last executing test programs: 18.342719628s ago: executing program 1 (id=5): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0xc0000) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9802}}], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6", 0x27}], 0x2) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15.891621399s ago: executing program 1 (id=11): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x6, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x208) write(r2, &(0x7f0000000000), 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000200)={{0x0, 0x1, 0x212, 0x0, 0x1}}) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffe4) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$P9_RAUTH(r5, 0x0, 0x27) fanotify_mark(r2, 0x40, 0x1000, r2, &(0x7f0000000180)='./proc\x00') 15.36765561s ago: executing program 1 (id=15): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000680)={0xa, 0x4e20, 0x3, @mcast2, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004000000840000000000000018000000000000002900000037000000890000000000000018000000000000002900000037"], 0x48}, 0x97ff}], 0x2, 0x24014401) 15.261132234s ago: executing program 1 (id=16): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100182e5e74033073004fb35000000010902120001000040400904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) bind$netlink(r1, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x281a5faa01ef99b3}, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) 13.958444959s ago: executing program 1 (id=21): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) clock_gettime(0x2, &(0x7f00000014c0)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001100)=0x1, 0xfec9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='macvlan1\x00', 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1e6) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000000)='7', 0x1) lsm_set_self_attr(0x66, 0x0, 0x22, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x110) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e000000900000000000000000200010000000000000604fdec19ecd9030005000000000002"], 0x50}}, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x19) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x1a0}]}) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xc0010113}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 13.713955113s ago: executing program 1 (id=22): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x6, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x208) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0xc0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000200)={{0x0, 0x1, 0x212, 0x0, 0x1}}) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffe4) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$P9_RAUTH(r5, 0x0, 0x27) fanotify_mark(r2, 0x40, 0x1000, r2, &(0x7f0000000180)='./proc\x00') 12.953566153s ago: executing program 3 (id=25): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="6b915b431dac6216bf3bfe379f"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x10}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xfffffffffffffdd1, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1]) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) 9.272807993s ago: executing program 3 (id=36): r0 = socket$nl_crypto(0x10, 0x3, 0x15) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="12015002000000086624108040000102030109026000030100008409040000000101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="000100001000010026bd7000ffdbdf25726663343130362867656e657269632d67636d2d6165736e6929"], 0x100}, 0x1, 0x0, 0x0, 0x20004090}, 0x20004000) 7.704523122s ago: executing program 3 (id=41): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) r1 = gettid() (async, rerun: 64) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000100)={0x0, 0x47524247, 0x2, @discrete={0x8000, 0x43}}) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) write$dsp(r0, &(0x7f0000000200)="bb45f22e60b15c87dfd4b8abfdabdc04aa07e001f5bbbbbcd8b747e3b75b00c8ce18f60235aab9b5f20522a77a2b25aa541ec094f498409ca3576f59a7124f21564526f82bfb9904a3d80ee0ea81a28ec366c76b11e929810729e00a11f708b8173c84aa9a9e08576173551613c9c256942cd97b000267a1cbdff2da7bab31", 0x7f) (async, rerun: 64) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (rerun: 64) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) 7.27120901s ago: executing program 2 (id=43): r0 = msgget$private(0x0, 0x48) msgsnd(r0, &(0x7f0000000240)={0x3, "e5925ea15fa475d2df5641921ac35ac54c463293a59d1a16cbd04ff5cce089a7ffc10270f194b592153c8eac4b15af1e3d35acffcc17dc7703a3dbf3306c1eb9fad399bcce8e725d6eafd2b5bfd7a95fd4e45b53bd559199f3ceafee84d005cc52acbf762de5bd6bc5caf876b445a8ef8fe013d3728fb80665fc0030acb634929e509216ae90944c9cb2f5fa2cbecc8edf71a2702f41afbdcc0c7127d8c8cd2953f189fa699bd981d85c6d609088c8b75faea95da5d0565a884c4ee288af34976fcfea321ece58a45afed0e3709dbd6d736e095000a11414da4bde2253c222e3eb29273c3a4895005afe4e84"}, 0xf4, 0x800) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000001000/0x2000)=nil) sendmmsg$sock(r1, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000004b40)="5627a1", 0x3}], 0x2}}], 0x1, 0x8000) clock_getres(0xff5e3eb29a6c9dfb, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000002008bb36b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x5, 0x0, 0x130, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) close(r3) socket(0x22, 0x6, 0xf) ioctl$BLKCRYPTOPREPAREKEY(r3, 0xc040128b, &(0x7f0000000100)={&(0x7f0000000040)="83e8c126b49bc8c904982fd87f733054cf10265549938cd386", 0x19, &(0x7f0000000080)=""/97, 0x61}) 7.025012268s ago: executing program 2 (id=44): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x49ee, 0x2, 0x1000000, 0x10000003, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x400001, 0x35c, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}, 0xffffffffffffffff}], 0x1, 0x0, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="200000001100010002000000f6dbdf250800ff00", @ANYRES32=r15], 0x20}], 0x1}, 0x0) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = dup(r16) syz_ublk_setup_queues(r17, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10000000, 0x146}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x1, 0x3, 0x0, 0x0, r17}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r17, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x22, {0x0, 0x0, 0x0, 0x4, 0x5}}) r22 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r22, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r23 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0/reset\x00', 0x1, 0x0) write(r23, &(0x7f0000000180)='1\x00', 0x1) syz_ublk_setup_queues(r13, r4, &(0x7f0000000640)={0x0, 0xdb1d, 0x40064, 0x2, 0x3d5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4390, 0x8000, 0x1, 0x8a, 0x0, r17}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3605, 0x1, 0x1, 0x36f, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdbd6, 0x1, 0x1, 0x2e0, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x56dc, 0x4000, 0x3, 0x2cb}}], 0x4, &(0x7f0000001d00)={0x2e, 0x1c, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, '\x00', {0x0, 0x71a, 0x0, &(0x7f0000000d00)=@buf_4k="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"}}, &(0x7f0000001d80)) syz_ublk_setup_queues(r20, r4, &(0x7f00000003c0)={0x0, 0x7547, 0x800, 0x1, 0x39e, 0x0, r5}, &(0x7f0000001dc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb9a, 0x1, 0x0, 0x1d8, 0x0, r17}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x792a, 0x2, 0x0, 0x279, 0x0, r21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f38, 0x2, 0x2, 0x168, 0x0, r24}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4147, 0x400, 0x0, 0x115, 0x0, r18}}], 0x4, &(0x7f0000003040)={0x2e, 0x41, 0x0, r17, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8}, 0x0, 0x0, '\x00', {0x0, 0x645, 0x0, &(0x7f0000002040)=@buf_1k="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"}}, &(0x7f00000030c0)) 6.552809905s ago: executing program 2 (id=45): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="6b915b431dac6216bf3bfe379f"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x10}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xfffffffffffffdd1, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1]) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) 5.913202189s ago: executing program 3 (id=48): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001580)={&(0x7f0000000580)=[0x7, 0xd6b2, 0x8001, 0x8, 0xf, 0x6c, 0xbc74, 0x9de, 0x8, 0x200, 0x8, 0x4, 0xa44, 0x4, 0x7, 0x4d96, 0x2, 0x200, 0x0, 0x7ff, 0xf3, 0x9, 0x4800000, 0x200, 0x3352, 0x9, 0x10001, 0x1, 0xfffffffb, 0x8, 0x2, 0x1, 0x7, 0x21a, 0xfffffffa, 0x23, 0x10000, 0x10001, 0x3, 0x10, 0x4, 0x1, 0x6cd, 0x1ff, 0x8, 0x91, 0xb, 0x800, 0x7fffffff, 0x1608, 0xbd73, 0xb, 0x8, 0x5, 0x8, 0x7, 0x6, 0x5, 0x7, 0x8, 0x6, 0x2, 0x8, 0x401, 0x1ff, 0x5, 0x2, 0xf847, 0xa, 0x6, 0xb0, 0x1, 0x7, 0x1, 0x6, 0x4, 0x1ff, 0xe, 0xd0d, 0x0, 0x0, 0xd, 0x2, 0x90d, 0x95, 0x95, 0xf, 0x81, 0x2, 0x3, 0x6, 0x8, 0x3, 0x8, 0x9, 0x7, 0x5, 0x10001, 0x9, 0x2, 0xea000000, 0x1ff, 0x6, 0x401, 0xf, 0x7, 0x80000000, 0x65f, 0x1, 0x6, 0x1, 0xfffffffd, 0x4, 0x2, 0xfffffffe, 0x8, 0x8001, 0x8, 0x3ff, 0x6, 0x4, 0x6, 0x10000, 0x4, 0x816, 0x0, 0x10000, 0x7, 0x29400000, 0x9, 0x9, 0x6, 0xfc, 0x5, 0x0, 0x4, 0x168, 0x6, 0x8, 0x80, 0x3, 0x2, 0x9d3a, 0x8001, 0x4, 0x5, 0x7fffffff, 0x9, 0x8, 0x9, 0x80, 0x7f, 0x3, 0x6, 0x6, 0x6, 0xe, 0x6, 0x0, 0x95, 0x81, 0xdde0, 0x4, 0x2, 0xc, 0x6, 0x81, 0x401, 0x4, 0x9, 0x5, 0x2, 0xfffffff8, 0x5, 0x8, 0x1, 0x8, 0x6, 0x401, 0x32, 0x0, 0x5, 0x6, 0xfffffff8, 0x8, 0x8000, 0x400, 0xf, 0x10, 0xfffeffff, 0x9, 0x3c98, 0x7, 0x3, 0x6, 0x5d79, 0x5, 0x10000, 0x6, 0x1, 0x4, 0x0, 0x2, 0x6, 0x58e4, 0x2, 0x5, 0x0, 0x1, 0x3, 0x6, 0xb9c, 0x8001, 0x5, 0x6, 0xb530, 0x80000001, 0x200cdd13, 0x5, 0x6, 0x9, 0x7, 0x4, 0x9, 0xfffffff1, 0x3, 0xffffffff, 0x0, 0xe0, 0x3, 0xfffffff7, 0x5, 0x5, 0xffffff00, 0x200000, 0x0, 0x2, 0x9, 0xf2c, 0xfffffff3, 0x7, 0x7fffffff, 0xfffffff7, 0x101, 0x588e, 0x80000001, 0xfffffffe, 0x5, 0x1, 0x0, 0x1ff, 0x0, 0x6, 0x2, 0x7, 0x3, 0x5e02, 0x9, 0x0, 0x8, 0xc, 0xfffffeff, 0x1000, 0x31, 0x100, 0x2, 0x100, 0x7fffffff, 0xd, 0x14, 0x9, 0x7, 0x5, 0x2, 0xffff, 0xf, 0x2, 0x841, 0x6, 0x4, 0xaa, 0x36c, 0xa0, 0x6, 0xa, 0x1, 0x2, 0x1000, 0x3, 0x2, 0x4, 0x1ca7, 0x1, 0x3, 0x2, 0x5, 0x5, 0x8, 0x81, 0x4, 0x18d, 0x7, 0x1, 0xfffffffd, 0x26, 0x4, 0x8, 0xffffffff, 0x8001, 0x0, 0xe322, 0xe, 0x8, 0x1, 0x8, 0x8, 0x100, 0x0, 0x0, 0x8, 0xc1c, 0x5, 0x0, 0x1cb0, 0x7, 0x1, 0x42, 0x2, 0x800000, 0x3, 0x93b, 0x4, 0x8, 0x9, 0x7, 0x4, 0x2, 0xf, 0x4, 0x9, 0x4, 0x2, 0x6, 0x7f, 0x5, 0x6a, 0x5, 0x1, 0x9, 0x7, 0x9, 0x5, 0x80, 0x8, 0xad4, 0x48, 0x1, 0x7, 0x4, 0x8, 0xe78, 0x8, 0x1, 0x4, 0x9, 0x6, 0x0, 0x3, 0xfff, 0x3, 0xffff, 0xcb, 0x1, 0x4, 0x6, 0x4a2, 0x2, 0x7, 0x81, 0x1, 0x1, 0x2, 0xe9d, 0x7, 0x1, 0x2, 0x200, 0xd9, 0xb52, 0xfffffffb, 0x8862, 0x9, 0xa, 0x0, 0x9, 0x7, 0x0, 0x9, 0xb652, 0xf, 0x33e76b23, 0x1, 0x0, 0x0, 0x9, 0x8, 0xcb, 0x6, 0x0, 0xffffc000, 0x5, 0xff, 0x2, 0x40, 0x6, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x8, 0x6d9, 0x4, 0x2f, 0x4, 0xb, 0x24a, 0x6, 0x6a06c12b, 0x9, 0xffff, 0x8, 0x3161, 0x8000000, 0x8, 0xfff, 0x2, 0x40, 0x10000, 0x1, 0x8, 0x9, 0x8, 0x8, 0x10000, 0x4, 0x2, 0x7fffffff, 0x63a, 0x414, 0xbf8d, 0x9, 0x6, 0x1, 0x0, 0x3ff, 0xc, 0x8001, 0x9, 0x4, 0x260, 0x8, 0xa, 0x9, 0xfffffff8, 0x8000, 0x0, 0x5, 0x0, 0x5, 0x80000001, 0xff, 0x9, 0xfffffffa, 0x680000, 0x6, 0x0, 0x0, 0x435de369, 0x8, 0x200, 0x101, 0x5, 0x80000001, 0x5, 0x0, 0x7, 0x6, 0x9b, 0x540, 0x4, 0xa9b3, 0x24a, 0x4, 0x3, 0x6, 0x4, 0x7fc0000, 0xfffffffe, 0x81, 0x6, 0xa, 0x8, 0xffffffb3, 0xc, 0x0, 0xeda, 0x80000000, 0x3, 0x200, 0x4, 0x7, 0x9, 0x944, 0xffff, 0x312a, 0xa000, 0x2, 0x9, 0x0, 0x2, 0x1, 0x1, 0x101, 0x10000, 0xffffffff, 0xc, 0x6, 0x1, 0x1, 0x1, 0x3, 0x4, 0x1, 0x3a9fc0, 0x9753, 0x3, 0x5, 0x7, 0x6, 0x1, 0x3bb, 0xf, 0x0, 0x769f, 0x6, 0x6, 0x6, 0x0, 0x4, 0xd, 0x7, 0xe, 0x0, 0x127e, 0x7, 0x0, 0x0, 0x9, 0x6, 0x400, 0x18000, 0xcf, 0xfffffff7, 0x2, 0x0, 0x2, 0x401, 0x8, 0x8, 0x3, 0x100, 0x6, 0xf8cf, 0x0, 0xb, 0xffffffff, 0x200, 0x5f3, 0x9bb, 0xf0c413a, 0x3, 0x9, 0x5, 0x6, 0x4, 0x2, 0x8, 0x9, 0x0, 0x9, 0x24000, 0x164, 0xffff6a6d, 0x200, 0x0, 0x5, 0x8, 0x8, 0x0, 0x2, 0xa00, 0x0, 0x591, 0x9, 0x9b, 0x3, 0x7, 0x3, 0x1, 0xfffff800, 0x9, 0x43, 0xff, 0x0, 0xf96, 0x5, 0x4, 0x7a, 0x8, 0xffffffff, 0x0, 0x1, 0x5, 0x6, 0xfb, 0xca6, 0x9, 0x1, 0xe, 0x0, 0xc7cd, 0x9, 0xfffffff8, 0x1, 0x1, 0x8, 0x0, 0x9, 0x85, 0x7ff, 0x1, 0x6, 0x7, 0xffffffff, 0x2, 0xffff0000, 0x8, 0x7, 0x2, 0x3, 0x0, 0x10000, 0x7, 0x31, 0x5, 0x5, 0xe2, 0x7, 0xd, 0x0, 0x1, 0x7, 0xa, 0xc, 0x6, 0x2361, 0x5, 0x5, 0x1a10e052, 0x3, 0x3, 0x3, 0x5, 0x62e4, 0x401, 0x0, 0x1, 0x7, 0x9, 0x7, 0x0, 0x0, 0xfffffffb, 0x1, 0x1, 0xa313, 0x2, 0x4, 0x8, 0x80000001, 0x5, 0x7, 0x5, 0x50d1, 0x4, 0x5, 0x2, 0x2, 0x6, 0x1e922a29, 0x2, 0x9, 0x0, 0x9, 0x22e, 0x0, 0x2e5, 0x4, 0x401, 0x50, 0x3, 0x10, 0x9, 0x10000, 0x1, 0x7fffffff, 0x6, 0x7, 0x5, 0x4, 0xcda, 0x5, 0x5, 0x4, 0x2, 0x9, 0x5, 0xffffffff, 0xaabb, 0x3ff, 0xb42b, 0x6, 0x2, 0x6, 0x8, 0x8, 0x5edc, 0x100, 0xd183, 0x1, 0x3, 0x6, 0xfce, 0x6480, 0xfff, 0x1ff, 0x0, 0x3, 0x7, 0x1, 0x4, 0x1, 0x7, 0x3ff, 0xc, 0x2, 0x7, 0x8, 0x5, 0xfff, 0x3, 0xfff, 0x7, 0x800, 0x2, 0x8, 0x4, 0x5, 0x8, 0xb, 0x48f30, 0xe, 0xed, 0x5, 0x2, 0x8ad, 0x6, 0x4, 0x7fff, 0x3, 0x150, 0x4, 0x6, 0xd404, 0x1, 0x3, 0x7fe, 0x31c2ff07, 0x3, 0x4, 0xb, 0x2, 0x4, 0x80, 0x0, 0x3, 0x1, 0xb, 0x1ff, 0xd4, 0x655, 0x2, 0x239c, 0x3, 0x2, 0xcbf5, 0x8, 0x9, 0x82, 0x1db, 0x7f, 0x7, 0x9, 0x228, 0x3, 0x3, 0x2, 0x6, 0x0, 0x4a, 0xe45b, 0x8, 0x4, 0x0, 0x6, 0x8f, 0x1, 0x8, 0x1, 0x0, 0x8, 0x1ff, 0xfff, 0xc9, 0x0, 0x4, 0x3, 0x7, 0x9, 0x0, 0x0, 0x0, 0x7, 0x7, 0x5, 0x0, 0x1ff, 0x61e, 0x8, 0xa, 0xc, 0x80000000, 0x400, 0xb7, 0x7, 0x7, 0x4, 0x3, 0x7fff, 0x8, 0x8000, 0x4, 0x7f, 0x675, 0x5, 0x6, 0x752, 0x0, 0x6, 0x5, 0x4, 0x1, 0x9, 0x81, 0x80, 0x4, 0x6, 0x3, 0x8, 0x747, 0x2, 0x1, 0x16, 0x80, 0x8, 0x7, 0xfffffffa, 0x2, 0xa93, 0xc80f, 0xd, 0x6, 0x1000, 0x6, 0x80000000, 0xfffffff7, 0x0, 0x9, 0x7fffffff, 0x5, 0x3a23, 0x0, 0x2, 0xfffffac3, 0x0, 0x200, 0x78, 0x0, 0x7, 0x2, 0x9, 0x3, 0x19, 0x4, 0x0, 0x3, 0x0, 0xa, 0x2, 0x1, 0x10001, 0x7, 0x3, 0x1, 0x2, 0x4, 0x5, 0x8, 0x1000, 0x3, 0x80000001, 0x6, 0x1, 0xf73f, 0x4, 0x0, 0xd, 0x4, 0x5, 0x7ff, 0x4, 0x4d15, 0x3ff, 0x4, 0x9, 0xd, 0x3, 0x4, 0x800, 0x6, 0x4, 0xfffffffd, 0x15f, 0x10, 0x101, 0xd, 0xfffffbff, 0x9, 0x80000001, 0x5335, 0x10000, 0x8000, 0x7, 0x8, 0x2, 0x3, 0x2, 0x8, 0xfffffdeb, 0x100, 0x6, 0x59, 0x0, 0x2, 0x0, 0x4, 0x5, 0x3, 0x1, 0x200, 0x5, 0xfffffffd, 0xffffffff, 0x1, 0x7, 0x0, 0x6, 0xd, 0x8, 0x7ff, 0x5, 0x9f, 0xffff, 0x2, 0xe, 0xfed, 0x2, 0x0, 0x1000, 0xaf, 0x1000, 0x4ea6, 0x8, 0x1, 0x7, 0xc, 0x7, 0x800, 0x40, 0x5, 0x1, 0x3, 0x3, 0x872, 0x3, 0x0, 0x5, 0x1, 0x7e40, 0x4, 0x5, 0x3, 0xfffffff9], 0x3, 0x400, 0x3ff}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x1, @pix_mp={0x6, 0xe565, 0x38415261, 0x4, 0xb, [{0x9, 0x4}, {0xf82, 0x1}, {0x2, 0x8}, {0x7, 0xfffffffd}, {0xc0}, {0xa, 0x7fff}, {0xffffffff, 0x5a32}, {0x1, 0x7}], 0x1, 0x0, 0x1, 0x2}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000040)={@hyper, 0xf}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x600, 0x9, 0xffffffff, 0x40}) 5.797786283s ago: executing program 3 (id=50): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000012c0)=ANY=[@ANYBLOB="4015a2000000941339e399fb0d5322214275e2487f41868d71455ae0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb149b8f02564a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb981054aba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b3e97edb1bacde221374dd1d166b52ed4ccb8f629e238e3932f64693a8fe6b15eb23f0eb10a4411a30269a8bf144e65ffebe1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="2003100000007d85c7174c970f8ad3f7539a579871cb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001200)='./sys/class/ksmbd-control/debug\x00', &(0x7f0000001240), 0x40000, &(0x7f0000001280)={[{@nfs_export_off}, {@uuid_null}, {@index_on}], [{@fsname={'fsname', 0x3d, '/dev/sg#\x00'}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_ublk_setup_io_uring(0x938, &(0x7f00000004c0)={0x0, 0x9f16, 0x80, 0x2, 0x4000026a}, 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x82, 0xb3) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@private2}, &(0x7f0000000100)=0x14) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffc, 0x401) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6}) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/ksmbd-control/debug\x00', 0x0, 0x0) read(r4, &(0x7f0000000500)=""/100, 0x64) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x9, &(0x7f00000001c0)=""/4120, &(0x7f0000000000)=0x1018) close(r4) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0022891424ae", @ANYRES64=r2], 0xb2) 4.121063293s ago: executing program 0 (id=52): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00032d"], 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$uac1(0x5, 0xdd, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1052, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x2, 0x50, 0xed, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb7d, 0x29}, [@feature_unit={0x13, 0x24, 0x6, 0x5, 0x3, 0x6, [0x5, 0x3, 0x2, 0x6, 0x5, 0x9]}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x4, 0x7, "b0e657a812"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x81, 0x8, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc, 0x56, 0x10, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xe, 0x1, 0xc, {0x7, 0x25, 0x1, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xb9, 0x3, 0x5}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x4, 0x3, 0xfe, "2b14f0481f7604b263"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0x6, 0x6, "65e427"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x3, 0x4}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1c, 0x4, 0xb, 0x10, "36ba915b747f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xb, 0x8, 0x9, {0x7, 0x25, 0x1, 0x0, 0x4, 0x3}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x4, 0x8, 0x52, 0xff, 0x7}, 0x1c, &(0x7f0000000180)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "454038e6c233fa2a330cae4148b1d845"}]}, 0x6, [{0x5b, &(0x7f00000001c0)=@string={0x5b, 0x3, "9392b107628e23f2663d55664f72f8d5d0e8e69a6ae7cc9aba965cd9f102cc0e142043cfa30d93043610616b368ba753a0867dad29d8738675c6b5b89679282e92482ff8f3e3bf8fb21fe88f4a6966ccff1381f4de6d34756c"}}, {0xf4, &(0x7f0000000240)=@string={0xf4, 0x3, "2cbe9c1e0c396b7f73acf98887b64a503a70bb49b334b4736d8e26a48ea31e59e7d7cce09a0f1f76d87f4e1354c04472d96a35e66f2b5950ab89b69d50a849c9dcf284a8b7a49b7405a971122b857598076bbc65977284f57a6b2a1b5506ec9e0cf421b1ff96a016302f551b6b36be142da5d7db09011cfe311c850c3a7ef173e05b04978b6eae6c7317100272a72574aec5e3b9d214e83a15510af416f963ed53d2dcb71fb5c5dadb8b589b31ae6f022a41d7aeb989c6973f25852ba8a8620b519fdd1366155c9ef04e235763ba2b44fab94f9ba53a83b23817d10acec4c1b3bac618f64b8dc188fd1f800bc0ddf8fb0461"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x780c61e3fb043a20}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x449}}]}) socket$igmp(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2.94752617s ago: executing program 2 (id=53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000000)={0x0, 0x200000, 0x2000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) dup(0xffffffffffffffff) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$inet(r4, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r5, &(0x7f0000000000)='3', 0x4e) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000000)={0x0, 0x200000, 0x2000}) (async) 2.488944307s ago: executing program 3 (id=54): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000240)=0x7, 0x4) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x4081ff) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000400c200b104000010203010902289f030103a0420904000000010100000a240102000a0002010209040100000102000009040101e2010200000905ba0710000206000725010c004000090502", @ANYBLOB="e5"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 2.131928546s ago: executing program 2 (id=55): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6002, 0x0, 0x0, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000540)=0xef7bed043551ad7c, 0x56) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001540)={r2, r2, r2}, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/74, 0x32a000, 0x1000}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000180)="0fc882867583bbb1f55d863d4147c4a558069224ec8bfad01753c7c1473bfbb0271493de4c30e6ea424dd57961c0625ab27a7bf769589ebf8e271992624908bb5d8ce39cc64cb1a135318893731cb1678bb9ea6c80b054664c4239f48374b0b9e99ab5d6081d711b851b9c6207525ba078bb34e2761df1d2dd9abc6e0568463f1bd0c6e177703a107931d0214a5759e2aa25eaae469d2b00100bc47ffd73703f86c67e4f59c11d8ad92d8e7087b3cd62b320865a345e2810b05c49f5ad9b90ab14795491099e8f2551d2bd98aed0b02fd4c1114ce20273ee50428f2b5dfa8a2baec17eb504ba79d6e63d", 0xea) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000001800), 0x0, 0x8000) r7 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000e80)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\b5\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r7, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000001840)={0x6, "727fa9afcf3ed68d24ab36ff67086de7c128058e41975b42c06a4dcda2b4696d37eda86ef0e4e61d3b4787cc196c556fc940ae898b38583ff47ebabbbde1db2d", {0x7, 0x3}}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac0000000b06050000000000000000000100000380000880100007800c00190500000000000088280c00078006001d40000900000c00078008000b4000000006100007800c001b40000000007fffffff0c00078005000300e8000000100007800c00194000000000000001660c00078007001a00245b00001c0007801800168014000240ff010000000000000000000000000001080009400000800008000940000000100800094000000007"], 0xac}, 0x1, 0x0, 0x0, 0x20000010}, 0x400c000) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000003c0)={0x4, 0x6, 0x8, 0x0, 0x0, [{{r0}, 0x5}, {{r0}, 0x3}, {{r4}, 0xf}, {{r8}}, {{r3}, 0x8000}, {{r6}, 0x4}, {{r5}, 0x1}, {{r3}, 0x3}]}) 1.367530972s ago: executing program 0 (id=56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x20, 0x4855}, 0x24000052) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) sendmsg$inet(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)="d4d2bea458e4f83f3186caf95aaf6e3a32869de5c6dc7a6e94fb7186f763043b6f5652e86965d99fd822d2eac51ed20f51329c50cac3f140b0391410fcfae8a51de2bcf017b695b1a926b704b55b31529b66e963ff16d3bd78ea3c6c22d6dc47cb85006538b42b69c0f15e833ee36ca0318c72966dd5d778d0da5fdac31f7f8e43a257f5", 0x84}], 0x1, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x12}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe8}}], 0x60}, 0x801) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.048727786s ago: executing program 0 (id=57): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000680)={0xa, 0x4e20, 0x3, @mcast2, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004000000840000000000000018000000000000002900000037000000890000000000000018000000000000002900000037"], 0x48}, 0x1000000}], 0x2, 0x24014401) 995.93604ms ago: executing program 0 (id=58): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, 0x0}, 0x0) userfaultfd(0x80001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) inotify_init1(0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') write(r4, &(0x7f0000000040)="dbae061f5d6b10620b6f4113483cec2087", 0x11) recvmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/240, 0xf0}], 0x1, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x10000) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x1}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 721.906341ms ago: executing program 0 (id=59): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50424752, 0x0, @discrete={0xff4e, 0x3}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000080)={0x0, 0x0, "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", "5a56409d421ab7753c1238ff90efbf09ec691b1d3cd580796438df773f798f1c24299d81b19e0d22f810d3adefde01cca16d4a2df67513afae6615e6348de7a4f9e8ec052735ca3d1b98e7b8b0690dd852283c705fc1eb789c830dba3260ee0617e37508d91683b83dfdb957bff890b0d66978eae930686de7565f96dc01c94a49fa06bc0172985d698c096fa0cfbf961a5ade7fcf219e64b13bcea969200a4a3ed8ad811cbe01af498407a9db97ec19937ce8f23894e6c64fa49ac3026e14e9eaff444759ab544169dc007398872edf0269ac2ef16e010f8d9b39b82c7f7d311865252a51f558c38174ed2816657c179c078c55dcd1cab0b96ff66a5dca11791e3c0cd54c0f8765efbce6fc8d2feaa55acfd229e3f1ed5fd0e5567715702ed38fc78bc83aa6f12f79fd6060484f3dfa0f80d4459d0d1a57675a8ae627cf346e2103c24708979297c4901b146fdb4f37c2c9010a3ba7e8eabaf48d85f370e5b5009dcbd28bfafbf5c216a91c7cf4b90ac78f47d563fbf1744a2d3acafa753b8285e688062f5b95ff6c8c55ba443861a60310646efc5ffb6438185f37cf529546c84922a6bfdd11bf0ad8fc91b8d41344b5b7fcddaf351f5579b5de25e202e21dab204450de20f0e940bb2a1d79018a6a75a3e58233fbf90eada622c8680cc6affcfe412f4c2cd7bdd2608304263d3bbff7508336d573f448619e54048470d049894f2853aa8bfa60280c7e198474a9ae4f0067d4aa1044b16e2b791de7d8f85f4b2527264c1f028725b108771dee9e9b2c33e8c6e93c537d05e1464051737f5f661b4a89521d18cbbc23f6816213696d3aea21c1facc6c3bad8980c6d0234aa98e03664325f31c25fdf2f31d74b279d21e1cba07a70c745f2ea28de8960b10de346510f973711eea851ddb2aa9fb42ddefcf147e7c420b4366817289472bdc5a8fef168ca3c69d17fd20d00fa0dd2ae76f04b98268ab55ad4317922ef1a7db2a272abfd6f432ed5c52320c9e1e72b3b987240b2d80478dd8409f51061f424cd4647b60e7f4cc58639ab715c39827a2e109da7d1051ea9189f8a109ed2430877a97a5d2a0f4d6233dcd69472f9b718963c5724261e890514a05c3cf8088985d94ae9348c180fe52ad8e6e9f11a416b8fbc9f85419944e2e8f225f6935f69b1fb600525e39bc42ffd5f2f20a5ca5cd8a1b66f371265a1ccdd13bb28e544c748c88a947bf6dd182325bf793860df5bbc8a579612c4a351252ed0a5469088ea386099aaae5f4ae993ced5d8e02d638d306205e08aaad068dc98545100302fade6964e1b1171c160ed9cfd48196e26597639f2391fa51338cb1570b8aa5c37f86922a843ad7457c63a018c4ec340e22abb1a2b96eff23d2e6a738898dfd061459f438a00f2a3a891647f964955a953f80e950e4c9ea5c47f030917bfaeee4152d6d6b2a2c803dee62aa9b61f533c2c237743d31948381d5132c9cf3ac8e29327e8e358409c32181d87a91052fe148821303d23893167bbd790d0053b137071d6bc5b4fa0a28a1466c0b01efa6639072325a1707848833acb08a617346f78ecc7616146b8f471bb2557df6ddb9cc13c8f523dc88111b6a7e1533a08770b16ee6ee1b14cba08779693799789e13cb86f72c3eb23d8271ce31021641cfa3cf5349b7326d3ba891fcca1e5985a93c916616644ba44e027312e98249875955476706b040f1a28ad5204550b2af49ffa81a76f959b1473e427e51f0c3cfba52d5ca1a3389e507ca687395f0d02c5565b8a6025637e408b48ea77d9459ad7bd71fa1c11cda7940fa558e23e4082eb14b098fc24014dc6fe4aee8e94410edb3f42425699d629c68f06a77b3c3707fcf004aad9ce53715598f3744680fb1ba315735008bcee7674e987a0b4816dca8b76974cf2ec04ccf8e781b798cd7f504a2f99487c0faacf2bdd9247d0ad0ed57caba7593ff56d9db86adf02fac049f82b9ac3a55ab268ad170d0d29b68d1c3c20e268255849eeae40c20ba1cc797c6bcd70848c22117e33f049bbb2d1131d70834d9007521d3d39960adcfeb1997f095383790dedba3ecf5eb0e7045941bde401be0633d22ce55ba52cfd40a32973ebc03b30837bdfc03f45b2c33f0178dde205dbc280e9e2053e7eeb2776e005e75163c5967b2846cbb18951fd1a4b557642e2e12b9843824bbfe0a3a4c891bd53b14b8560e8915546b991646292b4c8a5cd4dae70347d01b401b0b68133d5d5afbfa0dcc075e07901dd72584c9c15aaf0915508bec7480751fcc3138f5c2fb78a757a2a54e8afd9c2b77fc0fb609db367357f9d5bb56be3538dd87405af990366ce00359e4a7118e8b5de54ace72082695a5b19bf5bc68aff8c265864c901476d11773462ea0c04a53e4ef34c10088d398b6623a98bbf47c2feac48dcf68dd9b934a4e2b67cdeb37e83e29a7c98241968ecd4f044a58d4fe7f75060678ef5ac8bb65b1cc4e492c3ee2205ada483d42cc0fddd0cf3a0064fcaf4076cdfa65f22ecfadc42d1072c6d18d8f907faf418c59e41e52cebf7e17cf10091b0931ba27fedebe837679bf3479165e88e05a91dacd858513617085826f05b2d859c57b1c0f591727b0b21d7a590148e673dba92d2e87515fc57209b53e74258bb42b4656b45c84ed702dad905bee5fc687c719a603a758a3ac3410cb12789b5babf89f4dec24274b1efa25f321d2a0cef1b80ebd01b53be14e06808d48a4e5ed1d8e3781b9e1c7fce79b818b5016475be09194a6f11e8980e8165d610c1ae25d0aad4dd87ed83baff6c259b6a16eecc4e80ad939cbf35d05c4bf6723c4136eec1ad77586e018487a895af67e5ecfef46d9a2e1c11e8aca8c3421d2e81723ef4014f60fd50988e7e618915b17473cb4dc32fa0c97ca360386c4a23146996bee3d606bc8d97dee1c56e2ac9b2103c5fc178c4ec5d5053ff99ee6b49c8e8a33682d5cea8d29198a89381c982e81866360de0c49dd08fa30b7d44fbf513ece41effa5de1db08a244c3aac778f67671560a455c58e19dbae28b97a6f465d24c59f9991311e2eee11760afb2354a6436ab8fe285d6452aa9c1ff0f4e65cb40333ddd08e22f1669b8fbc308e8ad0d11aa1fc96ab6dee8e68acf3252e85c1bf7aa1c488051a28d0d4d48c02fce7213f98d8416f1131489844bd5d2116b4d818fee7ff52d1ee29b10a6acf7b7e96cd0f5af22f9b9ba8cdf9c1c86c9e37045c2a5772135769269b7579235fd10bad4e21d3bfc122402157ee26ebfea227fd386d846320041ac9bd8a72a14852fed918d692ed8949506e3ac5f684a3d21a13b8099a178cb038f7ba98e906bf1c6ec2fe1db71aa8e42759a2d5939f65a58721cfc2a31c6da2ed9713c0bd8a7f4e4e4c28522cb5ed26faa9f6e35ecc196926a458fc6877a7114761780df7c786602116629dfe8aae1d9f4a4ebaf73662bc12037b8ba69e884e8a700f35483c1e8afc16ce025427b2350e38b5c44f00a5a887af2634c86d0ab7e95fd349d430fbca27f96ed77e509e3cf476a4891b5a6ec6c64de3d267128dfc1e9b36176a97320f00c9040a2618e4de7e62d9f9cc6e28d46be6af91999950f1647f10e997de382b17ef2d013bcbf7d1507270fa8751cb5e5261836ef371d591dd250edfcbaaa6fe1e4d889284633f6e84b86d4a39b871a49ee54b5527d9dc4ae6c7c698d77b0c5c77c98bade6991bfa5a5703cc7185af725e7bf18f8fe60eba339846f36e120dc72eace344466e5a30c28e5080642db2eb98716081f8dba9b33da7279eb240917793e0567938c8392fd633cec851f76174cb7aef4b31351d73dc482cd0539fd9f485a4eb93e1dcac790328509ed853a95386e13aaae6632768032bf93ff89b4b421017168d4a2911507d7769bef7fcfa66396e56839d0dea3f6e02a5929a915559ea2af4374d1010a65972edd0b37a8826f55d7d174df3f972f17fc96589789ea75f3cb7ba43863ffc6f530d89968af356b0d9ae97a2f0540ceb795355df1364b83583a11c3734d0f6c315bd439d28cbbdb2f656877a73c6015cae7967a4f933f04b5bf4a657576567f3b4c1885134193360c3e3e31009e07510f5cc8cffc166bb2facadc53f41184eeb8b867def6cc425b4571a67b7667264fa8018d331bc70b1c4b157f37f7224fa11687d2e136622bb8b4be9f080c588622790cca7df0113c037c9989665ea1944cd7f1db06fb935512655778ea05f7f8a1016e90e295791f79faf335760c39a1201fa1f580c01f461f679138f04f14a58c1f57561768e5d2b8c9c0c551e4b1b8979accd9cd90d4d675d55a69ac5d55eab2668b8360cc205744dc35fc14f0028f7aba73418762f212646857180174e3e195c32acd1ca82552b501fa11ce8313d48739ff26ea03dda2b062966083ec520ef92093d27dacf27dc76c7008ca06f42447426a835c5cddd9fd6eafd8e3fa858d9d7149e5966996f21128dd52faf17db40f791f043decb1fb92ca30b913714e2e573ea6b5228866ae2634cf99edae6c4f72d57da429ba3610fa700068fcd4bcd0bc1d80154a91fc29a7506e9d099acbfd2b93b5d3e3d8e83624c3949187c64a45cdd14728bd26d80640e1999bdfd0a80421860a75d3bdc432a68f0313c330a76d7c93988d1a89d8998425cf25c473e21108c80bdc768d7f328966be74d8a2bbef7c1a68d113ca301d31c48f98867724e61c376f78099b6159c55786e463466783c23a4e73ca3b171414d6d02bba928aebb80b5f194ceb4f89e99b6a34e2ad2709b5b29329cf00597b455fa50a3284f7b8a628fd9f0a252f62d29f3ee4e7099d243b43d9c21be64753cdc9ea531047fa4b82cd4ae24e469e0100ac12588200314c6ba5af7cf573373554ccdcf42c6180bb60b312df87af4342dd8c9d47412a0f821a596cf8f4bcfa3ac6b9bb66dd732a3c0b083605288b243336e68ea09da8a21d0d885b85d0f9449b31eea0e886994b38fe8539251e8a69344cb188141246f6f8ac22143d919ac9e07dbb0f3a0be580498304657ac37cb4904e43c4d8311cfa048a159389cc87ca83af22ef24d3793608c76df56fcda6204382883d7a9e7e70c5e78bc8510e82bbdb54b98dfdf19de888a26330ce33ea81367ca50fc07bcf38160a0f62768132bd0853a960bc189365bea4828b61baa4d7cf519fc85267886ea91e31ac5e6b2a7d733e089c52d5ea9918dfaf8460250df8acbb24e1ecc8f4288f0fac9a668b74985403fabde1db95d5b9866bcb9a80d316e898ea2d5fe07f6f7adbf485908c7a2c0bae4d95674d364f56c485ddc854d195f7a975919e616200c8ad55eecc6ebf7e365b133889921b5cb2972c8c997182f5d66662a8b45ad4c7a276a43a5bad85398f681b4b75c37f9669ce2ac73df8c7aac3517e230c0fc7b53c"}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001140), 0x200400) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000001180)={0x3, 0x7, 0x0, 'queue0\x00', 0x3c3}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001080)={{r1, 0x3, 0x7, 0x1, 0x9, 0x0, 0x7, 0x4c, 0x8, 0x6, 0x5, 0x3, 0x400080000000000, 0xfbb, 0x5}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 629.788479ms ago: executing program 0 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ef) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='tracefs\x00', 0x2803, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1b1903, 0x23) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = mmap$IORING_OFF_CQ_RING(0x0, 0x800, 0xa, 0x13, r0, 0x8000000) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000100)={0x0, 0x191, 0x400, 0x0, 0x1c8}, &(0x7f0000000180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x28e9, 0x0, 0x3, 0x323, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x73fd, 0x1, 0x1, 0x3ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff0e, 0x200, 0x1, 0xb8, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd56a, 0x1000, 0x2, 0x387, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f0000002280)={0x2e, 0x9, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x3, 0xfe8, 0x0, &(0x7f0000001280)=@buf_4k="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"}}, &(0x7f0000002300)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000002340)=0x0) syz_ublk_add_dev(r2, 0x0, r3, r4, &(0x7f00000023c0)={0x2e, 0xc, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002380)=@any_dev={0x0, 0xaca, 0x0, 0x0, 0x1000, 0x5, r5, 0x0, 0x39}}}, &(0x7f0000002440)) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) mlock(&(0x7f0000279000/0x4000)=nil, 0x4000) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a0563000000000000010902"], 0x0) write$sysctl(r6, &(0x7f00000000c0)='2\x00', 0x2) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='G', 0x1, 0xfffffffffffffffb) read(r0, &(0x7f0000000200), 0x20) 0s ago: executing program 2 (id=61): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="6b915b431dac6216bf3bfe379f"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x10}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xfffffffffffffdd1, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES16=r1]) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 45.593569][ T5278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.616934][ T5278] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. syzkaller login: [ 66.723165][ T5600] cgroup: Unknown subsys name 'net' [ 66.819295][ T5600] cgroup: Unknown subsys name 'cpuset' [ 66.822203][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.159273][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.379553][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.379631][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.422060][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.424784][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.425447][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.435394][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.436251][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.437572][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.438106][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.447053][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.456110][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.457235][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.457894][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.459552][ T4932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.460404][ T4932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.460905][ T4932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.461245][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.484246][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.484816][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.499912][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.514111][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.517344][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.828654][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.828808][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.829168][ T5610] bridge_slave_0: entered allmulticast mode [ 72.831029][ T5610] bridge_slave_0: entered promiscuous mode [ 72.834314][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.834454][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.834570][ T5610] bridge_slave_1: entered allmulticast mode [ 72.839708][ T5610] bridge_slave_1: entered promiscuous mode [ 72.960930][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.985628][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.999830][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.999961][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.000226][ T5612] bridge_slave_0: entered allmulticast mode [ 73.001173][ T5612] bridge_slave_0: entered promiscuous mode [ 73.060700][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.060824][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.061003][ T5612] bridge_slave_1: entered allmulticast mode [ 73.062710][ T5612] bridge_slave_1: entered promiscuous mode [ 73.063958][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.064097][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.064207][ T5611] bridge_slave_0: entered allmulticast mode [ 73.066197][ T5611] bridge_slave_0: entered promiscuous mode [ 73.086005][ T5610] team0: Port device team_slave_0 added [ 73.088783][ T5610] team0: Port device team_slave_1 added [ 73.128857][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.129006][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.129125][ T5613] bridge_slave_0: entered allmulticast mode [ 73.130082][ T5613] bridge_slave_0: entered promiscuous mode [ 73.153831][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.153929][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.154041][ T5611] bridge_slave_1: entered allmulticast mode [ 73.156629][ T5611] bridge_slave_1: entered promiscuous mode [ 73.174037][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.174061][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.174085][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.175880][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.175979][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.176102][ T5613] bridge_slave_1: entered allmulticast mode [ 73.179250][ T5613] bridge_slave_1: entered promiscuous mode [ 73.224397][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.224414][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.224447][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.246933][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.251111][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.304074][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.307250][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.311324][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.355671][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.408053][ T5611] team0: Port device team_slave_0 added [ 73.414036][ T5610] hsr_slave_0: entered promiscuous mode [ 73.414693][ T5610] hsr_slave_1: entered promiscuous mode [ 73.431637][ T5612] team0: Port device team_slave_0 added [ 73.435057][ T5612] team0: Port device team_slave_1 added [ 73.438188][ T5611] team0: Port device team_slave_1 added [ 73.442346][ T5613] team0: Port device team_slave_0 added [ 73.478032][ T5613] team0: Port device team_slave_1 added [ 73.519854][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.519870][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.519893][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.533055][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.533071][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.533095][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.536251][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.536265][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.536288][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.553238][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.553254][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.553278][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.563728][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.563743][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.563767][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.564856][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.564867][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.564890][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.570201][ T52] Bluetooth: hci2: command tx timeout [ 73.570201][ T5615] Bluetooth: hci1: command tx timeout [ 73.621806][ T5615] Bluetooth: hci3: command tx timeout [ 73.621828][ T52] Bluetooth: hci0: command tx timeout [ 73.756903][ T5612] hsr_slave_0: entered promiscuous mode [ 73.757914][ T5612] hsr_slave_1: entered promiscuous mode [ 73.758655][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 73.758749][ T5612] Cannot create hsr debugfs directory [ 73.766810][ T5611] hsr_slave_0: entered promiscuous mode [ 73.767808][ T5611] hsr_slave_1: entered promiscuous mode [ 73.768596][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 73.768613][ T5611] Cannot create hsr debugfs directory [ 73.799510][ T5613] hsr_slave_0: entered promiscuous mode [ 73.800482][ T5613] hsr_slave_1: entered promiscuous mode [ 73.802855][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 73.802874][ T5613] Cannot create hsr debugfs directory [ 74.214542][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.226885][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.227828][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.230593][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.231361][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.238305][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.245133][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.255080][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.350637][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.357796][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.358614][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.367023][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.383683][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.390495][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.391364][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.399704][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.503320][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.508686][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.509460][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.516550][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.542783][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.545345][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.569212][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.572198][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.635394][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.648530][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.651333][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.652968][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.659044][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.661449][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.667025][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.676403][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.680623][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.720606][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.749114][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.749336][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.790221][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.790280][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.807182][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.886362][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.907978][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.908036][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.942079][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.942192][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.983778][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.008483][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.053980][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.093518][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.093618][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.097974][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.139803][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.139904][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.142699][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.142798][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.183363][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.183463][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.616049][ T52] Bluetooth: hci1: command tx timeout [ 75.616081][ T52] Bluetooth: hci2: command tx timeout [ 75.698885][ T52] Bluetooth: hci3: command tx timeout [ 75.698971][ T5615] Bluetooth: hci0: command tx timeout [ 75.821825][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.959490][ T5610] veth0_vlan: entered promiscuous mode [ 75.978195][ T5610] veth1_vlan: entered promiscuous mode [ 76.046008][ T5610] veth0_macvtap: entered promiscuous mode [ 76.069962][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.071463][ T5610] veth1_macvtap: entered promiscuous mode [ 76.163592][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.190900][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.254140][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.277240][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.277389][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.294140][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.321120][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.322789][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.329031][ T5612] veth0_vlan: entered promiscuous mode [ 76.395645][ T5612] veth1_vlan: entered promiscuous mode [ 76.418647][ T5613] veth0_vlan: entered promiscuous mode [ 76.440503][ T5613] veth1_vlan: entered promiscuous mode [ 76.480032][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.480057][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.550615][ T5612] veth0_macvtap: entered promiscuous mode [ 76.553584][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.553603][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.578343][ T5611] veth0_vlan: entered promiscuous mode [ 76.591357][ T5612] veth1_macvtap: entered promiscuous mode [ 76.605165][ T5613] veth0_macvtap: entered promiscuous mode [ 76.611731][ T5613] veth1_macvtap: entered promiscuous mode [ 76.635179][ T5611] veth1_vlan: entered promiscuous mode [ 76.648374][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.669027][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.673626][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.710686][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.711134][ T5610] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.746934][ T165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.842735][ T5611] veth0_macvtap: entered promiscuous mode [ 76.858866][ T30] audit: type=1326 audit(1790004923.413:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.3" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4599e159 code=0x7ffc0000 [ 76.858916][ T30] audit: type=1326 audit(1790004923.413:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.3" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4599e159 code=0x7ffc0000 [ 76.861445][ T5763] nfs: Unknown parameter 'noi' [ 76.863489][ T5611] veth1_macvtap: entered promiscuous mode [ 76.863875][ T30] audit: type=1326 audit(1790004923.413:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.3" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fae4599e159 code=0x7ffc0000 [ 76.863916][ T30] audit: type=1326 audit(1790004923.413:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.3" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4599e159 code=0x7ffc0000 [ 76.863952][ T30] audit: type=1326 audit(1790004923.413:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.3" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4599e159 code=0x7ffc0000 [ 76.925170][ T30] audit: type=1326 audit(1790004923.473:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.3" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fae4599e159 code=0x7ffc0000 [ 76.925218][ T30] audit: type=1326 audit(1790004923.473:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.3" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4599e159 code=0x7ffc0000 [ 76.925254][ T30] audit: type=1326 audit(1790004923.473:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.3" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4599e159 code=0x7ffc0000 [ 76.988270][ T80] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.989635][ T80] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.989678][ T80] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.989710][ T80] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.989744][ T80] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.993961][ T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.994010][ T80] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.075333][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.079913][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.175165][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.175186][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.220587][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.220609][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.296306][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.301286][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.301307][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.316308][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.317469][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.317932][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.352824][ T48] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 77.393024][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.393046][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.488449][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.488471][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.521715][ T48] usb 3-1: not running at top speed; connect to a high speed hub [ 77.521797][ T48] usb 3-1: New USB device found, idVendor=045e, idProduct=046b, bcdDevice=15.a2 [ 77.546226][ T48] usb 3-1: config 3 has an invalid interface number: 100 but max is 2 [ 77.546254][ T48] usb 3-1: config 3 has an invalid interface number: 47 but max is 2 [ 77.546274][ T48] usb 3-1: config 3 has an invalid interface number: 170 but max is 2 [ 77.546293][ T48] usb 3-1: config 3 has no interface number 0 [ 77.546308][ T48] usb 3-1: config 3 has no interface number 1 [ 77.546323][ T48] usb 3-1: config 3 has no interface number 2 [ 77.546383][ T48] usb 3-1: config 3 interface 100 altsetting 8 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 77.546407][ T48] usb 3-1: config 3 interface 100 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 77.546432][ T48] usb 3-1: config 3 interface 100 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 77.546456][ T48] usb 3-1: config 3 interface 100 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 77.546475][ T48] usb 3-1: config 3 interface 100 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 77.546506][ T48] usb 3-1: config 3 interface 47 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 77.546525][ T48] usb 3-1: config 3 interface 47 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 77.546545][ T48] usb 3-1: config 3 interface 47 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 77.546564][ T48] usb 3-1: config 3 interface 47 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 77.546586][ T48] usb 3-1: config 3 interface 47 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 77.546606][ T48] usb 3-1: config 3 interface 47 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 77.546627][ T48] usb 3-1: config 3 interface 47 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 77.546646][ T48] usb 3-1: config 3 interface 47 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 77.546666][ T48] usb 3-1: config 3 interface 47 altsetting 6 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 77.546701][ T48] usb 3-1: config 3 interface 170 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 77.546720][ T48] usb 3-1: config 3 interface 100 has no altsetting 0 [ 77.546736][ T48] usb 3-1: config 3 interface 47 has no altsetting 0 [ 77.546752][ T48] usb 3-1: config 3 interface 170 has no altsetting 0 [ 77.635672][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.639085][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.639111][ T48] usb 3-1: Product: ခ [ 77.639124][ T48] usb 3-1: Manufacturer: 《 [ 77.639137][ T48] usb 3-1: SerialNumber: 祀爥չ♨Ệ苖丨굤톸獇駾磩㱍ﵖ煗麱⣮裁臽⨀ᓏ嘼㌥熿㕅✻⎹虙췢僓굼➮吒ꆾ蠩棢镍䞄床黂宵뫮㙌鰷蘍⋷ߐ㼓ꗨ䤑湠核怮黰킝 [ 77.640656][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.696262][ T52] Bluetooth: hci1: command tx timeout [ 77.696347][ T5615] Bluetooth: hci2: command tx timeout [ 77.776287][ T52] Bluetooth: hci3: command tx timeout [ 77.776370][ T5615] Bluetooth: hci0: command tx timeout [ 77.868674][ T5762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.094908][ T30] audit: type=1326 audit(1790004924.643:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.3" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae4595e98e code=0x7ffc0000 [ 78.113980][ T5779] FAULT_INJECTION: forcing a failure. [ 78.113980][ T5779] name failslab, interval 1, probability 0, space 0, times 1 [ 78.114028][ T5779] CPU: 0 UID: 0 PID: 5779 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 78.114053][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.114074][ T5779] Call Trace: [ 78.114085][ T5779] [ 78.114093][ T5779] dump_stack_lvl+0xe8/0x150 [ 78.114130][ T5779] should_fail_ex+0x3eb/0x540 [ 78.114157][ T5779] should_failslab+0xa8/0x100 [ 78.114178][ T5779] ? do_getname+0x2e/0x250 [ 78.114199][ T5779] kmem_cache_alloc_noprof+0x9c/0x600 [ 78.114225][ T5779] ? do_futex+0x3e7/0x4e0 [ 78.114245][ T5779] ? do_getname+0x2e/0x250 [ 78.114271][ T5779] do_getname+0x2e/0x250 [ 78.114290][ T5779] ? getname_flags+0x11/0x20 [ 78.114313][ T5779] do_sys_openat2+0xcc/0x200 [ 78.114335][ T5779] ? __se_sys_futex+0x3a8/0x450 [ 78.114356][ T5779] ? __pfx_do_sys_openat2+0x10/0x10 [ 78.114382][ T5779] ? rcu_is_watching+0x16/0xb0 [ 78.114405][ T5779] __x64_sys_openat+0x138/0x170 [ 78.114431][ T5779] do_syscall_64+0x166/0x520 [ 78.114449][ T5779] ? trace_irq_disable+0x3b/0x140 [ 78.114477][ T5779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.114498][ T5779] ? clear_bhb_loop+0x70/0xc0 [ 78.114521][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.114540][ T5779] RIP: 0033:0x7f51c579e159 [ 78.114563][ T5779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.114578][ T5779] RSP: 002b:00007f51c66a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 78.114602][ T5779] RAX: ffffffffffffffda RBX: 00007f51c5a26180 RCX: 00007f51c579e159 [ 78.114616][ T5779] RDX: 00000000000000c0 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 78.114629][ T5779] RBP: 00007f51c583506b R08: 0000000000000000 R09: 0000000000000000 [ 78.114641][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.114652][ T5779] R13: 00007f51c5a26218 R14: 00007f51c5a26180 R15: 00007ffe3275b998 [ 78.114681][ T5779] [ 78.196867][ T30] audit: type=1326 audit(1790004924.733:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.2.3" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fae4599f457 code=0x7ffc0000 [ 78.532325][ T5782] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.588932][ T5782] tipc: Started in network mode [ 78.588963][ T5782] tipc: Node identity 46208f2929d3, cluster identity 4711 [ 78.589146][ T5782] tipc: Enabled bearer , priority 0 [ 78.628175][ T5782] syzkaller0: entered promiscuous mode [ 78.628194][ T5782] syzkaller0: entered allmulticast mode [ 78.628741][ T5782] tipc: Resetting bearer [ 78.651897][ T5782] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 78.684054][ T5781] tipc: Resetting bearer [ 78.739442][ T48] usb 3-1: USB disconnect, device number 2 [ 78.816890][ T5694] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.996080][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 78.996815][ T5694] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 78.998022][ T5694] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 78.998046][ T5694] usb 4-1: config 0 has no interface number 0 [ 78.998085][ T5694] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 78.998110][ T5694] usb 4-1: config 0 interface 196 has no altsetting 0 [ 79.000892][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.000925][ T5694] usb 4-1: Product: syz [ 79.000942][ T5694] usb 4-1: Manufacturer: syz [ 79.000956][ T5694] usb 4-1: SerialNumber: syz [ 79.077739][ T5694] usb 4-1: config 0 descriptor?? [ 79.080979][ T5777] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 79.268901][ T863] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.418047][ T863] usb 3-1: Using ep0 maxpacket: 16 [ 79.423658][ T863] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.424655][ T863] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.424676][ T863] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.435091][ T863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.435116][ T863] usb 3-1: Product: syz [ 79.435129][ T863] usb 3-1: Manufacturer: syz [ 79.435143][ T863] usb 3-1: SerialNumber: syz [ 79.450040][ T863] usb 3-1: 0:2 : does not exist [ 79.499774][ T5694] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 79.500205][ T5694] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 79.668013][ T5790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.669967][ T5790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.691502][ T863] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 79.777158][ T52] Bluetooth: hci1: command tx timeout [ 79.777220][ T5615] Bluetooth: hci2: command tx timeout [ 79.866763][ T52] Bluetooth: hci3: command tx timeout [ 79.866807][ T5615] Bluetooth: hci0: command tx timeout [ 79.984386][ T863] usb 3-1: USB disconnect, device number 3 [ 80.473402][ T5808] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 80.473458][ T5808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.534160][ T5781] tipc: Disabling bearer [ 80.548759][ T5694] tipc: Node number set to 1878232873 [ 81.256283][ T5694] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 81.385864][ T5694] usb 3-1: device descriptor read/64, error -71 [ 81.597556][ T5768] usb 4-1: USB disconnect, device number 2 [ 81.644177][ T5694] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 81.785789][ T5694] usb 3-1: device descriptor read/64, error -71 [ 81.805874][ T5758] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.896162][ T5694] usb usb3-port1: attempt power cycle [ 81.956587][ T5758] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 81.957544][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.961785][ T5758] usb 2-1: config 0 descriptor?? [ 81.991675][ T5758] gspca_main: spca505-2.14.0 probing 0733:0430 [ 82.011290][ T5829] program syz.0.18 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.051199][ T5831] FAULT_INJECTION: forcing a failure. [ 82.051199][ T5831] name failslab, interval 1, probability 0, space 0, times 0 [ 82.051233][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(full) [ 82.051256][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.051274][ T5831] Call Trace: [ 82.051282][ T5831] [ 82.051290][ T5831] dump_stack_lvl+0xe8/0x150 [ 82.051326][ T5831] should_fail_ex+0x3eb/0x540 [ 82.051354][ T5831] should_failslab+0xa8/0x100 [ 82.051376][ T5831] ? do_getname+0x2e/0x250 [ 82.051398][ T5831] kmem_cache_alloc_noprof+0x9c/0x600 [ 82.051425][ T5831] ? do_futex+0x3e7/0x4e0 [ 82.051455][ T5831] ? do_getname+0x2e/0x250 [ 82.051483][ T5831] do_getname+0x2e/0x250 [ 82.051503][ T5831] ? getname_flags+0x11/0x20 [ 82.051530][ T5831] do_sys_openat2+0xcc/0x200 [ 82.051553][ T5831] ? __se_sys_futex+0x3a8/0x450 [ 82.051575][ T5831] ? __pfx_do_sys_openat2+0x10/0x10 [ 82.051602][ T5831] ? rcu_is_watching+0x16/0xb0 [ 82.051627][ T5831] __x64_sys_openat+0x138/0x170 [ 82.051654][ T5831] do_syscall_64+0x166/0x520 [ 82.051673][ T5831] ? trace_irq_disable+0x3b/0x140 [ 82.051700][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.051720][ T5831] ? clear_bhb_loop+0x70/0xc0 [ 82.051744][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.051764][ T5831] RIP: 0033:0x7f8752b9e159 [ 82.051783][ T5831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.051799][ T5831] RSP: 002b:00007f8750df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 82.051821][ T5831] RAX: ffffffffffffffda RBX: 00007f8752e26180 RCX: 00007f8752b9e159 [ 82.051836][ T5831] RDX: 00000000000000c0 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 82.051850][ T5831] RBP: 00007f8752c3506b R08: 0000000000000000 R09: 0000000000000000 [ 82.051863][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.051874][ T5831] R13: 00007f8752e26218 R14: 00007f8752e26180 R15: 00007fff70fcca28 [ 82.051905][ T5831] [ 82.273580][ T5758] gspca_spca505: reg write: error -71 [ 82.273658][ T5758] spca505 2-1:0.0: probe with driver spca505 failed with error -5 [ 82.278125][ T5758] usb 2-1: USB disconnect, device number 2 [ 82.325909][ T5694] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 82.346554][ T5694] usb 3-1: device descriptor read/8, error -71 [ 82.565804][ T25] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 82.595789][ T5694] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 82.616559][ T5694] usb 3-1: device descriptor read/8, error -71 [ 82.718106][ T25] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 82.719934][ T25] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 82.719960][ T25] usb 1-1: config 0 has no interface number 0 [ 82.719997][ T25] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.720017][ T25] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 82.720032][ T25] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 82.720044][ T25] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 82.720057][ T25] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 82.720070][ T25] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.720092][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.722594][ T25] usb 1-1: config 0 descriptor?? [ 82.724288][ T5833] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.724412][ T5833] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.728730][ T5694] usb usb3-port1: unable to enumerate USB device [ 82.743846][ T5836] syz.3.20 uses obsolete (PF_INET,SOCK_PACKET) [ 82.760412][ T25] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 82.951920][ T5833] ptn5150 0-001d: probe with driver ptn5150 failed with error -22 [ 82.954171][ T5833] i2c i2c-0: new_device: Instantiated device ptn5150 at 0x1d [ 82.989557][ T5614] usb 1-1: USB disconnect, device number 2 [ 83.010734][ T5614] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 83.628907][ T5842] fuse: Unknown parameter '?' [ 83.730408][ T5851] Bluetooth: MGMT ver 1.23 [ 84.319014][ T5869] netlink: 165 bytes leftover after parsing attributes in process `syz.0.28'. [ 84.446550][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.596019][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 84.597833][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 84.599103][ T9] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 84.599126][ T9] usb 4-1: config 0 has no interface number 0 [ 84.599164][ T9] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 84.599187][ T9] usb 4-1: config 0 interface 196 has no altsetting 0 [ 84.601824][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.601846][ T9] usb 4-1: Product: syz [ 84.601859][ T9] usb 4-1: Manufacturer: syz [ 84.601873][ T9] usb 4-1: SerialNumber: syz [ 84.682862][ T9] usb 4-1: config 0 descriptor?? [ 84.684568][ T5857] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.083446][ T5871] comedi comedi1: 8255: I/O base address not correctly aligned [ 85.096581][ T9] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 85.096823][ T9] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 85.112277][ T5871] FAULT_INJECTION: forcing a failure. [ 85.112277][ T5871] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 85.112335][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: syz.0.38 Not tainted syzkaller #0 PREEMPT(full) [ 85.112358][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.112370][ T5871] Call Trace: [ 85.112378][ T5871] [ 85.112386][ T5871] dump_stack_lvl+0xe8/0x150 [ 85.112417][ T5871] should_fail_ex+0x3eb/0x540 [ 85.112445][ T5871] prepare_alloc_pages+0x21e/0x5f0 [ 85.112482][ T5871] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 85.112516][ T5871] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 85.112544][ T5871] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 85.112579][ T5871] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 85.112622][ T5871] __alloc_pages_noprof+0x10/0x100 [ 85.112652][ T5871] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 85.112689][ T5871] ? alloc_pages_noprof+0x140/0x2b0 [ 85.112714][ T5871] __kasan_populate_vmalloc+0xb7/0x1c0 [ 85.112748][ T5871] alloc_vmap_area+0xd10/0x1410 [ 85.112786][ T5871] ? __pfx_alloc_vmap_area+0x10/0x10 [ 85.112807][ T5871] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 85.112835][ T5871] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 85.112862][ T5871] ? __get_vm_area_node+0x155/0x2f0 [ 85.112891][ T5871] __get_vm_area_node+0x200/0x2f0 [ 85.112921][ T5871] __vmalloc_node_range_noprof+0x340/0x1690 [ 85.112947][ T5871] ? dvb_dvr_open+0x1cc/0x5c0 [ 85.112972][ T5871] ? __pfx___mutex_trylock_common+0x10/0x10 [ 85.112997][ T5871] ? rcu_is_watching+0x16/0xb0 [ 85.113017][ T5871] ? trace_contention_end+0x3d/0x140 [ 85.113039][ T5871] ? __mutex_lock+0x305/0x15a0 [ 85.113057][ T5871] ? trace_contention_end+0x3d/0x140 [ 85.113093][ T5871] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.113118][ T5871] ? lock_acquire+0x115/0x350 [ 85.113149][ T5871] ? dvb_dvr_open+0x1cc/0x5c0 [ 85.113174][ T5871] vmalloc_noprof+0xb2/0xe0 [ 85.113198][ T5871] ? dvb_dvr_open+0x1cc/0x5c0 [ 85.113230][ T5871] dvb_dvr_open+0x1cc/0x5c0 [ 85.113255][ T5871] ? __pfx_dvb_dvr_open+0x10/0x10 [ 85.113281][ T5871] dvb_device_open+0x24f/0x340 [ 85.113309][ T5871] chrdev_open+0x4d9/0x600 [ 85.113331][ T5871] ? __pfx_chrdev_open+0x10/0x10 [ 85.113363][ T5871] ? devcgroup_check_permission+0x31/0x8f0 [ 85.113397][ T5871] ? __pfx_chrdev_open+0x10/0x10 [ 85.113415][ T5871] do_dentry_open+0x80e/0x1360 [ 85.113446][ T5871] vfs_open_consume+0x4a/0x350 [ 85.113467][ T5871] ? path_openat+0x14bb/0x1e40 [ 85.113498][ T5871] path_openat+0x14d7/0x1e40 [ 85.113544][ T5871] do_file_open+0x23e/0x4a0 [ 85.113578][ T5871] ? __pfx_do_file_open+0x10/0x10 [ 85.113627][ T5871] ? _raw_spin_unlock+0x28/0x50 [ 85.113652][ T5871] ? alloc_fd+0x651/0x6c0 [ 85.113685][ T5871] do_sys_openat2+0x115/0x200 [ 85.113709][ T5871] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.113737][ T5871] ? do_user_addr_fault+0xd3f/0x1480 [ 85.113768][ T5871] __x64_sys_openat+0x138/0x170 [ 85.113796][ T5871] do_syscall_64+0x166/0x520 [ 85.113813][ T5871] ? trace_irq_disable+0x3b/0x140 [ 85.113840][ T5871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.113859][ T5871] ? clear_bhb_loop+0x70/0xc0 [ 85.113883][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.113903][ T5871] RIP: 0033:0x7f51c575e98e [ 85.113921][ T5871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.113938][ T5871] RSP: 002b:00007f51c66e2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.113958][ T5871] RAX: ffffffffffffffda RBX: 00007f51c66e36c0 RCX: 00007f51c575e98e [ 85.113972][ T5871] RDX: 0000000000000100 RSI: 00007f51c66e2c00 RDI: ffffffffffffff9c [ 85.113985][ T5871] RBP: 00007f51c66e2c00 R08: 0000000000000000 R09: 0000000000000000 [ 85.113998][ T5871] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 85.114011][ T5871] R13: 00007f51c5a26038 R14: 00007f51c5a25fa0 R15: 00007ffe3275b998 [ 85.114042][ T5871] [ 85.127322][ T5871] syz.0.38: vmalloc error: size 1925120, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 85.127502][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: syz.0.38 Not tainted syzkaller #0 PREEMPT(full) [ 85.127525][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.127537][ T5871] Call Trace: [ 85.127545][ T5871] [ 85.127553][ T5871] dump_stack_lvl+0xe8/0x150 [ 85.127584][ T5871] warn_alloc+0x24d/0x270 [ 85.127614][ T5871] ? lockdep_hardirqs_on+0x7b/0x110 [ 85.127647][ T5871] ? __pfx_warn_alloc+0x10/0x10 [ 85.127673][ T5871] ? kfree+0x1c5/0x650 [ 85.127704][ T5871] ? __get_vm_area_node+0x219/0x2f0 [ 85.127735][ T5871] __vmalloc_node_range_noprof+0x368/0x1690 [ 85.127761][ T5871] ? __pfx___mutex_trylock_common+0x10/0x10 [ 85.127787][ T5871] ? rcu_is_watching+0x16/0xb0 [ 85.127807][ T5871] ? trace_contention_end+0x3d/0x140 [ 85.127830][ T5871] ? __mutex_lock+0x305/0x15a0 [ 85.127848][ T5871] ? trace_contention_end+0x3d/0x140 [ 85.127884][ T5871] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 85.127908][ T5871] ? lock_acquire+0x115/0x350 [ 85.127941][ T5871] ? dvb_dvr_open+0x1cc/0x5c0 [ 85.127966][ T5871] vmalloc_noprof+0xb2/0xe0 [ 85.127990][ T5871] ? dvb_dvr_open+0x1cc/0x5c0 [ 85.128016][ T5871] dvb_dvr_open+0x1cc/0x5c0 [ 85.128042][ T5871] ? __pfx_dvb_dvr_open+0x10/0x10 [ 85.128067][ T5871] dvb_device_open+0x24f/0x340 [ 85.128096][ T5871] chrdev_open+0x4d9/0x600 [ 85.128118][ T5871] ? __pfx_chrdev_open+0x10/0x10 [ 85.128140][ T5871] ? devcgroup_check_permission+0x31/0x8f0 [ 85.128171][ T5871] ? __pfx_chrdev_open+0x10/0x10 [ 85.128189][ T5871] do_dentry_open+0x80e/0x1360 [ 85.128218][ T5871] vfs_open_consume+0x4a/0x350 [ 85.128247][ T5871] ? path_openat+0x14bb/0x1e40 [ 85.128279][ T5871] path_openat+0x14d7/0x1e40 [ 85.128329][ T5871] do_file_open+0x23e/0x4a0 [ 85.128363][ T5871] ? __pfx_do_file_open+0x10/0x10 [ 85.128412][ T5871] ? _raw_spin_unlock+0x28/0x50 [ 85.128436][ T5871] ? alloc_fd+0x651/0x6c0 [ 85.128469][ T5871] do_sys_openat2+0x115/0x200 [ 85.128493][ T5871] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.128521][ T5871] ? do_user_addr_fault+0xd3f/0x1480 [ 85.128553][ T5871] __x64_sys_openat+0x138/0x170 [ 85.128581][ T5871] do_syscall_64+0x166/0x520 [ 85.128597][ T5871] ? trace_irq_disable+0x3b/0x140 [ 85.128624][ T5871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.128644][ T5871] ? clear_bhb_loop+0x70/0xc0 [ 85.128668][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.128687][ T5871] RIP: 0033:0x7f51c575e98e [ 85.128705][ T5871] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.128721][ T5871] RSP: 002b:00007f51c66e2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.128741][ T5871] RAX: ffffffffffffffda RBX: 00007f51c66e36c0 RCX: 00007f51c575e98e [ 85.128756][ T5871] RDX: 0000000000000100 RSI: 00007f51c66e2c00 RDI: ffffffffffffff9c [ 85.128770][ T5871] RBP: 00007f51c66e2c00 R08: 0000000000000000 R09: 0000000000000000 [ 85.128782][ T5871] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 85.128794][ T5871] R13: 00007f51c5a26038 R14: 00007f51c5a25fa0 R15: 00007ffe3275b998 [ 85.128825][ T5871] [ 85.139311][ T5871] Mem-Info: [ 85.139326][ T5871] active_anon:8466 inactive_anon:0 isolated_anon:0 [ 85.139326][ T5871] active_file:0 inactive_file:42771 isolated_file:0 [ 85.139326][ T5871] unevictable:0 dirty:1852 writeback:0 [ 85.139326][ T5871] slab_reclaimable:9608 slab_unreclaimable:92313 [ 85.139326][ T5871] mapped:27535 shmem:3390 pagetables:1046 [ 85.139326][ T5871] sec_pagetables:0 bounce:0 [ 85.139326][ T5871] kernel_misc_reclaimable:0 [ 85.139326][ T5871] free:1341499 free_pcp:15104 free_cma:0 [ 85.139384][ T5871] Node 0 active_anon:33864kB inactive_anon:0kB active_file:0kB inactive_file:170884kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110140kB dirty:7400kB writeback:0kB shmem:13560kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11456kB pagetables:4036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 85.139439][ T5871] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 85.139490][ T5871] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.139547][ T5871] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 85.139582][ T5871] Node 0 DMA32 free:1419496kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33864kB inactive_anon:0kB active_file:0kB inactive_file:170884kB unevictable:0kB writepending:7400kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:60412kB local_pcp:46888kB free_cma:0kB [ 85.139640][ T5871] lowmem_reserve[]: 0 0 1 1 1 [ 85.139673][ T5871] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 85.139726][ T5871] lowmem_reserve[]: 0 0 0 0 0 [ 85.139758][ T5871] Node 1 Normal free:3931140kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 85.139814][ T5871] lowmem_reserve[]: 0 0 0 0 0 [ 85.139846][ T5871] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 85.139987][ T5871] Node 0 DMA32: 1266*4kB (UME) 412*8kB (U) 76*16kB (U) 4*32kB (UME) 2*64kB (UE) 0*128kB 2*256kB (M) 8*512kB (ME) 6*1024kB (UM) 5*2048kB (M) 339*4096kB (M) = 1419368kB [ 85.140139][ T5871] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 85.140243][ T5871] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 8*16kB (UM) 11*32kB (UM) 8*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3931140kB [ 85.140394][ T5871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.140411][ T5871] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 85.140426][ T5871] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.140442][ T5871] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 85.140457][ T5871] 46157 total pagecache pages [ 85.140469][ T5871] 0 pages in swap cache [ 85.140476][ T5871] Free swap = 124996kB [ 85.140483][ T5871] Total swap = 124996kB [ 85.140491][ T5871] 2097051 pages RAM [ 85.140498][ T5871] 0 pages HighMem/MovableOnly [ 85.140505][ T5871] 429554 pages reserved [ 85.140512][ T5871] 0 pages cma reserved [ 85.328447][ T5875] FAULT_INJECTION: forcing a failure. [ 85.328447][ T5875] name failslab, interval 1, probability 0, space 0, times 0 [ 85.328476][ T5875] CPU: 1 UID: 0 PID: 5875 Comm: syz.2.29 Not tainted syzkaller #0 PREEMPT(full) [ 85.328498][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.328510][ T5875] Call Trace: [ 85.328518][ T5875] [ 85.328526][ T5875] dump_stack_lvl+0xe8/0x150 [ 85.328557][ T5875] should_fail_ex+0x3eb/0x540 [ 85.328583][ T5875] should_failslab+0xa8/0x100 [ 85.328604][ T5875] ? do_getname+0x2e/0x250 [ 85.328626][ T5875] kmem_cache_alloc_noprof+0x9c/0x600 [ 85.328660][ T5875] ? do_futex+0x3e7/0x4e0 [ 85.328679][ T5875] ? do_getname+0x2e/0x250 [ 85.328705][ T5875] do_getname+0x2e/0x250 [ 85.328724][ T5875] ? getname_flags+0x11/0x20 [ 85.328744][ T5875] do_sys_openat2+0xcc/0x200 [ 85.328766][ T5875] ? __se_sys_futex+0x3a8/0x450 [ 85.328784][ T5875] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.328809][ T5875] ? rcu_is_watching+0x16/0xb0 [ 85.328832][ T5875] __x64_sys_openat+0x138/0x170 [ 85.328859][ T5875] do_syscall_64+0x166/0x520 [ 85.328875][ T5875] ? trace_irq_disable+0x3b/0x140 [ 85.328903][ T5875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.328921][ T5875] ? clear_bhb_loop+0x70/0xc0 [ 85.328945][ T5875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.328964][ T5875] RIP: 0033:0x7fae4599e159 [ 85.328982][ T5875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.328998][ T5875] RSP: 002b:00007fae43bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.329019][ T5875] RAX: ffffffffffffffda RBX: 00007fae45c26180 RCX: 00007fae4599e159 [ 85.329033][ T5875] RDX: 00000000000000c0 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 85.329047][ T5875] RBP: 00007fae45a3506b R08: 0000000000000000 R09: 0000000000000000 [ 85.329059][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.329072][ T5875] R13: 00007fae45c26218 R14: 00007fae45c26180 R15: 00007ffc891f7898 [ 85.329101][ T5875] [ 86.405859][ T5694] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 86.481215][ T5889] fuse-io-uring is disabled by module parameter [ 86.558132][ T5694] usb 1-1: unable to get BOS descriptor or descriptor too short [ 86.558609][ T5694] usb 1-1: not running at top speed; connect to a high speed hub [ 86.558669][ T5694] usb 1-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 86.560072][ T5694] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 86.563755][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.563779][ T5694] usb 1-1: Product: syz [ 86.563793][ T5694] usb 1-1: Manufacturer: syz [ 86.563807][ T5694] usb 1-1: SerialNumber: syz [ 86.749653][ T990] cfg80211: failed to load regulatory.db [ 86.794421][ T5694] usb 1-1: found format II with max.bitrate = 1024, frame size=65531 [ 86.794444][ T5694] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 86.802592][ T5694] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 86.860276][ T5694] usb 1-1: USB disconnect, device number 3 [ 87.264050][ T9] usb 4-1: USB disconnect, device number 3 [ 87.816369][ T990] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.875779][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.030565][ T5907] mmap: syz.2.39 (5907) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.048838][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 88.053837][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 88.053887][ T9] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 88.078389][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.078413][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.105378][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.105405][ T9] usb 4-1: Product: syz [ 88.105420][ T9] usb 4-1: Manufacturer: syz [ 88.105434][ T9] usb 4-1: SerialNumber: syz [ 88.352147][ T5903] netlink: 32 bytes leftover after parsing attributes in process `syz.3.36'. [ 88.483161][ T9] usb 4-1: failed waiting for Axe-Fx III to boot: -71 [ 88.483196][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 88.521919][ T9] usb 4-1: USB disconnect, device number 4 [ 89.586473][ T5925] xt_l2tp: unknown flags: 8b [ 90.906708][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 91.057163][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 91.061347][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 91.064055][ T9] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 91.064080][ T9] usb 3-1: config 0 has no interface number 0 [ 91.064118][ T9] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 91.064142][ T9] usb 3-1: config 0 interface 196 has no altsetting 0 [ 91.113656][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.113682][ T9] usb 3-1: Product: syz [ 91.113696][ T9] usb 3-1: Manufacturer: syz [ 91.113709][ T9] usb 3-1: SerialNumber: syz [ 91.140145][ T9] usb 3-1: config 0 descriptor?? [ 91.153394][ T5935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.266658][ T5758] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 91.417552][ T5758] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 91.418517][ T5758] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 91.418541][ T5758] usb 4-1: config 0 has no interface number 0 [ 91.418587][ T5758] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 91.420018][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 91.420041][ T5758] usb 4-1: Manufacturer: syz [ 91.420055][ T5758] usb 4-1: SerialNumber: syz [ 91.428207][ T5758] usb 4-1: config 0 descriptor?? [ 91.526240][ T990] usb 1-1: device descriptor read/64, error -71 [ 91.558460][ T9] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 91.558600][ T9] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 91.765787][ T990] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 91.916030][ T990] usb 1-1: Using ep0 maxpacket: 32 [ 91.916812][ T990] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 91.919232][ T990] usb 1-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 91.919255][ T990] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 91.921551][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.921575][ T990] usb 1-1: Product: syz [ 91.921589][ T990] usb 1-1: Manufacturer: syz [ 91.921602][ T990] usb 1-1: SerialNumber: syz [ 92.140742][ T990] usb 1-1: USB disconnect, device number 5 [ 92.955783][ T5768] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 93.106565][ T5768] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 93.109901][ T5768] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 93.109927][ T5768] usb 1-1: config 0 has no interface number 0 [ 93.109967][ T5768] usb 1-1: config 0 interface 41 has no altsetting 0 [ 93.112615][ T5768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.112639][ T5768] usb 1-1: Product: syz [ 93.112653][ T5768] usb 1-1: Manufacturer: syz [ 93.112666][ T5768] usb 1-1: SerialNumber: syz [ 93.125628][ T5768] usb 1-1: config 0 descriptor?? [ 93.649125][ T5614] usb 3-1: USB disconnect, device number 8 [ 93.953208][ T5959] FAULT_INJECTION: forcing a failure. [ 93.953208][ T5959] name failslab, interval 1, probability 0, space 0, times 0 [ 93.953247][ T5959] CPU: 0 UID: 0 PID: 5959 Comm: syz.2.53 Not tainted syzkaller #0 PREEMPT(full) [ 93.953270][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.953282][ T5959] Call Trace: [ 93.953290][ T5959] [ 93.953298][ T5959] dump_stack_lvl+0xe8/0x150 [ 93.953332][ T5959] should_fail_ex+0x3eb/0x540 [ 93.953359][ T5959] should_failslab+0xa8/0x100 [ 93.953381][ T5959] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 93.953407][ T5959] kmem_cache_alloc_noprof+0x9c/0x600 [ 93.953433][ T5959] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 93.953457][ T5959] ? kmem_cache_alloc_noprof+0x151/0x600 [ 93.953483][ T5959] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 93.953516][ T5959] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 93.953552][ T5959] mmu_topup_memory_caches+0x21/0x170 [ 93.953582][ T5959] kvm_mmu_load+0x9d/0x21e0 [ 93.953611][ T5959] ? kvm_msr_allowed+0x9a/0x490 [ 93.953637][ T5959] ? kvm_msr_allowed+0x3f4/0x490 [ 93.953663][ T5959] ? kvm_msr_allowed+0x9a/0x490 [ 93.953686][ T5959] ? kvm_msr_allowed+0x9a/0x490 [ 93.953718][ T5959] ? kvm_apic_has_interrupt+0x740/0x770 [ 93.953751][ T5959] vcpu_run+0x4f68/0x79b0 [ 93.953804][ T5959] ? update_se+0x90/0x1020 [ 93.953862][ T5959] ? __pfx_vcpu_run+0x10/0x10 [ 93.953887][ T5959] ? lock_acquire+0x115/0x350 [ 93.953931][ T5959] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 93.953962][ T5959] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 93.953990][ T5959] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 93.954024][ T5959] kvm_vcpu_ioctl+0xa61/0xfd0 [ 93.954058][ T5959] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 93.954084][ T5959] ? hook_file_ioctl+0x1f2/0x600 [ 93.954124][ T5959] ? __fget_files+0x2a/0x420 [ 93.954151][ T5959] ? __fget_files+0x2a/0x420 [ 93.954171][ T5959] ? __fget_files+0x3a2/0x420 [ 93.954194][ T5959] ? __fget_files+0x2a/0x420 [ 93.954221][ T5959] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.954253][ T5959] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 93.954281][ T5959] __se_sys_ioctl+0xfc/0x170 [ 93.954313][ T5959] do_syscall_64+0x166/0x520 [ 93.954332][ T5959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.954352][ T5959] ? clear_bhb_loop+0x70/0xc0 [ 93.954375][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.954394][ T5959] RIP: 0033:0x7fae4599e159 [ 93.954412][ T5959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.954428][ T5959] RSP: 002b:00007fae4679d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.954449][ T5959] RAX: ffffffffffffffda RBX: 00007fae45c25fa0 RCX: 00007fae4599e159 [ 93.954464][ T5959] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 93.954476][ T5959] RBP: 00007fae45a3506b R08: 0000000000000000 R09: 0000000000000000 [ 93.954488][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.954499][ T5959] R13: 00007fae45c26038 R14: 00007fae45c25fa0 R15: 00007ffc891f7898 [ 93.954530][ T5959] [ 94.076168][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.082569][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.153579][ T5959] FAULT_INJECTION: forcing a failure. [ 94.153579][ T5959] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 94.153607][ T5959] CPU: 1 UID: 0 PID: 5959 Comm: syz.2.53 Not tainted syzkaller #0 PREEMPT(full) [ 94.153628][ T5959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.153638][ T5959] Call Trace: [ 94.153645][ T5959] [ 94.153653][ T5959] dump_stack_lvl+0xe8/0x150 [ 94.153691][ T5959] should_fail_ex+0x3eb/0x540 [ 94.153718][ T5959] prepare_alloc_pages+0x21e/0x5f0 [ 94.153752][ T5959] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 94.153783][ T5959] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 94.153818][ T5959] ? policy_nodemask+0x2cc/0x8e0 [ 94.153838][ T5959] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 94.153861][ T5959] ? trace_kmalloc+0x2a/0xf0 [ 94.153889][ T5959] alloc_pages_mpol+0x21e/0x390 [ 94.153916][ T5959] alloc_pages_noprof+0xb1/0x2b0 [ 94.153939][ T5959] get_free_pages_noprof+0xf/0x80 [ 94.153966][ T5959] __kvm_mmu_topup_memory_cache+0x252/0x600 [ 94.154002][ T5959] mmu_topup_memory_caches+0xd6/0x170 [ 94.154030][ T5959] kvm_mmu_load+0x9d/0x21e0 [ 94.154059][ T5959] ? kvm_msr_allowed+0x9a/0x490 [ 94.154083][ T5959] ? kvm_msr_allowed+0x3f4/0x490 [ 94.154108][ T5959] ? kvm_msr_allowed+0x9a/0x490 [ 94.154132][ T5959] ? kvm_msr_allowed+0x9a/0x490 [ 94.154165][ T5959] ? kvm_apic_has_interrupt+0x740/0x770 [ 94.154197][ T5959] vcpu_run+0x4f68/0x79b0 [ 94.154251][ T5959] ? update_se+0x90/0x1020 [ 94.154307][ T5959] ? __pfx_vcpu_run+0x10/0x10 [ 94.154331][ T5959] ? lock_acquire+0x115/0x350 [ 94.154372][ T5959] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 94.154401][ T5959] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 94.154427][ T5959] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 94.154459][ T5959] kvm_vcpu_ioctl+0xa61/0xfd0 [ 94.154491][ T5959] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.154516][ T5959] ? hook_file_ioctl+0x1f2/0x600 [ 94.154555][ T5959] ? __fget_files+0x2a/0x420 [ 94.154581][ T5959] ? __fget_files+0x2a/0x420 [ 94.154601][ T5959] ? __fget_files+0x3a2/0x420 [ 94.154623][ T5959] ? __fget_files+0x2a/0x420 [ 94.154649][ T5959] ? bpf_lsm_file_ioctl+0x9/0x20 [ 94.154729][ T5959] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.154756][ T5959] __se_sys_ioctl+0xfc/0x170 [ 94.154786][ T5959] do_syscall_64+0x166/0x520 [ 94.154803][ T5959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.154822][ T5959] ? clear_bhb_loop+0x70/0xc0 [ 94.154845][ T5959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.154864][ T5959] RIP: 0033:0x7fae4599e159 [ 94.154881][ T5959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.154896][ T5959] RSP: 002b:00007fae4679d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.154917][ T5959] RAX: ffffffffffffffda RBX: 00007fae45c25fa0 RCX: 00007fae4599e159 [ 94.154930][ T5959] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 94.154942][ T5959] RBP: 00007fae45a3506b R08: 0000000000000000 R09: 0000000000000000 [ 94.154953][ T5959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.154964][ T5959] R13: 00007fae45c26038 R14: 00007fae45c25fa0 R15: 00007ffc891f7898 [ 94.154994][ T5959] [ 94.199790][ T5694] usb 4-1: USB disconnect, device number 5 [ 94.242225][ T5768] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 94.835984][ T5694] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 94.935804][ T5614] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 95.106406][ T5614] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 95.107569][ T5614] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 95.107603][ T5614] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 95.107641][ T5614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.165513][ T5614] usb 3-1: probing VID:PID(0424:012C) [ 95.176981][ T5614] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 95.177006][ T5614] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 95.177024][ T5614] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 95.177040][ T5614] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 95.177057][ T5614] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 95.276229][ T5768] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 95.276256][ T5768] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 95.276772][ T5768] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 95.285531][ T5768] usb 1-1: USB disconnect, device number 6 [ 95.539625][ T5614] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 95.740234][ T5614] usb 3-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 95.837349][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 95.837367][ T30] audit: type=1400 audit(1790004942.393:17): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=5981 comm="syz.0.58" [ 95.900259][ T5982] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.923208][ T5982] kvm: pic: level sensitive irq not supported [ 95.923434][ T5982] kvm: pic: non byte read [ 96.476087][ T5768] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 96.569055][ T5614] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 96.607622][ T5614] usb 3-1: USB disconnect, device number 9 [ 96.622269][ T10] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 96.634362][ T5768] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 96.647734][ T5768] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 96.647760][ T5768] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.647780][ T5768] usb 1-1: config 0 has no interfaces? [ 96.647808][ T5768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.653257][ T5768] usb 1-1: config 0 descriptor?? [ 96.736004][ T5614] USB vub300 remote SDIO host controller[0] now disconnected [ 96.826196][ C0] [ 96.837146][ C0] ============================= [ 96.842004][ C0] WARNING: suspicious RCU usage [ 96.846923][ C0] syzkaller #0 Not tainted [ 96.851349][ C0] ----------------------------- [ 96.856342][ C0] kernel/sched/core.c:9049 Illegal context switch in RCU-sched read-side critical section! [ 96.866435][ C0] [ 96.866435][ C0] other info that might help us debug this: [ 96.866435][ C0] [ 96.876729][ C0] [ 96.876729][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 96.884820][ C0] locks held by syz.0.60/5992: 8, last CPU#0: [ 96.890955][ C0] #0: ffff88807b594460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x976/0xde0 [ 96.900171][ C0] #1: ffff888077b95038 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c2/0xd30 [ 96.909842][ C0] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 96.919522][ C0] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 96.929361][ C0] #4: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 96.938933][ C0] #5: ffff8880750c6cd8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 96.949483][ C0] #6: ffffffff8ef5c860 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 96.958977][ C0] #7: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 96.969522][ C0] [ 96.969522][ C0] stack backtrace: [ 96.975422][ C0] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.60 Not tainted syzkaller #0 PREEMPT(full) [ 96.984546][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.994617][ C0] Call Trace: [ 96.997911][ C0] [ 97.000769][ C0] dump_stack_lvl+0xe8/0x150 [ 97.005377][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 97.010784][ C0] __might_resched+0xbb/0x4c0 [ 97.015486][ C0] ? cancel_delayed_work_sync+0x5a/0xf0 [ 97.021058][ C0] cancel_delayed_work_sync+0x6b/0xf0 [ 97.026456][ C0] mmc_free_host+0x19/0x30 [ 97.030900][ C0] call_timer_fn+0x18d/0x5f0 [ 97.035528][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 97.042226][ C0] ? call_timer_fn+0xd5/0x5f0 [ 97.046925][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 97.052069][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.057293][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 97.063994][ C0] __run_timer_base+0x652/0x8b0 [ 97.068887][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 97.074293][ C0] ? ktime_get+0x1f5/0x220 [ 97.078722][ C0] ? lapic_next_event+0x11/0x20 [ 97.083606][ C0] run_timer_softirq+0xb7/0x170 [ 97.088486][ C0] handle_softirqs+0x226/0x860 [ 97.093278][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 97.098076][ C0] __irq_exit_rcu+0xcb/0x220 [ 97.102688][ C0] irq_exit_rcu+0x9/0x30 [ 97.106950][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 97.112606][ C0] [ 97.115544][ C0] [ 97.118480][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 97.124464][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 97.129759][ C0] Code: ff ff ff e8 90 f9 52 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 f4 18 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 ff 05 56 0a cc 48 8d 3d 27 8f fb [ 97.149380][ C0] RSP: 0018:ffffc900054462e0 EFLAGS: 00000292 [ 97.155471][ C0] RAX: 8b8efdd079480b00 RBX: 0000000000000000 RCX: 8000000000000002 [ 97.163551][ C0] RDX: 000000006e236968 RSI: ffffffff8e82b24f RDI: ffffffff8c6f0580 [ 97.171631][ C0] RBP: ffff88807ec65dc0 R08: ffffffff8244115a R09: 0000000000000000 [ 97.179622][ C0] R10: dffffc0000000000 R11: fffff9400032ed09 R12: ffffffff8ef5c860 [ 97.187616][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 97.195607][ C0] ? pfn_valid+0xba/0x490 [ 97.199958][ C0] ? pfn_valid+0xba/0x490 [ 97.204581][ C0] pfn_valid+0xd6/0x490 [ 97.208759][ C0] ? pfn_valid+0xba/0x490 [ 97.213106][ C0] page_table_check_set+0x23/0x590 [ 97.218236][ C0] ? __page_table_check_ptes_set+0x319/0x340 [ 97.224247][ C0] set_pte_range+0x7ef/0x840 [ 97.228969][ C0] filemap_map_pages+0xe67/0x2170 [ 97.234043][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 97.239278][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 97.244762][ C0] ? lock_acquire+0x115/0x350 [ 97.249485][ C0] ? lock_acquire+0x115/0x350 [ 97.254189][ C0] ? do_pte_missing+0x140c/0x34b0 [ 97.259244][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 97.264731][ C0] ? do_pte_missing+0x140c/0x34b0 [ 97.269783][ C0] do_pte_missing+0x20ae/0x34b0 [ 97.274673][ C0] ? handle_mm_fault+0xf1/0x3750 [ 97.279627][ C0] handle_mm_fault+0x1a53/0x3750 [ 97.284590][ C0] ? handle_mm_fault+0xf1/0x3750 [ 97.289563][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 97.294871][ C0] ? follow_page_pte+0x73b/0xf10 [ 97.299841][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 97.305164][ C0] __get_user_pages+0x1670/0x2750 [ 97.310250][ C0] get_dump_page+0x1b5/0x410 [ 97.314886][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 97.320007][ C0] ? dump_user_range+0x1c2/0xd30 [ 97.324958][ C0] ? down_read_killable+0x1b6/0x3b0 [ 97.330170][ C0] ? iov_iter_bvec+0xb8/0x180 [ 97.334876][ C0] dump_user_range+0x20c/0xd30 [ 97.339687][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 97.344998][ C0] ? __pfx_writenote+0x10/0x10 [ 97.349777][ C0] ? elf_core_dump+0x28d0/0x3a70 [ 97.354729][ C0] elf_core_dump+0x346a/0x3a70 [ 97.359529][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 97.364658][ C0] ? kasan_save_track+0x4f/0x80 [ 97.369542][ C0] ? do_coredump+0x4bf8/0x6720 [ 97.374335][ C0] ? vfs_coredump+0x976/0xde0 [ 97.379023][ C0] ? get_signal+0x108f/0x12c0 [ 97.383713][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 97.389464][ C0] ? irqentry_exit+0x2ba/0x910 [ 97.394256][ C0] ? asm_exc_page_fault+0x26/0x30 [ 97.399439][ C0] ? lock_acquire+0x115/0x350 [ 97.404160][ C0] ? 0xffffffffff600000 [ 97.408345][ C0] do_coredump+0x5bd1/0x6720 [ 97.412960][ C0] ? finish_task_switch+0x40e/0xc60 [ 97.418203][ C0] ? __pfx_do_coredump+0x10/0x10 [ 97.423165][ C0] ? __lock_acquire+0x747/0x2de0 [ 97.428130][ C0] ? __lock_acquire+0x747/0x2de0 [ 97.433103][ C0] ? lock_acquire+0x115/0x350 [ 97.437795][ C0] ? lock_acquire+0x115/0x350 [ 97.442491][ C0] ? __lock_acquire+0x747/0x2de0 [ 97.447459][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 97.452761][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 97.457980][ C0] ? kernel_text_address+0xa5/0xe0 [ 97.463211][ C0] ? __kernel_text_address+0xd/0x30 [ 97.468447][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 97.473509][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 97.479349][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 97.485173][ C0] ? stack_depot_save_flags+0x404/0x7f0 [ 97.490754][ C0] ? kasan_save_track+0x4f/0x80 [ 97.495716][ C0] ? kasan_save_track+0x3e/0x80 [ 97.500597][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 97.505374][ C0] ? __kmalloc_noprof+0x366/0x710 [ 97.510477][ C0] ? security_prepare_creds+0x52/0x360 [ 97.516072][ C0] ? prepare_creds+0x57d/0x820 [ 97.520842][ C0] ? vfs_coredump+0x2bd/0xde0 [ 97.525691][ C0] ? get_signal+0x108f/0x12c0 [ 97.530547][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 97.536257][ C0] ? irqentry_exit+0x2ba/0x910 [ 97.541031][ C0] ? asm_exc_page_fault+0x26/0x30 [ 97.546068][ C0] ? __lock_acquire+0x747/0x2de0 [ 97.551019][ C0] ? rcu_is_watching+0x16/0xb0 [ 97.555776][ C0] ? trace_kmalloc+0x2a/0xf0 [ 97.560367][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 97.565388][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.570586][ C0] vfs_coredump+0x976/0xde0 [ 97.575086][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 97.580128][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.585330][ C0] get_signal+0x108f/0x12c0 [ 97.589842][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 97.595382][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 97.601548][ C0] irqentry_exit+0x2ba/0x910 [ 97.606142][ C0] ? trace_irq_disable+0x3b/0x140 [ 97.611171][ C0] asm_exc_page_fault+0x26/0x30 [ 97.616014][ C0] RIP: 0033:0x7f51c5653bd7 [ 97.620448][ C0] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 97.640068][ C0] RSP: 002b:00007f51c66c4120 EFLAGS: 00010202 [ 97.646143][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f51c579e159 [ 97.654102][ C0] RDX: 00007f51c66c4140 RSI: 00007f51c66c4270 RDI: 000000000000000b [ 97.662068][ C0] RBP: 00007f51c583506b R08: 0000000000000000 R09: 0000000000000000 [ 97.670033][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 97.677993][ C0] R13: 00007f51c5a26038 R14: 00007f51c5a25fa0 R15: 00007ffe3275b998 [ 97.685975][ C0] [ 97.689994][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4564 [ 97.690013][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5992, name: syz.0.60 [ 97.690030][ C0] preempt_count: 102, expected: 0 [ 97.690040][ C0] RCU nest depth: 3, expected: 0 [ 97.690052][ C0] locks held by syz.0.60/5992: 8, last CPU#0: [ 97.690064][ C0] #0: ffff88807b594460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x976/0xde0 [ 97.690132][ C0] #1: ffff888077b95038 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c2/0xd30 [ 97.690185][ C0] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 97.690246][ C0] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 97.690298][ C0] #4: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 97.690349][ C0] #5: ffff8880750c6cd8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 97.690395][ C0] #6: ffffffff8ef5c860 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 97.690440][ C0] #7: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 97.690484][ C0] Preemption disabled at: [ 97.690489][ C0] [<0000000000000000>] 0x0 [ 97.690511][ C0] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.60 Not tainted syzkaller #0 PREEMPT(full) [ 97.690531][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.690540][ C0] Call Trace: [ 97.690548][ C0] [ 97.690556][ C0] dump_stack_lvl+0xe8/0x150 [ 97.690582][ C0] __might_resched+0x36a/0x4c0 [ 97.690611][ C0] cancel_delayed_work_sync+0x6b/0xf0 [ 97.690637][ C0] mmc_free_host+0x19/0x30 [ 97.690661][ C0] call_timer_fn+0x18d/0x5f0 [ 97.690681][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 97.690705][ C0] ? call_timer_fn+0xd5/0x5f0 [ 97.690725][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 97.690755][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.690782][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 97.690806][ C0] __run_timer_base+0x652/0x8b0 [ 97.690847][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 97.690880][ C0] ? ktime_get+0x1f5/0x220 [ 97.690914][ C0] ? lapic_next_event+0x11/0x20 [ 97.690949][ C0] run_timer_softirq+0xb7/0x170 [ 97.690978][ C0] handle_softirqs+0x226/0x860 [ 97.691003][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 97.691030][ C0] __irq_exit_rcu+0xcb/0x220 [ 97.691053][ C0] irq_exit_rcu+0x9/0x30 [ 97.691073][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 97.691103][ C0] [ 97.691110][ C0] [ 97.691117][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 97.691140][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 97.691169][ C0] Code: ff ff ff e8 90 f9 52 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 f4 18 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 ff 05 56 0a cc 48 8d 3d 27 8f fb [ 97.691186][ C0] RSP: 0018:ffffc900054462e0 EFLAGS: 00000292 [ 97.691204][ C0] RAX: 8b8efdd079480b00 RBX: 0000000000000000 RCX: 8000000000000002 [ 97.691219][ C0] RDX: 000000006e236968 RSI: ffffffff8e82b24f RDI: ffffffff8c6f0580 [ 97.691234][ C0] RBP: ffff88807ec65dc0 R08: ffffffff8244115a R09: 0000000000000000 [ 97.691248][ C0] R10: dffffc0000000000 R11: fffff9400032ed09 R12: ffffffff8ef5c860 [ 97.691262][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 97.691281][ C0] ? pfn_valid+0xba/0x490 [ 97.691305][ C0] ? pfn_valid+0xba/0x490 [ 97.691323][ C0] pfn_valid+0xd6/0x490 [ 97.691338][ C0] ? pfn_valid+0xba/0x490 [ 97.691355][ C0] page_table_check_set+0x23/0x590 [ 97.691373][ C0] ? __page_table_check_ptes_set+0x319/0x340 [ 97.691399][ C0] set_pte_range+0x7ef/0x840 [ 97.691431][ C0] filemap_map_pages+0xe67/0x2170 [ 97.691482][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 97.691514][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 97.691538][ C0] ? lock_acquire+0x115/0x350 [ 97.691570][ C0] ? lock_acquire+0x115/0x350 [ 97.691599][ C0] ? do_pte_missing+0x140c/0x34b0 [ 97.691625][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 97.691648][ C0] ? do_pte_missing+0x140c/0x34b0 [ 97.691675][ C0] do_pte_missing+0x20ae/0x34b0 [ 97.691712][ C0] ? handle_mm_fault+0xf1/0x3750 [ 97.691739][ C0] handle_mm_fault+0x1a53/0x3750 [ 97.691773][ C0] ? handle_mm_fault+0xf1/0x3750 [ 97.691808][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 97.691832][ C0] ? follow_page_pte+0x73b/0xf10 [ 97.691864][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 97.691906][ C0] __get_user_pages+0x1670/0x2750 [ 97.691955][ C0] get_dump_page+0x1b5/0x410 [ 97.691977][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 97.691997][ C0] ? dump_user_range+0x1c2/0xd30 [ 97.692017][ C0] ? down_read_killable+0x1b6/0x3b0 [ 97.692038][ C0] ? iov_iter_bvec+0xb8/0x180 [ 97.692065][ C0] dump_user_range+0x20c/0xd30 [ 97.692102][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 97.692135][ C0] ? __pfx_writenote+0x10/0x10 [ 97.692160][ C0] ? elf_core_dump+0x28d0/0x3a70 [ 97.692188][ C0] elf_core_dump+0x346a/0x3a70 [ 97.692229][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 97.692250][ C0] ? kasan_save_track+0x4f/0x80 [ 97.692280][ C0] ? do_coredump+0x4bf8/0x6720 [ 97.692300][ C0] ? vfs_coredump+0x976/0xde0 [ 97.692318][ C0] ? get_signal+0x108f/0x12c0 [ 97.692339][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 97.692363][ C0] ? irqentry_exit+0x2ba/0x910 [ 97.692390][ C0] ? asm_exc_page_fault+0x26/0x30 [ 97.692453][ C0] ? lock_acquire+0x115/0x350 [ 97.692481][ C0] ? 0xffffffffff600000 [ 97.692511][ C0] do_coredump+0x5bd1/0x6720 [ 97.692532][ C0] ? finish_task_switch+0x40e/0xc60 [ 97.692579][ C0] ? __pfx_do_coredump+0x10/0x10 [ 97.692602][ C0] ? __lock_acquire+0x747/0x2de0 [ 97.692636][ C0] ? __lock_acquire+0x747/0x2de0 [ 97.692678][ C0] ? lock_acquire+0x115/0x350 [ 97.692712][ C0] ? lock_acquire+0x115/0x350 [ 97.692743][ C0] ? __lock_acquire+0x747/0x2de0 [ 97.692778][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 97.692800][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 97.692823][ C0] ? kernel_text_address+0xa5/0xe0 [ 97.692854][ C0] ? __kernel_text_address+0xd/0x30 [ 97.692887][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 97.692927][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 97.692956][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 97.692983][ C0] ? stack_depot_save_flags+0x404/0x7f0 [ 97.693012][ C0] ? kasan_save_track+0x4f/0x80 [ 97.693038][ C0] ? kasan_save_track+0x3e/0x80 [ 97.693065][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 97.693083][ C0] ? __kmalloc_noprof+0x366/0x710 [ 97.693109][ C0] ? security_prepare_creds+0x52/0x360 [ 97.693128][ C0] ? prepare_creds+0x57d/0x820 [ 97.693156][ C0] ? vfs_coredump+0x2bd/0xde0 [ 97.693174][ C0] ? get_signal+0x108f/0x12c0 [ 97.693194][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 97.693217][ C0] ? irqentry_exit+0x2ba/0x910 [ 97.693244][ C0] ? asm_exc_page_fault+0x26/0x30 [ 97.693289][ C0] ? __lock_acquire+0x747/0x2de0 [ 97.693335][ C0] ? rcu_is_watching+0x16/0xb0 [ 97.693360][ C0] ? trace_kmalloc+0x2a/0xf0 [ 97.693396][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 97.693428][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.693459][ C0] vfs_coredump+0x976/0xde0 [ 97.693489][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 97.693540][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.693569][ C0] get_signal+0x108f/0x12c0 [ 97.693611][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 97.693640][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 97.693684][ C0] irqentry_exit+0x2ba/0x910 [ 97.693713][ C0] ? trace_irq_disable+0x3b/0x140 [ 97.693742][ C0] asm_exc_page_fault+0x26/0x30 [ 97.693756][ C0] RIP: 0033:0x7f51c5653bd7 [ 97.693773][ C0] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 97.693786][ C0] RSP: 002b:00007f51c66c4120 EFLAGS: 00010202 [ 97.693803][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f51c579e159 [ 97.693816][ C0] RDX: 00007f51c66c4140 RSI: 00007f51c66c4270 RDI: 000000000000000b [ 97.693828][ C0] RBP: 00007f51c583506b R08: 0000000000000000 R09: 0000000000000000 [ 97.693839][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 97.693849][ C0] R13: 00007f51c5a26038 R14: 00007f51c5a25fa0 R15: 00007ffe3275b998 [ 97.693876][ C0] [ 97.694475][ C0] [ 98.519984][ C0] ============================= [ 98.524835][ C0] WARNING: suspicious RCU usage [ 98.529737][ C0] syzkaller #0 Tainted: G W [ 98.535758][ C0] ----------------------------- [ 98.540625][ C0] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 98.552766][ C0] [ 98.552766][ C0] other info that might help us debug this: [ 98.552766][ C0] [ 98.563038][ C0] [ 98.563038][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 98.571337][ C0] locks held by syz.0.60/5992: 8, last CPU#0: [ 98.577866][ C0] #0: ffff88807b594460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x976/0xde0 [ 98.587112][ C0] #1: ffff888077b95038 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c2/0xd30 [ 98.596748][ C0] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 98.606875][ C0] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 98.616720][ C0] #4: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 98.626288][ C0] #5: ffff8880750c6cd8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 98.636831][ C0] #6: ffffffff8ef5c860 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 98.646290][ C0] #7: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 98.656819][ C0] [ 98.656819][ C0] stack backtrace: [ 98.662719][ C0] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.60 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.673421][ C0] Tainted: [W]=WARN [ 98.677233][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.687298][ C0] Call Trace: [ 98.690589][ C0] [ 98.693444][ C0] dump_stack_lvl+0xe8/0x150 [ 98.698058][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 98.703447][ C0] __synchronize_srcu+0x157/0x2e0 [ 98.708490][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 98.714049][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.719103][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 98.724932][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 98.730504][ C0] ? synchronize_srcu+0x20a/0x260 [ 98.735569][ C0] wakeup_source_unregister+0x129/0x3f0 [ 98.741139][ C0] mmc_host_classdev_release+0x47/0x100 [ 98.746722][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 98.752905][ C0] device_release+0xc4/0x1f0 [ 98.757523][ C0] kobject_put+0x222/0x550 [ 98.761967][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 98.766756][ C0] call_timer_fn+0x18d/0x5f0 [ 98.771367][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 98.778066][ C0] ? call_timer_fn+0xd5/0x5f0 [ 98.782758][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 98.787897][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.793107][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 98.799802][ C0] __run_timer_base+0x652/0x8b0 [ 98.804685][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 98.810091][ C0] ? ktime_get+0x1f5/0x220 [ 98.814536][ C0] ? lapic_next_event+0x11/0x20 [ 98.819431][ C0] run_timer_softirq+0xb7/0x170 [ 98.824315][ C0] handle_softirqs+0x226/0x860 [ 98.829108][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 98.833906][ C0] __irq_exit_rcu+0xcb/0x220 [ 98.838520][ C0] irq_exit_rcu+0x9/0x30 [ 98.842958][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 98.848621][ C0] [ 98.851565][ C0] [ 98.854511][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.860516][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 98.865831][ C0] Code: ff ff ff e8 90 f9 52 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 f4 18 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 ff 05 56 0a cc 48 8d 3d 27 8f fb [ 98.885460][ C0] RSP: 0018:ffffc900054462e0 EFLAGS: 00000292 [ 98.891532][ C0] RAX: 8b8efdd079480b00 RBX: 0000000000000000 RCX: 8000000000000002 [ 98.899680][ C0] RDX: 000000006e236968 RSI: ffffffff8e82b24f RDI: ffffffff8c6f0580 [ 98.907745][ C0] RBP: ffff88807ec65dc0 R08: ffffffff8244115a R09: 0000000000000000 [ 98.915888][ C0] R10: dffffc0000000000 R11: fffff9400032ed09 R12: ffffffff8ef5c860 [ 98.923939][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 98.931916][ C0] ? pfn_valid+0xba/0x490 [ 98.936254][ C0] ? pfn_valid+0xba/0x490 [ 98.940587][ C0] pfn_valid+0xd6/0x490 [ 98.944784][ C0] ? pfn_valid+0xba/0x490 [ 98.949128][ C0] page_table_check_set+0x23/0x590 [ 98.954243][ C0] ? __page_table_check_ptes_set+0x319/0x340 [ 98.960223][ C0] set_pte_range+0x7ef/0x840 [ 98.964819][ C0] filemap_map_pages+0xe67/0x2170 [ 98.969847][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 98.975041][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 98.980489][ C0] ? lock_acquire+0x115/0x350 [ 98.985167][ C0] ? lock_acquire+0x115/0x350 [ 98.989839][ C0] ? do_pte_missing+0x140c/0x34b0 [ 98.994854][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 99.000310][ C0] ? do_pte_missing+0x140c/0x34b0 [ 99.005332][ C0] do_pte_missing+0x20ae/0x34b0 [ 99.010188][ C0] ? handle_mm_fault+0xf1/0x3750 [ 99.015123][ C0] handle_mm_fault+0x1a53/0x3750 [ 99.020060][ C0] ? handle_mm_fault+0xf1/0x3750 [ 99.025086][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 99.030367][ C0] ? follow_page_pte+0x73b/0xf10 [ 99.035304][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 99.040589][ C0] __get_user_pages+0x1670/0x2750 [ 99.045629][ C0] get_dump_page+0x1b5/0x410 [ 99.050214][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 99.055319][ C0] ? dump_user_range+0x1c2/0xd30 [ 99.060250][ C0] ? down_read_killable+0x1b6/0x3b0 [ 99.065448][ C0] ? iov_iter_bvec+0xb8/0x180 [ 99.070122][ C0] dump_user_range+0x20c/0xd30 [ 99.074888][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 99.080260][ C0] ? __pfx_writenote+0x10/0x10 [ 99.085020][ C0] ? elf_core_dump+0x28d0/0x3a70 [ 99.089956][ C0] elf_core_dump+0x346a/0x3a70 [ 99.094739][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 99.099840][ C0] ? kasan_save_track+0x4f/0x80 [ 99.104690][ C0] ? do_coredump+0x4bf8/0x6720 [ 99.109443][ C0] ? vfs_coredump+0x976/0xde0 [ 99.114106][ C0] ? get_signal+0x108f/0x12c0 [ 99.118819][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 99.124574][ C0] ? irqentry_exit+0x2ba/0x910 [ 99.129351][ C0] ? asm_exc_page_fault+0x26/0x30 [ 99.134404][ C0] ? lock_acquire+0x115/0x350 [ 99.139082][ C0] ? 0xffffffffff600000 [ 99.143235][ C0] do_coredump+0x5bd1/0x6720 [ 99.147816][ C0] ? finish_task_switch+0x40e/0xc60 [ 99.153025][ C0] ? __pfx_do_coredump+0x10/0x10 [ 99.158053][ C0] ? __lock_acquire+0x747/0x2de0 [ 99.163013][ C0] ? __lock_acquire+0x747/0x2de0 [ 99.167970][ C0] ? lock_acquire+0x115/0x350 [ 99.172652][ C0] ? lock_acquire+0x115/0x350 [ 99.177332][ C0] ? __lock_acquire+0x747/0x2de0 [ 99.182274][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 99.187555][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 99.192748][ C0] ? kernel_text_address+0xa5/0xe0 [ 99.197856][ C0] ? __kernel_text_address+0xd/0x30 [ 99.203051][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.208092][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 99.213899][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 99.219702][ C0] ? stack_depot_save_flags+0x404/0x7f0 [ 99.225250][ C0] ? kasan_save_track+0x4f/0x80 [ 99.230103][ C0] ? kasan_save_track+0x3e/0x80 [ 99.234949][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 99.239700][ C0] ? __kmalloc_noprof+0x366/0x710 [ 99.244718][ C0] ? security_prepare_creds+0x52/0x360 [ 99.250339][ C0] ? prepare_creds+0x57d/0x820 [ 99.255101][ C0] ? vfs_coredump+0x2bd/0xde0 [ 99.259771][ C0] ? get_signal+0x108f/0x12c0 [ 99.264441][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 99.270155][ C0] ? irqentry_exit+0x2ba/0x910 [ 99.274915][ C0] ? asm_exc_page_fault+0x26/0x30 [ 99.279951][ C0] ? __lock_acquire+0x747/0x2de0 [ 99.284889][ C0] ? rcu_is_watching+0x16/0xb0 [ 99.289640][ C0] ? trace_kmalloc+0x2a/0xf0 [ 99.294235][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.299256][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.304458][ C0] vfs_coredump+0x976/0xde0 [ 99.308960][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 99.314002][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.319200][ C0] get_signal+0x108f/0x12c0 [ 99.323712][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 99.329254][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 99.335419][ C0] irqentry_exit+0x2ba/0x910 [ 99.340010][ C0] ? trace_irq_disable+0x3b/0x140 [ 99.345039][ C0] asm_exc_page_fault+0x26/0x30 [ 99.349877][ C0] RIP: 0033:0x7f51c5653bd7 [ 99.354286][ C0] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 99.373892][ C0] RSP: 002b:00007f51c66c4120 EFLAGS: 00010202 [ 99.379957][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f51c579e159 [ 99.387914][ C0] RDX: 00007f51c66c4140 RSI: 00007f51c66c4270 RDI: 000000000000000b [ 99.395873][ C0] RBP: 00007f51c583506b R08: 0000000000000000 R09: 0000000000000000 [ 99.403834][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 99.411833][ C0] R13: 00007f51c5a26038 R14: 00007f51c5a25fa0 R15: 00007ffe3275b998 [ 99.419832][ C0] [ 99.422984][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 99.422998][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5992, name: syz.0.60 [ 99.423013][ C0] preempt_count: 102, expected: 0 [ 99.423023][ C0] RCU nest depth: 3, expected: 0 [ 99.423033][ C0] locks held by syz.0.60/5992: 8, last CPU#0: [ 99.423045][ C0] #0: ffff88807b594460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x976/0xde0 [ 99.423107][ C0] #1: ffff888077b95038 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c2/0xd30 [ 99.423152][ C0] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 99.423199][ C0] #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 99.423248][ C0] #4: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 99.423296][ C0] #5: ffff8880750c6cd8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 99.423347][ C0] #6: ffffffff8ef5c860 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 99.423392][ C0] #7: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 99.423441][ C0] Preemption disabled at: [ 99.423446][ C0] [<0000000000000000>] 0x0 [ 99.423470][ C0] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.60 Tainted: G W syzkaller #0 PREEMPT(full) [ 99.423495][ C0] Tainted: [W]=WARN [ 99.423501][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.423511][ C0] Call Trace: [ 99.423519][ C0] [ 99.423526][ C0] dump_stack_lvl+0xe8/0x150 [ 99.423553][ C0] __might_resched+0x36a/0x4c0 [ 99.423592][ C0] __synchronize_srcu+0x1a1/0x2e0 [ 99.423632][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 99.423659][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.423693][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 99.423719][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 99.423746][ C0] ? synchronize_srcu+0x20a/0x260 [ 99.423776][ C0] wakeup_source_unregister+0x129/0x3f0 [ 99.423805][ C0] mmc_host_classdev_release+0x47/0x100 [ 99.423836][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 99.423864][ C0] device_release+0xc4/0x1f0 [ 99.423895][ C0] kobject_put+0x222/0x550 [ 99.423919][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 99.423943][ C0] call_timer_fn+0x18d/0x5f0 [ 99.423964][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 99.423988][ C0] ? call_timer_fn+0xd5/0x5f0 [ 99.424008][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 99.424039][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.424064][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 99.424092][ C0] __run_timer_base+0x652/0x8b0 [ 99.424132][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 99.424166][ C0] ? ktime_get+0x1f5/0x220 [ 99.424192][ C0] ? lapic_next_event+0x11/0x20 [ 99.424227][ C0] run_timer_softirq+0xb7/0x170 [ 99.424257][ C0] handle_softirqs+0x226/0x860 [ 99.424283][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 99.424310][ C0] __irq_exit_rcu+0xcb/0x220 [ 99.424333][ C0] irq_exit_rcu+0x9/0x30 [ 99.424353][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 99.424383][ C0] [ 99.424390][ C0] [ 99.424398][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.424424][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 99.424452][ C0] Code: ff ff ff e8 90 f9 52 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 f4 18 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 ff 05 56 0a cc 48 8d 3d 27 8f fb [ 99.424468][ C0] RSP: 0018:ffffc900054462e0 EFLAGS: 00000292 [ 99.424485][ C0] RAX: 8b8efdd079480b00 RBX: 0000000000000000 RCX: 8000000000000002 [ 99.424500][ C0] RDX: 000000006e236968 RSI: ffffffff8e82b24f RDI: ffffffff8c6f0580 [ 99.424515][ C0] RBP: ffff88807ec65dc0 R08: ffffffff8244115a R09: 0000000000000000 [ 99.424529][ C0] R10: dffffc0000000000 R11: fffff9400032ed09 R12: ffffffff8ef5c860 [ 99.424543][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 99.424562][ C0] ? pfn_valid+0xba/0x490 [ 99.424589][ C0] ? pfn_valid+0xba/0x490 [ 99.424611][ C0] pfn_valid+0xd6/0x490 [ 99.424636][ C0] ? pfn_valid+0xba/0x490 [ 99.424657][ C0] page_table_check_set+0x23/0x590 [ 99.424677][ C0] ? __page_table_check_ptes_set+0x319/0x340 [ 99.424704][ C0] set_pte_range+0x7ef/0x840 [ 99.424738][ C0] filemap_map_pages+0xe67/0x2170 [ 99.424783][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 99.424815][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 99.424838][ C0] ? lock_acquire+0x115/0x350 [ 99.424869][ C0] ? lock_acquire+0x115/0x350 [ 99.424896][ C0] ? do_pte_missing+0x140c/0x34b0 [ 99.424922][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 99.424945][ C0] ? do_pte_missing+0x140c/0x34b0 [ 99.424971][ C0] do_pte_missing+0x20ae/0x34b0 [ 99.425008][ C0] ? handle_mm_fault+0xf1/0x3750 [ 99.425036][ C0] handle_mm_fault+0x1a53/0x3750 [ 99.425070][ C0] ? handle_mm_fault+0xf1/0x3750 [ 99.425104][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 99.425126][ C0] ? follow_page_pte+0x73b/0xf10 [ 99.425158][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 99.425193][ C0] __get_user_pages+0x1670/0x2750 [ 99.425247][ C0] get_dump_page+0x1b5/0x410 [ 99.425272][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 99.425294][ C0] ? dump_user_range+0x1c2/0xd30 [ 99.425315][ C0] ? down_read_killable+0x1b6/0x3b0 [ 99.425337][ C0] ? iov_iter_bvec+0xb8/0x180 [ 99.425364][ C0] dump_user_range+0x20c/0xd30 [ 99.425400][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 99.425435][ C0] ? __pfx_writenote+0x10/0x10 [ 99.425460][ C0] ? elf_core_dump+0x28d0/0x3a70 [ 99.425489][ C0] elf_core_dump+0x346a/0x3a70 [ 99.425530][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 99.425551][ C0] ? kasan_save_track+0x4f/0x80 [ 99.425580][ C0] ? do_coredump+0x4bf8/0x6720 [ 99.425600][ C0] ? vfs_coredump+0x976/0xde0 [ 99.425625][ C0] ? get_signal+0x108f/0x12c0 [ 99.425645][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 99.425673][ C0] ? irqentry_exit+0x2ba/0x910 [ 99.425696][ C0] ? asm_exc_page_fault+0x26/0x30 [ 99.425758][ C0] ? lock_acquire+0x115/0x350 [ 99.425785][ C0] ? 0xffffffffff600000 [ 99.425817][ C0] do_coredump+0x5bd1/0x6720 [ 99.425837][ C0] ? finish_task_switch+0x40e/0xc60 [ 99.425879][ C0] ? __pfx_do_coredump+0x10/0x10 [ 99.425901][ C0] ? __lock_acquire+0x747/0x2de0 [ 99.425936][ C0] ? __lock_acquire+0x747/0x2de0 [ 99.425978][ C0] ? lock_acquire+0x115/0x350 [ 99.426011][ C0] ? lock_acquire+0x115/0x350 [ 99.426043][ C0] ? __lock_acquire+0x747/0x2de0 [ 99.426075][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 99.426096][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 99.426120][ C0] ? kernel_text_address+0xa5/0xe0 [ 99.426151][ C0] ? __kernel_text_address+0xd/0x30 [ 99.426184][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.426219][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 99.426248][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 99.426276][ C0] ? stack_depot_save_flags+0x404/0x7f0 [ 99.426304][ C0] ? kasan_save_track+0x4f/0x80 [ 99.426331][ C0] ? kasan_save_track+0x3e/0x80 [ 99.426357][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 99.426375][ C0] ? __kmalloc_noprof+0x366/0x710 [ 99.426401][ C0] ? security_prepare_creds+0x52/0x360 [ 99.426421][ C0] ? prepare_creds+0x57d/0x820 [ 99.426449][ C0] ? vfs_coredump+0x2bd/0xde0 [ 99.426466][ C0] ? get_signal+0x108f/0x12c0 [ 99.426494][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 99.426521][ C0] ? irqentry_exit+0x2ba/0x910 [ 99.426547][ C0] ? asm_exc_page_fault+0x26/0x30 [ 99.426592][ C0] ? __lock_acquire+0x747/0x2de0 [ 99.426637][ C0] ? rcu_is_watching+0x16/0xb0 [ 99.426657][ C0] ? trace_kmalloc+0x2a/0xf0 [ 99.426693][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.426726][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.426755][ C0] vfs_coredump+0x976/0xde0 [ 99.426789][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 99.426842][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.426872][ C0] get_signal+0x108f/0x12c0 [ 99.426915][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 99.426943][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 99.426989][ C0] irqentry_exit+0x2ba/0x910 [ 99.427017][ C0] ? trace_irq_disable+0x3b/0x140 [ 99.427051][ C0] asm_exc_page_fault+0x26/0x30 [ 99.427071][ C0] RIP: 0033:0x7f51c5653bd7 [ 99.427090][ C0] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 99.427105][ C0] RSP: 002b:00007f51c66c4120 EFLAGS: 00010202 [ 99.427122][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f51c579e159 [ 99.427136][ C0] RDX: 00007f51c66c4140 RSI: 00007f51c66c4270 RDI: 000000000000000b [ 99.427150][ C0] RBP: 00007f51c583506b R08: 0000000000000000 R09: 0000000000000000 [ 99.427162][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 99.427173][ C0] R13: 00007f51c5a26038 R14: 00007f51c5a25fa0 R15: 00007ffe3275b998 [ 99.427200][ C0] [ 99.427261][ C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffc90005440000, but annotated. [ 99.427918][ C0] ------------[ cut here ]------------ [ 99.427929][ C0] 1 [ 99.427940][ C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: syz.0.60/5992 [ 100.329839][ C0] Modules linked in: [ 100.333734][ C0] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.60 Tainted: G W syzkaller #0 PREEMPT(full) [ 100.344402][ C0] Tainted: [W]=WARN [ 100.348196][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.358326][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 100.364221][ C0] Code: cc cc cc 41 ff c7 44 89 3d 99 0b 05 16 48 c7 c1 80 0e 6f 8c 48 c7 c7 e0 0e 6f 8c 84 c0 48 0f 45 f9 48 89 de e8 8d ad 32 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 91 e8 84 0a 3b 05 8f [ 100.383817][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 100.389882][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 8b8efdd079480b00 [ 100.397849][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 100.405810][ C0] RBP: ffff88807ec65de0 R08: 0000000000000100 R09: 1ffff92000000ee4 [ 100.413773][ C0] R10: dffffc0000000000 R11: fffff52000000ee5 R12: 1ffff92000000f4c [ 100.421732][ C0] R13: ffff88807b315a10 R14: dffffc0000000000 R15: 0000000000000001 [ 100.429695][ C0] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 100.438613][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.445199][ C0] CR2: 000000110c404725 CR3: 000000002ea8e000 CR4: 00000000003526f0 [ 100.453179][ C0] Call Trace: [ 100.456455][ C0] [ 100.459296][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 100.464846][ C0] __synchronize_srcu+0x1d0/0x2e0 [ 100.469874][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 100.475415][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.480472][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.486284][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 100.491831][ C0] ? synchronize_srcu+0x20a/0x260 [ 100.496853][ C0] wakeup_source_unregister+0x129/0x3f0 [ 100.502401][ C0] mmc_host_classdev_release+0x47/0x100 [ 100.507946][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 100.514097][ C0] device_release+0xc4/0x1f0 [ 100.518690][ C0] kobject_put+0x222/0x550 [ 100.523099][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 100.527853][ C0] call_timer_fn+0x18d/0x5f0 [ 100.532435][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 100.539101][ C0] ? call_timer_fn+0xd5/0x5f0 [ 100.543770][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 100.548882][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.554083][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 100.560760][ C0] __run_timer_base+0x652/0x8b0 [ 100.565620][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 100.570991][ C0] ? ktime_get+0x1f5/0x220 [ 100.575406][ C0] ? lapic_next_event+0x11/0x20 [ 100.580254][ C0] run_timer_softirq+0xb7/0x170 [ 100.585107][ C0] handle_softirqs+0x226/0x860 [ 100.589869][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 100.594634][ C0] __irq_exit_rcu+0xcb/0x220 [ 100.599221][ C0] irq_exit_rcu+0x9/0x30 [ 100.603452][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 100.609087][ C0] [ 100.612017][ C0] [ 100.614936][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.620906][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 100.626192][ C0] Code: ff ff ff e8 90 f9 52 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 f4 18 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 ff 05 56 0a cc 48 8d 3d 27 8f fb [ 100.645786][ C0] RSP: 0018:ffffc900054462e0 EFLAGS: 00000292 [ 100.651846][ C0] RAX: 8b8efdd079480b00 RBX: 0000000000000000 RCX: 8000000000000002 [ 100.659811][ C0] RDX: 000000006e236968 RSI: ffffffff8e82b24f RDI: ffffffff8c6f0580 [ 100.667778][ C0] RBP: ffff88807ec65dc0 R08: ffffffff8244115a R09: 0000000000000000 [ 100.675737][ C0] R10: dffffc0000000000 R11: fffff9400032ed09 R12: ffffffff8ef5c860 [ 100.683788][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 100.691757][ C0] ? pfn_valid+0xba/0x490 [ 100.696098][ C0] ? pfn_valid+0xba/0x490 [ 100.700445][ C0] pfn_valid+0xd6/0x490 [ 100.704601][ C0] ? pfn_valid+0xba/0x490 [ 100.708933][ C0] page_table_check_set+0x23/0x590 [ 100.714042][ C0] ? __page_table_check_ptes_set+0x319/0x340 [ 100.720023][ C0] set_pte_range+0x7ef/0x840 [ 100.724668][ C0] filemap_map_pages+0xe67/0x2170 [ 100.729712][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 100.734920][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 100.740385][ C0] ? lock_acquire+0x115/0x350 [ 100.745076][ C0] ? lock_acquire+0x115/0x350 [ 100.749757][ C0] ? do_pte_missing+0x140c/0x34b0 [ 100.754785][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 100.760238][ C0] ? do_pte_missing+0x140c/0x34b0 [ 100.765258][ C0] do_pte_missing+0x20ae/0x34b0 [ 100.770119][ C0] ? handle_mm_fault+0xf1/0x3750 [ 100.775061][ C0] handle_mm_fault+0x1a53/0x3750 [ 100.779999][ C0] ? handle_mm_fault+0xf1/0x3750 [ 100.784955][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 100.790253][ C0] ? follow_page_pte+0x73b/0xf10 [ 100.795199][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 100.800490][ C0] __get_user_pages+0x1670/0x2750 [ 100.805536][ C0] get_dump_page+0x1b5/0x410 [ 100.810120][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 100.815223][ C0] ? dump_user_range+0x1c2/0xd30 [ 100.820156][ C0] ? down_read_killable+0x1b6/0x3b0 [ 100.825373][ C0] ? iov_iter_bvec+0xb8/0x180 [ 100.830046][ C0] dump_user_range+0x20c/0xd30 [ 100.834818][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 100.840104][ C0] ? __pfx_writenote+0x10/0x10 [ 100.844872][ C0] ? elf_core_dump+0x28d0/0x3a70 [ 100.849814][ C0] elf_core_dump+0x346a/0x3a70 [ 100.854611][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 100.859710][ C0] ? kasan_save_track+0x4f/0x80 [ 100.864559][ C0] ? do_coredump+0x4bf8/0x6720 [ 100.869312][ C0] ? vfs_coredump+0x976/0xde0 [ 100.873977][ C0] ? get_signal+0x108f/0x12c0 [ 100.878648][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 100.884361][ C0] ? irqentry_exit+0x2ba/0x910 [ 100.889122][ C0] ? asm_exc_page_fault+0x26/0x30 [ 100.894172][ C0] ? lock_acquire+0x115/0x350 [ 100.899026][ C0] ? 0xffffffffff600000 [ 100.903182][ C0] do_coredump+0x5bd1/0x6720 [ 100.907765][ C0] ? finish_task_switch+0x40e/0xc60 [ 100.912975][ C0] ? __pfx_do_coredump+0x10/0x10 [ 100.917904][ C0] ? __lock_acquire+0x747/0x2de0 [ 100.923623][ C0] ? __lock_acquire+0x747/0x2de0 [ 100.928564][ C0] ? lock_acquire+0x115/0x350 [ 100.933240][ C0] ? lock_acquire+0x115/0x350 [ 100.937930][ C0] ? __lock_acquire+0x747/0x2de0 [ 100.942867][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 100.948140][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 100.953327][ C0] ? kernel_text_address+0xa5/0xe0 [ 100.958432][ C0] ? __kernel_text_address+0xd/0x30 [ 100.963634][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 100.968660][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 100.974464][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 100.980268][ C0] ? stack_depot_save_flags+0x404/0x7f0 [ 100.985807][ C0] ? kasan_save_track+0x4f/0x80 [ 100.990648][ C0] ? kasan_save_track+0x3e/0x80 [ 100.995488][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 101.000240][ C0] ? __kmalloc_noprof+0x366/0x710 [ 101.005259][ C0] ? security_prepare_creds+0x52/0x360 [ 101.010711][ C0] ? prepare_creds+0x57d/0x820 [ 101.015467][ C0] ? vfs_coredump+0x2bd/0xde0 [ 101.020132][ C0] ? get_signal+0x108f/0x12c0 [ 101.024796][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 101.030508][ C0] ? irqentry_exit+0x2ba/0x910 [ 101.035273][ C0] ? asm_exc_page_fault+0x26/0x30 [ 101.040305][ C0] ? __lock_acquire+0x747/0x2de0 [ 101.045254][ C0] ? rcu_is_watching+0x16/0xb0 [ 101.050011][ C0] ? trace_kmalloc+0x2a/0xf0 [ 101.054606][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.059627][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.064825][ C0] vfs_coredump+0x976/0xde0 [ 101.069346][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 101.074381][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.079575][ C0] get_signal+0x108f/0x12c0 [ 101.084088][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 101.089629][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 101.095799][ C0] irqentry_exit+0x2ba/0x910 [ 101.100392][ C0] ? trace_irq_disable+0x3b/0x140 [ 101.105431][ C0] asm_exc_page_fault+0x26/0x30 [ 101.110288][ C0] RIP: 0033:0x7f51c5653bd7 [ 101.114700][ C0] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 101.134300][ C0] RSP: 002b:00007f51c66c4120 EFLAGS: 00010202 [ 101.140364][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f51c579e159 [ 101.148326][ C0] RDX: 00007f51c66c4140 RSI: 00007f51c66c4270 RDI: 000000000000000b [ 101.156286][ C0] RBP: 00007f51c583506b R08: 0000000000000000 R09: 0000000000000000 [ 101.164251][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 101.172207][ C0] R13: 00007f51c5a26038 R14: 00007f51c5a25fa0 R15: 00007ffe3275b998 [ 101.180182][ C0] [ 101.183194][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.190465][ C0] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.60 Tainted: G W syzkaller #0 PREEMPT(full) [ 101.201126][ C0] Tainted: [W]=WARN [ 101.204915][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.215076][ C0] Call Trace: [ 101.218345][ C0] [ 101.221179][ C0] vpanic+0x56d/0xa70 [ 101.225158][ C0] ? __pfx__printk+0x10/0x10 [ 101.229738][ C0] ? __pfx_vpanic+0x10/0x10 [ 101.234242][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 101.239514][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 101.244705][ C0] panic+0xc5/0xd0 [ 101.248422][ C0] ? __pfx_panic+0x10/0x10 [ 101.252860][ C0] __warn+0x315/0x4c0 [ 101.256835][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 101.262135][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 101.267410][ C0] __report_bug+0x276/0x570 [ 101.271911][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 101.277199][ C0] ? __pfx___report_bug+0x10/0x10 [ 101.282243][ C0] ? __wake_up_klogd+0xf0/0x130 [ 101.287099][ C0] ? vprintk_emit+0x4ee/0x560 [ 101.291776][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 101.296804][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 101.302090][ C0] report_bug+0x16b/0x220 [ 101.306424][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 101.311707][ C0] ? __debug_object_init+0x2c6/0x3c0 [ 101.316984][ C0] handle_bug+0x9c/0x200 [ 101.321218][ C0] exc_invalid_op+0x1a/0x50 [ 101.325713][ C0] asm_exc_invalid_op+0x1a/0x20 [ 101.330558][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 101.336444][ C0] Code: cc cc cc 41 ff c7 44 89 3d 99 0b 05 16 48 c7 c1 80 0e 6f 8c 48 c7 c7 e0 0e 6f 8c 84 c0 48 0f 45 f9 48 89 de e8 8d ad 32 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 91 e8 84 0a 3b 05 8f [ 101.356045][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 101.362127][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 8b8efdd079480b00 [ 101.370087][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 101.378047][ C0] RBP: ffff88807ec65de0 R08: 0000000000000100 R09: 1ffff92000000ee4 [ 101.386009][ C0] R10: dffffc0000000000 R11: fffff52000000ee5 R12: 1ffff92000000f4c [ 101.393983][ C0] R13: ffff88807b315a10 R14: dffffc0000000000 R15: 0000000000000001 [ 101.401956][ C0] ? __debug_object_init+0x2c3/0x3c0 [ 101.407283][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 101.412848][ C0] __synchronize_srcu+0x1d0/0x2e0 [ 101.417871][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 101.423408][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.428434][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 101.434242][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 101.439788][ C0] ? synchronize_srcu+0x20a/0x260 [ 101.444811][ C0] wakeup_source_unregister+0x129/0x3f0 [ 101.450354][ C0] mmc_host_classdev_release+0x47/0x100 [ 101.455899][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 101.462076][ C0] device_release+0xc4/0x1f0 [ 101.466683][ C0] kobject_put+0x222/0x550 [ 101.471191][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 101.476037][ C0] call_timer_fn+0x18d/0x5f0 [ 101.480621][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 101.487307][ C0] ? call_timer_fn+0xd5/0x5f0 [ 101.491979][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 101.497085][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.502279][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 101.508982][ C0] __run_timer_base+0x652/0x8b0 [ 101.513933][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 101.519317][ C0] ? ktime_get+0x1f5/0x220 [ 101.523730][ C0] ? lapic_next_event+0x11/0x20 [ 101.528577][ C0] run_timer_softirq+0xb7/0x170 [ 101.533435][ C0] handle_softirqs+0x226/0x860 [ 101.538192][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 101.542952][ C0] __irq_exit_rcu+0xcb/0x220 [ 101.547530][ C0] irq_exit_rcu+0x9/0x30 [ 101.551763][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 101.557393][ C0] [ 101.560317][ C0] [ 101.563237][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 101.569207][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 101.574496][ C0] Code: ff ff ff e8 90 f9 52 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 f4 18 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 ff 05 56 0a cc 48 8d 3d 27 8f fb [ 101.594089][ C0] RSP: 0018:ffffc900054462e0 EFLAGS: 00000292 [ 101.600149][ C0] RAX: 8b8efdd079480b00 RBX: 0000000000000000 RCX: 8000000000000002 [ 101.608108][ C0] RDX: 000000006e236968 RSI: ffffffff8e82b24f RDI: ffffffff8c6f0580 [ 101.616068][ C0] RBP: ffff88807ec65dc0 R08: ffffffff8244115a R09: 0000000000000000 [ 101.624029][ C0] R10: dffffc0000000000 R11: fffff9400032ed09 R12: ffffffff8ef5c860 [ 101.631999][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 101.639962][ C0] ? pfn_valid+0xba/0x490 [ 101.644289][ C0] ? pfn_valid+0xba/0x490 [ 101.648606][ C0] pfn_valid+0xd6/0x490 [ 101.652752][ C0] ? pfn_valid+0xba/0x490 [ 101.657073][ C0] page_table_check_set+0x23/0x590 [ 101.662175][ C0] ? __page_table_check_ptes_set+0x319/0x340 [ 101.668438][ C0] set_pte_range+0x7ef/0x840 [ 101.673027][ C0] filemap_map_pages+0xe67/0x2170 [ 101.678058][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 101.683260][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 101.688707][ C0] ? lock_acquire+0x115/0x350 [ 101.693388][ C0] ? lock_acquire+0x115/0x350 [ 101.698066][ C0] ? do_pte_missing+0x140c/0x34b0 [ 101.703083][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 101.708530][ C0] ? do_pte_missing+0x140c/0x34b0 [ 101.713554][ C0] do_pte_missing+0x20ae/0x34b0 [ 101.718407][ C0] ? handle_mm_fault+0xf1/0x3750 [ 101.723345][ C0] handle_mm_fault+0x1a53/0x3750 [ 101.728281][ C0] ? handle_mm_fault+0xf1/0x3750 [ 101.733215][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 101.738581][ C0] ? follow_page_pte+0x73b/0xf10 [ 101.743514][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 101.748796][ C0] __get_user_pages+0x1670/0x2750 [ 101.753834][ C0] get_dump_page+0x1b5/0x410 [ 101.758416][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 101.763516][ C0] ? dump_user_range+0x1c2/0xd30 [ 101.768443][ C0] ? down_read_killable+0x1b6/0x3b0 [ 101.773631][ C0] ? iov_iter_bvec+0xb8/0x180 [ 101.778302][ C0] dump_user_range+0x20c/0xd30 [ 101.783098][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 101.788383][ C0] ? __pfx_writenote+0x10/0x10 [ 101.793143][ C0] ? elf_core_dump+0x28d0/0x3a70 [ 101.798075][ C0] elf_core_dump+0x346a/0x3a70 [ 101.802843][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 101.807939][ C0] ? kasan_save_track+0x4f/0x80 [ 101.812789][ C0] ? do_coredump+0x4bf8/0x6720 [ 101.817539][ C0] ? vfs_coredump+0x976/0xde0 [ 101.822203][ C0] ? get_signal+0x108f/0x12c0 [ 101.826864][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 101.832575][ C0] ? irqentry_exit+0x2ba/0x910 [ 101.837333][ C0] ? asm_exc_page_fault+0x26/0x30 [ 101.842381][ C0] ? lock_acquire+0x115/0x350 [ 101.847081][ C0] ? 0xffffffffff600000 [ 101.851234][ C0] do_coredump+0x5bd1/0x6720 [ 101.855822][ C0] ? finish_task_switch+0x40e/0xc60 [ 101.861034][ C0] ? __pfx_do_coredump+0x10/0x10 [ 101.865960][ C0] ? __lock_acquire+0x747/0x2de0 [ 101.870912][ C0] ? __lock_acquire+0x747/0x2de0 [ 101.875850][ C0] ? lock_acquire+0x115/0x350 [ 101.880537][ C0] ? lock_acquire+0x115/0x350 [ 101.885218][ C0] ? __lock_acquire+0x747/0x2de0 [ 101.890159][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 101.895431][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 101.900706][ C0] ? kernel_text_address+0xa5/0xe0 [ 101.905817][ C0] ? __kernel_text_address+0xd/0x30 [ 101.911014][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 101.916040][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 101.921847][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 101.927648][ C0] ? stack_depot_save_flags+0x404/0x7f0 [ 101.933536][ C0] ? kasan_save_track+0x4f/0x80 [ 101.938379][ C0] ? kasan_save_track+0x3e/0x80 [ 101.943228][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 101.947976][ C0] ? __kmalloc_noprof+0x366/0x710 [ 101.952996][ C0] ? security_prepare_creds+0x52/0x360 [ 101.958529][ C0] ? prepare_creds+0x57d/0x820 [ 101.963287][ C0] ? vfs_coredump+0x2bd/0xde0 [ 101.967951][ C0] ? get_signal+0x108f/0x12c0 [ 101.972617][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 101.978326][ C0] ? irqentry_exit+0x2ba/0x910 [ 101.983085][ C0] ? asm_exc_page_fault+0x26/0x30 [ 101.988117][ C0] ? __lock_acquire+0x747/0x2de0 [ 101.993060][ C0] ? rcu_is_watching+0x16/0xb0 [ 101.997815][ C0] ? trace_kmalloc+0x2a/0xf0 [ 102.002409][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 102.007432][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.012624][ C0] vfs_coredump+0x976/0xde0 [ 102.017125][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 102.022164][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 102.027354][ C0] get_signal+0x108f/0x12c0 [ 102.031880][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 102.037426][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 102.043760][ C0] irqentry_exit+0x2ba/0x910 [ 102.048345][ C0] ? trace_irq_disable+0x3b/0x140 [ 102.053370][ C0] asm_exc_page_fault+0x26/0x30 [ 102.058215][ C0] RIP: 0033:0x7f51c5653bd7 [ 102.062621][ C0] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 8d 4f 1b 00 48 8d 35 0a 0b 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 102.082214][ C0] RSP: 002b:00007f51c66c4120 EFLAGS: 00010202 [ 102.088276][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f51c579e159 [ 102.096242][ C0] RDX: 00007f51c66c4140 RSI: 00007f51c66c4270 RDI: 000000000000000b [ 102.104214][ C0] RBP: 00007f51c583506b R08: 0000000000000000 R09: 0000000000000000 [ 102.112177][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 102.120138][ C0] R13: 00007f51c5a26038 R14: 00007f51c5a25fa0 R15: 00007ffe3275b998 [ 102.128124][ C0] [ 102.131459][ C0] Kernel Offset: disabled [ 102.135782][ C0] Rebooting in 86400 seconds..