last executing test programs: 7m17.699893225s ago: executing program 4 (id=2280): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x82, &(0x7f0000000740), 0x8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000140)='6', 0x1}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) 7m17.470748365s ago: executing program 4 (id=2282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006a80)=[{{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f0000003880)='<', 0x1}], 0x1}}], 0x1, 0x404c8d0) 7m17.277375749s ago: executing program 4 (id=2284): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) accept$unix(r0, 0x0, 0x0) 7m17.043877163s ago: executing program 4 (id=2288): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x200c0411, 0x0, 0x0, 0x0, 0x0, 0x0) 7m16.721281926s ago: executing program 4 (id=2293): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) chdir(&(0x7f0000000200)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='sysfs\x00', 0x1214040, 0x0) 7m15.307875808s ago: executing program 4 (id=2301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7m14.838940388s ago: executing program 32 (id=2301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6m41.609696354s ago: executing program 1 (id=2567): socket$xdp(0x2c, 0x3, 0x0) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x0) 6m41.359847524s ago: executing program 1 (id=2568): r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 6m41.288838307s ago: executing program 1 (id=2569): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00003e3000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) 6m39.990418874s ago: executing program 1 (id=2573): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m39.743969779s ago: executing program 1 (id=2574): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28080, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x10) 6m37.883828922s ago: executing program 1 (id=2582): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40841, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x6000001d}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) epoll_wait(r1, &(0x7f0000000140)=[{}], 0x1, 0x20000800) 6m37.170044032s ago: executing program 33 (id=2582): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40841, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x6000001d}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) epoll_wait(r1, &(0x7f0000000140)=[{}], 0x1, 0x20000800) 3.251714933s ago: executing program 6 (id=6124): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 3.251261289s ago: executing program 5 (id=6125): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2], 0x78}}, 0x0) 2.985741394s ago: executing program 5 (id=6129): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='ns\x00') fchdir(r0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) r1 = open(&(0x7f0000006080)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2.985393325s ago: executing program 6 (id=6130): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000006c0)="b3", 0x1}], 0x1}}], 0x1, 0x44) listen(r0, 0x100101) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x2}, 0x10) 2.792288078s ago: executing program 5 (id=6134): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 2.728638887s ago: executing program 6 (id=6136): r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 2.561767678s ago: executing program 5 (id=6139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="48007a800c000300"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 2.365597983s ago: executing program 2 (id=6142): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) 2.365358154s ago: executing program 5 (id=6143): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000007c0)={0x2, 0x0, {&(0x7f00000000c0)=""/125, 0x7d, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000006f40)={0x2, 0x0, {&(0x7f0000006e00)=""/110, 0x6e, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f00000004c0)=""/195, 0xc3, 0x0, 0x2, 0x3}}, 0x48) 2.154373617s ago: executing program 5 (id=6147): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 2.153792778s ago: executing program 2 (id=6149): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xe0042, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r2}) close_range(r0, 0xffffffffffffffff, 0x0) 2.004803065s ago: executing program 0 (id=6151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20048810) 1.867213642s ago: executing program 2 (id=6153): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="64000000100001042abd8d000000000000000000", @ANYRES32=0x0, @ANYBLOB="cc81000000000000300012800b000100697036746e6c00002000028006000f000000000014000200fe"], 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) 1.764606569s ago: executing program 0 (id=6154): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="050000000100000005000000070000000c000000", @ANYRES32, @ANYBLOB="0400000000000000000800000000000000000000582067afa305f05259fe9073b10a53decce8905d17ffbf3d58cdf04e05d13aa548b6a2eb4c429b1269", @ANYRES32], 0x50) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x1, 0x9, @mcast2}}, {{0xa, 0x4e20, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x90) 1.693758415s ago: executing program 3 (id=6155): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="3cc81e0000004d61501d0100000000000000100000000000800700000000000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x0, 0x17, 0x41, "e34a7b4ee08cbfc7d7ec24f4808c7d89ed11aa6dcbdf43c6ba5df4d7f225dab340b837c60859a100948e3e5702704782f5006165524633572c7676f53c23616d27"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.634041426s ago: executing program 2 (id=6156): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x1) syz_clone3(&(0x7f00000003c0)={0x100001000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.633513932s ago: executing program 0 (id=6157): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f00000001c0)=""/245, 0xfffffffffffffe4e, 0x30c64a8c5dc2dff0, 0x0, 0x0) 1.633311569s ago: executing program 6 (id=6158): r0 = fsopen(&(0x7f00000002c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) unshare(0x40400) sync_file_range(r1, 0x3, 0x14, 0x7) 1.451647898s ago: executing program 2 (id=6159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000440)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffffffffffff00"}}) 1.206404436s ago: executing program 6 (id=6160): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000009, 0x3032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 969.382571ms ago: executing program 0 (id=6161): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @private1, 0x3}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x0) 969.119332ms ago: executing program 3 (id=6162): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x2, 0xffff, 0x8, 0x80000001}, 0x14) 671.43864ms ago: executing program 0 (id=6163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x3, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x28, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010108, @broadcast}, {0x4e23, 0x4e20, 0x14, 0x0, @gue={{0x2, 0x1, 0x3, 0x9}, "62fc3c32"}}}}, 0x36) 670.961186ms ago: executing program 3 (id=6164): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 670.598955ms ago: executing program 6 (id=6165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x8, 0x18, 0x1001, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2800, 0x7000000}]}}}}}}}}, 0x0) 484.28256ms ago: executing program 2 (id=6166): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0x2, 0x0, 0x3, 0x2, 0x8, 0x9, 0x0, 0x0, 0x2, 0x8}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) 373.750548ms ago: executing program 3 (id=6167): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20) 163.096484ms ago: executing program 3 (id=6168): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) 123.650137ms ago: executing program 0 (id=6169): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 0s ago: executing program 3 (id=6170): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x0, 'rr\x00'}, 0x2c) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030529e400"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): disconnect, device number 26 [ 584.303376][T17448] input: syz1 as /devices/virtual/input/input25 [ 584.303398][T17448] input: failed to attach handler leds to device input25, error: -6 [ 584.384922][ T5722] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 585.529912][ T5722] cp210x 3-1:0.0: device disconnected [ 586.058923][T17469] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4716'. [ 587.245383][T17496] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4727'. [ 587.337322][T17501] netlink: 67 bytes leftover after parsing attributes in process `syz.5.4729'. [ 587.337390][T17501] IPv6: NLM_F_REPLACE set, but no existing node found! [ 587.509630][T17510] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 587.688116][T17512] sctp: [Deprecated]: syz.0.4734 (pid 17512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.688116][T17512] Use struct sctp_sack_info instead [ 590.698910][T17594] loop5: detected capacity change from 0 to 7 [ 590.725058][T17594] Dev loop5: unable to read RDB block 7 [ 590.725092][T17594] loop5: unable to read partition table [ 590.725218][T17594] loop5: partition table beyond EOD, truncated [ 590.725252][T17594] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 591.024954][T17604] FAULT_INJECTION: forcing a failure. [ 591.024954][T17604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.024983][T17604] CPU: 0 UID: 0 PID: 17604 Comm: syz.5.4773 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 591.024998][T17604] Tainted: [L]=SOFTLOCKUP [ 591.025002][T17604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 591.025010][T17604] Call Trace: [ 591.025015][T17604] [ 591.025021][T17604] dump_stack_lvl+0xe8/0x150 [ 591.025044][T17604] should_fail_ex+0x46b/0x600 [ 591.025063][T17604] strncpy_from_user+0x36/0x2c0 [ 591.025078][T17604] do_getname+0x77/0x250 [ 591.025097][T17604] vfs_fstatat+0x45/0x170 [ 591.025114][T17604] __x64_sys_newfstatat+0x151/0x200 [ 591.025130][T17604] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 591.025156][T17604] ? rcu_is_watching+0x16/0xb0 [ 591.025178][T17604] do_syscall_64+0x166/0x520 [ 591.025194][T17604] ? trace_irq_disable+0x3b/0x140 [ 591.025208][T17604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.025219][T17604] ? clear_bhb_loop+0x70/0xc0 [ 591.025232][T17604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.025242][T17604] RIP: 0033:0x7f401e62e159 [ 591.025252][T17604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.025262][T17604] RSP: 002b:00007f401c886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 591.025274][T17604] RAX: ffffffffffffffda RBX: 00007f401e8b5fa0 RCX: 00007f401e62e159 [ 591.025282][T17604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 591.025289][T17604] RBP: 00007f401e6c503b R08: 0000000000000000 R09: 0000000000000000 [ 591.025295][T17604] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000000 [ 591.025302][T17604] R13: 00007f401e8b6038 R14: 00007f401e8b5fa0 R15: 00007ffc620aa4e8 [ 591.025317][T17604] [ 591.265856][T17597] ALSA: mixer_oss: invalid OSS volume 'AF_VSOCK' [ 591.634465][T17615] netlink: 'syz.0.4778': attribute type 1 has an invalid length. [ 592.240284][T17633] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4785'. [ 592.348558][T17637] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 594.679610][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 594.679622][ T37] audit: type=1326 audit(1789458190.370:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17691 comm="syz.3.4814" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd47f1e159 code=0x0 [ 594.689020][T17688] ip6erspan0: entered allmulticast mode [ 594.716179][T17695] syzkaller1: entered promiscuous mode [ 594.716197][T17695] syzkaller1: entered allmulticast mode [ 595.746480][ T8853] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 595.970923][ T8853] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 595.970962][ T8853] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 595.971882][ T8853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.971895][ T8853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.972750][ T8853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.972763][ T8853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.973805][ T8853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.973959][ T8853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.974804][ T8853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.974817][ T8853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.975695][ T8853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.975708][ T8853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.977682][ T8853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.977696][ T8853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.978562][ T8853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.978575][ T8853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.979414][ T8853] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.979427][ T8853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 595.987591][ T8853] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 595.987608][ T8853] usb 6-1: Product: syz [ 595.987615][ T8853] usb 6-1: Manufacturer: syz [ 595.987623][ T8853] usb 6-1: SerialNumber: syz [ 596.004840][ T8853] usb 6-1: config 0 descriptor?? [ 596.060057][ T8853] yurex 6-1:0.0: Could not find endpoints [ 596.296493][ T5577] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 596.438402][T17725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.457919][ T5577] usb 3-1: Using ep0 maxpacket: 32 [ 596.458526][ T5577] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 596.459507][ T5577] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 596.459556][ T5577] usb 3-1: config 0 has no interface number 0 [ 596.459582][ T5577] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 596.459596][ T5577] usb 3-1: config 0 interface 85 has no altsetting 0 [ 596.461383][ T5577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.461396][ T5577] usb 3-1: Product: syz [ 596.461404][ T5577] usb 3-1: Manufacturer: syz [ 596.461412][ T5577] usb 3-1: SerialNumber: syz [ 596.475415][ T5577] usb 3-1: config 0 descriptor?? [ 597.090930][ T5577] appletouch 3-1:0.85: Geyser mode initialized. [ 597.099407][ T5577] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input26 [ 597.326589][ T8853] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 597.375423][ T5577] usb 3-1: USB disconnect, device number 27 [ 597.375508][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 597.490948][ T8853] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 597.491901][ T8853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.491919][ T8853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.491939][ T8853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.519267][ T8853] usb 7-1: config 0 descriptor?? [ 598.075010][ T8853] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 598.075035][ T8853] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 598.075051][ T8853] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 598.075067][ T8853] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 598.075082][ T8853] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 598.075097][ T8853] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 598.075112][ T8853] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 598.088060][ T8853] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 598.089326][ T5577] appletouch 3-1:0.85: input: appletouch disconnected [ 598.190640][ T8853] cp2112 0003:10C4:EA90.0017: Part Number: 0x00 Device Version: 0x00 [ 598.591064][ T8853] cp2112 0003:10C4:EA90.0017: error setting SMBus config [ 598.781235][ T8853] cp2112 0003:10C4:EA90.0017: probe with driver cp2112 failed with error -71 [ 598.835847][ T8853] usb 7-1: USB disconnect, device number 15 [ 598.927491][ T5577] usb 6-1: USB disconnect, device number 23 [ 599.347979][T17760] FAULT_INJECTION: forcing a failure. [ 599.347979][T17760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.348006][T17760] CPU: 0 UID: 0 PID: 17760 Comm: syz.2.4842 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 599.348023][T17760] Tainted: [L]=SOFTLOCKUP [ 599.348027][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 599.348033][T17760] Call Trace: [ 599.348038][T17760] [ 599.348044][T17760] dump_stack_lvl+0xe8/0x150 [ 599.348064][T17760] should_fail_ex+0x46b/0x600 [ 599.348082][T17760] _copy_from_user+0x2d/0xb0 [ 599.348098][T17760] copy_from_bpfptr+0x5c/0x90 [ 599.348151][T17760] bpf_prog_load+0xcdb/0x1c20 [ 599.348172][T17760] ? __pfx_bpf_prog_load+0x10/0x10 [ 599.348200][T17760] __sys_bpf+0xd0d/0xd90 [ 599.348219][T17760] ? __pfx___sys_bpf+0x10/0x10 [ 599.348235][T17760] ? do_futex+0x3e7/0x4e0 [ 599.348261][T17760] ? rcu_is_watching+0x16/0xb0 [ 599.348279][T17760] __x64_sys_bpf+0xba/0xd0 [ 599.348294][T17760] do_syscall_64+0x166/0x520 [ 599.348309][T17760] ? trace_irq_disable+0x3b/0x140 [ 599.348322][T17760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.348332][T17760] ? clear_bhb_loop+0x70/0xc0 [ 599.348344][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.348355][T17760] RIP: 0033:0x7f7b1b9de159 [ 599.348366][T17760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.348376][T17760] RSP: 002b:00007f7b19c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 599.348388][T17760] RAX: ffffffffffffffda RBX: 00007f7b1bc65fa0 RCX: 00007f7b1b9de159 [ 599.348396][T17760] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 599.348403][T17760] RBP: 00007f7b1ba7503b R08: 0000000000000000 R09: 0000000000000000 [ 599.348409][T17760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.348415][T17760] R13: 00007f7b1bc66038 R14: 00007f7b1bc65fa0 R15: 00007ffcf2087518 [ 599.348432][T17760] [ 599.805817][T17771] netlink: 'syz.0.4846': attribute type 5 has an invalid length. [ 599.805833][T17771] netlink: 'syz.0.4846': attribute type 9 has an invalid length. [ 599.805841][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4846'. [ 600.243950][T17782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4851'. [ 600.243968][T17782] netlink: 'syz.3.4851': attribute type 5 has an invalid length. [ 600.518917][T17791] loop0: detected capacity change from 0 to 7 [ 600.582686][T17791] Dev loop0: unable to read RDB block 7 [ 600.582721][T17791] loop0: unable to read partition table [ 600.582840][T17791] loop0: partition table beyond EOD, truncated [ 600.582862][T17791] loop_reread_partitions: partition scan of loop0 (þ被xü—ŸÑà– ) failed (rc=-5) [ 602.398806][T17822] loop4: detected capacity change from 0 to 7 [ 602.776500][T17822] Dev loop4: unable to read RDB block 7 [ 602.776533][T17822] loop4: AHDI p1 p2 p3 [ 602.776546][T17822] loop4: partition table partially beyond EOD, truncated [ 602.776710][T17822] loop4: p1 start 1601398130 is beyond EOD, truncated [ 602.776721][T17822] loop4: p2 start 1702059890 is beyond EOD, truncated [ 603.043992][T17832] Set syz1 is full, maxelem 2076 reached [ 604.672486][T17882] loop5: detected capacity change from 0 to 6 [ 604.872432][T17882] Dev loop5: unable to read RDB block 6 [ 604.872492][T17882] loop5: unable to read partition table [ 604.872617][T17882] loop5: partition table beyond EOD, truncated [ 604.872844][T17882] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 605.638995][T17908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4904'. [ 606.186655][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 606.342166][ T10] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 606.380688][ T10] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 606.380707][ T10] usb 3-1: config 0 has no interface number 0 [ 606.380733][ T10] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 606.380746][ T10] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 606.382733][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.382748][ T10] usb 3-1: Product: syz [ 606.382756][ T10] usb 3-1: Manufacturer: syz [ 606.382763][ T10] usb 3-1: SerialNumber: syz [ 606.406856][ T10] usb 3-1: config 0 descriptor?? [ 606.411162][T17917] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 606.430755][ T10] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 606.463855][ T10] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 606.759108][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 606.965083][ T10] usb 3-1: USB disconnect, device number 28 [ 607.107831][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 607.108313][ T10] cyberjack 3-1:0.69: device disconnected [ 608.017466][T17962] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 608.017484][T17962] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 608.017625][T17962] vhci_hcd vhci_hcd.0: Device attached [ 608.166758][T17964] vhci_hcd: connection closed [ 608.167864][ T1499] vhci_hcd vhci_hcd.2: stop threads [ 608.167882][ T1499] vhci_hcd vhci_hcd.2: release socket [ 608.167904][ T1499] vhci_hcd vhci_hcd.2: disconnect device [ 608.822625][T15042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.838018][ T5577] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 609.028701][ T5577] usb 7-1: Using ep0 maxpacket: 8 [ 609.029365][ T5577] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 609.030259][ T5577] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 609.030290][ T5577] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.030302][ T5577] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 609.030315][ T5577] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 609.030327][ T5577] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.030350][ T5577] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.263631][ T5577] usb 7-1: usb_control_msg returned -32 [ 609.263662][ T5577] usbtmc 7-1:16.0: can't read capabilities [ 609.848827][T17978] usb 7-1: usbtmc_ioctl_clear_out_halt returned -32 [ 610.295942][T15042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.279184][T15042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.635144][ T10] usb 7-1: USB disconnect, device number 16 [ 611.870755][ T5577] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 612.024617][T15042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.029796][ T5577] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 612.035860][ T5577] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.035878][ T5577] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.035890][ T5577] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 612.035913][ T5577] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.055615][ T5577] usb 6-1: config 0 descriptor?? [ 612.201136][T18038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4957'. [ 612.225172][T18036] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4955'. [ 612.505597][ T5577] playstation 0003:054C:09CC.0018: unknown main item tag 0x0 [ 612.505620][ T5577] playstation 0003:054C:09CC.0018: unknown main item tag 0x0 [ 612.505637][ T5577] playstation 0003:054C:09CC.0018: unknown main item tag 0x0 [ 612.505653][ T5577] playstation 0003:054C:09CC.0018: unknown main item tag 0x0 [ 612.505668][ T5577] playstation 0003:054C:09CC.0018: unknown main item tag 0x0 [ 612.505684][ T5577] playstation 0003:054C:09CC.0018: unknown main item tag 0x0 [ 612.566813][T18043] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4960'. [ 613.368897][ T5577] playstation 0003:054C:09CC.0018: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.5-1/input0 [ 613.427212][ T5577] playstation 0003:054C:09CC.0018: Invalid byte count transferred, expected 16 got 0 [ 613.427231][ T5577] playstation 0003:054C:09CC.0018: Failed to retrieve DualShock4 pairing info: -22 [ 613.427260][ T5577] playstation 0003:054C:09CC.0018: Failed to get MAC address from DualShock4 [ 613.427268][ T5577] playstation 0003:054C:09CC.0018: Failed to create dualshock4. [ 613.452985][ T5577] playstation 0003:054C:09CC.0018: probe with driver playstation failed with error -22 [ 613.643302][T18058] block nbd0: not configured, cannot reconfigure [ 613.692414][ T5577] usb 6-1: USB disconnect, device number 24 [ 615.746677][ T2255] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.520013][T18119] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4987'. [ 616.527451][ T68] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.258332][ T68] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.776658][ T5722] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 617.786531][ T5577] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 617.899201][T15042] bridge_slave_1: left allmulticast mode [ 617.899228][T15042] bridge_slave_1: left promiscuous mode [ 617.899403][T15042] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.927988][ T5722] usb 3-1: Using ep0 maxpacket: 32 [ 617.929102][ T5722] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 617.934343][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.934358][ T5722] usb 3-1: Product: syz [ 617.934366][ T5722] usb 3-1: Manufacturer: syz [ 617.934373][ T5722] usb 3-1: SerialNumber: syz [ 617.937787][ T5577] usb 7-1: Using ep0 maxpacket: 8 [ 617.938269][ T5577] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 617.939925][ T5577] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 617.939958][ T5577] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 617.939969][ T5577] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 617.939982][ T5577] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 617.939994][ T5577] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.940016][ T5577] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.978720][ T5722] usb 3-1: config 0 descriptor?? [ 618.087818][T15042] bridge_slave_0: left allmulticast mode [ 618.087843][T15042] bridge_slave_0: left promiscuous mode [ 618.090440][T15042] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.116793][ T5722] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 618.780260][T18173] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 619.119742][ T5722] gspca_ov534_9: reg_w failed -71 [ 619.416663][ T5722] gspca_ov534_9: Unknown sensor 0000 [ 619.416728][ T5722] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 619.431241][ T5722] usb 3-1: USB disconnect, device number 29 [ 620.585102][ T5722] usb 7-1: USB disconnect, device number 17 [ 621.165696][T15042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.172865][T15042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.188122][T15042] bond0 (unregistering): Released all slaves [ 621.371076][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 621.546531][ T2949] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.974445][T18231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5026'. [ 621.996840][T18231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5026'. [ 622.352481][T18239] ./dev/sda1: Can't lookup blockdev [ 623.856591][T18280] fuse: Bad value for 'fd' [ 623.863243][T18280] 9p: Bad value for 'wfdno' [ 624.332416][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.332459][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.468547][ T5250] 8021q: adding VLAN 0 to HW filter on device eth6 [ 624.522703][T18297] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 624.713005][T15042] hsr_slave_0: left promiscuous mode [ 624.729787][T15042] hsr_slave_1: left promiscuous mode [ 624.730505][T15042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.730521][T15042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.781101][T15042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.781121][T15042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.790562][T15042] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 624.790579][T15042] batman_adv: batadv0: Removing interface: ipvlan2 [ 624.904912][ T5577] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 625.118176][ T5577] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 625.119098][ T5577] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 625.119114][ T5577] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.119124][ T5577] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 625.119151][ T5577] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.120515][ T5577] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 625.120529][ T5577] usb 6-1: Product: syz [ 625.120537][ T5577] usb 6-1: Manufacturer: syz [ 625.130298][ T5577] cdc_wdm 6-1:1.0: skipping garbage [ 625.130310][ T5577] cdc_wdm 6-1:1.0: skipping garbage [ 625.388787][ T5577] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 625.388886][ T5577] cdc_wdm 6-1:1.0: Unknown control protocol [ 625.451498][ T5577] usb 6-1: USB disconnect, device number 25 [ 625.509842][T15042] veth1_macvtap: left promiscuous mode [ 625.509913][T15042] veth0_macvtap: left promiscuous mode [ 625.582535][T15042] veth1_vlan: left promiscuous mode [ 625.582679][T15042] veth0_vlan: left promiscuous mode [ 625.628193][ T8853] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 625.797063][ T8853] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 625.797992][ T8853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.798019][ T8853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.805696][ T8853] usb 7-1: config 0 descriptor?? [ 626.122779][ T8853] usbhid 7-1:0.0: can't add hid device: -71 [ 626.122855][ T8853] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 626.154322][ T8853] usb 7-1: USB disconnect, device number 18 [ 626.196505][ T5577] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 626.356938][ T5577] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 626.357878][ T5577] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 626.357894][ T5577] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.357904][ T5577] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 626.357942][ T5577] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.359256][ T5577] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 626.359270][ T5577] usb 6-1: Product: syz [ 626.359277][ T5577] usb 6-1: Manufacturer: syz [ 626.365494][ T5577] cdc_wdm 6-1:1.0: skipping garbage [ 626.365506][ T5577] cdc_wdm 6-1:1.0: skipping garbage [ 626.489255][ T5577] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 626.489270][ T5577] cdc_wdm 6-1:1.0: Unknown control protocol [ 626.618980][ T8853] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 626.768756][ T8853] usb 7-1: Using ep0 maxpacket: 32 [ 626.769663][ T8853] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 626.774833][ T8853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.774861][ T8853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.783566][ T8853] usb 7-1: config 0 descriptor?? [ 626.794196][ T8853] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 626.799510][ T8853] ldusb 7-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 627.053483][ C0] cdc_wdm 6-1:1.0: unknown notification 40 received: index 28499 len 42556 [ 627.464555][T18356] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.538258][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 627.538710][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 627.538807][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 627.538848][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 627.548834][ T8853] usb 6-1: USB disconnect, device number 26 [ 627.654755][ T5577] usb 7-1: USB disconnect, device number 19 [ 627.676157][ T5577] ldusb 7-1:0.0: LD USB Device #1 now disconnected [ 628.799467][T15042] team0 (unregistering): Port device team_slave_1 removed [ 628.812790][T15042] team0 (unregistering): Port device team_slave_0 removed [ 629.113512][T18334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.140677][T18334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.221732][ T5250] 8021q: adding VLAN 0 to HW filter on device eth7 [ 629.248048][T18371] syzkaller1: entered promiscuous mode [ 629.248065][T18371] syzkaller1: entered allmulticast mode [ 630.008561][T18396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.313927][T18415] syzkaller1: entered promiscuous mode [ 631.313946][T18415] syzkaller1: entered allmulticast mode [ 632.311233][T18456] netlink: 'syz.2.5098': attribute type 1 has an invalid length. [ 632.311250][T18456] netlink: 'syz.2.5098': attribute type 2 has an invalid length. [ 632.443980][T18460] bridge0: port 3(syz_tun) entered blocking state [ 632.444056][T18460] bridge0: port 3(syz_tun) entered disabled state [ 632.450917][T18460] syz_tun: entered promiscuous mode [ 632.525793][T18462] netlink: 'syz.3.5102': attribute type 2 has an invalid length. [ 632.525811][T18462] netlink: 'syz.3.5102': attribute type 2 has an invalid length. [ 632.525818][T18462] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 632.541205][T18460] bridge0: port 3(syz_tun) entered blocking state [ 632.541829][T18460] bridge0: port 3(syz_tun) entered forwarding state [ 632.738133][T18470] netlink: 'syz.0.5105': attribute type 10 has an invalid length. [ 634.203935][ T5250] 8021q: adding VLAN 0 to HW filter on device eth8 [ 634.340252][ T68] bridge0: port 3(syz_tun) entered disabled state [ 635.332057][ T5722] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 635.548174][ T5722] usb 6-1: Using ep0 maxpacket: 32 [ 635.558286][ T5722] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 635.559183][ T5722] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 635.559208][ T5722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.559221][ T5722] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 635.559251][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.572447][ T5722] usb 6-1: config 0 descriptor?? [ 636.063464][ T5722] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x1 [ 636.063488][ T5722] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x0 [ 636.063505][ T5722] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x4 [ 636.715981][ T5722] usb 6-1: USB disconnect, device number 27 [ 636.785052][T18562] FAULT_INJECTION: forcing a failure. [ 636.785052][T18562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.785078][T18562] CPU: 0 UID: 0 PID: 18562 Comm: syz.6.5139 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 636.785095][T18562] Tainted: [L]=SOFTLOCKUP [ 636.785099][T18562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 636.785106][T18562] Call Trace: [ 636.785117][T18562] [ 636.785123][T18562] dump_stack_lvl+0xe8/0x150 [ 636.785145][T18562] should_fail_ex+0x46b/0x600 [ 636.785162][T18562] _copy_from_user+0x2d/0xb0 [ 636.785178][T18562] __x64_sys_mq_getsetattr+0x145/0x270 [ 636.785194][T18562] ? __pfx___x64_sys_mq_getsetattr+0x10/0x10 [ 636.785219][T18562] do_syscall_64+0x166/0x520 [ 636.785234][T18562] ? trace_irq_disable+0x3b/0x140 [ 636.785246][T18562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.785257][T18562] ? clear_bhb_loop+0x70/0xc0 [ 636.785270][T18562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.785281][T18562] RIP: 0033:0x7f0d134ae159 [ 636.785292][T18562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.785301][T18562] RSP: 002b:00007f0d11706028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f5 [ 636.785314][T18562] RAX: ffffffffffffffda RBX: 00007f0d13735fa0 RCX: 00007f0d134ae159 [ 636.785321][T18562] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffffff [ 636.785328][T18562] RBP: 00007f0d1354503b R08: 0000000000000000 R09: 0000000000000000 [ 636.785335][T18562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.785341][T18562] R13: 00007f0d13736038 R14: 00007f0d13735fa0 R15: 00007ffc4797d368 [ 636.785356][T18562] [ 639.228212][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 639.439932][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 639.440495][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 639.441870][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.441901][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 639.441913][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 639.442783][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 639.442795][ T9] usb 6-1: Manufacturer: syz [ 639.469153][ T9] usb 6-1: config 0 descriptor?? [ 639.682340][ T5722] usb 6-1: USB disconnect, device number 28 [ 640.083380][T18658] tipc: Started in network mode [ 640.083400][T18658] tipc: Node identity ac1414aa, cluster identity 4711 [ 640.114876][T18658] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.114902][T18658] tipc: Enabled bearer , priority 10 [ 640.246512][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.386480][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.426465][ T5722] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 640.526660][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.576965][ T5722] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 640.580413][ T5722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.580429][ T5722] usb 7-1: Product: syz [ 640.580437][ T5722] usb 7-1: Manufacturer: syz [ 640.580445][ T5722] usb 7-1: SerialNumber: syz [ 640.631097][ T5722] usb 7-1: config 0 descriptor?? [ 640.666503][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.806426][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.946557][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 641.087031][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 641.226530][ T8853] tipc: Node number set to 2886997162 [ 641.254324][ T5722] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 020 [ 641.366490][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 641.534908][T18697] FAULT_INJECTION: forcing a failure. [ 641.534908][T18697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.534934][T18697] CPU: 0 UID: 0 PID: 18697 Comm: syz.5.5197 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 641.534949][T18697] Tainted: [L]=SOFTLOCKUP [ 641.534954][T18697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 641.534962][T18697] Call Trace: [ 641.534967][T18697] [ 641.534974][T18697] dump_stack_lvl+0xe8/0x150 [ 641.534996][T18697] should_fail_ex+0x46b/0x600 [ 641.535014][T18697] _copy_from_user+0x2d/0xb0 [ 641.535029][T18697] get_itimerspec64+0x1ca/0x310 [ 641.535077][T18697] ? __pfx_get_itimerspec64+0x10/0x10 [ 641.535095][T18697] ? __pfx_do_futex+0x10/0x10 [ 641.535109][T18697] __x64_sys_timer_settime+0x15c/0x270 [ 641.535122][T18697] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 641.535143][T18697] do_syscall_64+0x166/0x520 [ 641.535157][T18697] ? trace_irq_disable+0x3b/0x140 [ 641.535170][T18697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.535181][T18697] ? clear_bhb_loop+0x70/0xc0 [ 641.535194][T18697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.535205][T18697] RIP: 0033:0x7f401e62e159 [ 641.535216][T18697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.535226][T18697] RSP: 002b:00007f401c886028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 641.535238][T18697] RAX: ffffffffffffffda RBX: 00007f401e8b5fa0 RCX: 00007f401e62e159 [ 641.535246][T18697] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 641.535253][T18697] RBP: 00007f401e6c503b R08: 0000000000000000 R09: 0000000000000000 [ 641.535259][T18697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.535265][T18697] R13: 00007f401e8b6038 R14: 00007f401e8b5fa0 R15: 00007ffc620aa4e8 [ 641.535281][T18697] [ 641.636472][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 641.836461][ T5722] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 641.987017][ T5722] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 641.988255][ T5722] usb 3-1: config index 0 descriptor too short (expected 64906, got 45) [ 641.990249][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.990271][ T5722] usb 3-1: Product: syz [ 641.990279][ T5722] usb 3-1: Manufacturer: syz [ 641.990286][ T5722] usb 3-1: SerialNumber: syz [ 642.490657][ T5722] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 642.490676][ T5722] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 642.554035][T18706] Process accounting resumed [ 642.578471][ T5722] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 642.641233][ T5722] usb 3-1: USB disconnect, device number 30 [ 643.206042][T18722] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 643.728918][T18694] i2c i2c-1: failure sending STOP [ 643.931719][ T9] usb 7-1: USB disconnect, device number 20 [ 644.952310][T18756] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5219'. [ 645.326491][ C0] net_ratelimit: 4 callbacks suppressed [ 645.326580][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 645.613455][T18773] IPVS: Scheduler module ip_vs_ not found [ 646.138797][T18792] netlink: 428 bytes leftover after parsing attributes in process `syz.3.5235'. [ 646.138823][T18792] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5235'. [ 646.366526][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 646.645953][T18817] overlayfs: failed to clone lowerpath [ 647.406430][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 648.446787][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 648.676484][ T5722] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 648.826996][ T5722] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 648.828073][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.832633][ T5722] usb 3-1: config 0 descriptor?? [ 649.067686][ T5722] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 649.486427][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 649.681796][ T5722] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 649.681814][ T5722] [drm] Initialized udl on minor 1 [ 649.683538][ T5722] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 649.685419][ T5722] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 649.855022][ T5722] usb 3-1: USB disconnect, device number 31 [ 649.969550][T18903] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5273'. [ 650.014452][T18903] ipvlan2: entered allmulticast mode [ 650.014467][T18903] syz_tun: entered allmulticast mode [ 650.438370][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5279'. [ 650.526617][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 650.736484][ T5722] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 650.886957][ T5722] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 650.891977][ T5722] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 650.891994][ T5722] usb 3-1: config 0 has no interface number 0 [ 650.892018][ T5722] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 650.892031][ T5722] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 650.892045][ T5722] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 650.892058][ T5722] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 650.892072][ T5722] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 650.892084][ T5722] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 650.892107][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.913869][ T5722] usb 3-1: config 0 descriptor?? [ 650.914307][T18914] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 650.914385][T18914] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 651.108603][ T5722] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 651.382810][ T5722] usb 3-1: USB disconnect, device number 32 [ 651.382872][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 651.548490][ T5722] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 651.566505][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 651.958205][ T68] IPVS: starting estimator thread 0... [ 652.048897][T18963] IPVS: using max 15 ests per chain, 36000 per kthread [ 652.606479][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 652.705544][ T37] audit: type=1326 audit(1789458248.390:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18992 comm="syz.3.5304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 652.705578][ T37] audit: type=1326 audit(1789458248.390:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18992 comm="syz.3.5304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 652.706044][ T37] audit: type=1326 audit(1789458248.390:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18992 comm="syz.3.5304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 652.706070][ T37] audit: type=1326 audit(1789458248.390:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18992 comm="syz.3.5304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 652.707561][ T37] audit: type=1326 audit(1789458248.390:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18992 comm="syz.3.5304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 652.707766][ T37] audit: type=1326 audit(1789458248.390:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18992 comm="syz.3.5304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 652.707791][ T37] audit: type=1326 audit(1789458248.400:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18992 comm="syz.3.5304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 652.718798][ T37] audit: type=1326 audit(1789458248.410:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18992 comm="syz.3.5304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 652.718829][ T37] audit: type=1326 audit(1789458248.410:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18992 comm="syz.3.5304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 652.734214][ T37] audit: type=1326 audit(1789458248.420:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18992 comm="syz.3.5304" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 652.809243][T18995] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 653.646434][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 653.658386][T19019] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5313'. [ 654.689548][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 654.924288][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5325'. [ 654.924333][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5325'. [ 655.726484][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 655.762441][T19074] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 656.766536][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 657.603648][T19126] overlayfs: failed to clone lowerpath [ 657.806518][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 657.924481][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5356'. [ 658.486470][T19085] kexec: Could not allocate control_code_buffer [ 658.846549][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 658.967158][ T200] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 659.133085][T19158] ip6gretap1: entered allmulticast mode [ 659.159321][ T200] usb 6-1: Using ep0 maxpacket: 32 [ 659.159850][ T200] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 659.160828][ T200] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 659.160843][ T200] usb 6-1: config 2 has no interface number 0 [ 659.160867][ T200] usb 6-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 659.160881][ T200] usb 6-1: config 2 interface 88 has no altsetting 0 [ 659.164585][ T200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 659.164600][ T200] usb 6-1: Product: syz [ 659.164608][ T200] usb 6-1: Manufacturer: syz [ 659.164615][ T200] usb 6-1: SerialNumber: syz [ 659.177799][T19156] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 659.275804][T19158] batman_adv: batadv0: Adding interface: ip6gretap1 [ 659.275818][T19158] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.275838][T19158] batman_adv: batadv0: Interface activated: ip6gretap1 [ 659.440387][T19156] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 659.612955][T19164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5372'. [ 659.886494][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 660.266776][ T200] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 660.266797][ T200] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 660.266974][ T200] asix 6-1:2.88: probe with driver asix failed with error -71 [ 660.284827][ T200] usb 6-1: USB disconnect, device number 29 [ 660.430909][T19186] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 660.926547][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 661.511944][T19206] fuse: Bad value for 'fd' [ 661.966559][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 662.664059][T19238] syz.3.5400 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 662.739672][T19239] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5399'. [ 662.739691][T19239] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5399'. [ 662.739700][T19239] netlink: 'syz.6.5399': attribute type 5 has an invalid length. [ 662.739707][T19239] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5399'. [ 663.006482][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 663.091523][T19250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 664.046468][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 664.223784][T19272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5414'. [ 664.231587][T19272] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5414'. [ 664.698179][T19294] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5423'. [ 664.837409][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 664.987644][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 664.988205][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 664.989244][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.043748][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 665.086504][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 665.556738][ T8853] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 665.726722][ T8853] usb 7-1: Using ep0 maxpacket: 16 [ 665.728871][ T8853] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 665.731192][ T8853] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.731211][ T8853] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 665.731223][ T8853] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 665.731236][ T8853] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 665.732214][ T8853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 665.732228][ T8853] usb 7-1: SerialNumber: syz [ 665.801853][T19303] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 665.801936][T19303] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 665.813496][ T8853] hub 7-1:1.0: bad descriptor, ignoring hub [ 665.813520][ T8853] hub 7-1:1.0: probe with driver hub failed with error -5 [ 665.902547][T19312] sctp: [Deprecated]: syz.3.5432 (pid 19312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 665.902547][T19312] Use struct sctp_sack_info instead [ 666.058768][T19303] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 666.058861][T19303] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 666.126495][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 666.139485][ T9] gspca_nw80x: reg_w err -71 [ 666.139579][ T9] nw80x 3-1:3.0: probe with driver nw80x failed with error -71 [ 666.151890][ T9] usb 3-1: USB disconnect, device number 33 [ 667.166570][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 667.620534][ T8853] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 667.798264][ T8853] usb 7-1: USB disconnect, device number 21 [ 667.812976][ T8853] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 668.033596][T19335] veth1_to_bond: entered allmulticast mode [ 668.035302][T19336] veth1_to_bond: entered promiscuous mode [ 668.206487][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 668.872571][T19339] veth1_to_bond: left promiscuous mode [ 668.875936][T19339] veth1_to_bond: left allmulticast mode [ 669.246550][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 669.294261][T19382] FAULT_INJECTION: forcing a failure. [ 669.294261][T19382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.294285][T19382] CPU: 0 UID: 0 PID: 19382 Comm: syz.3.5458 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 669.294301][T19382] Tainted: [L]=SOFTLOCKUP [ 669.294305][T19382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 669.294313][T19382] Call Trace: [ 669.294318][T19382] [ 669.294323][T19382] dump_stack_lvl+0xe8/0x150 [ 669.294345][T19382] should_fail_ex+0x46b/0x600 [ 669.294362][T19382] _copy_from_user+0x2d/0xb0 [ 669.294378][T19382] futex_parse_waitv+0x101/0x420 [ 669.294391][T19382] ? __pfx_futex_wake_mark+0x10/0x10 [ 669.294403][T19382] ? __pfx_futex_parse_waitv+0x10/0x10 [ 669.294414][T19382] ? __kmalloc_noprof+0x43e/0x790 [ 669.294430][T19382] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 669.294439][T19382] ? __se_sys_futex_waitv+0x19b/0x2c0 [ 669.294453][T19382] __se_sys_futex_waitv+0x1bd/0x2c0 [ 669.294465][T19382] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 669.294484][T19382] ? __x64_sys_futex_waitv+0x20/0xc0 [ 669.294495][T19382] do_syscall_64+0x166/0x520 [ 669.294511][T19382] ? trace_irq_disable+0x3b/0x140 [ 669.294523][T19382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.294534][T19382] ? clear_bhb_loop+0x70/0xc0 [ 669.294546][T19382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.294556][T19382] RIP: 0033:0x7fbd47f1e159 [ 669.294567][T19382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.294576][T19382] RSP: 002b:00007fbd46176028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 669.294588][T19382] RAX: ffffffffffffffda RBX: 00007fbd481a5fa0 RCX: 00007fbd47f1e159 [ 669.294596][T19382] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000002dc0 [ 669.294603][T19382] RBP: 00007fbd47fb503b R08: 0000000000000000 R09: 0000000000000000 [ 669.294609][T19382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.294615][T19382] R13: 00007fbd481a6038 R14: 00007fbd481a5fa0 R15: 00007ffe0034ce48 [ 669.294632][T19382] [ 669.330214][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5459'. [ 669.330236][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5459'. [ 670.241222][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 670.241235][ T37] audit: type=1326 audit(1789458265.930:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19415 comm="syz.6.5471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 670.241263][ T37] audit: type=1326 audit(1789458265.930:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19415 comm="syz.6.5471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 670.259527][ T37] audit: type=1326 audit(1789458265.950:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19415 comm="syz.6.5471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 670.259560][ T37] audit: type=1326 audit(1789458265.950:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19415 comm="syz.6.5471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 670.260220][ T37] audit: type=1326 audit(1789458265.950:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19415 comm="syz.6.5471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 670.260428][ T37] audit: type=1326 audit(1789458265.950:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19415 comm="syz.6.5471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 670.260817][ T37] audit: type=1326 audit(1789458265.950:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19415 comm="syz.6.5471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 670.260842][ T37] audit: type=1326 audit(1789458265.950:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19415 comm="syz.6.5471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 670.265973][ T37] audit: type=1326 audit(1789458265.950:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19415 comm="syz.6.5471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 670.266195][ T37] audit: type=1326 audit(1789458265.950:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19415 comm="syz.6.5471" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 670.286478][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 670.855012][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5481'. [ 671.222253][T19450] ./dev/sda1: Can't lookup blockdev [ 671.251500][T19451] FAULT_INJECTION: forcing a failure. [ 671.251500][T19451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.251527][T19451] CPU: 0 UID: 0 PID: 19451 Comm: syz.6.5488 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 671.251552][T19451] Tainted: [L]=SOFTLOCKUP [ 671.251556][T19451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 671.251564][T19451] Call Trace: [ 671.251569][T19451] [ 671.251575][T19451] dump_stack_lvl+0xe8/0x150 [ 671.251596][T19451] should_fail_ex+0x46b/0x600 [ 671.251615][T19451] _copy_from_user+0x2d/0xb0 [ 671.251630][T19451] kstrtouint_from_user+0xd6/0x180 [ 671.251644][T19451] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 671.251661][T19451] ? lock_acquire+0x115/0x350 [ 671.251677][T19451] proc_fail_nth_write+0x8e/0x210 [ 671.251720][T19451] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 671.251737][T19451] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 671.251751][T19451] vfs_write+0x29f/0xbb0 [ 671.251769][T19451] ? __pfx_vfs_write+0x10/0x10 [ 671.251783][T19451] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 671.251800][T19451] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 671.251814][T19451] ? mutex_lock_nested+0x152/0x1d0 [ 671.251825][T19451] ? fdget_pos+0x252/0x320 [ 671.251840][T19451] ksys_write+0x156/0x270 [ 671.251854][T19451] ? __pfx_ksys_write+0x10/0x10 [ 671.251872][T19451] do_syscall_64+0x166/0x520 [ 671.251887][T19451] ? trace_irq_disable+0x3b/0x140 [ 671.251899][T19451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.251910][T19451] ? clear_bhb_loop+0x70/0xc0 [ 671.251923][T19451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.251933][T19451] RIP: 0033:0x7f0d134ae159 [ 671.251945][T19451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.251954][T19451] RSP: 002b:00007f0d11706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 671.251967][T19451] RAX: ffffffffffffffda RBX: 00007f0d13735fa0 RCX: 00007f0d134ae159 [ 671.251975][T19451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 671.251981][T19451] RBP: 00007f0d1354503b R08: 0000000000000000 R09: 0000000000000000 [ 671.251988][T19451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.251994][T19451] R13: 00007f0d13736038 R14: 00007f0d13735fa0 R15: 00007ffc4797d368 [ 671.252011][T19451] [ 671.326535][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 671.701822][T19466] netlink: 'syz.2.5496': attribute type 12 has an invalid length. [ 671.701837][T19466] netlink: 'syz.2.5496': attribute type 29 has an invalid length. [ 671.701845][T19466] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5496'. [ 671.701868][T19466] netlink: 'syz.2.5496': attribute type 1 has an invalid length. [ 672.366534][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 672.564000][T19485] Process accounting paused [ 672.656298][T19491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5508'. [ 672.656740][T19491] netlink: 'syz.3.5508': attribute type 7 has an invalid length. [ 672.656750][T19491] netlink: 'syz.3.5508': attribute type 8 has an invalid length. [ 672.656757][T19491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5508'. [ 672.816557][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 672.988475][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 672.991235][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.991251][ T9] usb 7-1: Product: syz [ 672.991258][ T9] usb 7-1: Manufacturer: syz [ 672.991266][ T9] usb 7-1: SerialNumber: syz [ 673.410891][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 673.447886][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 673.447924][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 673.859579][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 673.859615][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 673.860312][ T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 673.864174][ T8854] libceph: connect (1)127.0.0.1:6789 error -101 [ 673.878231][ T9] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 674.009395][ T8854] libceph: mon0 (1)127.0.0.1:6789 connect error [ 674.024490][ T8854] libceph: connect (1)127.0.0.1:6789 error -101 [ 674.024623][ T8854] libceph: mon0 (1)127.0.0.1:6789 connect error [ 674.082781][ T9] usb 7-1: USB disconnect, device number 22 [ 674.212821][T19505] ceph: No mds server is up or the cluster is laggy [ 674.277836][ T8854] libceph: connect (1)127.0.0.1:6789 error -101 [ 674.277967][ T8854] libceph: mon0 (1)127.0.0.1:6789 connect error [ 674.446481][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 675.298875][T19546] FAULT_INJECTION: forcing a failure. [ 675.298875][T19546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.298900][T19546] CPU: 0 UID: 0 PID: 19546 Comm: syz.3.5531 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 675.298916][T19546] Tainted: [L]=SOFTLOCKUP [ 675.298920][T19546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 675.298927][T19546] Call Trace: [ 675.298932][T19546] [ 675.298938][T19546] dump_stack_lvl+0xe8/0x150 [ 675.298960][T19546] should_fail_ex+0x46b/0x600 [ 675.298977][T19546] _copy_from_user+0x2d/0xb0 [ 675.298992][T19546] __se_sys_rt_tgsigqueueinfo+0xdf/0x510 [ 675.299007][T19546] ? __pfx___se_sys_rt_tgsigqueueinfo+0x10/0x10 [ 675.299019][T19546] ? __se_sys_futex+0x3a8/0x450 [ 675.299042][T19546] do_syscall_64+0x166/0x520 [ 675.299056][T19546] ? trace_irq_disable+0x3b/0x140 [ 675.299070][T19546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.299080][T19546] ? clear_bhb_loop+0x70/0xc0 [ 675.299093][T19546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.299104][T19546] RIP: 0033:0x7fbd47f1e159 [ 675.299115][T19546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.299124][T19546] RSP: 002b:00007fbd46176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 675.299136][T19546] RAX: ffffffffffffffda RBX: 00007fbd481a5fa0 RCX: 00007fbd47f1e159 [ 675.299144][T19546] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 675.299150][T19546] RBP: 00007fbd47fb503b R08: 0000000000000000 R09: 0000000000000000 [ 675.299156][T19546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.299162][T19546] R13: 00007fbd481a6038 R14: 00007fbd481a5fa0 R15: 00007ffe0034ce48 [ 675.299179][T19546] [ 675.490535][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 675.738667][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 675.738681][ T37] audit: type=1800 audit(1789458271.400:389): pid=19557 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.5536" name="file1" dev="tmpfs" ino=2669 res=0 errno=0 [ 675.931312][T19563] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5538'. [ 675.947548][ T37] audit: type=1326 audit(1789458271.630:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19562 comm="syz.2.5539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1b9de159 code=0x7ffc0000 [ 675.947587][ T37] audit: type=1326 audit(1789458271.630:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19562 comm="syz.2.5539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1b9de159 code=0x7ffc0000 [ 675.947610][ T37] audit: type=1326 audit(1789458271.630:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19562 comm="syz.2.5539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1b9de159 code=0x7ffc0000 [ 675.947635][ T37] audit: type=1326 audit(1789458271.630:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19562 comm="syz.2.5539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1b9de159 code=0x7ffc0000 [ 675.947656][ T37] audit: type=1326 audit(1789458271.630:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19562 comm="syz.2.5539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7b1b9de159 code=0x7ffc0000 [ 675.947739][ T37] audit: type=1326 audit(1789458271.630:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19562 comm="syz.2.5539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1b9de159 code=0x7ffc0000 [ 675.947764][ T37] audit: type=1326 audit(1789458271.630:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19562 comm="syz.2.5539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1b9de159 code=0x7ffc0000 [ 675.947786][ T37] audit: type=1326 audit(1789458271.630:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19562 comm="syz.2.5539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1b9de159 code=0x7ffc0000 [ 675.947807][ T37] audit: type=1326 audit(1789458271.630:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19562 comm="syz.2.5539" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1b9de159 code=0x7ffc0000 [ 676.526452][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 676.574908][T19589] loop8: detected capacity change from 0 to 7 [ 676.589580][T19589] Dev loop8: unable to read RDB block 7 [ 676.589612][T19589] loop8: unable to read partition table [ 676.589729][T19589] loop8: partition table beyond EOD, truncated [ 676.592025][T19589] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 676.949810][T19598] sg_write: data in/out 397276/136 bytes for SCSI command 0x0-- guessing data in; [ 676.949810][T19598] program syz.2.5555 not setting count and/or reply_len properly [ 677.298005][T19609] FAULT_INJECTION: forcing a failure. [ 677.298005][T19609] name fail_futex, interval 1, probability 0, space 0, times 0 [ 677.298031][T19609] CPU: 0 UID: 0 PID: 19609 Comm: syz.5.5560 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 677.298047][T19609] Tainted: [L]=SOFTLOCKUP [ 677.298051][T19609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 677.298058][T19609] Call Trace: [ 677.298063][T19609] [ 677.298068][T19609] dump_stack_lvl+0xe8/0x150 [ 677.298090][T19609] should_fail_ex+0x46b/0x600 [ 677.298107][T19609] get_futex_key+0x1b4/0x1580 [ 677.298128][T19609] ? __pfx_get_futex_key+0x10/0x10 [ 677.298145][T19609] ? update_se+0x90/0xef0 [ 677.298163][T19609] futex_wait_setup+0x4a/0x590 [ 677.298178][T19609] ? __futex_wait+0xe1/0x410 [ 677.298193][T19609] __futex_wait+0x161/0x410 [ 677.298208][T19609] ? __pfx___futex_wait+0x10/0x10 [ 677.298227][T19609] ? __pfx_futex_wake_mark+0x10/0x10 [ 677.298241][T19609] ? try_to_wake_up+0x84b/0x1430 [ 677.298259][T19609] futex_wait+0x121/0x390 [ 677.298272][T19609] ? __pfx_futex_wait+0x10/0x10 [ 677.298298][T19609] do_futex+0x3e7/0x4e0 [ 677.298311][T19609] ? __pfx_do_futex+0x10/0x10 [ 677.298325][T19609] __se_sys_futex+0x3a8/0x450 [ 677.298338][T19609] ? __pfx___se_sys_futex+0x10/0x10 [ 677.298348][T19609] ? rcu_is_watching+0x16/0xb0 [ 677.298366][T19609] ? __x64_sys_futex+0x21/0xf0 [ 677.298377][T19609] do_syscall_64+0x166/0x520 [ 677.298392][T19609] ? trace_irq_disable+0x3b/0x140 [ 677.298405][T19609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.298416][T19609] ? clear_bhb_loop+0x70/0xc0 [ 677.298428][T19609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.298438][T19609] RIP: 0033:0x7f401e62e159 [ 677.298450][T19609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.298459][T19609] RSP: 002b:00007f401c8860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 677.298471][T19609] RAX: ffffffffffffffda RBX: 00007f401e8b5fa8 RCX: 00007f401e62e159 [ 677.298479][T19609] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f401e8b5fa8 [ 677.298485][T19609] RBP: 00007f401e8b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 677.298492][T19609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.298498][T19609] R13: 00007f401e8b6038 R14: 00007ffc620aa400 R15: 00007ffc620aa4e8 [ 677.298514][T19609] [ 677.568214][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 678.506507][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 678.606413][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 678.633667][T19629] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 678.656894][ T9] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 678.657809][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 678.657824][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 678.657844][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.251918][ T8854] usb 7-1: USB disconnect, device number 23 [ 679.648001][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 680.071925][T19686] MTRR 3 not used [ 680.686419][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 680.996448][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 681.153988][ T9] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 681.155145][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.155163][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.155184][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.172128][ T9] usb 7-1: config 0 descriptor?? [ 681.608009][ T9] playstation 0003:054C:0DF2.001A: unknown main item tag 0x0 [ 681.608034][ T9] playstation 0003:054C:0DF2.001A: unknown main item tag 0x0 [ 681.608051][ T9] playstation 0003:054C:0DF2.001A: unknown main item tag 0x0 [ 681.608067][ T9] playstation 0003:054C:0DF2.001A: unknown main item tag 0x0 [ 681.608082][ T9] playstation 0003:054C:0DF2.001A: unknown main item tag 0x0 [ 681.625237][ T9] playstation 0003:054C:0DF2.001A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 681.726443][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 681.832566][ T9] playstation 0003:054C:0DF2.001A: Invalid reportID received, expected 9 got 0 [ 681.832585][ T9] playstation 0003:054C:0DF2.001A: Failed to retrieve DualSense pairing info: -22 [ 681.832615][ T9] playstation 0003:054C:0DF2.001A: Failed to get MAC address from DualSense [ 681.832623][ T9] playstation 0003:054C:0DF2.001A: Failed to create dualsense. [ 681.841861][ T9] playstation 0003:054C:0DF2.001A: probe with driver playstation failed with error -22 [ 682.062992][ T8854] usb 7-1: USB disconnect, device number 24 [ 682.350868][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 682.361598][T19738] bridge1: entered promiscuous mode [ 682.361616][T19738] bridge1: entered allmulticast mode [ 682.517226][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 682.522618][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 682.545291][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.545309][ T9] usb 3-1: Product: syz [ 682.545317][ T9] usb 3-1: Manufacturer: syz [ 682.545324][ T9] usb 3-1: SerialNumber: syz [ 682.567685][ T9] usb 3-1: config 0 descriptor?? [ 682.590621][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 682.741936][T19738] team0: Port device bridge1 added [ 682.768460][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 682.966456][T19743] bridge0: port 3(team0) entered blocking state [ 683.036559][T19743] bridge0: port 3(team0) entered disabled state [ 683.047808][T19743] team0: entered allmulticast mode [ 683.047823][T19743] team_slave_0: entered allmulticast mode [ 683.149204][T19743] team_slave_1: entered allmulticast mode [ 683.664278][T19743] team0: entered promiscuous mode [ 683.665969][T19743] team_slave_0: entered promiscuous mode [ 683.666097][T19743] team_slave_1: entered promiscuous mode [ 683.669686][ T9] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 683.669762][ T9] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 683.693428][ T9] usb 3-1: USB disconnect, device number 34 [ 683.809661][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 684.512894][T19775] team0: No ports can be present during mode change [ 684.846442][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 685.296179][T19799] FAULT_INJECTION: forcing a failure. [ 685.296179][T19799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.296208][T19799] CPU: 0 UID: 0 PID: 19799 Comm: syz.3.5637 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 685.296224][T19799] Tainted: [L]=SOFTLOCKUP [ 685.296228][T19799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 685.296235][T19799] Call Trace: [ 685.296240][T19799] [ 685.296245][T19799] dump_stack_lvl+0xe8/0x150 [ 685.296267][T19799] should_fail_ex+0x46b/0x600 [ 685.296284][T19799] set_fd_set+0x3a/0xa0 [ 685.296303][T19799] core_sys_select+0x9c3/0xb40 [ 685.296325][T19799] ? __pfx_core_sys_select+0x10/0x10 [ 685.296339][T19799] ? reacquire_held_locks+0x117/0x1a0 [ 685.296367][T19799] ? __pfx_set_user_sigmask+0x10/0x10 [ 685.296381][T19799] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 685.296398][T19799] __se_sys_pselect6+0x267/0x320 [ 685.296416][T19799] ? __pfx___se_sys_pselect6+0x10/0x10 [ 685.296435][T19799] ? __x64_sys_pselect6+0x21/0xf0 [ 685.296451][T19799] do_syscall_64+0x166/0x520 [ 685.296465][T19799] ? trace_irq_disable+0x3b/0x140 [ 685.296477][T19799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.296488][T19799] ? clear_bhb_loop+0x70/0xc0 [ 685.296501][T19799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.296513][T19799] RIP: 0033:0x7fbd47f1e159 [ 685.296525][T19799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.296534][T19799] RSP: 002b:00007fbd46176028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 685.296547][T19799] RAX: ffffffffffffffda RBX: 00007fbd481a5fa0 RCX: 00007fbd47f1e159 [ 685.296554][T19799] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 685.296561][T19799] RBP: 00007fbd47fb503b R08: 0000200000000280 R09: 0000200000000300 [ 685.296568][T19799] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 685.296574][T19799] R13: 00007fbd481a6038 R14: 00007fbd481a5fa0 R15: 00007ffe0034ce48 [ 685.296591][T19799] [ 685.728189][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.728232][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.886422][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 686.612351][T19833] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 686.926441][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 687.789975][T19853] loop5: detected capacity change from 0 to 7 [ 687.793397][T19853] loop5: [POWERTEC] [ 687.966425][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 688.694704][T19875] netlink: 'syz.3.5669': attribute type 2 has an invalid length. [ 688.694721][T19875] netlink: 'syz.3.5669': attribute type 1 has an invalid length. [ 688.694729][T19875] netlink: 'syz.3.5669': attribute type 2 has an invalid length. [ 688.694735][T19875] netlink: 'syz.3.5669': attribute type 1 has an invalid length. [ 688.694742][T19875] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 689.006452][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 689.065259][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5675'. [ 689.065284][T19888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5675'. [ 690.046454][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 690.336468][ T8853] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 690.416452][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 690.489645][ T8853] usb 7-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=80.16 [ 690.490585][ T8853] usb 7-1: config 2 has an invalid interface number: 49 but max is 1 [ 690.490600][ T8853] usb 7-1: config 2 has an invalid interface number: 116 but max is 1 [ 690.490611][ T8853] usb 7-1: config 2 has no interface number 0 [ 690.490619][ T8853] usb 7-1: config 2 has no interface number 1 [ 690.490649][ T8853] usb 7-1: config 2 interface 116 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 690.490664][ T8853] usb 7-1: config 2 interface 116 altsetting 10 endpoint 0x84 has invalid maxpacket 62055, setting to 64 [ 690.490678][ T8853] usb 7-1: config 2 interface 116 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 690.490692][ T8853] usb 7-1: config 2 interface 49 has no altsetting 0 [ 690.490702][ T8853] usb 7-1: config 2 interface 116 has no altsetting 0 [ 690.492438][ T8853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.492452][ T8853] usb 7-1: Product: syz [ 690.492460][ T8853] usb 7-1: Manufacturer: syz [ 690.492467][ T8853] usb 7-1: SerialNumber: syz [ 690.573547][ T9] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 690.575743][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 690.575759][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 690.578589][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.578603][ T9] usb 6-1: Product: syz [ 690.578611][ T9] usb 6-1: Manufacturer: syz [ 690.578618][ T9] usb 6-1: SerialNumber: syz [ 690.817554][T19922] input: syz0 as /devices/virtual/input/input27 [ 690.965991][ T9] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 691.080223][ T8853] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.49/input/input28 [ 691.086473][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 691.603669][ T4940] bcm5974 7-1:2.49: could not read from device [ 691.656910][ T4940] bcm5974 7-1:2.49: could not read from device [ 691.738801][ T5577] usb 6-1: USB disconnect, device number 30 [ 691.783339][ T5577] usblp0: removed [ 691.809301][ T4940] bcm5974 7-1:2.49: could not read from device [ 691.881548][ T8853] usb 7-1: USB disconnect, device number 25 [ 691.906803][ T4940] bcm5974 7-1:2.49: could not read from device [ 692.048585][T19942] FAULT_INJECTION: forcing a failure. [ 692.048585][T19942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.048612][T19942] CPU: 0 UID: 0 PID: 19942 Comm: syz.2.5701 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 692.048629][T19942] Tainted: [L]=SOFTLOCKUP [ 692.048633][T19942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 692.048641][T19942] Call Trace: [ 692.048646][T19942] [ 692.048652][T19942] dump_stack_lvl+0xe8/0x150 [ 692.048673][T19942] should_fail_ex+0x46b/0x600 [ 692.048690][T19942] _copy_from_user+0x2d/0xb0 [ 692.048705][T19942] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 692.048750][T19942] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 692.048763][T19942] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 692.048786][T19942] ? rcu_is_watching+0x16/0xb0 [ 692.048807][T19942] do_syscall_64+0x166/0x520 [ 692.048822][T19942] ? trace_irq_disable+0x3b/0x140 [ 692.048835][T19942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.048846][T19942] ? clear_bhb_loop+0x70/0xc0 [ 692.048858][T19942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.048868][T19942] RIP: 0033:0x7f7b1b9de159 [ 692.048879][T19942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.048888][T19942] RSP: 002b:00007f7b19c35fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 692.048901][T19942] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f7b1b9de159 [ 692.048909][T19942] RDX: 0000200000000280 RSI: 0000200000000040 RDI: 000000000000001d [ 692.048916][T19942] RBP: 00007f7b1ba7503b R08: 0000000000000000 R09: 0000000000000000 [ 692.048922][T19942] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000280 [ 692.048929][T19942] R13: 0000200000000140 R14: 0000200000000100 R15: 00007ffcf2087518 [ 692.048945][T19942] [ 692.126469][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 693.166429][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 693.457160][ T5577] kernel write not supported for file /dummy_udc (pid: 5577 comm: kworker/0:4) [ 694.206456][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 695.246422][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 695.660091][T20015] netlink: 'syz.5.5721': attribute type 11 has an invalid length. [ 696.286419][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 697.327144][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 698.369480][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 698.819112][T20087] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 699.009147][ T5587] Bluetooth: hci2: command 0x0406 tx timeout [ 699.034734][ T8854] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 699.034754][ T8854] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 699.114482][T20090] sch_tbf: burst 6281 is lower than device lo mtu (32783) ! [ 699.406431][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 700.446500][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 701.486460][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 701.886505][ T5587] Bluetooth: hci3: command 0x0406 tx timeout [ 701.891607][ T8854] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 701.891626][ T8854] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 701.902142][T20183] FAULT_INJECTION: forcing a failure. [ 701.902142][T20183] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 701.902169][T20183] CPU: 0 UID: 0 PID: 20183 Comm: syz.5.5772 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 701.902185][T20183] Tainted: [L]=SOFTLOCKUP [ 701.902189][T20183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 701.902196][T20183] Call Trace: [ 701.902201][T20183] [ 701.902207][T20183] dump_stack_lvl+0xe8/0x150 [ 701.902229][T20183] should_fail_ex+0x46b/0x600 [ 701.902250][T20183] prepare_alloc_pages+0x223/0x650 [ 701.902271][T20183] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 701.902289][T20183] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 701.902307][T20183] ? __pfx_policy_nodemask+0x10/0x10 [ 701.902325][T20183] ? __lock_acquire+0x747/0x2de0 [ 701.902341][T20183] alloc_pages_mpol+0xd4/0x280 [ 701.902354][T20183] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 701.902366][T20183] vma_alloc_folio_noprof+0xe1/0x1e0 [ 701.902378][T20183] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 701.902394][T20183] ? lock_acquire+0x115/0x350 [ 701.902413][T20183] do_pte_missing+0x835/0x28f0 [ 701.902433][T20183] ? handle_mm_fault+0xeb/0x28c0 [ 701.902449][T20183] handle_mm_fault+0xf64/0x28c0 [ 701.902464][T20183] ? handle_mm_fault+0xeb/0x28c0 [ 701.902482][T20183] ? __pfx_handle_mm_fault+0x10/0x10 [ 701.902495][T20183] ? lock_vma_under_rcu+0x45a/0x500 [ 701.902554][T20183] do_user_addr_fault+0xa4f/0x1340 [ 701.902573][T20183] ? trace_page_fault_user+0x84/0x1e0 [ 701.902586][T20183] exc_page_fault+0x6a/0xc0 [ 701.902603][T20183] asm_exc_page_fault+0x26/0x30 [ 701.902614][T20183] RIP: 0033:0x7f401e5fd287 [ 701.902625][T20183] Code: ae a2 de 00 01 74 9d 83 f9 c0 0f 87 8f fe ff ff c5 fe 6f 4e 20 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 a4 c4 c1 7e 7f 00 c4 c1 7e 7f 48 20 e9 0e fd ff ff 0f 1f 80 00 [ 701.902635][T20183] RSP: 002b:00007f401c885f58 EFLAGS: 00010206 [ 701.902646][T20183] RAX: 0000200000c5f000 RBX: 0000000000000009 RCX: 00000000000015f5 [ 701.902654][T20183] RDX: 00000000000025f5 RSI: 00007f401e695c80 RDI: 0000200000c60000 [ 701.902661][T20183] RBP: 00007f401e6e4750 R08: 0000200000c5f000 R09: ffffffffffffffff [ 701.902668][T20183] R10: 0000000000000000 R11: 0000000000000008 R12: 0000200000bfd000 [ 701.902675][T20183] R13: 0000000000000008 R14: 0000000000000002 R15: 000000000039a000 [ 701.902690][T20183] [ 701.910830][T20183] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 702.527385][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 702.903439][T20197] Process accounting resumed [ 703.566413][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 703.573805][T20235] FAULT_INJECTION: forcing a failure. [ 703.573805][T20235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.573829][T20235] CPU: 0 UID: 0 PID: 20235 Comm: syz.6.5788 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 703.573845][T20235] Tainted: [L]=SOFTLOCKUP [ 703.573849][T20235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 703.573856][T20235] Call Trace: [ 703.573861][T20235] [ 703.573867][T20235] dump_stack_lvl+0xe8/0x150 [ 703.573888][T20235] should_fail_ex+0x46b/0x600 [ 703.573907][T20235] _copy_from_user+0x2d/0xb0 [ 703.573922][T20235] prctl_set_mm+0x578/0x13d0 [ 703.573936][T20235] ? finish_task_switch+0x40e/0xc60 [ 703.573949][T20235] ? lockdep_hardirqs_on+0x7b/0x110 [ 703.573965][T20235] ? rcu_is_watching+0x16/0xb0 [ 703.573980][T20235] ? trace_sched_exit_tp+0x3a/0x130 [ 703.573994][T20235] ? __lock_acquire+0x747/0x2de0 [ 703.574015][T20235] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 703.574029][T20235] ? __pfx_prctl_set_mm+0x10/0x10 [ 703.574063][T20235] ? __pfx_futex_wake_mark+0x10/0x10 [ 703.574078][T20235] ? try_to_wake_up+0x84b/0x1430 [ 703.574095][T20235] ? futex_wait+0x2a2/0x390 [ 703.574108][T20235] ? __pfx_futex_wait+0x10/0x10 [ 703.574129][T20235] ? do_futex+0x3e7/0x4e0 [ 703.574142][T20235] ? cap_task_prctl+0x1dd/0xaa0 [ 703.574156][T20235] ? static_key_count+0x41/0x70 [ 703.574198][T20235] ? security_task_prctl+0x163/0x190 [ 703.574216][T20235] __se_sys_prctl+0x206/0x1910 [ 703.574231][T20235] ? __pfx___se_sys_prctl+0x10/0x10 [ 703.574245][T20235] ? __x64_sys_prctl+0x20/0xc0 [ 703.574258][T20235] do_syscall_64+0x166/0x520 [ 703.574272][T20235] ? trace_irq_disable+0x3b/0x140 [ 703.574285][T20235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.574296][T20235] ? clear_bhb_loop+0x70/0xc0 [ 703.574308][T20235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.574318][T20235] RIP: 0033:0x7f0d134ae159 [ 703.574329][T20235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.574338][T20235] RSP: 002b:00007f0d11706028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 703.574351][T20235] RAX: ffffffffffffffda RBX: 00007f0d13735fa0 RCX: 00007f0d134ae159 [ 703.574359][T20235] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000023 [ 703.574365][T20235] RBP: 00007f0d1354503b R08: 0000000000000000 R09: 0000000000000000 [ 703.574371][T20235] R10: 00000000000001a0 R11: 0000000000000246 R12: 0000000000000000 [ 703.574378][T20235] R13: 00007f0d13736038 R14: 00007f0d13735fa0 R15: 00007ffc4797d368 [ 703.574395][T20235] [ 703.961629][ T5577] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 704.125981][ T5577] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 704.127146][ T5577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.127173][ T5577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.295166][ T5577] usb 3-1: config 0 descriptor?? [ 704.536716][ T5577] usbhid 3-1:0.0: can't add hid device: -71 [ 704.536800][ T5577] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 704.606437][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 704.673620][ T5577] usb 3-1: USB disconnect, device number 35 [ 705.236520][ T5577] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 705.407547][ T5577] usb 3-1: Using ep0 maxpacket: 32 [ 705.410861][ T5577] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.66 [ 705.411827][ T5577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.411853][ T5577] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.535615][T20281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5805'. [ 705.535641][T20281] netlink: 'syz.0.5805': attribute type 20 has an invalid length. [ 705.535649][T20281] netlink: 'syz.0.5805': attribute type 21 has an invalid length. [ 705.634062][ T5577] usb 3-1: config 0 descriptor?? [ 705.642997][ T5577] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 705.646451][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 705.650234][ T5577] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 706.154180][ T5577] usb 3-1: USB disconnect, device number 36 [ 706.194822][ T5577] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 706.686464][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 707.611757][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5826'. [ 707.646463][ T8854] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 707.646482][ T8854] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 707.646532][ T5587] Bluetooth: hci4: command 0x0406 tx timeout [ 707.731305][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 707.831722][T20330] jffs2: notice: (20330) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 708.770878][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 708.850616][T20339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5829'. [ 708.850631][T20339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5829'. [ 709.096639][T20358] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5838'. [ 709.295740][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 709.295751][ T37] audit: type=1326 audit(1789458305.980:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20364 comm="syz.6.5842" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 709.300338][ T37] audit: type=1326 audit(1789458305.980:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20364 comm="syz.6.5842" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 709.328017][ T37] audit: type=1326 audit(1789458306.020:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20364 comm="syz.6.5842" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 709.328049][ T37] audit: type=1326 audit(1789458306.020:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20364 comm="syz.6.5842" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 709.331860][ T37] audit: type=1326 audit(1789458306.020:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20364 comm="syz.6.5842" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 709.331890][ T37] audit: type=1326 audit(1789458306.020:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20364 comm="syz.6.5842" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 709.331911][ T37] audit: type=1326 audit(1789458306.020:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20364 comm="syz.6.5842" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 709.336594][ T37] audit: type=1326 audit(1789458306.030:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20364 comm="syz.6.5842" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 709.336622][ T37] audit: type=1326 audit(1789458306.030:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20364 comm="syz.6.5842" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 709.340082][ T37] audit: type=1326 audit(1789458306.030:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20364 comm="syz.6.5842" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0d134ae159 code=0x7ffc0000 [ 709.806570][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 709.915734][T20378] netlink: 'syz.2.5846': attribute type 2 has an invalid length. [ 709.915750][T20378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5846'. [ 710.846442][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 711.183236][T20416] ip6gretap2: entered allmulticast mode [ 711.195645][T20416] batman_adv: batadv0: Adding interface: ip6gretap2 [ 711.195657][T20416] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.195677][T20416] batman_adv: batadv0: Interface activated: ip6gretap2 [ 711.886431][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 712.778735][T20447] netlink: 'syz.6.5872': attribute type 11 has an invalid length. [ 712.926427][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 713.966417][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 714.270013][T20462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5870'. [ 715.006439][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 715.220214][T20491] fuse: fd is not a fuse device [ 716.046419][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 717.086453][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 717.526511][T20541] FAULT_INJECTION: forcing a failure. [ 717.526511][T20541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.526540][T20541] CPU: 0 UID: 0 PID: 20541 Comm: syz.5.5912 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 717.526555][T20541] Tainted: [L]=SOFTLOCKUP [ 717.526559][T20541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 717.526566][T20541] Call Trace: [ 717.526572][T20541] [ 717.526578][T20541] dump_stack_lvl+0xe8/0x150 [ 717.526601][T20541] should_fail_ex+0x46b/0x600 [ 717.526620][T20541] _copy_to_iter+0x1e4/0x1810 [ 717.526637][T20541] ? __asan_memset+0x22/0x50 [ 717.526666][T20541] ? __pfx__copy_to_iter+0x10/0x10 [ 717.526681][T20541] ? preempt_count_add+0x6a/0x140 [ 717.526702][T20541] get_random_bytes_user+0x1d0/0x3d0 [ 717.526755][T20541] ? __pfx_get_random_bytes_user+0x10/0x10 [ 717.526781][T20541] ? import_ubuf+0xfb/0x1d0 [ 717.526797][T20541] __x64_sys_getrandom+0x17a/0x270 [ 717.526813][T20541] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 717.526830][T20541] ? rcu_is_watching+0x16/0xb0 [ 717.526852][T20541] do_syscall_64+0x166/0x520 [ 717.526868][T20541] ? trace_irq_disable+0x3b/0x140 [ 717.526881][T20541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.526893][T20541] ? clear_bhb_loop+0x70/0xc0 [ 717.526907][T20541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.526917][T20541] RIP: 0033:0x7f401e62e159 [ 717.526928][T20541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.526937][T20541] RSP: 002b:00007f401c886028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 717.526950][T20541] RAX: ffffffffffffffda RBX: 00007f401e8b5fa0 RCX: 00007f401e62e159 [ 717.526958][T20541] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 717.526965][T20541] RBP: 00007f401e6c503b R08: 0000000000000000 R09: 0000000000000000 [ 717.526971][T20541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.526978][T20541] R13: 00007f401e8b6038 R14: 00007f401e8b5fa0 R15: 00007ffc620aa4e8 [ 717.526994][T20541] [ 717.944360][T20555] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 718.126403][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 719.166392][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 719.370859][ T5722] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 719.536438][ T5722] usb 3-1: Using ep0 maxpacket: 32 [ 719.537126][ T5722] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 719.538086][ T5722] usb 3-1: config index 0 descriptor too short (expected 27632, got 27) [ 719.538100][ T5722] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 719.538112][ T5722] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 719.538124][ T5722] usb 3-1: config 1 has no interface number 0 [ 719.538149][ T5722] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 719.538162][ T5722] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 719.538173][ T5722] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 719.538195][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.674642][ T5722] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 719.765682][ T5722] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 719.790599][ T5722] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 719.790939][ T5722] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 719.993750][ T5722] usb 3-1: USB disconnect, device number 37 [ 720.206383][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 721.071727][T20633] ./dev/sda1: Can't lookup blockdev [ 721.248398][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 722.291268][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 722.625778][T20659] tipc: Enabling of bearer rejected, failed to enable media [ 723.326464][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 724.316550][T20709] netlink: 428 bytes leftover after parsing attributes in process `syz.5.5984'. [ 724.316578][T20709] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5984'. [ 724.366458][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 724.501774][T20718] Invalid argument reading file caps for ./file0 [ 724.616426][ T8854] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 724.646479][ T5722] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 724.799471][ T8854] usb 7-1: Using ep0 maxpacket: 32 [ 724.800771][ T8854] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 724.802171][ T8854] usb 7-1: config 0 has no interfaces? [ 724.802192][ T8854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.814569][ T8854] usb 7-1: config 0 descriptor?? [ 724.917769][ T5722] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.921622][ T5722] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.921654][ T5722] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 724.921669][ T5722] usb 3-1: config 1 interface 0 has no altsetting 1 [ 724.924068][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 724.924082][ T5722] usb 3-1: SerialNumber: syz [ 724.954359][ T5722] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 725.132650][ T5722] usb 7-1: USB disconnect, device number 26 [ 725.406531][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 725.713419][T20738] FAULT_INJECTION: forcing a failure. [ 725.713419][T20738] name fail_futex, interval 1, probability 0, space 0, times 0 [ 725.713446][T20738] CPU: 0 UID: 0 PID: 20738 Comm: syz.5.5998 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 725.713462][T20738] Tainted: [L]=SOFTLOCKUP [ 725.713466][T20738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 725.713473][T20738] Call Trace: [ 725.713478][T20738] [ 725.713484][T20738] dump_stack_lvl+0xe8/0x150 [ 725.713506][T20738] should_fail_ex+0x46b/0x600 [ 725.713522][T20738] get_futex_key+0x1b4/0x1580 [ 725.713541][T20738] ? __pfx_flock_lock_inode+0x10/0x10 [ 725.713558][T20738] ? __pfx_get_futex_key+0x10/0x10 [ 725.713574][T20738] ? locks_lock_inode_wait+0x3e6/0x470 [ 725.713589][T20738] futex_wake+0x119/0x600 [ 725.713604][T20738] ? __pfx_futex_wake+0x10/0x10 [ 725.713619][T20738] ? fput+0xa0/0xd0 [ 725.713635][T20738] ? __se_sys_flock+0x60e/0x680 [ 725.713649][T20738] do_futex+0x458/0x4e0 [ 725.713662][T20738] ? __pfx_do_futex+0x10/0x10 [ 725.713677][T20738] __se_sys_futex+0x3a8/0x450 [ 725.713690][T20738] ? __pfx___se_sys_futex+0x10/0x10 [ 725.713700][T20738] ? rcu_is_watching+0x16/0xb0 [ 725.713718][T20738] ? __x64_sys_futex+0x21/0xf0 [ 725.713729][T20738] do_syscall_64+0x166/0x520 [ 725.713743][T20738] ? trace_irq_disable+0x3b/0x140 [ 725.713755][T20738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.713766][T20738] ? clear_bhb_loop+0x70/0xc0 [ 725.713778][T20738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.713788][T20738] RIP: 0033:0x7f401e62e159 [ 725.713799][T20738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.713808][T20738] RSP: 002b:00007f401c8860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 725.713820][T20738] RAX: ffffffffffffffda RBX: 00007f401e8b5fa8 RCX: 00007f401e62e159 [ 725.713828][T20738] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f401e8b5fac [ 725.713834][T20738] RBP: 00007f401e8b5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 725.713841][T20738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.713848][T20738] R13: 00007f401e8b6038 R14: 00007ffc620aa400 R15: 00007ffc620aa4e8 [ 725.713864][T20738] [ 725.967597][T20747] FAULT_INJECTION: forcing a failure. [ 725.967597][T20747] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 725.967625][T20747] CPU: 0 UID: 0 PID: 20747 Comm: syz.3.6001 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 725.967641][T20747] Tainted: [L]=SOFTLOCKUP [ 725.967646][T20747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 725.967652][T20747] Call Trace: [ 725.967657][T20747] [ 725.967663][T20747] dump_stack_lvl+0xe8/0x150 [ 725.967684][T20747] should_fail_ex+0x46b/0x600 [ 725.967701][T20747] prepare_alloc_pages+0x223/0x650 [ 725.967721][T20747] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 725.967741][T20747] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 725.967759][T20747] ? __pfx_policy_nodemask+0x10/0x10 [ 725.967777][T20747] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 725.967792][T20747] alloc_pages_mpol+0xd4/0x280 [ 725.967804][T20747] alloc_pages_noprof+0xd2/0x2f0 [ 725.967817][T20747] pte_alloc_one+0x22/0x380 [ 725.967833][T20747] __pte_alloc+0x25/0x1a0 [ 725.967850][T20747] get_locked_pte+0x37f/0x490 [ 725.967863][T20747] map_ldt_struct+0x4e1/0xb50 [ 725.967886][T20747] ? __pfx_map_ldt_struct+0x10/0x10 [ 725.967901][T20747] ? alloc_pages_noprof+0x161/0x2f0 [ 725.967913][T20747] write_ldt+0x768/0x930 [ 725.967926][T20747] ? __se_sys_futex+0x3a8/0x450 [ 725.967939][T20747] ? __pfx_write_ldt+0x10/0x10 [ 725.967953][T20747] ? rcu_is_watching+0x16/0xb0 [ 725.967972][T20747] __se_sys_modify_ldt+0x6c/0x310 [ 725.967987][T20747] do_syscall_64+0x166/0x520 [ 725.968000][T20747] ? trace_irq_disable+0x3b/0x140 [ 725.968013][T20747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.968024][T20747] ? clear_bhb_loop+0x70/0xc0 [ 725.968036][T20747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.968046][T20747] RIP: 0033:0x7fbd47f1e159 [ 725.968057][T20747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.968066][T20747] RSP: 002b:00007fbd46176028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 725.968079][T20747] RAX: ffffffffffffffda RBX: 00007fbd481a5fa0 RCX: 00007fbd47f1e159 [ 725.968086][T20747] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000011 [ 725.968093][T20747] RBP: 00007fbd47fb503b R08: 0000000000000000 R09: 0000000000000000 [ 725.968099][T20747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.968105][T20747] R13: 00007fbd481a6038 R14: 00007fbd481a5fa0 R15: 00007ffe0034ce48 [ 725.968122][T20747] [ 726.001263][T20752] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6002'. [ 726.446445][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 727.486174][ T8854] usb 3-1: USB disconnect, device number 38 [ 727.486474][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 727.727058][T20803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6014'. [ 727.978760][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6017'. [ 728.534577][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 728.536884][T20822] size and base must be multiples of 4 kiB [ 728.536899][T20822] CPU: 0 UID: 0 PID: 20822 Comm: syz.5.6025 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 728.536915][T20822] Tainted: [L]=SOFTLOCKUP [ 728.536918][T20822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 728.536926][T20822] Call Trace: [ 728.536931][T20822] [ 728.536938][T20822] dump_stack_lvl+0xe8/0x150 [ 728.536958][T20822] mtrr_del+0xc8/0xf0 [ 728.536975][T20822] mtrr_ioctl+0xcc4/0x13c0 [ 728.536989][T20822] ? smk_tskacc+0x2fb/0x370 [ 728.537011][T20822] ? __pfx_mtrr_ioctl+0x10/0x10 [ 728.537026][T20822] ? smack_file_ioctl+0x265/0x370 [ 728.537046][T20822] ? __fget_files+0x2a/0x420 [ 728.537058][T20822] ? __fget_files+0x3a8/0x420 [ 728.537068][T20822] ? __fget_files+0x2a/0x420 [ 728.537078][T20822] ? __pfx_mtrr_ioctl+0x10/0x10 [ 728.537093][T20822] proc_reg_unlocked_ioctl+0x1df/0x2d0 [ 728.537108][T20822] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 728.537122][T20822] __se_sys_ioctl+0xff/0x170 [ 728.537137][T20822] do_syscall_64+0x166/0x520 [ 728.537151][T20822] ? trace_irq_disable+0x3b/0x140 [ 728.537165][T20822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.537175][T20822] ? clear_bhb_loop+0x70/0xc0 [ 728.537188][T20822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.537199][T20822] RIP: 0033:0x7f401e62e159 [ 728.537210][T20822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.537219][T20822] RSP: 002b:00007f401c886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 728.537231][T20822] RAX: ffffffffffffffda RBX: 00007f401e8b5fa0 RCX: 00007f401e62e159 [ 728.537239][T20822] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000004 [ 728.537246][T20822] RBP: 00007f401e6c503b R08: 0000000000000000 R09: 0000000000000000 [ 728.537252][T20822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.537258][T20822] R13: 00007f401e8b6038 R14: 00007f401e8b5fa0 R15: 00007ffc620aa4e8 [ 728.537275][T20822] [ 729.573763][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 729.734016][T20855] bond0: invalid NS target ff00:: specified for addition [ 729.734037][T20855] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 730.448104][T20889] netlink: 'syz.6.6053': attribute type 2 has an invalid length. [ 730.516571][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 730.606427][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 730.667586][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 730.668676][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 730.668691][ T9] usb 3-1: config 1 has no interface number 0 [ 730.668715][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.668730][ T9] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 730.668748][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 6803, setting to 1024 [ 730.668761][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 730.670708][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.670723][ T9] usb 3-1: Product: syz [ 730.670730][ T9] usb 3-1: Manufacturer: syz [ 730.670738][ T9] usb 3-1: SerialNumber: syz [ 730.996438][T20883] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 731.275928][ T37] kauditd_printk_skb: 244 callbacks suppressed [ 731.275940][ T37] audit: type=1400 audit(1789458327.960:663): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="l" requested=w pid=20911 comm="syz.6.6061" name="file1" dev="tmpfs" ino=3346 [ 731.524761][T20918] FAULT_INJECTION: forcing a failure. [ 731.524761][T20918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.524788][T20918] CPU: 0 UID: 0 PID: 20918 Comm: syz.5.6063 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 731.524803][T20918] Tainted: [L]=SOFTLOCKUP [ 731.524807][T20918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 731.524814][T20918] Call Trace: [ 731.524819][T20918] [ 731.524827][T20918] dump_stack_lvl+0xe8/0x150 [ 731.524849][T20918] should_fail_ex+0x46b/0x600 [ 731.524866][T20918] _copy_from_user+0x2d/0xb0 [ 731.524881][T20918] __se_sys_rt_sigqueueinfo+0xdb/0x4e0 [ 731.524896][T20918] ? __pfx___se_sys_rt_sigqueueinfo+0x10/0x10 [ 731.524906][T20918] ? __se_sys_futex+0x3a8/0x450 [ 731.524930][T20918] do_syscall_64+0x166/0x520 [ 731.524945][T20918] ? trace_irq_disable+0x3b/0x140 [ 731.524958][T20918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.524969][T20918] ? clear_bhb_loop+0x70/0xc0 [ 731.524982][T20918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.524994][T20918] RIP: 0033:0x7f401e62e159 [ 731.525005][T20918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.525014][T20918] RSP: 002b:00007f401c886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 731.525027][T20918] RAX: ffffffffffffffda RBX: 00007f401e8b5fa0 RCX: 00007f401e62e159 [ 731.525034][T20918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 731.525041][T20918] RBP: 00007f401e6c503b R08: 0000000000000000 R09: 0000000000000000 [ 731.525048][T20918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.525054][T20918] R13: 00007f401e8b6038 R14: 00007f401e8b5fa0 R15: 00007ffc620aa4e8 [ 731.525070][T20918] [ 731.613936][T20883] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 731.620684][ T9] cdc_ncm 3-1:1.1: bind() failure [ 731.646450][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 731.901887][ T9] usb 3-1: USB disconnect, device number 39 [ 732.248116][T20942] loop8: detected capacity change from 0 to 8 [ 732.249112][T20942] Dev loop8: unable to read RDB block 8 [ 732.249139][T20942] loop8: unable to read partition table [ 732.249255][T20942] loop8: partition table beyond EOD, truncated [ 732.249267][T20942] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 732.432768][T20947] FAULT_INJECTION: forcing a failure. [ 732.432768][T20947] name fail_futex, interval 1, probability 0, space 0, times 0 [ 732.432794][T20947] CPU: 0 UID: 0 PID: 20947 Comm: syz.5.6076 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 732.432809][T20947] Tainted: [L]=SOFTLOCKUP [ 732.432813][T20947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 732.432819][T20947] Call Trace: [ 732.432824][T20947] [ 732.432829][T20947] dump_stack_lvl+0xe8/0x150 [ 732.432851][T20947] should_fail_ex+0x46b/0x600 [ 732.432867][T20947] get_futex_key+0x8e2/0x1580 [ 732.432888][T20947] ? __pfx_get_futex_key+0x10/0x10 [ 732.432908][T20947] futex_wake+0x119/0x600 [ 732.432923][T20947] ? __pfx_futex_wake+0x10/0x10 [ 732.432933][T20947] ? do_raw_spin_lock+0x12b/0x2f0 [ 732.432952][T20947] do_futex+0x458/0x4e0 [ 732.432965][T20947] ? __pfx_do_futex+0x10/0x10 [ 732.432977][T20947] ? __might_fault+0xaf/0x130 [ 732.432992][T20947] mm_exit_exec_release+0x10d/0x290 [ 732.433008][T20947] exit_mm+0x50/0x240 [ 732.433019][T20947] do_exit+0x6cd/0x2360 [ 732.433029][T20947] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 732.433048][T20947] ? __pfx_do_exit+0x10/0x10 [ 732.433058][T20947] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 732.433073][T20947] ? rt_spin_unlock+0x159/0x200 [ 732.433086][T20947] do_group_exit+0x22d/0x2f0 [ 732.433095][T20947] ? rt_spin_unlock+0x165/0x200 [ 732.433108][T20947] get_signal+0x121b/0x12c0 [ 732.433140][T20947] arch_do_signal_or_restart+0xbb/0x860 [ 732.433157][T20947] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 732.433181][T20947] exit_to_user_mode_loop+0x10e/0x770 [ 732.433194][T20947] ? rcu_is_watching+0x16/0xb0 [ 732.433211][T20947] do_syscall_64+0x328/0x520 [ 732.433224][T20947] ? trace_irq_disable+0x3b/0x140 [ 732.433239][T20947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.433249][T20947] ? clear_bhb_loop+0x70/0xc0 [ 732.433262][T20947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.433271][T20947] RIP: 0033:0x7f401e62e159 [ 732.433282][T20947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.433291][T20947] RSP: 002b:00007f401c8860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 732.433303][T20947] RAX: fffffffffffffe00 RBX: 00007f401e8b5fa8 RCX: 00007f401e62e159 [ 732.433310][T20947] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f401e8b5fa8 [ 732.433316][T20947] RBP: 00007f401e8b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 732.433322][T20947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.433328][T20947] R13: 00007f401e8b6038 R14: 00007ffc620aa400 R15: 00007ffc620aa4e8 [ 732.433344][T20947] [ 732.686442][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 733.094200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.136123][T20973] mtrr: base(0xd0000000) is not aligned on a size(0x0000) boundary [ 733.166760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.280486][T20971] Process accounting paused [ 733.363972][T20975] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6089'. [ 733.726694][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 734.206664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.287749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.771830][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 734.878877][ T37] audit: type=1326 audit(1789458331.570:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21025 comm="syz.5.6112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401e62e159 code=0x7ffc0000 [ 734.878911][ T37] audit: type=1326 audit(1789458331.570:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21025 comm="syz.5.6112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401e62e159 code=0x7ffc0000 [ 734.903871][ T37] audit: type=1326 audit(1789458331.590:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21025 comm="syz.5.6112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f401e62e159 code=0x7ffc0000 [ 734.919311][ T37] audit: type=1326 audit(1789458331.610:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21025 comm="syz.5.6112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401e62e159 code=0x7ffc0000 [ 734.919344][ T37] audit: type=1326 audit(1789458331.610:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21025 comm="syz.5.6112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401e62e159 code=0x7ffc0000 [ 734.930060][ T37] audit: type=1326 audit(1789458331.620:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21025 comm="syz.5.6112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f401e62e159 code=0x7ffc0000 [ 734.930092][ T37] audit: type=1326 audit(1789458331.620:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21025 comm="syz.5.6112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401e62e159 code=0x7ffc0000 [ 734.930207][ T37] audit: type=1326 audit(1789458331.620:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21025 comm="syz.5.6112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401e62e159 code=0x7ffc0000 [ 734.932695][ T37] audit: type=1326 audit(1789458331.620:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21025 comm="syz.5.6112" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f401e62e159 code=0x7ffc0000 [ 735.247189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.806502][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 736.491099][T21058] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6125'. [ 736.846424][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 736.947575][T21075] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6134'. [ 737.104451][T21082] block nbd6: Cannot add socket to a running device [ 737.326937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.567157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.567678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.621280][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 737.621292][ T37] audit: type=1326 audit(1789458334.310:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21107 comm="syz.3.6150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 737.622466][ T37] audit: type=1326 audit(1789458334.310:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21107 comm="syz.3.6150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 737.631042][ T37] audit: type=1326 audit(1789458334.320:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21107 comm="syz.3.6150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 737.631196][ T37] audit: type=1326 audit(1789458334.320:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21107 comm="syz.3.6150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 737.631526][ T37] audit: type=1326 audit(1789458334.320:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21107 comm="syz.3.6150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 737.633076][ T37] audit: type=1326 audit(1789458334.320:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21107 comm="syz.3.6150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 737.634121][ T37] audit: type=1326 audit(1789458334.320:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21107 comm="syz.3.6150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 737.635222][ T37] audit: type=1326 audit(1789458334.320:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21107 comm="syz.3.6150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 737.639250][ T37] audit: type=1326 audit(1789458334.330:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21107 comm="syz.3.6150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 737.639653][ T37] audit: type=1326 audit(1789458334.330:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21107 comm="syz.3.6150" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd47f1e159 code=0x7ffc0000 [ 737.799184][ T8854] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 737.802357][ T5587] block nbd6: Receive control failed (result -32) [ 737.845470][T21114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6153'. [ 737.862537][T21114] ip6tnl2: entered promiscuous mode [ 737.863723][T21079] block nbd6: shutting down sockets [ 737.958423][ T8854] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 737.959369][ T8854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.971440][ T8854] usb 6-1: config 0 descriptor?? [ 738.022527][T21120] FAULT_INJECTION: forcing a failure. [ 738.022527][T21120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.022552][T21120] CPU: 0 UID: 0 PID: 21120 Comm: syz.2.6156 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 738.022569][T21120] Tainted: [L]=SOFTLOCKUP [ 738.022574][T21120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 738.022580][T21120] Call Trace: [ 738.022585][T21120] [ 738.022591][T21120] dump_stack_lvl+0xe8/0x150 [ 738.022613][T21120] should_fail_ex+0x46b/0x600 [ 738.022630][T21120] _copy_from_user+0x2d/0xb0 [ 738.022645][T21120] copy_clone_args_from_user+0x1f9/0x740 [ 738.022662][T21120] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 738.022672][T21120] ? futex_wait+0x2a2/0x390 [ 738.022693][T21120] __se_sys_clone3+0x142/0x360 [ 738.022710][T21120] ? __pfx___se_sys_clone3+0x10/0x10 [ 738.022725][T21120] ? do_futex+0x3e7/0x4e0 [ 738.022758][T21120] do_syscall_64+0x166/0x520 [ 738.022772][T21120] ? trace_irq_disable+0x3b/0x140 [ 738.022785][T21120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.022796][T21120] ? clear_bhb_loop+0x70/0xc0 [ 738.022808][T21120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.022819][T21120] RIP: 0033:0x7f7b1b9de159 [ 738.022830][T21120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.022840][T21120] RSP: 002b:00007f7b19c35ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 738.022853][T21120] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f7b1b9de159 [ 738.022860][T21120] RDX: 00007f7b19c35f10 RSI: 0000000000000058 RDI: 00007f7b19c35f10 [ 738.022867][T21120] RBP: 00007f7b1ba7503b R08: 0000000000000000 R09: 0000000000000058 [ 738.022874][T21120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.022880][T21120] R13: 00007f7b1bc66038 R14: 00007f7b1bc65fa0 R15: 00007ffcf2087518 [ 738.022896][T21120] [ 738.189837][ T8854] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 738.423725][ T8854] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 738.423742][ T8854] [drm] Initialized udl on minor 1 [ 738.852430][ C0] net_ratelimit: 2 callbacks suppressed [ 738.852456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.926446][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 739.407813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.494838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.692277][T21159] ------------[ cut here ]------------ [ 739.692289][T21159] err == -EMSGSIZE [ 739.692300][T21159] WARNING: net/core/rtnetlink.c:4599 at rtmsg_ifinfo_build_skb+0x21c/0x260, CPU#0: syz.3.6170/21159 [ 766.332065][T21159] Modules linked in: [ 766.335950][T21159] CPU: 0 UID: 0 PID: 21159 Comm: syz.3.6170 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 766.347580][T21159] Tainted: [L]=SOFTLOCKUP [ 766.351880][T21159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 766.361935][T21159] RIP: 0010:rtmsg_ifinfo_build_skb+0x21c/0x260 [ 766.368098][T21159] Code: f6 ba 01 00 00 00 89 e9 e8 21 fc 3a 00 4c 89 f0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b5 86 98 f8 90 <0f> 0b 90 eb 8f 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 8b fe ff ff 4c [ 766.387713][T21159] RSP: 0018:ffffc900047fe808 EFLAGS: 00010287 [ 766.393766][T21159] RAX: ffffffff892e127b RBX: 1ffff1100c98d821 RCX: 0000000000080000 [ 766.401754][T21159] RDX: ffffc9000e2c3000 RSI: 0000000000006dc8 RDI: 0000000000006dc9 [ 766.409727][T21159] RBP: 00000000ffffffa6 R08: 0000000000000000 R09: 0000000000000000 [ 766.417700][T21159] R10: fffff520008ffca8 R11: 0000000000000020 R12: 0000000000000000 [ 766.425648][T21159] R13: 0000000000000000 R14: ffff8880320a8000 R15: ffff888064c6c000 [ 766.433615][T21159] FS: 00007fbd461766c0(0000) GS:ffff888125bcb000(0000) knlGS:0000000000000000 [ 766.442567][T21159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 766.449146][T21159] CR2: 00002000000c7000 CR3: 0000000040abc000 CR4: 00000000003526f0 [ 766.457134][T21159] Call Trace: [ 766.460402][T21159] [ 766.463321][T21159] rtnetlink_event+0x1b7/0x270 [ 766.468107][T21159] notifier_call_chain+0x1a5/0x3d0 [ 766.473204][T21159] netif_disable_lro+0xdd/0x4b0 [ 766.478061][T21159] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 766.483439][T21159] ? __pfx_netif_disable_lro+0x10/0x10 [ 766.488905][T21159] ? neigh_parms_alloc+0x428/0x530 [ 766.493999][T21159] ? neigh_parms_alloc+0x30e/0x530 [ 766.499119][T21159] ipv6_add_dev+0x4b7/0x1400 [ 766.503739][T21159] addrconf_notify+0x771/0x1050 [ 766.508595][T21159] notifier_call_chain+0x1a5/0x3d0 [ 766.513692][T21159] register_netdevice+0x18c0/0x1ed0 [ 766.518900][T21159] ? __pfx_register_netdevice+0x10/0x10 [ 766.524432][T21159] macsec_newlink+0x706/0x1200 [ 766.529265][T21159] ? rcu_is_watching+0x16/0xb0 [ 766.534035][T21159] ? __pfx_macsec_newlink+0x10/0x10 [ 766.539242][T21159] ? alloc_netdev_mqs+0xd59/0x12c0 [ 766.544332][T21159] ? __kvmalloc_node_noprof+0x5d4/0x890 [ 766.549887][T21159] ? alloc_netdev_mqs+0xd59/0x12c0 [ 766.554976][T21159] ? alloc_netdev_mqs+0xd59/0x12c0 [ 766.560106][T21159] ? validate_linkmsg+0x765/0x950 [ 766.565135][T21159] ? rtnl_create_link+0xa04/0xd70 [ 766.570161][T21159] ? __pfx_macsec_newlink+0x10/0x10 [ 766.575346][T21159] rtnl_newlink_create+0x305/0x7b0 [ 766.580469][T21159] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 766.586086][T21159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 766.591918][T21159] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 766.597726][T21159] rtnl_newlink+0x166d/0x1c30 [ 766.602394][T21159] ? __pfx_rtnl_newlink+0x10/0x10 [ 766.607429][T21159] ? do_syscall_64+0x166/0x520 [ 766.612177][T21159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.618252][T21159] ? __lock_acquire+0x747/0x2de0 [ 766.623173][T21159] ? kasan_quarantine_put+0xbb/0x1f0 [ 766.628454][T21159] ? lockdep_hardirqs_on+0x7b/0x110 [ 766.633637][T21159] ? nlmon_xmit+0xb0/0x100 [ 766.638077][T21159] ? kmem_cache_free+0x187/0x6d0 [ 766.642996][T21159] ? nlmon_xmit+0xb0/0x100 [ 766.647419][T21159] ? __lock_acquire+0x747/0x2de0 [ 766.652369][T21159] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 766.657751][T21159] ? lockdep_hardirqs_on+0x7b/0x110 [ 766.662931][T21159] ? __dev_queue_xmit+0x294/0x3880 [ 766.668042][T21159] ? __dev_queue_xmit+0x1ee9/0x3880 [ 766.673229][T21159] ? lock_acquire+0x115/0x350 [ 766.677932][T21159] ? __pfx_rtnl_newlink+0x10/0x10 [ 766.682939][T21159] rtnetlink_rcv_msg+0x802/0xc00 [ 766.687884][T21159] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 766.693000][T21159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 766.698461][T21159] ? ref_tracker_free+0x668/0x820 [ 766.703489][T21159] ? __pfx_ref_tracker_free+0x10/0x10 [ 766.708937][T21159] netlink_rcv_skb+0x226/0x4a0 [ 766.713745][T21159] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 766.719262][T21159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 766.724542][T21159] ? netlink_deliver_tap+0x2e/0x1b0 [ 766.729753][T21159] ? netlink_deliver_tap+0x2e/0x1b0 [ 766.734937][T21159] netlink_unicast+0x7f5/0x990 [ 766.739714][T21159] netlink_sendmsg+0x813/0xb40 [ 766.744459][T21159] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 766.750105][T21159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.755372][T21159] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 766.761806][T21159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.767087][T21159] sock_sendmsg_nosec+0x13a/0x180 [ 766.772095][T21159] ____sys_sendmsg+0x565/0x870 [ 766.776864][T21159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.782134][T21159] ? import_iovec+0x73/0xa0 [ 766.786653][T21159] ___sys_sendmsg+0x2a5/0x360 [ 766.791308][T21159] ? __lock_acquire+0x747/0x2de0 [ 766.796247][T21159] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.801452][T21159] ? futex_wait+0x2a2/0x390 [ 766.805952][T21159] ? __fget_files+0x2a/0x420 [ 766.810548][T21159] ? __fget_files+0x3a8/0x420 [ 766.815208][T21159] __x64_sys_sendmsg+0x1b7/0x290 [ 766.820180][T21159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.825631][T21159] do_syscall_64+0x166/0x520 [ 766.830225][T21159] ? trace_irq_disable+0x3b/0x140 [ 766.835239][T21159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.841380][T21159] ? clear_bhb_loop+0x70/0xc0 [ 766.846050][T21159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.851978][T21159] RIP: 0033:0x7fbd47f1e159 [ 766.856407][T21159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.876111][T21159] RSP: 002b:00007fbd46176028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.884542][T21159] RAX: ffffffffffffffda RBX: 00007fbd481a5fa0 RCX: 00007fbd47f1e159 [ 766.892521][T21159] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 766.900573][T21159] RBP: 00007fbd47fb503b R08: 0000000000000000 R09: 0000000000000000 [ 766.908573][T21159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.916560][T21159] R13: 00007fbd481a6038 R14: 00007fbd481a5fa0 R15: 00007ffe0034ce48 [ 766.924531][T21159] [ 766.928236][T21159] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 766.935512][T21159] CPU: 0 UID: 0 PID: 21159 Comm: syz.3.6170 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)}