last executing test programs: 9.348052501s ago: executing program 3 (id=1504): r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xfffffffe, 0xffffffff, 0x3, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0x6c0, 0xffffffff]], '\x00', [{0x10, 0x11, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x1, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000001540)=0x2) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x9, 0x5, 0x8, 0x2, 0x4, 0x53, 0x7, 0x2, 0x8, [0x9, 0x8, 0xfffffff8, 0x93, 0x3, 0x8, 0x75, 0x1fe]}}) 9.238625509s ago: executing program 1 (id=1506): unshare(0x68040200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x9901) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x9901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0026}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0026}]}) timerfd_create(0x7, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)}], 0x1) sendto(r1, 0x0, 0x0, 0x810, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) accept(0xffffffffffffffff, &(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f00000001c0)=0x80) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') read$FUSE(r6, &(0x7f0000000940)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r7, &(0x7f0000000200), 0x0}, 0x20) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40840, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40840, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, &(0x7f0000000080)={'filter\x00', 0x0, [0x5, 0x19, 0x20000000, 0x4010005, 0x393a72d]}, &(0x7f0000000040)=0x54) 9.016596348s ago: executing program 3 (id=1507): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 7.761414433s ago: executing program 1 (id=1510): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e9}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_need_get_data_sqe={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x0, {0xe0}, 0x0, 0x0, '\x00', {0x2, 0x97c, 0x5, &(0x7f0000001240)=@buf_max_buf="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"}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) sendto(r8, &(0x7f0000000000), 0xfeb5, 0x33, 0x0, 0x0) recvfrom(r7, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xa4, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pimreg1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4628, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3ff}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="92ffffffffffffff29000000390000005e0000cd00000000397f7b883513bfb13be78524e8487b2bf6f7fbf9e79ad56fa813149f2398"], 0x18}, 0x40c0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 6.743987968s ago: executing program 0 (id=1515): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) (async, rerun: 32) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) (async, rerun: 32) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r2, 0x0, 0x0, 0x2, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB='\a'], 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x1, 0xa, 0x100, "8a080d1640f534477875ca0e5b4907b3c70c51674293ff28f0234206bb6872ba", 0x797a6505}) 6.639263758s ago: executing program 0 (id=1516): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000026c0)=ANY=[@ANYBLOB="400000002000081207000000fedbdf2502808000030000020100000008000b00774100000800fcffab1414bb08000100e00000010c000c4000000000000000042e523a52107e3992e423e279255b047878ef23f8216015cb"], 0x40}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000025c0)={'vlan0\x00', {0x2, 0x4e21, @multicast1}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0x1, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000900000000000000040000001800000000"], &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x61, '\x00', r2, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$inet(r1, &(0x7f0000001780)={&(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="350e544dc2d63fb329ed9bd34a9f1ce21cdb990d2d26bfab8b2b9f9677c65c02894f2eed4222b9a31c4563e67fbb7e87588d94234cbfeec66065a30c794362d46e6e2be9d22056c3116e11730ff46a80f59ba50869ddf16eab18991ebc4917b50501ec160d323040f33f23a34ea9218f6f07e3ec70c2869caecea515a8abfb6e3b1266229bbc6395d38c88db946c972dabdb7feaa9ff5a99f27f0f52ff945c4a4979a76c3ad9cd69582c192dcd3fada37274955e67365eb81a", 0xb9}, {&(0x7f0000001440)="cdfa2aa4b447831f7c1ce9d5628b7d8592edd9f9b165519d13b21384fc0ba59f6421b5f23b585693a39b952a2c7222f6cf1ffa4914a4f649ed891ddc2c5ff699a1169269d5af6c9718c66f5f57c11871394b43ff1623debaaaf75eacdd91fc68cfd80ef5fef710d5142452e8d7139dca9a44efedb15a3fdf62c153022d9d01447d6fb10e3a94b2097c291accc35ebb69b6cfbe39767579066f400900c48ff0a58a34d015671d638484c7b8bfb569f288e09f9e49aa", 0xb5}, {&(0x7f0000001500)="c2e67487f796ac093cc5a7bf7a26c17989b7", 0x12}], 0x4, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xc6, 0x0, 0x5, [0xd253, 0x7]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x2, 0x2}, {0x1, 0xd, "877973f91e6a604ba5a3bb"}, {0x0, 0x2}, {0x5, 0x6, "9761bff4"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x2c, 0xd5, 0x0, 0x5, [0xfffffffd, 0xffffffff, 0x80000, 0xffff, 0x8, 0x1ff, 0x5, 0x2, 0x100, 0x7]}, @cipso={0x86, 0x6, 0x1}]}}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x84, [@broadcast, @remote, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2]}, @lsrr={0x83, 0x13, 0xe4, [@multicast1, @rand_addr=0x64010100, @local, @private=0xa010102]}]}}}], 0x100}, 0x24040080) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000091401000000f4ffffffffff070001"], 0x18}, 0x1, 0x0, 0x0, 0xc001}, 0x204c040) (async) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) r8 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_attach_bpf(r8, 0x1, 0x31, &(0x7f0000000800), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) (async) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) (async) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x11, r5, 0x0, 0x2, 0x0, 0x0}) (async) readv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4096, 0x20}, {0x0, 0xfffffec6}], 0x2) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20840, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0xd, 0x6, 0x0, 0x0, 0x7, 0x4, 0x9}, {0x7, 0x7, 0x3, 0x7fff, 0x9, 0x1ff, 0x2}]}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$KVM_SET_VAPIC_ADDR(r12, 0x4008ae93, &(0x7f0000000040)=0xfec00000) 6.614683157s ago: executing program 0 (id=1517): r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0xfffffffffffffe97, &(0x7f0000000000)={0x40, 0xe, 0x2, "7646614468c5aa926cf4376cffb6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.905156071s ago: executing program 3 (id=1520): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000301010008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f00000001c0)=0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000140)="0fb4b909006bfd36f20f0d4f00660fedf3670f71d60536f08272f30a0f01bc3af0b8ff0f8ec8f30fa7c06667dceb", 0x2e}], 0x1, 0x0, &(0x7f0000000280)=[@cstype0={0x4, 0x6}], 0x1) r3 = socket$igmp6(0xa, 0x3, 0x2) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.262375314s ago: executing program 3 (id=1521): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "7b4f9f50", {0x3, 0x101, 0x0, 0xdb, 0x8, 0x81, 0xe}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="600e0f000000cf81416510d44aa84085a068b5207a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$video4linux(&(0x7f0000000400), 0xd, 0x28580) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100f, 0xffffffffffffffff, 0x0, 0x0}) timer_create(0x7, &(0x7f0000000600)={0x0, 0x7, 0x0, @thr={&(0x7f0000000480)="31a4331d96071e3e988503ce3bad08618e02ab9a15bf13cd0c2ad70846d27e8cac32f5e2a2d5f5cfc6b595e9427928e833308ee1c02fcc59413b108babe530afe91f59b29df76243d474902ffcc7a70578de7220ef18f0a9daf214cdc3fe434332a1d3127f58531e99490ba8df910fc51bdd767a30aa6ade79a7186bd371d6c04f695f75d38c849a0996f7b066e4419453b0a1547a077cbb2941aa218527e27441ca84c40b52327999b3a09445b2deb9023d29cad56993ce80c9835a567fdc3cfe8a636938f94bb4a0", &(0x7f0000000580)="b9ce7a0ae76ccf64c4057e2cc85aef07d5536e5bea04216988f170254df7638d5e28ecea2487356228a7924ee0139e1d38afb7d770958c08b19508973d6493b0fa3a8c09be790f1d35bcd724f0c8853a2ea137da052af7ef9313ba209e7d2706e4a39930c330609363"}}, &(0x7f0000000640)=0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00000006c0)={{0x77359400}, {r4, r5+10000000}}, &(0x7f0000000700)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x881}, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0xffffffffffffffae, 0x20000}, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)='(', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000000200)=0x3, 0x4) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000180)) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000070900010073797a10000000000900020073797a3200000000070000010000000000000073796e70726f78790000000004000280780000001100010000000000000000000000000a"], 0x78}}, 0x0) 5.187793732s ago: executing program 4 (id=1522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x200, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r1, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x3, 0x806, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) chmod(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) write(r9, &(0x7f0000000900)='100000k', 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x9, 0x1d, &(0x7f0000000b80)=ANY=[@ANYBLOB="ad6b0c000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32, @ANYBLOB="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"/270, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000700)='GPL\x00', 0x580, 0xb0, &(0x7f0000000740)=""/176, 0x41100, 0x1, '\x00', 0x0, @cgroup_sock=0x2, r4, 0x8, &(0x7f0000000880)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x1, 0x7, 0x2c2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, r9], 0x0, 0x10, 0xb1}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r11 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x40200) preadv(r11, &(0x7f00000000c0)=[{&(0x7f0000000a80)=""/246, 0xf6}], 0x1, 0x7fffffffffffffff, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r12, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000f14000429bd7000fd0100000000450040727000080403000000000008000300000000000800030003000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x804) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r15, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) 4.987211689s ago: executing program 4 (id=1523): fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000140)={0x9, {0x10001, 0x2, 0x1, 0x8}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ff030000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff000000559374cb47bf2e2c4db6cdb7467207020000f8ffffffb703000008000000b70400000200000085000000820000008500000005000000bf91000000000000b7020000020000008500000084000000b700000000000000950000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) 4.710523008s ago: executing program 4 (id=1524): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r4 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 4.578398986s ago: executing program 1 (id=1525): kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000c) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) (fail_nth: 6) 4.214446666s ago: executing program 1 (id=1526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000000)={0x2c, r1, 0xbb34a96d50fa80b5, 0x70ad25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x74}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f00000025c0)={0x2020}, 0x2020) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 4.210081974s ago: executing program 1 (id=1527): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = gettid() waitid(0x2, r4, 0x0, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) syz_open_dev$vbi(&(0x7f0000000340), 0x3, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000", @ANYRES16=r5, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x44001}, 0x44894) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) r7 = dup(r6) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r11 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0xe90}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/27, 0x1b}], 0x6}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) sendmmsg(r9, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00'], 0x28}}], 0x1, 0x4000000) fchdir(r8) close(r8) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd86) 3.515155311s ago: executing program 0 (id=1528): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8001, 0x6c0000) write(r0, &(0x7f0000000040)="8fa39f9314da24e9cb98544193748b3ef706373d1725d97822c08a47ec05e85a30acf7013d6015d2ec0714e90b2c43b42c51134e1559b820dd6168c5d851cde35f598e6156d2d5e322ea87a51274a2dd66b4219388a0d3f73a7baccee83df7851974187732226e4c7f8ab7d4eca2f9c138487ee32f226338df0da250db6de0ea83062894f8cb124621c17b711fd76558abd169ffb6817710d78369d04d1df9b8", 0xa0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0xf, 0x6, 0xfffffffffffffff0, 0x62, 0x9, 0x5, 0x6, 0x3, 0xee98, 0x8000000000000000, 0x8, 0x0, 0x1, 0x100000000000, 0xbefa, 0xf3], 0x2, 0x40000}) (async) pwritev(r0, &(0x7f0000002600)=[{&(0x7f0000000200)="322126b39c4e03eac7b7a87e9780c2f16c580e2f7c50e8ff3d105b338e5e37b560bde2410ae3f3e68472e036d3c30a91fb5c0d30dcaafa6bb791899682849c254247cf3ef88bba41cc12b862134b87c3e96c343028206a4edc930bfd3560923be90e3bbf4d373f809ed47a8bf86c03bfc9c70cc4817dc5fd589fe25673337b71616bbc69605bae2bac15504aa4c63a021fe4b531df711a4020d2c9537e63979a335de0387807d80250e456e4049ea757b90dcefba8391c5af945d4c5fbd6b631fb4f121a89a0191b22f07662adad2f1b161b9f8fe2d4aef5e0103b68e472168df3d921adcf94423682f97c2ccbfb6f48c8fd567ca1fac1893f71657a4f9c7c2452e12b5d504c55d995b3e0ad5957cfa5936d26f8fea3e07c173899cc9b280dd13b45c2881801978f1a498129ffcc9574f59ad73a6df99393752711744aaee8f45d93b14ec450353862bdc9c6ada85d144803d1162bfe741471780ab99f74605ab0f0801e3b55641f7a2ea659128f18b2194b7701979f0422dff862dce2ca41e7e2b44fb2d6f520a3640dc075df130672acdd188a519e523445212ec77cc7358782a99c8a1d816bdb796850ad82a1c7cf7941ff3114e5e8c385560deaddd0b1ed797b88401a809e7506caaed47b7d4ec6087fb8e367a699d2dc7c5d0d3c169bc75f3ad4b6389760403a1f62cae660135be62159e7edfb6d4dd611e80dd1234de66222105ba36ef4a1fc7683ac6331bcd3c656912ff6509805697061190fa5247baa2ff1ffd1ef0bb5d7072f158569384294e6e5ce30b2d0c2c6fcf90f94d5962449c59b3354c265607bb666883fd2e3cfc78028afedf5376a72d3ef41ec426490366fb66e652ee83bcb1af7a13a6265ccb3bf20fd6e2455a230d56135b84a44796ffc8d82e48b858995c02e369fec5c3d44f0e42b5cd160d735eda343fa7b3949b97b1b10160cdf1e47fd834112048b1ef3b6d9c4ab88d0476f8466860d14ddb1deb4004d6853668697ffe10557e0907ab5863f0abddf7ef714e8212107f6eeaf31c4e8193e16d145e72cc701d37718baac146cb32853d781120372e12e7dfa46b9c75ad1efc6febd322df6edab787a07f4311db995bfc9ede6d03c7f821962b723d9701acf106cbbf6e0d30ec63ec03b974abfd3d37fe5ecc6136f14879cf62c1bb594b56272e952bc4228c40a041e5f219f413c2e154ba5d2e031b525bbf736b1f3dd79fc43cecd1e52804999bce8f7fe5d68b41145abff7365e693ca4734a012764739fe06b370ebb1ff61014ebe3a134736fa7b771ffbb0a73578e587e0b9d0f53fa87c9209c395feb451eb5890824c8b91470f8a20519751b623b5735f3b0e74d4151a10a74a7616de791626c7f6fd56b598ed6c76457efadbc3d099c7722f043816ffde83e205d55e00350e699b8c494e3ab7914a166715f444c908fe9a64489f8935932e51ea63b1f582f54d7488b8f86fb7d78983134017d3bd5d66f4837d7137393434cfb894a5b7fcd0e06a37dcbcd7c068e2483853ed0f2562061f756b00f86a33bf1f0b28dd55759bf7dd4d759d81b1cfc0c064a450fae858eb808232fbe5ab22b7481c568c94e6e18fbd8c4322d4c99449383d7f6b90eebe379327ef5c3aa31dfb8206a37a6cfc028ac887f84477ebcec8796de5c1933698720700af7a8abde1d89ab1172f744bc857a839f9a42d9db4fd7b968440a09450e8c7f203faf675f8c5ec6b8ff3f1861b4012fa2f7143396fb2d820d74b96c45a9f37f38ad89a2372f50b06ac317bb02cd60c62133095e760b5b8d0a918587c6f582316a85a654697b09114ea5707485426f2513e0c4a1205db9ed550e9be0a5fa72b28890660c31d5e2082f5456fb44dd71c7ac3872f17b72c49b8d9b6adaeeb80122e1ff5fbed92aeca750055c0873e1db234e11e284b42b5d2227e090cd36fe2b1a4a8478c47af8cf2ed5a92fc736260dfb29feb90a4740f9d1958d50fae4999b296fc5df1e536503f18108e32cfaef9cedde7c330ba890ac19676b80208f32ea67d1bada6ead52184bc95a9cb9854f893a741eba9a00987ab7be2cc552f42fe099b1772a0706c811cce17ced95c7c48e6245ab80c3c21f739515222bd39babc52884268704aecdf9e8a20384de58295b37e2a855411426da6b33b25160290e5a601a1bcac28f1234bb784fa04b00df1a5afa8ef6aef67e947e3cb0e0c7aa89034672653275aba5051b4b4caffe5d156a481de21f3cd3963dd1a5eb916087cc00620b3d9860d9a9a311e16daebbb18860d5c7d59ad8d38a915e06a441fc886d981fad36b54bb7a939f35d4748b0220e36a6a9c17ff64d033a032052e4f59d957e35c24d725c4d944c732be10d1df8fb3d08e53d31e5ac77f89930620b494d6ce6f3adddf2e637aa815e974cc2d9d00d07b1b1a9d5f75aa9585290c90912483d57ac5a22696cb5751a3010877b336bf008a4cbeeb3c35b9a4bf9b3aa8bc9894106fd681955c2937a4fedccbbe1ebfc382434acdba543f12664c834bb36ee5578a9562f9b44236eadd1fbde2af71df5a391fa0a6ce5a61266dbad0f7258f5498d4e4a8a99f6562b45355d6d7bc9427bbbb8a64d9698d960d927028ff4b8e5a8408492e5a784466c345698a4cd96942de88221a5148c1e7c3536ada366f565b143b9cb5b7e2a0443dc9be0037728d73ee792bc0071e7d59971869f01f927eeba94b0cf370fddb1cc3f1b6957874e29d31f5d2a6e354efddf023fca1e86bbebc60a1e2f0844fc1b10892f589e9c6a8f2b188025159062b70194ccb94f2809f9c80b1752463a7e40f019d82e0bb0903f484628719b033cb0adbf56afbd61826fcd0719787a9b0d17386f9bdd02a6c776b9163ee5699b14fe533f93a7594cec712ee69005ff873a529609723e22d164cc3ddea32d74da2554bbd9559028a37dfb4de63d53612473fc7e2423bd29ed1820c9c7ff93e60b5db875aeea4a7f895f64ee30d44cdcd49b47a75ab1c90614c3011ef388774b4ae8a87d469f8a5af62dcf9288589c4d7fd70b20a0e0aefd53b20634cb9ea45a521d2072d85ad890f44ed350323e051142e7838a9e8cc1dba1f7850424ecdea1564ca147fa00c144e8e7c5f5d381685806a618a772241137bd427d6436dfe604a31dcf95b1e725fce088f2ecc3383d6bcadc1a504b8829f087e82bf80ea1b123c620cb542a1d0870f0a62dc4c68bfacf1d6f7a54fa327280ca8f7b5b0a100ea5bc80a99f2108cc3f0de004e3a009dcb36c715c98d49e2ae41c16bc8e36a851afc57e84fbee6c03072bf3ad09858afd5fee46dac9c6196627a3e6e9eb468b093224f7df96ca1dd757a5a69171c0c557ad3bdde132b59cb70661755b9d1275811872188c6e1c22f6744cf32879c859a8029f7e57465f427db542042363347252f93325e961fc5de0214648fb938316293e40b83865a825b8545a36ba8f18e88b9bba1c585ca1a11cc69497afd598c7c276359ca8d5ae92a58eeb7d15be7805267cd415125dde2fd7883d22f3b12e023b543ea7619c3191ea9d15c7c7da7f7f38bf43a0659be6ea8a232876a2c0b8cde8c0f177ecfa7f83748fcf2a893d21e0fa200e1b3e8c84c441094ca655757939284391c79132be899768a98d1b2d73d51f6d161382e1658ded52fe05eec79588ee9c2e166eaed41c77c3975b4bf3320716008caef49a1075d6d7aa03a3f104bf05a44f3c203f2297108e1f2c6fb7a0a63ee2b23a2120c66ce5f3e2d2a4323d18650842c4be95e04a45c7e91921072ce5ce8237e42a309bef6b11334d4209a087e3877d2f941d95a977dd497702c38316fc348c092dd75fe2a541a3bf24fb5355c55036f1c3b31e6ab7218995b6a35e00031d6ede19ff7528ed9bbcab1f9e071442a653ef45c34e8d1d2b3a3367cf5fc25c9d615f2a49e71a22dedbe9180a1884807ba6d72b0418a8c63c1aad7ac7ad877f3f1da2cfe6fb30d85d7785105cbe9a38f0c626b2b0a0a5fc0e4bca1a9c555f3dcb61516d5319e47687e19c79de55a130ea393063de798f8e654b1a0dfd7956acb4bce96a98cbdc9d6879b520027f2cc6336ff6f3eecc92f69167156ebe110364b224e8cb5137fed62e6e24100fb17d699b641ec2f5cef150f21a9f50dada9ec83a86d7c0ad01f34171cb9612b6822a35bcc902bdf04a02070ef82d289894a9ca087f4cc65e3b6d012d83dae8d388dab438027d3be36406e906c6ff5c4770e46e3778c36fdfd614ef0424b21f8efd0612928bb6146931e2ee3fafd01e44005a0d75cc4d5132113eae637435c6ead579009d4599c4c26faf6e8d15966830f294204a97ff33dcb5356f5ad3ca73038f700da4dbc6786e8990cfb3da8d338851e5071d15e87490d0783e39314f8b389e80a36c72c2fd9ee504719c4fb966e94d9e60749aaecc4ab8f3a2a6ebedeab6bb52279e2ca9e3da1c406c5c92f2e251f3695cd44eae8388a31d9c4347cc9ad7e739570679c62b89dadf677fbb794183d4d0ea8faef7002883ac544f080966f653b92ae640e586a4c979b6d8dd078954bda83ac25bbdacce6610e9a112ac2e3d579a5e0944af7be8e54beb2059e3928989b7cd766223ae02505a0adbe96b21995fe5ecb10c3759402a2bdcd82d55c93c74cb884a76a5e6b048ad04217cf1d9cedbf3d17aa5505ae6eb990be7da86f95a01d1ad9ca6737114b514f1024c4a91cb86b7f4573c5ba242476c56f8e09a6dd113828d6c82f5b5ed97673c7c6efa1b3aaca48b5b0c5babb31deda3686c991edb0aeb1e14cb9d0cd4a907e35d8567b38f7dde0a074bb5b2e4f37f3fcd5456a5883e3a913530fc80df1ae4ade3d1a34fa0ec2c6a22fb015f243eaf1bd80d5258e0372504b867d719456e4157490c2547a72515bb23c012c579b802119f6905f6d05d006dd7dfbb8e528156e2208e0d1a087183eb9ab95f9c69516ca240c6715a3f30cc4c72f20ff0b3e7bb6a594469f34406e353319535296d03a15c157b4a460c2818106398ccd45b336bada86e400c5b56aa78515d24a630c25fac0c4ea59a6e6895fc50c76bae8653ecc68fc2c36a8224b619a009e266e51bae2bb7f1988202aff4ef6d2a9c3b885726708bbaf0195ad726150922a75ef7d085a6ec4c7d4e2b94ba2a47a85d9dccf1cc5117ae3383f4440b8853ae806f7c84179508f3fd98a6139e1892067f92681a62ca1387d76a25084bef7cfbb96b1a7fdaa87861153ba185f349700b7f922f9c6cd84d27889ae760ea81877b55760e59efed96f2631e9535958a45c29c6d8e6d6ab8fd8d43ccb22284ae9a81b3959a92fda37513706f0d61ce582a493ce84f76fdafea0d5159417887c2c6491d89cb834f2b25c295edd814e172f228956dad1957e0542ed240a9c5530e61591f619dd4fa448aaff794c9f3816cc41ef9f31c41abf0cea86cd2e1f8c69f30f0335493d24f0d2073554ce449f23c8bd3b7f4b73f167a05232331d1f89ca5fb9473ec55b433fe9dd1842c8e266f608bbf1957a794d4a723ee263c1a1f7634df9803447965fdb42bae978d85d5f1a82ed72f9524817519d14395b91f5e07f554fdb8c1d9c4716bbaadf5a87db785a86262b1a70271bc5707728c5fd846015e45dbb722b01d3fd544e64653a5d28eff5d24783a2f164d3d62feb5f28c733f9cd60b7571510dad280d5432dbfaecc3b9ef871292a08f30d1852863114b39cbe1532b986116ee82d5bd4c664190668d403aad6262e81cea98274b1a3d12edd0053304fe0f15bf2af7496a25a29daa333aee1cd771f2f4b71ad287c9f0064ddf2", 0x1000}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="a3b0ce5d23d115350f503cf57ce174b738eec17f024c2114fbad98af6dd24224d23ebffc02a94e3d58a21359f4c087862251db09afcc75cc318544c0f0c878beb6018c3f6c83171455eb2767efc3383ebe1050f5fe7d4b364b72f107c70db0560270dbc8c4cf56b405a3beab8fd47f128ccdb0daa49752675d11068c11dd8e4d05f49041e9a9d3c20dd44bf570762b769621392e8e50cf1ada525e8d98b1542cbd4594b9565016019887b6b5adf1995eecde33dedbc835d0070db5c896a56250e7039b560250b665d6c0f917e181", 0xce}, {&(0x7f0000002300)="bd35f7b6c103bffe00b41e36902a214ba2ae7f647a1fcd006c7bf1529b5fd411bdef81576ec552060c56c6978335b7a9a377b8d14fcf4ae28f7868b94df622e9cdf8e9c44a1e22b9809895753bf00d36572d37acefc4db32c87558e0f0f16ea647a4900f66d67685b993efb048b315a61ff65fede4bda7df8635c6d6375804a21b7da9680b5a7d2cc9c358997012ca7f6107aba47c2dc56a94da2fca49105beba677ddd6317e661c68e83ac5e4cc8da548b6d589a57db7a284fcc5cccb7e719c08", 0xc1}, {&(0x7f0000002400)="55a422187fb4a7267665fab5d5680a718c5acf1fe25c03baa7035f167dfdd5c07c3447327a94254dd4b729650a377b4cfe1ade1a7149e89611e26739815a7205e07f4188419efa80c5fd", 0x4a}, {&(0x7f0000002480)="7425a4c8084960f68eb77f84ed25d9b21fd54ef80287fed6361c68ed378948344f53af247261cc4aee02d6c74c553d36a214323bbb97fdc6bedcb1fe64187fabc1579eb399d71504a151b7f4ee1202e45f3eea00e72377e8a4a2c5fdbe8d083b8256cbd2452e3851b42c9e31aea82d81ccacc8a419", 0x75}, {&(0x7f0000002500)="396e000d06fbb57079a17b7e406acd69be3f3a0e274ab841e109f8c5912873024447020d6ee299aba27986246fd70930c2ddfa4d6befdf805165a2fe72af3de644ed8d448a357328474c9f6269fa0d3fe6a36b5eb4230a06cb6787bdc3a64111ea24106afe06cff245c1a5163139ebf12524facce743f716e5db129f6577ef21fe5ac5255ee85ccac2431bd8a38d16d4360e70ac3b94ce3ea4037674e2e39bbe832668d4b0aa6b6d6b762564f99b0eb58ce30d024b23677b132b1be4f4796e811385a739183458d98ca464e9a19157f7dda05ea0ec26", 0xd6}], 0x7, 0xb9c, 0x3ff) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002680), 0x4800, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r2, 0x4004510d, &(0x7f00000026c0)=0x3) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002700), 0x200000, 0x0) ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002880)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002840)={&(0x7f0000002780)={0x8c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa3}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) (async) r4 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f00000028c0)={0xffffffffffffffff}) setsockopt$inet_tcp_int(r5, 0x6, 0x1, &(0x7f0000002940)=0x9, 0x4) r6 = openat$cgroup_ro(r5, &(0x7f0000002980)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$OCFS2_IOC_REFLINK(r6, 0x40186f04, &(0x7f0000002a40)={&(0x7f00000029c0)='/dev/sequencer2\x00', &(0x7f0000002a00)='/dev/snd/controlC#\x00', 0x8}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x34, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r7 = landlock_create_ruleset(&(0x7f0000002b80)={0x4008, 0x0, 0x2, 0x1c804, 0x4}, 0x30, 0x2) (async) r8 = dup(r1) socket$key(0xf, 0x3, 0x2) (async) ioctl$EVIOCSREP(r8, 0x40084503, &(0x7f0000002bc0)=[0x4, 0xfffffffe]) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) (async) getpeername$inet6(r1, &(0x7f0000002c00)={0xa, 0x0, 0x0, @dev}, &(0x7f0000002c40)=0x1c) (async) r9 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r9, 0x110, 0x5, &(0x7f0000002c80)=[0x2, 0x4], 0x2) (async) fsetxattr$security_capability(r7, &(0x7f0000002cc0), &(0x7f0000002d00)=@v1={0x1000000, [{0xb5, 0x2}]}, 0xc, 0x3) (async) syz_clone(0x4000, &(0x7f0000002d40)="9f824baa1d442f99169517c66751f2b16073aab039272c3281001c931e567a4a88e49fc7cb90dd47e4653e021c9a641d497f226398973ca2f3cfa7c5dd6c5dc9700d858bc946f4c7cb7b0d855997ab71c7635d917a91", 0x56, &(0x7f0000002dc0), &(0x7f0000002e00), &(0x7f0000002e40)="787f41d35f9f4f66629ca4581caaabf6077de7cf914e13feb68bfcaa9a69c7eff41467d638cddf8ca49c373def2c9cd001a1b3dd568c239dd6d7d59b86c40eec1d5dee124676069c5bff5a56decafbf6e9df804f987ed793728365e56d7fc2a9a482845681b2a1536589f36eb61e4a898a1e0dbf71366a4927d19cff2c94d1b382fc995597a99e17b4397367f1633802858e2664e47e0d79678837af9359537857dd240024ca7e544f5b56acd5a1dc9f823e07c2e26c425d2562e270e0c7b58b76f09d14019d18dc5547c3c77ee8") (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x11) poll(&(0x7f0000002f40)=[{r1, 0x824b}], 0x1, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000002f80), &(0x7f0000002fc0)=0xc) 3.351030771s ago: executing program 0 (id=1529): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x10000014}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000027c0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private0}}, &(0x7f00000028c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002980)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000002a80)=0xe8) fstat(r1, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000002c80), &(0x7f0000002cc0), &(0x7f0000002d00)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffffff, &(0x7f0000004d80)='./file0\x00', 0x4000, 0x10, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005040)={0x0, 0x0}, &(0x7f0000005080)=0xc) r13 = getegid() stat(&(0x7f00000051c0)='./file0\x00', &(0x7f0000005200)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r15, 0x5411, &(0x7f0000000100)) getgroups(0x6, &(0x7f0000005280)=[0xee01, 0xee01, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) syz_fuse_handle_req(r2, &(0x7f0000000440)="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", 0x2000, &(0x7f0000005400)={&(0x7f0000002440)={0x50, 0x0, 0x0, {0x7, 0x2d, 0xedc0, 0x10004900, 0xfff4, 0x2, 0xfff, 0x7, 0x0, 0x0, 0x40, 0xa}}, &(0x7f00000024c0)={0x18, 0x0, 0xfe6, {0x401}}, &(0x7f0000002500)={0x18, 0xfffffffffffffffe, 0x5, {0x3}}, &(0x7f0000002540)={0x18, 0x0, 0xf, {0x4}}, &(0x7f0000002580)={0x18, 0x0, 0x2, {0x4}}, &(0x7f0000002640)={0x28, 0x0, 0x8, {{0xce4d, 0x9}}}, &(0x7f0000002680)={0x60, 0x0, 0x4, {{0x7f, 0x8000000000000, 0xb, 0x7fff, 0x4, 0x424, 0x0, 0x10000}}}, &(0x7f0000002700)={0x18, 0x0, 0x200, {0x8}}, &(0x7f0000002740)={0x15, 0x0, 0xf, {']]$w\x00'}}, &(0x7f0000002780)={0x20, 0x0, 0x0, {0x0, 0x12}}, &(0x7f0000002900)={0x78, 0x0, 0x83, {0x7, 0x23, 0x0, {0x4, 0x8, 0x3, 0x0, 0x6, 0x3c, 0x2, 0x7, 0x81, 0x6000, 0x9, r6, 0xffffffffffffffff, 0x3, 0x6}}}, &(0x7f0000002b40)={0x90, 0x0, 0x3, {0x4, 0x2, 0x80, 0x3ff, 0x400, 0x1, {0x2, 0x3, 0x10000, 0x8000, 0x6a50, 0x80, 0x3, 0x10000, 0x4, 0x8000, 0x2, r7, r8, 0x3b, 0x6}}}, &(0x7f0000002c00)={0x50, 0xfffffffffffffff5, 0x9, [{0x5, 0x4, 0x2, 0x8000, '#.'}, {0x0, 0xc, 0x2, 0x7, '\\!'}]}, &(0x7f0000004ec0)={0x150, 0x0, 0xfffffffffffffffd, [{{0x2, 0x3, 0x6, 0x7fffffff, 0xadb5, 0x8001, {0x2, 0x4, 0xa553, 0x3, 0x54, 0x8001, 0x80, 0xeb2, 0x400, 0xc000, 0x5, r9, r10, 0x6, 0x4}}, {0x5, 0x100000001, 0x1, 0xf, '\\'}}, {{0x4, 0x1, 0x24f30f9c, 0x8, 0x3, 0x2, {0x2, 0xc59, 0x8, 0x0, 0xff, 0x0, 0x1eb, 0x0, 0x4, 0x8000, 0x5, 0x0, r11, 0x5, 0x57}}, {0x2, 0x9, 0x5, 0x0, ' #\\\'^'}}]}, &(0x7f00000050c0)={0xa0, 0xfffffffffffffff5, 0x6, {{0x2, 0x3, 0x1000, 0x5, 0x800, 0x6, {0x5, 0x5b, 0x1, 0x2, 0x2, 0x2, 0x7, 0x5, 0x5, 0x6000, 0x0, r12, r13, 0x101, 0x7c}}, {0x0, 0x6}}}, &(0x7f0000005180)={0x20, 0x0, 0x81, {0xf, 0x4, 0x4}}, &(0x7f00000052c0)={0x130, 0xffffffffffffffda, 0x89c, {0x7, 0x3, 0x0, '\x00', {0x40, 0xff, 0x3, 0x7, r14, r16, 0x4000, '\x00', 0x7f, 0xa2a, 0x0, 0x1, {0x8000000000000001}, {0xf, 0x3da4}, {0x2, 0x2}, {0xffffffffffff74e6, 0xffff0001}, 0x5, 0x0, 0x8000, 0x8888}}}}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000080a010000000000000000000a0000000900010073797a31000000000900020073797a310000000020000000020a010000000000000000000a0000000900010073797a3100000000140000001100010000000000000000000a00000a"], 0x68}}, 0x0) r17 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r17, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x120) r18 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000120001030000000000000000000000004e22ff0f00"/56, @ANYRES32=r18, @ANYBLOB="0000000000000000fffffff0000000000800030011"], 0x54}}, 0x0) request_key(&(0x7f00000008c0)='user\x00', &(0x7f00000006c0)={'syz', 0x0}, &(0x7f00000007c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(P\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88\xc425@\x0f\xde\x9e\xb437\xbe\xd1$\x00\xcf\x89\x0f\x10', 0xfffffffffffffffd) add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380), 0x0, 0xfffffffffffffffd) close(r17) 3.318139962s ago: executing program 2 (id=1530): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 3.025441463s ago: executing program 1 (id=1531): syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120110034926d510950b9001100780000904200a0002060d01"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 2.96749177s ago: executing program 4 (id=1532): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) 1.830616307s ago: executing program 2 (id=1533): keyctl$revoke(0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)=@secondary) r0 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100), 0x0, 0xfffffffffffffff9) keyctl$invalidate(0x15, r0) r1 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x180) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x4, 0x32, &(0x7f00000001c0)=""/50}]}) close(r1) fchdir(r1) r3 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) bind$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xe, 0x0, 0x1, 0xfff, '\x00', 0x0, r2, 0x2, 0x4, 0x1}, 0x50) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x100000000) dup(r4) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000380)={0x0, 0x7}) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3f}, 0x1c) keyctl$get_keyring_id(0x0, r0, 0xffff) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x200040, 0x88, 0x20}, 0x18) file_setattr(r5, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x2, 0xfffffffc, 0x7fff, 0x5, 0xca}, 0x18, 0x1000) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x202001, 0x103, 0x6}, 0x18) ioctl$BLKRAGET(r6, 0x1263, &(0x7f0000000580)) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r7, 0x0, 0xb, 0x28, &(0x7f0000000640)="a1fb34d48f6dbd121ac8a8", &(0x7f0000000680)=""/40, 0x8, 0x0, 0x9f, 0xe7, &(0x7f00000006c0)="3545f659c79359bf0362155395f4474c9b6bca01d2a69ee1fc753ce2621e2380f52f4b45fcdc6f9c285aeaed877d5fdfa8ffb0701f2963e09ff6c8fb56876f837390771b5f5d0e8f46126f96432ba2e757c8122ef5f902482edbc52f97f1833d33339b82e997802959dab0d0e5f0cfdbd6da5bc6671021b4927e13058e8a102ae4f3bcf6a7daccadbf76166afa8bf28b0a265d2d1d4729bec2880e9097ea2b", &(0x7f0000000780)="ba383177678c3ede7f248327cd5333e6b37335fa78eeecf4df2007cfb83c9056cea4bd8db5b349396c05b8ee120ff158c5a25c8acf7d7d8a3f2441ac0f677e340a84ea78a0640c98f488e6b6a247110f73a457cb5eae30e40f3a09bc8d9cca466513f5069eca8adf5707b47c4e6fea3e68b5b6ca688edfbaf3a9b8aed5d1b1fbb419a3844058294b831483fcfa5e303772090a5d2479408c7e36894eea67a256676b772991fb9d01bcb84695753125725d439601b7937e618578445d41f2b8009104787c6e2227d822ede0834c59f939bf5faa794320952264d4ecdb50864b2d45f78a52f02ca1", 0x5}, 0x50) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000900)={0x8, 0x0, {0x1, 0x2, 0x4, 0x0, 0x4}, 0x85}) bind$vsock_stream(r2, &(0x7f0000000980)={0x28, 0x0, 0x0, @my=0x0}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/power/pm_freeze_timeout', 0x511402, 0x84) keyctl$dh_compute(0x17, &(0x7f0000000a00)={r0, r0, r0}, &(0x7f0000000a40)=""/74, 0x4a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa0, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1b9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 1.781088959s ago: executing program 2 (id=1534): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRDESCSIZE(r1, 0x4004480d, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', '', [{}, {0x20, 'keyring\x00'}, {0x20, '..'}, {0x20, 'cpuacct.usage_percpu_user\x00'}, {0x20, '/dev/uhid\x00'}, {0x20, 'syz'}]}, 0x3b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000081e000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000051a000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r3, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x29c}], 0x1, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff}, 0x1c) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)) r7 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) pread64(r7, &(0x7f0000000080)=""/73, 0x716c8482, 0x936) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 1.606689945s ago: executing program 4 (id=1535): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000009c0)="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", 0x2000, &(0x7f000000b1c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r0, &(0x7f0000006680)=[{{&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f0000003a40)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/93, 0x5d}], 0x3, &(0x7f0000003a80)=""/19, 0x13}, 0x4}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/150, 0x96}, {&(0x7f0000003c80)=""/35, 0x23}, {&(0x7f0000003cc0)=""/255, 0xff}], 0x4, &(0x7f0000003e00)=""/134, 0x86}, 0x2}, {{&(0x7f0000003ec0)=@nfc, 0x80, &(0x7f0000004380)=[{&(0x7f0000003f40)=""/231, 0xe7}, {&(0x7f0000004040)=""/178, 0xb2}, {&(0x7f0000004100)=""/123, 0x7b}, {&(0x7f0000004180)=""/230, 0xe6}, {&(0x7f0000004280)=""/202, 0xca}], 0x5}, 0xffff}, {{&(0x7f0000004400)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004480)=""/23, 0x17}, {&(0x7f00000044c0)=""/130, 0x82}, {&(0x7f0000004580)=""/144, 0x90}, {&(0x7f0000004640)=""/42, 0x2a}, {&(0x7f0000004680)=""/2, 0x2}, {&(0x7f00000046c0)=""/240, 0xf0}, {&(0x7f00000047c0)=""/68, 0x44}, {&(0x7f0000004840)=""/101, 0x65}], 0x8, &(0x7f0000004940)=""/119, 0x77}, 0x7}, {{&(0x7f00000049c0)=@isdn, 0x80, &(0x7f0000005d80)=[{&(0x7f0000004a40)=""/34, 0x22}, {&(0x7f0000004a80)=""/215, 0xd7}, {&(0x7f0000004b80)=""/204, 0xcc}, {&(0x7f0000004c80)=""/50, 0x32}, {&(0x7f0000004cc0)=""/24, 0x18}, {&(0x7f0000004d00)=""/119, 0x77}, {&(0x7f0000004d80)=""/4096, 0x1000}], 0x7}, 0x1}, {{0x0, 0x0, &(0x7f0000005ec0)=[{&(0x7f0000005e00)=""/192, 0xc0}], 0x1, &(0x7f0000005f00)=""/2, 0x2}, 0x5}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000005f40)=""/60, 0x3c}, {&(0x7f0000005f80)=""/177, 0xb1}, {&(0x7f0000006040)=""/211, 0xd3}], 0x3, &(0x7f0000006180)=""/158, 0x9e}, 0x1}, {{0x0, 0x0, &(0x7f0000006500)=[{&(0x7f0000006240)=""/177, 0xb1}, {&(0x7f0000006300)=""/56, 0x38}, {&(0x7f0000006340)=""/134, 0x86}, {&(0x7f0000006400)=""/14, 0xe}, {&(0x7f0000006440)=""/156, 0x9c}], 0x5, &(0x7f0000006580)=""/247, 0xf7}, 0x7}], 0x8, 0x2000, &(0x7f0000006880)={0x77359400}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.135357455s ago: executing program 4 (id=1536): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e9}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_io_need_get_data_sqe={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x0, {0xe0}, 0x0, 0x0, '\x00', {0x2, 0x97c, 0x5, &(0x7f0000001240)=@buf_max_buf="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"}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000001200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) sendto(r8, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r7, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xa4, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pimreg1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) syncfs(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4628, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3ff}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="92ffffffffffffff29000000390000005e0000cd00000000397f7b883513bfb13be78524e8487b2bf6f7fbf9e79ad56fa813149f2398"], 0x18}, 0x40c0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 853.29528ms ago: executing program 2 (id=1537): kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000c) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000), 0xa, 0x41) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) (fail_nth: 7) 613.297142ms ago: executing program 3 (id=1538): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x84000800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8}, 0x101) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x14, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x55, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x6}, {0x0, 0x5, 0xd4, '\x00', 0xf9}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0xd4, '\x00', 0xdf}, {0x71, 0xd7, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x0, '\x00', 0x6}, {0xb, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0xff, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x8}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x44}]}}) 386.725831ms ago: executing program 2 (id=1539): r0 = socket$inet(0x2, 0x5, 0x0) (async) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) (async) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async) r2 = epoll_create1(0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r3, 0x0, r4) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x20000001}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x20000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f00000002c0)={0xa0000013}) (async) pipe2$9p(0x0, 0x81000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000580)={0xa0002008}) (async) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aa93aaaaaaaaaaaaaaaaaabb8100000000069078ac1e0101ac1414aa0000400162881dfe9020157387a47e24556daad250935c3705ba9c9f864b1891226ee903213f096b08242e7ebbb0f742ca8c709c302e8ced726ff087e5d8c93159c6c7abb286b7e0ef541e36d7cf327d3671a41389ffe10bc5e024453ae45fd0ec39089335aaea4291d6a900a347af7569", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0002000090780000052a000001010000002b000006960000000000000b32ffffff01000000020000089100000008000000040000"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x69, 0xfc, 0x41, 0x10, 0xa2c, 0x8, 0x1d64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x7, 0x80, 0x0, "", [{{0x9, 0x4, 0x2c, 0xa, 0x0, 0x8b, 0x17, 0x65, 0x1}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) 248.179148ms ago: executing program 2 (id=1540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)=@gettaction={0xac, 0x32, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb02}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x27}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000200)=""/61) close(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0xffff, @private=0xa010100}]}, &(0x7f0000000080)=0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r7, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000140)=0x6, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvmmsg(r7, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="be", 0x1}, {0x0}], 0x2, &(0x7f0000001240)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r8], 0x20, 0x6040}, 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={r8, 0xa4, &(0x7f0000000b00)=[@in6={0xa, 0x4e21, 0x0, @loopback}, @in6={0xa, 0x4e20, 0xaac, @private1={0xfc, 0x1, '\x00', 0x1}, 0x401}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @multicast2}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r9, 0x91, "e3c118235ce6a8c19fc672ef6c92beb4f068b0cccd76b516b004eacbc95701d36e84fb46aefda7b8702e503999e34a979bc85f7e91a42a8d284c44497a433664895a77eae43c9095245c694f58dc15f3c125111c960f0d910e9b618e03d5c91ace00bf2963510116cb7f668a0349ea95657a968d1d9dddb6b5aa1845691233a744f522b40446a368e965c3506024083112"}, &(0x7f0000000140)=0x99) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)) 180.40657ms ago: executing program 0 (id=1541): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1) 0s ago: executing program 3 (id=1542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x1) (async) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r3, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)=0x2b1b1983) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000005c0)="f08354cb003445d9ff0f01df65646466666667470f0118460f78bcf1b4000000460f013a66ba4300edc4429590bcf5045317e065430f00d666baf80cb8e5e89d8bef66bafc0cec", 0x47}], 0x1, 0x1c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000005c0)="f08354cb003445d9ff0f01df65646466666667470f0118460f78bcf1b4000000460f013a66ba4300edc4429590bcf5045317e065430f00d666baf80cb8e5e89d8bef66bafc0cec", 0x47}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) kernel console output (not intermixed with test programs): ? [ 292.593024][ T5666] creative-sb0540 0003:041E:3100.000E: input,hidraw0: USB HID v0.00 Joystick [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 292.637622][ T5761] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 292.694840][ T5690] usb 4-1: USB disconnect, device number 66 [ 292.773790][ T9619] fido_id[9619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 292.866444][ T5666] usb 3-1: USB disconnect, device number 63 [ 292.889695][ T5666] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 293.173823][ T9629] fuse: Bad value for 'fd' [ 293.183048][ T9631] fuse: Bad value for 'fd' [ 293.238681][ T5690] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 293.334746][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 293.401016][ T5690] usb 2-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 293.428241][ T5690] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 293.450172][ T5690] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 293.485555][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.511861][ T5690] usb 2-1: Product: syz [ 293.523619][ T5690] usb 2-1: Manufacturer: syz [ 293.536667][ T5690] usb 2-1: SerialNumber: syz [ 293.574990][ T9639] GUP no longer grows the stack in syz.2.1111 (9639): 200000004000-200000005000 (200000001000) [ 293.587432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 293.619264][ T9639] CPU: 0 UID: 0 PID: 9639 Comm: syz.2.1111 Not tainted syzkaller #0 PREEMPT(full) [ 293.619293][ T9639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.619321][ T9639] Call Trace: [ 293.619330][ T9639] [ 293.619338][ T9639] dump_stack_lvl+0xe8/0x150 [ 293.619375][ T9639] __get_user_pages+0x23b6/0x2750 [ 293.619400][ T9639] ? __gup_longterm_locked+0xc3b/0x15c0 [ 293.619445][ T9639] ? __gup_longterm_locked+0xc3b/0x15c0 [ 293.619496][ T9639] __gup_longterm_locked+0xd52/0x15c0 [ 293.619524][ T9639] ? lock_acquire+0x106/0x350 [ 293.619575][ T9639] gup_fast_fallback+0x1d92/0x20e0 [ 293.619599][ T9639] ? lockdep_hardirqs_on+0x7b/0x110 [ 293.619663][ T9639] ? __pfx_gup_fast_fallback+0x10/0x10 [ 293.619691][ T9639] ? is_valid_gup_args+0x11f/0x200 [ 293.619717][ T9639] ? get_user_pages_fast+0x4d/0xb0 [ 293.619744][ T9639] __iov_iter_get_pages_alloc+0x378/0xa40 [ 293.619778][ T9639] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 293.619813][ T9639] iov_iter_get_pages2+0x5e/0xa0 [ 293.619844][ T9639] __se_sys_vmsplice+0x7b5/0x1660 [ 293.619891][ T9639] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 293.619924][ T9639] ? __pfx_futex_wake+0x10/0x10 [ 293.619954][ T9639] ? do_raw_spin_lock+0x12b/0x2f0 [ 293.620044][ T9639] do_syscall_64+0x166/0x520 [ 293.620076][ T9639] ? trace_irq_disable+0x3b/0x140 [ 293.620108][ T9639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.620132][ T9639] ? clear_bhb_loop+0x70/0xc0 [ 293.620159][ T9639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.620182][ T9639] RIP: 0033:0x7fab2279e0d9 [ 293.620203][ T9639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.620223][ T9639] RSP: 002b:00007fab209f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 293.620247][ T9639] RAX: ffffffffffffffda RBX: 00007fab22a25fa0 RCX: 00007fab2279e0d9 [ 293.620264][ T9639] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000007 [ 293.620278][ T9639] RBP: 00007fab22835024 R08: 0000000000000000 R09: 0000000000000000 [ 293.620292][ T9639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.620305][ T9639] R13: 00007fab22a26038 R14: 00007fab22a25fa0 R15: 00007fab22b4fa48 [ 293.620341][ T9639] [ 293.852693][ T9627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.863272][ T9627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.257489][ T5344] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 294.338677][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'. [ 294.408588][ T5344] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 294.421977][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.435190][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.445796][ T5344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.460370][ T5344] usb 3-1: config 0 descriptor?? [ 294.699450][ T5344] usbhid 3-1:0.0: can't add hid device: -71 [ 294.708252][ T5344] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 294.717639][ T5666] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 294.723718][ T5344] usb 3-1: USB disconnect, device number 64 [ 294.878447][ T5666] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 294.888880][ T5666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.321073][ T5666] wacom 0003:056A:033B.000F: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 295.347044][ T5666] wacom 0003:056A:033B.000F: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0 [ 295.376003][ T5666] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.000F/input/input52 [ 295.817518][ T5666] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 295.965209][ T9693] ip_tables: iptables: counters copy to user failed while replacing table [ 295.978698][ T10] usb 5-1: USB disconnect, device number 65 [ 295.999076][ T5666] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 296.025487][ T5666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.037570][ T5666] usb 3-1: Product: syz [ 296.041889][ T5666] usb 3-1: Manufacturer: syz [ 296.049832][ T5666] usb 3-1: SerialNumber: syz [ 296.183809][ T9697] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1129'. [ 296.203931][ T5690] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 296.241328][ T5690] usb 2-1: USB disconnect, device number 52 [ 296.257492][ T5761] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 296.293579][ T6964] udevd[6964]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.315874][ T9680] fuse: Unknown parameter '00000000000000000006' [ 296.449002][ T5761] usb 4-1: New USB device found, idVendor=0403, idProduct=e80d, bcdDevice=4f.70 [ 296.462807][ T5761] usb 4-1: config 5 has an invalid interface number: 136 but max is 0 [ 296.472135][ T5761] usb 4-1: config 5 has no interface number 0 [ 296.484700][ T5761] usb 4-1: config 5 interface 136 altsetting 2 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 296.510481][ T5761] usb 4-1: config 5 interface 136 altsetting 2 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 296.550166][ T9680] misc userio: The device must be registered before sending interrupts [ 296.562801][ T5761] usb 4-1: config 5 interface 136 altsetting 2 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 296.593393][ T5761] usb 4-1: config 5 interface 136 has no altsetting 0 [ 296.627153][ T5761] usb 4-1: string descriptor 0 read error: -22 [ 296.642905][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.697479][ T9693] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 296.725433][ T5761] ftdi_sio 4-1:5.136: FTDI USB Serial Device converter detected [ 296.751992][ T5666] rtl8150 3-1:1.0: couldn't reset the device [ 296.761747][ T5761] ftdi_sio ttyUSB0: unknown device type: 0x4f70 [ 296.772571][ T5666] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 296.812894][ T5666] usb 3-1: USB disconnect, device number 65 [ 296.822872][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 296.922606][ T5761] usb 4-1: USB disconnect, device number 67 [ 296.935845][ T5761] ftdi_sio 4-1:5.136: device disconnected [ 296.978518][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 296.984234][ T10] usb 2-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 296.994206][ T5690] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 297.003557][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.016003][ T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 297.027038][ T10] usb 2-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 297.040151][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 297.046829][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.057228][ T10] usb 2-1: config 0 descriptor?? [ 297.147503][ T5690] usb 5-1: Using ep0 maxpacket: 16 [ 297.154363][ T5690] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 297.164796][ T5690] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 297.178191][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.186367][ T5690] usb 5-1: Product: à „ [ 297.197559][ T5690] usb 5-1: Manufacturer: ៻게쪇ś机눊㒕郱鶴둒âºâ€‘塤他랦ãžç³¼å€¾å¼†ï€Žî§¿æ§Žì¦ìŸ â‚ê•å¶¬î„µï©˜ï€†âŒ½ë¼½å“Šæ©–㔶๫워嘲⒅暦覱ᵥꠅ洶傃ᦼ鈃ꌴ툾á¬â†€ãŒ±ä¤—á¥ÑžçŽ€ášìª£ä»‚焓跉᭘䰔æ‰é›­å¡«î³…斉Ⴥ羅쓛츭忻⓰鳲â»æ¿±î™¾á“¸Ì¢ì‘¥êŽ¡æµë©§ã‚‘㼔회삩ଠ䨅㇙ [ 297.236603][ T5690] usb 5-1: SerialNumber: syz [ 297.275791][ T9707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.291037][ T9707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.300546][ T9707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.313351][ T9707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.329274][ T9707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.341215][ T9707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.356414][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 297.357825][ T9707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.368378][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 297.384290][ T9707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.394067][ T9707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.404445][ T9707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.479404][ T5690] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 297.556972][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 297.578809][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 297.605473][ T5690] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 297.620421][ T10] usb 2-1: USB disconnect, device number 53 [ 297.716752][ T6964] udevd[6964]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.887562][ T5666] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 297.960307][ T9734] IPv6: sit1: Disabled Multicast RS [ 297.966718][ T9734] sit1: entered allmulticast mode [ 298.161752][ T9742] netlink: 'syz.3.1143': attribute type 10 has an invalid length. [ 298.179115][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.189214][ T9742] bond0: (slave team0): Enslaving as an active interface with an up link [ 298.217465][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 298.264495][ T9745] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1144'. [ 298.333090][ T9747] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1024 (2048 ns) > initial count (1664 ns). Using initial count to start timer. [ 298.357764][ T10] usb 2-1: device descriptor read/64, error -71 [ 298.586707][ T9751] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1024 (2048 ns) > initial count (1664 ns). Using initial count to start timer. [ 298.597648][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 298.737630][ T10] usb 2-1: device descriptor read/64, error -71 [ 298.760642][ T5666] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 298.848019][ T10] usb usb2-port1: attempt power cycle [ 298.907456][ T5666] usb 3-1: device descriptor read/64, error -71 [ 299.017756][ T5666] usb usb3-port1: attempt power cycle [ 299.037586][ T5690] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 299.187602][ T5690] usb 4-1: Using ep0 maxpacket: 16 [ 299.192936][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 299.201578][ T5690] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 299.212827][ T5690] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 299.224583][ T5690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 299.235957][ T10] usb 2-1: device descriptor read/8, error -71 [ 299.243908][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.252592][ T5690] usb 4-1: Product: syz [ 299.256794][ T5690] usb 4-1: Manufacturer: syz [ 299.262030][ T5690] usb 4-1: SerialNumber: syz [ 299.269412][ T5690] usb 4-1: config 0 descriptor?? [ 299.278724][ T5690] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 299.288193][ T5690] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 299.357506][ T5666] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 299.378037][ T5666] usb 3-1: device descriptor read/8, error -71 [ 299.478641][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 299.498273][ T10] usb 2-1: device descriptor read/8, error -71 [ 299.607974][ T10] usb usb2-port1: unable to enumerate USB device [ 299.617612][ T5666] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 299.638365][ T5666] usb 3-1: device descriptor read/8, error -71 [ 299.709880][ T5705] usb 5-1: USB disconnect, device number 66 [ 299.752643][ T5666] usb usb3-port1: unable to enumerate USB device [ 299.868822][ T5666] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 299.892994][ T5690] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 299.903353][ T5690] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 299.924360][ T5666] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 300.925675][ T5690] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 300.943339][ T5690] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 300.965292][ T5690] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 300.983112][ T5690] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 301.009289][ T5690] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 301.059682][ T9782] loop5: detected capacity change from 0 to 7 [ 301.072816][ T9782] Dev loop5: unable to read RDB block 7 [ 301.089934][ T9782] loop5: AHDI p2 [ 301.093789][ T9782] loop5: partition table partially beyond EOD, truncated [ 301.207917][ T5666] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 301.379346][ T5666] usb 5-1: Using ep0 maxpacket: 32 [ 301.388352][ T5666] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 301.408031][ T5666] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.429129][ T5666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.448778][ T5690] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 301.451528][ T5666] usb 5-1: Product: syz [ 301.465053][ T5666] usb 5-1: Manufacturer: syz [ 301.470752][ T5666] usb 5-1: SerialNumber: syz [ 301.486441][ T5666] usb 5-1: config 0 descriptor?? [ 301.496522][ T5690] usb 4-1: USB disconnect, device number 68 [ 301.516592][ T5666] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 301.551302][ T9791] syzkaller1: entered promiscuous mode [ 301.559483][ T5705] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 301.574110][ T9791] syzkaller1: entered allmulticast mode [ 301.813673][ T5666] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 301.822786][ T5705] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 301.836788][ T5666] quatech2 5-1:0.0: probe with driver quatech2 failed with error -8 [ 301.846503][ T5705] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 301.858414][ T5705] usb 2-1: config 1 has no interface number 0 [ 301.864802][ T5705] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 301.882179][ T5705] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 301.900919][ T5705] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 301.931156][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.945426][ T5705] usb 2-1: Product: syz [ 301.957424][ T5705] usb 2-1: Manufacturer: syz [ 301.969705][ T5705] usb 2-1: SerialNumber: syz [ 301.983972][ T9786] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 302.120020][ T191] usb 5-1: USB disconnect, device number 67 [ 302.176498][ T9795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1158'. [ 302.221225][ T5705] usb 2-1: Error in usbnet_get_endpoints (-71) [ 302.273685][ T5705] usb 2-1: USB disconnect, device number 58 [ 302.577540][ T5761] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 302.738288][ T5761] usb 3-1: Using ep0 maxpacket: 32 [ 302.754576][ T5761] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 302.779281][ T5761] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 302.803391][ T5761] usb 3-1: config 0 has no interface number 0 [ 302.827271][ T5761] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 302.866820][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.886605][ T5761] usb 3-1: Product: syz [ 302.898195][ T5761] usb 3-1: Manufacturer: syz [ 302.910715][ T30] audit: type=1326 audit(1787685087.281:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.3.1159" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77bf79e0d9 code=0x0 [ 302.949070][ T5761] usb 3-1: SerialNumber: syz [ 302.965270][ T5761] usb 3-1: config 0 descriptor?? [ 302.977953][ T9799] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.197186][ T9799] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 303.297567][ T5705] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 303.388286][ T9805] fuse: Unknown parameter 'max_re' [ 303.441589][ T5761] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 303.462993][ T5705] usb 5-1: Using ep0 maxpacket: 32 [ 303.470458][ T5761] asix 3-1:0.188: probe with driver asix failed with error -61 [ 303.484129][ T5705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 303.516080][ T5705] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.541494][ T5705] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.576317][ T5705] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 303.617690][ T5705] usb 5-1: config 0 interface 0 has no altsetting 0 [ 303.642946][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.674358][ T191] usb 3-1: USB disconnect, device number 70 [ 303.684118][ T5705] usb 5-1: config 0 descriptor?? [ 304.068022][ T5761] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 304.126873][ T5705] usbhid 5-1:0.0: can't add hid device: -71 [ 304.133808][ T5705] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 304.156503][ T5705] usb 5-1: USB disconnect, device number 68 [ 304.237494][ T5761] usb 2-1: Using ep0 maxpacket: 32 [ 304.263917][ T5761] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 304.275292][ T5761] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 304.285029][ T5761] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 304.294056][ T5761] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 304.303166][ T5761] usb 2-1: config 1 has no interface number 0 [ 304.312945][ T5761] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.323999][ T5761] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 304.337481][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.366753][ T5761] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 304.420542][ T9823] netlink: 'syz.3.1166': attribute type 1 has an invalid length. [ 304.563503][ T9823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.570585][ T5761] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 304.905223][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 304.959063][ T9847] fuse: Invalid gid '00000000000000000003' [ 304.999635][ T5761] usb 2-1: USB disconnect, device number 59 [ 305.023091][ T5761] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 305.128045][ T191] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 305.183534][ T9853] loop5: detected capacity change from 0 to 7 [ 305.198880][ T9853] Dev loop5: unable to read RDB block 7 [ 305.211757][ T9853] loop5: AHDI p2 [ 305.219692][ T9853] loop5: partition table partially beyond EOD, truncated [ 305.322350][ T191] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 305.367820][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.648599][ T5705] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 305.771058][ T191] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 305.790627][ T9865] cxacru 4-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 305.800271][ T191] usb 4-1: USB disconnect, device number 69 [ 305.802646][ T5761] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 305.814684][ T9865] cxacru 4-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 305.823542][ T5705] usb 5-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 305.841259][ T5705] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 305.856210][ T5705] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 305.869861][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.878039][ T5705] usb 5-1: Product: Й [ 305.882149][ T5705] usb 5-1: Manufacturer: Ðœ [ 305.886658][ T5705] usb 5-1: SerialNumber: ã  [ 305.917471][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 305.978145][ T5761] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 305.990930][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.999349][ T5761] usb 2-1: Product: syz [ 306.003567][ T5761] usb 2-1: Manufacturer: syz [ 306.008245][ T5761] usb 2-1: SerialNumber: syz [ 306.021660][ T5761] ums_eneub6250 2-1:1.0: USB Mass Storage device detected [ 306.033679][ T5761] scsi host1: usb-storage 2-1:1.0 [ 306.047719][ T10] usb 3-1: device descriptor read/64, error -71 [ 306.105986][ T5705] usb 5-1: low speed audio streaming not supported [ 306.112731][ T5705] usb 5-1: low speed audio streaming not supported [ 306.152832][ T5705] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 306.169845][ T5705] usb 5-1: USB disconnect, device number 69 [ 306.205472][ T6964] udevd[6964]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.298429][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 306.313625][ T5761] ums_eneub6250 2-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 306.341360][ T5761] usb 2-1: USB disconnect, device number 60 [ 306.437555][ T10] usb 3-1: device descriptor read/64, error -71 [ 306.451857][ T9872] input: syz1 as /devices/virtual/input/input56 [ 306.551111][ T10] usb usb3-port1: attempt power cycle [ 306.790983][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1185'. [ 306.897697][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 306.919515][ T10] usb 3-1: device descriptor read/8, error -71 [ 306.937488][ T5690] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 307.108766][ T5690] usb 5-1: Using ep0 maxpacket: 8 [ 307.120837][ T5690] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 307.146407][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.154892][ T5690] usb 5-1: Product: syz [ 307.160003][ T5690] usb 5-1: Manufacturer: syz [ 307.165930][ T5690] usb 5-1: SerialNumber: syz [ 307.167832][ T5761] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 307.191442][ T5690] usb 5-1: config 0 descriptor?? [ 307.207505][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 307.215683][ T5690] gspca_main: se401-2.14.0 probing 047d:5003 [ 307.249297][ T10] usb 3-1: device descriptor read/8, error -71 [ 307.328787][ T5761] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 307.340586][ T5761] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 307.354360][ T5761] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 307.365304][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.377725][ T10] usb usb3-port1: unable to enumerate USB device [ 307.614504][ T5690] gspca_se401: ExtraFeatures: 255 [ 307.669239][ T9897] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 307.784355][ T9902] loop5: detected capacity change from 0 to 7 [ 307.802298][ T9902] Dev loop5: unable to read RDB block 7 [ 307.810775][ T9902] loop5: AHDI p2 [ 307.814487][ T9902] loop5: partition table partially beyond EOD, truncated [ 307.825982][ T5690] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57 [ 307.860249][ T5690] usb 5-1: USB disconnect, device number 70 [ 307.958003][ T9908] input: syz1 as /devices/virtual/input/input58 [ 308.647542][ T5690] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 308.809419][ T5690] usb 5-1: Using ep0 maxpacket: 16 [ 308.816834][ T5690] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 308.838617][ T5690] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.855504][ T5690] usb 5-1: config 0 interface 0 has no altsetting 0 [ 308.862922][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.874106][ T5690] usb 5-1: config 0 descriptor?? [ 309.123375][ T5690] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 309.209909][ T5690] nzxt-smart2 0003:1E71:2009.0011: init_device failed: -38 [ 309.220964][ T5761] pegasus 2-1:1.0: setup Pegasus II specific registers [ 309.242064][ T5690] nzxt-smart2 0003:1E71:2009.0011: probe with driver nzxt-smart2 failed with error -38 [ 309.275662][ T5690] usb 5-1: USB disconnect, device number 71 [ 309.351112][ T5761] pegasus 2-1:1.0: can't locate MII phy, using default [ 309.378278][ T5761] pegasus 2-1:1.0: eth1, 3Com USB Ethernet 3C460B, 3a:fd:af:1d:ef:25 [ 309.416222][ T5761] usb 2-1: USB disconnect, device number 61 [ 309.607461][ T5690] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 309.789394][ T5690] usb 5-1: unable to get BOS descriptor or descriptor too short [ 309.810241][ T5690] usb 5-1: not running at top speed; connect to a high speed hub [ 309.823797][ T5690] usb 5-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 309.838671][ T5690] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 309.849754][ T5690] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.873670][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.893790][ T5690] usb 5-1: Product: syz [ 309.912038][ T5690] usb 5-1: Manufacturer: syz [ 309.923776][ T5690] usb 5-1: SerialNumber: syz [ 309.956961][ T9954] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 310.168773][ T5690] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 310.201951][ T5690] imon 5-1:5.0: unable to initialize intf0, err -19 [ 310.231423][ T5690] imon:imon_probe: failed to initialize context! [ 310.257867][ T5690] imon 5-1:5.0: unable to register, err -19 [ 310.301346][ T5690] usb 5-1: USB disconnect, device number 72 [ 310.880113][ T9975] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1024 (2048 ns) > initial count (1664 ns). Using initial count to start timer. [ 310.985311][ T9981] FAULT_INJECTION: forcing a failure. [ 310.985311][ T9981] name failslab, interval 1, probability 0, space 0, times 0 [ 311.021779][ T9981] CPU: 1 UID: 0 PID: 9981 Comm: syz.2.1202 Not tainted syzkaller #0 PREEMPT(full) [ 311.021804][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.021815][ T9981] Call Trace: [ 311.021823][ T9981] [ 311.021831][ T9981] dump_stack_lvl+0xe8/0x150 [ 311.021862][ T9981] should_fail_ex+0x410/0x560 [ 311.021887][ T9981] should_failslab+0xa8/0x100 [ 311.021908][ T9981] __kmalloc_noprof+0xfe/0x720 [ 311.021932][ T9981] ? rcu_is_watching+0x16/0xb0 [ 311.021950][ T9981] ? tomoyo_realpath_from_path+0xef/0x640 [ 311.021976][ T9981] ? tomoyo_realpath_from_path+0xef/0x640 [ 311.022007][ T9981] tomoyo_realpath_from_path+0xef/0x640 [ 311.022041][ T9981] ? tomoyo_path_number_perm+0x219/0x5f0 [ 311.022063][ T9981] tomoyo_path_number_perm+0x246/0x5f0 [ 311.022087][ T9981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 311.022108][ T9981] ? __lock_acquire+0x683/0x2cf0 [ 311.022155][ T9981] ? hook_file_ioctl+0x1f2/0x600 [ 311.022193][ T9981] ? __fget_files+0x2a/0x420 [ 311.022216][ T9981] ? __fget_files+0x2a/0x420 [ 311.022234][ T9981] ? __fget_files+0x3a2/0x420 [ 311.022252][ T9981] ? __fget_files+0x2a/0x420 [ 311.022276][ T9981] security_file_ioctl+0xc3/0x2a0 [ 311.022298][ T9981] __se_sys_ioctl+0x47/0x170 [ 311.022326][ T9981] do_syscall_64+0x166/0x520 [ 311.022352][ T9981] ? trace_irq_disable+0x3b/0x140 [ 311.022378][ T9981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.022403][ T9981] ? clear_bhb_loop+0x70/0xc0 [ 311.022427][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.022447][ T9981] RIP: 0033:0x7fab2279e0d9 [ 311.022464][ T9981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.022481][ T9981] RSP: 002b:00007fab209f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.022501][ T9981] RAX: ffffffffffffffda RBX: 00007fab22a25fa0 RCX: 00007fab2279e0d9 [ 311.022515][ T9981] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000004 [ 311.022528][ T9981] RBP: 00007fab209f6090 R08: 0000000000000000 R09: 0000000000000000 [ 311.022540][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.022551][ T9981] R13: 00007fab22a26038 R14: 00007fab22a25fa0 R15: 00007fab22b4fa48 [ 311.022581][ T9981] [ 311.022599][ T9981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 311.380405][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'. [ 311.649519][ T5690] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 311.808686][ T5690] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 311.836326][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.854064][ T5690] usb 2-1: Product: syz [ 311.867317][ T5690] usb 2-1: Manufacturer: syz [ 311.876229][ T5690] usb 2-1: SerialNumber: syz [ 311.890673][ T5690] usb 2-1: config 0 descriptor?? [ 312.109658][ T5690] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 312.127464][ T10] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 312.289260][ T10] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 312.312897][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.334711][ T10] usb 5-1: config 0 has no interface number 0 [ 312.347588][ T10] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 312.376895][ T10] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.398427][ T10] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.428411][ T10] usb 5-1: config 0 interface 1 has no altsetting 0 [ 312.460340][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.483165][T10031] FAULT_INJECTION: forcing a failure. [ 312.483165][T10031] name failslab, interval 1, probability 0, space 0, times 0 [ 312.499670][T10031] CPU: 1 UID: 0 PID: 10031 Comm: syz.3.1217 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.499698][T10031] Tainted: [L]=SOFTLOCKUP [ 312.499705][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.499716][T10031] Call Trace: [ 312.499722][T10031] [ 312.499730][T10031] dump_stack_lvl+0xe8/0x150 [ 312.499760][T10031] should_fail_ex+0x410/0x560 [ 312.499785][T10031] should_failslab+0xa8/0x100 [ 312.499805][T10031] __kmalloc_noprof+0xfe/0x720 [ 312.499831][T10031] ? tomoyo_encode+0x2ad/0x570 [ 312.499855][T10031] ? tomoyo_encode+0x2ad/0x570 [ 312.499885][T10031] tomoyo_encode+0x2ad/0x570 [ 312.499914][T10031] tomoyo_realpath_from_path+0x5fa/0x640 [ 312.499948][T10031] ? tomoyo_path_number_perm+0x219/0x5f0 [ 312.499971][T10031] tomoyo_path_number_perm+0x246/0x5f0 [ 312.499994][T10031] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 312.500014][T10031] ? __lock_acquire+0x683/0x2cf0 [ 312.500053][T10031] ? hook_file_ioctl+0x1f2/0x600 [ 312.500090][T10031] ? __fget_files+0x2a/0x420 [ 312.500114][T10031] ? __fget_files+0x2a/0x420 [ 312.500133][T10031] ? __fget_files+0x3a2/0x420 [ 312.500151][T10031] ? __fget_files+0x2a/0x420 [ 312.500173][T10031] security_file_ioctl+0xc3/0x2a0 [ 312.500193][T10031] __se_sys_ioctl+0x47/0x170 [ 312.500219][T10031] do_syscall_64+0x166/0x520 [ 312.500245][T10031] ? trace_irq_disable+0x3b/0x140 [ 312.500272][T10031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.500290][T10031] ? clear_bhb_loop+0x70/0xc0 [ 312.500311][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.500329][T10031] RIP: 0033:0x7f77bf79e0d9 [ 312.500345][T10031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.500361][T10031] RSP: 002b:00007f77c05c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.500379][T10031] RAX: ffffffffffffffda RBX: 00007f77bfa25fa0 RCX: 00007f77bf79e0d9 [ 312.500394][T10031] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000004 [ 312.500406][T10031] RBP: 00007f77c05c8090 R08: 0000000000000000 R09: 0000000000000000 [ 312.500418][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.500428][T10031] R13: 00007f77bfa26038 R14: 00007f77bfa25fa0 R15: 00007f77bfb4fa48 [ 312.500456][T10031] [ 312.500698][ T10] usb 5-1: config 0 descriptor?? [ 312.502776][T10031] ERROR: Out of memory at tomoyo_realpath_from_path. [ 312.818249][ T5690] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 312.884200][ T5690] usb 2-1: USB disconnect, device number 62 [ 312.977954][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'. [ 313.003556][T10018] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.036803][T10043] xt_hashlimit: size too large, truncated to 1048576 [ 313.044563][T10041] geneve1: entered promiscuous mode [ 313.090400][T10043] xt_hashlimit: invalid interval [ 313.162156][T10018] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 313.383420][T10054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1221'. [ 313.398862][T10054] netlink: 'syz.2.1221': attribute type 1 has an invalid length. [ 313.421912][ T10] usbhid 5-1:0.1: can't add hid device: -71 [ 313.437473][ T10] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 313.446207][T10054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 313.455982][ T10] usb 5-1: USB disconnect, device number 73 [ 313.490911][T10058] bond3: (slave gretap1): making interface the new active one [ 313.501669][T10058] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 313.827569][ T5761] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 313.858813][ T5690] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 313.959812][T10067] netlink: 'syz.4.1226': attribute type 1 has an invalid length. [ 313.981225][ T5761] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 313.991551][T10067] bond2: entered promiscuous mode [ 313.993610][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.999989][T10067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.013931][ T5690] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 314.029741][ T5690] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 314.036515][ T5761] usb 2-1: USB2VGA dongle found at address 63 [ 314.055499][ T5761] usb 2-1: Allocated 8 output buffers [ 314.061190][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.072495][T10067] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 314.086311][ T5690] usb 3-1: Product: syz [ 314.091053][ T5690] usb 3-1: Manufacturer: syz [ 314.095801][ T5690] usb 3-1: SerialNumber: syz [ 314.106894][ T5690] ums-karma 3-1:1.0: USB Mass Storage device detected [ 314.115592][T10067] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 314.126265][T10067] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 314.150609][ T5690] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 314.150609][ T5690] Please send a copy of this message to and [ 314.190120][T10069] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 314.204340][T10069] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 314.316594][ T5761] usb 2-1: Failed to early initialize device [ 314.332321][ T10] usb 3-1: USB disconnect, device number 75 [ 314.342189][ T5761] usb 2-1: USB disconnect, device number 63 [ 314.465993][T10081] FAULT_INJECTION: forcing a failure. [ 314.465993][T10081] name failslab, interval 1, probability 0, space 0, times 0 [ 314.479498][T10081] CPU: 0 UID: 0 PID: 10081 Comm: syz.2.1229 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.479531][T10081] Tainted: [L]=SOFTLOCKUP [ 314.479537][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.479545][T10081] Call Trace: [ 314.479550][T10081] [ 314.479556][T10081] dump_stack_lvl+0xe8/0x150 [ 314.479578][T10081] should_fail_ex+0x410/0x560 [ 314.479596][T10081] should_failslab+0xa8/0x100 [ 314.479612][T10081] __kmalloc_noprof+0xfe/0x720 [ 314.479630][T10081] ? video_usercopy+0x1b1/0x1430 [ 314.479648][T10081] ? video_usercopy+0x1b1/0x1430 [ 314.479670][T10081] video_usercopy+0x1b1/0x1430 [ 314.479691][T10081] ? hook_file_ioctl+0x1f2/0x600 [ 314.479707][T10081] ? __pfx___video_do_ioctl+0x10/0x10 [ 314.479727][T10081] ? __pfx_video_usercopy+0x10/0x10 [ 314.479752][T10081] ? __fget_files+0x2a/0x420 [ 314.479769][T10081] ? __fget_files+0x2a/0x420 [ 314.479782][T10081] ? __fget_files+0x3a2/0x420 [ 314.479798][T10081] v4l2_ioctl+0x18d/0x1e0 [ 314.479816][T10081] ? __pfx_v4l2_ioctl+0x10/0x10 [ 314.479833][T10081] __se_sys_ioctl+0xfc/0x170 [ 314.479853][T10081] do_syscall_64+0x166/0x520 [ 314.479872][T10081] ? trace_irq_disable+0x3b/0x140 [ 314.479893][T10081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.479907][T10081] ? clear_bhb_loop+0x70/0xc0 [ 314.479923][T10081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.479936][T10081] RIP: 0033:0x7fab2279e0d9 [ 314.479948][T10081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.479960][T10081] RSP: 002b:00007fab209f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.479975][T10081] RAX: ffffffffffffffda RBX: 00007fab22a25fa0 RCX: 00007fab2279e0d9 [ 314.479984][T10081] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000004 [ 314.479993][T10081] RBP: 00007fab209f6090 R08: 0000000000000000 R09: 0000000000000000 [ 314.480001][T10081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.480009][T10081] R13: 00007fab22a26038 R14: 00007fab22a25fa0 R15: 00007fab22b4fa48 [ 314.480029][T10081] [ 314.723338][T10082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.738981][ T5761] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 314.761948][T10082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.828632][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1231'. [ 314.847791][ T5690] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 314.929619][ T5761] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 314.939812][ T5761] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 314.948064][ T5761] usb 2-1: config 1 has no interface number 0 [ 314.954288][ T5761] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 314.965994][ T5761] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 314.975915][ T5761] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 314.989104][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.997264][ T5761] usb 2-1: Product: syz [ 315.001620][ T5761] usb 2-1: Manufacturer: syz [ 315.006241][ T5761] usb 2-1: SerialNumber: syz [ 315.014498][T10077] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 315.021754][ T5690] usb 5-1: unable to get BOS descriptor or descriptor too short [ 315.033035][ T5690] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 315.044685][ T5690] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.055238][ T5690] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.066228][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.074513][ T5690] usb 5-1: Product: syz [ 315.079280][ T5690] usb 5-1: Manufacturer: syz [ 315.083942][ T5690] usb 5-1: SerialNumber: syz [ 315.228335][ T5761] usb 2-1: Error in usbnet_get_endpoints (-71) [ 315.245005][ T5761] usb 2-1: USB disconnect, device number 64 [ 315.908667][ T5690] usb 5-1: unit 4 not found! [ 315.914273][T10097] loop5: detected capacity change from 0 to 7 [ 315.950544][T10097] Dev loop5: unable to read RDB block 7 [ 315.985526][T10097] loop5: AHDI p2 [ 316.006711][T10097] loop5: partition table partially beyond EOD, truncated [ 316.038410][T10103] netlink: 'syz.4.1236': attribute type 21 has an invalid length. [ 316.106718][ T5690] usb 5-1: USB disconnect, device number 74 [ 316.212024][T10106] binder: 10101:10106 unknown command 0 [ 316.237073][T10106] binder: 10101:10106 ioctl c0306201 2000000004c0 returned -22 [ 316.267074][ T6967] udevd[6967]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.527758][ T5690] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 316.687540][ T5705] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 316.698062][ T5690] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 316.719646][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.740289][ T5690] usb 5-1: config 0 descriptor?? [ 316.799117][ T5761] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 316.850525][ T5705] usb 3-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 316.862162][ T5705] usb 3-1: config 255 has an invalid interface number: 97 but max is 1 [ 316.871543][ T5705] usb 3-1: config 255 has an invalid interface number: 227 but max is 1 [ 316.884047][ T5705] usb 3-1: config 255 has no interface number 0 [ 316.891016][ T5705] usb 3-1: config 255 has no interface number 1 [ 316.898033][ T5705] usb 3-1: config 255 interface 97 has no altsetting 0 [ 316.905012][ T5705] usb 3-1: config 255 interface 227 has no altsetting 0 [ 316.921252][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.935663][ T5705] usb 3-1: Product: syz [ 316.941618][ T5705] usb 3-1: Manufacturer: syz [ 316.946506][ T5705] usb 3-1: SerialNumber: syz [ 316.959636][ T5761] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 316.976766][ T5761] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 316.985481][ T5761] usb 2-1: config 1 has no interface number 0 [ 316.992187][ T5761] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 317.004341][ T5761] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 317.014768][ T5761] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 317.029480][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.046526][ T5761] usb 2-1: Product: syz [ 317.051664][ T5761] usb 2-1: Manufacturer: syz [ 317.056369][ T5761] usb 2-1: SerialNumber: syz [ 317.070550][T10126] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 317.083416][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.090095][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.163481][ T5690] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 317.268125][ T5690] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 317.285546][ T5690] [drm] Initialized udl on minor 1 [ 317.314214][ T5761] usb 2-1: Error in usbnet_get_endpoints (-71) [ 317.358886][ T5761] usb 2-1: USB disconnect, device number 65 [ 317.609235][ C0] blk_print_req_error: 10 callbacks suppressed [ 317.609269][ C0] I/O error, dev loop7, sector 1536 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 317.623217][T10127] loop7: detected capacity change from 16383 to 0 [ 317.626547][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.719812][ T5690] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 317.756577][ T5705] rndis_host 3-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 317.774984][ T5690] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 317.790546][ T5690] usb 5-1: USB disconnect, device number 75 [ 317.908630][ T5705] usb 3-1: USB disconnect, device number 76 [ 318.278871][ T10] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 318.336935][T10132] input: syz1 as /devices/virtual/input/input59 [ 318.470833][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 318.513327][ T10] usb 2-1: New USB device found, idVendor=2100, idProduct=9e51, bcdDevice=1a.8b [ 318.554975][ T10] usb 2-1: config 10 has an invalid interface number: 187 but max is 0 [ 318.602592][ T10] usb 2-1: config 10 has no interface number 0 [ 318.622771][ T10] usb 2-1: config 10 interface 187 has no altsetting 0 [ 318.645127][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.667478][ T10] usb 2-1: Product: syz [ 318.674975][ T10] usb 2-1: Manufacturer: syz [ 318.685137][ T10] usb 2-1: SerialNumber: syz [ 318.792393][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1248'. [ 318.917315][ T10] ftdi_sio 2-1:10.187: FTDI USB Serial Device converter detected [ 318.942773][ T10] ftdi_sio ttyUSB0: unknown device type: 0x1a8b [ 318.957148][ T10] usb 2-1: USB disconnect, device number 66 [ 318.976234][ T10] ftdi_sio 2-1:10.187: device disconnected [ 319.547485][ T5705] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 319.649740][ T5666] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 319.688978][ T5705] usb 3-1: device descriptor read/64, error -71 [ 319.819014][ T5666] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 319.830297][ T5666] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.841324][ T5666] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.853905][ T5666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 319.863052][ T5666] usb 5-1: SerialNumber: syz [ 319.928341][ T5705] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 319.953348][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1259'. [ 320.048114][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 320.077448][ T5705] usb 3-1: device descriptor read/64, error -71 [ 320.096544][ T5666] usb 5-1: 0:2 : does not exist [ 320.103042][ T5666] usb 5-1: unit 5 not found! [ 320.159812][ T5666] usb 5-1: USB disconnect, device number 76 [ 320.187836][ T5705] usb usb3-port1: attempt power cycle [ 320.199635][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 320.218168][ T10] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 320.232360][ T10] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 320.244332][ T10] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.260391][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.272107][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.313679][ T10] usb 2-1: config 0 descriptor?? [ 320.557495][ T5705] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 320.599621][ T5705] usb 3-1: device descriptor read/8, error -71 [ 320.721996][T10181] x_tables: duplicate underflow at hook 1 [ 320.730366][T10170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.743768][T10170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.768862][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 320.782682][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 320.819330][ T10] usb 2-1: USB disconnect, device number 67 [ 320.867732][ T5705] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 320.898152][T10185] netlink: 'syz.4.1262': attribute type 1 has an invalid length. [ 320.921601][ T5705] usb 3-1: device descriptor read/8, error -71 [ 320.993643][T10185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.037952][ T5705] usb usb3-port1: unable to enumerate USB device [ 321.242127][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 321.252663][T10191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.266806][T10191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.343123][ T30] audit: type=1326 audit(1787685105.711:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.1.1265" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1e5d9e0d9 code=0x0 [ 321.687491][ T5705] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 321.838096][ T5705] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice=80.00 [ 321.851640][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 321.863120][ T5705] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 321.876164][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.888275][ T5705] usb 5-1: config 0 descriptor?? [ 322.103066][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 322.129569][ T5705] usbhid 5-1:0.0: can't add hid device: -71 [ 322.135785][ T5705] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 322.147211][ T5705] usb 5-1: USB disconnect, device number 77 [ 322.569947][T10208] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1024 (2048 ns) > initial count (1664 ns). Using initial count to start timer. [ 322.815101][T10213] netlink: 'syz.4.1271': attribute type 4 has an invalid length. [ 322.834977][T10213] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1271'. [ 323.273393][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 324.945956][T10270] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 324.997324][T10271] ip6tnl1: entered allmulticast mode [ 326.167575][ T5761] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 326.307441][ T5761] usb 2-1: device descriptor read/64, error -71 [ 326.557446][ T5761] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 326.717583][ T5761] usb 2-1: device descriptor read/64, error -71 [ 326.837708][ T5761] usb usb2-port1: attempt power cycle [ 327.050616][T10299] loop5: detected capacity change from 0 to 7 [ 327.058370][T10299] Dev loop5: unable to read RDB block 7 [ 327.064599][T10299] loop5: AHDI p2 [ 327.068690][T10299] loop5: partition table partially beyond EOD, truncated [ 327.178031][ T5761] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 327.197962][ T5761] usb 2-1: device descriptor read/8, error -71 [ 327.447480][ T5761] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 327.480586][ T5761] usb 2-1: device descriptor read/8, error -71 [ 327.517878][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 327.587907][ T5761] usb usb2-port1: unable to enumerate USB device [ 327.603682][T10323] syzkaller0: entered promiscuous mode [ 327.611675][T10323] syzkaller0: entered allmulticast mode [ 327.688810][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 327.705752][ T24] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 327.728764][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 327.737938][ T24] usb 3-1: config 0 has no interface number 0 [ 327.751177][ T24] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 327.774970][ T24] usb 3-1: config 0 interface 1 has no altsetting 0 [ 327.783834][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.792061][ T24] usb 3-1: Product: syz [ 327.796402][ T24] usb 3-1: Manufacturer: syz [ 327.802308][ T24] usb 3-1: SerialNumber: syz [ 327.812777][ T24] usb 3-1: config 0 descriptor?? [ 327.911316][T10334] loop5: detected capacity change from 0 to 7 [ 327.922755][T10334] Dev loop5: unable to read RDB block 7 [ 327.928482][T10334] loop5: AHDI p2 [ 327.933157][T10334] loop5: partition table partially beyond EOD, truncated [ 328.033437][T10309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.047926][T10309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.057819][T10309] netlink: 'syz.2.1297': attribute type 1 has an invalid length. [ 328.097444][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 328.118203][T10309] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.129332][T10309] bond4: (slave bond5): making interface the new active one [ 328.140343][T10309] bond4: (slave bond5): Enslaving as an active interface with an up link [ 328.158391][ T24] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 328.181024][ T24] cx231xx 3-1:0.1: Not found matching IAD interface [ 328.202368][ T24] usb 3-1: USB disconnect, device number 81 [ 328.258734][ T10] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 328.269279][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.280797][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.290978][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.302197][ T10] usb 5-1: config 0 descriptor?? [ 328.314569][T10346] can: request_module (can-proto-3) failed. [ 328.551436][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 328.566505][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 328.582172][ T10] usb 5-1: USB disconnect, device number 78 [ 328.966774][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1314'. [ 328.987871][T10365] ipvlan2: entered allmulticast mode [ 328.993264][T10365] syz_tun: entered allmulticast mode [ 329.017439][ T5705] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 329.187478][ T5705] usb 3-1: Using ep0 maxpacket: 8 [ 329.193430][ T5705] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 329.199918][T10377] loop5: detected capacity change from 0 to 7 [ 329.207812][ T5705] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.215526][T10377] Dev loop5: unable to read RDB block 7 [ 329.222317][ T5705] usb 3-1: config 0 interface 0 has no altsetting 0 [ 329.232219][T10377] loop5: AHDI p2 [ 329.233098][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.239925][T10377] loop5: partition table partially beyond EOD, truncated [ 329.255376][T10378] fuse: Bad value for 'fd' [ 329.266654][T10378] netlink: 'syz.4.1316': attribute type 1 has an invalid length. [ 329.271464][ T5705] usb 3-1: config 0 descriptor?? [ 329.702815][ T5705] kye 0003:0458:501A.0012: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 329.715958][ T5705] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 329.722833][ T5705] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 329.729706][ T24] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 329.737672][ T5705] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 329.744521][ T5705] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 329.751572][ T5705] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 329.758832][ T5705] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 329.765535][ T5705] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 329.774235][ T5705] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 329.782469][ T5705] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 329.789262][ T5705] kye 0003:0458:501A.0012: unknown main item tag 0x0 [ 329.800154][ T5705] kye 0003:0458:501A.0012: hidraw0: USB HID v0.06 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 329.811455][ T5705] kye 0003:0458:501A.0012: tablet-enabling feature report not found [ 329.819830][ T5705] kye 0003:0458:501A.0012: tablet enabling failed [ 329.908474][ T24] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 329.918415][ T10] usb 3-1: USB disconnect, device number 82 [ 329.923296][ T24] usb 5-1: config 2 has an invalid interface number: 43 but max is 0 [ 329.946336][ T24] usb 5-1: config 2 has no interface number 0 [ 329.964780][ T24] usb 5-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 329.976771][ T24] usb 5-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 330.007166][ T24] usb 5-1: config 2 interface 43 has no altsetting 0 [ 330.024258][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.034133][ T24] usb 5-1: Product: syz [ 330.038938][ T24] usb 5-1: Manufacturer: syz [ 330.043687][ T24] usb 5-1: SerialNumber: syz [ 330.056338][T10383] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 330.064041][T10383] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 330.279980][T10383] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1320'. [ 330.337195][T10393] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1320'. [ 330.350772][T10383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1320'. [ 330.442714][T10383] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1320'. [ 330.504469][ T24] ums-usbat 5-1:2.43: USB Mass Storage device detected [ 330.536073][ T24] ums-usbat 5-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 330.611084][ T24] ums-usbat 5-1:2.43: probe with driver ums-usbat failed with error -5 [ 330.646969][T10403] ±ÿ‰P: renamed from lo (while UP) [ 330.647212][ T24] usb 5-1: USB disconnect, device number 79 [ 331.429682][ T24] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 331.598482][ T24] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 331.628782][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 331.650079][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 331.673894][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 331.694141][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.722769][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.731407][ T24] usb 2-1: Product: syz [ 331.735655][ T24] usb 2-1: Manufacturer: syz [ 331.744153][ T24] usb 2-1: SerialNumber: syz [ 331.770440][ T24] usb 2-1: config 0 descriptor?? [ 331.975711][T10416] loop5: detected capacity change from 0 to 7 [ 331.986187][T10416] Dev loop5: unable to read RDB block 7 [ 331.992594][T10416] loop5: AHDI p2 [ 331.997191][T10416] loop5: partition table partially beyond EOD, truncated [ 332.017999][ T10] usb 2-1: USB disconnect, device number 72 [ 332.490132][T10424] Invalid argument reading file caps for ./file0 [ 332.578870][T10426] openvswitch: netlink: Duplicate or invalid key (type 0). [ 332.592630][T10426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.619500][T10426] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1332'. [ 332.715444][T10431] tc_dump_action: action bad kind [ 332.877571][ T5690] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 333.027481][ T5690] usb 2-1: device descriptor read/64, error -71 [ 333.278501][ T5690] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 333.417500][ T5690] usb 2-1: device descriptor read/64, error -71 [ 333.541239][ T5690] usb usb2-port1: attempt power cycle [ 333.897475][ T5690] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 333.928291][ T5690] usb 2-1: device descriptor read/8, error -71 [ 334.111003][T10453] loop5: detected capacity change from 0 to 7 [ 334.123640][T10453] Dev loop5: unable to read RDB block 7 [ 334.129872][T10453] loop5: AHDI p2 [ 334.133779][T10453] loop5: partition table partially beyond EOD, truncated [ 334.178262][ T5690] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 334.229550][ T5690] usb 2-1: device descriptor read/8, error -71 [ 334.357862][ T5690] usb usb2-port1: unable to enumerate USB device [ 334.447112][T10457] netlink: 'syz.3.1341': attribute type 15 has an invalid length. [ 334.698276][T10465] kvm: kvm [10463]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xb [ 335.108995][ T5721] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 335.268532][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 335.280000][ T5721] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 335.301583][ T5721] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 335.317563][ T5721] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.341811][ T5721] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.362181][ T5721] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.385395][ T5721] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.400149][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.614430][ T5721] usb 5-1: usb_control_msg returned -32 [ 335.620807][ T5721] usbtmc 5-1:16.0: can't read capabilities [ 335.725804][T10495] openvswitch: netlink: IPv4 tunnel dst address is zero [ 336.112583][ T10] usb 5-1: USB disconnect, device number 80 [ 336.464824][T10515] ovs-system: entered promiscuous mode [ 337.077805][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 337.239131][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 337.251915][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 337.272654][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.285684][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.299635][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 337.317893][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.334682][T10541] loop5: detected capacity change from 0 to 7 [ 337.338451][ T10] usb 2-1: config 0 descriptor?? [ 337.362134][T10541] Dev loop5: unable to read RDB block 7 [ 337.369772][T10541] loop5: AHDI p2 [ 337.373956][T10541] loop5: partition table partially beyond EOD, truncated [ 337.760047][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 337.774105][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 337.794876][ T10] usb 2-1: USB disconnect, device number 77 [ 337.873631][T10557] ip6tnl2: entered promiscuous mode [ 337.949614][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1370'. [ 338.147667][ T5697] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 338.250154][T10577] loop5: detected capacity change from 0 to 7 [ 338.257123][T10577] Dev loop5: unable to read RDB block 7 [ 338.263184][T10577] loop5: AHDI p2 [ 338.266930][T10577] loop5: partition table partially beyond EOD, truncated [ 338.307488][ T5697] usb 3-1: Using ep0 maxpacket: 32 [ 338.341302][ T5697] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 338.365385][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.390172][ T5697] usb 3-1: config 0 descriptor?? [ 338.399223][ T5697] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 338.587488][ T5761] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 338.737410][ T5761] usb 5-1: Using ep0 maxpacket: 16 [ 338.743400][ T5761] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 338.759988][ T5761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 338.780345][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.789393][ T5761] usb 5-1: Product: syz [ 338.793686][ T5761] usb 5-1: Manufacturer: syz [ 338.799262][ T5761] usb 5-1: SerialNumber: syz [ 338.807644][ T5761] usb 5-1: config 0 descriptor?? [ 338.823387][ T5761] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 338.833470][ T5761] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 338.905185][T10587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.921408][T10587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.107524][ T5697] gspca_vc032x: reg_w err -110 [ 339.112355][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.117846][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.123187][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.128663][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.133990][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.139639][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.144979][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.150438][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.155775][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.161266][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.166597][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.172164][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.177521][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.182940][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.188379][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.193757][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.200292][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.205637][ T5697] gspca_vc032x: I2c Bus Busy Wait 00 [ 339.211063][ T5697] gspca_vc032x: Unknown sensor... [ 339.216194][ T5697] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 339.425270][ T5761] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 339.844374][ T5761] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 339.852726][ T5761] em28xx 5-1:0.0: board has no eeprom [ 339.867442][ T5705] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 340.017432][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 340.023154][ T5705] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 340.033770][ T5705] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.045330][ T5705] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.055481][ T5705] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 340.068613][ T5705] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.075347][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.086446][ T5705] usb 2-1: config 0 descriptor?? [ 340.187451][ T5761] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 340.195530][ T5761] em28xx 5-1:0.0: dvb set to bulk mode. [ 340.201311][ T29] em28xx 5-1:0.0: Binding DVB extension [ 340.700593][ T5705] usbhid 2-1:0.0: can't add hid device: -71 [ 340.707206][ T5705] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 340.718398][ T5705] usb 2-1: USB disconnect, device number 78 [ 340.916126][ T5721] usb 3-1: USB disconnect, device number 83 [ 340.979776][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1381'. [ 341.043754][T10598] ip6erspan0: entered allmulticast mode [ 341.054069][T10598] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1382'. [ 341.125224][T10599] ip6gre1: entered allmulticast mode [ 341.132590][ T3282] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.325873][T10601] netlink: 'syz.1.1383': attribute type 10 has an invalid length. [ 341.337717][T10601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1383'. [ 341.348476][T10601] dummy0: entered promiscuous mode [ 341.354670][T10601] bridge0: port 3(dummy0) entered blocking state [ 341.361823][T10601] bridge0: port 3(dummy0) entered disabled state [ 341.368945][T10601] dummy0: entered allmulticast mode [ 341.385627][T10601] bridge0: port 3(dummy0) entered blocking state [ 341.392127][T10601] bridge0: port 3(dummy0) entered forwarding state [ 341.405717][ T5690] usb 5-1: USB disconnect, device number 81 [ 341.430243][ T5690] em28xx 5-1:0.0: Disconnecting em28xx [ 341.502968][ T29] em28xx 5-1:0.0: Registering input extension [ 341.528750][ T5690] em28xx 5-1:0.0: Closing input extension [ 341.571612][T10611] loop5: detected capacity change from 0 to 7 [ 341.600866][T10611] Dev loop5: unable to read RDB block 7 [ 341.617299][T10611] loop5: AHDI p2 [ 341.625755][T10611] loop5: partition table partially beyond EOD, truncated [ 341.691472][ T5690] em28xx: Freeing device [ 341.736761][T10613] netlink: 'syz.1.1387': attribute type 23 has an invalid length. [ 342.028944][T10618] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1024 (2048 ns) > initial count (1664 ns). Using initial count to start timer. [ 342.483988][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1392'. [ 342.857457][ T5721] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 342.952619][T10660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 343.017444][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 343.024476][ T5721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 343.032421][ T5721] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=bd.a1 [ 343.042760][ T5721] usb 3-1: config 174 has an invalid interface number: 197 but max is 0 [ 343.051429][ T5721] usb 3-1: config 174 has no interface number 0 [ 343.057942][ T5721] usb 3-1: config 174 interface 197 has no altsetting 0 [ 343.067008][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.075885][ T5721] usb 3-1: Product: Ð [ 343.080324][ T5721] usb 3-1: Manufacturer: 《 [ 343.085126][ T5721] usb 3-1: SerialNumber: ⨱罢뙔겪⩶렉◪㱾â á︶ៀå²é…¨î­µäƒ‚冡ï±ê²¼ï¸ç±«å¬Žá£”䂵駙ቫ깸圆嘰䈿떆甒Я킂厭ᆔ⇠섗ï‡ä·¬î¡Žï‹¾à²µî¯‰ã‘ªì¹¨à»é°™î¤‡ê¼®ä¯Œæ¢³á³¢ç·°èŸ¯ã­©ë­¸ã´¯í™—뾉꿿線F⯪å™ïš±æ—¤ç¸‹æ—â‘Šà¨Ìã…䙢ꎶﰑë®îˆŽã²±å“°åƒ¬å¸‘á´í™¶ï¯œã¡³ìŽÏµä°ê€­ïµ¨ì¾¼ìµ—㜯ï›á¼žèˆ’å§æŒœî‚㻈쀱尾홃꯮⡶郷懡뀨ꪉ娫駖腖 [ 343.197473][ T5690] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 343.343021][T10636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.351597][ T5690] usb 5-1: Using ep0 maxpacket: 8 [ 343.363800][ T5690] usb 5-1: unable to get BOS descriptor or descriptor too short [ 343.373392][T10636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.383171][ T5690] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 343.404184][ T5690] usb 5-1: config 4 interface 0 has no altsetting 0 [ 343.416491][ T5690] usb 5-1: string descriptor 0 read error: -22 [ 343.427804][ T5690] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 343.470182][ T5690] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 343.491612][ T5690] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 343.525832][ T5690] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 343.545925][ T5690] usb 5-1: media controller created [ 343.587689][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.683879][T10667] xt_hashlimit: size too large, truncated to 1048576 [ 343.859938][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'. [ 345.077556][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.201159][T10706] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 345.219988][T10706] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 345.275709][T10706] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.296180][T10706] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 345.325110][T10706] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 345.338611][T10706] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 345.352895][T10706] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.362009][T10706] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 345.373488][T10706] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.380234][T10706] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 345.530505][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'. [ 345.649361][ T5690] zl10353_read_register: readreg error (reg=127, ret==0) [ 345.682963][T10716] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 345.778693][ T5690] usb 5-1: USB disconnect, device number 82 [ 345.795907][ T5721] peak_usb 3-1:174.197 can0: unable to request usb[type=0 value=1] err=-71 [ 345.823963][ T5721] peak_usb 3-1:174.197: unable to read PCAN-Chip USB firmware info (err -71) [ 345.871151][ T30] audit: type=1326 audit(1787685130.241:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.4.1418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7799e0d9 code=0x7ffc0000 [ 345.926437][ T30] audit: type=1326 audit(1787685130.261:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.4.1418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7799e0d9 code=0x7ffc0000 [ 345.951486][ T5721] peak_usb 3-1:174.197: probe with driver peak_usb failed with error -71 [ 345.972249][ T5721] usb 3-1: USB disconnect, device number 84 [ 345.999601][ T30] audit: type=1326 audit(1787685130.281:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.4.1418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e7799e0d9 code=0x7ffc0000 [ 346.077280][ T30] audit: type=1326 audit(1787685130.281:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.4.1418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7799e0d9 code=0x7ffc0000 [ 346.101648][ T30] audit: type=1326 audit(1787685130.281:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.4.1418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7799e0d9 code=0x7ffc0000 [ 346.163914][ T30] audit: type=1326 audit(1787685130.281:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.4.1418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e7799e0d9 code=0x7ffc0000 [ 346.239217][ T30] audit: type=1326 audit(1787685130.281:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.4.1418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7799e0d9 code=0x7ffc0000 [ 346.264447][ T30] audit: type=1326 audit(1787685130.281:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.4.1418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7799e0d9 code=0x7ffc0000 [ 346.293839][ T30] audit: type=1326 audit(1787685130.281:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.4.1418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f5e7799e0d9 code=0x7ffc0000 [ 346.337434][ T30] audit: type=1326 audit(1787685130.281:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10718 comm="syz.4.1418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7799e0d9 code=0x7ffc0000 [ 346.586173][ T29] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 346.658211][ T5705] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 346.739491][ T29] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 346.751060][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.763235][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.801506][ T5705] usb 2-1: device descriptor read/64, error -71 [ 346.854759][ T29] as10x_usb: device has been detected [ 346.894254][ T29] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 346.963043][ T29] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 346.998070][T10726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.009547][ T29] as10x_usb: error during firmware upload part1 [ 347.016370][ T29] Registered device Abilis Systems DVB-Titan [ 347.020313][T10726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.068227][ T5705] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 347.152316][T10726] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 347.165097][T10726] block device autoloading is deprecated and will be removed. [ 347.207606][ T5705] usb 2-1: device descriptor read/64, error -71 [ 347.318841][ T5705] usb usb2-port1: attempt power cycle [ 347.378255][T10746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1425'. [ 347.549783][T10749] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1024 (2048 ns) > initial count (1664 ns). Using initial count to start timer. [ 347.677477][ T5705] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 347.708207][ T5705] usb 2-1: device descriptor read/8, error -71 [ 347.831206][T10753] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1024 (2048 ns) > initial count (1664 ns). Using initial count to start timer. [ 347.961270][ T5705] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 347.990091][ T5705] usb 2-1: device descriptor read/8, error -71 [ 348.108012][ T5705] usb usb2-port1: unable to enumerate USB device [ 349.273162][ T29] usb 3-1: USB disconnect, device number 85 [ 349.336231][T10731] Set syz1 is full, maxelem 65536 reached [ 349.362191][ T29] Unregistered device Abilis Systems DVB-Titan [ 349.366534][ T29] as10x_usb: device has been disconnected [ 349.767492][ T5697] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 349.907454][ T5697] usb 5-1: device descriptor read/64, error -71 [ 350.147505][ T5697] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 350.277584][ T5697] usb 5-1: device descriptor read/64, error -71 [ 350.352489][T10781] binder: 10780:10781 ioctl c0306201 200000000640 returned -22 [ 350.387859][ T5697] usb usb5-port1: attempt power cycle [ 350.441438][T10783] loop5: detected capacity change from 0 to 7 [ 350.456036][T10783] Dev loop5: unable to read RDB block 7 [ 350.465601][T10783] loop5: AHDI p2 [ 350.470918][T10783] loop5: partition table partially beyond EOD, truncated [ 350.748694][ T5697] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 350.788415][ T5697] usb 5-1: device descriptor read/8, error -71 [ 350.846708][T10791] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1024 (2048 ns) > initial count (1664 ns). Using initial count to start timer. [ 351.037596][ T5697] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 351.071250][ T5697] usb 5-1: device descriptor read/8, error -71 [ 351.189855][ T5697] usb usb5-port1: unable to enumerate USB device [ 351.488861][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1444'. [ 351.549419][T10804] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3232572832 (12930291328 ns) > initial count (691901412 ns). Using initial count to start timer. [ 351.643416][T10804] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1443'. [ 351.860414][T10810] loop5: detected capacity change from 0 to 7 [ 351.883202][T10810] Dev loop5: unable to read RDB block 7 [ 351.890892][T10810] loop5: AHDI p2 [ 351.896984][T10810] loop5: partition table partially beyond EOD, truncated [ 351.940666][T10805] socket: no more sockets [ 352.314204][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 353.244581][T10840] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1454'. [ 353.274822][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1454'. [ 353.557574][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.037824][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1458'. [ 354.139321][ T5721] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 354.175838][T10856] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 354.281100][T10858] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1460'. [ 354.291444][T10858] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.300247][T10858] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.325852][T10849] ip6gretap0: entered promiscuous mode [ 354.336150][T10858] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1460'. [ 354.352329][ T5721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 354.363098][ T5721] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 354.390218][ T5721] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 354.401843][ T5721] usb 3-1: can't read configurations, error -71 [ 354.842311][T10864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.851783][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.888919][T10864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.897688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.907054][ T6663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.410282][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1469'. [ 355.557700][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.587765][ T5705] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 355.758292][ T5705] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 355.773737][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.782402][ T5705] usb 2-1: Product: syz [ 355.787333][ T5705] usb 2-1: Manufacturer: syz [ 355.803556][ T5705] usb 2-1: SerialNumber: syz [ 355.821498][ T5705] ums-karma 2-1:1.0: USB Mass Storage device detected [ 355.843627][ T5705] ums-karma 2-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 355.843627][ T5705] Please send a copy of this message to and [ 356.071173][ T5705] ums-karma 2-1:1.0: probe with driver ums-karma failed with error -5 [ 356.103568][ T5705] usb 2-1: USB disconnect, device number 83 [ 356.257588][ T5761] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 356.407681][ T5761] usb 5-1: device descriptor read/64, error -71 [ 356.597895][ T5705] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 356.606862][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.657430][ T5761] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 356.758955][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 356.766798][ T5705] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 356.777933][ T5705] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.786122][ T5705] usb 3-1: config 0 has no interface number 0 [ 356.796264][ T5761] usb 5-1: device descriptor read/64, error -71 [ 356.803056][ T5705] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.815464][ T5705] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.825646][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.838300][ T5705] usb 3-1: config 0 descriptor?? [ 356.904836][T10913] FAULT_INJECTION: forcing a failure. [ 356.904836][T10913] name failslab, interval 1, probability 0, space 0, times 0 [ 356.921373][T10913] CPU: 0 UID: 0 PID: 10913 Comm: syz.1.1478 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.921402][T10913] Tainted: [L]=SOFTLOCKUP [ 356.921410][T10913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.921422][T10913] Call Trace: [ 356.921430][T10913] [ 356.921439][T10913] dump_stack_lvl+0xe8/0x150 [ 356.921470][T10913] should_fail_ex+0x410/0x560 [ 356.921496][T10913] should_failslab+0xa8/0x100 [ 356.921519][T10913] __kmalloc_noprof+0xfe/0x720 [ 356.921552][T10913] ? tomoyo_encode+0x2ad/0x570 [ 356.921576][T10913] ? tomoyo_encode+0x2ad/0x570 [ 356.921606][T10913] tomoyo_encode+0x2ad/0x570 [ 356.921640][T10913] tomoyo_realpath_from_path+0x5fa/0x640 [ 356.921675][T10913] ? tomoyo_path_number_perm+0x219/0x5f0 [ 356.921698][T10913] tomoyo_path_number_perm+0x246/0x5f0 [ 356.921729][T10913] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 356.921751][T10913] ? __lock_acquire+0x683/0x2cf0 [ 356.921792][T10913] ? hook_file_ioctl+0x1f2/0x600 [ 356.921832][T10913] ? __fget_files+0x2a/0x420 [ 356.921856][T10913] ? __fget_files+0x2a/0x420 [ 356.921875][T10913] ? __fget_files+0x3a2/0x420 [ 356.921895][T10913] ? __fget_files+0x2a/0x420 [ 356.921920][T10913] security_file_ioctl+0xc3/0x2a0 [ 356.921942][T10913] __se_sys_ioctl+0x47/0x170 [ 356.921971][T10913] do_syscall_64+0x166/0x520 [ 356.921997][T10913] ? trace_irq_disable+0x3b/0x140 [ 356.922023][T10913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.922044][T10913] ? clear_bhb_loop+0x70/0xc0 [ 356.922068][T10913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.922087][T10913] RIP: 0033:0x7fd1e5d9e0d9 [ 356.922105][T10913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.922139][T10913] RSP: 002b:00007fd1e6c50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.922161][T10913] RAX: ffffffffffffffda RBX: 00007fd1e6026090 RCX: 00007fd1e5d9e0d9 [ 356.922175][T10913] RDX: 0000200000000280 RSI: 00000000c0487c04 RDI: 0000000000000005 [ 356.922188][T10913] RBP: 00007fd1e6c50090 R08: 0000000000000000 R09: 0000000000000000 [ 356.922202][T10913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.922214][T10913] R13: 00007fd1e6026128 R14: 00007fd1e6026090 R15: 00007fd1e614fa48 [ 356.922244][T10913] [ 356.922277][T10913] ERROR: Out of memory at tomoyo_realpath_from_path. [ 356.931257][ T5761] usb usb5-port1: attempt power cycle [ 357.173723][ T5705] usbhid 3-1:0.1: can't add hid device: -32 [ 357.181075][ T5705] usbhid 3-1:0.1: probe with driver usbhid failed with error -32 [ 357.407661][ T5666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.422401][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 357.457472][ T5697] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 357.507509][ T5761] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 357.530050][ T5761] usb 5-1: device descriptor read/8, error -71 [ 357.582872][T10926] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 357.609127][ T5697] usb 2-1: Using ep0 maxpacket: 16 [ 357.618994][ T5697] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 357.630691][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.642128][ T5697] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.652456][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.660871][ T5697] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 357.674098][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.699796][ T5697] usb 2-1: config 0 descriptor?? [ 357.713339][T10929] loop5: detected capacity change from 0 to 7 [ 357.737008][T10929] Dev loop5: unable to read RDB block 7 [ 357.743102][T10929] loop5: AHDI p2 [ 357.746891][T10929] loop5: partition table partially beyond EOD, truncated [ 357.779725][ T5761] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 357.819010][ T5761] usb 5-1: device descriptor read/8, error -71 [ 357.844238][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1485'. [ 357.871399][T10931] 8021q: adding VLAN 0 to HW filter on device bond4 [ 357.928442][ T5761] usb usb5-port1: unable to enumerate USB device [ 358.131235][ T5697] usbhid 2-1:0.0: can't add hid device: -71 [ 358.137345][ T5697] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 358.151853][ T5697] usb 2-1: USB disconnect, device number 84 [ 358.684321][T10940] bridge2: entered promiscuous mode [ 358.688534][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.689805][T10940] bridge2: entered allmulticast mode [ 358.707309][T10940] team0: Port device bridge2 added [ 358.714854][T10940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.726903][T10941] bridge0: port 4(team0) entered blocking state [ 358.736555][T10941] bridge0: port 4(team0) entered disabled state [ 358.745436][T10941] team0: entered allmulticast mode [ 358.750665][T10941] team_slave_0: entered allmulticast mode [ 358.776937][T10941] team_slave_1: entered allmulticast mode [ 358.804888][T10941] team0: entered promiscuous mode [ 358.813662][T10941] team_slave_0: entered promiscuous mode [ 358.825661][T10941] team_slave_1: entered promiscuous mode [ 358.836881][T10941] bridge0: port 4(team0) entered blocking state [ 358.844127][T10941] bridge0: port 4(team0) entered forwarding state [ 359.150467][T10954] FAULT_INJECTION: forcing a failure. [ 359.150467][T10954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.165919][T10954] CPU: 1 UID: 0 PID: 10954 Comm: syz.1.1491 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.165948][T10954] Tainted: [L]=SOFTLOCKUP [ 359.165955][T10954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.165967][T10954] Call Trace: [ 359.165975][T10954] [ 359.165983][T10954] dump_stack_lvl+0xe8/0x150 [ 359.166015][T10954] should_fail_ex+0x410/0x560 [ 359.166040][T10954] _copy_from_user+0x2d/0xb0 [ 359.166065][T10954] media_device_ioctl+0x205/0x490 [ 359.166097][T10954] ? __pfx_media_device_ioctl+0x10/0x10 [ 359.166147][T10954] ? __fget_files+0x3a2/0x420 [ 359.166167][T10954] ? __fget_files+0x2a/0x420 [ 359.166188][T10954] ? __pfx_media_device_ioctl+0x10/0x10 [ 359.166218][T10954] ? media_ioctl+0xfe/0x120 [ 359.166237][T10954] ? __pfx_media_ioctl+0x10/0x10 [ 359.166255][T10954] __se_sys_ioctl+0xfc/0x170 [ 359.166284][T10954] do_syscall_64+0x166/0x520 [ 359.166311][T10954] ? trace_irq_disable+0x3b/0x140 [ 359.166338][T10954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.166358][T10954] ? clear_bhb_loop+0x70/0xc0 [ 359.166384][T10954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.166403][T10954] RIP: 0033:0x7fd1e5d9e0d9 [ 359.166421][T10954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.166439][T10954] RSP: 002b:00007fd1e6c71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.166464][T10954] RAX: ffffffffffffffda RBX: 00007fd1e6025fa0 RCX: 00007fd1e5d9e0d9 [ 359.166474][T10954] RDX: 0000200000000280 RSI: 00000000c0487c04 RDI: 0000000000000005 [ 359.166483][T10954] RBP: 00007fd1e6c71090 R08: 0000000000000000 R09: 0000000000000000 [ 359.166491][T10954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.166499][T10954] R13: 00007fd1e6026038 R14: 00007fd1e6025fa0 R15: 00007fd1e614fa48 [ 359.166519][T10954] [ 359.404912][ T5705] usb 3-1: USB disconnect, device number 88 [ 359.470284][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1492'. [ 359.506739][T10958] tap0: tun_chr_ioctl cmd 1074025677 [ 359.532533][T10958] tap0: linktype set to 825 [ 359.552877][T10958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1493'. [ 359.573604][T10958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1493'. [ 359.596922][T10958] SET target dimension over the limit! [ 359.715457][T10962] netlink: 'syz.1.1494': attribute type 1 has an invalid length. [ 359.725247][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.751363][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1494'. [ 359.914167][T10969] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1495'. [ 359.957685][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.447666][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.758310][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.093864][T10977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1497'. [ 361.439464][T10977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.447853][ T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 361.482351][T10977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.482878][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 361.482914][ T30] audit: type=1326 audit(1787685145.851:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10982 comm="syz.0.1500" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f403219e0d9 code=0x0 [ 361.578754][T10989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1501'. [ 361.679197][ T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 361.693759][T10993] FAULT_INJECTION: forcing a failure. [ 361.693759][T10993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.700847][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.745788][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 361.755321][T10993] CPU: 0 UID: 0 PID: 10993 Comm: syz.0.1502 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.755395][T10993] Tainted: [L]=SOFTLOCKUP [ 361.755408][T10993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.755447][T10993] Call Trace: [ 361.755458][T10993] [ 361.755466][T10993] dump_stack_lvl+0xe8/0x150 [ 361.755498][T10993] should_fail_ex+0x410/0x560 [ 361.755523][T10993] _copy_to_user+0x31/0xb0 [ 361.755549][T10993] media_device_get_topology+0xffb/0x16a0 [ 361.755589][T10993] ? __pfx_media_device_get_topology+0x10/0x10 [ 361.755660][T10993] media_device_ioctl+0x2cb/0x490 [ 361.755693][T10993] ? __pfx_media_device_ioctl+0x10/0x10 [ 361.755744][T10993] ? __fget_files+0x3a2/0x420 [ 361.755785][T10993] ? __fget_files+0x2a/0x420 [ 361.755828][T10993] ? __pfx_media_device_ioctl+0x10/0x10 [ 361.755873][T10993] ? media_ioctl+0xfe/0x120 [ 361.755917][T10993] ? __pfx_media_ioctl+0x10/0x10 [ 361.755939][T10993] __se_sys_ioctl+0xfc/0x170 [ 361.755973][T10993] do_syscall_64+0x166/0x520 [ 361.756003][T10993] ? trace_irq_disable+0x3b/0x140 [ 361.756034][T10993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.756058][T10993] ? clear_bhb_loop+0x70/0xc0 [ 361.756143][T10993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.756238][T10993] RIP: 0033:0x7f403219e0d9 [ 361.756291][T10993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.756334][T10993] RSP: 002b:00007f4032fed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.756399][T10993] RAX: ffffffffffffffda RBX: 00007f4032425fa0 RCX: 00007f403219e0d9 [ 361.756439][T10993] RDX: 0000200000000280 RSI: 00000000c0487c04 RDI: 0000000000000003 [ 361.756470][T10993] RBP: 00007f4032fed090 R08: 0000000000000000 R09: 0000000000000000 [ 361.756540][T10993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.756575][T10993] R13: 00007f4032426038 R14: 00007f4032425fa0 R15: 00007f403254fa48 [ 361.756666][T10993] [ 361.965046][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 362.003114][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.024881][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.163088][T10998] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1503'. [ 362.180228][T10998] openvswitch: netlink: Message has 512 unknown bytes. [ 362.283273][ T6657] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.337321][ T6657] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.348265][T10998] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 362.370163][ T6657] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.432153][ T6657] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.474744][ T30] audit: type=1326 audit(1787685146.841:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.2.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab2279e0d9 code=0x0 [ 363.995172][T11023] tipc: Enabled bearer , priority 10 [ 364.013796][T11026] tipc: Resetting bearer [ 364.044200][T11026] tipc: Disabling bearer [ 364.197646][ T5697] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 364.281133][ T24] usb 3-1: USB disconnect, device number 89 [ 364.355433][ T30] audit: type=1326 audit(1787685148.721:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2279e0d9 code=0x7ffc0000 [ 364.388388][ T30] audit: type=1326 audit(1787685148.761:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2279e0d9 code=0x7ffc0000 [ 364.391148][ T5697] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 364.425375][ T30] audit: type=1326 audit(1787685148.761:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2279e0d9 code=0x7ffc0000 [ 364.458711][T11041] FAULT_INJECTION: forcing a failure. [ 364.458711][T11041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.469858][ T5697] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 364.481208][ T30] audit: type=1326 audit(1787685148.761:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2279e0d9 code=0x7ffc0000 [ 364.493457][ T5697] usb 5-1: config 1 has no interface number 0 [ 364.509860][T11041] CPU: 1 UID: 0 PID: 11041 Comm: syz.0.1513 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.509958][T11041] Tainted: [L]=SOFTLOCKUP [ 364.509976][T11041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.510011][T11041] Call Trace: [ 364.510024][T11041] [ 364.510037][T11041] dump_stack_lvl+0xe8/0x150 [ 364.510124][T11041] should_fail_ex+0x410/0x560 [ 364.510193][T11041] _copy_to_user+0x31/0xb0 [ 364.510256][T11041] media_device_get_topology+0xffb/0x16a0 [ 364.510395][T11041] ? __pfx_media_device_get_topology+0x10/0x10 [ 364.510570][T11041] media_device_ioctl+0x2cb/0x490 [ 364.510642][T11041] ? __pfx_media_device_ioctl+0x10/0x10 [ 364.510759][T11041] ? __fget_files+0x3a2/0x420 [ 364.510812][T11041] ? __fget_files+0x2a/0x420 [ 364.510863][T11041] ? __pfx_media_device_ioctl+0x10/0x10 [ 364.510940][T11041] ? media_ioctl+0xfe/0x120 [ 364.510986][T11041] ? __pfx_media_ioctl+0x10/0x10 [ 364.511030][T11041] __se_sys_ioctl+0xfc/0x170 [ 364.511110][T11041] do_syscall_64+0x166/0x520 [ 364.511200][T11041] ? trace_irq_disable+0x3b/0x140 [ 364.511276][T11041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.511332][T11041] ? clear_bhb_loop+0x70/0xc0 [ 364.511392][T11041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.511437][T11041] RIP: 0033:0x7f403219e0d9 [ 364.511482][T11041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.511520][T11041] RSP: 002b:00007f4032fcc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.511575][T11041] RAX: ffffffffffffffda RBX: 00007f4032426090 RCX: 00007f403219e0d9 [ 364.511612][T11041] RDX: 0000200000000280 RSI: 00000000c0487c04 RDI: 0000000000000005 [ 364.511641][T11041] RBP: 00007f4032fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 364.511684][T11041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.511696][T11041] R13: 00007f4032426128 R14: 00007f4032426090 R15: 00007f403254fa48 [ 364.511724][T11041] [ 364.511879][ T30] audit: type=1326 audit(1787685148.761:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab2275e90e code=0x7ffc0000 [ 364.581945][ T5697] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 364.597777][ T30] audit: type=1326 audit(1787685148.761:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2279e0d9 code=0x7ffc0000 [ 364.597822][ T30] audit: type=1326 audit(1787685148.761:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2279e0d9 code=0x7ffc0000 [ 364.597863][ T30] audit: type=1326 audit(1787685148.761:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11038 comm="syz.2.1514" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab2279e0d9 code=0x7ffc0000 [ 364.636426][ T5697] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 364.834618][ T5697] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 364.848515][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.856764][ T5697] usb 5-1: Product: syz [ 364.861094][ T5697] usb 5-1: Manufacturer: syz [ 364.865777][ T5697] usb 5-1: SerialNumber: syz [ 364.875962][T11029] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 365.013402][T11050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.090098][ T5697] usb 5-1: Error in usbnet_get_endpoints (-71) [ 365.105007][ T5697] usb 5-1: USB disconnect, device number 91 [ 365.477694][ T5721] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 365.637978][ T5721] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 365.648515][ T5721] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.663781][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 365.670054][ T5721] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 365.674706][T11058] netlink: 'syz.4.1519': attribute type 5 has an invalid length. [ 365.684463][ T5721] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 365.703396][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.705405][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 365.728480][T11056] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 365.780903][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1519'. [ 365.792304][T11060] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1519'. [ 365.823365][T11058] geneve2: entered promiscuous mode [ 365.837933][T11058] geneve2: entered allmulticast mode [ 365.857818][ T6657] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 59938 - 0 [ 365.869228][ T6657] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 59938 - 0 [ 365.879322][ T6657] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 59938 - 0 [ 365.915609][T11062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.924751][T11062] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.944000][T11062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.951604][T11063] xt_hashlimit: size too large, truncated to 1048576 [ 365.981569][ T6665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.997260][ T5697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.007536][ T3282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.015948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.027227][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.035378][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.044083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.053469][ T5344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.070913][ T3282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.081551][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.113418][T11062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.129310][T11062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.142868][T11062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.153652][T11062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.174436][T11062] veth1_vlan: left promiscuous mode [ 366.181111][T11062] veth0_vlan: left promiscuous mode [ 366.188446][T11062] veth0_vlan: entered promiscuous mode [ 366.196281][T11062] veth1_vlan: entered promiscuous mode [ 366.207314][T11062] veth1_macvtap: left promiscuous mode [ 366.214193][T11062] veth0_macvtap: left promiscuous mode [ 366.221465][T11062] veth0_macvtap: entered promiscuous mode [ 366.228592][T11062] veth1_macvtap: entered promiscuous mode [ 366.242465][T11062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.251337][T11062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.259698][T11062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.271485][T11062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.285009][T11062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.295446][T11062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.304063][T11062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.312089][T11062] ip6tnl2: left promiscuous mode [ 366.318545][T11062] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.326146][ T5705] bridge0: entered promiscuous mode [ 366.337981][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.345208][ T135] bridge0: port 1(bridge_slave_0) entered listening state [ 366.360150][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.367962][ T135] bridge0: port 2(bridge_slave_1) entered listening state [ 366.447484][ T6657] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 59938 - 0 [ 366.476210][ T6657] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.504835][ T6657] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.514210][ T6657] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.547591][ T6668] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.766176][T11056] bridge1: entered allmulticast mode [ 367.170014][T11083] FAULT_INJECTION: forcing a failure. [ 367.170014][T11083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.185273][T11083] CPU: 0 UID: 0 PID: 11083 Comm: syz.1.1525 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.185295][T11083] Tainted: [L]=SOFTLOCKUP [ 367.185300][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.185309][T11083] Call Trace: [ 367.185315][T11083] [ 367.185320][T11083] dump_stack_lvl+0xe8/0x150 [ 367.185345][T11083] should_fail_ex+0x410/0x560 [ 367.185364][T11083] _copy_to_user+0x31/0xb0 [ 367.185386][T11083] media_device_ioctl+0x363/0x490 [ 367.185411][T11083] ? __pfx_media_device_ioctl+0x10/0x10 [ 367.185448][T11083] ? __fget_files+0x3a2/0x420 [ 367.185463][T11083] ? __fget_files+0x2a/0x420 [ 367.185479][T11083] ? __pfx_media_device_ioctl+0x10/0x10 [ 367.185508][T11083] ? media_ioctl+0xfe/0x120 [ 367.185522][T11083] ? __pfx_media_ioctl+0x10/0x10 [ 367.185536][T11083] __se_sys_ioctl+0xfc/0x170 [ 367.185582][T11083] do_syscall_64+0x166/0x520 [ 367.185610][T11083] ? trace_irq_disable+0x3b/0x140 [ 367.185640][T11083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.185655][T11083] ? clear_bhb_loop+0x70/0xc0 [ 367.185672][T11083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.185687][T11083] RIP: 0033:0x7fd1e5d9e0d9 [ 367.185700][T11083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.185712][T11083] RSP: 002b:00007fd1e6c71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.185727][T11083] RAX: ffffffffffffffda RBX: 00007fd1e6025fa0 RCX: 00007fd1e5d9e0d9 [ 367.185738][T11083] RDX: 0000200000000280 RSI: 00000000c0487c04 RDI: 0000000000000005 [ 367.185747][T11083] RBP: 00007fd1e6c71090 R08: 0000000000000000 R09: 0000000000000000 [ 367.185756][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.185765][T11083] R13: 00007fd1e6026038 R14: 00007fd1e6025fa0 R15: 00007fd1e614fa48 [ 367.185786][T11083] [ 367.440857][ T5782] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 367.619380][ T5782] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 367.635969][ T5782] usb 5-1: config index 0 descriptor too short (expected 26966, got 18) [ 367.650234][ T5782] usb 5-1: config 116 has too many interfaces: 114, using maximum allowed: 32 [ 367.668720][ T5782] usb 5-1: config 116 has an invalid descriptor of length 32, skipping remainder of the config [ 367.687100][ T5782] usb 5-1: config 116 has 0 interfaces, different from the descriptor's value: 114 [ 367.700139][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.709355][ T5782] usb 5-1: Product: syz [ 367.717141][ T5782] usb 5-1: Manufacturer: syz [ 367.729512][ T5782] usb 5-1: SerialNumber: syz [ 367.990058][T11080] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.012341][T11080] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 59938 - 0 [ 368.044239][T11080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.081299][ T5782] usb 5-1: USB disconnect, device number 92 [ 368.320794][ T5721] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 368.322151][ T9865] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 368.360010][ T5721] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input61 [ 368.460776][ T5721] usb 3-1: USB disconnect, device number 90 [ 368.466843][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 368.737758][ T191] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 368.849766][ T5721] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 368.903020][ T191] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 368.925264][ T191] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 368.937071][ T191] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 368.947199][ T191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.957480][ T5690] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 368.960618][ T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 368.981610][ T191] usb 4-1: probing VID:PID(0424:012C) [ 368.998902][ T191] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 369.006272][ T191] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 369.013241][ T191] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 369.021318][ T191] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 369.028594][ T5721] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 369.039651][ T191] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 369.050992][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.059477][ T5721] usb 3-1: Product: syz [ 369.063718][ T5721] usb 3-1: Manufacturer: syz [ 369.068397][ T5721] usb 3-1: SerialNumber: syz [ 369.085329][ T5721] ums-karma 3-1:1.0: USB Mass Storage device detected [ 369.098868][ T5721] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 369.098868][ T5721] Please send a copy of this message to and [ 369.127744][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 369.135537][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 369.147470][ T5690] usb 5-1: Using ep0 maxpacket: 8 [ 369.154310][ T5690] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 369.161100][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=0190, bcdDevice= 7.10 [ 369.171502][ T5690] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 369.188540][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.189067][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 369.197801][ T5690] usb 5-1: Product: syz [ 369.209306][ T5690] usb 5-1: Manufacturer: syz [ 369.214006][ T5690] usb 5-1: SerialNumber: syz [ 369.222969][ T5690] usb 5-1: config 0 descriptor?? [ 369.231386][ T24] usb 2-1: can't read configurations, error -61 [ 369.243720][ T5690] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 369.254729][ T5690] usb 5-1: setting power ON [ 369.259965][ T5690] dvb-usb: bulk message failed: -22 (2/0) [ 369.272507][ T5690] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 369.292725][ T5690] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 369.302299][ T5690] usb 5-1: media controller created [ 369.332776][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.346462][ T5721] ums-karma 3-1:1.0: probe with driver ums-karma failed with error -5 [ 369.367934][ T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 369.397305][ T5721] usb 3-1: USB disconnect, device number 91 [ 369.432622][ T5690] usb 5-1: selecting invalid altsetting 6 [ 369.456593][ T5690] usb 5-1: digital interface selection failed (-22) [ 369.465483][ T5690] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 369.476948][ T5690] usb 5-1: setting power OFF [ 369.484610][ T5690] dvb-usb: bulk message failed: -22 (2/0) [ 369.491442][ T5690] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 369.505866][ T5690] (NULL device *): no alternate interface [ 369.527447][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 369.546730][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 369.556867][ T5690] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 369.565443][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=0190, bcdDevice= 7.10 [ 369.589226][ T191] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 369.599886][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 369.611144][ T5690] usb 5-1: USB disconnect, device number 93 [ 369.625276][ T24] usb 2-1: can't read configurations, error -61 [ 369.640039][ T24] usb usb2-port1: attempt power cycle [ 369.741265][ T5273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.800666][ T191] usb 4-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 369.945791][ T5690] hid_parser_main: 30 callbacks suppressed [ 369.945834][ T5690] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 369.964257][ T5690] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.987809][ T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 370.019476][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 370.040680][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 370.071940][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=0190, bcdDevice= 7.10 [ 370.093093][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 370.101177][ T24] usb 2-1: can't read configurations, error -61 [ 370.197534][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 370.237601][ T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 370.262588][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 370.281739][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 370.297734][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=0190, bcdDevice= 7.10 [ 370.315324][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 370.327827][ T24] usb 2-1: can't read configurations, error -61 [ 370.341096][ T24] usb usb2-port1: unable to enumerate USB device [ 370.378125][T11068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1521'. [ 370.639970][ T191] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 370.684074][ T191] usb 4-1: USB disconnect, device number 70 [ 370.715527][ T5721] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 370.792092][ T191] USB vub300 remote SDIO host controller[0] now disconnected [ 370.960138][T11147] FAULT_INJECTION: forcing a failure. [ 370.960138][T11147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.010858][T11147] CPU: 1 UID: 0 PID: 11147 Comm: syz.2.1537 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.010888][T11147] Tainted: [L]=SOFTLOCKUP [ 371.010895][T11147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.010907][T11147] Call Trace: [ 371.010915][T11147] [ 371.010923][T11147] dump_stack_lvl+0xe8/0x150 [ 371.010955][T11147] should_fail_ex+0x410/0x560 [ 371.010981][T11147] _copy_to_user+0x31/0xb0 [ 371.011007][T11147] simple_read_from_buffer+0xe1/0x170 [ 371.011034][T11147] proc_fail_nth_read+0x1bb/0x230 [ 371.011063][T11147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 371.011091][T11147] ? rw_verify_area+0x24a/0x4c0 [ 371.011118][T11147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 371.011143][T11147] vfs_read+0x213/0xa80 [ 371.011171][T11147] ? __pfx___mutex_lock+0x10/0x10 [ 371.011198][T11147] ? __pfx_vfs_read+0x10/0x10 [ 371.011222][T11147] ? __fget_files+0x2a/0x420 [ 371.011247][T11147] ? __fget_files+0x3a2/0x420 [ 371.011266][T11147] ? __fget_files+0x2a/0x420 [ 371.011293][T11147] ksys_read+0x150/0x270 [ 371.011318][T11147] ? __pfx_ksys_read+0x10/0x10 [ 371.011339][T11147] ? __pfx_media_ioctl+0x10/0x10 [ 371.011365][T11147] do_syscall_64+0x166/0x520 [ 371.011390][T11147] ? trace_irq_disable+0x3b/0x140 [ 371.011416][T11147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.011437][T11147] ? clear_bhb_loop+0x70/0xc0 [ 371.011459][T11147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.011479][T11147] RIP: 0033:0x7fab2275e90e [ 371.011496][T11147] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 371.011512][T11147] RSP: 002b:00007fab209d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 371.011532][T11147] RAX: ffffffffffffffda RBX: 00007fab209d56c0 RCX: 00007fab2275e90e [ 371.011546][T11147] RDX: 000000000000000f RSI: 00007fab209d50a0 RDI: 0000000000000006 [ 371.011558][T11147] RBP: 00007fab209d5090 R08: 0000000000000000 R09: 0000000000000000 [ 371.011570][T11147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.011582][T11147] R13: 00007fab22a26128 R14: 00007fab22a26090 R15: 00007fab22b4fa48 [ 371.011611][T11147] [ 371.257304][ T5690] net_ratelimit: 19 callbacks suppressed [ 371.257321][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.466273][T11156] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1024 (2048 ns) > initial count (1664 ns). Using initial count to start timer. [ 371.484438][ T6667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.495028][ T5690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.504240][ T191] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.719192][T11166] kvm: user requested TSC rate below hardware speed [ 371.727845][ C0] [ 371.731428][ C0] ============================= [ 371.736313][ C0] WARNING: suspicious RCU usage [ 371.741215][ C0] syzkaller #0 Tainted: G L [ 371.747216][ C0] ----------------------------- [ 371.752118][ C0] kernel/sched/core.c:9196 Illegal context switch in RCU-sched read-side critical section! [ 371.762154][ C0] [ 371.762154][ C0] other info that might help us debug this: [ 371.762154][ C0] [ 371.772448][ C0] [ 371.772448][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 371.780554][ C0] locks held by syz.1.1531/11104: 5, last CPU#0: [ 371.786880][ C0] #0: ffff8880768e29f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 371.795982][ C0] #1: ffffffff8ed5a420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 371.805534][ C0] #2: ffff8880589acbb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 371.816029][ C0] #3: ffffffff8ed5a4e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 371.825515][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 371.836029][ C0] [ 371.836029][ C0] stack backtrace: [ 371.841978][ C0] CPU: 0 UID: 0 PID: 11104 Comm: syz.1.1531 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.842012][ C0] Tainted: [L]=SOFTLOCKUP [ 371.842018][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.842027][ C0] Call Trace: [ 371.842034][ C0] [ 371.842040][ C0] dump_stack_lvl+0xe8/0x150 [ 371.842065][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 371.842093][ C0] __might_resched+0xbb/0x4c0 [ 371.842114][ C0] ? __cancel_work_sync+0x5c/0x110 [ 371.842137][ C0] __cancel_work_sync+0x6d/0x110 [ 371.842165][ C0] mmc_free_host+0x19/0x30 [ 371.842188][ C0] call_timer_fn+0x18d/0x5f0 [ 371.842205][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 371.842225][ C0] ? call_timer_fn+0xd5/0x5f0 [ 371.842240][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 371.842262][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.842281][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 371.842303][ C0] __run_timer_base+0x652/0x8b0 [ 371.842326][ C0] ? ktime_get+0x45/0x220 [ 371.842354][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 371.842381][ C0] ? ktime_get+0x1f5/0x220 [ 371.842403][ C0] ? lapic_next_event+0x11/0x20 [ 371.842420][ C0] run_timer_softirq+0xb7/0x170 [ 371.842444][ C0] handle_softirqs+0x226/0x860 [ 371.842464][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 371.842486][ C0] __irq_exit_rcu+0xcb/0x220 [ 371.842504][ C0] irq_exit_rcu+0x9/0x30 [ 371.842520][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 371.842541][ C0] [ 371.842546][ C0] [ 371.842552][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 371.842569][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x9a/0xa0 [ 371.842592][ C0] Code: c1 e1 05 4c 8d 51 28 4d 39 ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 371.842605][ C0] RSP: 0018:ffffc90017ae7310 EFLAGS: 00000293 [ 371.842618][ C0] RAX: ffffffff8242dccd RBX: ffffffff8242dbba RCX: ffff888031b78000 [ 371.842630][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 371.842639][ C0] RBP: 0000000000000002 R08: ffffffff8242dbba R09: 0000000000000000 [ 371.842650][ C0] R10: 0000000000000000 R11: ffffffff8ed5a4e0 R12: dffffc0000000000 [ 371.842660][ C0] R13: ffffea000000000f R14: 0000000000065919 R15: ffff88813fe0d180 [ 371.842674][ C0] ? pfn_valid+0xba/0x490 [ 371.842696][ C0] ? pfn_valid+0xba/0x490 [ 371.842717][ C0] ? pfn_valid+0x1cd/0x490 [ 371.842742][ C0] pfn_valid+0x1cd/0x490 [ 371.842766][ C0] page_table_check_clear+0x21/0x500 [ 371.842788][ C0] ? vm_normal_page+0x12c/0x280 [ 371.842811][ C0] __zap_vma_range+0x39b9/0x4f20 [ 371.842865][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 371.842904][ C0] ? mas_find+0xab1/0xcf0 [ 371.842924][ C0] ? unmap_vmas+0x1b9/0x550 [ 371.842946][ C0] unmap_vmas+0x390/0x550 [ 371.842971][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 371.843025][ C0] exit_mmap+0x293/0x9f0 [ 371.843053][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 371.843105][ C0] ? __pfx_exit_aio+0x10/0x10 [ 371.843131][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 371.843155][ C0] __mmput+0x118/0x420 [ 371.843172][ C0] exit_mm+0x221/0x2d0 [ 371.843194][ C0] do_exit+0x6cd/0x2360 [ 371.843220][ C0] ? __pfx_do_exit+0x10/0x10 [ 371.843243][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 371.843265][ C0] do_group_exit+0x22d/0x2f0 [ 371.843286][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.843305][ C0] get_signal+0x121b/0x12c0 [ 371.843335][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 371.843356][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 371.843386][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 371.843408][ C0] ? rcu_is_watching+0x16/0xb0 [ 371.843424][ C0] do_syscall_64+0x328/0x520 [ 371.843444][ C0] ? trace_irq_disable+0x3b/0x140 [ 371.843480][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.843502][ C0] ? clear_bhb_loop+0x70/0xc0 [ 371.843531][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.843546][ C0] RIP: 0033:0x7fd1e5d9e0d9 [ 371.843557][ C0] Code: Unable to access opcode bytes at 0x7fd1e5d9e0af. [ 371.843565][ C0] RSP: 002b:00007fd1e614fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 371.843578][ C0] RAX: fffffffffffffdfc RBX: 000000000005a01d RCX: 00007fd1e5d9e0d9 [ 371.843589][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd1e6025fac [ 371.843612][ C0] RBP: 0000000000000bea R08: 3fffffffffffffff R09: 0000000000000000 [ 371.843627][ C0] R10: 00007fd1e614fcb0 R11: 0000000000000246 R12: 00007fd1e614fcd0 [ 371.843642][ C0] R13: 00007fd1e6025fac R14: 000000000005ac07 R15: 00007fd1e614fcb0 [ 371.843672][ C0] [ 371.843685][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4552 [ 372.098079][T11167] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 372.105946][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11104, name: syz.1.1531 [ 372.331029][ C0] preempt_count: 102, expected: 0 [ 372.336063][ C0] RCU nest depth: 1, expected: 0 [ 372.341033][ C0] locks held by syz.1.1531/11104: 5, last CPU#0: [ 372.347409][ C0] #0: ffff8880768e29f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 372.356528][ C0] #1: ffffffff8ed5a420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 372.366076][ C0] #2: ffff8880589acbb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 372.376613][ C0] #3: ffffffff8ed5a4e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 372.386102][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 372.396617][ C0] Preemption disabled at: [ 372.396627][ C0] [<0000000000000000>] 0x0 [ 372.405423][ C0] CPU: 0 UID: 0 PID: 11104 Comm: syz.1.1531 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.405443][ C0] Tainted: [L]=SOFTLOCKUP [ 372.405449][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.405457][ C0] Call Trace: [ 372.405479][ C0] [ 372.405487][ C0] dump_stack_lvl+0xe8/0x150 [ 372.405521][ C0] __might_resched+0x36a/0x4c0 [ 372.405555][ C0] __cancel_work_sync+0x6d/0x110 [ 372.405576][ C0] mmc_free_host+0x19/0x30 [ 372.405599][ C0] call_timer_fn+0x18d/0x5f0 [ 372.405614][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 372.405633][ C0] ? call_timer_fn+0xd5/0x5f0 [ 372.405648][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 372.405669][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.405686][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 372.405707][ C0] __run_timer_base+0x652/0x8b0 [ 372.405729][ C0] ? ktime_get+0x45/0x220 [ 372.405756][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 372.405780][ C0] ? ktime_get+0x1f5/0x220 [ 372.405800][ C0] ? lapic_next_event+0x11/0x20 [ 372.405817][ C0] run_timer_softirq+0xb7/0x170 [ 372.405840][ C0] handle_softirqs+0x226/0x860 [ 372.405858][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 372.405879][ C0] __irq_exit_rcu+0xcb/0x220 [ 372.405896][ C0] irq_exit_rcu+0x9/0x30 [ 372.405911][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 372.405930][ C0] [ 372.405934][ C0] [ 372.405940][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 372.405956][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x9a/0xa0 [ 372.405979][ C0] Code: c1 e1 05 4c 8d 51 28 4d 39 ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 372.405991][ C0] RSP: 0018:ffffc90017ae7310 EFLAGS: 00000293 [ 372.406003][ C0] RAX: ffffffff8242dccd RBX: ffffffff8242dbba RCX: ffff888031b78000 [ 372.406015][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 372.406023][ C0] RBP: 0000000000000002 R08: ffffffff8242dbba R09: 0000000000000000 [ 372.406032][ C0] R10: 0000000000000000 R11: ffffffff8ed5a4e0 R12: dffffc0000000000 [ 372.406043][ C0] R13: ffffea000000000f R14: 0000000000065919 R15: ffff88813fe0d180 [ 372.406055][ C0] ? pfn_valid+0xba/0x490 [ 372.406076][ C0] ? pfn_valid+0xba/0x490 [ 372.406095][ C0] ? pfn_valid+0x1cd/0x490 [ 372.406119][ C0] pfn_valid+0x1cd/0x490 [ 372.406141][ C0] page_table_check_clear+0x21/0x500 [ 372.406168][ C0] ? vm_normal_page+0x12c/0x280 [ 372.406190][ C0] __zap_vma_range+0x39b9/0x4f20 [ 372.406241][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 372.406267][ C0] ? mas_find+0xab1/0xcf0 [ 372.406287][ C0] ? unmap_vmas+0x1b9/0x550 [ 372.406310][ C0] unmap_vmas+0x390/0x550 [ 372.406335][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 372.406370][ C0] exit_mmap+0x293/0x9f0 [ 372.406389][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 372.406420][ C0] ? __pfx_exit_aio+0x10/0x10 [ 372.406446][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 372.406465][ C0] __mmput+0x118/0x420 [ 372.406482][ C0] exit_mm+0x221/0x2d0 [ 372.406504][ C0] do_exit+0x6cd/0x2360 [ 372.406529][ C0] ? __pfx_do_exit+0x10/0x10 [ 372.406552][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 372.406594][ C0] do_group_exit+0x22d/0x2f0 [ 372.406625][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.406669][ C0] get_signal+0x121b/0x12c0 [ 372.406712][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 372.406741][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 372.406771][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 372.406793][ C0] ? rcu_is_watching+0x16/0xb0 [ 372.406810][ C0] do_syscall_64+0x328/0x520 [ 372.406830][ C0] ? trace_irq_disable+0x3b/0x140 [ 372.406850][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.406864][ C0] ? clear_bhb_loop+0x70/0xc0 [ 372.406882][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.406895][ C0] RIP: 0033:0x7fd1e5d9e0d9 [ 372.406907][ C0] Code: Unable to access opcode bytes at 0x7fd1e5d9e0af. [ 372.406914][ C0] RSP: 002b:00007fd1e614fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 372.406928][ C0] RAX: fffffffffffffdfc RBX: 000000000005a01d RCX: 00007fd1e5d9e0d9 [ 372.406938][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd1e6025fac [ 372.406947][ C0] RBP: 0000000000000bea R08: 3fffffffffffffff R09: 0000000000000000 [ 372.406956][ C0] R10: 00007fd1e614fcb0 R11: 0000000000000246 R12: 00007fd1e614fcd0 [ 372.406965][ C0] R13: 00007fd1e6025fac R14: 000000000005ac07 R15: 00007fd1e614fcb0 [ 372.406986][ C0] [ 372.439706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.445196][ C0] [ 372.862323][ C0] ============================= [ 372.867190][ C0] WARNING: suspicious RCU usage [ 372.872092][ C0] syzkaller #0 Tainted: G W L [ 372.878121][ C0] ----------------------------- [ 372.882982][ C0] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 372.895012][ C0] [ 372.895012][ C0] other info that might help us debug this: [ 372.895012][ C0] [ 372.905290][ C0] [ 372.905290][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 372.913416][ C0] locks held by syz.1.1531/11104: 5, last CPU#0: [ 372.919789][ C0] #0: ffff8880768e29f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 372.928955][ C0] #1: ffffffff8ed5a420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 372.938557][ C0] #2: ffff8880589acbb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 372.949088][ C0] #3: ffffffff8ed5a4e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 372.958579][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 372.969130][ C0] [ 372.969130][ C0] stack backtrace: [ 372.975045][ C0] CPU: 0 UID: 0 PID: 11104 Comm: syz.1.1531 Tainted: G W L syzkaller #0 PREEMPT(full) [ 372.975079][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 372.975089][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.975109][ C0] Call Trace: [ 372.975117][ C0] [ 372.975125][ C0] dump_stack_lvl+0xe8/0x150 [ 372.975159][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 372.975197][ C0] __synchronize_srcu+0x157/0x2f0 [ 372.975231][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 372.975260][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 372.975293][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 372.975318][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 372.975351][ C0] ? synchronize_srcu+0x20a/0x260 [ 372.975381][ C0] wakeup_source_unregister+0x129/0x3f0 [ 372.975415][ C0] mmc_host_classdev_release+0x47/0x100 [ 372.975450][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 372.975482][ C0] device_release+0xc4/0x1f0 [ 372.975507][ C0] kobject_put+0x222/0x550 [ 372.975527][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 372.975552][ C0] call_timer_fn+0x18d/0x5f0 [ 372.975574][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 372.975599][ C0] ? call_timer_fn+0xd5/0x5f0 [ 372.975619][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 372.975649][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.975673][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 372.975703][ C0] __run_timer_base+0x652/0x8b0 [ 372.975733][ C0] ? ktime_get+0x45/0x220 [ 372.975772][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 372.975808][ C0] ? ktime_get+0x1f5/0x220 [ 372.975838][ C0] ? lapic_next_event+0x11/0x20 [ 372.975863][ C0] run_timer_softirq+0xb7/0x170 [ 372.975896][ C0] handle_softirqs+0x226/0x860 [ 372.975923][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 372.975945][ C0] __irq_exit_rcu+0xcb/0x220 [ 372.975962][ C0] irq_exit_rcu+0x9/0x30 [ 372.975978][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 372.975998][ C0] [ 372.976004][ C0] [ 372.976010][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 372.976027][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x9a/0xa0 [ 372.976050][ C0] Code: c1 e1 05 4c 8d 51 28 4d 39 ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 372.976064][ C0] RSP: 0018:ffffc90017ae7310 EFLAGS: 00000293 [ 372.976077][ C0] RAX: ffffffff8242dccd RBX: ffffffff8242dbba RCX: ffff888031b78000 [ 372.976088][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 372.976097][ C0] RBP: 0000000000000002 R08: ffffffff8242dbba R09: 0000000000000000 [ 372.976115][ C0] R10: 0000000000000000 R11: ffffffff8ed5a4e0 R12: dffffc0000000000 [ 372.976125][ C0] R13: ffffea000000000f R14: 0000000000065919 R15: ffff88813fe0d180 [ 372.976139][ C0] ? pfn_valid+0xba/0x490 [ 372.976161][ C0] ? pfn_valid+0xba/0x490 [ 372.976180][ C0] ? pfn_valid+0x1cd/0x490 [ 372.976205][ C0] pfn_valid+0x1cd/0x490 [ 372.976228][ C0] page_table_check_clear+0x21/0x500 [ 372.976251][ C0] ? vm_normal_page+0x12c/0x280 [ 372.976274][ C0] __zap_vma_range+0x39b9/0x4f20 [ 372.976327][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 372.976355][ C0] ? mas_find+0xab1/0xcf0 [ 372.976376][ C0] ? unmap_vmas+0x1b9/0x550 [ 372.976399][ C0] unmap_vmas+0x390/0x550 [ 372.976426][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 372.976463][ C0] exit_mmap+0x293/0x9f0 [ 372.976483][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 372.976516][ C0] ? __pfx_exit_aio+0x10/0x10 [ 372.976543][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 372.976564][ C0] __mmput+0x118/0x420 [ 372.976582][ C0] exit_mm+0x221/0x2d0 [ 372.976608][ C0] do_exit+0x6cd/0x2360 [ 372.976636][ C0] ? __pfx_do_exit+0x10/0x10 [ 372.976661][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 372.976686][ C0] do_group_exit+0x22d/0x2f0 [ 372.976708][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.976730][ C0] get_signal+0x121b/0x12c0 [ 372.976761][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 372.976783][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 372.976815][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 372.976837][ C0] ? rcu_is_watching+0x16/0xb0 [ 372.976855][ C0] do_syscall_64+0x328/0x520 [ 372.976876][ C0] ? trace_irq_disable+0x3b/0x140 [ 372.976897][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.976913][ C0] ? clear_bhb_loop+0x70/0xc0 [ 372.976932][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.976947][ C0] RIP: 0033:0x7fd1e5d9e0d9 [ 372.976961][ C0] Code: Unable to access opcode bytes at 0x7fd1e5d9e0af. [ 372.976968][ C0] RSP: 002b:00007fd1e614fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 372.976984][ C0] RAX: fffffffffffffdfc RBX: 000000000005a01d RCX: 00007fd1e5d9e0d9 [ 372.976995][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd1e6025fac [ 372.977005][ C0] RBP: 0000000000000bea R08: 3fffffffffffffff R09: 0000000000000000 [ 372.977015][ C0] R10: 00007fd1e614fcb0 R11: 0000000000000246 R12: 00007fd1e614fcd0 [ 372.977025][ C0] R13: 00007fd1e6025fac R14: 000000000005ac07 R15: 00007fd1e614fcb0 [ 372.977046][ C0] [ 372.977054][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 373.217736][ T5686] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 373.220369][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11104, name: syz.1.1531 [ 373.379329][ T5686] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 373.380119][ C0] preempt_count: 102, expected: 0 [ 373.396755][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.400564][ C0] RCU nest depth: 1, expected: 0 [ 373.400580][ C0] locks held by syz.1.1531/11104: 5, last CPU#0: [ 373.400597][ C0] #0: ffff8880768e29f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 373.400663][ C0] #1: ffffffff8ed5a420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 373.400721][ C0] #2: ffff8880589acbb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 373.400786][ C0] #3: ffffffff8ed5a4e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 373.400852][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 373.400911][ C0] Preemption disabled at: [ 373.400918][ C0] [<0000000000000000>] 0x0 [ 373.400946][ C0] CPU: 0 UID: 0 PID: 11104 Comm: syz.1.1531 Tainted: G W L syzkaller #0 PREEMPT(full) [ 373.400975][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 373.400984][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.400996][ C0] Call Trace: [ 373.401005][ C0] [ 373.401012][ C0] dump_stack_lvl+0xe8/0x150 [ 373.401041][ C0] __might_resched+0x36a/0x4c0 [ 373.401074][ C0] __synchronize_srcu+0x1a1/0x2f0 [ 373.401105][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 373.401134][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 373.401168][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 373.401195][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 373.401227][ C0] ? synchronize_srcu+0x20a/0x260 [ 373.401259][ C0] wakeup_source_unregister+0x129/0x3f0 [ 373.401294][ C0] mmc_host_classdev_release+0x47/0x100 [ 373.401329][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 373.401360][ C0] device_release+0xc4/0x1f0 [ 373.401386][ C0] kobject_put+0x222/0x550 [ 373.401407][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 373.401433][ C0] call_timer_fn+0x18d/0x5f0 [ 373.401454][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 373.401481][ C0] ? call_timer_fn+0xd5/0x5f0 [ 373.401507][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 373.401538][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.401563][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 373.401592][ C0] __run_timer_base+0x652/0x8b0 [ 373.401621][ C0] ? ktime_get+0x45/0x220 [ 373.401660][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 373.401694][ C0] ? ktime_get+0x1f5/0x220 [ 373.401722][ C0] ? lapic_next_event+0x11/0x20 [ 373.401747][ C0] run_timer_softirq+0xb7/0x170 [ 373.401779][ C0] handle_softirqs+0x226/0x860 [ 373.401806][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 373.401835][ C0] __irq_exit_rcu+0xcb/0x220 [ 373.401860][ C0] irq_exit_rcu+0x9/0x30 [ 373.401882][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 373.401910][ C0] [ 373.401917][ C0] [ 373.401926][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.401949][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x9a/0xa0 [ 373.401980][ C0] Code: c1 e1 05 4c 8d 51 28 4d 39 ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 373.401998][ C0] RSP: 0018:ffffc90017ae7310 EFLAGS: 00000293 [ 373.402016][ C0] RAX: ffffffff8242dccd RBX: ffffffff8242dbba RCX: ffff888031b78000 [ 373.402033][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 373.402046][ C0] RBP: 0000000000000002 R08: ffffffff8242dbba R09: 0000000000000000 [ 373.402060][ C0] R10: 0000000000000000 R11: ffffffff8ed5a4e0 R12: dffffc0000000000 [ 373.402074][ C0] R13: ffffea000000000f R14: 0000000000065919 R15: ffff88813fe0d180 [ 373.402094][ C0] ? pfn_valid+0xba/0x490 [ 373.402125][ C0] ? pfn_valid+0xba/0x490 [ 373.402154][ C0] ? pfn_valid+0x1cd/0x490 [ 373.402277][ C0] pfn_valid+0x1cd/0x490 [ 373.402357][ C0] page_table_check_clear+0x21/0x500 [ 373.402428][ C0] ? vm_normal_page+0x12c/0x280 [ 373.402509][ C0] __zap_vma_range+0x39b9/0x4f20 [ 373.402685][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 373.402776][ C0] ? mas_find+0xab1/0xcf0 [ 373.402845][ C0] ? unmap_vmas+0x1b9/0x550 [ 373.402918][ C0] unmap_vmas+0x390/0x550 [ 373.403000][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 373.403123][ C0] exit_mmap+0x293/0x9f0 [ 373.403194][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 373.403296][ C0] ? __pfx_exit_aio+0x10/0x10 [ 373.403378][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 373.403448][ C0] __mmput+0x118/0x420 [ 373.403530][ C0] exit_mm+0x221/0x2d0 [ 373.403615][ C0] do_exit+0x6cd/0x2360 [ 373.403748][ C0] ? __pfx_do_exit+0x10/0x10 [ 373.403831][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 373.403916][ C0] do_group_exit+0x22d/0x2f0 [ 373.403991][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.404055][ C0] get_signal+0x121b/0x12c0 [ 373.404166][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 373.404248][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 373.404352][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 373.404434][ C0] ? rcu_is_watching+0x16/0xb0 [ 373.404507][ C0] do_syscall_64+0x328/0x520 [ 373.404576][ C0] ? trace_irq_disable+0x3b/0x140 [ 373.404657][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.404709][ C0] ? clear_bhb_loop+0x70/0xc0 [ 373.404765][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.404817][ C0] RIP: 0033:0x7fd1e5d9e0d9 [ 373.404860][ C0] Code: Unable to access opcode bytes at 0x7fd1e5d9e0af. [ 373.404881][ C0] RSP: 002b:00007fd1e614fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 373.404934][ C0] RAX: fffffffffffffdfc RBX: 000000000005a01d RCX: 00007fd1e5d9e0d9 [ 373.404969][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd1e6025fac [ 373.405013][ C0] RBP: 0000000000000bea R08: 3fffffffffffffff R09: 0000000000000000 [ 373.405058][ C0] R10: 00007fd1e614fcb0 R11: 0000000000000246 R12: 00007fd1e614fcd0 [ 373.405111][ C0] R13: 00007fd1e6025fac R14: 000000000005ac07 R15: 00007fd1e614fcb0 [ 373.405182][ C0] [ 373.405209][ C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffc90017ae0000, but annotated. [ 373.412000][ C0] [ 373.412021][ C0] ====================================================== [ 373.412049][ C0] WARNING: possible circular locking dependency detected [ 373.412082][ C0] syzkaller #0 Tainted: G W L [ 373.412113][ C0] ------------------------------------------------------ [ 373.412143][ C0] syz.1.1531/11104 is trying to acquire lock: [ 373.412175][ C0] ffffffff8ed4c700 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x2cf/0x560 [ 373.412316][ C0] [ 373.412316][ C0] but task is already holding lock: [ 373.412338][ C0] ffffffff9ac4e790 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x81/0x3c0 [ 373.412479][ C0] [ 373.412479][ C0] which lock already depends on the new lock. [ 373.412479][ C0] [ 373.412511][ C0] [ 373.412511][ C0] the existing dependency chain (in reverse order) is: [ 373.412532][ C0] [ 373.412532][ C0] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}: [ 373.412615][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 373.412686][ C0] debug_object_assert_init+0xb0/0x380 [ 373.412748][ C0] hrtimer_start_range_ns+0x3d/0x3e0 [ 373.412821][ C0] rpm_suspend+0x12d9/0x17a0 [ 373.412907][ C0] __pm_runtime_idle+0x12f/0x1a0 [ 373.412965][ C0] __device_attach+0x355/0x450 [ 373.412997][ C0] device_initial_probe+0xa1/0xd0 [ 373.413039][ C0] bus_probe_device+0x12a/0x220 [ 373.413062][ C0] device_add+0x7d7/0xb80 [ 373.413087][ C0] serdev_controller_add+0x85/0x6d0 [ 373.413111][ C0] serdev_tty_port_register+0x159/0x260 [ 373.413137][ C0] tty_port_register_device_attr_serdev+0x169/0x1f0 [ 373.413158][ C0] serial_core_register_port+0xffa/0x2840 [ 373.413183][ C0] serial8250_register_8250_port+0x16b4/0x2090 [ 373.413206][ C0] serial_pnp_probe+0x56a/0x7f0 [ 373.413231][ C0] pnp_device_probe+0x30b/0x4c0 [ 373.413255][ C0] really_probe+0x254/0xae0 [ 373.413272][ C0] __driver_probe_device+0x1e8/0x360 [ 373.413289][ C0] driver_probe_device+0x4f/0x240 [ 373.413307][ C0] __driver_attach+0x339/0x600 [ 373.413323][ C0] bus_for_each_dev+0x23b/0x2c0 [ 373.413344][ C0] bus_add_driver+0x345/0x670 [ 373.413366][ C0] driver_register+0x23a/0x320 [ 373.413383][ C0] serial8250_init+0x8f/0x160 [ 373.413404][ C0] do_one_initcall+0x250/0x870 [ 373.413429][ C0] do_initcall_level+0x10a/0x1a0 [ 373.413453][ C0] do_initcalls+0x59/0xa0 [ 373.413476][ C0] kernel_init_freeable+0x29d/0x3e0 [ 373.413508][ C0] kernel_init+0x22/0x1d0 [ 373.413525][ C0] ret_from_fork+0x514/0xb70 [ 373.413551][ C0] ret_from_fork_asm+0x1a/0x30 [ 373.413578][ C0] [ 373.413578][ C0] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 373.413606][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 373.413629][ C0] __pm_runtime_resume+0x10f/0x180 [ 373.413658][ C0] __uart_start+0x171/0x460 [ 373.413681][ C0] uart_write+0x251/0x9f0 [ 373.413707][ C0] n_tty_write+0xd49/0x11e0 [ 373.413726][ C0] file_tty_write+0x50d/0x9f0 [ 373.413751][ C0] vfs_write+0x612/0xba0 [ 373.413771][ C0] ksys_write+0x150/0x270 [ 373.413792][ C0] do_syscall_64+0x166/0x520 [ 373.413817][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.413836][ C0] [ 373.413836][ C0] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 373.413864][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 373.413886][ C0] serial8250_console_write+0x153/0x1ba0 [ 373.413915][ C0] console_flush_all+0x709/0xb40 [ 373.413937][ C0] console_unlock+0xd1/0x1c0 [ 373.413954][ C0] vprintk_emit+0x485/0x560 [ 373.413973][ C0] _printk+0xdd/0x130 [ 373.413990][ C0] register_console+0xc1b/0x1040 [ 373.414011][ C0] univ8250_console_init+0x3a/0x70 [ 373.414032][ C0] console_init+0x10b/0x4a0 [ 373.414050][ C0] start_kernel+0x238/0x3e0 [ 373.414072][ C0] x86_64_start_reservations+0x24/0x30 [ 373.414090][ C0] x86_64_start_kernel+0x137/0x1b0 [ 373.414105][ C0] common_startup_64+0x13e/0x157 [ 373.414124][ C0] [ 373.414124][ C0] -> #0 (console_owner){-.-.}-{0:0}: [ 373.414151][ C0] __lock_acquire+0x1520/0x2cf0 [ 373.414178][ C0] lock_acquire+0x106/0x350 [ 373.414204][ C0] vprintk_emit+0x2eb/0x560 [ 373.414221][ C0] _printk+0xdd/0x130 [ 373.414237][ C0] __debug_object_init+0x2c3/0x3c0 [ 373.414258][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 373.414284][ C0] wakeup_source_unregister+0x129/0x3f0 [ 373.414311][ C0] mmc_host_classdev_release+0x47/0x100 [ 373.414340][ C0] device_release+0xc4/0x1f0 [ 373.414358][ C0] kobject_put+0x222/0x550 [ 373.414374][ C0] call_timer_fn+0x18d/0x5f0 [ 373.414392][ C0] __run_timer_base+0x652/0x8b0 [ 373.414419][ C0] run_timer_softirq+0xb7/0x170 [ 373.414447][ C0] handle_softirqs+0x226/0x860 [ 373.414467][ C0] __irq_exit_rcu+0xcb/0x220 [ 373.414487][ C0] irq_exit_rcu+0x9/0x30 [ 373.414514][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 373.414539][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.414559][ C0] __sanitizer_cov_trace_const_cmp8+0x9a/0xa0 [ 373.414584][ C0] pfn_valid+0x1cd/0x490 [ 373.414610][ C0] page_table_check_clear+0x21/0x500 [ 373.414638][ C0] __zap_vma_range+0x39b9/0x4f20 [ 373.414664][ C0] unmap_vmas+0x390/0x550 [ 373.414689][ C0] exit_mmap+0x293/0x9f0 [ 373.414709][ C0] __mmput+0x118/0x420 [ 373.414728][ C0] exit_mm+0x221/0x2d0 [ 373.414754][ C0] do_exit+0x6cd/0x2360 [ 373.414778][ C0] do_group_exit+0x22d/0x2f0 [ 373.414805][ C0] get_signal+0x121b/0x12c0 [ 373.414824][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 373.414848][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 373.414876][ C0] do_syscall_64+0x328/0x520 [ 373.414900][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.414915][ C0] [ 373.414915][ C0] other info that might help us debug this: [ 373.414915][ C0] [ 373.414923][ C0] Chain exists of: [ 373.414923][ C0] console_owner --> &dev->power.lock --> &obj_hash[i].lock [ 373.414923][ C0] [ 373.414952][ C0] Possible unsafe locking scenario: [ 373.414952][ C0] [ 373.414958][ C0] CPU0 CPU1 [ 373.414965][ C0] ---- ---- [ 373.414971][ C0] lock(&obj_hash[i].lock); [ 373.414983][ C0] lock(&dev->power.lock); [ 373.414998][ C0] lock(&obj_hash[i].lock); [ 373.415010][ C0] lock(console_owner); [ 373.415021][ C0] [ 373.415021][ C0] *** DEADLOCK *** [ 373.415021][ C0] [ 373.415025][ C0] locks held by syz.1.1531/11104: 6, last CPU#0: [ 373.415039][ C0] #0: ffff8880768e29f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 373.415085][ C0] #1: ffffffff8ed5a420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 373.415131][ C0] #2: ffff8880589acbb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 373.415178][ C0] #3: ffffffff8ed5a4e0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 373.415228][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 373.415272][ C0] #5: ffffffff9ac4e790 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x81/0x3c0 [ 373.415315][ C0] [ 373.415315][ C0] stack backtrace: [ 373.415326][ C0] CPU: 0 UID: 0 PID: 11104 Comm: syz.1.1531 Tainted: G W L syzkaller #0 PREEMPT(full) [ 373.415353][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 373.415361][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.415373][ C0] Call Trace: [ 373.415381][ C0] [ 373.415390][ C0] dump_stack_lvl+0xe8/0x150 [ 373.415418][ C0] print_circular_bug+0x2e1/0x300 [ 373.415441][ C0] check_noncircular+0x12e/0x150 [ 373.415465][ C0] __lock_acquire+0x1520/0x2cf0 [ 373.415522][ C0] ? vprintk_emit+0x2cf/0x560 [ 373.415541][ C0] lock_acquire+0x106/0x350 [ 373.415570][ C0] ? vprintk_emit+0x2cf/0x560 [ 373.415592][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 373.415614][ C0] ? vprintk_emit+0x2cf/0x560 [ 373.415635][ C0] vprintk_emit+0x2eb/0x560 [ 373.415654][ C0] ? vprintk_emit+0x2cf/0x560 [ 373.415673][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 373.415679][ T5686] usb 5-1: Product: syz [ 373.415696][ T5686] usb 5-1: Manufacturer: syz [ 373.415694][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 373.415711][ T5686] usb 5-1: SerialNumber: syz [ 373.415719][ C0] _printk+0xdd/0x130 [ 373.415739][ C0] ? __pfx__printk+0x10/0x10 [ 373.415760][ C0] __debug_object_init+0x2c3/0x3c0 [ 373.415782][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 373.415805][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 373.415835][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 373.415863][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 373.415891][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 373.415916][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 373.415945][ C0] ? synchronize_srcu+0x20a/0x260 [ 373.415975][ C0] wakeup_source_unregister+0x129/0x3f0 [ 373.416006][ C0] mmc_host_classdev_release+0x47/0x100 [ 373.416040][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 373.416071][ C0] device_release+0xc4/0x1f0 [ 373.416094][ C0] kobject_put+0x222/0x550 [ 373.416113][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 373.416136][ C0] call_timer_fn+0x18d/0x5f0 [ 373.416157][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 373.416184][ C0] ? call_timer_fn+0xd5/0x5f0 [ 373.416204][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 373.416228][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.416250][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 373.416279][ C0] __run_timer_base+0x652/0x8b0 [ 373.416308][ C0] ? ktime_get+0x45/0x220 [ 373.416340][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 373.416372][ C0] ? ktime_get+0x1f5/0x220 [ 373.416398][ C0] ? lapic_next_event+0x11/0x20 [ 373.416418][ C0] run_timer_softirq+0xb7/0x170 [ 373.416447][ C0] handle_softirqs+0x226/0x860 [ 373.416469][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 373.416499][ C0] __irq_exit_rcu+0xcb/0x220 [ 373.416520][ C0] irq_exit_rcu+0x9/0x30 [ 373.416539][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 373.416564][ C0] [ 373.416571][ C0] [ 373.416578][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.416600][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x9a/0xa0 [ 373.416631][ C0] Code: c1 e1 05 4c 8d 51 28 4d 39 ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 373.416648][ C0] RSP: 0018:ffffc90017ae7310 EFLAGS: 00000293 [ 373.416666][ C0] RAX: ffffffff8242dccd RBX: ffffffff8242dbba RCX: ffff888031b78000 [ 373.416683][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 373.416695][ C0] RBP: 0000000000000002 R08: ffffffff8242dbba R09: 0000000000000000 [ 373.416708][ C0] R10: 0000000000000000 R11: ffffffff8ed5a4e0 R12: dffffc0000000000 [ 373.416722][ C0] R13: ffffea000000000f R14: 0000000000065919 R15: ffff88813fe0d180 [ 373.416738][ C0] ? pfn_valid+0xba/0x490 [ 373.416768][ C0] ? pfn_valid+0xba/0x490 [ 373.416792][ C0] ? pfn_valid+0x1cd/0x490 [ 373.416821][ C0] pfn_valid+0x1cd/0x490 [ 373.416847][ C0] page_table_check_clear+0x21/0x500 [ 373.416873][ C0] ? vm_normal_page+0x12c/0x280 [ 373.416899][ C0] __zap_vma_range+0x39b9/0x4f20 [ 373.416944][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 373.416974][ C0] ? mas_find+0xab1/0xcf0 [ 373.416999][ C0] ? unmap_vmas+0x1b9/0x550 [ 373.417025][ C0] unmap_vmas+0x390/0x550 [ 373.417053][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 373.417091][ C0] exit_mmap+0x293/0x9f0 [ 373.417114][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 373.417147][ C0] ? __pfx_exit_aio+0x10/0x10 [ 373.417175][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 373.417198][ C0] __mmput+0x118/0x420 [ 373.417217][ C0] exit_mm+0x221/0x2d0 [ 373.417244][ C0] do_exit+0x6cd/0x2360 [ 373.417272][ C0] ? __pfx_do_exit+0x10/0x10 [ 373.417298][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 373.417325][ C0] do_group_exit+0x22d/0x2f0 [ 373.417353][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.417380][ C0] get_signal+0x121b/0x12c0 [ 373.417409][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 373.417434][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 373.417467][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 373.417505][ C0] ? rcu_is_watching+0x16/0xb0 [ 373.417525][ C0] do_syscall_64+0x328/0x520 [ 373.417551][ C0] ? trace_irq_disable+0x3b/0x140 [ 373.417578][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.417599][ C0] ? clear_bhb_loop+0x70/0xc0 [ 373.417622][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.417641][ C0] RIP: 0033:0x7fd1e5d9e0d9 [ 373.417657][ C0] Code: Unable to access opcode bytes at 0x7fd1e5d9e0af. [ 373.417668][ C0] RSP: 002b:00007fd1e614fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 373.417687][ C0] RAX: fffffffffffffdfc RBX: 000000000005a01d RCX: 00007fd1e5d9e0d9 [ 373.417702][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd1e6025fac [ 373.417715][ C0] RBP: 0000000000000bea R08: 3fffffffffffffff R09: 0000000000000000 [ 373.417728][ C0] R10: 00007fd1e614fcb0 R11: 0000000000000246 R12: 00007fd1e614fcd0 [ 373.417741][ C0] R13: 00007fd1e6025fac R14: 000000000005ac07 R15: 00007fd1e614fcb0 [ 373.417763][ C0] [ 373.430656][ T5686] ums-karma 5-1:1.0: USB Mass Storage device detected [ 373.439049][ C0] ------------[ cut here ]------------ [ 373.582042][ T5686] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 373.582042][ T5686] Please send a copy of this message to and [ 373.588377][ C0] 1 [ 373.588394][ C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: syz.1.1531/11104 [ 373.588439][ C0] Modules linked in: [ 373.588463][ C0] CPU: 0 UID: 0 PID: 11104 Comm: syz.1.1531 Tainted: G W L syzkaller #0 PREEMPT(full) [ 375.472010][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 375.477192][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.487252][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 375.493143][ C0] Code: cc cc cc 41 ff c7 44 89 3d a9 41 e9 15 48 c7 c1 80 60 6d 8c 48 c7 c7 e0 60 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 6d 45 40 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 b3 70 0a 3b 05 9f [ 375.512744][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 375.518800][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: d02f65802f61bb00 [ 375.526762][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 375.534739][ C0] RBP: ffff888031b78020 R08: 0000000000000100 R09: 1ffffffff1da98d4 [ 375.542703][ C0] R10: dffffc0000000000 R11: fffffbfff1da98d5 R12: ffff8880342fc210 [ 375.550666][ C0] R13: ffff888067c26cb0 R14: dffffc0000000000 R15: 0000000000000001 [ 375.558632][ C0] FS: 0000000000000000(0000) GS:ffff888124cf1000(0000) knlGS:0000000000000000 [ 375.567559][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.574136][ C0] CR2: 00007f77c05a7d58 CR3: 000000007b04c000 CR4: 00000000003526f0 [ 375.582099][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 375.590065][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 375.598029][ C0] Call Trace: [ 375.601298][ C0] [ 375.604139][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 375.609679][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 375.614704][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 375.620248][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 375.625280][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 375.631086][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 375.636650][ C0] ? synchronize_srcu+0x20a/0x260 [ 375.641674][ C0] wakeup_source_unregister+0x129/0x3f0 [ 375.647220][ C0] mmc_host_classdev_release+0x47/0x100 [ 375.652768][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 375.658926][ C0] device_release+0xc4/0x1f0 [ 375.663511][ C0] kobject_put+0x222/0x550 [ 375.667918][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 375.672674][ C0] call_timer_fn+0x18d/0x5f0 [ 375.677258][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 375.683929][ C0] ? call_timer_fn+0xd5/0x5f0 [ 375.688612][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 375.693733][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.698938][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 375.705623][ C0] __run_timer_base+0x652/0x8b0 [ 375.710470][ C0] ? ktime_get+0x45/0x220 [ 375.714807][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 375.720189][ C0] ? ktime_get+0x1f5/0x220 [ 375.724612][ C0] ? lapic_next_event+0x11/0x20 [ 375.729460][ C0] run_timer_softirq+0xb7/0x170 [ 375.734335][ C0] handle_softirqs+0x226/0x860 [ 375.739094][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 375.743861][ C0] __irq_exit_rcu+0xcb/0x220 [ 375.748444][ C0] irq_exit_rcu+0x9/0x30 [ 375.752679][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 375.758308][ C0] [ 375.761239][ C0] [ 375.764160][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 375.770134][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x9a/0xa0 [ 375.777010][ C0] Code: c1 e1 05 4c 8d 51 28 4d 39 ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 375.796605][ C0] RSP: 0018:ffffc90017ae7310 EFLAGS: 00000293 [ 375.802671][ C0] RAX: ffffffff8242dccd RBX: ffffffff8242dbba RCX: ffff888031b78000 [ 375.810643][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 375.818603][ C0] RBP: 0000000000000002 R08: ffffffff8242dbba R09: 0000000000000000 [ 375.826564][ C0] R10: 0000000000000000 R11: ffffffff8ed5a4e0 R12: dffffc0000000000 [ 375.834526][ C0] R13: ffffea000000000f R14: 0000000000065919 R15: ffff88813fe0d180 [ 375.842492][ C0] ? pfn_valid+0xba/0x490 [ 375.846826][ C0] ? pfn_valid+0xba/0x490 [ 375.851150][ C0] ? pfn_valid+0x1cd/0x490 [ 375.855576][ C0] pfn_valid+0x1cd/0x490 [ 375.859842][ C0] page_table_check_clear+0x21/0x500 [ 375.865129][ C0] ? vm_normal_page+0x12c/0x280 [ 375.869980][ C0] __zap_vma_range+0x39b9/0x4f20 [ 375.874930][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 375.880217][ C0] ? mas_find+0xab1/0xcf0 [ 375.884633][ C0] ? unmap_vmas+0x1b9/0x550 [ 375.889134][ C0] unmap_vmas+0x390/0x550 [ 375.893466][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 375.898325][ C0] exit_mmap+0x293/0x9f0 [ 375.902563][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 375.907326][ C0] ? __pfx_exit_aio+0x10/0x10 [ 375.912029][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 375.917224][ C0] __mmput+0x118/0x420 [ 375.921285][ C0] exit_mm+0x221/0x2d0 [ 375.925358][ C0] do_exit+0x6cd/0x2360 [ 375.929537][ C0] ? __pfx_do_exit+0x10/0x10 [ 375.934125][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 375.939147][ C0] do_group_exit+0x22d/0x2f0 [ 375.943734][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.948939][ C0] get_signal+0x121b/0x12c0 [ 375.953482][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 375.959031][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 375.965187][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 375.970560][ C0] ? rcu_is_watching+0x16/0xb0 [ 375.975320][ C0] do_syscall_64+0x328/0x520 [ 375.979917][ C0] ? trace_irq_disable+0x3b/0x140 [ 375.984961][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.991018][ C0] ? clear_bhb_loop+0x70/0xc0 [ 375.995689][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.001572][ C0] RIP: 0033:0x7fd1e5d9e0d9 [ 376.005997][ C0] Code: Unable to access opcode bytes at 0x7fd1e5d9e0af. [ 376.013014][ C0] RSP: 002b:00007fd1e614fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 376.021417][ C0] RAX: fffffffffffffdfc RBX: 000000000005a01d RCX: 00007fd1e5d9e0d9 [ 376.029379][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd1e6025fac [ 376.037355][ C0] RBP: 0000000000000bea R08: 3fffffffffffffff R09: 0000000000000000 [ 376.045336][ C0] R10: 00007fd1e614fcb0 R11: 0000000000000246 R12: 00007fd1e614fcd0 [ 376.053322][ C0] R13: 00007fd1e6025fac R14: 000000000005ac07 R15: 00007fd1e614fcb0 [ 376.061297][ C0] [ 376.064353][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 376.071645][ C0] CPU: 0 UID: 0 PID: 11104 Comm: syz.1.1531 Tainted: G W L syzkaller #0 PREEMPT(full) [ 376.082569][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 376.087749][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.097799][ C0] Call Trace: [ 376.101072][ C0] [ 376.104016][ C0] vpanic+0x56d/0xa60 [ 376.108000][ C0] ? __pfx__printk+0x10/0x10 [ 376.112585][ C0] ? __pfx_vpanic+0x10/0x10 [ 376.117082][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 376.122361][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 376.127555][ C0] panic+0xc5/0xd0 [ 376.131275][ C0] ? __pfx_panic+0x10/0x10 [ 376.135698][ C0] __warn+0x315/0x4c0 [ 376.139681][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 376.144959][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 376.150235][ C0] __report_bug+0x276/0x570 [ 376.154754][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 376.160040][ C0] ? __pfx___report_bug+0x10/0x10 [ 376.165064][ C0] ? vprintk_emit+0x2cf/0x560 [ 376.169734][ C0] ? __wake_up_klogd+0xf0/0x130 [ 376.174580][ C0] ? vprintk_emit+0x4ee/0x560 [ 376.179247][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 376.184264][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 376.189546][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 376.194825][ C0] report_bug+0x16b/0x220 [ 376.199152][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 376.204440][ C0] ? __debug_object_init+0x2c6/0x3c0 [ 376.209716][ C0] handle_bug+0x9c/0x200 [ 376.213951][ C0] exc_invalid_op+0x1a/0x50 [ 376.218446][ C0] asm_exc_invalid_op+0x1a/0x20 [ 376.223288][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 376.229183][ C0] Code: cc cc cc 41 ff c7 44 89 3d a9 41 e9 15 48 c7 c1 80 60 6d 8c 48 c7 c7 e0 60 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 6d 45 40 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 b3 70 0a 3b 05 9f [ 376.248782][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 376.254844][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: d02f65802f61bb00 [ 376.262811][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 376.270789][ C0] RBP: ffff888031b78020 R08: 0000000000000100 R09: 1ffffffff1da98d4 [ 376.278753][ C0] R10: dffffc0000000000 R11: fffffbfff1da98d5 R12: ffff8880342fc210 [ 376.286719][ C0] R13: ffff888067c26cb0 R14: dffffc0000000000 R15: 0000000000000001 [ 376.294695][ C0] ? __debug_object_init+0x2c3/0x3c0 [ 376.299992][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 376.305533][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 376.310557][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 376.316101][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.321141][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 376.326962][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 376.332506][ C0] ? synchronize_srcu+0x20a/0x260 [ 376.337545][ C0] wakeup_source_unregister+0x129/0x3f0 [ 376.343116][ C0] mmc_host_classdev_release+0x47/0x100 [ 376.348664][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 376.354818][ C0] device_release+0xc4/0x1f0 [ 376.359440][ C0] kobject_put+0x222/0x550 [ 376.363857][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 376.368615][ C0] call_timer_fn+0x18d/0x5f0 [ 376.373213][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 376.379889][ C0] ? call_timer_fn+0xd5/0x5f0 [ 376.384560][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 376.389676][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.394871][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 376.401541][ C0] __run_timer_base+0x652/0x8b0 [ 376.406408][ C0] ? ktime_get+0x45/0x220 [ 376.410750][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 376.416123][ C0] ? ktime_get+0x1f5/0x220 [ 376.420537][ C0] ? lapic_next_event+0x11/0x20 [ 376.425379][ C0] run_timer_softirq+0xb7/0x170 [ 376.430254][ C0] handle_softirqs+0x226/0x860 [ 376.435025][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 376.439787][ C0] __irq_exit_rcu+0xcb/0x220 [ 376.444395][ C0] irq_exit_rcu+0x9/0x30 [ 376.448658][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 376.454295][ C0] [ 376.457225][ C0] [ 376.460152][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.466154][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x9a/0xa0 [ 376.472999][ C0] Code: c1 e1 05 4c 8d 51 28 4d 39 ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 376.492613][ C0] RSP: 0018:ffffc90017ae7310 EFLAGS: 00000293 [ 376.498782][ C0] RAX: ffffffff8242dccd RBX: ffffffff8242dbba RCX: ffff888031b78000 [ 376.506746][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 376.514710][ C0] RBP: 0000000000000002 R08: ffffffff8242dbba R09: 0000000000000000 [ 376.522674][ C0] R10: 0000000000000000 R11: ffffffff8ed5a4e0 R12: dffffc0000000000 [ 376.530638][ C0] R13: ffffea000000000f R14: 0000000000065919 R15: ffff88813fe0d180 [ 376.538620][ C0] ? pfn_valid+0xba/0x490 [ 376.542956][ C0] ? pfn_valid+0xba/0x490 [ 376.547278][ C0] ? pfn_valid+0x1cd/0x490 [ 376.551696][ C0] pfn_valid+0x1cd/0x490 [ 376.555942][ C0] page_table_check_clear+0x21/0x500 [ 376.561235][ C0] ? vm_normal_page+0x12c/0x280 [ 376.566106][ C0] __zap_vma_range+0x39b9/0x4f20 [ 376.571063][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 376.576352][ C0] ? mas_find+0xab1/0xcf0 [ 376.580684][ C0] ? unmap_vmas+0x1b9/0x550 [ 376.585202][ C0] unmap_vmas+0x390/0x550 [ 376.589553][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 376.594417][ C0] exit_mmap+0x293/0x9f0 [ 376.598674][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 376.603443][ C0] ? __pfx_exit_aio+0x10/0x10 [ 376.608118][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 376.613311][ C0] __mmput+0x118/0x420 [ 376.617379][ C0] exit_mm+0x221/0x2d0 [ 376.621458][ C0] do_exit+0x6cd/0x2360 [ 376.625618][ C0] ? __pfx_do_exit+0x10/0x10 [ 376.630207][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 376.635260][ C0] do_group_exit+0x22d/0x2f0 [ 376.639847][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.645042][ C0] get_signal+0x121b/0x12c0 [ 376.649544][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 376.655087][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 376.661240][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 376.666612][ C0] ? rcu_is_watching+0x16/0xb0 [ 376.671370][ C0] do_syscall_64+0x328/0x520 [ 376.675961][ C0] ? trace_irq_disable+0x3b/0x140 [ 376.680989][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.687048][ C0] ? clear_bhb_loop+0x70/0xc0 [ 376.691721][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.697632][ C0] RIP: 0033:0x7fd1e5d9e0d9 [ 376.702038][ C0] Code: Unable to access opcode bytes at 0x7fd1e5d9e0af. [ 376.709043][ C0] RSP: 002b:00007fd1e614fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 376.717456][ C0] RAX: fffffffffffffdfc RBX: 000000000005a01d RCX: 00007fd1e5d9e0d9 [ 376.725478][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd1e6025fac [ 376.733448][ C0] RBP: 0000000000000bea R08: 3fffffffffffffff R09: 0000000000000000 [ 376.741427][ C0] R10: 00007fd1e614fcb0 R11: 0000000000000246 R12: 00007fd1e614fcd0 [ 376.749402][ C0] R13: 00007fd1e6025fac R14: 000000000005ac07 R15: 00007fd1e614fcb0 [ 376.757391][ C0] [ 376.761027][ C0] Kernel Offset: disabled [ 376.765355][ C0] Rebooting in 86400 seconds..