last executing test programs: 4.821757155s ago: executing program 1 (id=2123): sendmmsg$unix(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4048810) 4.74802825s ago: executing program 1 (id=2124): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302", @ANYRES8=0x0], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="290a020000009c"], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f00000002c0)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_mr_vif\x00') syz_fuse_handle_req(r3, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r3, 0xfffffffffffffff9, 0x2) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 4.429019843s ago: executing program 3 (id=2126): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="f7", 0xfdef}], 0x1) recvmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}, 0x8a59}], 0x1, 0x40002000, 0x0) socket$kcm(0x2d, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa2d42, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001cc0)) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="120100002b64791086050015972e0102030109022400010000000009040000020abf400009050b02000000000009050a02"], 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000300)={0x28, 0x4, r3, 0x0, &(0x7f0000702000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) 3.706009955s ago: executing program 4 (id=2129): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0x40, 0x22, 0x0, 0x40a}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x40480, 0x0) lseek(r2, 0x2, 0x0) statx(r2, &(0x7f0000000100)='./file0\x00', 0x6000, 0x1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000902, r3, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x6f5e, 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x6000000d}) poll(&(0x7f0000000100)=[{r5, 0x5f4b8f9e57b39c22}], 0x1, 0x80) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r7, 0x5100) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 2.779843306s ago: executing program 1 (id=2131): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x24040021) bind$pptp(r1, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0xfff8, @multicast1}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) writev(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)='}m', 0x2}, {&(0x7f00000001c0)="69ad52a5e48d06a2a2a647fe6b0b2709827f1146", 0x14}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="31032abd7000fbdbdf250b0000000800030071"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x50, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000000080004"], 0x54}}, 0x0) 2.694044284s ago: executing program 1 (id=2132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:De', 0x0) 2.483643442s ago: executing program 2 (id=2134): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'veth0_virt_wifi\x00', {0x80000001}, 0x3}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001c000135f5e38700ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="40004c060a000200aaaa"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00007bb000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="3e0f01c3660f3881b7037b0000d9f2640f79e10f3266ba6100edc4c27933620f64660f3830ba000000000b18", 0x2c}], 0x1, 0x42, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x121800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffd, 0x4, 0x9, 0x5, 0x0, 0x3, 0x2, 0xffffffffffffffff], 0x10000, 0x202}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="7a0892f39e71c2a461107e00000000000400000000000000950000000000000070b30c722ca6d98b10"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000000100), 0x6c99, 0x40041) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x8bd4cec) write$vhost_msg_v2(r8, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x4}}, 0x48) bind$xdp(r7, &(0x7f0000000240)={0x2c, 0x6, r1, 0x19, r8}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x10, 0x0, 0x2, 0x0, 0x8, 0x9, 0xf}, {0x80a0000, 0x0, 0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x7}, {0xe000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x4, 0x3, 0x0, 0x40, 0xfc}, {0x5000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0x3}, {0xeeee8000, 0xe000, 0x9, 0x0, 0xe, 0x8, 0x0, 0x5, 0x0, 0x3d, 0x83}, {0x0, 0x60000, 0x0, 0x4, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x9}, {0xd000, 0x4000, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x2, 0x2000, 0x0, 0x0, 0x1, 0x1, 0xfc, 0xca, 0x26, 0x0, 0x0, 0xfd}, {0x80a0000}, {0x7000, 0x5}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x1800, 0x0, [0x0, 0x0, 0x80000001]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = socket(0x10, 0x80002, 0x2) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.315714935s ago: executing program 1 (id=2135): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x8, r2, 0x0, 0x1, 0x96495, 0x1, &(0x7f0000000c80)="ec", 0x10001}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@local, 0x4e21, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0xa0, 0x2c, 0x0, r4}, {0x33cb, 0x80000001, 0x40, 0x3, 0x6, 0xffffffffffffffff, 0x8, 0xffffffffffffd977}, {0xe2bf, 0x2000000000000000, 0x4, 0x9}, 0x20000, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x33}, 0x2, @in=@multicast2, 0x3503, 0x0, 0x0, 0xff, 0x5, 0x7, 0x7ff}}, 0xe8) 2.286816842s ago: executing program 3 (id=2136): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) 2.076102143s ago: executing program 0 (id=2137): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}]}, 0x44}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x23}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1000000, &(0x7f0000006680)) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) fchdir(r3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000103d56e616c0000000002000004"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x44004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r6], 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240500006800010002200000fcffff7f00010000000000000c0002000100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 2.074609354s ago: executing program 3 (id=2138): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000010301"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) (rerun: 64) read$FUSE(r0, &(0x7f000000c200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0xffffffffffffffda, r3, {0x7, 0x2b, 0x0, 0x50480240, 0x1000, 0x61c6, 0x4007, 0xa15, 0x0, 0x0, 0x10, 0x2}}, 0x50) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) write$rfkill(r6, &(0x7f0000000000)={0x14000000, 0x2, 0x0, 0x1}, 0x8) (async, rerun: 64) lsetxattr$security_capability(&(0x7f0000000780)='./cgroup.net/devices.allow\x00', &(0x7f0000000a40), &(0x7f0000000a80)=@v2={0x2000000, [{0x8, 0x2}, {0x1, 0x9}]}, 0x14, 0x3) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xda) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffc, {0x0, 0x1, 0x0, 0x0, 0x3fe, 0x0, {0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0xffffffffffffff28, 0x3, 0x0, 0x0, 0x0, 0x100000, 0xc000, 0x1, r4, 0x0, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x3, {0x2000001, 0x1000000000000000, 0x1000000975a, 0x40000000000305, 0x3, 0xb, {0x5, 0x800000000000003, 0x1, 0xfe2b260, 0x1ffffffffffffffe, 0x0, 0xc, 0x4, 0x3, 0x2000, 0x3, r4, r5, 0x3, 0x5414}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0/file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xe, &(0x7f00000000c0)=ANY=[@ANYRES16=r7], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), r7) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x8, 0x10, 0x10001, 0x1, {{0x11, 0x4, 0x1, 0x1e, 0x44, 0x66, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0xa2, 0x3, 0x8, [{@private=0xa010100, 0x3ff}, {@local, 0x4}, {@rand_addr=0x64010101, 0x1}, {@private=0xa010100, 0xa331}, {@loopback, 0x6}]}, @noop]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000a00)={&(0x7f0000000380), 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xec, r9, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.025018478s ago: executing program 2 (id=2139): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000b000000000000000b040000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000950000009500"/32], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) r3 = openat$cgroup(r2, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f00000004c0)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff94, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) r5 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{}, &(0x7f0000000300), &(0x7f0000000400)='%+9llu \x00'}, 0x20) write$cgroup_type(r5, &(0x7f0000000140), 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000580)={{0x9, 0x2, 0xaeef, 0x73f1d5fd, 'syz1\x00', 0x8}, 0x0, 0x400, 0x46baf889, 0xffffffffffffffff, 0x5, 0x5, 'syz1\x00', &(0x7f00000001c0)=['\x00', '(@{}1$-%.^\xf9[\x00', 'GPL\x00', '!\x00', 'cgroup.type\x00'], 0x20}) 1.836881847s ago: executing program 2 (id=2140): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d0402ffb80000001d400500000000004704000001ed0000620300ff000000003f440000000000007a0a00fe00ffffffc30300fff1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.671920394s ago: executing program 2 (id=2141): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000500)={0xa, @pix_mp={0x0, 0x4000, 0x3234564e, 0x4, 0x1, [{0x40000}, {0x0, 0x80}, {0xb6e7}, {0x0, 0xffffffff}, {0x0, 0x400000}, {0xa8}, {0x3, 0x2000}], 0x0, 0x0, 0x0, 0x2}}) 1.646046388s ago: executing program 2 (id=2142): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffd, 0x1c840) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') fchdir(r2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x200, {0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x12, 0x1d, 0xd, "08b9cfdc24ef7c4074a0824db405f01a83cdb5bc5a6537e956136f0a8907232554327907660b8ae7a3cb89bb39802f3f12e9f06a9c51b9fdf43a768336662251", "b80668af0dc98b76869b2a5674b5bae06c468adb5d3a185d4473bd1edcc7da5a3260dc72a3ceebd47b4bb0d80ba12edf413f2fdea17dd7a06d42d9b19b76e783", "ba3f307401caece46fdbed20bc71abcf21ee9f8539e6de266d5eb9e46d2e416f", [0x2, 0x2]}}) 1.600853438s ago: executing program 3 (id=2143): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x1, 0x0) (fail_nth: 3) 1.532773111s ago: executing program 2 (id=2144): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) syz_usb_connect(0x0, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f0104000000080000000006241a03000a052404"], 0x0) r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040440647800001db80d36609021c0001010080fa0904030000010100000a240100010a000201"], 0x0) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x1f40) (async) socket(0xa, 0x4, 0x2) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) fallocate(r2, 0x81c9280f63dc37d0, 0x6, 0x9a) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x1, 0x1c2, 0x0, 0x0, 0x1000, 0x2d0, 0x0, 0x0, 0x10}}}, &(0x7f0000000d80)) (async) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, &(0x7f0000000dc0)) (async) r3 = gettid() ptrace$setopts(0x4206, r3, 0x5, 0x20) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000e40)=""/140) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) (async) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6ca0, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x101, 0x3, 0x2, 0x2}]}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000080000000c00000003000000010000002b99ee75b5f28834d15cda9ccd1c79fc728154078ae82044a871e371634bc2c209d73bd190cbe071b006b2c3ee96f2f339563424f0d84adf1e932b2ba7f56dd9f8c12ce75ba2f8f2091557e938e650a83e26eae689bb2a6b667a94ef858e97a52b1a3f5aea6ed1d408c0d5b1da55c5d17de48497385961ab7d58", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xa, r5}, 0x38) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000080)={0xeb2, 0x3b8a, 0x2}) syz_open_dev$rtc(&(0x7f00000006c0), 0x0, 0x20000) 1.276342364s ago: executing program 3 (id=2145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:De', 0x0) 1.119300652s ago: executing program 1 (id=2146): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2022, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) unshare(0x8040480) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f00000001c0)=0x3dc4) pselect6(0x40, &(0x7f0000003800)={0x3, 0x6, 0x8, 0x1, 0x4, 0x1, 0x5, 0x7}, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) syz_usb_connect$midi(0x0, 0x58, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201f702000000403512018240"], 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) socket$inet6_mptcp(0xa, 0x1, 0x106) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/166, 0xa6) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 992.961868ms ago: executing program 3 (id=2147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000048b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f00003c9000/0x1000)=nil) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000000)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x17) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x49}, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x19, 0x2, "8b29"}, 0x0, 0x0, 0x0, 0x0}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0xffffffffffffffff) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)) read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x2020) 836.251697ms ago: executing program 0 (id=2148): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) 760.820419ms ago: executing program 0 (id=2149): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_dev$video4linux(&(0x7f0000000200), 0x1, 0x88100) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0xfffffffd, 0xb77, 0x3014, 0x0, 0xa, 0x9, 0x3, 0xa4de36948e08189d}}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) syz_open_dev$video(&(0x7f0000000000), 0x8, 0xe18d5602619d31a3) unshare(0x100000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x5, 0x40000183}) 404.611753ms ago: executing program 4 (id=2150): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$dsp(0xffffffffffffffff, &(0x7f0000000000)=""/53, 0x35) socket$netlink(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) (async) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r0, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) 306.30557ms ago: executing program 4 (id=2151): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 244.569172ms ago: executing program 0 (id=2152): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000340)=0x2) syz_io_uring_setup(0x80803158, &(0x7f0000000700)={0x0, 0x755c, 0x2, 0x4, 0x29f}, &(0x7f0000000100), &(0x7f00000006c0), &(0x7f0000000000)) (async) r2 = syz_io_uring_setup(0x80803158, &(0x7f0000000700)={0x0, 0x755c, 0x2, 0x4, 0x29f}, &(0x7f0000000100), &(0x7f00000006c0), &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000280)={0x1fd, 0x5, 0xd000, 0x1000, &(0x7f0000000000/0x1000)=nil}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x7, &(0x7f00000002c0)={0x1, 0x0, 0x1d77, 0x3ff}) (async) fcntl$lock(r0, 0x7, &(0x7f00000002c0)={0x1, 0x0, 0x1d77, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x6, @sliced={0x4, [0x6, 0x0, 0x7, 0x9, 0x45, 0x2, 0x5, 0x405, 0x7fff, 0x2000, 0x81, 0x7, 0x0, 0x7, 0xc432, 0x59, 0xff00, 0x3, 0x4, 0x7, 0x5, 0xe, 0x1, 0x7, 0x7, 0x3, 0x0, 0x6, 0x7ff, 0x6, 0x2, 0x4, 0xfffc, 0x3, 0x101, 0x4, 0x19, 0xfd2, 0x3, 0x7, 0x8, 0x8, 0x9, 0x10, 0x40, 0x6, 0x0, 0x8351], 0x5}}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xc10, &(0x7f00000004c0)=ANY=[@ANYBLOB="26643d653fcd0d0dbb584b3ba31aaa81104166d9a919dc0ab20f21fd5f631caed0edbd4c868bf81ba156fe2279462d73ddf154cd1065a5e40e2a68142e75f5d6a84603787bfc028fa82a72f7135f6d2e527f6fe464d72ad1e15ff352056f2b0516a93d2f9cc362db5af51ae16b459fb28a8d1376be87fa07d5aa86fc41c1073d11419dca3741ddbd2953c98dc371bf12b148c7ebc43bbb893e3741a61f21657c519492e7ea73383907bfbba5d9e75905175cde5f888c05c9bb99829c0f7fa8a1e79164b81e3c47a8aef2305f5b6e82faf8dbc66becb59c70f1", @ANYRESDEC=0x0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB="4b40d5a36c8b6be4f57d226a1c176f9c7c684c53a1be83f730aa911b1082c95d7ae7903eb185c8f5d4a05d4828e1d9fb7eef728ebe0b54aae9a70493c65501ae0f7c579efc1ca522c83ace32", @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xc10, &(0x7f00000004c0)=ANY=[@ANYBLOB="26643d653fcd0d0dbb584b3ba31aaa81104166d9a919dc0ab20f21fd5f631caed0edbd4c868bf81ba156fe2279462d73ddf154cd1065a5e40e2a68142e75f5d6a84603787bfc028fa82a72f7135f6d2e527f6fe464d72ad1e15ff352056f2b0516a93d2f9cc362db5af51ae16b459fb28a8d1376be87fa07d5aa86fc41c1073d11419dca3741ddbd2953c98dc371bf12b148c7ebc43bbb893e3741a61f21657c519492e7ea73383907bfbba5d9e75905175cde5f888c05c9bb99829c0f7fa8a1e79164b81e3c47a8aef2305f5b6e82faf8dbc66becb59c70f1", @ANYRESDEC=0x0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB="4b40d5a36c8b6be4f57d226a1c176f9c7c684c53a1be83f730aa911b1082c95d7ae7903eb185c8f5d4a05d4828e1d9fb7eef728ebe0b54aae9a70493c65501ae0f7c579efc1ca522c83ace32", @ANYRESDEC=0x0]) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) preadv2(r4, 0x0, 0x0, 0xfffffffd, 0x558, 0x12) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f00000001c0)={0x1}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) (async) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r5, 0xc10c3000) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r5, 0xc10c3000) r6 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) ioctl$MEMWRITEOOB64(r6, 0xc0184d15, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0}) (async) ioctl$MEMWRITEOOB64(r6, 0xc0184d15, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0}) mmap(&(0x7f0000089000/0x2000)=nil, 0x2000, 0xa, 0x11012, r5, 0x1000) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x4, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x8, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x0) (async) lseek(r7, 0x10001, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x8, 0x1, 0x0, 0x200, 0x6, 0x5}, 0x30, 0x3) 199.650337ms ago: executing program 4 (id=2153): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000500)={0xa, @pix_mp={0x0, 0x4000, 0x3234564e, 0x4, 0x1, [{0x40000}, {0x0, 0x80}, {0xb6e7}, {0x0, 0xffffffff}, {0x0, 0x3000000}, {0xa8}, {0x3, 0x2000}], 0x0, 0x0, 0x0, 0x2}}) 154.515629ms ago: executing program 0 (id=2154): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000280)={0xffffffffffffffff}) fanotify_mark(r1, 0x1, 0x1001, r1, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000000)={0x0, 0x3, 0x8, 0x3c511345}) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000003c0), 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 95.363361ms ago: executing program 4 (id=2155): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x1, 0x0) (fail_nth: 4) 16.025746ms ago: executing program 0 (id=2156): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040460d11200000010203010902200001010080320904000002ff0000000705810308000a07050203"], 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000240)={0x20, 0x30, 0x39, "bbb4024b2ae0e7bc98f9fa4268a1974ef11934275be6c74cc539919982dd07396c4239d4dede5eec54f8c9ddd860da8de1e2a69d70c38e3609"}, 0x0, 0x0, 0x0, 0x0, 0x0}) write(r2, &(0x7f0000000300)='xdevxcharx188x0', 0xf) read(r1, &(0x7f0000000400), 0x10) write(r2, &(0x7f0000000300)='/', 0x1) read(r1, &(0x7f0000000400), 0x1) write(r2, &(0x7f0000000300)='/', 0x1) read(r1, &(0x7f0000000404), 0x1) write(r2, &(0x7f0000000300)='/', 0x1) read(r1, &(0x7f0000000409), 0x1) write(r2, &(0x7f0000000300)=':', 0x1) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_SYMLINKAT={0x26, 0xe, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000240)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) read(r1, &(0x7f000000040d), 0x1) openat(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x44, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x2e, 0x30, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x10000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x11, 0x0, 0x4, {0xa, 0x25, 0x25, 0x7, 0x3, 0x300}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0xff, 0xb, {0xa, 0x25, 0x25, 0x9, 0x3, 0x8}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=2157): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000c400000007000000ac1414aa0000000020000000000000009c00000008000000200100000000ff2000000000000000002000000000000000840000000800000000000000000000000000ff"], 0x58, 0x4855}, 0x24000052) syz_usb_connect(0x3, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040f00a116700000102000109022a00010100c0000904000003ff000000032401070581"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = userfaultfd(0x80801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001b00)={0x400, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x40000, 0x0, 0xd7}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'wg1\x00', @broadcast}) kernel console output (not intermixed with test programs): 0100.0016: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 12ba:0100] on usb-dummy_hcd.4-1/input0 [ 448.398018][ T6283] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 448.418430][ T6283] usb 2-1: device descriptor read/8, error -71 [ 448.657786][ T6283] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 448.679258][ T6283] usb 2-1: device descriptor read/8, error -71 [ 448.788264][ T6283] usb usb2-port1: unable to enumerate USB device [ 448.801283][ T6273] usb 5-1: USB disconnect, device number 126 [ 449.268294][T14361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.270238][T14361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.297812][ T6273] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 449.428200][ T6273] usb 5-1: device descriptor read/64, error -71 [ 449.679537][ T6273] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 449.818253][ T6273] usb 5-1: device descriptor read/64, error -71 [ 449.938348][ T6273] usb usb5-port1: attempt power cycle [ 450.298276][ T6273] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 450.318721][ T6273] usb 5-1: device descriptor read/8, error -71 [ 450.537428][T14406] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 450.541095][T14406] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 450.558193][ T6273] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 450.578502][ T6273] usb 5-1: device descriptor read/8, error -71 [ 450.700957][ T6273] usb usb5-port1: unable to enumerate USB device [ 450.752256][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1795'. [ 450.805063][T14418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.807394][T14418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.049241][ T6273] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 451.164064][T14429] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1796'. [ 451.164090][T14429] openvswitch: netlink: Flow key attr not present in new flow. [ 451.217129][ T6273] usb 2-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 451.219544][ T6273] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 451.219590][ T6273] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 451.228823][ T6273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.444893][T14439] netlink: 'syz.0.1799': attribute type 34 has an invalid length. [ 451.444911][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 451.585914][T14475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.596750][T14475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.609321][T14476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.609962][T14476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.619874][T14475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.620459][T14475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.528616][T14508] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 452.529653][ C1] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 452.529846][T14508] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 452.529929][ C1] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 453.209761][ T5625] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 453.216805][ T31] kauditd_printk_skb: 118 callbacks suppressed [ 453.216826][ T31] audit: type=1326 audit(1791098379.849:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a78f9e159 code=0x7ffc0000 [ 453.216876][ T31] audit: type=1326 audit(1791098379.849:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a78f9e159 code=0x7ffc0000 [ 453.232734][ T31] audit: type=1326 audit(1791098379.859:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5a78f9e159 code=0x7ffc0000 [ 453.232795][ T31] audit: type=1326 audit(1791098379.859:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a78f9e159 code=0x7ffc0000 [ 453.232843][ T31] audit: type=1326 audit(1791098379.859:10057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a78f9e159 code=0x7ffc0000 [ 453.310330][ T31] audit: type=1326 audit(1791098379.919:10058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5a78f9e159 code=0x7ffc0000 [ 453.310390][ T31] audit: type=1326 audit(1791098379.919:10059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a78f9e159 code=0x7ffc0000 [ 453.310435][ T31] audit: type=1326 audit(1791098379.919:10060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14541 comm="syz.0.1809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a78f9e159 code=0x7ffc0000 [ 453.411233][ T5625] usb 5-1: device descriptor read/64, error -71 [ 453.648040][ T5625] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 453.676698][ T6273] usb 2-1: low speed audio streaming not supported [ 453.676714][ T6273] usb 2-1: low speed audio streaming not supported [ 453.785158][ T5625] usb 5-1: device descriptor read/64, error -71 [ 453.820529][T14547] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1810'. [ 453.824551][T14547] 0·: renamed from hsr0 [ 453.874562][ T6273] usb 2-1: USB disconnect, device number 103 [ 453.894316][ T5625] usb usb5-port1: attempt power cycle [ 454.013872][T14547] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 454.022572][T14547] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.024327][T14547] 0·: entered allmulticast mode [ 454.024351][T14547] hsr_slave_0: entered allmulticast mode [ 454.024370][T14547] hsr_slave_1: entered allmulticast mode [ 454.070786][T14547] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 454.228027][ T5625] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 454.249137][ T5625] usb 5-1: device descriptor read/8, error -71 [ 454.464634][T14587] FAULT_INJECTION: forcing a failure. [ 454.464634][T14587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.464673][T14587] CPU: 1 UID: 0 PID: 14587 Comm: syz.1.1815 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.464701][T14587] Tainted: [L]=SOFTLOCKUP [ 454.464709][T14587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 454.464721][T14587] Call Trace: [ 454.464729][T14587] [ 454.464736][T14587] dump_stack_lvl+0xe8/0x150 [ 454.464759][T14587] should_fail_ex+0x410/0x560 [ 454.464777][T14587] _copy_from_user+0x2d/0xb0 [ 454.464794][T14587] __sys_sendto+0x2a9/0x5a0 [ 454.464814][T14587] ? ksys_write+0x1e6/0x270 [ 454.464828][T14587] ? __pfx___sys_sendto+0x10/0x10 [ 454.464843][T14587] ? __mutex_unlock_slowpath+0x731/0x900 [ 454.464877][T14587] ? __pfx_ksys_write+0x10/0x10 [ 454.464892][T14587] __x64_sys_sendto+0xde/0x100 [ 454.464910][T14587] do_syscall_64+0x166/0x520 [ 454.464926][T14587] ? trace_irq_disable+0x3b/0x140 [ 454.464940][T14587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.464951][T14587] ? clear_bhb_loop+0x70/0xc0 [ 454.464970][T14587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.464982][T14587] RIP: 0033:0x7f331839e159 [ 454.464994][T14587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.465005][T14587] RSP: 002b:00007f33191b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 454.465021][T14587] RAX: ffffffffffffffda RBX: 00007f3318625fa0 RCX: 00007f331839e159 [ 454.465037][T14587] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 454.465045][T14587] RBP: 00007f33191b4090 R08: 0000200000000140 R09: 000000000000001c [ 454.465053][T14587] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 454.465061][T14587] R13: 00007f3318626038 R14: 00007f3318625fa0 R15: 00007f331874fa48 [ 454.465080][T14587] [ 454.496562][ T5625] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 454.546906][ T5625] usb 5-1: device descriptor read/8, error -71 [ 454.649804][ T5625] usb usb5-port1: unable to enumerate USB device [ 455.000683][ T5625] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 455.152399][ T5625] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 455.154013][ T5625] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 455.154040][ T5625] usb 2-1: config 1 has no interface number 0 [ 455.182344][ T5625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.182375][ T5625] usb 2-1: Product: syz [ 455.182392][ T5625] usb 2-1: Manufacturer: syz [ 455.182406][ T5625] usb 2-1: SerialNumber: syz [ 455.234723][ T5625] usb 2-1: 3:0 : does not exist [ 455.234749][ T5625] usb 2-1: 3:0 : does not exist [ 455.452345][T14589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.452680][T14589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.717447][ T189] usb 2-1: USB disconnect, device number 104 [ 455.733048][T11973] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 456.003856][T14628] netlink: 'syz.4.1818': attribute type 4 has an invalid length. [ 456.006848][T14627] netlink: 'syz.4.1818': attribute type 4 has an invalid length. [ 456.078931][ T6280] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 456.162792][T14628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1818'. [ 456.227742][ T6280] usb 3-1: Using ep0 maxpacket: 32 [ 456.232543][ T6280] usb 3-1: unable to get BOS descriptor or descriptor too short [ 456.232602][ T6280] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 456.265416][ T6280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.265446][ T6280] usb 3-1: Product: syz [ 456.265461][ T6280] usb 3-1: SerialNumber: syz [ 456.690157][ T5625] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 456.838518][ T5625] usb 2-1: Using ep0 maxpacket: 8 [ 456.840779][ T5625] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 456.864045][ T5625] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 456.864115][ T5625] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.864139][ T5625] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.864701][ T5625] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.864728][ T5625] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.864773][ T5625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.228087][ T6271] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 457.321059][T14658] netlink: 'syz.1.1819': attribute type 10 has an invalid length. [ 457.378659][ T6271] usb 5-1: Using ep0 maxpacket: 8 [ 457.379533][ T6271] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= a.10 [ 457.386186][ T6271] usb 5-1: config 0 has an invalid interface number: 131 but max is 0 [ 457.386216][ T6271] usb 5-1: config 0 has no interface number 0 [ 457.386254][ T6271] usb 5-1: config 0 interface 131 has no altsetting 0 [ 457.398216][ T6271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.398242][ T6271] usb 5-1: Product: syz [ 457.398255][ T6271] usb 5-1: Manufacturer: syz [ 457.398269][ T6271] usb 5-1: SerialNumber: syz [ 457.414667][T14658] team0: Port device dummy0 added [ 457.419919][ T6271] usb 5-1: config 0 descriptor?? [ 457.546242][ T5625] usb 2-1: usb_control_msg returned -32 [ 457.546302][ T5625] usbtmc 2-1:16.0: can't read capabilities [ 457.694727][ T6271] ims_pcu 5-1:0.131: Missing CDC union descriptor [ 457.694789][ T6271] ims_pcu 5-1:0.131: probe with driver ims_pcu failed with error -22 [ 457.722461][ T6271] usb 5-1: USB disconnect, device number 9 [ 457.865036][ T6280] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 457.866430][ T6280] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 457.895562][ T31] audit: type=1326 audit(1791098384.529:10061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14676 comm="syz.3.1820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 457.895804][ T31] audit: type=1326 audit(1791098384.529:10062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14676 comm="syz.3.1820" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 458.039227][ T6280] usb 3-1: USB disconnect, device number 71 [ 458.090906][ T9308] udevd[9308]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.355552][T14712] syz.0.1827 (14712): /proc/14710/oom_adj is deprecated, please use /proc/14710/oom_score_adj instead. [ 458.428687][ T6279] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 458.443349][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'. [ 458.578960][ T6279] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 458.580422][ T6279] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 458.580447][ T6279] usb 4-1: config 1 has no interface number 0 [ 458.580477][ T6279] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 458.580518][ T6279] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 458.580540][ T6279] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 64 [ 458.583396][ T6279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.583433][ T6279] usb 4-1: Product: syz [ 458.583443][ T6279] usb 4-1: Manufacturer: syz [ 458.583452][ T6279] usb 4-1: SerialNumber: syz [ 458.674094][T14703] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 458.674188][T14703] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 458.878758][T14703] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 458.878892][T14703] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 458.885508][ T6279] usb 4-1: No status endpoint found [ 459.100462][ T6279] usb 4-1: USB disconnect, device number 108 [ 459.521885][ T6271] usb 2-1: USB disconnect, device number 105 [ 460.097763][ T6271] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 460.143321][T14758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.144881][T14758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.228172][ T6271] usb 3-1: device descriptor read/64, error -71 [ 460.273840][T14762] ipvlan2: entered promiscuous mode [ 460.282713][T14762] team0: Device ipvlan2 failed to register rx_handler [ 460.315998][T14766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1836'. [ 460.478068][ T6271] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 460.607947][ T6271] usb 3-1: device descriptor read/64, error -71 [ 460.720526][ T6271] usb usb3-port1: attempt power cycle [ 460.783937][T14788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.784232][T14788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.797787][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 460.927871][ T10] usb 5-1: device descriptor read/64, error -71 [ 461.067869][ T6271] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 461.091930][ T6271] usb 3-1: device descriptor read/8, error -71 [ 461.167987][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 461.297857][ T10] usb 5-1: device descriptor read/64, error -71 [ 461.329515][ T6271] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 461.351543][ T6271] usb 3-1: device descriptor read/8, error -71 [ 461.408351][ T10] usb usb5-port1: attempt power cycle [ 461.443368][T14810] dvmrp12: entered allmulticast mode [ 461.459459][ T6271] usb usb3-port1: unable to enumerate USB device [ 461.638270][T14821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.639928][T14821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.749164][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 461.770288][ T10] usb 5-1: device descriptor read/8, error -71 [ 461.964859][T14828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1854'. [ 462.007776][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 462.031007][ T10] usb 5-1: device descriptor read/8, error -71 [ 462.139271][ T10] usb usb5-port1: unable to enumerate USB device [ 462.338110][ T6279] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 462.487811][ T6279] usb 2-1: Using ep0 maxpacket: 32 [ 462.495145][ T6279] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 462.496118][ T6279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.507806][ T6279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.507831][ T6279] usb 2-1: Product: syz [ 462.507846][ T6279] usb 2-1: Manufacturer: syz [ 462.507859][ T6279] usb 2-1: SerialNumber: syz [ 462.559188][T14860] tipc: Enabled bearer , priority 1 [ 462.762797][ T6279] usb 2-1: USB disconnect, device number 106 [ 463.278583][T14856] tipc: Resetting bearer [ 463.335237][T14856] tipc: Disabling bearer [ 463.857794][ T6271] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 464.008593][ T6271] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 464.009848][ T6271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.035514][ T6271] usb 2-1: config 0 descriptor?? [ 464.460369][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1866'. [ 464.460403][T14897] netlink: 'syz.1.1866': attribute type 3 has an invalid length. [ 464.477912][ T6271] ath6kl: Failed to submit usb control message: -71 [ 464.477964][ T6271] ath6kl: unable to send the bmi data to the device: -71 [ 464.477978][ T6271] ath6kl: Unable to send get target info: -71 [ 464.486716][ T6271] ath6kl: Failed to init ath6kl core: -71 [ 464.488182][ T6271] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 464.514895][ T6271] usb 2-1: USB disconnect, device number 107 [ 464.630879][T14877] syz.2.1862 (14877): drop_caches: 2 [ 464.820869][T14952] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1876'. [ 464.869440][T14959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'. [ 464.869472][T14959] bond0: Unable to set up delay as MII monitoring is disabled [ 464.870574][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 464.870591][ T31] audit: type=1326 audit(1791098391.509:10072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2b239e159 code=0x7ffc0000 [ 464.871602][ T31] audit: type=1326 audit(1791098391.509:10073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2b239e159 code=0x7ffc0000 [ 464.871997][ T31] audit: type=1326 audit(1791098391.509:10074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2b239e159 code=0x7ffc0000 [ 464.872667][ T31] audit: type=1326 audit(1791098391.509:10075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2b239e159 code=0x7ffc0000 [ 464.873455][ T31] audit: type=1326 audit(1791098391.509:10076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2b239e159 code=0x7ffc0000 [ 464.874327][ T31] audit: type=1326 audit(1791098391.509:10077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2b239e159 code=0x7ffc0000 [ 464.874860][ T31] audit: type=1326 audit(1791098391.509:10078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2b239e159 code=0x7ffc0000 [ 464.875544][ T31] audit: type=1326 audit(1791098391.509:10079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2b239e159 code=0x7ffc0000 [ 464.877517][ T31] audit: type=1326 audit(1791098391.509:10080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2b239e159 code=0x7ffc0000 [ 464.877562][ T31] audit: type=1326 audit(1791098391.509:10081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14956 comm="syz.2.1877" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2b239e159 code=0x7ffc0000 [ 464.923576][T14959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1877'. [ 464.927937][ T189] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 465.138317][ T189] usb 5-1: Using ep0 maxpacket: 16 [ 465.141601][ T189] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 465.144172][ T189] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 465.144195][ T189] usb 5-1: config 4 has no interface number 0 [ 465.144236][ T189] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 465.144258][ T189] usb 5-1: config 4 interface 9 altsetting 2 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 465.144282][ T189] usb 5-1: config 4 interface 9 has no altsetting 0 [ 465.150251][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.150274][ T189] usb 5-1: Product: syz [ 465.150287][ T189] usb 5-1: Manufacturer: syz [ 465.150300][ T189] usb 5-1: SerialNumber: syz [ 465.169564][T14925] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 465.231131][ T189] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 465.348205][ T10] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 465.512747][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 465.515654][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 465.515692][ T10] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 465.516986][ T10] usb 4-1: config 1 has an invalid descriptor of length 184, skipping remainder of the config [ 465.517012][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.575927][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.575949][ T10] usb 4-1: Product: syz [ 465.575958][ T10] usb 4-1: Manufacturer: syz [ 465.575967][ T10] usb 4-1: SerialNumber: syz [ 465.620655][ T6279] usb 5-1: USB disconnect, device number 14 [ 465.645311][ T6718] usb 5-1: Failed to submit usb control message: -71 [ 465.645338][ T6718] usb 5-1: unable to send the bmi data to the device: -71 [ 465.645349][ T6718] usb 5-1: unable to get target info from device [ 465.645359][ T6718] usb 5-1: could not get target info (-71) [ 465.645379][ T6718] usb 5-1: could not probe fw (-71) [ 465.856635][ T10] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 465.866505][ T10] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 465.866536][ T10] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 465.866554][ T10] usb 4-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 465.869430][ T10] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 465.880266][ T10] usb 4-1: 3:0: cannot get min/max values for control 4 (id 3) [ 465.882907][ T10] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 465.985428][ T10] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 465.993803][ T10] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3) [ 466.079886][ T10] usb 4-1: USB disconnect, device number 109 [ 466.134821][ T9308] udevd[9308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.747760][ T6279] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 466.788096][ T5625] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 466.809337][T15045] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 466.809385][T15045] block device autoloading is deprecated and will be removed. [ 466.909807][ T6279] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 466.910768][ T6279] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 466.910801][ T6279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.955746][ T6279] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 466.968018][ T5625] usb 4-1: Using ep0 maxpacket: 8 [ 466.968786][ T5625] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 466.973551][ T5625] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 466.973581][ T5625] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 466.973626][ T5625] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.973671][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.047163][ T5625] usbtmc 4-1:16.0: bulk endpoints not found [ 467.199431][T15062] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 467.199554][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 467.253394][T15039] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1890'. [ 467.365636][ T10] usb 4-1: USB disconnect, device number 110 [ 467.503782][T15066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.505996][T15066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.197920][ T189] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 468.358584][ T189] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 468.362885][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.362911][ T189] usb 4-1: Product: syz [ 468.362926][ T189] usb 4-1: Manufacturer: syz [ 468.362936][ T189] usb 4-1: SerialNumber: syz [ 468.367257][ T189] usb 4-1: config 0 descriptor?? [ 468.394121][ T189] hub 4-1:0.0: bad descriptor, ignoring hub [ 468.394147][ T189] hub 4-1:0.0: probe with driver hub failed with error -5 [ 468.478071][ T6279] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 468.478095][ T6279] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 468.478551][ T6279] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 468.478565][ T6279] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 468.607207][ T189] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 468.617265][ T189] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 468.620444][ T189] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 468.620498][ T189] usb 4-1: media controller created [ 468.649089][ T189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.724438][ T189] DVB: Unable to find symbol dib7000p_attach() [ 468.724458][ T189] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 468.917866][ T189] rc_core: IR keymap rc-dib0700-rc5 not found [ 468.917889][ T189] Registered IR keymap rc-empty [ 469.064568][T15115] tmpfs: Unknown parameter 'Իû¢Y.:x•:‹FGDF×ÍjAãö»n8ôƒ£¿J9O× [ 469.064568][T15115] é8³õ”NÝ÷Cý$²I<¥÷z|ÔE' [ 469.103812][ T189] dvb-usb: could not initialize remote control. [ 469.103832][ T189] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 469.134081][T15120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'. [ 469.134659][T15120] bond0: option lp_interval: invalid value (0) [ 469.134683][T15120] bond0: option lp_interval: allowed values 1 - 2147483647 [ 469.146787][ T189] usb 4-1: USB disconnect, device number 111 [ 469.158725][T14971] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 469.327048][ T189] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 469.610667][ T6270] usb 2-1: USB disconnect, device number 108 [ 470.258940][ T6270] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 470.298360][ T189] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 470.408741][ T6270] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 470.412126][ T6270] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.412191][ T6270] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 470.412220][ T6270] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 470.412246][ T6270] usb 2-1: config 0 interface 0 has no altsetting 0 [ 470.412282][ T6270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.441501][ T6270] usb 2-1: config 0 descriptor?? [ 470.461522][ T189] usb 4-1: Using ep0 maxpacket: 32 [ 470.478262][ T189] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=fe.f9 [ 470.505771][ T189] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 470.505799][ T189] usb 4-1: can't read configurations, error -61 [ 470.638748][ T189] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 470.787945][ T189] usb 4-1: Using ep0 maxpacket: 32 [ 470.789137][ T189] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=fe.f9 [ 470.793386][ T189] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 470.793436][ T189] usb 4-1: can't read configurations, error -61 [ 470.793893][ T189] usb usb4-port1: attempt power cycle [ 470.848109][ T6279] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 470.910252][ T6270] logitech-djreceiver 0003:046D:C532.0017: unknown main item tag 0x0 [ 470.910321][ T6270] logitech-djreceiver 0003:046D:C532.0017: unknown main item tag 0x0 [ 470.910348][ T6270] logitech-djreceiver 0003:046D:C532.0017: unknown main item tag 0x0 [ 470.910375][ T6270] logitech-djreceiver 0003:046D:C532.0017: unknown main item tag 0x0 [ 470.910400][ T6270] logitech-djreceiver 0003:046D:C532.0017: unknown main item tag 0x0 [ 470.910729][ T6270] logitech-djreceiver 0003:046D:C532.0017: unknown main item tag 0x0 [ 470.910782][ T6270] logitech-djreceiver 0003:046D:C532.0017: unknown main item tag 0x0 [ 470.910798][ T6270] logitech-djreceiver 0003:046D:C532.0017: unknown main item tag 0x0 [ 470.910814][ T6270] logitech-djreceiver 0003:046D:C532.0017: unknown main item tag 0x0 [ 470.910829][ T6270] logitech-djreceiver 0003:046D:C532.0017: unknown main item tag 0x0 [ 471.054038][ T6279] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 471.070770][ T6279] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 471.070850][ T6279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 471.070866][ T6279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 471.081778][ T6270] usb 2-1: USB disconnect, device number 109 [ 471.116927][ T6279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.116964][ T6279] usb 3-1: Product: syz [ 471.116980][ T6279] usb 3-1: Manufacturer: syz [ 471.116996][ T6279] usb 3-1: SerialNumber: syz [ 471.144802][ T189] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 471.162107][ T189] usb 4-1: Using ep0 maxpacket: 32 [ 471.164327][ T189] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=fe.f9 [ 471.189609][ T189] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 471.189664][ T189] usb 4-1: can't read configurations, error -61 [ 471.196663][ T6279] usb 3-1: config 0 descriptor?? [ 471.318831][ T189] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 471.338749][ T189] usb 4-1: Using ep0 maxpacket: 32 [ 471.341864][ T189] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=fe.f9 [ 471.346586][ T189] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 471.346611][ T189] usb 4-1: can't read configurations, error -61 [ 471.347393][ T189] usb usb4-port1: unable to enumerate USB device [ 473.434681][T15238] x_tables: duplicate underflow at hook 2 [ 473.671160][ T6283] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 473.673112][ T6279] usb 3-1: 0:0 : invalid sync pipe. is_playback 1, ep 0b, bSynchAddress ff [ 473.763427][ T6279] usb 3-1: USB disconnect, device number 76 [ 473.820819][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 473.820842][ T31] audit: type=1326 audit(1791098400.459:10138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.3.1926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 473.821112][ T31] audit: type=1326 audit(1791098400.459:10139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.3.1926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 473.821704][ T31] audit: type=1326 audit(1791098400.459:10140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.3.1926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 473.821850][ T6283] usb 5-1: Using ep0 maxpacket: 32 [ 473.821930][ T31] audit: type=1326 audit(1791098400.459:10141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.3.1926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 473.822152][ T31] audit: type=1326 audit(1791098400.459:10142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.3.1926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 473.822512][ T31] audit: type=1326 audit(1791098400.459:10143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.3.1926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 473.830211][ T31] audit: type=1326 audit(1791098400.459:10144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.3.1926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 473.830465][ T31] audit: type=1326 audit(1791098400.469:10145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.3.1926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 473.834424][ T31] audit: type=1326 audit(1791098400.469:10146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.3.1926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 473.834799][ T31] audit: type=1326 audit(1791098400.469:10147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.3.1926" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 473.884763][ T6283] usb 5-1: unable to get BOS descriptor or descriptor too short [ 473.884823][ T6283] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 474.060268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 474.122359][ T6283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.122391][ T6283] usb 5-1: Product: syz [ 474.122419][ T6283] usb 5-1: Manufacturer: syz [ 474.122436][ T6283] usb 5-1: SerialNumber: syz [ 474.231540][ T9281] udevd[9281]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.385426][ T6283] usb 5-1: unit 4 not found! [ 474.385445][ T6283] usb 5-1: unit 0 not found! [ 474.675483][ T9308] buffer_io_error: 130 callbacks suppressed [ 474.675506][ T9308] Buffer I/O error on dev loop7, logical block 4095, async page read [ 474.677814][ T189] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 474.735977][T15314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.736672][T15314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.788624][ T6283] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 474.796555][ T6283] usb 5-1: unit 4 not found! [ 474.796580][ T6283] usb 5-1: unit 0 not found! [ 474.829525][ T6283] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 474.835828][ T6283] usb 5-1: unit 4 not found! [ 474.835931][ T6283] usb 5-1: unit 0 not found! [ 474.836526][ T189] usb 3-1: unable to get BOS descriptor or descriptor too short [ 474.836578][ T189] usb 3-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=4c.04 [ 474.840283][ T189] usb 3-1: config 2 has an invalid interface number: 118 but max is 0 [ 474.840308][ T189] usb 3-1: config 2 has no interface number 0 [ 475.002368][ T6283] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 475.020843][ T6283] usb 5-1: USB disconnect, device number 16 [ 475.104925][ T9265] udevd[9265]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.190252][T15342] ip6tnl1: entered promiscuous mode [ 475.401394][ T6270] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 475.462359][T15362] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 8 out of range (51000000..2150000000) [ 475.548780][ T6270] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 475.556105][ T6270] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.590354][ T6270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 475.590376][ T6270] usb 4-1: Product: syz [ 475.590386][ T6270] usb 4-1: Manufacturer: syz [ 475.590415][ T6270] usb 4-1: SerialNumber: syz [ 475.814790][ T6270] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 116 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 475.998035][T14971] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 476.128619][T14971] usb 2-1: device descriptor read/64, error -71 [ 476.167992][ T6279] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 476.328827][ T6279] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 476.331284][ T6279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.347337][ T6279] usb 5-1: config 0 descriptor?? [ 476.369489][T14971] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 476.497780][T14971] usb 2-1: device descriptor read/64, error -71 [ 476.565243][ T6279] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 476.608385][T14971] usb usb2-port1: attempt power cycle [ 476.795635][ T6279] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 476.795664][ T6279] [drm] Initialized udl on minor 1 [ 476.947951][T14971] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 476.973854][T14971] usb 2-1: device descriptor read/8, error -71 [ 477.165694][T15399] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 477.165714][T15399] PKCS7: Only support pkcs7_signedData type [ 477.217937][T14971] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 477.240721][T14971] usb 2-1: device descriptor read/8, error -71 [ 477.348400][T14971] usb usb2-port1: unable to enumerate USB device [ 477.393759][ T189] usb 3-1: string descriptor 0 read error: -71 [ 477.393911][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.415390][ T189] usb 3-1: can't set config #2, error -71 [ 477.430458][ T189] usb 3-1: USB disconnect, device number 77 [ 478.275623][ T6284] usb 4-1: USB disconnect, device number 116 [ 478.330236][ T6284] usblp0: removed [ 478.570693][T15429] openvswitch: netlink: Invalid VLAN frame [ 478.578306][T15429] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 478.595532][T15429] kAFS: unable to lookup cell '@G|' [ 478.599650][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1946'. [ 478.599671][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'. [ 478.599696][T15429] netlink: 'syz.3.1946': attribute type 12 has an invalid length. [ 479.438352][ T5625] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 479.467285][T15461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.469136][T15461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.477930][T15461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1952'. [ 479.521432][T15458] FAULT_INJECTION: forcing a failure. [ 479.521432][T15458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.521468][T15458] CPU: 0 UID: 0 PID: 15458 Comm: syz.3.1949 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.521493][T15458] Tainted: [L]=SOFTLOCKUP [ 479.521498][T15458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 479.521513][T15458] Call Trace: [ 479.521518][T15458] [ 479.521524][T15458] dump_stack_lvl+0xe8/0x150 [ 479.521553][T15458] should_fail_ex+0x410/0x560 [ 479.521583][T15458] _copy_from_user+0x2d/0xb0 [ 479.521612][T15458] sctp_setsockopt+0x1c4/0x12c0 [ 479.521727][T15458] ? sock_common_setsockopt+0x36/0xc0 [ 479.521782][T15458] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 479.521806][T15458] do_sock_setsockopt+0x17c/0x1b0 [ 479.521827][T15458] __x64_sys_setsockopt+0x13d/0x1b0 [ 479.521847][T15458] do_syscall_64+0x166/0x520 [ 479.521868][T15458] ? trace_irq_disable+0x3b/0x140 [ 479.521889][T15458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.521910][T15458] ? clear_bhb_loop+0x70/0xc0 [ 479.521934][T15458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.521954][T15458] RIP: 0033:0x7fcdc1f9e159 [ 479.521968][T15458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.521979][T15458] RSP: 002b:00007fcdc2ec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 479.521994][T15458] RAX: ffffffffffffffda RBX: 00007fcdc2226090 RCX: 00007fcdc1f9e159 [ 479.522004][T15458] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000005 [ 479.522014][T15458] RBP: 00007fcdc2ec7090 R08: 0000000000000062 R09: 0000000000000000 [ 479.522027][T15458] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.522040][T15458] R13: 00007fcdc2226128 R14: 00007fcdc2226090 R15: 00007fcdc234fa48 [ 479.522072][T15458] [ 479.608849][ T5625] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 479.612587][ T5625] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 479.612639][ T5625] usb 2-1: Product: syz [ 479.633522][ T189] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 479.640107][ T5625] usb 2-1: config 0 descriptor?? [ 479.652713][ T5625] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 479.662798][ T5625] usb 2-1: Detected FT232H [ 479.797816][ T189] usb 3-1: Using ep0 maxpacket: 32 [ 479.805837][ T189] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 479.807110][ T189] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.828854][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.828885][ T189] usb 3-1: Product: syz [ 479.828901][ T189] usb 3-1: Manufacturer: syz [ 479.828916][ T189] usb 3-1: SerialNumber: syz [ 479.844444][ T5625] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 480.047111][ T5625] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 480.063421][ T5625] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 480.086963][ T189] usb 3-1: USB disconnect, device number 78 [ 480.283617][T15484] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 480.300204][T15490] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 480.517780][ T5625] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 480.678833][ T5625] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 480.680746][ T5625] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.680835][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.725557][T15503] input: syz1 as /devices/virtual/input/input62 [ 480.745282][T15501] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.745555][T15501] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.770963][ T5625] as10x_usb: device has been detected [ 480.772859][ T5625] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 480.858282][ T5625] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 480.924658][ T5625] as10x_usb: error during firmware upload part1 [ 480.925783][ T5625] Registered device Abilis Systems DVB-Titan [ 481.192102][T15511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.193686][T15511] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.252151][T15511] xfrm0: left promiscuous mode [ 481.256816][T15511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.256837][T15511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.262685][T15511] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 481.268038][ T6714] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.268165][ T6714] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.268285][ T6714] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.268320][ T6714] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.347707][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.348920][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.352079][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.352189][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.646043][T15531] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1956'. [ 481.646752][T15530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.667580][T15530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.809835][ T6279] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 481.810229][ T6279] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 481.839484][ T5625] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 481.847149][ T5625] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 481.847394][ T5625] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 481.872493][ T6279] usb 5-1: USB disconnect, device number 17 [ 481.916554][T15545] FAULT_INJECTION: forcing a failure. [ 481.916554][T15545] name failslab, interval 1, probability 0, space 0, times 0 [ 481.916582][T15545] CPU: 0 UID: 0 PID: 15545 Comm: syz.4.1960 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.916600][T15545] Tainted: [L]=SOFTLOCKUP [ 481.916605][T15545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 481.916615][T15545] Call Trace: [ 481.916623][T15545] [ 481.916632][T15545] dump_stack_lvl+0xe8/0x150 [ 481.916668][T15545] should_fail_ex+0x410/0x560 [ 481.916704][T15545] should_failslab+0xa8/0x100 [ 481.916731][T15545] __kmalloc_cache_noprof+0xa3/0x600 [ 481.916746][T15545] ? __kmalloc_cache_noprof+0x14d/0x600 [ 481.916758][T15545] ? sctp_add_bind_addr+0x8c/0x370 [ 481.916772][T15545] ? sctp_add_bind_addr+0x8c/0x370 [ 481.916788][T15545] sctp_add_bind_addr+0x8c/0x370 [ 481.916804][T15545] sctp_copy_local_addr_list+0x31a/0x4e0 [ 481.916876][T15545] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 481.916890][T15545] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 481.916904][T15545] ? sctp_v6_is_any+0x64/0x80 [ 481.916956][T15545] ? sctp_copy_one_addr+0x93/0x360 [ 481.916982][T15545] sctp_bind_addr_copy+0xb3/0x3c0 [ 481.917003][T15545] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 481.917054][T15545] sctp_connect_new_asoc+0x2ff/0x6b0 [ 481.917086][T15545] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 481.917106][T15545] ? __local_bh_enable_ip+0xd6/0x140 [ 481.917131][T15545] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 481.917149][T15545] ? security_sctp_bind_connect+0x7e/0x2c0 [ 481.917165][T15545] sctp_sendmsg+0x159b/0x2d00 [ 481.917187][T15545] ? kstrtouint+0x6e/0xe0 [ 481.917201][T15545] ? __pfx_sctp_sendmsg+0x10/0x10 [ 481.917215][T15545] ? lock_acquire+0x115/0x350 [ 481.917229][T15545] ? get_pid_task+0x20/0x1f0 [ 481.917257][T15545] ? aa_sock_msg_perm+0xf5/0x210 [ 481.917273][T15545] ? sock_rps_record_flow+0x19/0x350 [ 481.917332][T15545] ? inet_sendmsg+0x298/0x320 [ 481.917348][T15545] ? __pfx_inet_sendmsg+0x10/0x10 [ 481.917361][T15545] sock_sendmsg_nosec+0x10e/0x180 [ 481.917377][T15545] __sys_sendto+0x408/0x5a0 [ 481.917394][T15545] ? ksys_write+0x1e6/0x270 [ 481.917408][T15545] ? __pfx___sys_sendto+0x10/0x10 [ 481.917423][T15545] ? __mutex_unlock_slowpath+0x731/0x900 [ 481.917465][T15545] ? __pfx_ksys_write+0x10/0x10 [ 481.917480][T15545] __x64_sys_sendto+0xde/0x100 [ 481.917499][T15545] do_syscall_64+0x166/0x520 [ 481.917515][T15545] ? trace_irq_disable+0x3b/0x140 [ 481.917528][T15545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.917541][T15545] ? clear_bhb_loop+0x70/0xc0 [ 481.917556][T15545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.917568][T15545] RIP: 0033:0x7f41e9b9e159 [ 481.917581][T15545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.917592][T15545] RSP: 002b:00007f41eaa44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 481.917607][T15545] RAX: ffffffffffffffda RBX: 00007f41e9e25fa0 RCX: 00007f41e9b9e159 [ 481.917618][T15545] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 481.917631][T15545] RBP: 00007f41eaa44090 R08: 0000200000000140 R09: 000000000000001c [ 481.917644][T15545] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 481.917657][T15545] R13: 00007f41e9e26038 R14: 00007f41e9e25fa0 R15: 00007f41e9f4fa48 [ 481.917691][T15545] [ 482.115257][ T6270] usb 2-1: USB disconnect, device number 114 [ 482.172656][ T6270] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 482.222260][ T6270] ftdi_sio 2-1:0.0: device disconnected [ 482.271770][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1956'. [ 482.348036][ T10] usb 4-1: USB disconnect, device number 117 [ 482.414587][T15521] pimreg: entered allmulticast mode [ 482.508933][ T10] Unregistered device Abilis Systems DVB-Titan [ 482.514151][ T10] as10x_usb: device has been disconnected [ 482.564195][T15593] IPVS: Error connecting to the multicast addr [ 482.644389][T15581] pimreg: entered allmulticast mode [ 482.689555][ T6270] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 482.829046][T15581] bond2: option all_slaves_active: invalid value (9) [ 482.833995][T15581] bond2 (unregistering): Released all slaves [ 482.839586][ T6270] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.840775][ T6270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.840837][ T6270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.840859][ T6270] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.840898][ T6270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.848145][ T6270] usb 2-1: config 0 descriptor?? [ 483.164665][T15691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 483.320630][ T6270] hid_parser_main: 27 callbacks suppressed [ 483.320658][ T6270] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 483.320690][ T6270] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 483.320715][ T6270] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 483.320741][ T6270] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 483.320766][ T6270] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 483.320791][ T6270] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 483.320815][ T6270] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 483.320838][ T6270] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 483.322091][ T6270] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 483.322122][ T6270] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 483.484862][ T6270] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 483.652341][ T6279] usb 2-1: USB disconnect, device number 115 [ 484.533440][T15767] FAULT_INJECTION: forcing a failure. [ 484.533440][T15767] name failslab, interval 1, probability 0, space 0, times 0 [ 484.533479][T15767] CPU: 1 UID: 0 PID: 15767 Comm: syz.2.1976 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.533508][T15767] Tainted: [L]=SOFTLOCKUP [ 484.533526][T15767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 484.533539][T15767] Call Trace: [ 484.533552][T15767] [ 484.533562][T15767] dump_stack_lvl+0xe8/0x150 [ 484.533597][T15767] should_fail_ex+0x410/0x560 [ 484.533628][T15767] should_failslab+0xa8/0x100 [ 484.533655][T15767] ? sctp_chunkify+0x5a/0x260 [ 484.533680][T15767] kmem_cache_alloc_noprof+0xa1/0x600 [ 484.533710][T15767] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 484.533730][T15767] ? __alloc_skb+0x27a/0x7a0 [ 484.533818][T15767] ? sctp_chunkify+0x5a/0x260 [ 484.533850][T15767] sctp_chunkify+0x5a/0x260 [ 484.533878][T15767] _sctp_make_chunk+0x122/0x290 [ 484.533906][T15767] sctp_make_datafrag_empty+0x12a/0x240 [ 484.533929][T15767] ? __kasan_kmalloc+0x93/0xb0 [ 484.533957][T15767] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 484.533979][T15767] ? skb_put+0x112/0x210 [ 484.534011][T15767] ? sctp_user_addto_chunk+0x9c/0x230 [ 484.534040][T15767] sctp_datamsg_from_user+0x735/0xef0 [ 484.534084][T15767] sctp_sendmsg_to_asoc+0x137d/0x18e0 [ 484.534168][T15767] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 484.534196][T15767] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 484.534226][T15767] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 484.534255][T15767] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 484.534281][T15767] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 484.534310][T15767] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 484.534340][T15767] ? security_sctp_bind_connect+0x7e/0x2c0 [ 484.534368][T15767] sctp_sendmsg+0x1bb5/0x2d00 [ 484.534407][T15767] ? kstrtouint+0x6e/0xe0 [ 484.534431][T15767] ? __pfx_sctp_sendmsg+0x10/0x10 [ 484.534457][T15767] ? lock_acquire+0x115/0x350 [ 484.534480][T15767] ? get_pid_task+0x20/0x1f0 [ 484.534527][T15767] ? aa_sock_msg_perm+0xf5/0x210 [ 484.534553][T15767] ? sock_rps_record_flow+0x19/0x350 [ 484.534579][T15767] ? inet_sendmsg+0x298/0x320 [ 484.534599][T15767] ? apparmor_socket_sendmsg+0x27b/0x360 [ 484.534625][T15767] ? __pfx_inet_sendmsg+0x10/0x10 [ 484.534646][T15767] sock_sendmsg_nosec+0x10e/0x180 [ 484.534672][T15767] __sys_sendto+0x408/0x5a0 [ 484.534698][T15767] ? ksys_write+0x1e6/0x270 [ 484.534722][T15767] ? __pfx___sys_sendto+0x10/0x10 [ 484.534746][T15767] ? __mutex_unlock_slowpath+0x731/0x900 [ 484.534807][T15767] ? __pfx_ksys_write+0x10/0x10 [ 484.534835][T15767] __x64_sys_sendto+0xde/0x100 [ 484.534868][T15767] do_syscall_64+0x166/0x520 [ 484.534897][T15767] ? trace_irq_disable+0x3b/0x140 [ 484.534919][T15767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.534941][T15767] ? clear_bhb_loop+0x70/0xc0 [ 484.534968][T15767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.534989][T15767] RIP: 0033:0x7ff2b239e159 [ 484.535010][T15767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.535027][T15767] RSP: 002b:00007ff2b31ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 484.535051][T15767] RAX: ffffffffffffffda RBX: 00007ff2b2625fa0 RCX: 00007ff2b239e159 [ 484.535066][T15767] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 484.535081][T15767] RBP: 00007ff2b31ad090 R08: 0000200000000140 R09: 000000000000001c [ 484.535094][T15767] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 484.535108][T15767] R13: 00007ff2b2626038 R14: 00007ff2b2625fa0 R15: 00007ff2b274fa48 [ 484.535143][T15767] [ 484.682792][ T6279] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 484.935017][ T6279] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 484.936596][ T6279] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 484.936621][ T6279] usb 2-1: config 1 has no interface number 0 [ 484.936666][ T6279] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16 [ 484.936692][ T6279] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 484.936723][ T6279] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 484.996893][ T6279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.996923][ T6279] usb 2-1: Product: syz [ 484.996939][ T6279] usb 2-1: Manufacturer: syz [ 484.996952][ T6279] usb 2-1: SerialNumber: syz [ 485.030855][T15760] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 485.031021][T15760] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 485.052509][ T6279] usb 2-1: Expected 3 endpoints, found: 2 [ 485.219010][T15779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.220237][T15779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.428430][ T189] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 485.579387][ T189] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 485.583381][ T189] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 485.583409][ T189] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 485.583429][ T189] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.587868][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 485.587900][ T189] usb 5-1: Product: syz [ 485.587915][ T189] usb 5-1: Manufacturer: syz [ 485.587930][ T189] usb 5-1: SerialNumber: syz [ 485.670919][T15810] fuse: Unknown parameter 'user_i' [ 485.907941][ T6270] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 485.974759][ T189] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 486.058585][ T6270] usb 3-1: Using ep0 maxpacket: 16 [ 486.059887][ T6270] usb 3-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 486.061827][ T6270] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 219, changing to 11 [ 486.061875][ T6270] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9103, setting to 1024 [ 486.061903][ T6270] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.062186][ T6270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.123645][ T6270] usb 3-1: config 0 descriptor?? [ 486.243676][ T6270] usb 5-1: USB disconnect, device number 18 [ 486.259290][ T6270] usblp0: removed [ 486.336052][ T6284] usb 3-1: USB disconnect, device number 79 [ 486.458560][ T5625] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 486.608084][ T5625] usb 4-1: Using ep0 maxpacket: 16 [ 486.609097][ T5625] usb 4-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 486.611887][ T5625] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 486.611910][ T5625] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 486.611926][ T5625] usb 4-1: config 0 interface 0 has no altsetting 0 [ 486.611947][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.675130][ T5625] usb 4-1: config 0 descriptor?? [ 487.004488][T15852] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1986'. [ 487.145849][T15855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'. [ 487.170009][ T5625] wacom 0003:056A:0057.0019: hidraw0: USB HID v0.00 Joystick [HID 056a:0057] on usb-dummy_hcd.3-1/input0 [ 487.294349][T15828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.295396][T15828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.296913][T15828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.324499][T15828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.327054][T15828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.346998][T15828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.474539][ T6270] usb 2-1: USB disconnect, device number 116 [ 487.640532][ T31] kauditd_printk_skb: 47 callbacks suppressed [ 487.640548][ T31] audit: type=1326 audit(1791098414.279:10195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15886 comm="syz.1.1990" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f331839e159 code=0x0 [ 487.715990][T15894] FAULT_INJECTION: forcing a failure. [ 487.715990][T15894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.716096][T15894] CPU: 0 UID: 0 PID: 15894 Comm: syz.2.1991 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.716116][T15894] Tainted: [L]=SOFTLOCKUP [ 487.716121][T15894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 487.716128][T15894] Call Trace: [ 487.716137][T15894] [ 487.716143][T15894] dump_stack_lvl+0xe8/0x150 [ 487.716166][T15894] should_fail_ex+0x410/0x560 [ 487.716185][T15894] _copy_from_iter+0x1d3/0x1660 [ 487.716200][T15894] ? sctp_chunkify+0x5a/0x260 [ 487.716217][T15894] ? sctp_addto_chunk+0xf8/0x220 [ 487.716230][T15894] ? __asan_memcpy+0x40/0x70 [ 487.716244][T15894] ? __pfx__copy_from_iter+0x10/0x10 [ 487.716259][T15894] ? __asan_memcpy+0x40/0x70 [ 487.716271][T15894] ? sctp_make_datafrag_empty+0x184/0x240 [ 487.716284][T15894] ? __kasan_kmalloc+0x93/0xb0 [ 487.716300][T15894] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 487.716313][T15894] ? skb_put+0x112/0x210 [ 487.716332][T15894] sctp_user_addto_chunk+0x7c/0x230 [ 487.716349][T15894] sctp_datamsg_from_user+0x754/0xef0 [ 487.716374][T15894] sctp_sendmsg_to_asoc+0x137d/0x18e0 [ 487.716404][T15894] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 487.716420][T15894] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 487.716437][T15894] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 487.716453][T15894] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 487.716468][T15894] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 487.716484][T15894] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 487.716501][T15894] ? security_sctp_bind_connect+0x7e/0x2c0 [ 487.716517][T15894] sctp_sendmsg+0x1bb5/0x2d00 [ 487.716539][T15894] ? kstrtouint+0x6e/0xe0 [ 487.716553][T15894] ? __pfx_sctp_sendmsg+0x10/0x10 [ 487.716574][T15894] ? lock_acquire+0x115/0x350 [ 487.716588][T15894] ? get_pid_task+0x20/0x1f0 [ 487.716610][T15894] ? aa_sock_msg_perm+0xf5/0x210 [ 487.716626][T15894] ? sock_rps_record_flow+0x19/0x350 [ 487.716642][T15894] ? inet_sendmsg+0x298/0x320 [ 487.716654][T15894] ? apparmor_socket_sendmsg+0x27b/0x360 [ 487.716670][T15894] ? __pfx_inet_sendmsg+0x10/0x10 [ 487.716683][T15894] sock_sendmsg_nosec+0x10e/0x180 [ 487.716698][T15894] __sys_sendto+0x408/0x5a0 [ 487.716714][T15894] ? ksys_write+0x1e6/0x270 [ 487.716729][T15894] ? __pfx___sys_sendto+0x10/0x10 [ 487.716743][T15894] ? __mutex_unlock_slowpath+0x731/0x900 [ 487.716778][T15894] ? __pfx_ksys_write+0x10/0x10 [ 487.716793][T15894] __x64_sys_sendto+0xde/0x100 [ 487.716812][T15894] do_syscall_64+0x166/0x520 [ 487.716828][T15894] ? trace_irq_disable+0x3b/0x140 [ 487.716841][T15894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.716853][T15894] ? clear_bhb_loop+0x70/0xc0 [ 487.716868][T15894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.716879][T15894] RIP: 0033:0x7ff2b239e159 [ 487.716893][T15894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.716903][T15894] RSP: 002b:00007ff2b31ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 487.716917][T15894] RAX: ffffffffffffffda RBX: 00007ff2b2625fa0 RCX: 00007ff2b239e159 [ 487.716927][T15894] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 487.716935][T15894] RBP: 00007ff2b31ad090 R08: 0000200000000140 R09: 000000000000001c [ 487.716943][T15894] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 487.716951][T15894] R13: 00007ff2b2626038 R14: 00007ff2b2625fa0 R15: 00007ff2b274fa48 [ 487.716982][T15894] [ 487.827834][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 487.982671][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 487.983417][ T10] usb 5-1: New USB device found, idVendor=0930, idProduct=1a8e, bcdDevice=d4.61 [ 487.985215][ T10] usb 5-1: config 164 has an invalid interface number: 188 but max is 0 [ 487.985239][ T10] usb 5-1: config 164 has no interface number 0 [ 487.985281][ T10] usb 5-1: config 164 interface 188 has no altsetting 0 [ 487.990698][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 487.990724][ T10] usb 5-1: Product: syz [ 487.990738][ T10] usb 5-1: Manufacturer: syz [ 487.990752][ T10] usb 5-1: SerialNumber: syz [ 488.315865][T15877] netlink: 'syz.4.1989': attribute type 1 has an invalid length. [ 488.390703][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 488.486552][T15877] 8021q: adding VLAN 0 to HW filter on device bond6 [ 488.605591][T15945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.662509][ T10] usb 5-1: USB disconnect, device number 19 [ 488.889263][T15962] fuse: Unknown parameter '00000000000000000000002' [ 489.206176][T15981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 489.244435][T15981] vlan2: entered promiscuous mode [ 489.244459][T15981] bond0: entered promiscuous mode [ 489.244473][T15981] bond_slave_0: entered promiscuous mode [ 489.244708][T15981] bond_slave_1: entered promiscuous mode [ 489.244921][T15981] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 489.260365][ T189] usb 4-1: USB disconnect, device number 118 [ 489.374172][T16000] FAULT_INJECTION: forcing a failure. [ 489.374172][T16000] name failslab, interval 1, probability 0, space 0, times 0 [ 489.374211][T16000] CPU: 1 UID: 0 PID: 16000 Comm: syz.1.2002 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.374240][T16000] Tainted: [L]=SOFTLOCKUP [ 489.374248][T16000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 489.374260][T16000] Call Trace: [ 489.374269][T16000] [ 489.374278][T16000] dump_stack_lvl+0xe8/0x150 [ 489.374315][T16000] should_fail_ex+0x410/0x560 [ 489.374348][T16000] should_failslab+0xa8/0x100 [ 489.374377][T16000] __kmalloc_cache_noprof+0xa3/0x600 [ 489.374402][T16000] ? sctp_association_new+0x89/0x25d0 [ 489.374430][T16000] ? sctp_association_new+0x89/0x25d0 [ 489.374464][T16000] sctp_association_new+0x89/0x25d0 [ 489.374496][T16000] ? __ipv6_addr_type+0x23d/0x2f0 [ 489.374637][T16000] sctp_make_temp_asoc+0x89/0x160 [ 489.374666][T16000] sctp_sf_do_unexpected_init+0x91b/0x1340 [ 489.374724][T16000] ? __pfx_sctp_sf_do_unexpected_init+0x10/0x10 [ 489.374749][T16000] ? sctp_do_sm+0x564b/0x5dd0 [ 489.374780][T16000] sctp_do_sm+0x239/0x5dd0 [ 489.374800][T16000] ? __pfx_sctp_cname+0x10/0x10 [ 489.374829][T16000] ? do_raw_spin_lock+0x12b/0x2f0 [ 489.374873][T16000] ? __pfx_sctp_do_sm+0x10/0x10 [ 489.374945][T16000] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 489.374983][T16000] ? lockdep_hardirqs_on+0x7b/0x110 [ 489.375013][T16000] ? seqcount_lockdep_reader_access+0xea/0x100 [ 489.375041][T16000] sctp_assoc_bh_rcv+0x401/0x6f0 [ 489.375088][T16000] sctp_backlog_rcv+0x15c/0x370 [ 489.375121][T16000] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 489.375146][T16000] __release_sock+0x28b/0x390 [ 489.375179][T16000] release_sock+0x190/0x260 [ 489.375209][T16000] sctp_sendmsg+0x1c09/0x2d00 [ 489.375249][T16000] ? kstrtouint+0x6e/0xe0 [ 489.375273][T16000] ? __pfx_sctp_sendmsg+0x10/0x10 [ 489.375298][T16000] ? lock_acquire+0x115/0x350 [ 489.375321][T16000] ? get_pid_task+0x20/0x1f0 [ 489.375366][T16000] ? aa_sock_msg_perm+0xf5/0x210 [ 489.375393][T16000] ? sock_rps_record_flow+0x19/0x350 [ 489.375422][T16000] ? inet_sendmsg+0x298/0x320 [ 489.375443][T16000] ? apparmor_socket_sendmsg+0x27b/0x360 [ 489.375472][T16000] ? __pfx_inet_sendmsg+0x10/0x10 [ 489.375493][T16000] sock_sendmsg_nosec+0x10e/0x180 [ 489.375519][T16000] __sys_sendto+0x408/0x5a0 [ 489.375545][T16000] ? ksys_write+0x1e6/0x270 [ 489.375567][T16000] ? __pfx___sys_sendto+0x10/0x10 [ 489.375591][T16000] ? __mutex_unlock_slowpath+0x731/0x900 [ 489.375648][T16000] ? __pfx_ksys_write+0x10/0x10 [ 489.375674][T16000] __x64_sys_sendto+0xde/0x100 [ 489.375705][T16000] do_syscall_64+0x166/0x520 [ 489.375732][T16000] ? trace_irq_disable+0x3b/0x140 [ 489.375753][T16000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.375774][T16000] ? clear_bhb_loop+0x70/0xc0 [ 489.375798][T16000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.375817][T16000] RIP: 0033:0x7f331839e159 [ 489.375838][T16000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.375855][T16000] RSP: 002b:00007f33191b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 489.375887][T16000] RAX: ffffffffffffffda RBX: 00007f3318625fa0 RCX: 00007f331839e159 [ 489.375902][T16000] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 489.375916][T16000] RBP: 00007f33191b4090 R08: 0000200000000140 R09: 000000000000001c [ 489.375929][T16000] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 489.375942][T16000] R13: 00007f3318626038 R14: 00007f3318625fa0 R15: 00007f331874fa48 [ 489.375976][T16000] [ 489.451011][T15985] tipc: Cannot configure node identity twice [ 489.456440][T15985] tipc: Enabled bearer , priority 0 [ 490.051775][T16023] netlink: 'syz.3.2005': attribute type 1 has an invalid length. [ 490.159292][ T5625] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 490.236025][ T43] IPVS: starting estimator thread 0... [ 490.318787][ T5625] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 490.324182][ T5625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.324203][ T5625] usb 2-1: Product: syz [ 490.324212][ T5625] usb 2-1: Manufacturer: syz [ 490.324221][ T5625] usb 2-1: SerialNumber: syz [ 490.329132][T16032] IPVS: using max 50 ests per chain, 120000 per kthread [ 490.370925][ T5625] usb 2-1: config 0 descriptor?? [ 490.387426][ T5625] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 490.480994][T16042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.485239][T16042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.569956][ T189] tipc: Node number set to 3716337419 [ 490.833740][ T5625] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input67 [ 491.029234][T16013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.030465][T16013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.670705][T16091] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 491.670735][T16091] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 491.803861][T16095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2019'. [ 491.818876][T16095] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20001 [ 491.876994][T16101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.879979][T16101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.078161][ T10] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 492.108033][ T189] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 492.108282][ C0] raw-gadget.4 gadget.2: ignoring, device is not running [ 492.175764][T16107] dvmrp0: entered allmulticast mode [ 492.229426][ T10] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 492.237803][ T189] usb 3-1: device descriptor read/64, error -32 [ 492.238425][ T10] usb 4-1: config 54 has an invalid interface number: 97 but max is 0 [ 492.238447][ T10] usb 4-1: config 54 has an invalid descriptor of length 97, skipping remainder of the config [ 492.238465][ T10] usb 4-1: config 54 has no interface number 0 [ 492.238492][ T10] usb 4-1: too many endpoints for config 54 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 492.238526][ T10] usb 4-1: config 54 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 492.238550][ T10] usb 4-1: config 54 interface 97 has no altsetting 0 [ 492.240990][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.241011][ T10] usb 4-1: Product: syz [ 492.241024][ T10] usb 4-1: Manufacturer: syz [ 492.241037][ T10] usb 4-1: SerialNumber: syz [ 492.475382][ T10] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 492.475463][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 492.483715][ T189] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 492.582211][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 492.615972][ T10] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 492.616024][ T10] dvb_usb_umt_010 4-1:54.97: probe with driver dvb_usb_umt_010 failed with error -22 [ 492.638982][ T10] usb 4-1: USB disconnect, device number 119 [ 492.999281][ T189] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 493.133769][ T5625] usb 2-1: USB disconnect, device number 117 [ 493.226935][ T189] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 493.226993][ T189] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.588242][T16165] FAULT_INJECTION: forcing a failure. [ 493.588242][T16165] name failslab, interval 1, probability 0, space 0, times 0 [ 493.588277][T16165] CPU: 1 UID: 0 PID: 16165 Comm: syz.3.2025 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.588301][T16165] Tainted: [L]=SOFTLOCKUP [ 493.588308][T16165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 493.588318][T16165] Call Trace: [ 493.588325][T16165] [ 493.588333][T16165] dump_stack_lvl+0xe8/0x150 [ 493.588366][T16165] should_fail_ex+0x410/0x560 [ 493.588394][T16165] should_failslab+0xa8/0x100 [ 493.588418][T16165] __kmalloc_cache_noprof+0xa3/0x600 [ 493.588438][T16165] ? __kmalloc_cache_noprof+0x14d/0x600 [ 493.588454][T16165] ? sctp_add_bind_addr+0x8c/0x370 [ 493.588471][T16165] ? sctp_add_bind_addr+0x8c/0x370 [ 493.588495][T16165] sctp_add_bind_addr+0x8c/0x370 [ 493.588517][T16165] sctp_copy_local_addr_list+0x31a/0x4e0 [ 493.588538][T16165] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 493.588557][T16165] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 493.588577][T16165] ? sctp_v6_is_any+0x64/0x80 [ 493.588598][T16165] ? sctp_copy_one_addr+0x93/0x360 [ 493.588620][T16165] sctp_bind_addr_copy+0xb3/0x3c0 [ 493.588640][T16165] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 493.588673][T16165] sctp_connect_new_asoc+0x2ff/0x6b0 [ 493.588702][T16165] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 493.588735][T16165] ? __local_bh_enable_ip+0xd6/0x140 [ 493.588759][T16165] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 493.588786][T16165] ? security_sctp_bind_connect+0x7e/0x2c0 [ 493.588813][T16165] sctp_sendmsg+0x159b/0x2d00 [ 493.588860][T16165] ? kstrtouint+0x6e/0xe0 [ 493.588878][T16165] ? __pfx_sctp_sendmsg+0x10/0x10 [ 493.588899][T16165] ? lock_acquire+0x115/0x350 [ 493.588920][T16165] ? get_pid_task+0x20/0x1f0 [ 493.588962][T16165] ? aa_sock_msg_perm+0xf5/0x210 [ 493.588989][T16165] ? sock_rps_record_flow+0x19/0x350 [ 493.589010][T16165] ? inet_sendmsg+0x298/0x320 [ 493.589025][T16165] ? __pfx_inet_sendmsg+0x10/0x10 [ 493.589037][T16165] sock_sendmsg_nosec+0x10e/0x180 [ 493.589057][T16165] __sys_sendto+0x408/0x5a0 [ 493.589083][T16165] ? ksys_write+0x1e6/0x270 [ 493.589109][T16165] ? __pfx___sys_sendto+0x10/0x10 [ 493.589133][T16165] ? __mutex_unlock_slowpath+0x731/0x900 [ 493.589178][T16165] ? __pfx_ksys_write+0x10/0x10 [ 493.589193][T16165] __x64_sys_sendto+0xde/0x100 [ 493.589212][T16165] do_syscall_64+0x166/0x520 [ 493.589239][T16165] ? trace_irq_disable+0x3b/0x140 [ 493.589260][T16165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.589280][T16165] ? clear_bhb_loop+0x70/0xc0 [ 493.589305][T16165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.589322][T16165] RIP: 0033:0x7fcdc1f9e159 [ 493.589338][T16165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.589349][T16165] RSP: 002b:00007fcdc2ee8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 493.589364][T16165] RAX: ffffffffffffffda RBX: 00007fcdc2225fa0 RCX: 00007fcdc1f9e159 [ 493.589377][T16165] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 493.589391][T16165] RBP: 00007fcdc2ee8090 R08: 0000200000000140 R09: 000000000000001c [ 493.589404][T16165] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 493.589417][T16165] R13: 00007fcdc2226038 R14: 00007fcdc2225fa0 R15: 00007fcdc234fa48 [ 493.589451][T16165] [ 494.007817][ T5625] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 494.208851][ T5625] usb 2-1: Using ep0 maxpacket: 32 [ 494.213704][ T5625] usb 2-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 494.240879][ T5625] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 494.240910][ T5625] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 494.240933][ T5625] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 494.247821][ T6284] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 494.308374][ T5625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.308402][ T5625] usb 2-1: Product: syz [ 494.308417][ T5625] usb 2-1: Manufacturer: syz [ 494.308432][ T5625] usb 2-1: SerialNumber: syz [ 494.419010][ T6284] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 494.420678][ T6284] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 494.420741][ T6284] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 494.420779][ T6284] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 494.420795][ T6284] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 494.423552][ T6284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.423577][ T6284] usb 4-1: Product: syz [ 494.423623][ T6284] usb 4-1: Manufacturer: syz [ 494.423639][ T6284] usb 4-1: SerialNumber: syz [ 494.509352][T16170] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 494.516000][ T6284] cdc_mbim 4-1:1.0: skipping garbage [ 494.582430][T16187] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2029'. [ 494.684879][ T5625] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 494.685032][ T5625] usb 2-1: MIDIStreaming interface descriptor not found [ 494.718635][T16170] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 494.718817][T16170] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 494.812425][ T5625] usb 2-1: USB disconnect, device number 118 [ 494.967434][T16212] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 494.967582][T16212] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 494.978301][ T6284] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 494.998284][ T6284] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 495.047871][ T6284] wwan wwan0: port wwan0mbim0 attached [ 495.084102][ T6284] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 6e:59:5f:bc:67:90 [ 495.137565][T16225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.148547][T16225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.621570][ T9281] udevd[9281]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.116560][ T31] audit: type=1326 audit(1791098422.749:10196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331839e159 code=0x7ffc0000 [ 496.118260][ T31] audit: type=1326 audit(1791098422.759:10197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f331839e159 code=0x7ffc0000 [ 496.143431][T16285] openvswitch: netlink: Missing key (keys=d0, expected=20080) [ 496.143492][ T31] audit: type=1326 audit(1791098422.779:10198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331839e159 code=0x7ffc0000 [ 496.143546][ T31] audit: type=1326 audit(1791098422.779:10199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331839e159 code=0x7ffc0000 [ 496.143591][ T31] audit: type=1326 audit(1791098422.779:10200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f331839e159 code=0x7ffc0000 [ 496.144294][ T31] audit: type=1326 audit(1791098422.779:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331839e159 code=0x7ffc0000 [ 496.167881][ T31] audit: type=1326 audit(1791098422.779:10202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f331839e159 code=0x7ffc0000 [ 496.167935][ T31] audit: type=1326 audit(1791098422.779:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331839e159 code=0x7ffc0000 [ 496.168001][ T31] audit: type=1326 audit(1791098422.789:10204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f331839e159 code=0x7ffc0000 [ 496.168041][ T31] audit: type=1326 audit(1791098422.789:10205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.1.2037" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f331839e159 code=0x7ffc0000 [ 496.236065][T16285] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2037'. [ 496.464061][ T189] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 496.491073][ T189] usb 3-1: can't set config #4, error -71 [ 496.503109][ T189] usb 3-1: USB disconnect, device number 81 [ 496.999582][T16318] program syz.2.2040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.002710][ T5279] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 497.159160][ T6284] usb 4-1: USB disconnect, device number 120 [ 497.166775][ T6284] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 498.347526][ T6284] wwan wwan0: port wwan0mbim0 disconnected [ 498.608903][T16450] gre0: left promiscuous mode [ 499.131286][T16450] ip6gretap1: left allmulticast mode [ 499.164199][T16450] ip6tnl1: left promiscuous mode [ 499.896018][T16533] bridge0: port 4(veth0) entered blocking state [ 499.896923][T16533] bridge0: port 4(veth0) entered disabled state [ 499.897107][T16533] veth0: entered allmulticast mode [ 499.909987][T16533] veth0: entered promiscuous mode [ 500.278248][ T6283] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 500.433258][ T6283] usb 4-1: Using ep0 maxpacket: 32 [ 500.437921][ T6283] usb 4-1: unable to get BOS descriptor or descriptor too short [ 500.437973][ T6283] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 500.471949][ T6283] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.474907][ T6283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.474927][ T6283] usb 4-1: Product: syz [ 500.474937][ T6283] usb 4-1: Manufacturer: syz [ 500.474946][ T6283] usb 4-1: SerialNumber: syz [ 500.538459][ T189] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 500.697719][ T189] usb 3-1: Using ep0 maxpacket: 16 [ 500.699659][ T189] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 500.701041][ T189] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 500.701072][ T189] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 500.704513][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.704688][ T189] usb 3-1: Product: ꍑ냷ᶬ✷新៕쒻쾔축壘蛵他틽笾馣㽖홫酸엖㟹깂㙪葋餥멼甐ἂ鱷ൿ뫟ꭲ沪ꮟ謬щ퐦ƅ屍쐄䴠䦚藀혿氲뛱撵健䢦栺ᒪ펺緹应险N㢩塱噹륳<ꁷ韁薠腋闛ꨆ鱕錱潀꾞秬鎑郜厺恫帿流泥ㆴ鑦扜ﳒ욨쵸坝쨼틟緶符꼺䤽蝏댔阃ଇɗ䔕䏷㍗䑰ᵼ腲 [ 500.704721][ T189] usb 3-1: Manufacturer: ᩝ퇏玅ꠖ䓾纺Ⴙ굙䣷헅᭕巒韌쨉שּׂ狏뢏씸ᔩ懊껭⮀汥刂ਸ੍螣଑磰䤸某㍘ꁠ悏Ⅹ땜곲忪꫁㉍﷚빺ិ㌥淄ﯔ㚐㼁狌ࠕ稵㗲爅 [ 500.704743][ T189] usb 3-1: SerialNumber: Ⓠ扎絜㰯倭㜕扜મ⢌谧㓩ῧᎀ❌댆⪻ἂ憦輫갺횪蚁㤿䑉葩鲨륀㴎࿯ʄ뀟럙氦Ώ꿌艵烉༿嫭풶ፕ﷾縒暕踄㚍缏毉骱푪Ս瞩噽Ⲭ胜ᢴᷬ톌˥㛗Ἲ㺸㢠ꗼ閷鐬놭嶸瓥蔥髐ᥫ㔱꫺ֻⅤꐔ෰躨⩰੓鋕䱱擽爇ಗ뤭탅䫠⇲㢟菅憋斆졻壘䙁ቂ싑敮捯寻ꢔ殺쑞歯蹡맀 [ 500.846241][T16551] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 500.846418][T16551] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 500.852384][ T6283] usb 4-1: USB disconnect, device number 121 [ 501.092259][ T189] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x04B8 pid 0x0202 [ 501.096658][ T189] usb 3-1: USB disconnect, device number 82 [ 501.119290][ T189] usblp0: removed [ 501.126227][ T9261] udevd[9261]: setting owner of /dev/bus/usb/003/082 to uid=0, gid=7 failed: No such file or directory [ 501.488208][ T5625] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 501.638031][ T5625] usb 5-1: Using ep0 maxpacket: 16 [ 501.639364][ T5625] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 501.645022][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.645051][ T5625] usb 5-1: Product: syz [ 501.645066][ T5625] usb 5-1: Manufacturer: syz [ 501.645080][ T5625] usb 5-1: SerialNumber: syz [ 501.657901][ T5625] usb 5-1: config 0 descriptor?? [ 501.664317][ T5625] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 501.730336][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.730382][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.751823][T16617] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2069'. [ 501.788029][ T6283] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 501.918925][ T6283] usb 4-1: device descriptor read/64, error -71 [ 502.157992][ T6283] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 502.179701][ T5625] usb 5-1: clie_3_5_startup: get interface number failed: -71 [ 502.179917][ T5625] visor 5-1:0.0: probe with driver visor failed with error -71 [ 502.213667][ T5625] usb 5-1: USB disconnect, device number 20 [ 502.289722][ T6283] usb 4-1: device descriptor read/64, error -71 [ 502.399042][ T6283] usb usb4-port1: attempt power cycle [ 502.426818][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 502.426840][ T31] audit: type=1326 audit(1791098429.059:10266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16643 comm="syz.2.2075" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2b239e159 code=0x0 [ 502.738009][ T6283] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 502.761526][ T6283] usb 4-1: device descriptor read/8, error -71 [ 503.002817][ T6283] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 503.022425][ T6283] usb 4-1: device descriptor read/8, error -71 [ 503.128079][ T6283] usb usb4-port1: unable to enumerate USB device [ 503.147922][ T5625] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 503.299003][ T5625] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 503.302607][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.302626][ T5625] usb 5-1: Product: syz [ 503.302635][ T5625] usb 5-1: Manufacturer: syz [ 503.302644][ T5625] usb 5-1: SerialNumber: syz [ 503.370574][ T5625] ums_eneub6250 5-1:1.0: USB Mass Storage device detected [ 503.394434][ T5625] scsi host1: usb-storage 5-1:1.0 [ 503.666586][ T5625] ums_eneub6250 5-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 503.686294][ T5625] usb 5-1: USB disconnect, device number 21 [ 503.748252][ T189] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 503.876830][T16691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.894248][T16691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.908806][ T189] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 503.914710][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.914729][ T189] usb 3-1: Product: syz [ 503.914738][ T189] usb 3-1: Manufacturer: syz [ 503.914747][ T189] usb 3-1: SerialNumber: syz [ 503.918239][ T189] usb 3-1: config 0 descriptor?? [ 503.963215][ T189] usb 3-1: selecting invalid altsetting 1 [ 503.963239][ T189] technisat-usb2: could not set alternate setting to 0 [ 504.157354][T16698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2082'. [ 504.170549][ T189] technisat-usb2: firmware version: 0.0 [ 504.170581][ T189] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 504.255544][ T31] audit: type=1326 audit(1791098430.889:10267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.4.2083" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e9b9e159 code=0x7ffc0000 [ 504.255928][ T31] audit: type=1326 audit(1791098430.889:10268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.4.2083" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f41e9b9e159 code=0x7ffc0000 [ 504.282350][ T31] audit: type=1326 audit(1791098430.889:10269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.4.2083" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e9b9e159 code=0x7ffc0000 [ 504.282410][ T31] audit: type=1326 audit(1791098430.909:10270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.4.2083" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e9b9e159 code=0x7ffc0000 [ 504.282487][ T31] audit: type=1326 audit(1791098430.909:10271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.4.2083" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f41e9b9e159 code=0x7ffc0000 [ 504.282523][ T31] audit: type=1326 audit(1791098430.909:10272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.4.2083" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e9b9e159 code=0x7ffc0000 [ 504.282547][ T31] audit: type=1326 audit(1791098430.909:10273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.4.2083" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e9b9e159 code=0x7ffc0000 [ 504.282571][ T31] audit: type=1326 audit(1791098430.909:10274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.4.2083" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f41e9b9e159 code=0x7ffc0000 [ 504.282615][ T31] audit: type=1326 audit(1791098430.909:10275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16699 comm="syz.4.2083" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e9b9e159 code=0x7ffc0000 [ 504.719289][ T6283] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 504.739452][ T189] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 504.766410][ T189] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 504.874731][ T6283] usb 5-1: Using ep0 maxpacket: 16 [ 504.877059][ T6283] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 504.905014][ T189] usb 3-1: USB disconnect, device number 83 [ 504.905098][ T6283] usb 5-1: config 0 has no interfaces? [ 504.935654][ T6283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.935674][ T6283] usb 5-1: Product: syz [ 504.935684][ T6283] usb 5-1: Manufacturer: syz [ 504.935692][ T6283] usb 5-1: SerialNumber: syz [ 504.964956][ T6283] r8152-cfgselector 5-1: Unknown version 0x0000 [ 504.964975][ T6283] r8152-cfgselector 5-1: config 0 descriptor?? [ 505.042268][ T6270] raw-gadget.0 gadget.0: failed to queue reset event [ 505.107823][ T6270] raw-gadget.0 gadget.0: failed to queue resume event [ 505.168009][ T6270] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 505.168247][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 505.168427][ T6270] raw-gadget.0 gadget.0: failed to queue reset event [ 505.247849][ T6270] raw-gadget.0 gadget.0: failed to queue resume event [ 505.259181][T16742] fuse: Unexpected value for 'default_permissions' [ 505.307801][ T6270] usb 1-1: device descriptor read/64, error -32 [ 505.432107][ T6270] raw-gadget.0 gadget.0: failed to queue suspend event [ 505.433404][ T6270] raw-gadget.0 gadget.0: failed to queue reset event [ 505.507818][ T6270] raw-gadget.0 gadget.0: failed to queue resume event [ 505.568170][ T6270] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 505.568574][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 505.568738][ T6270] raw-gadget.0 gadget.0: failed to queue reset event [ 505.579052][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2090'. [ 505.637778][ T6270] raw-gadget.0 gadget.0: failed to queue resume event [ 505.697841][ T6270] usb 1-1: device descriptor read/64, error -32 [ 505.807907][ T6270] raw-gadget.0 gadget.0: failed to queue suspend event [ 505.808163][ T6270] usb usb1-port1: attempt power cycle [ 505.808225][ T6270] raw-gadget.0 gadget.0: failed to queue disconnect event [ 505.808624][ T6270] raw-gadget.0 gadget.0: failed to queue reset event [ 505.877853][ T6270] raw-gadget.0 gadget.0: failed to queue resume event [ 505.878399][ T6270] raw-gadget.0 gadget.0: failed to queue reset event [ 505.893455][ T6283] r8152-cfgselector 5-1: USB disconnect, device number 22 [ 506.099422][ T6270] raw-gadget.0 gadget.0: failed to queue resume event [ 506.168406][ T6270] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 506.187933][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 506.188061][ T6270] usb 1-1: device descriptor read/8, error -32 [ 506.297785][ T6270] raw-gadget.0 gadget.0: failed to queue suspend event [ 506.298168][ T6270] raw-gadget.0 gadget.0: failed to queue reset event [ 506.328065][ T6283] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 506.367911][ T6270] raw-gadget.0 gadget.0: failed to queue resume event [ 506.384644][ T189] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 506.395222][T16788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.395713][T16788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.427729][ T6270] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 506.448049][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 506.448177][ T6270] usb 1-1: device descriptor read/8, error -32 [ 506.478321][ T6283] usb 5-1: Using ep0 maxpacket: 16 [ 506.479088][ T6283] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.480465][ T6283] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.480490][ T6283] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.486049][ T6283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.486075][ T6283] usb 5-1: Product: syz [ 506.486091][ T6283] usb 5-1: Manufacturer: syz [ 506.486107][ T6283] usb 5-1: SerialNumber: syz [ 506.550628][ T6283] usb 5-1: 0:2 : does not exist [ 506.557822][ T6270] raw-gadget.0 gadget.0: failed to queue suspend event [ 506.562976][ T6270] usb usb1-port1: unable to enumerate USB device [ 506.582897][ T189] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 506.585922][ T189] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 506.585950][ T189] usb 3-1: config 0 has no interface number 0 [ 506.585997][ T189] usb 3-1: config 0 interface 41 has no altsetting 0 [ 506.625185][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.625215][ T189] usb 3-1: Product: syz [ 506.625231][ T189] usb 3-1: Manufacturer: syz [ 506.625246][ T189] usb 3-1: SerialNumber: syz [ 506.628352][ T6279] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 506.661105][ T189] usb 3-1: config 0 descriptor?? [ 506.711524][T16769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.718459][T16769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.742959][ T6283] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 506.783144][ T6279] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 506.784534][ T6279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 506.784566][ T6279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 506.784588][ T6279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 506.784614][ T6279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 506.799040][ T6279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.799070][ T6279] usb 2-1: Product: syz [ 506.799087][ T6279] usb 2-1: Manufacturer: syz [ 506.799102][ T6279] usb 2-1: SerialNumber: syz [ 506.805041][ T6279] usb 2-1: config 0 descriptor?? [ 506.980092][ T6283] usb 5-1: USB disconnect, device number 23 [ 507.063677][ T6279] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 507.136563][ T9308] udevd[9308]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.215594][T16788] usb 2-1: Couldn't submit interrupt_out_urb -90 [ 507.486540][ T189] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 507.487381][ T189] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 507.553576][ T189] usb 3-1: USB disconnect, device number 84 [ 508.148176][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2103'. [ 508.148228][T16864] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2103'. [ 508.793275][ T189] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 508.938861][ T189] usb 4-1: Using ep0 maxpacket: 16 [ 508.939743][ T189] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 508.941681][ T189] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 508.941714][ T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 508.988773][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.988793][ T189] usb 4-1: Product: syz [ 508.988802][ T189] usb 4-1: Manufacturer: syz [ 508.988811][ T189] usb 4-1: SerialNumber: syz [ 509.020112][ T189] usb 4-1: config 0 descriptor?? [ 509.035072][ T189] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 509.035110][ T189] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 509.495142][ T6283] usb 2-1: USB disconnect, device number 119 [ 509.561077][T16922] pim6reg: entered allmulticast mode [ 509.644648][ T189] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 509.652812][T16873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.657146][T16873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.663619][T16922] pim6reg: left allmulticast mode [ 509.664390][ T189] em28xx 4-1:0.0: Config register raw data: 0x00 [ 509.686437][ T6270] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 509.839882][ T6270] usb 5-1: Using ep0 maxpacket: 8 [ 509.846286][ T6270] usb 5-1: unable to get BOS descriptor or descriptor too short [ 509.846321][ T6270] usb 5-1: New USB device found, idVendor=15ba, idProduct=0004, bcdDevice=2e.89 [ 509.872412][ T6270] usb 5-1: config index 0 descriptor too short (asked for 9, got 0) [ 509.872449][ T6270] usb 5-1: can't read configurations, error -22 [ 509.997855][ T6270] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 510.122692][T16948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2113'. [ 510.147837][ T6270] usb 5-1: Using ep0 maxpacket: 8 [ 510.150645][ T6270] usb 5-1: unable to get BOS descriptor or descriptor too short [ 510.150699][ T6270] usb 5-1: New USB device found, idVendor=15ba, idProduct=0004, bcdDevice=2e.89 [ 510.152756][ T6270] usb 5-1: config index 0 descriptor too short (asked for 9, got 0) [ 510.152794][ T6270] usb 5-1: can't read configurations, error -22 [ 510.153234][ T6270] usb usb5-port1: attempt power cycle [ 510.423748][T16957] FAULT_INJECTION: forcing a failure. [ 510.423748][T16957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.423786][T16957] CPU: 0 UID: 0 PID: 16957 Comm: syz.1.2116 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.423815][T16957] Tainted: [L]=SOFTLOCKUP [ 510.423823][T16957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 510.423836][T16957] Call Trace: [ 510.423845][T16957] [ 510.423855][T16957] dump_stack_lvl+0xe8/0x150 [ 510.423896][T16957] should_fail_ex+0x410/0x560 [ 510.423933][T16957] _copy_to_user+0x31/0xb0 [ 510.423968][T16957] simple_read_from_buffer+0xe1/0x170 [ 510.424009][T16957] proc_fail_nth_read+0x1bb/0x230 [ 510.424032][T16957] ? common_file_perm+0x20e/0x2b0 [ 510.424065][T16957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.424092][T16957] ? rw_verify_area+0x24a/0x4c0 [ 510.424127][T16957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.424150][T16957] vfs_read+0x213/0xa80 [ 510.424177][T16957] ? __pfx___mutex_lock+0x10/0x10 [ 510.424213][T16957] ? __pfx_vfs_read+0x10/0x10 [ 510.424236][T16957] ? __fget_files+0x2a/0x420 [ 510.424280][T16957] ? __fget_files+0x3a2/0x420 [ 510.424310][T16957] ? __fget_files+0x2a/0x420 [ 510.424350][T16957] ksys_read+0x150/0x270 [ 510.424375][T16957] ? __pfx_ksys_read+0x10/0x10 [ 510.424410][T16957] do_syscall_64+0x166/0x520 [ 510.424439][T16957] ? trace_irq_disable+0x3b/0x140 [ 510.424464][T16957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.424488][T16957] ? clear_bhb_loop+0x70/0xc0 [ 510.424515][T16957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.424536][T16957] RIP: 0033:0x7f331835e98e [ 510.424557][T16957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 510.424575][T16957] RSP: 002b:00007f33191b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 510.424600][T16957] RAX: ffffffffffffffda RBX: 00007f33191b46c0 RCX: 00007f331835e98e [ 510.424616][T16957] RDX: 000000000000000f RSI: 00007f33191b40a0 RDI: 0000000000000004 [ 510.424631][T16957] RBP: 00007f33191b4090 R08: 0000000000000000 R09: 0000000000000000 [ 510.424644][T16957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.424658][T16957] R13: 00007f3318626038 R14: 00007f3318625fa0 R15: 00007f331874fa48 [ 510.424693][T16957] [ 510.527411][ T6270] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 510.615654][ T6270] usb 5-1: Using ep0 maxpacket: 8 [ 510.629013][T16959] IPVS: length: 143 != 8 [ 510.686382][ T6270] usb 5-1: unable to get BOS descriptor or descriptor too short [ 510.686441][ T6270] usb 5-1: New USB device found, idVendor=15ba, idProduct=0004, bcdDevice=2e.89 [ 510.706465][ T6270] usb 5-1: config index 0 descriptor too short (asked for 9, got 0) [ 510.706506][ T6270] usb 5-1: can't read configurations, error -22 [ 510.736672][T16968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.737217][T16968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.755410][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'. [ 510.827749][ T6270] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 510.848875][ T6270] usb 5-1: Using ep0 maxpacket: 8 [ 510.851100][ T6270] usb 5-1: unable to get BOS descriptor or descriptor too short [ 510.851155][ T6270] usb 5-1: New USB device found, idVendor=15ba, idProduct=0004, bcdDevice=2e.89 [ 510.852610][ T6270] usb 5-1: config index 0 descriptor too short (asked for 9, got 0) [ 510.852647][ T6270] usb 5-1: can't read configurations, error -22 [ 510.852948][ T6270] usb usb5-port1: unable to enumerate USB device [ 511.078566][T16987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2122'. [ 511.082508][T16987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.083059][T16987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.658033][ T189] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 511.706458][T14971] usb 4-1: USB disconnect, device number 126 [ 511.715271][T14971] em28xx 4-1:0.0: Disconnecting em28xx [ 511.763568][T14971] em28xx: Freeing device [ 511.821387][ T189] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 511.823567][ T189] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 511.823594][ T189] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 511.857139][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.857168][ T189] usb 2-1: Product: syz [ 511.857184][ T189] usb 2-1: Manufacturer: syz [ 511.857200][ T189] usb 2-1: SerialNumber: syz [ 512.129795][T17018] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 512.129918][ C1] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 512.618736][ T6279] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 512.767734][ T6279] usb 4-1: Using ep0 maxpacket: 16 [ 512.768608][ T6279] usb 4-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 512.770207][ T6279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 512.770234][ T6279] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 512.770258][ T6279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 512.770280][ T6279] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 512.773291][ T6279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.773315][ T6279] usb 4-1: Product: syz [ 512.773330][ T6279] usb 4-1: Manufacturer: syz [ 512.773345][ T6279] usb 4-1: SerialNumber: syz [ 512.776788][ T6279] usb 4-1: config 0 descriptor?? [ 512.789942][ T6279] omninet 4-1:0.0: ZyXEL - omni.net usb converter detected [ 512.815444][ T6279] usb 4-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 512.918020][ T6270] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 513.006458][T17010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 513.014139][ T6279] usb 4-1: USB disconnect, device number 127 [ 513.039530][ T6279] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 513.041397][ T6279] omninet 4-1:0.0: device disconnected [ 513.042333][ T189] usb 2-1: failed to execute ARPC: -110 [ 513.042531][ T189] usb 2-1: failed to set connected state for cport 0: -110 [ 513.042552][ T189] greybus greybus1: 0/0:0: failed to set connected state: -110 [ 513.107094][ T189] usb 2-1: failed to send ARPC request 3: -71 [ 513.107860][ T189] usb 2-1: failed to execute ARPC: -71 [ 513.107881][ T189] usb 2-1: failed to clear cport 0: -71 [ 513.107899][ T189] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 513.110423][ T6270] usb 5-1: Using ep0 maxpacket: 8 [ 513.111379][ T6270] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 513.125404][ T6270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.183525][ T6270] usb 5-1: config 0 descriptor?? [ 513.209331][ T189] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 513.222728][T17063] syzkaller1: entered promiscuous mode [ 513.222751][T17063] syzkaller1: entered allmulticast mode [ 513.226996][ T6270] usb 5-1: probing VID:PID(0424:012C) [ 513.248841][ T6270] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 513.248870][ T6270] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 513.248889][ T6270] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 513.248925][ T6270] usb 5-1: vub300 testing BULK OUT EndPoint(3) 04 [ 513.248945][ T6270] usb 5-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 513.251907][ T189] usb 2-1: USB disconnect, device number 120 [ 513.608109][T17081] FAULT_INJECTION: forcing a failure. [ 513.608109][T17081] name failslab, interval 1, probability 0, space 0, times 0 [ 513.608149][T17081] CPU: 1 UID: 0 PID: 17081 Comm: syz.2.2133 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.608178][T17081] Tainted: [L]=SOFTLOCKUP [ 513.608186][T17081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 513.608204][T17081] Call Trace: [ 513.608212][T17081] [ 513.608221][T17081] dump_stack_lvl+0xe8/0x150 [ 513.608266][T17081] should_fail_ex+0x410/0x560 [ 513.608305][T17081] should_failslab+0xa8/0x100 [ 513.608337][T17081] __kmalloc_noprof+0xfe/0x720 [ 513.608358][T17081] ? sctp_process_init+0x278b/0x2cf0 [ 513.608386][T17081] ? sctp_make_init_ack+0x2c5/0x1310 [ 513.608406][T17081] ? sctp_make_init_ack+0x2c5/0x1310 [ 513.608436][T17081] sctp_make_init_ack+0x2c5/0x1310 [ 513.608472][T17081] ? __pfx_sctp_make_init_ack+0x10/0x10 [ 513.608497][T17081] ? sctp_add_bind_addr+0x203/0x370 [ 513.608528][T17081] ? sctp_tietags_populate+0x84/0x490 [ 513.608560][T17081] sctp_sf_do_unexpected_init+0xdbc/0x1340 [ 513.608593][T17081] ? __pfx_sctp_sf_do_unexpected_init+0x10/0x10 [ 513.608617][T17081] ? sctp_do_sm+0x564b/0x5dd0 [ 513.608647][T17081] sctp_do_sm+0x239/0x5dd0 [ 513.608666][T17081] ? __pfx_sctp_cname+0x10/0x10 [ 513.608695][T17081] ? do_raw_spin_lock+0x12b/0x2f0 [ 513.608738][T17081] ? __pfx_sctp_do_sm+0x10/0x10 [ 513.608800][T17081] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 513.608825][T17081] ? lockdep_hardirqs_on+0x7b/0x110 [ 513.608863][T17081] ? seqcount_lockdep_reader_access+0xea/0x100 [ 513.608892][T17081] sctp_assoc_bh_rcv+0x401/0x6f0 [ 513.608937][T17081] sctp_backlog_rcv+0x15c/0x370 [ 513.608970][T17081] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 513.608996][T17081] __release_sock+0x28b/0x390 [ 513.609032][T17081] release_sock+0x190/0x260 [ 513.609062][T17081] sctp_sendmsg+0x1c09/0x2d00 [ 513.609099][T17081] ? kstrtouint+0x6e/0xe0 [ 513.609122][T17081] ? __pfx_sctp_sendmsg+0x10/0x10 [ 513.609148][T17081] ? lock_acquire+0x115/0x350 [ 513.609171][T17081] ? get_pid_task+0x20/0x1f0 [ 513.609211][T17081] ? aa_sock_msg_perm+0xf5/0x210 [ 513.609246][T17081] ? sock_rps_record_flow+0x19/0x350 [ 513.609276][T17081] ? inet_sendmsg+0x298/0x320 [ 513.609297][T17081] ? apparmor_socket_sendmsg+0x27b/0x360 [ 513.609325][T17081] ? __pfx_inet_sendmsg+0x10/0x10 [ 513.609347][T17081] sock_sendmsg_nosec+0x10e/0x180 [ 513.609373][T17081] __sys_sendto+0x408/0x5a0 [ 513.609401][T17081] ? ksys_write+0x1e6/0x270 [ 513.609426][T17081] ? __pfx___sys_sendto+0x10/0x10 [ 513.609452][T17081] ? __mutex_unlock_slowpath+0x731/0x900 [ 513.609512][T17081] ? __pfx_ksys_write+0x10/0x10 [ 513.609538][T17081] __x64_sys_sendto+0xde/0x100 [ 513.609569][T17081] do_syscall_64+0x166/0x520 [ 513.609596][T17081] ? trace_irq_disable+0x3b/0x140 [ 513.609618][T17081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.609639][T17081] ? clear_bhb_loop+0x70/0xc0 [ 513.609664][T17081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.609684][T17081] RIP: 0033:0x7ff2b239e159 [ 513.609704][T17081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.609721][T17081] RSP: 002b:00007ff2b31ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 513.609745][T17081] RAX: ffffffffffffffda RBX: 00007ff2b2625fa0 RCX: 00007ff2b239e159 [ 513.609760][T17081] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 513.609775][T17081] RBP: 00007ff2b31ad090 R08: 0000200000000140 R09: 000000000000001c [ 513.609789][T17081] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 513.609802][T17081] R13: 00007ff2b2626038 R14: 00007ff2b2625fa0 R15: 00007ff2b274fa48 [ 513.609835][T17081] [ 513.614824][ T6270] usb 5-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 513.822373][ T6270] usb 5-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 514.169002][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 514.169154][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 514.169276][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 514.169396][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 514.169517][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 514.169637][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 514.169764][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 514.169887][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 514.170016][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 514.170145][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 514.681208][ T31] kauditd_printk_skb: 82 callbacks suppressed [ 514.681230][ T31] audit: type=1326 audit(1791098441.319:10358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17115 comm="syz.3.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 514.681281][ T31] audit: type=1326 audit(1791098441.319:10359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17115 comm="syz.3.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 514.681873][ T31] audit: type=1326 audit(1791098441.319:10360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17115 comm="syz.3.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 514.681924][ T31] audit: type=1326 audit(1791098441.319:10361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17115 comm="syz.3.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 514.682158][ T31] audit: type=1326 audit(1791098441.319:10362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17115 comm="syz.3.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc1f9e159 code=0x7ffc0000 [ 514.683108][T17116] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 514.683126][T17116] audit: out of memory in audit_log_start [ 514.683681][ T31] audit: type=1326 audit(1791098441.319:10363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17115 comm="syz.3.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdc1f5e98e code=0x7ffc0000 [ 514.683738][ T31] audit: type=1326 audit(1791098441.319:10364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17115 comm="syz.3.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdc1f5e98e code=0x7ffc0000 [ 514.683783][ T31] audit: type=1326 audit(1791098441.319:10365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17115 comm="syz.3.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcdc1f5e98e code=0x7ffc0000 [ 514.967798][ T189] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 515.140160][ T189] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 515.142618][ T189] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 515.142647][ T189] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 515.142682][ T189] usb 3-1: config 220 interface 0 has no altsetting 0 [ 515.144337][ T6270] usb 5-1: USB disconnect, device number 28 [ 515.198518][ T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.198548][ T189] usb 3-1: Product: syz [ 515.198563][ T189] usb 3-1: Manufacturer: syz [ 515.198578][ T189] usb 3-1: SerialNumber: syz [ 515.200722][ T6271] usb 5-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 515.324420][ T6270] USB vub300 remote SDIO host controller[0] now disconnected [ 515.457764][ T6279] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 515.480284][T17110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.480945][T17110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.537857][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 515.688939][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 515.694170][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.694197][ T10] usb 4-1: Product: syz [ 515.694214][ T10] usb 4-1: Manufacturer: syz [ 515.694229][ T10] usb 4-1: SerialNumber: syz [ 515.733642][ T10] usb 4-1: config 0 descriptor?? [ 515.945188][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 516.161034][T17175] FAULT_INJECTION: forcing a failure. [ 516.161034][T17175] name failslab, interval 1, probability 0, space 0, times 0 [ 516.161073][T17175] CPU: 1 UID: 0 PID: 17175 Comm: syz.4.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.161106][T17175] Tainted: [L]=SOFTLOCKUP [ 516.161114][T17175] Hardware name: Google Google Compute Engine/Google Comput ** replaying previous printk message ** [ 516.161114][T17175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 516.161128][T17175] Call Trace: [ 516.161136][T17175] [ 516.161146][T17175] dump_stack_lvl+0xe8/0x150 [ 516.161183][T17175] should_fail_ex+0x410/0x560 [ 516.161215][T17175] should_failslab+0xa8/0x100 [ 516.161253][T17175] __kmalloc_cache_noprof+0xa3/0x600 [ 516.161278][T17175] ? audit_log_d_path+0xb8/0x1a0 [ 516.161305][T17175] ? audit_log_d_path+0xb8/0x1a0 [ 516.161340][T17175] audit_log_d_path+0xb8/0x1a0 [ 516.161371][T17175] audit_log_d_path_exe+0x42/0x70 [ 516.161401][T17175] audit_log_task+0x2c3/0x3d0 [ 516.161430][T17175] ? __pfx_audit_log_task+0x10/0x10 [ 516.161468][T17175] audit_seccomp+0x85/0x190 [ 516.161501][T17175] __seccomp_filter+0xd14/0x1de0 [ 516.161541][T17175] ? __pfx___seccomp_filter+0x10/0x10 [ 516.161565][T17175] ? __mutex_unlock_slowpath+0x731/0x900 [ 516.161597][T17175] ? __fget_files+0x2a/0x420 [ 516.161629][T17175] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 516.161660][T17175] ? __fget_files+0x3a2/0x420 [ 516.161697][T17175] ? fput+0xa0/0xd0 [ 516.161728][T17175] ? __pfx_ksys_write+0x10/0x10 [ 516.161753][T17175] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 516.161785][T17175] do_syscall_64+0x11f/0x520 [ 516.161814][T17175] ? trace_irq_disable+0x3b/0x140 [ 516.161836][T17175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.161856][T17175] ? clear_bhb_loop+0x70/0xc0 [ 516.161881][T17175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.161902][T17175] RIP: 0033:0x7f41e9b9e159 [ 516.161922][T17175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.161941][T17175] RSP: 002b:00007f41eaa44028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 516.161965][T17175] RAX: ffffffffffffffda RBX: 00007f41e9e25fa0 RCX: 00007f41e9b9e159 [ 516.161980][T17175] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 516.161994][T17175] RBP: 00007f41eaa44090 R08: 0000000000000000 R09: 0000000000000000 [ 516.162007][T17175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.162019][T17175] R13: 00007f41e9e26038 R14: 00007f41e9e25fa0 R15: 00007f41e9f4fa48 [ 516.162053][T17175] [ 516.207898][ C1] [ 516.305408][ T189] uvcvideo 3-1:220.0: Found Unit with invalid ID 0 [ 516.312336][ T189] uvcvideo 3-1:220.0: probe with driver uvcvideo failed with error -22 [ 516.321546][ T189] usb 3-1: USB disconnect, device number 85 [ 516.456537][ C1] ============================= [ 516.461493][ C1] WARNING: suspicious RCU usage [ 516.466374][ C1] syzkaller #0 Tainted: G L [ 516.472446][ C1] ----------------------------- [ 516.477320][ C1] kernel/sched/core.c:9226 Illegal context switch in RCU-sched read-side critical section! [ 516.487387][ C1] [ 516.487387][ C1] other info that might help us debug this: [ 516.487387][ C1] [ 516.497693][ C1] [ 516.497693][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 516.505785][ C1] locks held by syz-executor/5634: 9, last CPU#1: [ 516.512330][ C1] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 516.521145][ C1] #1: ffff88807f010340 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 516.530278][ C1] #2: ffff888035483440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 516.539605][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 516.549230][ C1] #4: ffff888033e99d38 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 516.559802][ C1] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 516.569425][ C1] #6: ffff88805ba6e498 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 516.579818][ C1] #7: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 516.589337][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 516.599891][ C1] [ 516.599891][ C1] stack backtrace: [ 516.605816][ C1] CPU: 1 UID: 0 PID: 5634 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 516.616876][ C1] Tainted: [L]=SOFTLOCKUP [ 516.621233][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 516.631323][ C1] Call Trace: [ 516.634634][ C1] [ 516.637504][ C1] dump_stack_lvl+0xe8/0x150 [ 516.642142][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 516.647590][ C1] __might_resched+0xbb/0x4c0 [ 516.652337][ C1] ? __cancel_work_sync+0x5c/0x110 [ 516.657501][ C1] __cancel_work_sync+0x6d/0x110 [ 516.662484][ C1] mmc_free_host+0x19/0x40 [ 516.667044][ C1] call_timer_fn+0x18d/0x5f0 [ 516.671671][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 516.678428][ C1] ? call_timer_fn+0xd5/0x5f0 [ 516.683151][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 516.688326][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.693570][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 516.700282][ C1] __run_timer_base+0x652/0x8b0 [ 516.705223][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 516.710630][ C1] ? ktime_get+0x1f5/0x220 [ 516.715077][ C1] ? lapic_next_event+0x11/0x20 [ 516.719994][ C1] run_timer_softirq+0xb7/0x170 [ 516.724880][ C1] handle_softirqs+0x226/0x860 [ 516.729679][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 516.734482][ C1] __irq_exit_rcu+0xcb/0x220 [ 516.739102][ C1] irq_exit_rcu+0x9/0x30 [ 516.743366][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 516.749025][ C1] [ 516.751964][ C1] [ 516.754899][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 516.760904][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 516.766246][ C1] Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 36 da [ 516.785863][ C1] RSP: 0018:ffffc90004207210 EFLAGS: 00000292 [ 516.791955][ C1] RAX: 9ff9eb15ff50a200 RBX: 0000000000000000 RCX: 8000000000000003 [ 516.799958][ C1] RDX: 00000000b6adc287 RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80 [ 516.807956][ C1] RBP: ffff888034b95dc0 R08: ffffffff82441aca R09: 0000000000000000 [ 516.815957][ C1] R10: dffffc0000000000 R11: ffffed100b74cbbd R12: ffffffff8ed5c960 [ 516.823957][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 516.831990][ C1] ? pfn_valid+0xba/0x490 [ 516.836352][ C1] ? pfn_valid+0xba/0x490 [ 516.840703][ C1] pfn_valid+0xd6/0x490 [ 516.844883][ C1] ? pfn_valid+0xba/0x490 [ 516.849256][ C1] page_table_check_set+0x25/0x530 [ 516.854388][ C1] copy_pmd_range+0x4adc/0x5c10 [ 516.859261][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 516.864763][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 516.869976][ C1] ? do_syscall_64+0x166/0x520 [ 516.874805][ C1] ? __lock_acquire+0x747/0x2de0 [ 516.879776][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 516.885009][ C1] copy_page_range+0xc82/0x1290 [ 516.889893][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 516.895214][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 516.902195][ C1] dup_mmap+0xf17/0x1dc0 [ 516.906468][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 516.911158][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 516.916236][ C1] ? lock_acquire+0x115/0x350 [ 516.920939][ C1] copy_mm+0x115/0x480 [ 516.925037][ C1] copy_process+0x1e79/0x4400 [ 516.929729][ C1] ? __lock_acquire+0x747/0x2de0 [ 516.934685][ C1] ? copy_process+0xd16/0x4400 [ 516.939481][ C1] ? __pfx_copy_process+0x10/0x10 [ 516.944517][ C1] kernel_clone+0x2d7/0x940 [ 516.949049][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 516.954114][ C1] __x64_sys_clone+0x1b6/0x230 [ 516.958890][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 516.964203][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 516.969497][ C1] do_syscall_64+0x166/0x520 [ 516.974108][ C1] ? trace_irq_disable+0x3b/0x140 [ 516.979150][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.985227][ C1] ? clear_bhb_loop+0x70/0xc0 [ 516.989928][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.995838][ C1] RIP: 0033:0x7f41e9bc6bd2 [ 517.000265][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 517.019896][ C1] RSP: 002b:00007f41e9f4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 517.028317][ C1] RAX: ffffffffffffffda RBX: 00007f41e9f4fc60 RCX: 00007f41e9bc6bd2 [ 517.036303][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 517.044296][ C1] RBP: 00007f41e9f4fdec R08: 0000000000000000 R09: 0000000000000001 [ 517.052285][ C1] R10: 00005555600a57d0 R11: 0000000000000246 R12: 0000000000000001 [ 517.060279][ C1] R13: 00000000000927c0 R14: 000000000007e01d R15: 00007f41e9f4fe40 [ 517.068289][ C1] [ 517.071432][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 517.071451][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5634, name: syz-executor [ 517.071468][ C1] preempt_count: 103, expected: 0 [ 517.071474][ C1] RCU nest depth: 2, expected: 0 [ 517.071481][ C1] locks held by syz-executor/5634: 9, last CPU#1: [ 517.071490][ C1] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 517.071550][ C1] #1: ffff88807f010340 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 517.071605][ C1] #2: ffff888035483440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 517.071638][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 517.071681][ C1] #4: ffff888033e99d38 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 517.071759][ C1] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 517.071795][ C1] #6: ffff88805ba6e498 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 517.071847][ C1] #7: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 517.071905][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 517.071946][ C1] Preemption disabled at: [ 517.071950][ C1] [<0000000000000000>] 0x0 [ 517.071968][ C1] CPU: 1 UID: 0 PID: 5634 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 517.071993][ C1] Tainted: [L]=SOFTLOCKUP [ 517.072001][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 517.072015][ C1] Call Trace: [ 517.072026][ C1] [ 517.072036][ C1] dump_stack_lvl+0xe8/0x150 [ 517.072069][ C1] __might_resched+0x36a/0x4c0 [ 517.072094][ C1] __cancel_work_sync+0x6d/0x110 [ 517.072113][ C1] mmc_free_host+0x19/0x40 [ 517.072129][ C1] call_timer_fn+0x18d/0x5f0 [ 517.072153][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 517.072177][ C1] ? call_timer_fn+0xd5/0x5f0 [ 517.072204][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 517.072240][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.072255][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 517.072269][ C1] __run_timer_base+0x652/0x8b0 [ 517.072291][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 517.072320][ C1] ? ktime_get+0x1f5/0x220 [ 517.072346][ C1] ? lapic_next_event+0x11/0x20 [ 517.072377][ C1] run_timer_softirq+0xb7/0x170 [ 517.072400][ C1] handle_softirqs+0x226/0x860 [ 517.072417][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 517.072435][ C1] __irq_exit_rcu+0xcb/0x220 [ 517.072453][ C1] irq_exit_rcu+0x9/0x30 [ 517.072478][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 517.072508][ C1] [ 517.072516][ C1] [ 517.072526][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 517.072550][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 517.072564][ C1] Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 36 da [ 517.072575][ C1] RSP: 0018:ffffc90004207210 EFLAGS: 00000292 [ 517.072586][ C1] RAX: 9ff9eb15ff50a200 RBX: 0000000000000000 RCX: 8000000000000003 [ 517.072595][ C1] RDX: 00000000b6adc287 RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80 [ 517.072603][ C1] RBP: ffff888034b95dc0 R08: ffffffff82441aca R09: 0000000000000000 [ 517.072618][ C1] R10: dffffc0000000000 R11: ffffed100b74cbbd R12: ffffffff8ed5c960 [ 517.072635][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 517.072657][ C1] ? pfn_valid+0xba/0x490 [ 517.072691][ C1] ? pfn_valid+0xba/0x490 [ 517.072719][ C1] pfn_valid+0xd6/0x490 [ 517.072732][ C1] ? pfn_valid+0xba/0x490 [ 517.072747][ C1] page_table_check_set+0x25/0x530 [ 517.072768][ C1] copy_pmd_range+0x4adc/0x5c10 [ 517.072810][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 517.072852][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 517.072869][ C1] ? do_syscall_64+0x166/0x520 [ 517.072888][ C1] ? __lock_acquire+0x747/0x2de0 [ 517.072904][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 517.072927][ C1] copy_page_range+0xc82/0x1290 [ 517.072976][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 517.073012][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 517.073032][ C1] dup_mmap+0xf17/0x1dc0 [ 517.073053][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 517.073065][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 517.073100][ C1] ? lock_acquire+0x115/0x350 [ 517.073143][ C1] copy_mm+0x115/0x480 [ 517.073175][ C1] copy_process+0x1e79/0x4400 [ 517.073191][ C1] ? __lock_acquire+0x747/0x2de0 [ 517.073213][ C1] ? copy_process+0xd16/0x4400 [ 517.073239][ C1] ? __pfx_copy_process+0x10/0x10 [ 517.073281][ C1] kernel_clone+0x2d7/0x940 [ 517.073317][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 517.073351][ C1] __x64_sys_clone+0x1b6/0x230 [ 517.073384][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 517.073432][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 517.073466][ C1] do_syscall_64+0x166/0x520 [ 517.073493][ C1] ? trace_irq_disable+0x3b/0x140 [ 517.073507][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.073519][ C1] ? clear_bhb_loop+0x70/0xc0 [ 517.073533][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.073552][ C1] RIP: 0033:0x7f41e9bc6bd2 [ 517.073572][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 517.073590][ C1] RSP: 002b:00007f41e9f4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 517.073611][ C1] RAX: ffffffffffffffda RBX: 00007f41e9f4fc60 RCX: 00007f41e9bc6bd2 [ 517.073627][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 517.073641][ C1] RBP: 00007f41e9f4fdec R08: 0000000000000000 R09: 0000000000000001 [ 517.073648][ C1] R10: 00005555600a57d0 R11: 0000000000000246 R12: 0000000000000001 [ 517.073656][ C1] R13: 00000000000927c0 R14: 000000000007e01d R15: 00007f41e9f4fe40 [ 517.073674][ C1] [ 517.073828][ C1] [ 517.659562][ C1] ============================= [ 517.664423][ C1] WARNING: suspicious RCU usage [ 517.669338][ C1] syzkaller #0 Tainted: G W L [ 517.675329][ C1] ----------------------------- [ 517.680235][ C1] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 517.692255][ C1] [ 517.692255][ C1] other info that might help us debug this: [ 517.692255][ C1] [ 517.702546][ C1] [ 517.702546][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 517.710670][ C1] locks held by syz-executor/5634: 9, last CPU#1: [ 517.717089][ C1] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 517.725853][ C1] #1: ffff88807f010340 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 517.734986][ C1] #2: ffff888035483440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 517.744251][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 517.753825][ C1] #4: ffff888033e99d38 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 517.764354][ C1] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 517.773870][ C1] #6: ffff88805ba6e498 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 517.784213][ C1] #7: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 517.793657][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 517.804148][ C1] [ 517.804148][ C1] stack backtrace: [ 517.810091][ C1] CPU: 1 UID: 0 PID: 5634 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 517.821114][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 517.826324][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 517.836378][ C1] Call Trace: [ 517.839676][ C1] [ 517.842531][ C1] dump_stack_lvl+0xe8/0x150 [ 517.847157][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 517.852549][ C1] __synchronize_srcu+0x157/0x2f0 [ 517.857606][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 517.863177][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 517.868223][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 517.874058][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 517.879624][ C1] ? synchronize_srcu+0x20a/0x260 [ 517.884657][ C1] wakeup_source_unregister+0x129/0x3f0 [ 517.890271][ C1] mmc_host_classdev_release+0x47/0x100 [ 517.895848][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 517.901998][ C1] device_release+0xc4/0x1f0 [ 517.906612][ C1] kobject_put+0x222/0x550 [ 517.911069][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 517.915897][ C1] call_timer_fn+0x18d/0x5f0 [ 517.920499][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 517.927186][ C1] ? call_timer_fn+0xd5/0x5f0 [ 517.931884][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 517.937033][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.942250][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 517.948962][ C1] __run_timer_base+0x652/0x8b0 [ 517.953841][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 517.959222][ C1] ? ktime_get+0x1f5/0x220 [ 517.963643][ C1] ? lapic_next_event+0x11/0x20 [ 517.968527][ C1] run_timer_softirq+0xb7/0x170 [ 517.973391][ C1] handle_softirqs+0x226/0x860 [ 517.978168][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 517.982943][ C1] __irq_exit_rcu+0xcb/0x220 [ 517.987546][ C1] irq_exit_rcu+0x9/0x30 [ 517.991809][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 517.997477][ C1] [ 518.000417][ C1] [ 518.003351][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 518.009348][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 518.014657][ C1] Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 36 da [ 518.034262][ C1] RSP: 0018:ffffc90004207210 EFLAGS: 00000292 [ 518.040335][ C1] RAX: 9ff9eb15ff50a200 RBX: 0000000000000000 RCX: 8000000000000003 [ 518.048326][ C1] RDX: 00000000b6adc287 RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80 [ 518.056318][ C1] RBP: ffff888034b95dc0 R08: ffffffff82441aca R09: 0000000000000000 [ 518.064321][ C1] R10: dffffc0000000000 R11: ffffed100b74cbbd R12: ffffffff8ed5c960 [ 518.072316][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 518.080321][ C1] ? pfn_valid+0xba/0x490 [ 518.084657][ C1] ? pfn_valid+0xba/0x490 [ 518.089016][ C1] pfn_valid+0xd6/0x490 [ 518.093196][ C1] ? pfn_valid+0xba/0x490 [ 518.097555][ C1] page_table_check_set+0x25/0x530 [ 518.102694][ C1] copy_pmd_range+0x4adc/0x5c10 [ 518.107605][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 518.113105][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 518.118324][ C1] ? do_syscall_64+0x166/0x520 [ 518.123129][ C1] ? __lock_acquire+0x747/0x2de0 [ 518.128080][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 518.133290][ C1] copy_page_range+0xc82/0x1290 [ 518.138170][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 518.143456][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 518.150431][ C1] dup_mmap+0xf17/0x1dc0 [ 518.154719][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 518.159415][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 518.164463][ C1] ? lock_acquire+0x115/0x350 [ 518.169154][ C1] copy_mm+0x115/0x480 [ 518.173259][ C1] copy_process+0x1e79/0x4400 [ 518.177957][ C1] ? __lock_acquire+0x747/0x2de0 [ 518.182931][ C1] ? copy_process+0xd16/0x4400 [ 518.187739][ C1] ? __pfx_copy_process+0x10/0x10 [ 518.192803][ C1] kernel_clone+0x2d7/0x940 [ 518.197329][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 518.202379][ C1] __x64_sys_clone+0x1b6/0x230 [ 518.207161][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 518.212475][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 518.217786][ C1] do_syscall_64+0x166/0x520 [ 518.222390][ C1] ? trace_irq_disable+0x3b/0x140 [ 518.227414][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.233502][ C1] ? clear_bhb_loop+0x70/0xc0 [ 518.238196][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.244099][ C1] RIP: 0033:0x7f41e9bc6bd2 [ 518.248548][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 518.268184][ C1] RSP: 002b:00007f41e9f4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 518.276617][ C1] RAX: ffffffffffffffda RBX: 00007f41e9f4fc60 RCX: 00007f41e9bc6bd2 [ 518.284609][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 518.292603][ C1] RBP: 00007f41e9f4fdec R08: 0000000000000000 R09: 0000000000000001 [ 518.300612][ C1] R10: 00005555600a57d0 R11: 0000000000000246 R12: 0000000000000001 [ 518.308592][ C1] R13: 00000000000927c0 R14: 000000000007e01d R15: 00007f41e9f4fe40 [ 518.316583][ C1] [ 518.319652][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 518.319665][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5634, name: syz-executor [ 518.319678][ C1] preempt_count: 103, expected: 0 [ 518.319690][ C1] RCU nest depth: 2, expected: 0 [ 518.319702][ C1] locks held by syz-executor/5634: 9, last CPU#1: [ 518.319719][ C1] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 518.319783][ C1] #1: ffff88807f010340 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 518.319820][ C1] #2: ffff888035483440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 518.319870][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 518.319932][ C1] #4: ffff888033e99d38 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 518.319969][ C1] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 518.320016][ C1] #6: ffff88805ba6e498 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 518.320081][ C1] #7: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 518.320115][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 518.320153][ C1] Preemption disabled at: [ 518.320159][ C1] [<0000000000000000>] 0x0 [ 518.320188][ C1] CPU: 1 UID: 0 PID: 5634 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 518.320219][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 518.320228][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 518.320242][ C1] Call Trace: [ 518.320249][ C1] [ 518.320255][ C1] dump_stack_lvl+0xe8/0x150 [ 518.320273][ C1] __might_resched+0x36a/0x4c0 [ 518.320294][ C1] __synchronize_srcu+0x1a1/0x2f0 [ 518.320321][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 518.320344][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 518.320387][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 518.320408][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 518.320423][ C1] ? synchronize_srcu+0x20a/0x260 [ 518.320437][ C1] wakeup_source_unregister+0x129/0x3f0 [ 518.320454][ C1] mmc_host_classdev_release+0x47/0x100 [ 518.320484][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 518.320511][ C1] device_release+0xc4/0x1f0 [ 518.320545][ C1] kobject_put+0x222/0x550 [ 518.320563][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 518.320582][ C1] call_timer_fn+0x18d/0x5f0 [ 518.320597][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 518.320609][ C1] ? call_timer_fn+0xd5/0x5f0 [ 518.320633][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 518.320671][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 518.320706][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 518.320723][ C1] __run_timer_base+0x652/0x8b0 [ 518.320744][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 518.320760][ C1] ? ktime_get+0x1f5/0x220 [ 518.320779][ C1] ? lapic_next_event+0x11/0x20 [ 518.320818][ C1] run_timer_softirq+0xb7/0x170 [ 518.320852][ C1] handle_softirqs+0x226/0x860 [ 518.320876][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 518.320894][ C1] __irq_exit_rcu+0xcb/0x220 [ 518.320909][ C1] irq_exit_rcu+0x9/0x30 [ 518.320924][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 518.320954][ C1] [ 518.320962][ C1] [ 518.320971][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 518.320995][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 518.321019][ C1] Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 36 da [ 518.321031][ C1] RSP: 0018:ffffc90004207210 EFLAGS: 00000292 [ 518.321043][ C1] RAX: 9ff9eb15ff50a200 RBX: 0000000000000000 RCX: 8000000000000003 [ 518.321051][ C1] RDX: 00000000b6adc287 RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80 [ 518.321060][ C1] RBP: ffff888034b95dc0 R08: ffffffff82441aca R09: 0000000000000000 [ 518.321068][ C1] R10: dffffc0000000000 R11: ffffed100b74cbbd R12: ffffffff8ed5c960 [ 518.321077][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 518.321097][ C1] ? pfn_valid+0xba/0x490 [ 518.321130][ C1] ? pfn_valid+0xba/0x490 [ 518.321158][ C1] pfn_valid+0xd6/0x490 [ 518.321181][ C1] ? pfn_valid+0xba/0x490 [ 518.321196][ C1] page_table_check_set+0x25/0x530 [ 518.321213][ C1] copy_pmd_range+0x4adc/0x5c10 [ 518.321237][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 518.321277][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 518.321297][ C1] ? do_syscall_64+0x166/0x520 [ 518.321334][ C1] ? __lock_acquire+0x747/0x2de0 [ 518.321350][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 518.321369][ C1] copy_page_range+0xc82/0x1290 [ 518.321399][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 518.321433][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 518.321464][ C1] dup_mmap+0xf17/0x1dc0 [ 518.321496][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 518.321509][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 518.321531][ C1] ? lock_acquire+0x115/0x350 [ 518.321561][ C1] copy_mm+0x115/0x480 [ 518.321593][ C1] copy_process+0x1e79/0x4400 [ 518.321621][ C1] ? __lock_acquire+0x747/0x2de0 [ 518.321650][ C1] ? copy_process+0xd16/0x4400 [ 518.321673][ C1] ? __pfx_copy_process+0x10/0x10 [ 518.321694][ C1] kernel_clone+0x2d7/0x940 [ 518.321724][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 518.321775][ C1] __x64_sys_clone+0x1b6/0x230 [ 518.321809][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 518.321834][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 518.321852][ C1] do_syscall_64+0x166/0x520 [ 518.321878][ C1] ? trace_irq_disable+0x3b/0x140 [ 518.321901][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.321924][ C1] ? clear_bhb_loop+0x70/0xc0 [ 518.321951][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.321966][ C1] RIP: 0033:0x7f41e9bc6bd2 [ 518.321977][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 518.321987][ C1] RSP: 002b:00007f41e9f4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 518.321999][ C1] RAX: ffffffffffffffda RBX: 00007f41e9f4fc60 RCX: 00007f41e9bc6bd2 [ 518.322007][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 518.322019][ C1] RBP: 00007f41e9f4fdec R08: 0000000000000000 R09: 0000000000000001 [ 518.322034][ C1] R10: 00005555600a57d0 R11: 0000000000000246 R12: 0000000000000001 [ 518.322049][ C1] R13: 00000000000927c0 R14: 000000000007e01d R15: 00007f41e9f4fe40 [ 518.322082][ C1] [ 518.322095][ C1] ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc90004200000, but annotated. [ 518.322527][ C1] ------------[ cut here ]------------ [ 518.322537][ C1] 1 [ 518.322543][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz-executor/5634 [ 518.817637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 518.917661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 518.967665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 519.010437][ C1] Modules linked in: [ 519.014362][ C1] CPU: 1 UID: 0 PID: 5634 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 519.025392][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 519.030595][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 519.040661][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 519.046590][ C1] Code: cc cc cc 41 ff c7 44 89 3d 49 10 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 8d 62 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 e1 6a 6d 0a 3b 05 df [ 519.066221][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 519.072315][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 9ff9eb15ff50a200 [ 519.080304][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 519.088300][ C1] RBP: ffff888034b95de0 R08: 0000000000000100 R09: 1ffffffff1ed22f4 [ 519.096289][ C1] R10: dffffc0000000000 R11: fffffbfff1ed22f5 R12: ffff88803337e478 [ 519.104264][ C1] R13: ffff88804f4f2e70 R14: dffffc0000000000 R15: 0000000000000001 [ 519.112250][ C1] FS: 00005555600a5500(0000) GS:ffff888124dc6000(0000) knlGS:0000000000000000 [ 519.121217][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.127807][ C1] CR2: 00007f41ea9556c8 CR3: 000000005b91e000 CR4: 00000000003526f0 [ 519.135795][ C1] Call Trace: [ 519.139097][ C1] [ 519.141950][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 519.147532][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 519.152581][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 519.158147][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 519.163199][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 519.169023][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 519.174594][ C1] ? synchronize_srcu+0x20a/0x260 [ 519.179634][ C1] wakeup_source_unregister+0x129/0x3f0 [ 519.185192][ C1] mmc_host_classdev_release+0x47/0x100 [ 519.190767][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 519.196942][ C1] device_release+0xc4/0x1f0 [ 519.201554][ C1] kobject_put+0x222/0x550 [ 519.205978][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 519.210753][ C1] call_timer_fn+0x18d/0x5f0 [ 519.215380][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 519.222072][ C1] ? call_timer_fn+0xd5/0x5f0 [ 519.226760][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 519.231925][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.237139][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 519.243824][ C1] __run_timer_base+0x652/0x8b0 [ 519.248698][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 519.254079][ C1] ? ktime_get+0x1f5/0x220 [ 519.258501][ C1] ? lapic_next_event+0x11/0x20 [ 519.263360][ C1] run_timer_softirq+0xb7/0x170 [ 519.268242][ C1] handle_softirqs+0x226/0x860 [ 519.273048][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 519.277843][ C1] __irq_exit_rcu+0xcb/0x220 [ 519.282447][ C1] irq_exit_rcu+0x9/0x30 [ 519.286715][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 519.292357][ C1] [ 519.295308][ C1] [ 519.298256][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 519.304315][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 519.309625][ C1] Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 36 da [ 519.329233][ C1] RSP: 0018:ffffc90004207210 EFLAGS: 00000292 [ 519.335334][ C1] RAX: 9ff9eb15ff50a200 RBX: 0000000000000000 RCX: 8000000000000003 [ 519.343330][ C1] RDX: 00000000b6adc287 RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80 [ 519.351323][ C1] RBP: ffff888034b95dc0 R08: ffffffff82441aca R09: 0000000000000000 [ 519.359315][ C1] R10: dffffc0000000000 R11: ffffed100b74cbbd R12: ffffffff8ed5c960 [ 519.367302][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 519.375310][ C1] ? pfn_valid+0xba/0x490 [ 519.379674][ C1] ? pfn_valid+0xba/0x490 [ 519.384006][ C1] pfn_valid+0xd6/0x490 [ 519.388176][ C1] ? pfn_valid+0xba/0x490 [ 519.392545][ C1] page_table_check_set+0x25/0x530 [ 519.397686][ C1] copy_pmd_range+0x4adc/0x5c10 [ 519.402595][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 519.408112][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 519.413342][ C1] ? do_syscall_64+0x166/0x520 [ 519.418134][ C1] ? __lock_acquire+0x747/0x2de0 [ 519.423106][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 519.428335][ C1] copy_page_range+0xc82/0x1290 [ 519.433228][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 519.438545][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 519.445520][ C1] dup_mmap+0xf17/0x1dc0 [ 519.449799][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 519.454494][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 519.459562][ C1] ? lock_acquire+0x115/0x350 [ 519.464276][ C1] copy_mm+0x115/0x480 [ 519.468385][ C1] copy_process+0x1e79/0x4400 [ 519.473064][ C1] ? __lock_acquire+0x747/0x2de0 [ 519.478039][ C1] ? copy_process+0xd16/0x4400 [ 519.482818][ C1] ? __pfx_copy_process+0x10/0x10 [ 519.487862][ C1] kernel_clone+0x2d7/0x940 [ 519.492382][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 519.497447][ C1] __x64_sys_clone+0x1b6/0x230 [ 519.502229][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 519.507582][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 519.512906][ C1] do_syscall_64+0x166/0x520 [ 519.517528][ C1] ? trace_irq_disable+0x3b/0x140 [ 519.522582][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.528665][ C1] ? clear_bhb_loop+0x70/0xc0 [ 519.533357][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.539256][ C1] RIP: 0033:0x7f41e9bc6bd2 [ 519.543681][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 519.563292][ C1] RSP: 002b:00007f41e9f4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 519.571709][ C1] RAX: ffffffffffffffda RBX: 00007f41e9f4fc60 RCX: 00007f41e9bc6bd2 [ 519.579707][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 519.587696][ C1] RBP: 00007f41e9f4fdec R08: 0000000000000000 R09: 0000000000000001 [ 519.595665][ C1] R10: 00005555600a57d0 R11: 0000000000000246 R12: 0000000000000001 [ 519.603646][ C1] R13: 00000000000927c0 R14: 000000000007e01d R15: 00007f41e9f4fe40 [ 519.611632][ C1] [ 519.614675][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 519.621965][ C1] CPU: 1 UID: 0 PID: 5634 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 519.632999][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 519.638186][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 519.648263][ C1] Call Trace: [ 519.651570][ C1] [ 519.654419][ C1] vpanic+0x56d/0xa60 [ 519.658425][ C1] ? __pfx__printk+0x10/0x10 [ 519.663019][ C1] ? __pfx_vpanic+0x10/0x10 [ 519.667545][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 519.672837][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 519.678060][ C1] panic+0xc5/0xd0 [ 519.681788][ C1] ? __pfx_panic+0x10/0x10 [ 519.686228][ C1] __warn+0x315/0x4c0 [ 519.690236][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 519.695544][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 519.700830][ C1] __report_bug+0x276/0x570 [ 519.705435][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 519.710734][ C1] ? __pfx___report_bug+0x10/0x10 [ 519.715899][ C1] ? __wake_up_klogd+0xf0/0x130 [ 519.720800][ C1] ? vprintk_emit+0x4ee/0x560 [ 519.725526][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 519.730565][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 519.735890][ C1] report_bug+0x16b/0x220 [ 519.740237][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 519.745531][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 519.750836][ C1] handle_bug+0x9c/0x200 [ 519.755101][ C1] exc_invalid_op+0x1a/0x50 [ 519.759609][ C1] asm_exc_invalid_op+0x1a/0x20 [ 519.764475][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 519.770374][ C1] Code: cc cc cc 41 ff c7 44 89 3d 49 10 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 8d 62 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 e1 6a 6d 0a 3b 05 df [ 519.789983][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 519.796055][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 9ff9eb15ff50a200 [ 519.804038][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 519.812010][ C1] RBP: ffff888034b95de0 R08: 0000000000000100 R09: 1ffffffff1ed22f4 [ 519.819992][ C1] R10: dffffc0000000000 R11: fffffbfff1ed22f5 R12: ffff88803337e478 [ 519.827979][ C1] R13: ffff88804f4f2e70 R14: dffffc0000000000 R15: 0000000000000001 [ 519.836002][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 519.841303][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 519.846882][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 519.851915][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 519.857469][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 519.862507][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 519.868327][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 519.873912][ C1] ? synchronize_srcu+0x20a/0x260 [ 519.878956][ C1] wakeup_source_unregister+0x129/0x3f0 [ 519.884508][ C1] mmc_host_classdev_release+0x47/0x100 [ 519.890056][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 519.896210][ C1] device_release+0xc4/0x1f0 [ 519.900817][ C1] kobject_put+0x222/0x550 [ 519.905250][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 519.910043][ C1] call_timer_fn+0x18d/0x5f0 [ 519.914640][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 519.921322][ C1] ? call_timer_fn+0xd5/0x5f0 [ 519.926007][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 519.931150][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.936371][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 519.943062][ C1] __run_timer_base+0x652/0x8b0 [ 519.947933][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 519.953326][ C1] ? ktime_get+0x1f5/0x220 [ 519.957756][ C1] ? lapic_next_event+0x11/0x20 [ 519.962633][ C1] run_timer_softirq+0xb7/0x170 [ 519.967504][ C1] handle_softirqs+0x226/0x860 [ 519.972274][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 519.977053][ C1] __irq_exit_rcu+0xcb/0x220 [ 519.981689][ C1] irq_exit_rcu+0x9/0x30 [ 519.985968][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 519.991628][ C1] [ 519.994598][ C1] [ 519.997554][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 520.003567][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 520.008876][ C1] Code: ff ff ff e8 70 dc 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 02 37 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d b7 36 da [ 520.028493][ C1] RSP: 0018:ffffc90004207210 EFLAGS: 00000292 [ 520.034593][ C1] RAX: 9ff9eb15ff50a200 RBX: 0000000000000000 RCX: 8000000000000003 [ 520.042574][ C1] RDX: 00000000b6adc287 RSI: ffffffff8e69fce1 RDI: ffffffff8c6dad80 [ 520.050569][ C1] RBP: ffff888034b95dc0 R08: ffffffff82441aca R09: 0000000000000000 [ 520.058563][ C1] R10: dffffc0000000000 R11: ffffed100b74cbbd R12: ffffffff8ed5c960 [ 520.066550][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 520.074548][ C1] ? pfn_valid+0xba/0x490 [ 520.078890][ C1] ? pfn_valid+0xba/0x490 [ 520.083223][ C1] pfn_valid+0xd6/0x490 [ 520.087399][ C1] ? pfn_valid+0xba/0x490 [ 520.091743][ C1] page_table_check_set+0x25/0x530 [ 520.096884][ C1] copy_pmd_range+0x4adc/0x5c10 [ 520.101772][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 520.107251][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 520.112450][ C1] ? do_syscall_64+0x166/0x520 [ 520.117241][ C1] ? __lock_acquire+0x747/0x2de0 [ 520.122208][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 520.127456][ C1] copy_page_range+0xc82/0x1290 [ 520.132375][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 520.137680][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 520.144634][ C1] dup_mmap+0xf17/0x1dc0 [ 520.148924][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 520.153617][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 520.158702][ C1] ? lock_acquire+0x115/0x350 [ 520.163431][ C1] copy_mm+0x115/0x480 [ 520.167538][ C1] copy_process+0x1e79/0x4400 [ 520.172246][ C1] ? __lock_acquire+0x747/0x2de0 [ 520.177233][ C1] ? copy_process+0xd16/0x4400 [ 520.182046][ C1] ? __pfx_copy_process+0x10/0x10 [ 520.187129][ C1] kernel_clone+0x2d7/0x940 [ 520.191670][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 520.196720][ C1] __x64_sys_clone+0x1b6/0x230 [ 520.201529][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 520.206861][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 520.212186][ C1] do_syscall_64+0x166/0x520 [ 520.216794][ C1] ? trace_irq_disable+0x3b/0x140 [ 520.221856][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.227928][ C1] ? clear_bhb_loop+0x70/0xc0 [ 520.232604][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.238504][ C1] RIP: 0033:0x7f41e9bc6bd2 [ 520.242926][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 520.262546][ C1] RSP: 002b:00007f41e9f4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 520.270985][ C1] RAX: ffffffffffffffda RBX: 00007f41e9f4fc60 RCX: 00007f41e9bc6bd2 [ 520.278974][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 520.286951][ C1] RBP: 00007f41e9f4fdec R08: 0000000000000000 R09: 0000000000000001 [ 520.294921][ C1] R10: 00005555600a57d0 R11: 0000000000000246 R12: 0000000000000001 [ 520.302897][ C1] R13: 00000000000927c0 R14: 000000000007e01d R15: 00007f41e9f4fe40 [ 520.310904][ C1] [ 520.314099][ C1] Kernel Offset: disabled [ 520.318423][ C1] Rebooting in 86400 seconds..