [ 596.609992][T20850] 2097051 pages RAM [ 596.610000][T20850] 0 pages HighMem/MovableOnly [ 596.610007][T20850] 428715 pages reserved [ 596.610015][T20850] 0 pages cma reserved [ 596.611922][T20850] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2588'. [ 596.687124][T20852] fuse: Bad value for 'fd' [ 596.747036][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 596.748499][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 596.749482][ T30] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 596.749505][ T30] usb 2-1: config 254 has no interface number 0 [ 596.749542][ T30] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 596.749567][ T30] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x86 has invalid maxpacket 32 [ 596.749590][ T30] usb 2-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0x5A, changing to 0xA [ 596.749614][ T30] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 596.749635][ T30] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0xA has invalid maxpacket 0 [ 596.749657][ T30] usb 2-1: config 254 interface 235 has no altsetting 0 [ 596.753195][ T30] usb 2-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 596.753218][ T30] usb 2-1: Product: syz [ 596.753233][ T30] usb 2-1: Manufacturer: syz [ 596.753247][ T30] usb 2-1: SerialNumber: syz [ 596.763439][T20825] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 597.147194][ T5674] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 597.296793][ T5674] usb 1-1: Using ep0 maxpacket: 8 [ 597.298348][ T5674] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 597.299837][ T5674] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 597.312009][ T5674] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 597.312034][ T5674] usb 1-1: Product: syz [ 597.312048][ T5674] usb 1-1: Manufacturer: syz [ 597.312063][ T5674] usb 1-1: SerialNumber: syz [ 597.426797][ T30] usbtest 2-1:254.235: couldn't get endpoints, -71 [ 597.426897][ T30] usbtest 2-1:254.235: probe with driver usbtest failed with error -71 [ 597.459444][ T30] usb 2-1: USB disconnect, device number 26 [ 597.525210][T20876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.525719][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 597.539727][T20876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.554915][ T5674] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 597.554935][ T5674] usb 1-1: Handspring Visor / Palm OS: port 83, is for Debugger use [ 597.554954][ T5674] usb 1-1: Handspring Visor / Palm OS: port 171, is for unknown use [ 597.554973][ T5674] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 597.573701][T20875] ovs-dp0: entered promiscuous mode [ 597.604858][T20875] kvm: user requested TSC rate below hardware speed [ 597.641008][T20898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2595'. [ 597.685170][T20898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2595'. [ 597.753982][T20903] loop5: detected capacity change from 0 to 7 [ 597.759623][T20903] loop5: [ 597.759651][T20903] loop5: partition table partially beyond EOD, truncated [ 597.776163][ T5674] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 597.785550][ T5674] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 597.822424][ T5674] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 597.910969][T20922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.912343][T20922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.058639][ T5697] usb 1-1: USB disconnect, device number 82 [ 598.068691][ T5697] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 598.096301][ T5697] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 598.096669][ T5697] visor 1-1:1.0: device disconnected [ 598.485100][T20959] netlink: 'syz.4.2600': attribute type 21 has an invalid length. [ 598.496801][ T5705] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 598.513461][T20959] netlink: 'syz.4.2600': attribute type 6 has an invalid length. [ 598.513481][T20959] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2600'. [ 598.514429][T20959] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2600'. [ 598.565690][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 598.650831][ T5705] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 598.651906][ T5705] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 598.651946][ T5705] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 598.651972][ T5705] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 598.657821][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.657845][ T5705] usb 2-1: Product: syz [ 598.657860][ T5705] usb 2-1: Manufacturer: syz [ 598.657874][ T5705] usb 2-1: SerialNumber: syz [ 598.699757][ T5705] usb 2-1: config 0 descriptor?? [ 598.721443][T20947] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 598.721571][T20947] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 598.747644][ T5705] usb 2-1: ucan: probing device on interface #0 [ 598.970828][ T5705] usb 2-1: ucan: could not read protocol version, ret=0 [ 598.970845][ T5705] usb 2-1: ucan: probe failed; try to update the device firmware [ 599.605682][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 599.723103][T20993] tipc: Enabled bearer , priority 0 [ 599.723771][T20993] syzkaller0: entered promiscuous mode [ 599.723790][T20993] syzkaller0: entered allmulticast mode [ 599.756323][T20993] tipc: Resetting bearer [ 599.759998][T20993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.762598][T20993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.770902][T21006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2607'. [ 599.789565][T20991] tipc: Resetting bearer [ 599.823150][T20991] tipc: Disabling bearer [ 599.825064][T21010] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2607'. [ 599.907957][T21016] loop5: detected capacity change from 0 to 7 [ 599.910294][T21016] loop5: [ 599.910308][T21016] loop5: partition table partially beyond EOD, truncated [ 599.978378][ T5705] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 600.049609][T21026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.050660][T21026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.127226][ T5705] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 600.128053][ T5705] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 600.128079][ T5705] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 600.129977][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.129991][ T5705] usb 1-1: Product: syz [ 600.129999][ T5705] usb 1-1: Manufacturer: syz [ 600.130007][ T5705] usb 1-1: SerialNumber: syz [ 600.135927][ T5705] hub 1-1:1.0: bad descriptor, ignoring hub [ 600.135949][ T5705] hub 1-1:1.0: probe with driver hub failed with error -5 [ 600.507435][ T5705] usb 1-1: USB disconnect, device number 83 [ 600.573867][ T5674] usb 4-1: USB disconnect, device number 98 [ 600.645701][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 600.713976][T21059] FAULT_INJECTION: forcing a failure. [ 600.713976][T21059] name failslab, interval 1, probability 0, space 0, times 0 [ 600.714011][T21059] CPU: 0 UID: 0 PID: 21059 Comm: syz.4.2613 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.714038][T21059] Tainted: [L]=SOFTLOCKUP [ 600.714046][T21059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 600.714057][T21059] Call Trace: [ 600.714066][T21059] [ 600.714076][T21059] dump_stack_lvl+0xe8/0x150 [ 600.714113][T21059] should_fail_ex+0x410/0x560 [ 600.714251][T21059] should_failslab+0xa8/0x100 [ 600.714279][T21059] __kmalloc_noprof+0xfe/0x720 [ 600.714302][T21059] ? kernfs_fop_write_iter+0x157/0x540 [ 600.714345][T21059] ? kernfs_fop_write_iter+0x157/0x540 [ 600.714375][T21059] kernfs_fop_write_iter+0x157/0x540 [ 600.714407][T21059] vfs_write+0x612/0xba0 [ 600.714444][T21059] ? __pfx_vfs_write+0x10/0x10 [ 600.714475][T21059] ? __fget_files+0x2a/0x420 [ 600.714512][T21059] ksys_write+0x150/0x270 [ 600.714534][T21059] ? __pfx_ksys_write+0x10/0x10 [ 600.714566][T21059] do_syscall_64+0x166/0x520 [ 600.714594][T21059] ? trace_irq_disable+0x3b/0x140 [ 600.714615][T21059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.714637][T21059] ? clear_bhb_loop+0x70/0xc0 [ 600.714660][T21059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.714680][T21059] RIP: 0033:0x7f8a2f39e159 [ 600.714700][T21059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.714716][T21059] RSP: 002b:00007f8a3023b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 600.714737][T21059] RAX: ffffffffffffffda RBX: 00007f8a2f625fa0 RCX: 00007f8a2f39e159 [ 600.714753][T21059] RDX: 0000000000000010 RSI: 00002000000010c0 RDI: 0000000000000003 [ 600.714766][T21059] RBP: 00007f8a3023b090 R08: 0000000000000000 R09: 0000000000000000 [ 600.714779][T21059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.714792][T21059] R13: 00007f8a2f626038 R14: 00007f8a2f625fa0 R15: 00007f8a2f74fa48 [ 600.714822][T21059] [ 600.951557][T21063] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 600.955842][T21063] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 600.962802][T21063] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 600.979928][T21063] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 600.981444][T21063] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 601.210298][ T5705] usb 2-1: USB disconnect, device number 27 [ 601.496907][T21142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2618'. [ 601.501935][T21142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2618'. [ 601.685759][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 601.807853][T21157] loop5: detected capacity change from 0 to 7 [ 601.812206][T21157] loop5: [ 601.812231][T21157] loop5: partition table partially beyond EOD, truncated [ 602.082362][T21165] tipc: Enabled bearer , priority 0 [ 602.110115][T21165] syzkaller0: entered promiscuous mode [ 602.110137][T21165] syzkaller0: entered allmulticast mode [ 602.232817][T21221] FAULT_INJECTION: forcing a failure. [ 602.232817][T21221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.232851][T21221] CPU: 1 UID: 0 PID: 21221 Comm: syz.4.2623 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.232877][T21221] Tainted: [L]=SOFTLOCKUP [ 602.232885][T21221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 602.232897][T21221] Call Trace: [ 602.232905][T21221] [ 602.232914][T21221] dump_stack_lvl+0xe8/0x150 [ 602.232948][T21221] should_fail_ex+0x410/0x560 [ 602.232976][T21221] _copy_from_iter+0x1d3/0x1660 [ 602.233098][T21221] ? __pfx__copy_from_iter+0x10/0x10 [ 602.233120][T21221] ? trace_kmalloc+0x2a/0xf0 [ 602.233145][T21221] ? __kmalloc_noprof+0x38c/0x720 [ 602.233166][T21221] ? __kmalloc_noprof+0x1ab/0x720 [ 602.233185][T21221] ? kernfs_fop_write_iter+0x157/0x540 [ 602.233217][T21221] kernfs_fop_write_iter+0x19a/0x540 [ 602.233248][T21221] vfs_write+0x612/0xba0 [ 602.233277][T21221] ? __pfx_vfs_write+0x10/0x10 [ 602.233305][T21221] ? __fget_files+0x2a/0x420 [ 602.233341][T21221] ksys_write+0x150/0x270 [ 602.233362][T21221] ? __pfx_ksys_write+0x10/0x10 [ 602.233393][T21221] do_syscall_64+0x166/0x520 [ 602.233421][T21221] ? trace_irq_disable+0x3b/0x140 [ 602.233442][T21221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.233462][T21221] ? clear_bhb_loop+0x70/0xc0 [ 602.233486][T21221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.233504][T21221] RIP: 0033:0x7f8a2f39e159 [ 602.233521][T21221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.233537][T21221] RSP: 002b:00007f8a3023b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 602.233558][T21221] RAX: ffffffffffffffda RBX: 00007f8a2f625fa0 RCX: 00007f8a2f39e159 [ 602.233572][T21221] RDX: 0000000000000010 RSI: 00002000000010c0 RDI: 0000000000000003 [ 602.233586][T21221] RBP: 00007f8a3023b090 R08: 0000000000000000 R09: 0000000000000000 [ 602.233599][T21221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.233611][T21221] R13: 00007f8a2f626038 R14: 00007f8a2f625fa0 R15: 00007f8a2f74fa48 [ 602.233642][T21221] [ 602.233816][T21165] tipc: Resetting bearer [ 602.379051][T21068] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.379580][T21068] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.379730][T21068] bridge_slave_0: entered allmulticast mode [ 602.382740][T21068] bridge_slave_0: entered promiscuous mode [ 602.429914][T21238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2624'. [ 602.441948][ T30] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 602.476415][ T88] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 602.526568][T21068] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.526803][T21068] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.526912][T21068] bridge_slave_1: entered allmulticast mode [ 602.527957][T21068] bridge_slave_1: entered promiscuous mode [ 602.570187][T21068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.574379][T21068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.607448][ T30] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 602.608511][ T30] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 602.608542][ T30] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 602.608567][ T30] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 602.608591][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 602.608624][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.612868][ T30] usb 2-1: config 0 descriptor?? [ 602.614340][T21193] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 602.637789][ T88] usb 1-1: Using ep0 maxpacket: 8 [ 602.662319][ T88] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09 [ 602.684276][ T88] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 602.684300][ T88] usb 1-1: config 2 has no interface number 0 [ 602.684344][ T88] usb 1-1: config 2 interface 31 has no altsetting 0 [ 602.697541][ T88] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 602.697567][ T88] usb 1-1: SerialNumber: syz [ 602.729233][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 602.765225][T21068] team0: Port device team_slave_0 added [ 602.778290][T21068] team0: Port device team_slave_1 added [ 602.862261][T21068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.862279][T21068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.862305][T21068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.868383][T21068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.868398][T21068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.868424][T21068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.986130][ T88] ch9200 1-1:2.31: probe with driver ch9200 failed with error -71 [ 603.010368][ T88] usb 1-1: USB disconnect, device number 84 [ 603.047787][ T4932] Bluetooth: hci5: command tx timeout [ 603.072557][ T30] usbhid 2-1:0.0: can't add hid device: -71 [ 603.072652][ T30] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 603.092354][T21163] tipc: Resetting bearer [ 603.092938][ T30] usb 2-1: USB disconnect, device number 28 [ 603.132581][T21163] tipc: Disabling bearer [ 603.172271][T21068] hsr_slave_0: entered promiscuous mode [ 603.176215][T21068] hsr_slave_1: entered promiscuous mode [ 603.400230][T10099] bridge_slave_1: left allmulticast mode [ 603.405105][T10099] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.426995][T10099] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.766666][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 603.830732][T10099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.852224][T10099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.855336][T10099] bond0 (unregistering): Released all slaves [ 603.877583][T21401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2628'. [ 603.881851][T10099] bond1 (unregistering): Released all slaves [ 603.918010][T10099] bond2 (unregistering): (slave veth3): Releasing backup interface [ 603.934638][T21402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2628'. [ 603.954095][T10099] bond2 (unregistering): Released all slaves [ 603.974949][T10099] bond3 (unregistering): (slave veth5): Releasing active interface [ 603.989028][T10099] bond3 (unregistering): Released all slaves [ 604.012971][T10099] bond4 (unregistering): Released all slaves [ 604.048705][T10099] bond5 (unregistering): (slave veth7): Releasing active interface [ 604.064511][T10099] bond5 (unregistering): Released all slaves [ 604.099580][T21397] tipc: Enabled bearer , priority 0 [ 604.228066][T10099] ovs-dp0: left promiscuous mode [ 604.273661][T21435] loop5: detected capacity change from 0 to 7 [ 604.300296][T21435] loop5: [ 604.300319][T21435] loop5: partition table partially beyond EOD, truncated [ 604.579831][T10099] tipc: Left network mode [ 604.806404][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 605.036135][ T30] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 605.127344][ T4932] Bluetooth: hci5: command tx timeout [ 605.487450][ T5705] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 605.559200][T21485] FAULT_INJECTION: forcing a failure. [ 605.559200][T21485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.559258][T21485] CPU: 1 UID: 0 PID: 21485 Comm: syz.2.2633 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.559285][T21485] Tainted: [L]=SOFTLOCKUP [ 605.559293][T21485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.559305][T21485] Call Trace: [ 605.559313][T21485] [ 605.559321][T21485] dump_stack_lvl+0xe8/0x150 [ 605.559355][T21485] should_fail_ex+0x410/0x560 [ 605.559386][T21485] _copy_to_user+0x31/0xb0 [ 605.559481][T21485] simple_read_from_buffer+0xe1/0x170 [ 605.559514][T21485] proc_fail_nth_read+0x1bb/0x230 [ 605.559534][T21485] ? common_file_perm+0x20e/0x2b0 [ 605.559561][T21485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 605.559584][T21485] ? rw_verify_area+0x24a/0x4c0 [ 605.559615][T21485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 605.559635][T21485] vfs_read+0x213/0xa80 [ 605.559670][T21485] ? __pfx___mutex_lock+0x10/0x10 [ 605.559736][T21485] ? __pfx_vfs_read+0x10/0x10 [ 605.559767][T21485] ? __fget_files+0x2a/0x420 [ 605.559799][T21485] ? __fget_files+0x3a2/0x420 [ 605.559825][T21485] ? __fget_files+0x2a/0x420 [ 605.559862][T21485] ksys_read+0x150/0x270 [ 605.559884][T21485] ? __pfx_ksys_read+0x10/0x10 [ 605.559914][T21485] do_syscall_64+0x166/0x520 [ 605.559940][T21485] ? trace_irq_disable+0x3b/0x140 [ 605.559962][T21485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.559983][T21485] ? clear_bhb_loop+0x70/0xc0 [ 605.560007][T21485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.560027][T21485] RIP: 0033:0x7f30fbd5e98e [ 605.560046][T21485] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 605.560065][T21485] RSP: 002b:00007f30f9ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 605.560087][T21485] RAX: ffffffffffffffda RBX: 00007f30f9ff66c0 RCX: 00007f30fbd5e98e [ 605.560102][T21485] RDX: 000000000000000f RSI: 00007f30f9ff60a0 RDI: 0000000000000004 [ 605.560114][T21485] RBP: 00007f30f9ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 605.560134][T21485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.560147][T21485] R13: 00007f30fc026038 R14: 00007f30fc025fa0 R15: 00007f30fc14fa48 [ 605.560179][T21485] [ 605.648742][ T5705] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 605.680554][ T5705] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.718156][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 605.718183][ T5705] usb 1-1: Product: syz [ 605.718198][ T5705] usb 1-1: Manufacturer: syz [ 605.718212][ T5705] usb 1-1: SerialNumber: syz [ 605.851159][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 606.140793][ T5705] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 85 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 606.473595][ T5705] usb 1-1: USB disconnect, device number 85 [ 606.531458][ T5705] usblp0: removed [ 606.806635][T10099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.809711][T10099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.885671][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 607.207248][ T4932] Bluetooth: hci5: command tx timeout [ 607.356433][T21557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.356827][T21557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.627580][T21565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2638'. [ 607.633204][T10099] team0 (unregistering): Port device team_slave_1 removed [ 607.662287][T10099] team0 (unregistering): Port device team_slave_0 removed [ 607.683593][T21566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2638'. [ 607.925680][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 608.075809][T21547] tipc: Enabled bearer , priority 0 [ 608.085540][T21549] syzkaller0: entered promiscuous mode [ 608.085563][T21549] syzkaller0: entered allmulticast mode [ 608.097693][T21556] tipc: Resetting bearer [ 608.213864][T21577] loop5: detected capacity change from 0 to 7 [ 608.221895][T21577] loop5: [ 608.221917][T21577] loop5: partition table partially beyond EOD, truncated [ 608.515879][T21068] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 608.543846][T21068] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 608.544532][T21068] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 608.574157][T21068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.601163][T21068] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 608.616213][T21068] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.617215][T21068] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 608.645404][T21068] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.850337][T21068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.907025][T21068] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.918713][T10722] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.918819][T10722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.949630][T10099] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.949688][T10099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.970115][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 609.157143][T21068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.273569][T21068] veth0_vlan: entered promiscuous mode [ 609.286091][ T4932] Bluetooth: hci5: command tx timeout [ 609.294877][T21068] veth1_vlan: entered promiscuous mode [ 609.369895][T21068] veth0_macvtap: entered promiscuous mode [ 609.374727][T21068] veth1_macvtap: entered promiscuous mode [ 609.410644][T21068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.432057][T21068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.465943][T10099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.465988][T10099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.466021][T10099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.466053][T10099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.467735][T21638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2646'. [ 609.697991][T21653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.698470][T21653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.732847][T10099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.732868][T10099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.778965][T10099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.778987][T10099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.921129][T21560] tipc: Resetting bearer [ 609.953733][T21560] tipc: Disabling bearer [ 610.005679][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 610.154323][T21677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2649'. [ 610.166143][T21677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2649'. [ 610.176862][ T5705] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 610.335681][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 610.336303][ T5705] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 610.337254][ T5705] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 610.337300][ T5705] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 610.337325][ T5705] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 610.337347][ T5705] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 610.368412][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.368437][ T5705] usb 4-1: Product: syz [ 610.368452][ T5705] usb 4-1: Manufacturer: syz [ 610.368465][ T5705] usb 4-1: SerialNumber: syz [ 610.420342][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 610.497110][ T5705] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input65 [ 610.666768][ T5705] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 610.666822][ T5705] (id 0x00) [ 610.686781][ T5674] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 610.827414][ T5705] rc_core: IR keymap rc-imon-pad not found [ 610.827435][ T5705] Registered IR keymap rc-empty [ 610.836815][ T5705] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 610.836838][ T5705] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 610.848336][ T5674] usb 2-1: Using ep0 maxpacket: 32 [ 610.877633][ T5674] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 610.888219][ T5705] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 610.893735][ T5674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.893760][ T5674] usb 2-1: Product: syz [ 610.893776][ T5674] usb 2-1: Manufacturer: syz [ 610.893791][ T5674] usb 2-1: SerialNumber: syz [ 610.936840][ T5674] usb 2-1: config 0 descriptor?? [ 610.943079][ T5705] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input66 [ 610.968017][ T5705] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:99> initialized [ 610.984693][ T5674] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 611.045671][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 611.535057][T21717] netlink: 'syz.4.2655': attribute type 1 has an invalid length. [ 611.582510][T21719] can: request_module (can-proto-0) failed. [ 611.772646][ T5674] gspca_ov534_9: reg_w failed -71 [ 612.058438][ T5674] gspca_ov534_9: Unknown sensor 0000 [ 612.058526][ T5674] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 612.065296][ T5674] usb 2-1: USB disconnect, device number 30 [ 612.088298][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 612.209500][T21753] fuse: Unknown parameter 'O-z~©ÁqyöÑsOdñ_’¯vi' [ 612.209811][T21753] fuse: Unknown parameter 'O-z~©ÁqyöÑsOdñ_’¯vi' [ 612.210072][T21753] fuse: Unknown parameter 'O-z~©ÁqyöÑsOdñ_’¯vi' [ 612.210305][T21753] fuse: Unknown parameter 'O-z~©ÁqyöÑsOdñ_’¯vi' [ 612.225110][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.225334][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.225549][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.225873][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.227277][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.227495][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.234476][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.234701][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.234929][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.235140][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.235349][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.235559][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.239611][T21753] fuse: Unknown parameter 'O-z~©ÁqyöÑsOdñ_’¯vi' [ 612.239929][T21753] fuse: Unknown parameter 'O-z~©ÁqyöÑsOdñ_’¯vi' [ 612.240219][T21753] fuse: Unknown parameter 'O-z~©ÁqyöÑsOdñ_’¯vi' [ 612.240475][T21753] fuse: Unknown parameter 'O-z~©ÁqyöÑsOdñ_’¯vi' [ 612.245306][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.246894][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.247129][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.247342][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.247552][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.264458][T21753] fuse: Unknown parameter 'O-z~©ÁqyöÑsOdñ_’¯vi' [ 612.269536][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.269757][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.269976][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.270179][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.271602][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.271827][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.272055][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.288221][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.288435][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.288651][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.288866][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.289106][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.289316][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.293293][T21750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.303958][T21754] fuse: Unknown parameter '¯úêz±¡_>5xÒ凔(èŠ%kÞ}Ÿ¿2rÞ­eŠ%vÅ4AU' [ 612.657692][ T5705] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 612.806295][ T5705] usb 1-1: Using ep0 maxpacket: 8 [ 612.807449][ T5705] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 612.809582][ T5705] usb 1-1: config 8 has an invalid interface number: 188 but max is 0 [ 612.809607][ T5705] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 612.809627][ T5705] usb 1-1: config 8 has no interface number 0 [ 612.817826][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.817849][ T5705] usb 1-1: Product: syz [ 612.817863][ T5705] usb 1-1: Manufacturer: syz [ 612.817877][ T5705] usb 1-1: SerialNumber: syz [ 613.098765][T21796] tipc: Enabled bearer , priority 0 [ 613.099442][T21796] syzkaller0: entered promiscuous mode [ 613.099462][T21796] syzkaller0: entered allmulticast mode [ 613.124718][ T5705] vmk80xx 1-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 613.125681][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 613.152166][T21796] tipc: Resetting bearer [ 613.175139][ T5705] usb 1-1: USB disconnect, device number 86 [ 613.476669][T21831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2662'. [ 613.478407][T21831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2662'. [ 613.489749][ T10] usb 4-1: USB disconnect, device number 99 [ 614.088789][ T5733] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 614.093135][T21879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.094273][T21879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.124707][T21879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.125135][T21879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.165685][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 614.185827][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 614.225738][ T5733] usb 1-1: device descriptor read/64, error -71 [ 614.357412][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 614.360576][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.360601][ T10] usb 4-1: Product: syz [ 614.360623][ T10] usb 4-1: Manufacturer: syz [ 614.360640][ T10] usb 4-1: SerialNumber: syz [ 614.466358][ T5733] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 614.528858][ T5697] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 614.596506][ T5733] usb 1-1: device descriptor read/64, error -71 [ 614.706666][ T5733] usb usb1-port1: attempt power cycle [ 614.796257][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 614.946116][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 614.947187][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 614.952059][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.952084][ T10] usb 2-1: Product: syz [ 614.952099][ T10] usb 2-1: Manufacturer: syz [ 614.952113][ T10] usb 2-1: SerialNumber: syz [ 614.989011][ T10] usb 2-1: config 0 descriptor?? [ 615.003667][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 615.055724][ T5733] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 615.076527][ T5733] usb 1-1: device descriptor read/8, error -71 [ 615.205686][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 615.317324][ T5733] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 615.345391][ T5733] usb 1-1: device descriptor read/8, error -71 [ 615.451365][ T5733] usb usb1-port1: unable to enumerate USB device [ 615.590443][T21947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.592240][T21947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.618382][ T5697] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 615.618672][ T5697] ath9k_htc: Failed to initialize the device [ 615.668087][ T5697] usb 4-1: ath9k_htc: USB layer deinitialized [ 615.809947][ T10] gspca_ov534_9: reg_w failed -71 [ 615.957957][T21801] tipc: Resetting bearer [ 615.989589][T21801] tipc: Disabling bearer [ 616.138644][ T10] gspca_ov534_9: Unknown sensor 0000 [ 616.138766][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 616.148376][ T10] usb 2-1: USB disconnect, device number 31 [ 616.245700][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 616.249373][T21983] usb usb7: usbfs: process 21983 (syz.2.2673) did not claim interface 0 before use [ 616.267119][T21986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2674'. [ 616.270970][T21986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2674'. [ 616.295090][T21983] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2673'. [ 617.170732][ T5733] usb 4-1: USB disconnect, device number 100 [ 617.285687][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 617.402270][T22037] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2682'. [ 617.402291][T22037] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2682'. [ 617.532283][T22044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2683'. [ 617.601984][T22044] 8021q: adding VLAN 0 to HW filter on device bond6 [ 617.666323][ T5697] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 617.700987][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2685'. [ 617.703337][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2685'. [ 617.824046][ T5697] usb 1-1: unable to get BOS descriptor or descriptor too short [ 617.826744][ T5697] usb 1-1: not running at top speed; connect to a high speed hub [ 617.826776][ T5697] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 617.831682][ T5697] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 617.831705][ T5697] usb 1-1: config 0 has no interface number 0 [ 617.831743][ T5697] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 617.831769][ T5697] usb 1-1: config 0 interface 88 has no altsetting 0 [ 617.850749][ T5697] usb 1-1: language id specifier not provided by device, defaulting to English [ 617.879050][T22087] tipc: Enabled bearer , priority 0 [ 617.884308][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 617.884331][ T5697] usb 1-1: Product: syz [ 617.890183][T22087] syzkaller0: entered promiscuous mode [ 617.890202][T22087] syzkaller0: entered allmulticast mode [ 617.895435][T22093] loop5: detected capacity change from 0 to 7 [ 617.897055][T22093] loop5: [ 617.897077][T22093] loop5: partition table partially beyond EOD, truncated [ 617.925202][ T5697] usb 1-1: config 0 descriptor?? [ 617.930170][T22032] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 617.997656][T22087] tipc: Resetting bearer [ 618.058126][ T30] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 618.203593][ T5697] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input67 [ 618.206062][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 618.221651][ T30] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 618.234535][ T5697] usb 1-1: USB disconnect, device number 91 [ 618.234626][ C0] usb_acecad 1-1:0.88: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 618.265573][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.265967][ T30] usb 4-1: Product: syz [ 618.265983][ T30] usb 4-1: Manufacturer: syz [ 618.265999][ T30] usb 4-1: SerialNumber: syz [ 618.272104][ T30] usb 4-1: config 0 descriptor?? [ 618.312904][ T30] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 618.325683][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 618.645866][ T5705] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 618.796379][ T5705] usb 2-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 618.797431][ T5705] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 618.797457][ T5705] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 618.800442][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.800465][ T5705] usb 2-1: Product: syz [ 618.800480][ T5705] usb 2-1: Manufacturer: syz [ 618.800495][ T5705] usb 2-1: SerialNumber: syz [ 619.002737][T22151] loop4: detected capacity change from 0 to 7 [ 619.004086][T22151] Dev loop4: unable to read RDB block 7 [ 619.004111][T22151] loop4: AHDI p1 p2 [ 619.004124][T22151] loop4: partition table partially beyond EOD, truncated [ 619.004327][T22151] loop4: p1 start 1835360114 is beyond EOD, truncated [ 619.010941][ T5705] ipheth 2-1:1.0: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 619.011171][ T5705] ipheth 2-1:1.0: probe with driver ipheth failed with error -22 [ 619.015426][T22151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.025237][T22151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.063771][T22151] netlink: 'syz.4.2693': attribute type 10 has an invalid length. [ 619.092352][ T30] gspca_ov534_9: reg_w failed -71 [ 619.234172][T22138] logitech-hidpp-device 0003:046D:C082.0021: received hid++ report of bad size (4) [ 619.248002][T22138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.249051][T22138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.251238][ T5733] apple-mfi-fastcharge 2-1: USB disconnect, device number 32 [ 619.256116][ T5697] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 619.306959][ T5705] logitech-hidpp-device 0003:046D:C082.0021: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 619.352659][T22178] fido_id[22178]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 619.369728][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 619.377947][ T30] gspca_ov534_9: Unknown sensor 0000 [ 619.377999][ T30] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 619.381027][ T30] usb 4-1: USB disconnect, device number 101 [ 619.435780][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 619.436247][ T5697] usb 1-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 619.437068][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.437086][ T5697] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 619.437108][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.438976][ T5697] usb 1-1: config 0 descriptor?? [ 619.653317][T22147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.654053][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 619.654069][ T31] audit: type=1326 audit(1790569887.816:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22192 comm="syz.3.2694" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a79e159 code=0x7ffc0000 [ 619.654760][ T31] audit: type=1326 audit(1790569887.816:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22192 comm="syz.3.2694" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a79e159 code=0x7ffc0000 [ 619.654966][ T31] audit: type=1326 audit(1790569887.816:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22192 comm="syz.3.2694" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f842a79e159 code=0x7ffc0000 [ 619.655329][ T31] audit: type=1326 audit(1790569887.816:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22192 comm="syz.3.2694" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a79e159 code=0x7ffc0000 [ 619.655522][ T31] audit: type=1326 audit(1790569887.816:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22192 comm="syz.3.2694" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a79e159 code=0x7ffc0000 [ 619.658791][T22147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.746513][ T31] audit: type=1326 audit(1790569887.916:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22192 comm="syz.3.2694" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a79e159 code=0x7ffc0000 [ 619.756306][ T5697] usbhid 1-1:0.0: can't add hid device: -71 [ 619.756401][ T5697] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 619.770762][ T5697] usb 1-1: USB disconnect, device number 92 [ 619.773768][ T31] audit: type=1326 audit(1790569887.916:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22192 comm="syz.3.2694" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a79e159 code=0x7ffc0000 [ 619.774127][ T31] audit: type=1326 audit(1790569887.936:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22192 comm="syz.3.2694" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f842a79e159 code=0x7ffc0000 [ 619.805799][ T31] audit: type=1326 audit(1790569887.936:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22192 comm="syz.3.2694" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a79e159 code=0x7ffc0000 [ 619.805846][ T31] audit: type=1326 audit(1790569887.936:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22192 comm="syz.3.2694" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f842a79e159 code=0x7ffc0000 [ 619.996921][T22211] binder: 22210:22211 unknown command 0 [ 619.996951][T22211] binder: 22210:22211 ioctl c0306201 2000000004c0 returned -22 [ 619.997343][T22211] binder: 22210:22211 ioctl c0306201 200000000180 returned -14 [ 620.051107][T22209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.315965][ T5697] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 620.336915][T22253] __nla_validate_parse: 1 callbacks suppressed [ 620.336990][T22253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'. [ 620.338733][T22253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'. [ 620.405860][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 620.481305][ T5697] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d99, bcdDevice=fb.a5 [ 620.494750][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.494775][ T5697] usb 2-1: Product: syz [ 620.494790][ T5697] usb 2-1: Manufacturer: syz [ 620.494804][ T5697] usb 2-1: SerialNumber: syz [ 620.656444][T22266] FAULT_INJECTION: forcing a failure. [ 620.656444][T22266] name failslab, interval 1, probability 0, space 0, times 0 [ 620.656466][T22266] CPU: 0 UID: 0 PID: 22266 Comm: syz.3.2700 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.656484][T22266] Tainted: [L]=SOFTLOCKUP [ 620.656489][T22266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.656495][T22266] Call Trace: [ 620.656500][T22266] [ 620.656505][T22266] dump_stack_lvl+0xe8/0x150 [ 620.656526][T22266] should_fail_ex+0x410/0x560 [ 620.656543][T22266] should_failslab+0xa8/0x100 [ 620.656559][T22266] __kmalloc_cache_noprof+0xa3/0x600 [ 620.656572][T22266] ? keyctl_watch_key+0x184/0x460 [ 620.656668][T22266] ? keyctl_watch_key+0x184/0x460 [ 620.656683][T22266] keyctl_watch_key+0x184/0x460 [ 620.656695][T22266] ? __se_sys_keyctl+0x11d/0x9d0 [ 620.656708][T22266] __se_sys_keyctl+0x12f/0x9d0 [ 620.656722][T22266] ? __pfx___se_sys_keyctl+0x10/0x10 [ 620.656734][T22266] ? __mutex_unlock_slowpath+0x731/0x900 [ 620.656751][T22266] ? __fget_files+0x2a/0x420 [ 620.656767][T22266] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 620.656782][T22266] ? __fget_files+0x3a2/0x420 [ 620.656801][T22266] ? fput+0xa0/0xd0 [ 620.656815][T22266] ? ksys_write+0x242/0x270 [ 620.656826][T22266] ? __pfx_ksys_write+0x10/0x10 [ 620.656839][T22266] ? __x64_sys_keyctl+0x20/0xc0 [ 620.656860][T22266] do_syscall_64+0x166/0x520 [ 620.656875][T22266] ? trace_irq_disable+0x3b/0x140 [ 620.656887][T22266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.656898][T22266] ? clear_bhb_loop+0x70/0xc0 [ 620.656912][T22266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.656923][T22266] RIP: 0033:0x7f842a79e159 [ 620.656934][T22266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.656944][T22266] RSP: 002b:00007f84289f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 620.656956][T22266] RAX: ffffffffffffffda RBX: 00007f842aa25fa0 RCX: 00007f842a79e159 [ 620.656964][T22266] RDX: 0000000000000004 RSI: 0000000004cc6b18 RDI: 0000000000000020 [ 620.656970][T22266] RBP: 00007f84289f6090 R08: 0000000000000000 R09: 0000000000000000 [ 620.656977][T22266] R10: 0000000000000047 R11: 0000000000000246 R12: 0000000000000001 [ 620.656984][T22266] R13: 00007f842aa26038 R14: 00007f842aa25fa0 R15: 00007f842ab4fa48 [ 620.656999][T22266] [ 620.864328][ T5697] usb 2-1: USB disconnect, device number 33 [ 620.883200][T22277] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 620.883225][T22277] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 620.883300][T22277] vhci_hcd vhci_hcd.0: Device attached [ 620.922742][T22270] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 620.922766][T22270] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 620.922810][T22270] vhci_hcd vhci_hcd.0: Device attached [ 620.942968][T22270] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 620.942991][T22270] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 620.943033][T22270] vhci_hcd vhci_hcd.0: Device attached [ 621.003155][T22087] tipc: Resetting bearer [ 621.023802][T22277] netlink: 12095 bytes leftover after parsing attributes in process `syz.4.2701'. [ 621.050190][T22087] tipc: Disabling bearer [ 621.055043][T22277] wlan1: mtu less than device minimum [ 621.135743][ T5705] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 621.157230][T22301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2703'. [ 621.165035][T22301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2703'. [ 621.165285][T22301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2703'. [ 621.194612][T22301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2703'. [ 621.194782][T22301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2703'. [ 621.445669][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 621.493192][T22288] vhci_hcd: connection closed [ 621.493464][T10099] vhci_hcd vhci_hcd.4: stop threads [ 621.493480][T10099] vhci_hcd vhci_hcd.4: release socket [ 621.494817][T10099] vhci_hcd vhci_hcd.4: disconnect device [ 621.495301][T22286] vhci_hcd: connection closed [ 621.495950][T10102] vhci_hcd vhci_hcd.4: stop threads [ 621.495967][T10102] vhci_hcd vhci_hcd.4: release socket [ 621.496013][T10102] vhci_hcd vhci_hcd.4: disconnect device [ 621.496281][T22281] vhci_hcd: connection reset by peer [ 621.497121][T10102] vhci_hcd vhci_hcd.4: stop threads [ 621.497137][T10102] vhci_hcd vhci_hcd.4: release socket [ 621.497179][T10102] vhci_hcd vhci_hcd.4: disconnect device [ 621.777708][ T5697] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 621.918135][ T1219] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 621.929024][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 621.932624][ T5697] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 621.938671][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.938694][ T5697] usb 1-1: Product: syz [ 621.938708][ T5697] usb 1-1: Manufacturer: syz [ 621.938722][ T5697] usb 1-1: SerialNumber: syz [ 621.947826][ T5697] usb 1-1: config 0 descriptor?? [ 621.968702][ T5697] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 622.065752][ T1219] usb 2-1: Using ep0 maxpacket: 32 [ 622.067766][ T1219] usb 2-1: unable to get BOS descriptor or descriptor too short [ 622.067795][ T1219] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 622.072035][ T1219] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 622.072050][ T1219] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 622.072061][ T1219] usb 2-1: config 14 has no interface number 0 [ 622.072069][ T1219] usb 2-1: config 14 has no interface number 1 [ 622.072102][ T1219] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 622.072131][ T1219] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 622.072144][ T1219] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 622.072157][ T1219] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 622.072172][ T1219] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 622.072185][ T1219] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.072199][ T1219] usb 2-1: config 14 interface 57 has no altsetting 0 [ 622.072208][ T1219] usb 2-1: config 14 interface 228 has no altsetting 0 [ 622.083520][ T1219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.083544][ T1219] usb 2-1: Product: syz [ 622.083559][ T1219] usb 2-1: Manufacturer: syz [ 622.083573][ T1219] usb 2-1: SerialNumber: syz [ 622.173964][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807a599800: rx timeout, send abort [ 622.375628][T22336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.377429][T22336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.485675][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 622.532543][ T1219] legousbtower 2-1:14.57: interrupt endpoints not found [ 622.572142][T22342] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.572762][T22342] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.673956][T22342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.676004][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807a599800: abort rx timeout. Force session deactivation [ 622.704074][T22342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.733569][T22349] FAULT_INJECTION: forcing a failure. [ 622.733569][T22349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.733635][T22349] CPU: 0 UID: 0 PID: 22349 Comm: syz.2.2712 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.733662][T22349] Tainted: [L]=SOFTLOCKUP [ 622.733670][T22349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.733682][T22349] Call Trace: [ 622.733690][T22349] [ 622.733699][T22349] dump_stack_lvl+0xe8/0x150 [ 622.733735][T22349] should_fail_ex+0x410/0x560 [ 622.733766][T22349] _copy_to_user+0x31/0xb0 [ 622.733794][T22349] simple_read_from_buffer+0xe1/0x170 [ 622.733838][T22349] proc_fail_nth_read+0x1bb/0x230 [ 622.733859][T22349] ? common_file_perm+0x20e/0x2b0 [ 622.733887][T22349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.733912][T22349] ? rw_verify_area+0x24a/0x4c0 [ 622.733940][T22349] ? put_watch_queue+0x143/0x270 [ 622.733971][T22349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.733992][T22349] vfs_read+0x213/0xa80 [ 622.734027][T22349] ? __pfx___mutex_lock+0x10/0x10 [ 622.734056][T22349] ? __pfx_vfs_read+0x10/0x10 [ 622.734088][T22349] ? __fget_files+0x2a/0x420 [ 622.734118][T22349] ? __fget_files+0x3a2/0x420 [ 622.734144][T22349] ? __fget_files+0x2a/0x420 [ 622.734179][T22349] ksys_read+0x150/0x270 [ 622.734201][T22349] ? __pfx_ksys_read+0x10/0x10 [ 622.734232][T22349] do_syscall_64+0x166/0x520 [ 622.734258][T22349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.734279][T22349] ? clear_bhb_loop+0x70/0xc0 [ 622.734303][T22349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.734323][T22349] RIP: 0033:0x7f30fbd5e98e [ 622.734342][T22349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 622.734361][T22349] RSP: 002b:00007f30f9ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 622.734383][T22349] RAX: ffffffffffffffda RBX: 00007f30f9ff66c0 RCX: 00007f30fbd5e98e [ 622.734398][T22349] RDX: 000000000000000f RSI: 00007f30f9ff60a0 RDI: 0000000000000005 [ 622.734411][T22349] RBP: 00007f30f9ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 622.734424][T22349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.734436][T22349] R13: 00007f30fc026038 R14: 00007f30fc025fa0 R15: 00007f30fc14fa48 [ 622.734468][T22349] [ 622.813053][ T5697] gspca_ov534_9: reg_w failed -71 [ 623.096380][ T5697] gspca_ov534_9: Unknown sensor 0000 [ 623.096471][ T5697] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 623.103483][ T5697] usb 1-1: USB disconnect, device number 93 [ 623.206890][T22372] tipc: Enabled bearer , priority 0 [ 623.215202][T22355] syzkaller0: entered promiscuous mode [ 623.215216][T22355] syzkaller0: entered allmulticast mode [ 623.246104][ T9271] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.246137][ T9271] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.246156][ T9271] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.246174][ T9271] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.261724][T22355] tipc: Resetting bearer [ 623.301107][ T1219] legousbtower 2-1:14.228: get version request failed: -71 [ 623.301284][ T1219] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 623.330524][ T1219] usb 2-1: USB disconnect, device number 34 [ 623.462709][T22397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2716'. [ 623.535754][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 624.004462][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 624.005360][T22416] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 624.009046][T22416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 624.254907][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.254966][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.341411][T22432] openvswitch: netlink: Flow actions attr not present in new flow. [ 624.558040][T22453] binder: 22451:22453 ioctl 8004af70 200000000200 returned -22 [ 624.575714][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 624.625998][T22464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.635575][T22464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.682772][T22473] bridge0: entered allmulticast mode [ 624.684803][T22473] bridge_slave_1: left allmulticast mode [ 624.704638][T22473] bridge_slave_1: left promiscuous mode [ 624.706613][T22473] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.769693][T22473] bridge_slave_0: left allmulticast mode [ 624.769712][T22473] bridge_slave_0: left promiscuous mode [ 624.769851][T22473] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.996986][ T5682] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 625.055895][ T5674] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 625.156173][ T5682] usb 4-1: Using ep0 maxpacket: 32 [ 625.156883][ T5682] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 625.158083][ T5682] usb 4-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 625.158103][ T5682] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 625.158127][ T5682] usb 4-1: too many endpoints for config 1 interface 1 altsetting 244: 251, using maximum allowed: 30 [ 625.158146][ T5682] usb 4-1: config 1 interface 1 altsetting 244 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 625.158161][ T5682] usb 4-1: config 1 interface 1 has no altsetting 1 [ 625.162263][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.162288][ T5682] usb 4-1: Product: syz [ 625.162303][ T5682] usb 4-1: Manufacturer: syz [ 625.162319][ T5682] usb 4-1: SerialNumber: syz [ 625.243410][ T5674] usb 1-1: Using ep0 maxpacket: 32 [ 625.252353][ T5674] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 625.258791][ T5674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.258814][ T5674] usb 1-1: Product: syz [ 625.258829][ T5674] usb 1-1: Manufacturer: syz [ 625.258842][ T5674] usb 1-1: SerialNumber: syz [ 625.269221][ T5674] usb 1-1: config 0 descriptor?? [ 625.299451][ T5674] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 625.395264][T22473] __nla_validate_parse: 2 callbacks suppressed [ 625.395283][T22473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2725'. [ 625.427920][ T5682] usb 4-1: 0:2 : does not exist [ 625.506116][ T5682] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 625.513436][ T5682] usb 4-1: USB disconnect, device number 102 [ 625.580739][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 625.605716][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 625.955292][T22372] tipc: Resetting bearer [ 626.053650][T22372] tipc: Disabling bearer [ 626.106870][ T5674] gspca_ov534_9: reg_w failed -71 [ 626.215873][T22560] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 626.235758][ T5705] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 626.251424][T22560] kvm: pic: single mode not supported [ 626.254156][T22560] kvm: pic: non byte read [ 626.254648][T22560] kvm: pic: level sensitive irq not supported [ 626.256162][T22560] kvm: pic: non byte read [ 626.257816][T22560] kvm: pic: level sensitive irq not supported [ 626.257874][T22560] kvm: pic: non byte read [ 626.261060][T22560] kvm: pic: level sensitive irq not supported [ 626.268423][T22560] kvm: pic: non byte read [ 626.268847][T22560] kvm: pic: level sensitive irq not supported [ 626.269360][T22560] kvm: pic: non byte read [ 626.405866][ T5674] gspca_ov534_9: Unknown sensor 0000 [ 626.405983][ T5674] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 626.419982][ T5674] usb 1-1: USB disconnect, device number 94 [ 626.645675][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 626.656533][T22591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.660821][T22591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.310420][T22631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 627.388990][T22627] 0: reclassify loop, rule prio 0, protocol 03 [ 627.433506][T22655] tipc: Enabled bearer , priority 0 [ 627.434024][T22655] syzkaller0: entered promiscuous mode [ 627.434037][T22655] syzkaller0: entered allmulticast mode [ 627.461416][T22655] tipc: Resetting bearer [ 627.463224][T22655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.463681][T22655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.507782][T22654] tipc: Resetting bearer [ 627.567302][T22654] tipc: Disabling bearer [ 627.685667][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 627.734230][T22679] netlink: 540 bytes leftover after parsing attributes in process `syz.1.2744'. [ 627.734754][T22680] netlink: 540 bytes leftover after parsing attributes in process `syz.1.2744'. [ 627.845725][ T5705] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 627.961089][T22692] ======================================================= [ 627.961089][T22692] WARNING: The mand mount option has been deprecated and [ 627.961089][T22692] and is ignored by this kernel. Remove the mand [ 627.961089][T22692] option from the mount to silence this warning. [ 627.961089][T22692] ======================================================= [ 627.961130][T22692] fuse: Unknown parameter 'tFv“ÜÝ„*¯·6¬4fd' [ 627.995704][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 627.996431][ T5705] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 627.997408][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.003305][ T5705] usb 4-1: config 0 descriptor?? [ 628.075737][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 628.161506][T22702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2748'. [ 628.226532][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 628.229103][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 628.241156][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.241181][ T10] usb 2-1: Product: syz [ 628.241195][ T10] usb 2-1: Manufacturer: syz [ 628.241209][ T10] usb 2-1: SerialNumber: syz [ 628.258594][ T10] usb 2-1: config 0 descriptor?? [ 628.273156][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 628.437016][ T5705] usb 4-1: string descriptor 0 read error: -71 [ 628.441638][ T5705] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 628.450424][ T5705] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input69 [ 628.490918][ T5705] usb 4-1: USB disconnect, device number 103 [ 628.725706][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 629.081340][ T10] gspca_ov534_9: reg_w failed -71 [ 629.214809][T22751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2752'. [ 629.214844][T22751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2752'. [ 629.215059][T22752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2752'. [ 629.215081][T22752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2752'. [ 629.229679][T22751] gretap0: entered promiscuous mode [ 629.244649][T22751] gretap0: left promiscuous mode [ 629.277810][T22752] gretap0: entered promiscuous mode [ 629.279601][T22752] gretap0: left promiscuous mode [ 629.333878][T22764] ip_tables: iptables: counters copy to user failed while replacing table [ 629.366223][ T10] gspca_ov534_9: Unknown sensor 0000 [ 629.366295][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 629.369684][ T10] usb 2-1: USB disconnect, device number 35 [ 629.531929][T22774] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 629.765679][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 629.844910][T22788] tipc: Enabling of bearer rejected, failed to enable media [ 629.878815][T22792] netlink: 'syz.0.2757': attribute type 11 has an invalid length. [ 629.878838][T22792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2757'. [ 630.166939][T22803] tipc: Started in network mode [ 630.166968][T22803] tipc: Node identity 1afe6b331c08, cluster identity 4711 [ 630.167116][T22803] tipc: Enabled bearer , priority 0 [ 630.401555][T22803] syzkaller0: entered promiscuous mode [ 630.401579][T22803] syzkaller0: entered allmulticast mode [ 630.423371][T22809] tipc: Resetting bearer [ 630.615784][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 630.714819][T22827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.715312][T22827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.765939][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 630.773499][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09 [ 630.774627][ T10] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 630.774642][ T10] usb 4-1: config 2 has no interface number 0 [ 630.774669][ T10] usb 4-1: config 2 interface 31 has no altsetting 0 [ 630.793042][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 630.793066][ T10] usb 4-1: SerialNumber: syz [ 630.815672][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 631.044218][ T10] ch9200 4-1:2.31: probe with driver ch9200 failed with error -71 [ 631.064233][T22802] tipc: Resetting bearer [ 631.064952][ T10] usb 4-1: USB disconnect, device number 104 [ 631.133622][T22802] tipc: Disabling bearer [ 631.269617][T22855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.845697][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 631.965764][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 632.118985][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 632.120004][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 632.120022][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 632.120049][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.270886][ T30] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 632.416454][ T30] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 632.417053][ T30] usb 4-1: config 0 has no interfaces? [ 632.419452][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.419476][ T30] usb 4-1: Product: syz [ 632.419490][ T30] usb 4-1: Manufacturer: syz [ 632.419504][ T30] usb 4-1: SerialNumber: syz [ 632.426208][ T30] usb 4-1: config 0 descriptor?? [ 632.592353][ T10] lg-g15 0003:046D:C222.0022: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 632.648355][ T10] lg-g15 0003:046D:C222.0022: Error -90 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 632.780795][ T30] usb 1-1: USB disconnect, device number 95 [ 632.824301][ T5674] usb 4-1: USB disconnect, device number 105 [ 632.869767][T22937] xt_TCPMSS: Only works on TCP SYN packets [ 632.885673][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 633.534848][T22964] kvm: pic: non byte write [ 633.766498][ T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 633.895929][ T10] usb 4-1: device descriptor read/64, error -71 [ 633.925807][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 634.109343][ T31] kauditd_printk_skb: 333 callbacks suppressed [ 634.109361][ T31] audit: type=1326 audit(1790569902.276:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22995 comm="syz.4.2781" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a2f39e159 code=0x0 [ 634.149747][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 634.276343][ T10] usb 4-1: device descriptor read/64, error -71 [ 634.386087][ T10] usb usb4-port1: attempt power cycle [ 634.645837][ T5674] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 634.736025][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 634.756906][ T10] usb 4-1: device descriptor read/8, error -71 [ 634.798301][ T5674] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 634.799558][ T5674] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.799587][ T5674] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 634.801396][ T5674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 634.801420][ T5674] usb 1-1: Product: syz [ 634.801435][ T5674] usb 1-1: Manufacturer: syz [ 634.880748][ T5674] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 634.984079][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 634.995714][ T10] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 635.030051][ T10] usb 4-1: device descriptor read/8, error -71 [ 635.135989][ T10] usb usb4-port1: unable to enumerate USB device [ 635.191163][T23050] bridge0: port 1(syz_tun) entered blocking state [ 635.191239][T23050] bridge0: port 1(syz_tun) entered listening state [ 635.222864][T23050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.231593][T23050] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.244455][T23050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.337777][ T5674] mos7840 ttyUSB0: probe with driver mos7840 failed with error -5 [ 635.359960][T23050] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 635.540662][ T88] usb 1-1: USB disconnect, device number 96 [ 635.555177][ T88] mos7840 1-1:1.0: device disconnected [ 636.005847][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 636.086129][ T1219] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 636.236439][ T1219] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 636.237140][ T1219] usb 2-1: config 0 has no interfaces? [ 636.266819][ T1219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.266843][ T1219] usb 2-1: Product: syz [ 636.266858][ T1219] usb 2-1: Manufacturer: syz [ 636.266868][ T1219] usb 2-1: SerialNumber: syz [ 636.271973][ T1219] usb 2-1: config 0 descriptor?? [ 636.490185][ T1219] usb 2-1: USB disconnect, device number 36 [ 636.702672][T23130] input: syz0 as /devices/virtual/input/input71 [ 636.730634][T23130] ip_tables: iptables: counters copy to user failed while replacing table [ 636.777289][T23136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.777577][T23136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.046100][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 637.227011][T23155] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 637.229474][T23155] netlink: 'syz.1.2798': attribute type 7 has an invalid length. [ 637.466597][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 637.555686][ T88] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 637.615841][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 637.618645][ T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 637.621862][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.621886][ T10] usb 2-1: Product: syz [ 637.621902][ T10] usb 2-1: Manufacturer: syz [ 637.621916][ T10] usb 2-1: SerialNumber: syz [ 637.666306][ T10] usb 2-1: config 0 descriptor?? [ 637.670826][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 637.757268][ T88] usb 1-1: Using ep0 maxpacket: 32 [ 637.759007][ T88] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 637.786469][ T88] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 637.786495][ T88] usb 1-1: config 0 has no interface number 0 [ 637.796217][ T88] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.796240][ T88] usb 1-1: Product: syz [ 637.796254][ T88] usb 1-1: Manufacturer: syz [ 637.796268][ T88] usb 1-1: SerialNumber: syz [ 637.829985][ T88] usb 1-1: config 0 descriptor?? [ 637.856221][ T88] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 638.006657][T23180] tipc: Enabled bearer , priority 0 [ 638.008432][T23180] syzkaller0: entered promiscuous mode [ 638.008446][T23180] syzkaller0: entered allmulticast mode [ 638.048809][ T88] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 638.070195][ T88] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 638.085686][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 638.110547][T23186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.112980][T23186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.134110][T23180] tipc: Resetting bearer [ 638.159807][ T10] gspca_se401: Bayer format not supported! [ 638.283130][T23203] bond0: (slave bond_slave_0): Releasing backup interface [ 638.329351][T23203] bond0: (slave bond_slave_1): Releasing backup interface [ 638.355030][T23203] team0: Port device team_slave_0 removed [ 638.371855][T23203] team0: Port device team_slave_1 removed [ 638.372148][T23203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.374079][T23203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.398422][T23203] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 638.638341][T23171] fuse: Bad value for 'fd' [ 638.708220][ T10] usb 2-1: USB disconnect, device number 37 [ 638.829315][T23171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.832436][T23171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.023624][T23226] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 639.029032][T23226] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 639.125707][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 639.446251][ T5682] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 639.596161][ T88] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 639.616217][ T5682] usb 4-1: Using ep0 maxpacket: 32 [ 639.619862][ T5682] usb 4-1: unable to get BOS descriptor or descriptor too short [ 639.619906][ T5682] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 639.620991][ T5682] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.621015][ T5682] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 639.623744][ T5682] usb 4-1: string descriptor 0 read error: -22 [ 639.623932][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.677781][ T5682] usb 4-1: unit 2 not found! [ 639.759349][ T88] usb 2-1: unable to get BOS descriptor or descriptor too short [ 639.759414][ T88] usb 2-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 639.760574][ T88] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 639.763217][ T88] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.763242][ T88] usb 2-1: Product: syz [ 639.763257][ T88] usb 2-1: Manufacturer: syz [ 639.763298][ T88] usb 2-1: SerialNumber: syz [ 639.838424][T23236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.840441][T23236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.843333][T23236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.843773][T23236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.887342][ T5682] usb 4-1: 4:0: failed to get current value for ch 0 (-71) [ 639.898233][ T5682] usb 4-1: 4:0: failed to get current value for ch 0 (-71) [ 639.972314][ T5682] usb 4-1: USB disconnect, device number 110 [ 640.165661][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 640.307225][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 640.307642][ T5682] usb 1-1: USB disconnect, device number 97 [ 640.320365][ T5682] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 640.327203][ T5682] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 640.329277][ T5682] quatech2 1-1:0.51: device disconnected [ 640.413203][T23290] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 640.470482][T23299] fuse: fd is not a fuse device [ 640.472000][T23299] fuse: fd is not a fuse device [ 640.472264][T23299] fuse: fd is not a fuse device [ 640.472478][T23299] fuse: fd is not a fuse device [ 640.472717][T23299] fuse: fd is not a fuse device [ 640.472910][T23299] fuse: fd is not a fuse device [ 640.473311][T23299] fuse: fd is not a fuse device [ 640.473506][T23299] fuse: fd is not a fuse device [ 640.473721][T23299] fuse: fd is not a fuse device [ 640.473933][T23299] fuse: fd is not a fuse device [ 640.474239][T23299] fuse: fd is not a fuse device [ 640.474479][T23299] fuse: fd is not a fuse device [ 640.474707][T23299] fuse: fd is not a fuse device [ 640.474912][T23299] fuse: fd is not a fuse device [ 640.475129][T23299] fuse: fd is not a fuse device [ 640.475397][T23299] fuse: fd is not a fuse device [ 640.516632][T23299] fuse: fd is not a fuse device [ 640.561917][T23299] fuse: fd is not a fuse device [ 640.562213][T23299] fuse: fd is not a fuse device [ 640.562480][T23299] fuse: fd is not a fuse device [ 640.562794][T23299] fuse: fd is not a fuse device [ 640.563061][T23299] fuse: fd is not a fuse device [ 640.563340][T23299] fuse: fd is not a fuse device [ 640.563607][T23299] fuse: fd is not a fuse device [ 640.563920][T23299] fuse: fd is not a fuse device [ 640.564187][T23299] fuse: fd is not a fuse device [ 640.564452][T23299] fuse: fd is not a fuse device [ 640.564712][T23299] fuse: fd is not a fuse device [ 640.565038][T23299] fuse: fd is not a fuse device [ 640.565308][T23299] fuse: fd is not a fuse device [ 640.565568][T23299] fuse: fd is not a fuse device [ 640.586165][T23299] fuse: fd is not a fuse device [ 640.587117][T23299] fuse: fd is not a fuse device [ 640.656924][ T31] audit: type=1326 audit(1790569908.826:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23306 comm="syz.0.2809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75039e159 code=0x7ffc0000 [ 640.657163][ T31] audit: type=1326 audit(1790569908.826:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23306 comm="syz.0.2809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75039e159 code=0x7ffc0000 [ 640.658226][ T31] audit: type=1326 audit(1790569908.826:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23306 comm="syz.0.2809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75039e159 code=0x7ffc0000 [ 640.660359][ T31] audit: type=1326 audit(1790569908.826:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23306 comm="syz.0.2809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75039e159 code=0x7ffc0000 [ 640.661061][ T31] audit: type=1326 audit(1790569908.826:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23306 comm="syz.0.2809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75039e159 code=0x7ffc0000 [ 640.662022][ T31] audit: type=1326 audit(1790569908.826:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23306 comm="syz.0.2809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75039e159 code=0x7ffc0000 [ 640.665054][ T31] audit: type=1326 audit(1790569908.826:7095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23306 comm="syz.0.2809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75039e159 code=0x7ffc0000 [ 640.690341][ T31] audit: type=1326 audit(1790569908.826:7096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23306 comm="syz.0.2809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc75035e98e code=0x7ffc0000 [ 640.690392][ T31] audit: type=1326 audit(1790569908.836:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23306 comm="syz.0.2809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75039e159 code=0x7ffc0000 [ 640.690424][ T31] audit: type=1326 audit(1790569908.836:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23306 comm="syz.0.2809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75039e159 code=0x7ffc0000 [ 640.946754][T23180] tipc: Resetting bearer [ 640.967794][T23180] tipc: Disabling bearer [ 641.105549][T23318] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 641.106397][T23318] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 641.128226][T23318] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 641.128248][T23318] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 641.146142][ T5682] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 641.172529][T23318] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 641.172551][T23318] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 641.181807][T23318] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 641.181829][T23318] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 641.205813][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 641.210034][T23318] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 641.210063][T23318] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 641.297427][ T5682] usb 4-1: Using ep0 maxpacket: 16 [ 641.302162][ T5682] usb 4-1: unable to get BOS descriptor or descriptor too short [ 641.302208][ T5682] usb 4-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85 [ 641.303049][ T5682] usb 4-1: config 1 has an invalid interface number: 151 but max is 0 [ 641.303064][ T5682] usb 4-1: config 1 has no interface number 0 [ 641.303080][ T5682] usb 4-1: config 1 interface 151 has no altsetting 0 [ 641.307124][ T5682] usb 4-1: string descriptor 0 read error: -22 [ 641.307271][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.354493][ T5682] gspca_main: pac7311-2.14.0 probing 093a:260e [ 641.497121][T23352] bridge4: entered promiscuous mode [ 641.497225][T23352] bridge4: entered allmulticast mode [ 641.501807][T23352] team0: Device bridge4 is of different type [ 641.612198][T23361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2815'. [ 641.756202][T23311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2810'. [ 641.772280][T23368] netlink: 774 bytes leftover after parsing attributes in process `syz.0.2818'. [ 642.045814][ T5682] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -110 [ 642.045922][ T5682] pac7311 4-1:1.151: probe with driver pac7311 failed with error -110 [ 642.245674][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 642.288511][ T88] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 642.289634][ T88] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 642.347734][ T88] usb 2-1: USB disconnect, device number 38 [ 642.414305][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 642.490225][T23402] tipc: Enabled bearer , priority 0 [ 642.490885][T23402] syzkaller0: entered promiscuous mode [ 642.490904][T23402] syzkaller0: entered allmulticast mode [ 642.502718][T23402] tipc: Resetting bearer [ 642.779514][T23409] syz.1.2820: vmalloc error: size 69632, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 642.779611][T23409] CPU: 0 UID: 0 PID: 23409 Comm: syz.1.2820 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.779628][T23409] Tainted: [L]=SOFTLOCKUP [ 642.779632][T23409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.779639][T23409] Call Trace: [ 642.779644][T23409] [ 642.779650][T23409] dump_stack_lvl+0xe8/0x150 [ 642.779672][T23409] warn_alloc+0x24d/0x270 [ 642.779688][T23409] ? __pfx_warn_alloc+0x10/0x10 [ 642.779700][T23409] ? percpu_ref_get_many+0x19/0x140 [ 642.779718][T23409] ? alloc_pages_mpol+0x256/0x390 [ 642.779738][T23409] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 642.779770][T23409] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 642.779790][T23409] ? rcu_is_watching+0x16/0xb0 [ 642.779804][T23409] ? newary+0x142/0xad0 [ 642.779885][T23409] ? rcu_is_watching+0x16/0xb0 [ 642.779900][T23409] ? newary+0x142/0xad0 [ 642.779910][T23409] __kvmalloc_node_noprof+0x5a1/0x820 [ 642.779928][T23409] ? newary+0x142/0xad0 [ 642.779949][T23409] ? newary+0x142/0xad0 [ 642.779973][T23409] newary+0x142/0xad0 [ 642.780000][T23409] ipcget+0x1db/0xf20 [ 642.780047][T23409] ? do_futex+0x3e7/0x4e0 [ 642.780075][T23409] ? __pfx_do_futex+0x10/0x10 [ 642.780092][T23409] ? __pfx_ipcget+0x10/0x10 [ 642.780108][T23409] ? __se_sys_futex+0x3a8/0x450 [ 642.780127][T23409] __x64_sys_semget+0x1aa/0x210 [ 642.780141][T23409] ? __pfx___x64_sys_semget+0x10/0x10 [ 642.780159][T23409] do_syscall_64+0x166/0x520 [ 642.780174][T23409] ? trace_irq_disable+0x3b/0x140 [ 642.780186][T23409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.780198][T23409] ? clear_bhb_loop+0x70/0xc0 [ 642.780212][T23409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.780223][T23409] RIP: 0033:0x7f2852d9e159 [ 642.780235][T23409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.780246][T23409] RSP: 002b:00007f2853cf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 642.780258][T23409] RAX: ffffffffffffffda RBX: 00007f2853025fa0 RCX: 00007f2852d9e159 [ 642.780268][T23409] RDX: 0000000000000859 RSI: 0000000000000207 RDI: 0000000000000000 [ 642.780280][T23409] RBP: 00007f2852e3506b R08: 0000000000000000 R09: 0000000000000000 [ 642.780294][T23409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.780300][T23409] R13: 00007f2853026038 R14: 00007f2853025fa0 R15: 00007f285314fa48 [ 642.780322][T23409] [ 642.781113][T23409] Mem-Info: [ 642.781126][T23409] active_anon:10245 inactive_anon:13 isolated_anon:0 [ 642.781126][T23409] active_file:1038 inactive_file:56061 isolated_file:0 [ 642.781126][T23409] unevictable:0 dirty:274 writeback:0 [ 642.781126][T23409] slab_reclaimable:10495 slab_unreclaimable:100291 [ 642.781126][T23409] mapped:31120 shmem:3935 pagetables:1895 [ 642.781126][T23409] sec_pagetables:0 bounce:0 [ 642.781126][T23409] kernel_misc_reclaimable:0 [ 642.781126][T23409] free:1264574 free_pcp:17631 free_cma:0 [ 642.781161][T23409] Node 0 active_anon:40980kB inactive_anon:52kB active_file:4152kB inactive_file:223980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124428kB dirty:1096kB writeback:0kB shmem:15740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14116kB pagetables:7408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 642.781192][T23409] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 642.781220][T23409] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.781252][T23409] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 642.781273][T23409] Node 0 DMA32 free:1099440kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:40980kB inactive_anon:52kB active_file:4152kB inactive_file:223980kB unevictable:0kB writepending:1096kB zspages:44kB present:3129332kB managed:2546880kB mlocked:0kB bounce:0kB free_pcp:57908kB local_pcp:24312kB free_cma:0kB [ 642.781313][T23409] lowmem_reserve[]: 0 0 0 0 0 [ 642.781332][T23409] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.781362][T23409] lowmem_reserve[]: 0 0 0 0 0 [ 642.781381][T23409] Node 1 Normal free:3943496kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:12616kB local_pcp:0kB free_cma:0kB [ 642.781412][T23409] lowmem_reserve[]: 0 0 0 0 0 [ 642.781432][T23409] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 642.781495][T23409] Node 0 DMA32: 1640*4kB (UME) 404*8kB (UME) 929*16kB (UME) 681*32kB (UME) 143*64kB (UME) 231*128kB (UME) 210*256kB (UME) 98*512kB (UM) 53*1024kB (UM) 32*2048kB (UME) 193*4096kB (UM) = 1099440kB [ 642.781579][T23409] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 642.781631][T23409] Node 1 Normal: 10*4kB (UM) 12*8kB (UM) 14*16kB (UM) 9*32kB (UM) 7*64kB (UM) 6*128kB (UM) 7*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (M) 960*4096kB (UM) = 3943496kB [ 642.781715][T23409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.781724][T23409] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 642.781733][T23409] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.781741][T23409] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 642.781750][T23409] 61035 total pagecache pages [ 642.781754][T23409] 5 pages in swap cache [ 642.781758][T23409] Free swap = 124968kB [ 642.781763][T23409] Total swap = 124996kB [ 642.781768][T23409] 2097051 pages RAM [ 642.781772][T23409] 0 pages HighMem/MovableOnly [ 642.781776][T23409] 428715 pages reserved [ 642.781780][T23409] 0 pages cma reserved [ 643.285664][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 643.643315][T23436] fuse: Bad value for 'fd' [ 643.923771][ T88] usb 4-1: USB disconnect, device number 111 [ 644.029809][T23447] syzkaller1: entered promiscuous mode [ 644.029833][T23447] syzkaller1: entered allmulticast mode [ 644.070665][T23447] random: crng reseeded on system resumption [ 644.231622][T23433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.237961][T23433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.325674][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 644.386080][ T88] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 644.535662][ T88] usb 2-1: Using ep0 maxpacket: 32 [ 644.536470][ T88] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 644.537730][ T88] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 644.537755][ T88] usb 2-1: config 2 has no interface number 0 [ 644.537794][ T88] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 644.537819][ T88] usb 2-1: config 2 interface 88 has no altsetting 0 [ 644.539965][ T88] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.539988][ T88] usb 2-1: Product: syz [ 644.540003][ T88] usb 2-1: Manufacturer: syz [ 644.540018][ T88] usb 2-1: SerialNumber: syz [ 644.548749][T23451] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 644.562878][T23470] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2833'. [ 644.739833][T13032] go7007-loader 3-1:14.120: unable to load firmware from file "go7007/wis-startrek.fw" [ 644.739859][T13032] go7007-loader 3-1:14.120: probe failed [ 644.752802][T23447] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 644.769030][T13032] go7007-loader 3-1:14.208: loading firmware go7007/wis-startrek.fw [ 644.771696][T13032] usb 3-1: Direct firmware load for go7007/wis-startrek.fw failed with error -2 [ 644.771720][T13032] usb 3-1: Falling back to sysfs fallback for: go7007/wis-startrek.fw [ 644.969740][T23447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.973616][T23447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.999451][ T88] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 644.999746][ T88] asix 2-1:2.88: probe with driver asix failed with error -71 [ 645.018131][ T88] usb 2-1: USB disconnect, device number 39 [ 645.296333][ T5682] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 645.331585][T23545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.333609][T23545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.365749][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 645.425715][ T5682] usb 1-1: device descriptor read/64, error -71 [ 645.512939][T23402] tipc: Resetting bearer [ 645.566450][T23402] tipc: Disabling bearer [ 645.665726][ T5682] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 645.806197][ T5682] usb 1-1: device descriptor read/64, error -71 [ 645.917368][ T5682] usb usb1-port1: attempt power cycle [ 646.220820][T23567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.222605][T23567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.255705][ T5682] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 646.278441][ T5682] usb 1-1: device descriptor read/8, error -71 [ 646.405664][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 646.515708][ T5682] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 646.539809][ T5682] usb 1-1: device descriptor read/8, error -71 [ 646.649842][ T5682] usb usb1-port1: unable to enumerate USB device [ 646.987758][T23602] tipc: Enabled bearer , priority 0 [ 646.988403][T23602] syzkaller0: entered promiscuous mode [ 646.988416][T23602] syzkaller0: entered allmulticast mode [ 647.022724][T23602] tipc: Resetting bearer [ 647.214292][T23613] netlink: 'syz.4.2852': attribute type 9 has an invalid length. [ 647.255824][ T10] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 647.417629][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 647.418526][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09 [ 647.419681][ T10] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 647.419715][ T10] usb 4-1: config 2 has no interface number 0 [ 647.419757][ T10] usb 4-1: config 2 interface 31 has no altsetting 0 [ 647.421168][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 647.421191][ T10] usb 4-1: SerialNumber: syz [ 647.445657][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 647.691414][ T10] ch9200 4-1:2.31: probe with driver ch9200 failed with error -71 [ 647.725922][ T10] usb 4-1: USB disconnect, device number 112 [ 647.777806][T23636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2854'. [ 647.779792][T23601] tipc: Resetting bearer [ 647.815478][T23601] tipc: Disabling bearer [ 648.206271][T23654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.209403][T23654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.253633][T23654] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 648.312301][T23654] sctp: [Deprecated]: syz.4.2855 (pid 23654) Use of int in max_burst socket option. [ 648.312301][T23654] Use struct sctp_assoc_value instead [ 648.417978][T23663] xt_TCPMSS: Only works on TCP SYN packets [ 648.485745][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 648.583223][T23669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2857'. [ 648.896135][ T5674] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 649.048194][ T5674] usb 4-1: Using ep0 maxpacket: 32 [ 649.049869][ T5674] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 649.053267][ T5674] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 649.053310][ T5674] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 649.053338][ T5674] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 649.053365][ T5674] usb 4-1: config 0 interface 0 has no altsetting 0 [ 649.053397][ T5674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.133505][ T5674] usb 4-1: config 0 descriptor?? [ 649.151162][T23698] usb usb7: usbfs: process 23698 (syz.0.2863) did not claim interface 0 before use [ 649.184452][T23698] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2863'. [ 649.299085][T23707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 649.525704][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 649.666605][T23723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.670539][T23723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.731728][T23723] batman_adv: batadv0: Adding interface: syzkaller0 [ 649.731747][T23723] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.733757][T23723] batman_adv: batadv0: Interface activated: syzkaller0 [ 649.876689][ T5674] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 650.026843][ T5674] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 650.029384][ T5674] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.029421][ T5674] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 650.029433][ T5674] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 650.029445][ T5674] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.029468][ T5674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.108897][T23718] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 650.256028][T23718] batman_adv: batadv0: Removing interface: syzkaller0 [ 650.486393][ C1] bridge0: port 1(syz_tun) entered learning state [ 650.522101][T23719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 650.565679][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 650.583120][T23719] sctp: [Deprecated]: syz.1.2867 (pid 23719) Use of int in max_burst socket option. [ 650.583120][T23719] Use struct sctp_assoc_value instead [ 650.716313][T23745] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 650.717257][T23745] syzkaller0: entered promiscuous mode [ 650.717277][T23745] syzkaller0: entered allmulticast mode [ 650.720382][ T5674] usb 2-1: USB disconnect, device number 40 [ 650.901595][T23760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2870'. [ 651.037526][ T88] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 651.189547][ T88] usb 1-1: Using ep0 maxpacket: 8 [ 651.190250][ T88] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice= 0.09 [ 651.192636][ T88] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 651.192663][ T88] usb 1-1: config 2 has no interface number 0 [ 651.192705][ T88] usb 1-1: config 2 interface 31 has no altsetting 0 [ 651.194246][ T88] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 651.194272][ T88] usb 1-1: SerialNumber: syz [ 651.315890][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 651.475715][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 651.476583][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 651.478714][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.480689][ T88] ch9200 1-1:2.31: probe with driver ch9200 failed with error -71 [ 651.521136][ T10] usb 2-1: config 0 descriptor?? [ 651.533362][ T88] usb 1-1: USB disconnect, device number 102 [ 651.541887][ T10] usb 2-1: probing VID:PID(0424:012C) [ 651.566280][ T10] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 651.566307][ T10] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 651.566326][ T10] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 651.566344][ T10] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 651.566366][ T10] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 651.605760][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 651.708432][ T5674] usb 4-1: USB disconnect, device number 113 [ 651.937616][ T10] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 652.030348][T23823] usb usb7: usbfs: process 23823 (syz.4.2878) did not claim interface 0 before use [ 652.035002][T23823] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2878'. [ 652.138281][ T10] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 652.166339][ T5674] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 652.315678][ T5674] usb 4-1: Using ep0 maxpacket: 8 [ 652.316460][ T5674] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 652.317559][ T5674] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.319800][ T5674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.319824][ T5674] usb 4-1: Product: syz [ 652.319840][ T5674] usb 4-1: Manufacturer: syz [ 652.319854][ T5674] usb 4-1: SerialNumber: syz [ 652.325071][ T5674] usb 4-1: config 0 descriptor?? [ 652.332576][ T5674] cdc_phonet 4-1:0.0: skipping garbage [ 652.332600][ T5674] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 652.601510][T23770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.602829][T23770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.645757][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 652.859283][T23846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.860916][T23846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.864129][T23846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2882'. [ 652.915727][ T5674] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 653.066982][ T5674] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 653.071658][ T5674] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.071734][ T5674] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 653.071755][ T5674] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 653.071776][ T5674] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.071815][ T5674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.258130][ T10] usb 2-1: USB disconnect, device number 41 [ 653.261197][ T1219] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 653.263545][ T1219] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 653.264841][ T1219] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 653.550713][T23837] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 653.557604][T23837] sctp: [Deprecated]: syz.0.2880 (pid 23837) Use of int in max_burst socket option. [ 653.557604][T23837] Use struct sctp_assoc_value instead [ 653.628674][ T5705] usb 1-1: USB disconnect, device number 103 [ 653.685748][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 653.934257][ T10] USB vub300 remote SDIO host controller[0] now disconnected [ 653.954933][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.954954][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.990729][T23890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2885'. [ 653.992590][T23894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2885'. [ 653.993343][T23898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2885'. [ 654.086103][ C0] [ 654.089979][ C0] ============================= [ 654.094865][ C0] WARNING: suspicious RCU usage [ 654.099858][ C0] syzkaller #0 Tainted: G L [ 654.105871][ C0] ----------------------------- [ 654.110739][ C0] kernel/sched/core.c:9226 Illegal context switch in RCU-sched read-side critical section! [ 654.120729][ C0] [ 654.120729][ C0] other info that might help us debug this: [ 654.120729][ C0] [ 654.130971][ C0] [ 654.130971][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 654.139056][ C0] locks held by syz-executor/23901: 7, last CPU#0: [ 654.145628][ C0] #0: ffff88807424f588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 654.154918][ C0] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 654.164491][ C0] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 654.174245][ C0] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 654.183740][ C0] #4: ffff8880768c0018 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 654.194193][ C0] #5: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 654.203596][ C0] #6: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 654.214042][ C0] [ 654.214042][ C0] stack backtrace: [ 654.219997][ C0] CPU: 0 UID: 0 PID: 23901 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 654.231086][ C0] Tainted: [L]=SOFTLOCKUP [ 654.235390][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.245428][ C0] Call Trace: [ 654.248695][ C0] [ 654.251524][ C0] dump_stack_lvl+0xe8/0x150 [ 654.256106][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 654.261484][ C0] __might_resched+0xbb/0x4c0 [ 654.266159][ C0] ? __cancel_work_sync+0x5c/0x110 [ 654.271364][ C0] __cancel_work_sync+0x6d/0x110 [ 654.276311][ C0] mmc_free_host+0x19/0x40 [ 654.280828][ C0] call_timer_fn+0x18d/0x5f0 [ 654.285408][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 654.292120][ C0] ? call_timer_fn+0xd5/0x5f0 [ 654.296789][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 654.301912][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 654.307151][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 654.313815][ C0] __run_timer_base+0x652/0x8b0 [ 654.318663][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 654.324022][ C0] ? ktime_get+0x1f5/0x220 [ 654.328426][ C0] ? lapic_next_event+0x11/0x20 [ 654.333283][ C0] run_timer_softirq+0xb7/0x170 [ 654.338130][ C0] handle_softirqs+0x226/0x860 [ 654.342895][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 654.347658][ C0] __irq_exit_rcu+0xcb/0x220 [ 654.352254][ C0] irq_exit_rcu+0x9/0x30 [ 654.356483][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 654.362150][ C0] [ 654.365064][ C0] [ 654.367980][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.373947][ C0] RIP: 0010:lock_acquire+0x237/0x350 [ 654.379228][ C0] Code: 5d 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 32 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 5b 41 5c 41 5d <41> 5e 41 5f 5d e9 0f 62 46 0a cc 48 8d 3d 77 55 da 0e 67 48 0f b9 [ 654.398815][ C0] RSP: 0000:ffffc900032877e0 EFLAGS: 00000282 [ 654.404867][ C0] RAX: 487769af75d10000 RBX: ffffffff8243e9ea RCX: 8000000000000002 [ 654.412822][ C0] RDX: 0000000086a99685 RSI: ffffffff8e69f517 RDI: ffffffff8c6dad80 [ 654.420778][ C0] RBP: ffff88803dae0000 R08: ffffffff8243e9ea R09: 0000000000000000 [ 654.428734][ C0] R10: dffffc0000000000 R11: fffff940003a6539 R12: dffffc0000000000 [ 654.436691][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000246 [ 654.444651][ C0] ? pfn_valid+0xba/0x490 [ 654.448976][ C0] ? pfn_valid+0xba/0x490 [ 654.453311][ C0] pfn_valid+0xd6/0x490 [ 654.457467][ C0] ? pfn_valid+0xba/0x490 [ 654.461782][ C0] page_table_check_set+0x25/0x530 [ 654.466883][ C0] set_pte_range+0x7ef/0x840 [ 654.471471][ C0] filemap_map_pages+0xe67/0x2170 [ 654.476500][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 654.481691][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 654.487135][ C0] ? lock_acquire+0x115/0x350 [ 654.491798][ C0] ? lock_acquire+0x115/0x350 [ 654.496457][ C0] ? do_pte_missing+0x140c/0x34b0 [ 654.501470][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 654.506916][ C0] ? do_pte_missing+0x140c/0x34b0 [ 654.511922][ C0] do_pte_missing+0x20ae/0x34b0 [ 654.516774][ C0] ? handle_mm_fault+0xf1/0x3750 [ 654.521703][ C0] handle_mm_fault+0x1a53/0x3750 [ 654.526642][ C0] ? handle_mm_fault+0xf1/0x3750 [ 654.531576][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 654.536856][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 654.542082][ C0] do_user_addr_fault+0xa4f/0x1340 [ 654.547207][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 654.552572][ C0] exc_page_fault+0x6a/0xc0 [ 654.557074][ C0] asm_exc_page_fault+0x26/0x30 [ 654.561919][ C0] RIP: 0033:0x7f8a2f3aedc0 [ 654.566326][ C0] Code: Unable to access opcode bytes at 0x7f8a2f3aed96. [ 654.573402][ C0] RSP: 002b:00007f8a2f74f6d8 EFLAGS: 00010202 [ 654.579458][ C0] RAX: 00007f8a2f435f18 RBX: 00007f8a2f74fc10 RCX: 0000000000000000 [ 654.587418][ C0] RDX: 0000000000000016 RSI: 00007f8a2f435f02 RDI: 00007f8a2f74fc10 [ 654.595380][ C0] RBP: 00007f8a2f435f18 R08: 00007f8a2f74fe80 R09: 0000000000000000 [ 654.603342][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000024b [ 654.611318][ C0] R13: 0000000000000000 R14: 00007f8a2f435f02 R15: 00007f8a2f74fcd0 [ 654.619289][ C0] [ 654.624164][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 654.624175][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 23901, name: syz-executor [ 654.624185][ C0] preempt_count: 102, expected: 0 [ 654.624191][ C0] RCU nest depth: 3, expected: 0 [ 654.624197][ C0] locks held by syz-executor/23901: 7, last CPU#0: [ 654.624206][ C0] #0: ffff88807424f588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 654.624238][ C0] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 654.624264][ C0] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 654.624296][ C0] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 654.624325][ C0] #4: ffff8880768c0018 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 654.624356][ C0] #5: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 654.624383][ C0] #6: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 654.624417][ C0] Preemption disabled at: [ 654.624420][ C0] [<0000000000000000>] 0x0 [ 654.624436][ C0] CPU: 0 UID: 0 PID: 23901 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 654.624451][ C0] Tainted: [L]=SOFTLOCKUP [ 654.624457][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.624467][ C0] Call Trace: [ 654.624476][ C0] [ 654.624481][ C0] dump_stack_lvl+0xe8/0x150 [ 654.624498][ C0] __might_resched+0x36a/0x4c0 [ 654.624517][ C0] __cancel_work_sync+0x6d/0x110 [ 654.624534][ C0] mmc_free_host+0x19/0x40 [ 654.624548][ C0] call_timer_fn+0x18d/0x5f0 [ 654.624561][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 654.624572][ C0] ? call_timer_fn+0xd5/0x5f0 [ 654.624585][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 654.624603][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 654.624617][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 654.624629][ C0] __run_timer_base+0x652/0x8b0 [ 654.624649][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 654.624663][ C0] ? ktime_get+0x1f5/0x220 [ 654.624675][ C0] ? lapic_next_event+0x11/0x20 [ 654.624690][ C0] run_timer_softirq+0xb7/0x170 [ 654.624703][ C0] handle_softirqs+0x226/0x860 [ 654.624718][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 654.624735][ C0] __irq_exit_rcu+0xcb/0x220 [ 654.624749][ C0] irq_exit_rcu+0x9/0x30 [ 654.624761][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 654.624775][ C0] [ 654.624780][ C0] [ 654.624784][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.624797][ C0] RIP: 0010:lock_acquire+0x237/0x350 [ 654.624810][ C0] Code: 5d 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 32 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 5b 41 5c 41 5d <41> 5e 41 5f 5d e9 0f 62 46 0a cc 48 8d 3d 77 55 da 0e 67 48 0f b9 [ 654.624820][ C0] RSP: 0000:ffffc900032877e0 EFLAGS: 00000282 [ 654.624829][ C0] RAX: 487769af75d10000 RBX: ffffffff8243e9ea RCX: 8000000000000002 [ 654.624837][ C0] RDX: 0000000086a99685 RSI: ffffffff8e69f517 RDI: ffffffff8c6dad80 [ 654.624845][ C0] RBP: ffff88803dae0000 R08: ffffffff8243e9ea R09: 0000000000000000 [ 654.624853][ C0] R10: dffffc0000000000 R11: fffff940003a6539 R12: dffffc0000000000 [ 654.624860][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000246 [ 654.624870][ C0] ? pfn_valid+0xba/0x490 [ 654.624882][ C0] ? pfn_valid+0xba/0x490 [ 654.624906][ C0] pfn_valid+0xd6/0x490 [ 654.624917][ C0] ? pfn_valid+0xba/0x490 [ 654.624931][ C0] page_table_check_set+0x25/0x530 [ 654.624946][ C0] set_pte_range+0x7ef/0x840 [ 654.624965][ C0] filemap_map_pages+0xe67/0x2170 [ 654.624990][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 654.625008][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 654.625022][ C0] ? lock_acquire+0x115/0x350 [ 654.625036][ C0] ? lock_acquire+0x115/0x350 [ 654.625048][ C0] ? do_pte_missing+0x140c/0x34b0 [ 654.625058][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 654.625073][ C0] ? do_pte_missing+0x140c/0x34b0 [ 654.625083][ C0] do_pte_missing+0x20ae/0x34b0 [ 654.625100][ C0] ? handle_mm_fault+0xf1/0x3750 [ 654.625116][ C0] handle_mm_fault+0x1a53/0x3750 [ 654.625135][ C0] ? handle_mm_fault+0xf1/0x3750 [ 654.625154][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 654.625168][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 654.625190][ C0] do_user_addr_fault+0xa4f/0x1340 [ 654.625206][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 654.625218][ C0] exc_page_fault+0x6a/0xc0 [ 654.625232][ C0] asm_exc_page_fault+0x26/0x30 [ 654.625243][ C0] RIP: 0033:0x7f8a2f3aedc0 [ 654.625257][ C0] Code: Unable to access opcode bytes at 0x7f8a2f3aed96. [ 654.625263][ C0] RSP: 002b:00007f8a2f74f6d8 EFLAGS: 00010202 [ 654.625271][ C0] RAX: 00007f8a2f435f18 RBX: 00007f8a2f74fc10 RCX: 0000000000000000 [ 654.625279][ C0] RDX: 0000000000000016 RSI: 00007f8a2f435f02 RDI: 00007f8a2f74fc10 [ 654.625286][ C0] RBP: 00007f8a2f435f18 R08: 00007f8a2f74fe80 R09: 0000000000000000 [ 654.625293][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000024b [ 654.625300][ C0] R13: 0000000000000000 R14: 00007f8a2f435f02 R15: 00007f8a2f74fcd0 [ 654.625315][ C0] [ 654.625453][ C0] [ 654.725764][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 655.135471][ C0] ================================ [ 655.140557][ C0] WARNING: inconsistent lock state [ 655.145643][ C0] syzkaller #0 Tainted: G W L [ 655.151595][ C0] -------------------------------- [ 655.156676][ C0] inconsistent {SOFTIRQ-ON-R} -> {IN-SOFTIRQ-W} usage. [ 655.163575][ C0] syz-executor/23901 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 655.170139][ C0] ffffffff8f817d98 (wakeup_srcu){.+-+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 655.179167][ C0] {SOFTIRQ-ON-R} state was registered at: [ 655.184867][ C0] lock_acquire+0x115/0x350 [ 655.189441][ C0] pm_print_active_wakeup_sources+0x60/0x370 [ 655.195553][ C0] wakeup_count_store+0xcc/0x120 [ 655.200563][ C0] kernfs_fop_write_iter+0x3a4/0x540 [ 655.205916][ C0] aio_write+0x5d0/0x870 [ 655.210223][ C0] io_submit_one+0x798/0x13d0 [ 655.214963][ C0] __se_sys_io_submit+0x195/0x340 [ 655.220064][ C0] do_syscall_64+0x166/0x520 [ 655.224722][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.230679][ C0] irq event stamp: 614 [ 655.234719][ C0] hardirqs last enabled at (614): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 655.244941][ C0] hardirqs last disabled at (613): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 655.254877][ C0] softirqs last enabled at (0): [] copy_process+0xd16/0x4400 [ 655.263884][ C0] softirqs last disabled at (169): [] __irq_exit_rcu+0xcb/0x220 [ 655.273058][ C0] [ 655.273058][ C0] other info that might help us debug this: [ 655.281092][ C0] Possible unsafe locking scenario: [ 655.281092][ C0] [ 655.288521][ C0] CPU0 [ 655.291782][ C0] ---- [ 655.295068][ C0] lock(wakeup_srcu); [ 655.299118][ C0] [ 655.302611][ C0] lock(wakeup_srcu); [ 655.306849][ C0] [ 655.306849][ C0] *** DEADLOCK *** [ 655.306849][ C0] [ 655.314964][ C0] locks held by syz-executor/23901: 7, last CPU#0: [ 655.321435][ C0] #0: ffff88807424f588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 655.330629][ C0] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 655.340175][ C0] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 655.349919][ C0] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 655.359375][ C0] #4: ffff8880768c0018 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 655.369789][ C0] #5: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 655.379159][ C0] #6: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 655.389567][ C0] [ 655.389567][ C0] stack backtrace: [ 655.395434][ C0] CPU: 0 UID: 0 PID: 23901 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 655.406519][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 655.411686][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.421716][ C0] Call Trace: [ 655.424976][ C0] [ 655.427808][ C0] dump_stack_lvl+0xe8/0x150 [ 655.432387][ C0] print_usage_bug+0x28c/0x2e0 [ 655.437132][ C0] valid_state+0xbe/0xf0 [ 655.441352][ C0] mark_lock_irq+0x58/0x380 [ 655.445834][ C0] ? arch_stack_walk+0xfb/0x150 [ 655.450689][ C0] mark_lock+0x117/0x190 [ 655.454911][ C0] __lock_acquire+0x71e/0x2de0 [ 655.459652][ C0] ? check_path+0x21/0x40 [ 655.463964][ C0] ? add_lock_to_list+0xc7/0x100 [ 655.468882][ C0] ? lockdep_unlock+0x5c/0xd0 [ 655.473532][ C0] ? __lock_acquire+0x1511/0x2de0 [ 655.478535][ C0] lock_sync+0xb3/0x130 [ 655.482671][ C0] ? __synchronize_srcu+0xb5/0x2f0 [ 655.487761][ C0] ? __synchronize_srcu+0xb5/0x2f0 [ 655.492853][ C0] __synchronize_srcu+0xc9/0x2f0 [ 655.497769][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 655.503294][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 655.508301][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 655.514088][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 655.519616][ C0] ? synchronize_srcu+0x20a/0x260 [ 655.524619][ C0] wakeup_source_unregister+0x129/0x3f0 [ 655.530147][ C0] mmc_host_classdev_release+0x47/0x100 [ 655.535673][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 655.541803][ C0] device_release+0xc4/0x1f0 [ 655.546460][ C0] kobject_put+0x222/0x550 [ 655.550894][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 655.555665][ C0] call_timer_fn+0x18d/0x5f0 [ 655.560235][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 655.566885][ C0] ? call_timer_fn+0xd5/0x5f0 [ 655.571546][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 655.576639][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 655.581816][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 655.588472][ C0] __run_timer_base+0x652/0x8b0 [ 655.593302][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 655.598655][ C0] ? ktime_get+0x1f5/0x220 [ 655.603050][ C0] ? lapic_next_event+0x11/0x20 [ 655.607884][ C0] run_timer_softirq+0xb7/0x170 [ 655.612711][ C0] handle_softirqs+0x226/0x860 [ 655.617457][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 655.622205][ C0] __irq_exit_rcu+0xcb/0x220 [ 655.626775][ C0] irq_exit_rcu+0x9/0x30 [ 655.631006][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 655.636621][ C0] [ 655.639538][ C0] [ 655.642445][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 655.648404][ C0] RIP: 0010:lock_acquire+0x237/0x350 [ 655.653674][ C0] Code: 5d 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 32 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 5b 41 5c 41 5d <41> 5e 41 5f 5d e9 0f 62 46 0a cc 48 8d 3d 77 55 da 0e 67 48 0f b9 [ 655.673253][ C0] RSP: 0000:ffffc900032877e0 EFLAGS: 00000282 [ 655.679310][ C0] RAX: 487769af75d10000 RBX: ffffffff8243e9ea RCX: 8000000000000002 [ 655.687280][ C0] RDX: 0000000086a99685 RSI: ffffffff8e69f517 RDI: ffffffff8c6dad80 [ 655.695242][ C0] RBP: ffff88803dae0000 R08: ffffffff8243e9ea R09: 0000000000000000 [ 655.703201][ C0] R10: dffffc0000000000 R11: fffff940003a6539 R12: dffffc0000000000 [ 655.711156][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000246 [ 655.719113][ C0] ? pfn_valid+0xba/0x490 [ 655.723434][ C0] ? pfn_valid+0xba/0x490 [ 655.727754][ C0] pfn_valid+0xd6/0x490 [ 655.731895][ C0] ? pfn_valid+0xba/0x490 [ 655.736206][ C0] page_table_check_set+0x25/0x530 [ 655.741302][ C0] set_pte_range+0x7ef/0x840 [ 655.745881][ C0] filemap_map_pages+0xe67/0x2170 [ 655.750898][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 655.756107][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 655.761557][ C0] ? lock_acquire+0x115/0x350 [ 655.766216][ C0] ? lock_acquire+0x115/0x350 [ 655.770882][ C0] ? do_pte_missing+0x140c/0x34b0 [ 655.775702][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 655.782712][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 655.788166][ C0] ? do_pte_missing+0x140c/0x34b0 [ 655.793173][ C0] do_pte_missing+0x20ae/0x34b0 [ 655.798009][ C0] ? handle_mm_fault+0xf1/0x3750 [ 655.802941][ C0] handle_mm_fault+0x1a53/0x3750 [ 655.807874][ C0] ? handle_mm_fault+0xf1/0x3750 [ 655.812799][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 655.818068][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 655.823251][ C0] do_user_addr_fault+0xa4f/0x1340 [ 655.828345][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 655.833701][ C0] exc_page_fault+0x6a/0xc0 [ 655.838199][ C0] asm_exc_page_fault+0x26/0x30 [ 655.843032][ C0] RIP: 0033:0x7f8a2f3aedc0 [ 655.847440][ C0] Code: Unable to access opcode bytes at 0x7f8a2f3aed96. [ 655.854435][ C0] RSP: 002b:00007f8a2f74f6d8 EFLAGS: 00010202 [ 655.860482][ C0] RAX: 00007f8a2f435f18 RBX: 00007f8a2f74fc10 RCX: 0000000000000000 [ 655.868439][ C0] RDX: 0000000000000016 RSI: 00007f8a2f435f02 RDI: 00007f8a2f74fc10 [ 655.876403][ C0] RBP: 00007f8a2f435f18 R08: 00007f8a2f74fe80 R09: 0000000000000000 [ 655.884356][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000024b [ 655.892307][ C0] R13: 0000000000000000 R14: 00007f8a2f435f02 R15: 00007f8a2f74fcd0 [ 655.900265][ C0] [ 655.903363][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 655.903376][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 23901, name: syz-executor [ 655.903385][ C0] preempt_count: 102, expected: 0 [ 655.903391][ C0] RCU nest depth: 3, expected: 0 [ 655.903397][ C0] INFO: lockdep is turned off. [ 655.903400][ C0] Preemption disabled at: [ 655.903403][ C0] [<0000000000000000>] 0x0 [ 655.903420][ C0] CPU: 0 UID: 0 PID: 23901 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 655.903436][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 655.903440][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.903446][ C0] Call Trace: [ 655.903452][ C0] [ 655.903456][ C0] dump_stack_lvl+0xe8/0x150 [ 655.903474][ C0] __might_resched+0x36a/0x4c0 [ 655.903491][ C0] __synchronize_srcu+0x1a1/0x2f0 [ 655.903503][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 655.903513][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 655.903530][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 655.903543][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 655.903554][ C0] ? synchronize_srcu+0x20a/0x260 [ 655.903565][ C0] wakeup_source_unregister+0x129/0x3f0 [ 655.903580][ C0] mmc_host_classdev_release+0x47/0x100 [ 655.903593][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 655.903605][ C0] device_release+0xc4/0x1f0 [ 655.903619][ C0] kobject_put+0x222/0x550 [ 655.903630][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 655.903645][ C0] call_timer_fn+0x18d/0x5f0 [ 655.903658][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 655.903668][ C0] ? call_timer_fn+0xd5/0x5f0 [ 655.903679][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 655.903693][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 655.903705][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 655.903715][ C0] __run_timer_base+0x652/0x8b0 [ 655.903730][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 655.903745][ C0] ? ktime_get+0x1f5/0x220 [ 655.903755][ C0] ? lapic_next_event+0x11/0x20 [ 655.903767][ C0] run_timer_softirq+0xb7/0x170 [ 655.903779][ C0] handle_softirqs+0x226/0x860 [ 655.903792][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 655.903806][ C0] __irq_exit_rcu+0xcb/0x220 [ 655.903818][ C0] irq_exit_rcu+0x9/0x30 [ 655.903830][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 655.903844][ C0] [ 655.903848][ C0] [ 655.903852][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 655.903863][ C0] RIP: 0010:lock_acquire+0x237/0x350 [ 655.903875][ C0] Code: 5d 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 32 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 5b 41 5c 41 5d <41> 5e 41 5f 5d e9 0f 62 46 0a cc 48 8d 3d 77 55 da 0e 67 48 0f b9 [ 655.903885][ C0] RSP: 0000:ffffc900032877e0 EFLAGS: 00000282 [ 655.903895][ C0] RAX: 487769af75d10000 RBX: ffffffff8243e9ea RCX: 8000000000000002 [ 655.903903][ C0] RDX: 0000000086a99685 RSI: ffffffff8e69f517 RDI: ffffffff8c6dad80 [ 655.903910][ C0] RBP: ffff88803dae0000 R08: ffffffff8243e9ea R09: 0000000000000000 [ 655.903918][ C0] R10: dffffc0000000000 R11: fffff940003a6539 R12: dffffc0000000000 [ 655.903926][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000246 [ 655.903933][ C0] ? pfn_valid+0xba/0x490 [ 655.903946][ C0] ? pfn_valid+0xba/0x490 [ 655.903959][ C0] pfn_valid+0xd6/0x490 [ 655.903969][ C0] ? pfn_valid+0xba/0x490 [ 655.903981][ C0] page_table_check_set+0x25/0x530 [ 655.903994][ C0] set_pte_range+0x7ef/0x840 [ 655.904010][ C0] filemap_map_pages+0xe67/0x2170 [ 655.904029][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 655.904045][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 655.904058][ C0] ? lock_acquire+0x115/0x350 [ 655.904069][ C0] ? lock_acquire+0x115/0x350 [ 655.904079][ C0] ? do_pte_missing+0x140c/0x34b0 [ 655.904089][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 655.904103][ C0] ? do_pte_missing+0x140c/0x34b0 [ 655.904113][ C0] do_pte_missing+0x20ae/0x34b0 [ 655.904125][ C0] ? handle_mm_fault+0xf1/0x3750 [ 655.904139][ C0] handle_mm_fault+0x1a53/0x3750 [ 655.904155][ C0] ? handle_mm_fault+0xf1/0x3750 [ 655.904170][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 655.904182][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 655.904197][ C0] do_user_addr_fault+0xa4f/0x1340 [ 655.904209][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 655.904219][ C0] exc_page_fault+0x6a/0xc0 [ 655.904232][ C0] asm_exc_page_fault+0x26/0x30 [ 655.904248][ C0] RIP: 0033:0x7f8a2f3aedc0 [ 655.904262][ C0] Code: Unable to access opcode bytes at 0x7f8a2f3aed96. [ 655.904268][ C0] RSP: 002b:00007f8a2f74f6d8 EFLAGS: 00010202 [ 655.904276][ C0] RAX: 00007f8a2f435f18 RBX: 00007f8a2f74fc10 RCX: 0000000000000000 [ 655.904283][ C0] RDX: 0000000000000016 RSI: 00007f8a2f435f02 RDI: 00007f8a2f74fc10 [ 655.904290][ C0] RBP: 00007f8a2f435f18 R08: 00007f8a2f74fe80 R09: 0000000000000000 [ 655.904297][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000024b [ 655.904304][ C0] R13: 0000000000000000 R14: 00007f8a2f435f02 R15: 00007f8a2f74fcd0 [ 655.904314][ C0] [ 655.904321][ C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffc90003280000, but annotated. [ 655.904701][ C0] ------------[ cut here ]------------ [ 655.904707][ C0] 1 [ 655.904714][ C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: syz-executor/23901 [ 656.418105][ C0] Modules linked in: [ 656.421988][ C0] CPU: 0 UID: 0 PID: 23901 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 656.433076][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 656.438252][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.448287][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 656.454169][ C0] Code: fe 06 cc 41 ff c7 44 89 3d 29 30 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 6d a2 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 ab 6d 0a 3b 05 7f [ 656.473754][ C0] RSP: 0000:ffffc900000079b8 EFLAGS: 00010046 [ 656.479805][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 487769af75d10000 [ 656.487761][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 656.495716][ C0] RBP: ffff88803dae0020 R08: 0000000000000100 R09: 1ffffffff1ed22f4 [ 656.503695][ C0] R10: dffffc0000000000 R11: fffffbfff1ed22f5 R12: ffff888140aa30f8 [ 656.511647][ C0] R13: ffff888071b68070 R14: dffffc0000000000 R15: 0000000000000001 [ 656.519604][ C0] FS: 000055557c2d1500(0000) GS:ffff888124cc8000(0000) knlGS:0000000000000000 [ 656.528536][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 656.535097][ C0] CR2: 00007f8a2f3aed96 CR3: 000000004ca5e000 CR4: 00000000003526f0 [ 656.543055][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 656.551008][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 656.558959][ C0] Call Trace: [ 656.562223][ C0] [ 656.565050][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 656.570583][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 656.575592][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 656.581127][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 656.586139][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 656.591928][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 656.597483][ C0] ? synchronize_srcu+0x20a/0x260 [ 656.602493][ C0] wakeup_source_unregister+0x129/0x3f0 [ 656.608022][ C0] mmc_host_classdev_release+0x47/0x100 [ 656.613549][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 656.619681][ C0] device_release+0xc4/0x1f0 [ 656.624257][ C0] kobject_put+0x222/0x550 [ 656.628655][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 656.633407][ C0] call_timer_fn+0x18d/0x5f0 [ 656.637990][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 656.644654][ C0] ? call_timer_fn+0xd5/0x5f0 [ 656.649312][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 656.654407][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 656.659610][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 656.666282][ C0] __run_timer_base+0x652/0x8b0 [ 656.671121][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 656.676474][ C0] ? ktime_get+0x1f5/0x220 [ 656.680875][ C0] ? lapic_next_event+0x11/0x20 [ 656.685709][ C0] run_timer_softirq+0xb7/0x170 [ 656.690565][ C0] handle_softirqs+0x226/0x860 [ 656.695313][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 656.700056][ C0] __irq_exit_rcu+0xcb/0x220 [ 656.704625][ C0] irq_exit_rcu+0x9/0x30 [ 656.708854][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 656.714469][ C0] [ 656.717380][ C0] [ 656.720293][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 656.726254][ C0] RIP: 0010:lock_acquire+0x237/0x350 [ 656.731521][ C0] Code: 5d 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 32 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 5b 41 5c 41 5d <41> 5e 41 5f 5d e9 0f 62 46 0a cc 48 8d 3d 77 55 da 0e 67 48 0f b9 [ 656.751102][ C0] RSP: 0000:ffffc900032877e0 EFLAGS: 00000282 [ 656.757151][ C0] RAX: 487769af75d10000 RBX: ffffffff8243e9ea RCX: 8000000000000002 [ 656.765110][ C0] RDX: 0000000086a99685 RSI: ffffffff8e69f517 RDI: ffffffff8c6dad80 [ 656.773076][ C0] RBP: ffff88803dae0000 R08: ffffffff8243e9ea R09: 0000000000000000 [ 656.781034][ C0] R10: dffffc0000000000 R11: fffff940003a6539 R12: dffffc0000000000 [ 656.788988][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000246 [ 656.796948][ C0] ? pfn_valid+0xba/0x490 [ 656.801270][ C0] ? pfn_valid+0xba/0x490 [ 656.805595][ C0] pfn_valid+0xd6/0x490 [ 656.805691][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 656.816568][ C0] ? pfn_valid+0xba/0x490 [ 656.820886][ C0] page_table_check_set+0x25/0x530 [ 656.825982][ C0] set_pte_range+0x7ef/0x840 [ 656.830564][ C0] filemap_map_pages+0xe67/0x2170 [ 656.835583][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 656.840802][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 656.846244][ C0] ? lock_acquire+0x115/0x350 [ 656.850903][ C0] ? lock_acquire+0x115/0x350 [ 656.855554][ C0] ? do_pte_missing+0x140c/0x34b0 [ 656.860568][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 656.866035][ C0] ? do_pte_missing+0x140c/0x34b0 [ 656.871043][ C0] do_pte_missing+0x20ae/0x34b0 [ 656.875874][ C0] ? handle_mm_fault+0xf1/0x3750 [ 656.880792][ C0] handle_mm_fault+0x1a53/0x3750 [ 656.885711][ C0] ? handle_mm_fault+0xf1/0x3750 [ 656.890634][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 656.895898][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 656.901077][ C0] do_user_addr_fault+0xa4f/0x1340 [ 656.906174][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 656.911524][ C0] exc_page_fault+0x6a/0xc0 [ 656.916008][ C0] asm_exc_page_fault+0x26/0x30 [ 656.920841][ C0] RIP: 0033:0x7f8a2f3aedc0 [ 656.925244][ C0] Code: Unable to access opcode bytes at 0x7f8a2f3aed96. [ 656.932240][ C0] RSP: 002b:00007f8a2f74f6d8 EFLAGS: 00010202 [ 656.938290][ C0] RAX: 00007f8a2f435f18 RBX: 00007f8a2f74fc10 RCX: 0000000000000000 [ 656.946241][ C0] RDX: 0000000000000016 RSI: 00007f8a2f435f02 RDI: 00007f8a2f74fc10 [ 656.954194][ C0] RBP: 00007f8a2f435f18 R08: 00007f8a2f74fe80 R09: 0000000000000000 [ 656.962168][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000024b [ 656.970120][ C0] R13: 0000000000000000 R14: 00007f8a2f435f02 R15: 00007f8a2f74fcd0 [ 656.978079][ C0] [ 656.981091][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 656.988351][ C0] CPU: 0 UID: 0 PID: 23901 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 656.999432][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 657.004606][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 657.014640][ C0] Call Trace: [ 657.017904][ C0] [ 657.020732][ C0] vpanic+0x56d/0xa60 [ 657.024721][ C0] ? __pfx__printk+0x10/0x10 [ 657.029290][ C0] ? __pfx_vpanic+0x10/0x10 [ 657.033773][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 657.039040][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 657.044218][ C0] panic+0xc5/0xd0 [ 657.047922][ C0] ? __pfx_panic+0x10/0x10 [ 657.052323][ C0] __warn+0x315/0x4c0 [ 657.056286][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 657.061553][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 657.066824][ C0] __report_bug+0x276/0x570 [ 657.071407][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 657.076684][ C0] ? __pfx___report_bug+0x10/0x10 [ 657.081720][ C0] ? __wake_up_klogd+0xf0/0x130 [ 657.086556][ C0] ? vprintk_emit+0x4ee/0x560 [ 657.091238][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 657.096242][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 657.101508][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 657.106774][ C0] report_bug+0x16b/0x220 [ 657.111088][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 657.116352][ C0] ? __debug_object_init+0x2c6/0x3c0 [ 657.121617][ C0] handle_bug+0x9c/0x200 [ 657.125844][ C0] exc_invalid_op+0x1a/0x50 [ 657.130327][ C0] asm_exc_invalid_op+0x1a/0x20 [ 657.135155][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 657.141033][ C0] Code: fe 06 cc 41 ff c7 44 89 3d 29 30 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 6d a2 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 ab 6d 0a 3b 05 7f [ 657.160619][ C0] RSP: 0000:ffffc900000079b8 EFLAGS: 00010046 [ 657.166666][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 487769af75d10000 [ 657.174619][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 657.182599][ C0] RBP: ffff88803dae0020 R08: 0000000000000100 R09: 1ffffffff1ed22f4 [ 657.190551][ C0] R10: dffffc0000000000 R11: fffffbfff1ed22f5 R12: ffff888140aa30f8 [ 657.198506][ C0] R13: ffff888071b68070 R14: dffffc0000000000 R15: 0000000000000001 [ 657.206483][ C0] ? __debug_object_init+0x2c3/0x3c0 [ 657.211757][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 657.217283][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 657.222288][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 657.227824][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 657.232839][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 657.238631][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 657.244162][ C0] ? synchronize_srcu+0x20a/0x260 [ 657.249167][ C0] wakeup_source_unregister+0x129/0x3f0 [ 657.254708][ C0] mmc_host_classdev_release+0x47/0x100 [ 657.260252][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 657.266396][ C0] device_release+0xc4/0x1f0 [ 657.270987][ C0] kobject_put+0x222/0x550 [ 657.275400][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 657.280160][ C0] call_timer_fn+0x18d/0x5f0 [ 657.284745][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 657.291413][ C0] ? call_timer_fn+0xd5/0x5f0 [ 657.296083][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 657.301189][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.306378][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 657.313040][ C0] __run_timer_base+0x652/0x8b0 [ 657.317883][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 657.323239][ C0] ? ktime_get+0x1f5/0x220 [ 657.327640][ C0] ? lapic_next_event+0x11/0x20 [ 657.332479][ C0] run_timer_softirq+0xb7/0x170 [ 657.337316][ C0] handle_softirqs+0x226/0x860 [ 657.342066][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 657.346840][ C0] __irq_exit_rcu+0xcb/0x220 [ 657.351414][ C0] irq_exit_rcu+0x9/0x30 [ 657.355664][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 657.361326][ C0] [ 657.364240][ C0] [ 657.367151][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 657.373116][ C0] RIP: 0010:lock_acquire+0x237/0x350 [ 657.378387][ C0] Code: 5d 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 32 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 5b 41 5c 41 5d <41> 5e 41 5f 5d e9 0f 62 46 0a cc 48 8d 3d 77 55 da 0e 67 48 0f b9 [ 657.397973][ C0] RSP: 0000:ffffc900032877e0 EFLAGS: 00000282 [ 657.404026][ C0] RAX: 487769af75d10000 RBX: ffffffff8243e9ea RCX: 8000000000000002 [ 657.411978][ C0] RDX: 0000000086a99685 RSI: ffffffff8e69f517 RDI: ffffffff8c6dad80 [ 657.419930][ C0] RBP: ffff88803dae0000 R08: ffffffff8243e9ea R09: 0000000000000000 [ 657.427885][ C0] R10: dffffc0000000000 R11: fffff940003a6539 R12: dffffc0000000000 [ 657.435841][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000246 [ 657.443792][ C0] ? pfn_valid+0xba/0x490 [ 657.448117][ C0] ? pfn_valid+0xba/0x490 [ 657.452437][ C0] pfn_valid+0xd6/0x490 [ 657.456576][ C0] ? pfn_valid+0xba/0x490 [ 657.460887][ C0] page_table_check_set+0x25/0x530 [ 657.466006][ C0] set_pte_range+0x7ef/0x840 [ 657.470587][ C0] filemap_map_pages+0xe67/0x2170 [ 657.475628][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 657.480828][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 657.486272][ C0] ? lock_acquire+0x115/0x350 [ 657.490935][ C0] ? lock_acquire+0x115/0x350 [ 657.495594][ C0] ? do_pte_missing+0x140c/0x34b0 [ 657.500614][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 657.506069][ C0] ? do_pte_missing+0x140c/0x34b0 [ 657.511079][ C0] do_pte_missing+0x20ae/0x34b0 [ 657.515909][ C0] ? handle_mm_fault+0xf1/0x3750 [ 657.520836][ C0] handle_mm_fault+0x1a53/0x3750 [ 657.525777][ C0] ? handle_mm_fault+0xf1/0x3750 [ 657.530707][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 657.535980][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 657.541177][ C0] do_user_addr_fault+0xa4f/0x1340 [ 657.546268][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 657.551616][ C0] exc_page_fault+0x6a/0xc0 [ 657.556101][ C0] asm_exc_page_fault+0x26/0x30 [ 657.560927][ C0] RIP: 0033:0x7f8a2f3aedc0 [ 657.565325][ C0] Code: Unable to access opcode bytes at 0x7f8a2f3aed96. [ 657.572319][ C0] RSP: 002b:00007f8a2f74f6d8 EFLAGS: 00010202 [ 657.578367][ C0] RAX: 00007f8a2f435f18 RBX: 00007f8a2f74fc10 RCX: 0000000000000000 [ 657.586315][ C0] RDX: 0000000000000016 RSI: 00007f8a2f435f02 RDI: 00007f8a2f74fc10 [ 657.594265][ C0] RBP: 00007f8a2f435f18 R08: 00007f8a2f74fe80 R09: 0000000000000000 [ 657.602222][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000024b [ 657.610177][ C0] R13: 0000000000000000 R14: 00007f8a2f435f02 R15: 00007f8a2f74fcd0 [ 657.618151][ C0] [ 657.621299][ C0] Kernel Offset: disabled [ 657.625616][ C0] Rebooting in 86400 seconds..