last executing test programs: 7.963359415s ago: executing program 2 (id=2156): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000140)={0x0, 0xc, &(0x7f0000001b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="3403010051bd50063c74d11a4ca0a563106fc32d4b990b38c35dc57d072323e60b5ccabaf479274b5d3906406d41649f86dbe124f2b2b1ee8ce5ab87c20d42e3d3efd9ea6040cdff2923e24db3f2f25473468ef9c3b9c7ed438c76e12b2baa836813a74100c7b4d7b7", @ANYRES16=r3, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRES64=r4], 0x34}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000007fc0)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async) write$tun(r5, &(0x7f0000000240)={@val={0x0, 0x9}, @void, @eth={@multicast, @random, @void, {@can={0xc, {{0x1, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "e7f59f7833957098"}}}}}, 0x22) syz_open_dev$sndctrl(&(0x7f0000000100), 0x5, 0x8100) 7.616868987s ago: executing program 1 (id=2159): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) syz_usb_control_io$sierra_net(r3, &(0x7f0000000480)={0x14, &(0x7f00000002c0)={0x20, 0x10, 0x3d, {0x3d, 0x20fe3f8fda577928, "9c49ff3a2da2ebd4929cdaf2e9045c1ff4eb104468031f726a7c1cf4a49cdf5c631f5c4d1ed3747dafcedec4625b1bbedca49f239ad9bc47b88a6f"}}, &(0x7f00000003c0)={0x0, 0x3, 0x92, @string={0x92, 0x3, "f7f7fdd1027b275aaa9e9be40d3272eebe1edd0189c53b4bb8ebb2f57ecf654e56ec5fa61b091c28153bd63c9ac1e2849e7139f834729effd8013f0d9d565b7e4e1723b1bcd29ac9bb74043a497f6cc53bb02e80ccf07aa164c2b3371773103b565d9e27ea1ba17cfb0eb14be83cced51e1e329730232d3112be98ac5c6cf3b3052288d690a934ddc046bab9f8c1aa59"}}}, &(0x7f0000001180)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="000a130000000100000000000000b2d60c629eb14a4188a91c3f321472ac37b181627832a5d7678b7769a9553f761dd4bbd419"], &(0x7f0000000c40)={0xa1, 0x1, 0x264, "2e65c62f21af273678fac5f90c0fadaa9be0e60ae6e6e5f2407b42d29bb9180c74272cb6d0748d267a80c8b873c60a3dfda242cc9116587866dfdd27b9be40c3f83b046d44f26b91046f813f883a2fa09d9afddb85ee2dd23b01758910a041be7ab835894ec8fdc50fe19243102798c0462c9193e42057e8117b12e4a85f88a35b63de0d1237862d3e38df2eaf2510e726ad3f6dc24c4cef869837d6490588baf542f32b88f4cba04932f89146c15adedb43f3712b31b5263d861f76a2c218a9eba6699b542cbb1f40ec9669585bbc2d4cabca3b0f3e180c03f9ddedc495db804b606f9fea244fc26110d13eabb14a79c3014a8c9c4b04314f23f1d5c498186ca440678f4af5d017d4e05aac3e628ee206a614f35a696530f107a8e10da13afc8f858f8b1730d6fb9fbd3d81574e91c591895d809e3b916e8c4b4baabda62db8afcbb58badee77227568fefa7a5da9ed82807ba315c54124ca72476900d75a6dd780bc4279627e576c37d011d20fdb6e60668cc72528bae6c96b01862f216c00c4669ffc100115fc85f1d7750404ada777cfe18edbf0fce98959f6bbd24e49abc1e3f5f8f731e15a53a3752fcd47d78b361c9d9eca24d8d9d2bc20b7b023c2e4a4178fac5cde2633f6a3d57663016833b307cf7ed72b6855e1227134da9154f0a0eaaaa23c4f4bb6635f772b05e8479852e6292a13ef5f9941ced50ceeda3116693ea2ae4f4f821ca5605f483362bf028845bc629efb41b954a3b679ca70fabe0534d727b2f216c29ce4bbad039677cba6c36250d2d1e9cebd4a17ebb1fbb43d48b5fd334f7d4828987d63db356e92c16b86d8182a5e38b8ab1f85afb50121d85249b09d523cfcba1e906b5478ad82f64ebd8ba2295f54bed3af0a6bcbeb1c4f958d1c5d3bb24f35669223744c3a5e69a30733311268797bdb6318913444c8a5e27b3c2580478100590b987ff602efe645bebf7ae625031d5bc82d86d00f0652436ba5ec66c7e9e8ba640031df49e4091136ab73ccb4c638ae08877dd6eca5c3979114e1b65d58a68ec050205aea797a9ee0586cef893fd14e9b35c1318da23ddb4612b21fdf8fa9cc3a601ccd49b90d5a5dafcee00476c0a2c5d7010a4b0caba9f1e1118f5a1b81a6ea0c0fd5879e4769cf6fe765caff19bb79d17f43df16c32b15624d7521934ade8e88c39cfc75783e9242997e53af984b8a5227744ddb3601d216220efb750d9906cbc41143e4287f673d0a06b86cedc1c67179f5b3aa117bdd49a2d3ff5bf47c113062b95cb0aed8f20dbb98cd21db81b23ce11a7af30e355992e01f8a8befe4d95e92eedd324a265e1e51eac26b4c72a1749956516fc767010138dd657c6f542bdaff96ab7d66b8cf32cb1420aeb353bceb2f524b4aa970b032bb74e2b04c29857e8b8283931c93781ff0d1b246e200847c236fa3953a"}, &(0x7f0000001140)={0x21, 0x0, 0x2, "9dd1"}}) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000940)=ANY=[@ANYBLOB="201100000000"], 0x0, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a80)=ANY=[@ANYBLOB="201c320000008b"], &(0x7f0000000ac0)={0x20, 0x82, 0x2, '8@'}, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) close(0x3) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000a340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xe0000000, 0x0, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r4, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001080)={&(0x7f0000000240)={0x4f, 0xffffffffffffffda, 0xf992, {0x7, 0x2b, 0x4, 0x28000000, 0x23, 0x1, 0x8000, 0x9, 0x0, 0x0, 0x10, 0x8f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r4, r6, 0x6700000000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) 7.368200446s ago: executing program 2 (id=2160): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) openat$cgroup_ro(r1, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="05178100", 0x4, 0x50, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@loopback, @private, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@initdev}, &(0x7f0000000240)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0x7, 0x9, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x66, 0x0, 0xe, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xf, 0x1c, [@rand_addr=0x64010102, @multicast1, @broadcast]}, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r8 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f00000001c0)={0x11, 0x0, r9}, 0x14) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) r11 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r11, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bind$packet(r11, &(0x7f0000000200)={0x11, 0x2, r12, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0xd8, 0x0, 0x705, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x4049) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="b1059f070ba3c75875d7de48d097ef5463127b5ebe63d5ab634d537a531ea4ee3e454db04d405acb5f194036cbd561aba9076e8fabcefe63fe43e3ac102016abd7159986f7fa724bd70a7bfc07b41110f38dd2dd12abec775a74cbc18b80c008104d4d2fe541b48fa43421416f59f2ad7d0183e3775171b3f3e472c222c053f23b2bafdb6103a2510e7730d6ce288ee7b48c197576bbfbc808acd2b9b985aed428a94169ed81e3bd83557f84b233b61c5afb3730452f34ae163c04f24909bbabd01142b4bda3968d816dd613733bf7538d541dfd0622ad8fe9accde7f1e201ed016df4959c"], 0x0) 6.464277553s ago: executing program 0 (id=2163): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000040), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000002c0)={0x28, 0x2, 0x0, 0x0, 0x3a98fa, 0x800, 0x6, 0x20b4e9}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)="ae", 0x1}, {&(0x7f0000000140)="530000008404f5884ce9fa919ac8f285da1f1425", 0x14}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.519733463s ago: executing program 1 (id=2165): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000240)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) (async, rerun: 64) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000300)='syz0\x00') (async, rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x3, @mcast1, 0x400}, {0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0xffffffffffffffff, 0x7ff}}, 0x48) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000003c0)=0x7) (async) r3 = socket$l2tp(0x2, 0x2, 0x73) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r4 = syz_open_dev$evdev(&(0x7f0000000400), 0x1, 0x4040) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000440)=""/47) (async, rerun: 32) r5 = mq_open(&(0x7f0000000480)='\x00', 0x800, 0x10, &(0x7f00000004c0)={0x100, 0x0, 0x6, 0x5}) (rerun: 32) mq_getsetattr(r5, &(0x7f0000000500)={0x7, 0x2, 0x4, 0xfffffffffffffff9}, 0x0) (async) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540), 0x8200, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000580)={'bridge_slave_1\x00'}) r7 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r7, &(0x7f00000005c0)=""/138, 0x8a, 0x2020, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r2, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast2}}}, 0x118) (async) io_setup(0xe, &(0x7f00000007c0)=0x0) io_cancel(r8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x7, 0x800, 0xffffffffffffffff, &(0x7f0000000800)="82858dc6ad189075b2a45ad05d79a4a97feecd243364e3a136970a101e75f4b0c865905d19af6e9f83df608b8a964334241dfd9ef70ac01f26f9a0c575d11edda92fa72fc3a4731231f4053df2efd3e70816c14ddf427c200dc7821d7746d8e8f627c2e01ca7311809bb6e2c0a70dfbe21e8b5184a5eb49f39c3d0e5a4f6e3b78c5236b8a1567b9ccbc90a4e5fee397d71927b56d047533d618aaa410beacd6469193deea8635dc0953d946caef7863dc7cbf18ca0ba45e0fe310360febf94044b575d4f6a6e7f1436e9596a9e95efb831e1800fa5ed67c30280d26b75d7bb393cae1f4da85c", 0xe6, 0x5, 0x0, 0x3, r6}, &(0x7f0000000940)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000980)={0x0, 0xef, "c913b035c4181bae8a3c086c640c86924a5abed25f45a61e978c48334c76e96011012b487298d06c5cc3c0cc65a90aabe22fa258c5418d73ba84730c7e066286957d9951f9969bdba70be559b9cecfccdb229b36a19e0c25eae0c5a9b82480d0dbbe91ce8d731793cefdc9c8895071eb59c2e2760f45e3c0538b7f28d4041759a0fc2cbd7f92a1fc97831b975ef7c0fbb3496e0010e0ea56522cbecb05fc4979e0f4e1aac610ff53e31ad212eb1fc71b0179556129b673245290d1a0db8650437106cb0b8c2ec572d9b4a847a139c42584203403b28ce6340e0b40a316af8df6ae349daef26af302fe28bb37ee3bba"}, &(0x7f0000000a80)=0xf7) r10 = openat$cgroup_ro(r6, &(0x7f0000000ac0)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000b00)={r9, 0x6, 0x1, 0x7, 0xc, 0x4}, 0x14) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f0000000b40)={r9, @in={{0x2, 0x4e22, @private=0xa010100}}}, 0x84) (async) ioctl$XFS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000c00)) (async) ioctl$EVIOCSREP(r10, 0x40084503, &(0x7f0000000c40)=[0x0, 0xfffff6e8]) read$FUSE(r6, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r4, 0xee00, r11) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000002cc0)={@rand_addr=0x64010100, @multicast1, 0x0, 0x4, [@dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @loopback]}, 0x20) 5.312199689s ago: executing program 1 (id=2166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000040)={0x2, 0x2}) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000140)={0x8001, 0x1, 0x3}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x24048000) 5.302797637s ago: executing program 0 (id=2167): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x5, 0x0, 0x401, 0xfffffffffffffff9, 0x100000001, 0x3, 0x4, 0x4}, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x0, 0x4) 5.190977532s ago: executing program 1 (id=2168): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000196f83be6f390379ecfd77bf9cdd87e84a8070e3868e9e89065203bcf10746d690e68e4d6f8e1336a"], 0x0) 4.33215722s ago: executing program 0 (id=2170): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000002c0)={0x28, 0x2, 0x0, 0x0, 0x3a98fa, 0x800, 0x6, 0x20b4e9}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)="ae", 0x1}, {&(0x7f0000000140)="530000008404f5884ce9fa919ac8f285da1f1425", 0x14}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x4000000) 4.117082876s ago: executing program 2 (id=2171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 4.095469747s ago: executing program 3 (id=2172): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x9], 0x25000, 0x304}) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x8000) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x9, 0x5, 0x204, 0x670f5bdb, 0x9, 0xd42, 0x200, 0xfae, r7}, 0x20) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000002c0)={0x28, 0x2, 0x0, 0x0, 0x3a98fa, 0x800, 0x1004, 0x20b4e9}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000030000000080a03a000000", @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000003d000004d6"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)="ae", 0x1}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 4.012602863s ago: executing program 2 (id=2173): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x4) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/rpc\x00') r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x0, 0x3, 0xd, "f230b9683052bf1c207c27e3fe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)) setresuid(0x0, 0xee00, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4000000190001"], 0xc4}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x9d4, 0xed, 0x7}]}) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={0x0}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x60, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x110) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000e) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) syz_usb_control_io$hid(r2, 0x0, 0x0) openat(r1, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe2342, 0x16b) syz_usb_connect(0x3, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12014101080029205705092006c7010201010902245e00020010000904"], 0x0) 3.43499482s ago: executing program 3 (id=2174): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x4, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000002c0)={0x28, 0x2, 0x0, 0x0, 0x3a98fa, 0x800, 0x6, 0x20b4e9}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)="ae", 0x1}, {&(0x7f0000000140)="530000008404f5884ce9fa919ac8f285da1f1425", 0x14}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.265481729s ago: executing program 0 (id=2175): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x67, @tick=0xfffffff1, 0x3, {0x1, 0xfe}}) close(0xffffffffffffffff) 2.248211288s ago: executing program 3 (id=2176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000040)={0x2, 0x2}) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000140)={0x8001, 0x1, 0x3}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x24048000) 2.208815745s ago: executing program 3 (id=2177): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)={0x1c, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x60, 0x0, 0x200408d1}, 0x4008094) 2.125993472s ago: executing program 3 (id=2178): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x400, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0xfc, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000000)=0x100802, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000001c0)="c80c54f7317f73b011f454ce344894672dedc19f17ff86", 0x17}, {&(0x7f0000000280)="a7e7a3ed7a5c940523abd0b13e5056c4a14c153710eee746c2ebd8c107fe50dc", 0x20}, {&(0x7f0000000300)="9d0dd4", 0x3}, {&(0x7f00000004c0)="9e1366e6df2f6a5d867145429ee30b41743479fc399612f0ae296a68de81d29e0357375bb2958aa6afbfb93e168db27d037ba1412b8f09f1cca91a8470229b6a69c98a7edacea11f380a031a2cf2dc3d6bd1cffb6edb05db5e10d7cdf1c0c11ff5c5b878dcd7f534c9b77ff9b0ce3d8cd1299cdb8cf2618ba6d64e4bb813a9c00a4cabe7e52b7f113efbb5d5afb6b0974934a74be35631eb2f517511049df98ff707da288ab9e4c40543c9de61c08ba772d3213240a6e1bbfe8b8424817e46cfbd07851911efd27c9d0742a96884e64e89f022c85dafd3a3dfaa2d769383fac5694176", 0xe3}], 0x4, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe4e1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @remote}}}], 0x98}}], 0x1, 0x4855) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1.836462245s ago: executing program 0 (id=2179): memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 8) 1.835798194s ago: executing program 1 (id=2180): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="34c2f584311b", 'vxcan1\x00'}}, 0x1e) socketpair(0x18, 0x80000, 0x0, &(0x7f0000000a40)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5b, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xcef6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2c}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10000042}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="0000050000000500010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195e", 0x2a, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r6, 0x1, 0xe5, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000001c0)={0x5}) 593.530364ms ago: executing program 2 (id=2181): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 268.572529ms ago: executing program 2 (id=2182): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="40050b00000020891a"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480), 0x0, 0x0) 142.348844ms ago: executing program 1 (id=2183): r0 = syz_usb_connect$hid(0xd0b2af70b099a574, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x16, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x1, "", [{{0x9, 0x4, 0x0, 0x3, 0x6, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x81}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000003c80)={0x0, [{0x3, 0x3010, 0x4, &(0x7f0000000340)="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"}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x91e8, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x2, 0x0, 0xffe00000, 0x0}, {0x1, 0x0, 0x8000, 0x0}, {0x2, 0x0, 0x400, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x4d7418dd, 0x0}, {0x2, 0x0, 0xfffffff9, 0x0}, {0x3, 0x0, 0xfc5f, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x7, 0x0, 0x6, 0x0}, {0x1, 0x0, 0xfff80000, 0x0}, {0x1, 0x0, 0x5, 0x0}]}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x9, 0x5d, {0x5d, 0x1, "826313612b8526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c5544fe0bc07656ef0ceefbbcd29d555ece27f7af96e090f9473341c565c969663ad2c5afe3eeba53077a6df83d6c4d2e132550164c9d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 97.776766ms ago: executing program 3 (id=2184): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x5], [0x9, 0xf8a4, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x80000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000100)="450f07c4218d6af20f09c422d128fb66ba4000edf3470faed6490fc71c4fc4e1e4c241000cc483f9dfdf0af3410fc73490", 0x31}], 0x1, 0x42, &(0x7f0000000280)=[@cstype3={0x5, 0x800}, @flags={0x3, 0x11302}], 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000002c0)={0x28, 0x2, 0x0, 0x0, 0x3a98fa, 0x800, 0x6, 0x20b4e9}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)="ae", 0x1}, {&(0x7f0000000140)="530000008404f5884ce9", 0xa}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 0 (id=2185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000040)={0x2, 0x2}) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000140)={0x8001, 0x1, 0x3}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x24048000) kernel console output (not intermixed with test programs): ne, BIOS Google 06/25/2026 [ 605.284832][T12427] Call Trace: [ 605.284839][T12427] [ 605.284845][T12427] dump_stack_lvl+0xe8/0x150 [ 605.284872][T12427] should_fail_ex+0x467/0x600 [ 605.284897][T12427] should_failslab+0xa8/0x100 [ 605.284913][T12427] ? __kernfs_new_node+0xe7/0xa70 [ 605.284932][T12427] kmem_cache_alloc_noprof+0x9e/0x680 [ 605.284956][T12427] ? __kernfs_new_node+0xe7/0xa70 [ 605.284979][T12427] __kernfs_new_node+0xe7/0xa70 [ 605.284997][T12427] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 605.285014][T12427] ? lockdep_hardirqs_on+0x7a/0x110 [ 605.285033][T12427] ? __pfx___kernfs_new_node+0x10/0x10 [ 605.285050][T12427] ? kernfs_root+0x1c/0x230 [ 605.285071][T12427] ? kernfs_root+0x1c/0x230 [ 605.285086][T12427] ? kernfs_root+0x1c/0x230 [ 605.285101][T12427] ? kernfs_root+0x1c/0x230 [ 605.285120][T12427] kernfs_new_node+0xea/0x140 [ 605.285141][T12427] __kernfs_create_file+0x4b/0x2e0 [ 605.285164][T12427] sysfs_add_file_mode_ns+0x237/0x300 [ 605.285201][T12427] sysfs_merge_group+0x183/0x320 [ 605.285221][T12427] ? __pfx_sysfs_merge_group+0x10/0x10 [ 605.285237][T12427] ? device_add_attrs+0x5c3/0x600 [ 605.285257][T12427] ? __pfx_device_add_attrs+0x10/0x10 [ 605.285278][T12427] dpm_sysfs_add+0xd2/0x270 [ 605.285302][T12427] device_add+0x4ca/0xb80 [ 605.285321][T12427] device_create+0x269/0x300 [ 605.285342][T12427] ? string+0x28a/0x2d0 [ 605.285363][T12427] ? widen_string+0x3b/0x2a0 [ 605.285385][T12427] ? string+0x28a/0x2d0 [ 605.285406][T12427] ? __pfx_device_create+0x10/0x10 [ 605.285435][T12427] bdi_register_va+0x9c/0x7d0 [ 605.285459][T12427] super_setup_bdi_name+0xf8/0x210 [ 605.285485][T12427] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 605.285509][T12427] ? __rt_spin_lock_init+0x3e/0x50 [ 605.285556][T12427] ? __init_waitqueue_head+0xad/0x160 [ 605.285594][T12427] fuse_fill_super_common+0x624/0x10e0 [ 605.285631][T12427] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 605.285663][T12427] ? __pfx_set_anon_super_fc+0x10/0x10 [ 605.285686][T12427] ? __pfx_sget_fc+0x10/0x10 [ 605.285711][T12427] fuse_fill_super+0x98/0x120 [ 605.285730][T12427] ? __pfx_fuse_fill_super+0x10/0x10 [ 605.285749][T12427] get_tree_nodev+0xbb/0x150 [ 605.285770][T12427] fuse_get_tree+0x29d/0x3b0 [ 605.285792][T12427] vfs_get_tree+0x92/0x2a0 [ 605.285814][T12427] do_new_mount+0x319/0xdc0 [ 605.285829][T12427] ? cap_capable+0x123/0x460 [ 605.285851][T12427] ? __pfx_do_new_mount+0x10/0x10 [ 605.285868][T12427] ? ns_capable+0x89/0xe0 [ 605.285887][T12427] ? path_mount+0x647/0x1050 [ 605.285905][T12427] ? user_path_at+0xd4/0x160 [ 605.285931][T12427] __se_sys_mount+0x31d/0x420 [ 605.285952][T12427] ? __pfx___se_sys_mount+0x10/0x10 [ 605.285972][T12427] ? __x64_sys_mount+0x20/0xc0 [ 605.285990][T12427] do_syscall_64+0x17b/0x530 [ 605.286007][T12427] ? irqentry_exit+0x10f/0x8f0 [ 605.286022][T12427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.286040][T12427] ? clear_bhb_loop+0x40/0x90 [ 605.286060][T12427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.286077][T12427] RIP: 0033:0x7ff63400de59 [ 605.286092][T12427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.286106][T12427] RSP: 002b:00007ff632266028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 605.286124][T12427] RAX: ffffffffffffffda RBX: 00007ff634295fa0 RCX: 00007ff63400de59 [ 605.286137][T12427] RDX: 0000200000002100 RSI: 0000200000000000 RDI: 0000000000000000 [ 605.286148][T12427] RBP: 00007ff632266090 R08: 0000200000000080 R09: 0000000000000000 [ 605.286159][T12427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 605.286175][T12427] R13: 00007ff634296038 R14: 00007ff634295fa0 R15: 00007fff06c647c8 [ 605.286200][T12427] [ 605.421633][ T5817] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 605.711443][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 605.765418][ T5817] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.765454][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.765477][ T5817] usb 1-1: Product: Ứꘅ醀ê…ڣᖎ㸠ˡ꛴縙Ⲻꪩ孑䔴ꕱᆳ쿧ᮭçŒì¤¶î¢¸ï±á¼¹î„’ꕈ覢㰀⿗ࡹ䘑éŽã­©ë‚¹ë›è®¨ïˆ‘ᇥ椋驭ë ã£€î˜ƒç¶î”ºè’®ê¨ç™«á­å¿Žæ­½â¼å­’㾇벢蔳燮ï¼ï‰¶î¹à¶ˆç¬‰å‘›ì¾œä±†ã‡ˆì¦¬èµ•é³å³¡ [ 605.765507][ T5817] usb 1-1: Manufacturer: 駄픒澈轎촀︽ [ 605.765525][ T5817] usb 1-1: SerialNumber: syz [ 606.063225][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 606.185205][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1895'. [ 606.388947][ T10] snd-usb-audio 4-1:3.3: probe with driver snd-usb-audio failed with error -2 [ 606.389748][ T5817] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 606.390299][ T5817] usb 1-1: 2:1 : unknown format tag 0xee77 is detected. processed as MPEG. [ 606.390326][ T5817] usb 1-1: found format II with max.bitrate = 1025, frame size=3 [ 606.390348][ T5817] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 606.439809][ T10] usb 4-1: USB disconnect, device number 97 [ 606.514221][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.515322][T12441] FAULT_INJECTION: forcing a failure. [ 606.515322][T12441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 606.515358][T12441] CPU: 0 UID: 0 PID: 12441 Comm: syz.2.1896 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 606.515386][T12441] Tainted: [L]=SOFTLOCKUP [ 606.515393][T12441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 606.515405][T12441] Call Trace: [ 606.515413][T12441] [ 606.515423][T12441] dump_stack_lvl+0xe8/0x150 [ 606.515457][T12441] should_fail_ex+0x467/0x600 [ 606.515487][T12441] prepare_alloc_pages+0x223/0x650 [ 606.515524][T12441] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 606.515564][T12441] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 606.515599][T12441] ? __alloc_frozen_pages_noprof+0x2a9/0x5b0 [ 606.515638][T12441] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 606.515678][T12441] ? __pfx_policy_nodemask+0x10/0x10 [ 606.515700][T12441] ? lockdep_hardirqs_on+0x7a/0x110 [ 606.515738][T12441] __alloc_pages_noprof+0x10/0x100 [ 606.515774][T12441] alloc_pages_bulk_noprof+0x681/0x890 [ 606.515811][T12441] ? alloc_pages_mpol+0x11b/0x280 [ 606.515836][T12441] ? alloc_pages_noprof+0x161/0x2f0 [ 606.515865][T12441] __kasan_populate_vmalloc+0xb7/0x1c0 [ 606.515898][T12441] ? rt_spin_unlock+0x163/0x200 [ 606.515940][T12441] alloc_vmap_area+0xd1a/0x1420 [ 606.515985][T12441] ? __pfx_alloc_vmap_area+0x10/0x10 [ 606.516015][T12441] ? __kmalloc_cache_node_noprof+0x459/0x670 [ 606.516050][T12441] ? __get_vm_area_node+0x136/0x300 [ 606.516078][T12441] ? __get_vm_area_node+0x136/0x300 [ 606.516112][T12441] __get_vm_area_node+0x1f2/0x300 [ 606.516150][T12441] __vmalloc_node_range_noprof+0x34e/0x1560 [ 606.516183][T12441] ? copy_process+0x820/0x43f0 [ 606.516214][T12441] ? percpu_ref_get_many+0x19/0x140 [ 606.516244][T12441] ? __memcg_slab_post_alloc_hook+0x4d6/0xf60 [ 606.516286][T12441] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 606.516318][T12441] ? trace_kmem_cache_alloc+0x29/0xe0 [ 606.516349][T12441] ? memcpy_and_pad+0x48/0x80 [ 606.516380][T12441] __vmalloc_node_noprof+0xc2/0x100 [ 606.516419][T12441] ? copy_process+0x820/0x43f0 [ 606.516447][T12441] ? copy_process+0x820/0x43f0 [ 606.516473][T12441] dup_task_struct+0x2a0/0x8e0 [ 606.516497][T12441] ? rt_spin_unlock+0x163/0x200 [ 606.516531][T12441] copy_process+0x820/0x43f0 [ 606.516589][T12441] ? __pfx_copy_process+0x10/0x10 [ 606.516627][T12441] vhost_task_create+0x1f9/0x380 [ 606.516661][T12441] ? look_up_lock_class+0x57/0x110 [ 606.516683][T12441] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 606.516708][T12441] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 606.516735][T12441] ? __pfx_vhost_task_create+0x10/0x10 [ 606.516776][T12441] ? __pfx_vhost_task_fn+0x10/0x10 [ 606.516813][T12441] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 606.516837][T12441] ? lockdep_hardirqs_on+0x7a/0x110 [ 606.516860][T12441] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 606.516884][T12441] ? mutex_lock_nested+0x152/0x1d0 [ 606.516923][T12441] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 606.516955][T12441] kvm_mmu_post_init_vm+0x147/0x2b0 [ 606.516986][T12441] kvm_arch_vcpu_ioctl_run+0x7c/0x1920 [ 606.517024][T12441] ? rt_write_unlock+0x19c/0x360 [ 606.517067][T12441] kvm_vcpu_ioctl+0xa64/0xfe0 [ 606.517111][T12441] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 606.517148][T12441] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 606.517170][T12441] ? lockdep_hardirqs_on+0x7a/0x110 [ 606.517212][T12441] ? __fget_files+0x2a/0x420 [ 606.517242][T12441] ? __fget_files+0x3a8/0x420 [ 606.517265][T12441] ? __fget_files+0x2a/0x420 [ 606.517293][T12441] ? bpf_lsm_file_ioctl+0x9/0x20 [ 606.517329][T12441] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 606.517366][T12441] __se_sys_ioctl+0xff/0x170 [ 606.517400][T12441] do_syscall_64+0x17b/0x530 [ 606.517423][T12441] ? irqentry_exit+0x10f/0x8f0 [ 606.517444][T12441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.517468][T12441] ? clear_bhb_loop+0x40/0x90 [ 606.517499][T12441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.517523][T12441] RIP: 0033:0x7ff63400de59 [ 606.517545][T12441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.517565][T12441] RSP: 002b:00007ff632245028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.517590][T12441] RAX: ffffffffffffffda RBX: 00007ff634296090 RCX: 00007ff63400de59 [ 606.517607][T12441] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 606.517622][T12441] RBP: 00007ff632245090 R08: 0000000000000000 R09: 0000000000000000 [ 606.517636][T12441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.517650][T12441] R13: 00007ff634296128 R14: 00007ff634296090 R15: 00007fff06c647c8 [ 606.517688][T12441] [ 606.519736][T12441] syz.2.1896: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 606.519813][T12441] CPU: 0 UID: 0 PID: 12441 Comm: syz.2.1896 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 606.519842][T12441] Tainted: [L]=SOFTLOCKUP [ 606.519850][T12441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 606.519865][T12441] Call Trace: [ 606.519874][T12441] [ 606.519884][T12441] dump_stack_lvl+0xe8/0x150 [ 606.519928][T12441] warn_alloc+0x24c/0x270 [ 606.519963][T12441] ? kasan_quarantine_put+0xbb/0x1f0 [ 606.520000][T12441] ? __pfx_warn_alloc+0x10/0x10 [ 606.520036][T12441] ? __get_vm_area_node+0x20b/0x300 [ 606.520071][T12441] ? __get_vm_area_node+0x20b/0x300 [ 606.520107][T12441] __vmalloc_node_range_noprof+0x376/0x1560 [ 606.520146][T12441] ? percpu_ref_get_many+0x19/0x140 [ 606.520177][T12441] ? __memcg_slab_post_alloc_hook+0x4d6/0xf60 [ 606.520222][T12441] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 606.520254][T12441] ? trace_kmem_cache_alloc+0x29/0xe0 [ 606.520285][T12441] ? memcpy_and_pad+0x48/0x80 [ 606.520317][T12441] __vmalloc_node_noprof+0xc2/0x100 [ 606.520382][T12441] ? copy_process+0x820/0x43f0 [ 606.520404][T12441] ? copy_process+0x820/0x43f0 [ 606.520431][T12441] dup_task_struct+0x2a0/0x8e0 [ 606.520455][T12441] ? rt_spin_unlock+0x163/0x200 [ 606.520504][T12441] copy_process+0x820/0x43f0 [ 606.520562][T12441] ? __pfx_copy_process+0x10/0x10 [ 606.520601][T12441] vhost_task_create+0x1f9/0x380 [ 606.520633][T12441] ? look_up_lock_class+0x57/0x110 [ 606.520655][T12441] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 606.520681][T12441] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 606.520708][T12441] ? __pfx_vhost_task_create+0x10/0x10 [ 606.520748][T12441] ? __pfx_vhost_task_fn+0x10/0x10 [ 606.520785][T12441] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 606.520809][T12441] ? lockdep_hardirqs_on+0x7a/0x110 [ 606.520831][T12441] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 606.520854][T12441] ? mutex_lock_nested+0x152/0x1d0 [ 606.520885][T12441] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 606.520922][T12441] kvm_mmu_post_init_vm+0x147/0x2b0 [ 606.520951][T12441] kvm_arch_vcpu_ioctl_run+0x7c/0x1920 [ 606.520990][T12441] ? rt_write_unlock+0x19c/0x360 [ 606.521030][T12441] kvm_vcpu_ioctl+0xa64/0xfe0 [ 606.521073][T12441] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 606.521109][T12441] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 606.521132][T12441] ? lockdep_hardirqs_on+0x7a/0x110 [ 606.521173][T12441] ? __fget_files+0x2a/0x420 [ 606.521203][T12441] ? __fget_files+0x3a8/0x420 [ 606.521227][T12441] ? __fget_files+0x2a/0x420 [ 606.521255][T12441] ? bpf_lsm_file_ioctl+0x9/0x20 [ 606.521292][T12441] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 606.521328][T12441] __se_sys_ioctl+0xff/0x170 [ 606.521362][T12441] do_syscall_64+0x17b/0x530 [ 606.521384][T12441] ? irqentry_exit+0x10f/0x8f0 [ 606.521405][T12441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.521429][T12441] ? clear_bhb_loop+0x40/0x90 [ 606.521457][T12441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.521480][T12441] RIP: 0033:0x7ff63400de59 [ 606.521503][T12441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.521523][T12441] RSP: 002b:00007ff632245028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.521547][T12441] RAX: ffffffffffffffda RBX: 00007ff634296090 RCX: 00007ff63400de59 [ 606.521565][T12441] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 606.521580][T12441] RBP: 00007ff632245090 R08: 0000000000000000 R09: 0000000000000000 [ 606.521596][T12441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.521610][T12441] R13: 00007ff634296128 R14: 00007ff634296090 R15: 00007fff06c647c8 [ 606.521647][T12441] [ 606.528306][T12441] Mem-Info: [ 606.528345][T12441] active_anon:72282 inactive_anon:0 isolated_anon:0 [ 606.528345][T12441] active_file:0 inactive_file:22168 isolated_file:0 [ 606.528345][T12441] unevictable:768 dirty:52 writeback:21 [ 606.528345][T12441] slab_reclaimable:12630 slab_unreclaimable:96853 [ 606.528345][T12441] mapped:26007 shmem:67103 pagetables:1306 [ 606.528345][T12441] sec_pagetables:0 bounce:0 [ 606.528345][T12441] kernel_misc_reclaimable:0 [ 606.528345][T12441] free:1274897 free_pcp:4890 free_cma:0 [ 606.528482][T12441] Node 0 active_anon:289128kB inactive_anon:0kB active_file:0kB inactive_file:88444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103936kB dirty:208kB writeback:84kB shmem:266876kB kernel_stack:14280kB pagetables:5088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 606.528618][T12441] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 606.528759][T12441] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.528969][T12441] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 606.529083][T12441] Node 0 DMA32 free:1162584kB boost:0kB min:3908kB low:6428kB high:8948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:289128kB inactive_anon:0kB active_file:0kB inactive_file:88444kB unevictable:1536kB writepending:292kB zspages:0kB present:3129332kB managed:2550076kB mlocked:0kB bounce:0kB free_pcp:19560kB local_pcp:14284kB free_cma:0kB [ 606.529260][T12441] lowmem_reserve[]: 0 0 0 0 0 [ 606.529392][T12441] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:552kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.529546][T12441] lowmem_reserve[]: 0 0 0 0 0 [ 606.529637][T12441] Node 1 Normal free:3921644kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.544344][T12441] lowmem_reserve[]: 0 0 0 0 0 [ 606.544461][T12441] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 606.544808][T12441] Node 0 DMA32: 1036*4kB (UME) 524*8kB (UME) 24*16kB (UME) 177*32kB (UME) 89*64kB (UME) 39*128kB (UM) 11*256kB (UME) 4*512kB (UM) 0*1024kB 3*2048kB (UM) 275*4096kB (UM) = 1162480kB [ 606.545300][T12441] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 606.545622][T12441] Node 1 Normal: 5*4kB (UM) 1*8kB (U) 23*16kB (UM) 7*32kB (UM) 8*64kB (UM) 5*128kB (UM) 2*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 956*4096kB (M) = 3921644kB [ 606.564498][T12441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.564554][T12441] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 606.564600][T12441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.564652][T12441] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 606.564737][T12441] 89267 total pagecache pages [ 606.564803][T12441] 0 pages in swap cache [ 606.564833][T12441] Free swap = 124996kB [ 606.564863][T12441] Total swap = 124996kB [ 606.564894][T12441] 2097051 pages RAM [ 606.564926][T12441] 0 pages HighMem/MovableOnly [ 606.564975][T12441] 427780 pages reserved [ 606.565004][T12441] 0 pages cma reserved [ 607.871518][ T5817] usb 1-1: USB disconnect, device number 121 [ 608.027374][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 608.178892][T12450] syzkaller1: entered promiscuous mode [ 608.178920][T12450] syzkaller1: entered allmulticast mode [ 608.206336][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 608.490901][ T5817] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 608.641290][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 608.668253][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.668289][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.668331][ T5817] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 608.668355][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.724605][ T5817] usb 4-1: config 0 descriptor?? [ 608.738019][ T5817] hub 4-1:0.0: USB hub found [ 608.968176][ T5817] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 609.429583][T12469] tmpfs: Invalid gid '0x00000000ffffffff' [ 609.696644][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1910'. [ 609.717683][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 609.869384][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 609.871802][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 609.871832][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 609.875998][ T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 609.876027][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.876045][ T9] usb 3-1: Product: syz [ 609.876058][ T9] usb 3-1: Manufacturer: syz [ 609.876072][ T9] usb 3-1: SerialNumber: syz [ 609.951616][ T9] usb 3-1: config 0 descriptor?? [ 610.494604][ T5817] usbhid 4-1:0.0: can't add hid device: -71 [ 610.494699][ T5817] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 610.520192][ T5817] usb 4-1: USB disconnect, device number 98 [ 611.094395][T12493] syzkaller1: entered promiscuous mode [ 611.094414][T12493] syzkaller1: entered allmulticast mode [ 611.802086][ T8821] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 611.950474][ T8821] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 611.950514][ T8821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 611.950551][ T8821] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 611.950569][ T8821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.968854][ T8821] usb 4-1: config 0 descriptor?? [ 611.970737][T12496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 612.405101][ T8821] razer 0003:1532:010D.001D: unknown main item tag 0x0 [ 612.405142][ T8821] razer 0003:1532:010D.001D: unknown main item tag 0x0 [ 612.405171][ T8821] razer 0003:1532:010D.001D: unknown main item tag 0x0 [ 612.405200][ T8821] razer 0003:1532:010D.001D: unknown main item tag 0x0 [ 612.405228][ T8821] razer 0003:1532:010D.001D: unknown main item tag 0x0 [ 612.405257][ T8821] razer 0003:1532:010D.001D: unknown main item tag 0x0 [ 612.405285][ T8821] razer 0003:1532:010D.001D: unknown main item tag 0x0 [ 612.405314][ T8821] razer 0003:1532:010D.001D: unknown main item tag 0x0 [ 612.405343][ T8821] razer 0003:1532:010D.001D: unknown main item tag 0x0 [ 612.405371][ T8821] razer 0003:1532:010D.001D: unknown main item tag 0x0 [ 612.410090][ T8821] razer 0003:1532:010D.001D: unexpected long global item [ 612.411140][ T8821] razer 0003:1532:010D.001D: probe with driver razer failed with error -22 [ 612.475231][ T8821] usb 3-1: USB disconnect, device number 98 [ 612.649237][ T5817] usb 4-1: USB disconnect, device number 99 [ 613.329459][T12523] syzkaller1: entered promiscuous mode [ 613.329488][T12523] syzkaller1: entered allmulticast mode [ 614.517241][ T9] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 614.517457][ T199] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 614.667081][ T199] usb 3-1: device descriptor read/64, error -71 [ 614.670054][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.670096][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.670125][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 614.670142][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.676602][ T9] usb 1-1: config 0 descriptor?? [ 614.936168][ T199] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 615.076816][ T199] usb 3-1: device descriptor read/64, error -71 [ 615.197620][ T199] usb usb3-port1: attempt power cycle [ 615.243492][T12550] FAULT_INJECTION: forcing a failure. [ 615.243492][T12550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.243534][T12550] CPU: 1 UID: 0 PID: 12550 Comm: syz.3.1932 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 615.243568][T12550] Tainted: [L]=SOFTLOCKUP [ 615.243576][T12550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 615.243589][T12550] Call Trace: [ 615.243599][T12550] [ 615.243610][T12550] dump_stack_lvl+0xe8/0x150 [ 615.243643][T12550] should_fail_ex+0x467/0x600 [ 615.243679][T12550] _copy_to_user+0x31/0xb0 [ 615.243704][T12550] simple_read_from_buffer+0xe1/0x170 [ 615.243735][T12550] proc_fail_nth_read+0x1be/0x230 [ 615.243765][T12550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.243794][T12550] ? rw_verify_area+0x250/0x4d0 [ 615.243833][T12550] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.243857][T12550] vfs_read+0x219/0xa90 [ 615.243893][T12550] ? __pfx_vfs_read+0x10/0x10 [ 615.243924][T12550] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 615.243948][T12550] ? lockdep_hardirqs_on+0x7a/0x110 [ 615.243970][T12550] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 615.243992][T12550] ? mutex_lock_nested+0x152/0x1d0 [ 615.244019][T12550] ? fdget_pos+0x252/0x320 [ 615.244052][T12550] ksys_read+0x156/0x270 [ 615.244082][T12550] ? __pfx_ksys_read+0x10/0x10 [ 615.244120][T12550] do_syscall_64+0x17b/0x530 [ 615.244145][T12550] ? irqentry_exit+0x10f/0x8f0 [ 615.244166][T12550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.244190][T12550] ? clear_bhb_loop+0x40/0x90 [ 615.244218][T12550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.244243][T12550] RIP: 0033:0x7fdf3961e68e [ 615.244265][T12550] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 615.244285][T12550] RSP: 002b:00007fdf378b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 615.244309][T12550] RAX: ffffffffffffffda RBX: 00007fdf378b66c0 RCX: 00007fdf3961e68e [ 615.244327][T12550] RDX: 000000000000000f RSI: 00007fdf378b60a0 RDI: 0000000000000004 [ 615.244341][T12550] RBP: 00007fdf378b6090 R08: 0000000000000000 R09: 0000000000000000 [ 615.244357][T12550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.244372][T12550] R13: 00007fdf398e6038 R14: 00007fdf398e5fa0 R15: 00007ffebb2fd328 [ 615.244409][T12550] [ 615.500405][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 615.500547][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 615.506334][T12552] FAULT_INJECTION: forcing a failure. [ 615.506334][T12552] name failslab, interval 1, probability 0, space 0, times 0 [ 615.513816][T12552] CPU: 1 UID: 0 PID: 12552 Comm: syz.1.1931 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 615.513914][T12552] Tainted: [L]=SOFTLOCKUP [ 615.513936][T12552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 615.513977][T12552] Call Trace: [ 615.514008][T12552] [ 615.514040][T12552] dump_stack_lvl+0xe8/0x150 [ 615.514090][T12552] should_fail_ex+0x467/0x600 [ 615.514188][T12552] should_failslab+0xa8/0x100 [ 615.514250][T12552] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 615.514353][T12552] kmem_cache_alloc_noprof+0x9e/0x680 [ 615.514432][T12552] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 615.514516][T12552] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 615.514615][T12552] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 615.514731][T12552] mmu_topup_memory_caches+0x21/0x170 [ 615.514817][T12552] kvm_mmu_load+0x9d/0x22b0 [ 615.514872][T12552] ? kvm_msr_allowed+0x9a/0x490 [ 615.514959][T12552] ? kvm_msr_allowed+0x9a/0x490 [ 615.515052][T12552] ? kvm_msr_allowed+0x9a/0x490 [ 615.515137][T12552] ? kvm_msr_allowed+0x3f4/0x490 [ 615.515223][T12552] ? kvm_msr_allowed+0x9a/0x490 [ 615.515319][T12552] ? kvm_apic_has_interrupt+0x740/0x770 [ 615.515434][T12552] vcpu_run+0x4d91/0x7780 [ 615.515698][T12552] ? __pfx_vcpu_run+0x10/0x10 [ 615.515786][T12552] ? lock_acquire+0x115/0x350 [ 615.515918][T12552] kvm_arch_vcpu_ioctl_run+0xe23/0x1920 [ 615.516014][T12552] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1920 [ 615.516126][T12552] kvm_vcpu_ioctl+0xa64/0xfe0 [ 615.516233][T12552] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 615.516338][T12552] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 615.516376][T12552] ? lockdep_hardirqs_on+0x7a/0x110 [ 615.516414][T12552] ? __fget_files+0x2a/0x420 [ 615.516443][T12552] ? __fget_files+0x3a8/0x420 [ 615.516493][T12552] ? __fget_files+0x2a/0x420 [ 615.516564][T12552] ? bpf_lsm_file_ioctl+0x9/0x20 [ 615.516659][T12552] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 615.516754][T12552] __se_sys_ioctl+0xff/0x170 [ 615.516841][T12552] do_syscall_64+0x17b/0x530 [ 615.516925][T12552] ? irqentry_exit+0x10f/0x8f0 [ 615.516987][T12552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.517050][T12552] ? clear_bhb_loop+0x40/0x90 [ 615.517132][T12552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.517180][T12552] RIP: 0033:0x7fdccaa7de59 [ 615.517244][T12552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.517282][T12552] RSP: 002b:00007fdcc8cd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 615.517350][T12552] RAX: ffffffffffffffda RBX: 00007fdccad05fa0 RCX: 00007fdccaa7de59 [ 615.517394][T12552] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 615.517435][T12552] RBP: 00007fdcc8cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 615.517476][T12552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.517509][T12552] R13: 00007fdccad06038 R14: 00007fdccad05fa0 R15: 00007ffc677ade38 [ 615.517596][T12552] [ 615.756412][ T199] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 615.822526][ T199] usb 3-1: device descriptor read/8, error -71 [ 615.855823][ T9] usb 1-1: USB disconnect, device number 122 [ 616.078472][ T199] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 616.097551][ T199] usb 3-1: device descriptor read/8, error -71 [ 616.122445][T12560] syzkaller1: entered promiscuous mode [ 616.122464][T12560] syzkaller1: entered allmulticast mode [ 616.206552][ T199] usb usb3-port1: unable to enumerate USB device [ 616.496802][ T199] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 616.505324][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 616.645956][ T199] usb 2-1: Using ep0 maxpacket: 16 [ 616.650632][ T199] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 616.650661][ T199] usb 2-1: config 0 has no interface number 0 [ 616.650709][ T199] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.650738][ T199] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.650774][ T199] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 616.650801][ T199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.721367][ T199] usb 2-1: config 0 descriptor?? [ 617.414952][T12563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.427952][T12563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.432858][ T199] uclogic 0003:28BD:0071.001E: pen parameters not found [ 617.432898][ T199] uclogic 0003:28BD:0071.001E: interface is invalid, ignoring [ 617.523140][ T5817] usb 2-1: USB disconnect, device number 122 [ 617.527909][ T38] audit: type=1326 audit(1784065334.582:41): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12590 comm="syz.2.1941" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff63400de59 code=0x0 [ 617.581067][T12591] syz.2.1941 (12591): /proc/12590/oom_adj is deprecated, please use /proc/12590/oom_score_adj instead. [ 617.701539][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 617.701565][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 617.717093][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 617.717169][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 617.892004][T12595] FAULT_INJECTION: forcing a failure. [ 617.892004][T12595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.892041][T12595] CPU: 1 UID: 0 PID: 12595 Comm: syz.3.1942 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 617.892063][T12595] Tainted: [L]=SOFTLOCKUP [ 617.892069][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 617.892080][T12595] Call Trace: [ 617.892086][T12595] [ 617.892093][T12595] dump_stack_lvl+0xe8/0x150 [ 617.892116][T12595] should_fail_ex+0x467/0x600 [ 617.892147][T12595] _copy_from_iter+0x1d3/0x1660 [ 617.892175][T12595] ? _copy_from_iter+0x21b/0x1660 [ 617.892200][T12595] ? __pfx__copy_from_iter+0x10/0x10 [ 617.892228][T12595] ? __pfx__copy_from_iter+0x10/0x10 [ 617.892257][T12595] copy_page_from_iter+0x219/0x2d0 [ 617.892284][T12595] skb_copy_datagram_from_iter+0x2f4/0x720 [ 617.892319][T12595] packet_sendmsg+0x36b8/0x5060 [ 617.892361][T12595] ? __lock_acquire+0x6df/0x2e40 [ 617.892379][T12595] ? kstrtouint+0x6e/0xe0 [ 617.892403][T12595] ? __pfx_packet_sendmsg+0x10/0x10 [ 617.892451][T12595] ? sched_cgroup_write+0x16/0x280 [ 617.892493][T12595] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 617.892538][T12595] ? __pfx_packet_sendmsg+0x10/0x10 [ 617.892562][T12595] sock_sendmsg_nosec+0x13a/0x180 [ 617.892592][T12595] __sys_sendto+0x41e/0x5d0 [ 617.892619][T12595] ? __pfx___sys_sendto+0x10/0x10 [ 617.892660][T12595] ? __pfx_ksys_write+0x10/0x10 [ 617.892683][T12595] __x64_sys_sendto+0xde/0x100 [ 617.892708][T12595] do_syscall_64+0x17b/0x530 [ 617.892725][T12595] ? irqentry_exit+0x10f/0x8f0 [ 617.892741][T12595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.892778][T12595] ? clear_bhb_loop+0x40/0x90 [ 617.892807][T12595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.892830][T12595] RIP: 0033:0x7fdf3965de59 [ 617.892852][T12595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.892885][T12595] RSP: 002b:00007fdf378b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 617.892903][T12595] RAX: ffffffffffffffda RBX: 00007fdf398e5fa0 RCX: 00007fdf3965de59 [ 617.892915][T12595] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000004 [ 617.892926][T12595] RBP: 00007fdf378b6090 R08: 0000200000000540 R09: 0000000000000014 [ 617.892937][T12595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 617.892946][T12595] R13: 00007fdf398e6038 R14: 00007fdf398e5fa0 R15: 00007ffebb2fd328 [ 617.892971][T12595] [ 618.354059][T12599] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 618.354104][T12599] overlayfs: failed to set xattr on upper [ 618.354115][T12599] overlayfs: ...falling back to redirect_dir=nofollow. [ 618.354126][T12599] overlayfs: ...falling back to index=off. [ 618.519781][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 618.678885][T12609] syzkaller1: entered promiscuous mode [ 618.678916][T12609] syzkaller1: entered allmulticast mode [ 618.811856][T12617] nftables ruleset with unbound chain [ 619.607207][T12631] FAULT_INJECTION: forcing a failure. [ 619.607207][T12631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.607243][T12631] CPU: 1 UID: 0 PID: 12631 Comm: syz.1.1954 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 619.607268][T12631] Tainted: [L]=SOFTLOCKUP [ 619.607274][T12631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 619.607296][T12631] Call Trace: [ 619.607303][T12631] [ 619.607311][T12631] dump_stack_lvl+0xe8/0x150 [ 619.607342][T12631] should_fail_ex+0x467/0x600 [ 619.607371][T12631] _copy_from_iter+0x1d3/0x1660 [ 619.607409][T12631] ? trace_kmem_cache_alloc+0x29/0xe0 [ 619.607438][T12631] ? __pfx__copy_from_iter+0x10/0x10 [ 619.607463][T12631] ? __alloc_skb+0x276/0x7a0 [ 619.607487][T12631] ? __alloc_skb+0x276/0x7a0 [ 619.607515][T12631] ? netlink_sendmsg+0x650/0xb40 [ 619.607544][T12631] ? skb_put+0x112/0x210 [ 619.607571][T12631] netlink_sendmsg+0x6c0/0xb40 [ 619.607606][T12631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.607637][T12631] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 619.607669][T12631] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 619.607697][T12631] ? arch_stack_walk+0xfb/0x150 [ 619.607769][T12631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.607800][T12631] sock_sendmsg_nosec+0x13a/0x180 [ 619.607824][T12631] ____sys_sendmsg+0x565/0x870 [ 619.607861][T12631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.607898][T12631] ? import_iovec+0x73/0xa0 [ 619.607930][T12631] ___sys_sendmsg+0x2a5/0x360 [ 619.607959][T12631] ? __lock_acquire+0x6df/0x2e40 [ 619.607981][T12631] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.608036][T12631] ? __fget_files+0x2a/0x420 [ 619.608053][T12631] ? __fget_files+0x3a8/0x420 [ 619.608080][T12631] __x64_sys_sendmsg+0x1b7/0x290 [ 619.608109][T12631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.608152][T12631] do_syscall_64+0x17b/0x530 [ 619.608171][T12631] ? irqentry_exit+0x10f/0x8f0 [ 619.608189][T12631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.608207][T12631] ? clear_bhb_loop+0x40/0x90 [ 619.608230][T12631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.608248][T12631] RIP: 0033:0x7fdccaa7de59 [ 619.608267][T12631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.608292][T12631] RSP: 002b:00007fdcc8cd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.608313][T12631] RAX: ffffffffffffffda RBX: 00007fdccad05fa0 RCX: 00007fdccaa7de59 [ 619.608327][T12631] RDX: 0000000000040044 RSI: 0000200000000040 RDI: 0000000000000004 [ 619.608339][T12631] RBP: 00007fdcc8cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 619.608351][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.608362][T12631] R13: 00007fdccad06038 R14: 00007fdccad05fa0 R15: 00007ffc677ade38 [ 619.608390][T12631] [ 620.184244][ T5817] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 620.253484][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 620.387092][ T5817] usb 3-1: unable to get BOS descriptor or descriptor too short [ 620.401665][ T5817] usb 3-1: config 4 has an invalid interface number: 105 but max is 0 [ 620.401701][ T5817] usb 3-1: config 4 has no interface number 0 [ 620.401742][ T5817] usb 3-1: config 4 interface 105 has no altsetting 0 [ 620.445903][ T5817] usb 3-1: string descriptor 0 read error: -22 [ 620.446073][ T5817] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 620.446103][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.653264][T12650] syzkaller1: entered promiscuous mode [ 620.653298][T12650] syzkaller1: entered allmulticast mode [ 620.718733][ T199] usb 3-1: USB disconnect, device number 103 [ 621.360322][T12658] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.1962'. [ 621.910481][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'. [ 622.342261][T12680] syzkaller1: entered promiscuous mode [ 622.342289][T12680] syzkaller1: entered allmulticast mode [ 623.288759][T12692] raw_sendmsg: syz.0.1973 forgot to set AF_INET. Fix it! [ 623.415331][T12693] FAULT_INJECTION: forcing a failure. [ 623.415331][T12693] name failslab, interval 1, probability 0, space 0, times 0 [ 623.415372][T12693] CPU: 1 UID: 0 PID: 12693 Comm: syz.3.1972 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 623.415403][T12693] Tainted: [L]=SOFTLOCKUP [ 623.415412][T12693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 623.415426][T12693] Call Trace: [ 623.415434][T12693] [ 623.415452][T12693] dump_stack_lvl+0xe8/0x150 [ 623.415487][T12693] should_fail_ex+0x467/0x600 [ 623.415523][T12693] should_failslab+0xa8/0x100 [ 623.415549][T12693] __kmalloc_cache_noprof+0xa1/0x670 [ 623.415591][T12693] ? vhost_task_create+0x123/0x380 [ 623.415621][T12693] ? vhost_task_create+0x123/0x380 [ 623.415661][T12693] vhost_task_create+0x123/0x380 [ 623.415690][T12693] ? look_up_lock_class+0x57/0x110 [ 623.415713][T12693] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 623.415737][T12693] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 623.415764][T12693] ? __pfx_vhost_task_create+0x10/0x10 [ 623.415805][T12693] ? __pfx_vhost_task_fn+0x10/0x10 [ 623.415840][T12693] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 623.415864][T12693] ? lockdep_hardirqs_on+0x7a/0x110 [ 623.415886][T12693] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 623.415910][T12693] ? mutex_lock_nested+0x152/0x1d0 [ 623.415940][T12693] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 623.415970][T12693] kvm_mmu_post_init_vm+0x147/0x2b0 [ 623.416011][T12693] kvm_arch_vcpu_ioctl_run+0x7c/0x1920 [ 623.416050][T12693] ? rt_write_unlock+0x19c/0x360 [ 623.416092][T12693] kvm_vcpu_ioctl+0xa64/0xfe0 [ 623.416135][T12693] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 623.416172][T12693] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 623.416196][T12693] ? lockdep_hardirqs_on+0x7a/0x110 [ 623.416238][T12693] ? __fget_files+0x2a/0x420 [ 623.416266][T12693] ? __fget_files+0x3a8/0x420 [ 623.416288][T12693] ? __fget_files+0x2a/0x420 [ 623.416316][T12693] ? bpf_lsm_file_ioctl+0x9/0x20 [ 623.416352][T12693] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 623.416390][T12693] __se_sys_ioctl+0xff/0x170 [ 623.416424][T12693] do_syscall_64+0x17b/0x530 [ 623.416448][T12693] ? irqentry_exit+0x10f/0x8f0 [ 623.416469][T12693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.416493][T12693] ? clear_bhb_loop+0x40/0x90 [ 623.416522][T12693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.416545][T12693] RIP: 0033:0x7fdf3965de59 [ 623.416567][T12693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.416587][T12693] RSP: 002b:00007fdf37895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.416611][T12693] RAX: ffffffffffffffda RBX: 00007fdf398e6090 RCX: 00007fdf3965de59 [ 623.416628][T12693] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 623.416642][T12693] RBP: 00007fdf37895090 R08: 0000000000000000 R09: 0000000000000000 [ 623.416656][T12693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.416670][T12693] R13: 00007fdf398e6128 R14: 00007fdf398e6090 R15: 00007ffebb2fd328 [ 623.416705][T12693] [ 623.834097][T11524] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 623.834175][T12700] program syz.0.1976 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 624.026937][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1977'. [ 624.466690][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 624.470722][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 624.526455][T12714] syzkaller1: entered promiscuous mode [ 624.526475][T12714] syzkaller1: entered allmulticast mode [ 624.630006][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.011931][ T199] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 625.174579][ T199] usb 1-1: Using ep0 maxpacket: 8 [ 625.176786][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 146, changing to 11 [ 625.176835][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51017, setting to 1024 [ 625.176885][ T199] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 625.176912][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.233716][ T199] usb 1-1: config 0 descriptor?? [ 625.236734][T12719] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 625.447392][T12719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.448027][T12719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.564187][T12722] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 625.620936][ T199] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 625.977124][ C0] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -1 [ 625.986317][ T10] usb 1-1: USB disconnect, device number 123 [ 626.151407][ T5333] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 626.301228][ T5333] usb 3-1: Using ep0 maxpacket: 32 [ 626.303699][ T5333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.303735][ T5333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.303776][ T5333] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 626.303803][ T5333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.308119][ T5333] usb 3-1: config 0 descriptor?? [ 626.355156][ T8821] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 626.373364][ T5333] hub 3-1:0.0: USB hub found [ 626.519267][ T8821] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 626.541621][ T5333] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 626.548572][ T8821] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 626.548607][ T8821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.548630][ T8821] usb 2-1: Product: syz [ 626.548646][ T8821] usb 2-1: Manufacturer: syz [ 626.548662][ T8821] usb 2-1: SerialNumber: syz [ 626.684158][ T5817] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 626.892299][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.892957][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.894773][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.895424][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.897189][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.897832][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.905076][ T199] usb 2-1: USB disconnect, device number 123 [ 627.740450][ T5817] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 627.821231][ T5817] ath9k_htc: Failed to initialize the device [ 627.859781][ T199] usb 2-1: ath9k_htc: USB layer deinitialized [ 628.104447][T12737] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1988'. [ 628.104730][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1988'. [ 628.108594][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1989'. [ 628.201776][ T199] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 628.361925][ T199] usb 2-1: Using ep0 maxpacket: 32 [ 628.368637][ T199] usb 2-1: config index 0 descriptor too short (expected 241, got 72) [ 628.368699][ T199] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 628.368750][ T199] usb 2-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 628.368776][ T199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.422977][ T199] usb 2-1: config 0 descriptor?? [ 628.451548][ T199] mos7840 2-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 628.977988][ T5333] usbhid 3-1:0.0: can't add hid device: -71 [ 628.978209][ T5333] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 629.031099][ T5333] usb 3-1: USB disconnect, device number 104 [ 629.054419][ T10] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 629.189787][ T10] usb 1-1: device descriptor read/64, error -71 [ 629.271703][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.276448][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.479639][ T10] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 629.619607][ T10] usb 1-1: device descriptor read/64, error -71 [ 629.714163][T12759] can: request_module (can-proto-0) failed. [ 629.732101][ T10] usb usb1-port1: attempt power cycle [ 630.150183][ T10] usb 1-1: new low-speed USB device number 126 using dummy_hcd [ 630.170033][ T10] usb 1-1: device descriptor read/8, error -71 [ 630.326007][T12764] syzkaller1: entered promiscuous mode [ 630.326037][T12764] syzkaller1: entered allmulticast mode [ 630.356879][ T199] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 630.369670][ T199] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 630.414769][ T199] usb 2-1: USB disconnect, device number 124 [ 630.429093][ T10] usb 1-1: new low-speed USB device number 127 using dummy_hcd [ 630.454672][ T199] mos7840 2-1:0.0: device disconnected [ 630.455966][ T10] usb 1-1: device descriptor read/8, error -71 [ 630.559801][ T10] usb usb1-port1: unable to enumerate USB device [ 630.821597][ T38] audit: type=1326 audit(1784065347.878:42): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12770 comm="syz.3.1998" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf3965de59 code=0x0 [ 631.127477][T12780] FAULT_INJECTION: forcing a failure. [ 631.127477][T12780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.127516][T12780] CPU: 1 UID: 0 PID: 12780 Comm: syz.1.2001 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 631.127548][T12780] Tainted: [L]=SOFTLOCKUP [ 631.127556][T12780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 631.127570][T12780] Call Trace: [ 631.127579][T12780] [ 631.127590][T12780] dump_stack_lvl+0xe8/0x150 [ 631.127626][T12780] should_fail_ex+0x467/0x600 [ 631.127663][T12780] _copy_from_user+0x2d/0xb0 [ 631.127687][T12780] kstrtouint_from_user+0xd6/0x180 [ 631.127722][T12780] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 631.127751][T12780] ? __lock_acquire+0x6df/0x2e40 [ 631.127775][T12780] ? trace_raw_output_btrfs_log_inode_enter+0x500/0x500 [ 631.127818][T12780] ? lock_acquire+0x115/0x350 [ 631.127860][T12780] proc_fail_nth_write+0x8e/0x210 [ 631.127886][T12780] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 631.127920][T12780] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 631.127944][T12780] vfs_write+0x29f/0xbb0 [ 631.127990][T12780] ? __pfx_vfs_write+0x10/0x10 [ 631.128022][T12780] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 631.128047][T12780] ? lockdep_hardirqs_on+0x7a/0x110 [ 631.128069][T12780] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 631.128093][T12780] ? mutex_lock_nested+0x152/0x1d0 [ 631.128122][T12780] ? fdget_pos+0x252/0x320 [ 631.128156][T12780] ksys_write+0x156/0x270 [ 631.128186][T12780] ? __pfx_ksys_write+0x10/0x10 [ 631.128226][T12780] do_syscall_64+0x17b/0x530 [ 631.128250][T12780] ? irqentry_exit+0x10f/0x8f0 [ 631.128271][T12780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.128295][T12780] ? clear_bhb_loop+0x40/0x90 [ 631.128324][T12780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.128348][T12780] RIP: 0033:0x7fdccaa3e68e [ 631.128369][T12780] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 631.128389][T12780] RSP: 002b:00007fdcc8cd5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 631.128414][T12780] RAX: ffffffffffffffda RBX: 00007fdcc8cd66c0 RCX: 00007fdccaa3e68e [ 631.128430][T12780] RDX: 0000000000000001 RSI: 00007fdcc8cd60a0 RDI: 0000000000000004 [ 631.128445][T12780] RBP: 00007fdcc8cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 631.128457][T12780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.128471][T12780] R13: 00007fdccad06038 R14: 00007fdccad05fa0 R15: 00007ffc677ade38 [ 631.128506][T12780] [ 631.488143][ T5817] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 631.638947][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 631.643421][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.643461][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.643518][ T5817] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 631.643544][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.705119][ T5817] usb 4-1: config 0 descriptor?? [ 631.722621][ T5817] hub 4-1:0.0: USB hub found [ 631.916852][ T5817] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 633.156615][T12799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.334393][ T5817] usbhid 4-1:0.0: can't add hid device: -71 [ 633.334548][ T5817] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 633.408882][ T5817] usb 4-1: USB disconnect, device number 100 [ 633.497770][ T199] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 633.647546][ T199] usb 1-1: Using ep0 maxpacket: 8 [ 633.650698][ T199] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 633.650729][ T199] usb 1-1: config 0 has no interface number 0 [ 633.653454][ T199] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 633.653482][ T199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.653503][ T199] usb 1-1: Product: syz [ 633.653524][ T199] usb 1-1: Manufacturer: syz [ 633.653535][ T199] usb 1-1: SerialNumber: syz [ 633.659843][ T199] usb 1-1: config 0 descriptor?? [ 633.924685][ T199] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 633.924974][ T199] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized! [ 633.956029][ T199] usb 1-1: USB disconnect, device number 2 [ 634.081265][T12806] xt_socket: unknown flags 0x50 [ 634.360939][ T5333] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 634.507428][ T5333] usb 2-1: Using ep0 maxpacket: 16 [ 634.510992][ T5333] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 634.511017][ T5333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 634.513382][ T5333] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 634.513405][ T5333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.513420][ T5333] usb 2-1: Product: syz [ 634.513431][ T5333] usb 2-1: Manufacturer: syz [ 634.513442][ T5333] usb 2-1: SerialNumber: syz [ 634.579731][ T5333] usb 2-1: config 0 descriptor?? [ 634.586498][ T5333] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 634.586565][ T5333] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 634.620379][ T5817] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 634.768552][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 634.774191][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 146, changing to 11 [ 634.774289][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51017, setting to 1024 [ 634.774337][ T5817] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 634.774363][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.891655][ T5817] usb 4-1: config 0 descriptor?? [ 634.910811][T12812] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 635.118682][T12812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.119372][T12812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.127515][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 635.177504][T12812] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 635.209216][ T5333] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 635.211050][ T5817] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 635.213352][ T5333] em28xx 2-1:0.0: Config register raw data: 0x26 [ 635.213375][ T5333] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 635.213394][ T5333] em28xx 2-1:0.0: No AC97 audio processor [ 635.309352][ T10] usb 1-1: config 127 has an invalid interface number: 31 but max is 0 [ 635.309387][ T10] usb 1-1: config 127 has no interface number 0 [ 635.309438][ T10] usb 1-1: config 127 interface 31 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 635.309469][ T10] usb 1-1: config 127 interface 31 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 635.312788][ T10] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1004, bcdDevice=63.a2 [ 635.312822][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.312843][ T10] usb 1-1: Product: syz [ 635.312858][ T10] usb 1-1: Manufacturer: syz [ 635.312875][ T10] usb 1-1: SerialNumber: syz [ 635.388877][T12819] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 635.390287][T12819] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 635.490583][ T9] usb 4-1: USB disconnect, device number 101 [ 635.604808][ T10] option 1-1:127.31: GSM modem (1-port) converter detected [ 635.633445][ T10] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 636.021053][ T10] usb 2-1: USB disconnect, device number 125 [ 636.216700][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 636.366190][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 636.368367][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.368401][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.368435][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 636.368458][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.377181][ T9] usb 3-1: config 0 descriptor?? [ 636.437532][ T9] hub 3-1:0.0: USB hub found [ 636.615430][T12835] syzkaller1: entered promiscuous mode [ 636.615460][T12835] syzkaller1: entered allmulticast mode [ 636.635706][ T9] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 637.902753][ T10] usb 1-1: USB disconnect, device number 3 [ 638.138507][ T10] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 638.166239][ T10] option 1-1:127.31: device disconnected [ 639.102481][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 639.102626][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 639.153731][ T9] usb 3-1: USB disconnect, device number 105 [ 639.644624][T12855] syzkaller1: entered promiscuous mode [ 639.644654][T12855] syzkaller1: entered allmulticast mode [ 639.864396][ T5817] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 640.014412][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 640.021414][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 146, changing to 11 [ 640.021466][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51017, setting to 1024 [ 640.021528][ T5817] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 640.021567][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.087027][ T5817] usb 2-1: config 0 descriptor?? [ 640.107717][T12856] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 640.337225][T12856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.343744][T12856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.440255][T12860] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 640.492229][ T5817] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 640.897597][ T5817] usb 2-1: USB disconnect, device number 126 [ 640.933859][T12868] input: syz0 as /devices/virtual/input/input34 [ 641.116379][T12870] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 641.116430][T12870] UDF-fs: Scanning with blocksize 512 failed [ 641.123424][T12870] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 641.123443][T12870] UDF-fs: Scanning with blocksize 1024 failed [ 641.156979][T12870] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 641.157006][T12870] UDF-fs: Scanning with blocksize 2048 failed [ 641.157347][T12870] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 641.157361][T12870] UDF-fs: Scanning with blocksize 4096 failed [ 641.571596][T12877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 642.114852][T12880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2028'. [ 642.413066][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 642.594335][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 642.597878][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.597914][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.597955][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 642.597980][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.653578][ T9] usb 3-1: config 0 descriptor?? [ 642.659726][ T9] hub 3-1:0.0: USB hub found [ 642.885673][ T9] hub 3-1:0.0: 26 ports detected [ 642.886154][ T9] hub 3-1:0.0: insufficient power available to use all downstream ports [ 643.028793][T12890] syzkaller1: entered promiscuous mode [ 643.028823][T12890] syzkaller1: entered allmulticast mode [ 643.098351][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2033'. [ 643.894659][ T9] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 643.894681][ T9] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 643.899620][ T9] usbhid 3-1:0.0: can't add hid device: -32 [ 643.899713][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 644.441439][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'. [ 644.472099][ T8821] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 644.622087][ T8821] usb 2-1: Using ep0 maxpacket: 32 [ 644.627800][ T8821] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 644.628387][ T8821] usb 2-1: language id specifier not provided by device, defaulting to English [ 644.666148][ T8821] usb 2-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice= 0.40 [ 644.666172][ T8821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.666187][ T8821] usb 2-1: Product: à ‡ [ 644.666198][ T8821] usb 2-1: SerialNumber: syz [ 645.059826][ T8821] usb 2-1: can't set first interface for hiFace device. [ 645.059854][ T8821] snd-usb-hiface 2-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 645.079927][ T8821] usb 2-1: can't set first interface for hiFace device. [ 645.080034][ T8821] snd-usb-hiface 2-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 645.091415][ T8821] usb 2-1: USB disconnect, device number 127 [ 645.185335][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.381875][ T9] usb 3-1: USB disconnect, device number 106 [ 646.031999][ T5817] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 646.185990][ T5817] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.186050][ T5817] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 646.186087][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.238915][ T5817] usb 2-1: config 0 descriptor?? [ 646.260189][ T5817] pwc: Askey VC010 type 2 USB webcam detected. [ 646.643633][ T5817] pwc: recv_control_msg error -32 req 02 val 2b00 [ 646.646918][ T5817] pwc: recv_control_msg error -32 req 02 val 2700 [ 646.984574][ T5817] pwc: recv_control_msg error -71 req 04 val 1000 [ 646.985323][ T5817] pwc: recv_control_msg error -71 req 04 val 1300 [ 646.986293][ T5817] pwc: recv_control_msg error -71 req 04 val 1400 [ 646.986799][ T5817] pwc: recv_control_msg error -71 req 02 val 2000 [ 646.987361][ T5817] pwc: recv_control_msg error -71 req 02 val 2100 [ 646.987869][ T5817] pwc: recv_control_msg error -71 req 04 val 1500 [ 646.988457][ T5817] pwc: recv_control_msg error -71 req 02 val 2500 [ 646.989046][ T5817] pwc: recv_control_msg error -71 req 02 val 2400 [ 646.989509][ T5817] pwc: recv_control_msg error -71 req 02 val 2600 [ 646.989968][ T5817] pwc: recv_control_msg error -71 req 02 val 2900 [ 646.990413][ T5817] pwc: recv_control_msg error -71 req 02 val 2800 [ 646.995832][ T5817] pwc: recv_control_msg error -71 req 04 val 1100 [ 646.997160][ T5817] pwc: recv_control_msg error -71 req 04 val 1200 [ 647.111219][ T5817] pwc: Registered as video103. [ 647.131522][ T5817] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 647.151517][ T5817] usb 2-1: USB disconnect, device number 2 [ 647.721124][ T199] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 647.891619][ T199] usb 4-1: Using ep0 maxpacket: 32 [ 647.894370][ T199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.894406][ T199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.894450][ T199] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 647.894475][ T199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.954209][ T199] usb 4-1: config 0 descriptor?? [ 647.985392][ T199] hub 4-1:0.0: USB hub found [ 648.072402][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 648.168623][ T199] hub 4-1:0.0: 26 ports detected [ 648.169147][ T199] hub 4-1:0.0: insufficient power available to use all downstream ports [ 648.289180][T12955] syzkaller1: entered promiscuous mode [ 648.289282][T12955] syzkaller1: entered allmulticast mode [ 648.424623][ T199] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 648.424652][ T199] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 648.451415][ T199] usbhid 4-1:0.0: can't add hid device: -71 [ 648.451546][ T199] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 648.501284][ T199] usb 4-1: USB disconnect, device number 102 [ 648.724383][T12960] FAULT_INJECTION: forcing a failure. [ 648.724383][T12960] name failslab, interval 1, probability 0, space 0, times 0 [ 648.724431][T12960] CPU: 0 UID: 0 PID: 12960 Comm: syz.0.2054 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 648.724476][T12960] Tainted: [L]=SOFTLOCKUP [ 648.724486][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 648.724502][T12960] Call Trace: [ 648.724513][T12960] [ 648.724525][T12960] dump_stack_lvl+0xe8/0x150 [ 648.724565][T12960] should_fail_ex+0x467/0x600 [ 648.724605][T12960] should_failslab+0xa8/0x100 [ 648.724634][T12960] __kmalloc_noprof+0xfb/0x790 [ 648.724671][T12960] ? tomoyo_encode+0x2ad/0x570 [ 648.724707][T12960] ? tomoyo_encode+0x2ad/0x570 [ 648.724753][T12960] tomoyo_encode+0x2ad/0x570 [ 648.724799][T12960] tomoyo_realpath_from_path+0x5fa/0x640 [ 648.724853][T12960] tomoyo_check_open_permission+0x229/0x470 [ 648.724893][T12960] ? tomoyo_check_open_permission+0x1d3/0x470 [ 648.724926][T12960] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 648.724958][T12960] ? do_raw_spin_lock+0x12b/0x2f0 [ 648.725038][T12960] ? rt_spin_unlock+0x157/0x200 [ 648.725071][T12960] ? tomoyo_file_open+0x166/0x220 [ 648.725117][T12960] security_file_open+0x9c/0x200 [ 648.725150][T12960] do_dentry_open+0x4be/0x1420 [ 648.725202][T12960] vfs_open+0x3b/0x350 [ 648.725239][T12960] ? path_openat+0x2e4d/0x3850 [ 648.725275][T12960] path_openat+0x2e64/0x3850 [ 648.725317][T12960] ? __kasan_slab_alloc+0x6c/0x80 [ 648.725356][T12960] ? do_sys_openat2+0xcc/0x200 [ 648.725393][T12960] ? __x64_sys_openat+0x138/0x170 [ 648.725432][T12960] ? do_syscall_64+0x17b/0x530 [ 648.725490][T12960] do_file_open+0x23e/0x4a0 [ 648.725522][T12960] ? lockdep_hardirqs_on+0x7a/0x110 [ 648.725553][T12960] ? __pfx_do_file_open+0x10/0x10 [ 648.725614][T12960] ? alloc_fd+0x654/0x6d0 [ 648.725653][T12960] do_sys_openat2+0x115/0x200 [ 648.725697][T12960] ? __pfx_do_sys_openat2+0x10/0x10 [ 648.725742][T12960] ? ksys_write+0x248/0x270 [ 648.725774][T12960] ? __pfx_ksys_write+0x10/0x10 [ 648.725807][T12960] __x64_sys_openat+0x138/0x170 [ 648.725854][T12960] do_syscall_64+0x17b/0x530 [ 648.725880][T12960] ? irqentry_exit+0x10f/0x8f0 [ 648.725904][T12960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.725931][T12960] ? clear_bhb_loop+0x40/0x90 [ 648.725964][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.725991][T12960] RIP: 0033:0x7f658e14de59 [ 648.726015][T12960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.726038][T12960] RSP: 002b:00007f658c385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 648.726066][T12960] RAX: ffffffffffffffda RBX: 00007f658e3d6090 RCX: 00007f658e14de59 [ 648.726085][T12960] RDX: 0000000000006001 RSI: 0000200000000080 RDI: 00000000ffffff9c [ 648.726102][T12960] RBP: 00007f658c385090 R08: 0000000000000000 R09: 0000000000000000 [ 648.726120][T12960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.726136][T12960] R13: 00007f658e3d6128 R14: 00007f658e3d6090 R15: 00007ffd98fc44d8 [ 648.726177][T12960] [ 648.729729][T12960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 649.335105][T12965] FAULT_INJECTION: forcing a failure. [ 649.335105][T12965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.335145][T12965] CPU: 0 UID: 0 PID: 12965 Comm: syz.1.2057 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 649.335175][T12965] Tainted: [L]=SOFTLOCKUP [ 649.335184][T12965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 649.335198][T12965] Call Trace: [ 649.335208][T12965] [ 649.335218][T12965] dump_stack_lvl+0xe8/0x150 [ 649.335252][T12965] should_fail_ex+0x467/0x600 [ 649.335287][T12965] _copy_from_user+0x2d/0xb0 [ 649.335311][T12965] msr_io+0xab/0x8b0 [ 649.335339][T12965] ? lock_acquire+0x115/0x350 [ 649.335379][T12965] ? __pfx_do_set_msr+0x10/0x10 [ 649.335405][T12965] ? __pfx_msr_io+0x10/0x10 [ 649.335433][T12965] ? __srcu_check_read_flavor+0x116/0x260 [ 649.335474][T12965] ? kvm_set_msrs+0x68/0x100 [ 649.335496][T12965] kvm_set_msrs+0x9c/0x100 [ 649.335524][T12965] kvm_arch_vcpu_ioctl+0x6d2/0x2360 [ 649.335556][T12965] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 649.335577][T12965] ? lock_acquire+0x115/0x350 [ 649.335620][T12965] ? lock_acquire+0x115/0x350 [ 649.335666][T12965] ? is_bpf_text_address+0x26/0x2b0 [ 649.335698][T12965] ? is_bpf_text_address+0x292/0x2b0 [ 649.335723][T12965] ? is_bpf_text_address+0x26/0x2b0 [ 649.335752][T12965] ? kernel_text_address+0xa5/0xe0 [ 649.335787][T12965] ? __kernel_text_address+0xd/0x30 [ 649.335820][T12965] ? unwind_get_return_address+0x4d/0x90 [ 649.335856][T12965] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 649.335899][T12965] ? arch_stack_walk+0xfb/0x150 [ 649.335947][T12965] ? stack_trace_save+0xa9/0x100 [ 649.335982][T12965] ? __pfx_stack_trace_save+0x10/0x10 [ 649.336013][T12965] ? kasan_save_track+0x4f/0x80 [ 649.336049][T12965] ? stack_depot_save_flags+0x33/0x800 [ 649.336079][T12965] ? __lock_acquire+0x6df/0x2e40 [ 649.336105][T12965] ? kasan_save_track+0x4f/0x80 [ 649.336136][T12965] ? kasan_save_track+0x3e/0x80 [ 649.336166][T12965] ? kasan_save_free_info+0x40/0x50 [ 649.336192][T12965] ? __kasan_slab_free+0x5c/0x80 [ 649.336224][T12965] ? kfree+0x1c5/0x6c0 [ 649.336251][T12965] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 649.336279][T12965] ? security_file_ioctl+0xb9/0x260 [ 649.336303][T12965] ? __se_sys_ioctl+0x47/0x170 [ 649.336332][T12965] ? do_syscall_64+0x17b/0x530 [ 649.336354][T12965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.336397][T12965] ? __lock_acquire+0x6df/0x2e40 [ 649.336462][T12965] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 649.336487][T12965] ? lockdep_hardirqs_on+0x7a/0x110 [ 649.336509][T12965] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 649.336533][T12965] ? _mutex_lock_killable+0x152/0x1d0 [ 649.336563][T12965] ? kvm_vcpu_ioctl+0x282/0xfe0 [ 649.336602][T12965] kvm_vcpu_ioctl+0x7e6/0xfe0 [ 649.336646][T12965] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 649.336681][T12965] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 649.336704][T12965] ? lockdep_hardirqs_on+0x7a/0x110 [ 649.336745][T12965] ? __fget_files+0x2a/0x420 [ 649.336773][T12965] ? __fget_files+0x3a8/0x420 [ 649.336795][T12965] ? __fget_files+0x2a/0x420 [ 649.336823][T12965] ? bpf_lsm_file_ioctl+0x9/0x20 [ 649.336857][T12965] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 649.336900][T12965] __se_sys_ioctl+0xff/0x170 [ 649.336933][T12965] do_syscall_64+0x17b/0x530 [ 649.336956][T12965] ? irqentry_exit+0x10f/0x8f0 [ 649.336977][T12965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.337001][T12965] ? clear_bhb_loop+0x40/0x90 [ 649.337029][T12965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.337053][T12965] RIP: 0033:0x7fdccaa7de59 [ 649.337074][T12965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.337094][T12965] RSP: 002b:00007fdcc8cd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 649.337118][T12965] RAX: ffffffffffffffda RBX: 00007fdccad05fa0 RCX: 00007fdccaa7de59 [ 649.337136][T12965] RDX: 0000200000000080 RSI: 000000004008ae89 RDI: 0000000000000005 [ 649.337150][T12965] RBP: 00007fdcc8cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 649.337165][T12965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.337178][T12965] R13: 00007fdccad06038 R14: 00007fdccad05fa0 R15: 00007ffc677ade38 [ 649.337214][T12965] [ 649.911747][T12972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.912563][T12972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.048579][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 650.139440][ T199] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 650.313285][ T199] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 650.313317][ T199] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 650.313340][ T199] usb 1-1: config 1 has no interface number 0 [ 650.313535][ T199] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 650.313567][ T199] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 650.313595][ T199] usb 1-1: config 1 interface 7 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 650.317884][ T199] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 650.317918][ T199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.318093][ T199] usb 1-1: Product: syz [ 650.318112][ T199] usb 1-1: Manufacturer: syz [ 650.318129][ T199] usb 1-1: SerialNumber: syz [ 650.420614][T12971] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 650.444546][ T199] usb 1-1: Expected 3 endpoints, found: 2 [ 650.624619][ T10] usb 1-1: USB disconnect, device number 4 [ 651.300115][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 652.248752][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 652.398087][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 652.400341][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 652.400387][ T10] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 652.400424][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 652.400445][ T10] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 652.400467][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 652.400661][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 652.400690][ T10] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 652.400711][ T10] usb 2-1: config 168 interface 0 has no altsetting 0 [ 652.401942][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 652.401982][ T10] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 652.402031][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 652.402078][ T10] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 652.402107][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 652.402200][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 652.402264][ T10] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 652.402292][ T10] usb 2-1: config 168 interface 0 has no altsetting 0 [ 652.403631][ T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 652.403670][ T10] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 652.403725][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 652.403746][ T10] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 652.403765][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 652.403784][ T10] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 652.403804][ T10] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 652.403824][ T10] usb 2-1: config 168 interface 0 has no altsetting 0 [ 652.407528][ T10] usb 2-1: string descriptor 0 read error: -22 [ 652.407659][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 652.407677][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.648206][ T199] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 652.718067][ T10] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 652.801078][ T10] usb 2-1: USB disconnect, device number 3 [ 652.807995][ T199] usb 1-1: Using ep0 maxpacket: 32 [ 652.816200][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.816228][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.816261][ T199] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 652.816281][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.903949][ T199] usb 1-1: config 0 descriptor?? [ 652.922066][ T199] hub 1-1:0.0: USB hub found [ 653.119629][ T199] hub 1-1:0.0: 26 ports detected [ 653.120305][ T199] hub 1-1:0.0: insufficient power available to use all downstream ports [ 653.347764][ T199] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 653.347786][ T199] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 653.355839][ T199] usbhid 1-1:0.0: can't add hid device: -71 [ 653.355932][ T199] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 653.391163][ T199] usb 1-1: USB disconnect, device number 5 [ 653.447629][ T5333] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 653.600008][ T5333] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 653.600042][ T5333] usb 4-1: config 127 has no interface number 0 [ 653.600090][ T5333] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 653.602546][ T5333] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 653.602577][ T5333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.602606][ T5333] usb 4-1: Product: syz [ 653.602628][ T5333] usb 4-1: Manufacturer: syz [ 653.602639][ T5333] usb 4-1: SerialNumber: syz [ 653.645850][T13003] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 653.860115][ T5333] asix 4-1:127.57: probe with driver asix failed with error -71 [ 653.887025][ T5333] usb 4-1: USB disconnect, device number 103 [ 653.967943][T13010] FAULT_INJECTION: forcing a failure. [ 653.967943][T13010] name failslab, interval 1, probability 0, space 0, times 0 [ 653.967984][T13010] CPU: 0 UID: 0 PID: 13010 Comm: syz.0.2069 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 653.968015][T13010] Tainted: [L]=SOFTLOCKUP [ 653.968023][T13010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 653.968036][T13010] Call Trace: [ 653.968046][T13010] [ 653.968055][T13010] dump_stack_lvl+0xe8/0x150 [ 653.968091][T13010] should_fail_ex+0x467/0x600 [ 653.968126][T13010] should_failslab+0xa8/0x100 [ 653.968150][T13010] kmem_cache_alloc_node_noprof+0xac/0x660 [ 653.968184][T13010] ? __alloc_skb+0x1d7/0x7a0 [ 653.968216][T13010] ? __alloc_skb+0x1d7/0x7a0 [ 653.968241][T13010] __alloc_skb+0x1d7/0x7a0 [ 653.968265][T13010] create_monitor_ctrl_event+0x38/0x470 [ 653.968290][T13010] mgmt_cmd_status+0x1cd/0x570 [ 653.968314][T13010] hci_mgmt_cmd+0x93e/0xfc0 [ 653.968346][T13010] ? mutex_lock_nested+0x152/0x1d0 [ 653.968376][T13010] hci_sock_sendmsg+0x6e1/0xf50 [ 653.968403][T13010] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 653.968432][T13010] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 653.968453][T13010] sock_sendmsg_nosec+0x13a/0x180 [ 653.968474][T13010] sock_write_iter+0x2e4/0x3f0 [ 653.968493][T13010] ? __pfx_sock_write_iter+0x10/0x10 [ 653.968516][T13010] ? bpf_lsm_file_permission+0x9/0x20 [ 653.968541][T13010] ? security_file_permission+0x68/0x220 [ 653.968567][T13010] vfs_write+0x61e/0xbb0 [ 653.968593][T13010] ? __pfx_vfs_write+0x10/0x10 [ 653.968620][T13010] ? __fget_files+0x2a/0x420 [ 653.968643][T13010] ksys_write+0x156/0x270 [ 653.968664][T13010] ? __pfx_ksys_write+0x10/0x10 [ 653.968691][T13010] do_syscall_64+0x17b/0x530 [ 653.968707][T13010] ? irqentry_exit+0x10f/0x8f0 [ 653.968723][T13010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.968740][T13010] ? clear_bhb_loop+0x40/0x90 [ 653.968760][T13010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.968777][T13010] RIP: 0033:0x7f658e14de59 [ 653.968792][T13010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.968807][T13010] RSP: 002b:00007f658c3a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 653.968824][T13010] RAX: ffffffffffffffda RBX: 00007f658e3d5fa0 RCX: 00007f658e14de59 [ 653.968838][T13010] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000004 [ 653.968849][T13010] RBP: 00007f658c3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 653.968860][T13010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.968903][T13010] R13: 00007f658e3d6038 R14: 00007f658e3d5fa0 R15: 00007ffd98fc44d8 [ 653.968939][T13010] [ 654.284288][T13012] syz.0.2070 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 654.860983][T12985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.287601][ T10] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 655.452709][ T10] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 655.452733][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.452748][ T10] usb 3-1: Product: syz [ 655.452759][ T10] usb 3-1: Manufacturer: syz [ 655.452770][ T10] usb 3-1: SerialNumber: syz [ 655.483748][ T10] usb 3-1: config 0 descriptor?? [ 655.512541][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 655.896547][ T199] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 655.928732][ T10] gspca_stk1135: reg_w 0x0 err -71 [ 655.931861][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 655.931881][ T10] gspca_stk1135: Sensor write failed [ 655.931941][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 655.931954][ T10] gspca_stk1135: Sensor write failed [ 655.931998][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 655.932010][ T10] gspca_stk1135: Sensor read failed [ 655.932045][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 655.932056][ T10] gspca_stk1135: Sensor read failed [ 655.932065][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 655.932105][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 655.932116][ T10] gspca_stk1135: Sensor read failed [ 655.932149][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 655.932161][ T10] gspca_stk1135: Sensor read failed [ 655.932198][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 655.932209][ T10] gspca_stk1135: Sensor write failed [ 655.932246][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 655.932257][ T10] gspca_stk1135: Sensor write failed [ 655.934234][ T10] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 656.057139][ T10] usb 3-1: USB disconnect, device number 107 [ 656.067828][ T199] usb 1-1: Using ep0 maxpacket: 32 [ 656.084719][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.084754][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.084795][ T199] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 656.084822][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.135063][T13047] binder_alloc: 13046: binder_alloc_buf, no vma [ 656.178355][ T199] usb 1-1: config 0 descriptor?? [ 656.203983][ T199] hub 1-1:0.0: USB hub found [ 656.385504][ T199] hub 1-1:0.0: 26 ports detected [ 656.387103][ T199] hub 1-1:0.0: insufficient power available to use all downstream ports [ 656.589477][ T199] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 656.589509][ T199] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 656.615175][ T199] usbhid 1-1:0.0: can't add hid device: -71 [ 656.615313][ T199] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 656.669954][ T199] usb 1-1: USB disconnect, device number 6 [ 656.851719][T13052] FAULT_INJECTION: forcing a failure. [ 656.851719][T13052] name failslab, interval 1, probability 0, space 0, times 0 [ 656.851761][T13052] CPU: 1 UID: 0 PID: 13052 Comm: syz.1.2081 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 656.851792][T13052] Tainted: [L]=SOFTLOCKUP [ 656.851801][T13052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 656.851815][T13052] Call Trace: [ 656.851825][T13052] [ 656.851835][T13052] dump_stack_lvl+0xe8/0x150 [ 656.851871][T13052] should_fail_ex+0x467/0x600 [ 656.851907][T13052] should_failslab+0xa8/0x100 [ 656.851933][T13052] __kmalloc_cache_noprof+0xa1/0x670 [ 656.851967][T13052] ? vhost_task_create+0x123/0x380 [ 656.851997][T13052] ? vhost_task_create+0x123/0x380 [ 656.852035][T13052] vhost_task_create+0x123/0x380 [ 656.852065][T13052] ? look_up_lock_class+0x57/0x110 [ 656.852088][T13052] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 656.852113][T13052] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 656.852140][T13052] ? __pfx_vhost_task_create+0x10/0x10 [ 656.852180][T13052] ? __pfx_vhost_task_fn+0x10/0x10 [ 656.852215][T13052] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 656.852238][T13052] ? lockdep_hardirqs_on+0x7a/0x110 [ 656.852260][T13052] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 656.852283][T13052] ? mutex_lock_nested+0x152/0x1d0 [ 656.852319][T13052] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 656.852349][T13052] kvm_mmu_post_init_vm+0x147/0x2b0 [ 656.852379][T13052] kvm_arch_vcpu_ioctl_run+0x7c/0x1920 [ 656.852416][T13052] ? rt_write_unlock+0x19c/0x360 [ 656.852458][T13052] kvm_vcpu_ioctl+0xa64/0xfe0 [ 656.852503][T13052] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 656.852544][T13052] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 656.852568][T13052] ? lockdep_hardirqs_on+0x7a/0x110 [ 656.852609][T13052] ? __fget_files+0x2a/0x420 [ 656.852638][T13052] ? __fget_files+0x3a8/0x420 [ 656.852660][T13052] ? __fget_files+0x2a/0x420 [ 656.852687][T13052] ? bpf_lsm_file_ioctl+0x9/0x20 [ 656.852721][T13052] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 656.852757][T13052] __se_sys_ioctl+0xff/0x170 [ 656.852791][T13052] do_syscall_64+0x17b/0x530 [ 656.852814][T13052] ? irqentry_exit+0x10f/0x8f0 [ 656.852836][T13052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.852859][T13052] ? clear_bhb_loop+0x40/0x90 [ 656.852887][T13052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.852911][T13052] RIP: 0033:0x7fdccaa7de59 [ 656.852932][T13052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.852953][T13052] RSP: 002b:00007fdcc8cb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.852976][T13052] RAX: ffffffffffffffda RBX: 00007fdccad06090 RCX: 00007fdccaa7de59 [ 656.852993][T13052] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 656.853007][T13052] RBP: 00007fdcc8cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 656.853022][T13052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.853037][T13052] R13: 00007fdccad06128 R14: 00007fdccad06090 R15: 00007ffc677ade38 [ 656.853073][T13052] [ 657.384919][T13059] FAULT_INJECTION: forcing a failure. [ 657.384919][T13059] name failslab, interval 1, probability 0, space 0, times 0 [ 657.384959][T13059] CPU: 0 UID: 0 PID: 13059 Comm: syz.2.2084 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 657.384990][T13059] Tainted: [L]=SOFTLOCKUP [ 657.384998][T13059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 657.385012][T13059] Call Trace: [ 657.385022][T13059] [ 657.385032][T13059] dump_stack_lvl+0xe8/0x150 [ 657.385066][T13059] should_fail_ex+0x467/0x600 [ 657.385102][T13059] should_failslab+0xa8/0x100 [ 657.385127][T13059] __kmalloc_noprof+0xfb/0x790 [ 657.385160][T13059] ? tomoyo_realpath_from_path+0xef/0x640 [ 657.385195][T13059] ? tomoyo_realpath_from_path+0xef/0x640 [ 657.385239][T13059] tomoyo_realpath_from_path+0xef/0x640 [ 657.385296][T13059] ? tomoyo_path_number_perm+0x219/0x5f0 [ 657.385326][T13059] tomoyo_path_number_perm+0x246/0x5f0 [ 657.385363][T13059] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 657.385394][T13059] ? do_raw_spin_lock+0x12b/0x2f0 [ 657.385436][T13059] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 657.385460][T13059] ? lockdep_hardirqs_on+0x7a/0x110 [ 657.385499][T13059] ? __fget_files+0x2a/0x420 [ 657.385527][T13059] ? __fget_files+0x3a8/0x420 [ 657.385550][T13059] ? __fget_files+0x2a/0x420 [ 657.385577][T13059] security_file_ioctl+0xb9/0x260 [ 657.385607][T13059] __se_sys_ioctl+0x47/0x170 [ 657.385641][T13059] do_syscall_64+0x17b/0x530 [ 657.385665][T13059] ? irqentry_exit+0x10f/0x8f0 [ 657.385687][T13059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.385711][T13059] ? clear_bhb_loop+0x40/0x90 [ 657.385740][T13059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.385764][T13059] RIP: 0033:0x7ff63400de59 [ 657.385786][T13059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.385806][T13059] RSP: 002b:00007ff632266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.385830][T13059] RAX: ffffffffffffffda RBX: 00007ff634295fa0 RCX: 00007ff63400de59 [ 657.385847][T13059] RDX: 0000200000000080 RSI: 000000004008ae89 RDI: 0000000000000005 [ 657.385862][T13059] RBP: 00007ff632266090 R08: 0000000000000000 R09: 0000000000000000 [ 657.385877][T13059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.385890][T13059] R13: 00007ff634296038 R14: 00007ff634295fa0 R15: 00007fff06c647c8 [ 657.385925][T13059] [ 657.393112][T13059] ERROR: Out of memory at tomoyo_realpath_from_path. [ 657.987960][T13071] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2089'. [ 657.987984][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'. [ 658.135894][T13078] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 658.835008][ T199] usb 4-1: new low-speed USB device number 104 using dummy_hcd [ 658.996811][ T199] usb 4-1: Invalid ep0 maxpacket: 64 [ 659.127266][ T199] usb 4-1: new low-speed USB device number 105 using dummy_hcd [ 659.275238][ T199] usb 4-1: Invalid ep0 maxpacket: 64 [ 659.275586][ T199] usb usb4-port1: attempt power cycle [ 659.614524][ T199] usb 4-1: new low-speed USB device number 106 using dummy_hcd [ 659.638663][ T199] usb 4-1: Invalid ep0 maxpacket: 64 [ 659.764416][ T199] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 659.790258][ T199] usb 4-1: Invalid ep0 maxpacket: 64 [ 659.790636][ T199] usb usb4-port1: unable to enumerate USB device [ 659.836619][T13115] Flush: task=syz.1.2104[13115] dev=loop9 state=2 [ 659.838836][ T7873] Flush: task=udevd[7873] dev=loop3 state=2 [ 659.936741][T13115] Teardown: task=syz.1.2104[13115] dev=loop9 state=2 [ 659.962267][ T7873] Teardown: task=udevd[7873] dev=loop3 state=2 [ 660.035680][T13118] netlink: set zone limit has 4 unknown bytes [ 661.267422][T13137] netlink: set zone limit has 4 unknown bytes [ 661.267550][T13137] FAULT_INJECTION: forcing a failure. [ 661.267550][T13137] name failslab, interval 1, probability 0, space 0, times 0 [ 661.267574][T13137] CPU: 1 UID: 0 PID: 13137 Comm: syz.1.2110 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 661.267597][T13137] Tainted: [L]=SOFTLOCKUP [ 661.267602][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 661.267612][T13137] Call Trace: [ 661.267619][T13137] [ 661.267626][T13137] dump_stack_lvl+0xe8/0x150 [ 661.267649][T13137] should_fail_ex+0x467/0x600 [ 661.267674][T13137] should_failslab+0xa8/0x100 [ 661.267690][T13137] ? skb_clone+0x212/0x3a0 [ 661.267715][T13137] kmem_cache_alloc_noprof+0x9e/0x680 [ 661.267739][T13137] ? skb_clone+0x212/0x3a0 [ 661.267768][T13137] skb_clone+0x212/0x3a0 [ 661.267795][T13137] __netlink_deliver_tap+0x410/0x880 [ 661.267829][T13137] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.267855][T13137] netlink_deliver_tap+0x19c/0x1b0 [ 661.267882][T13137] netlink_sendskb+0x68/0x140 [ 661.267906][T13137] ovs_ct_limit_cmd_set+0x960/0xb00 [ 661.267935][T13137] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 661.267963][T13137] genl_family_rcv_msg_doit+0x233/0x340 [ 661.267988][T13137] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 661.268018][T13137] ? bpf_lsm_capable+0x9/0x20 [ 661.268034][T13137] ? security_capable+0x74/0x280 [ 661.268061][T13137] genl_rcv_msg+0x614/0x7a0 [ 661.268085][T13137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.268102][T13137] ? ref_tracker_free+0x668/0x820 [ 661.268124][T13137] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 661.268145][T13137] ? ____sys_sendmsg+0x565/0x870 [ 661.268168][T13137] ? ___sys_sendmsg+0x2a5/0x360 [ 661.268191][T13137] ? __x64_sys_sendmsg+0x1b7/0x290 [ 661.268214][T13137] ? do_syscall_64+0x17b/0x530 [ 661.268229][T13137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.268253][T13137] netlink_rcv_skb+0x226/0x4a0 [ 661.268279][T13137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.268299][T13137] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 661.268333][T13137] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.268358][T13137] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.268386][T13137] genl_rcv+0x28/0x40 [ 661.268431][T13137] netlink_unicast+0x7f5/0x990 [ 661.268474][T13137] netlink_sendmsg+0x813/0xb40 [ 661.268519][T13137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.268557][T13137] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 661.268596][T13137] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 661.268632][T13137] ? arch_stack_walk+0xfb/0x150 [ 661.268671][T13137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.268696][T13137] sock_sendmsg_nosec+0x13a/0x180 [ 661.268717][T13137] ____sys_sendmsg+0x565/0x870 [ 661.268748][T13137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.268779][T13137] ? import_iovec+0x73/0xa0 [ 661.268808][T13137] ___sys_sendmsg+0x2a5/0x360 [ 661.268832][T13137] ? __lock_acquire+0x6df/0x2e40 [ 661.268851][T13137] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.268902][T13137] ? __fget_files+0x2a/0x420 [ 661.268918][T13137] ? __fget_files+0x3a8/0x420 [ 661.268948][T13137] __x64_sys_sendmsg+0x1b7/0x290 [ 661.268976][T13137] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.269015][T13137] do_syscall_64+0x17b/0x530 [ 661.269031][T13137] ? irqentry_exit+0x10f/0x8f0 [ 661.269047][T13137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.269064][T13137] ? clear_bhb_loop+0x40/0x90 [ 661.269084][T13137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.269100][T13137] RIP: 0033:0x7fdccaa7de59 [ 661.269115][T13137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.269129][T13137] RSP: 002b:00007fdcc8cd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.269146][T13137] RAX: ffffffffffffffda RBX: 00007fdccad05fa0 RCX: 00007fdccaa7de59 [ 661.269158][T13137] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 661.269169][T13137] RBP: 00007fdcc8cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 661.269180][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.269189][T13137] R13: 00007fdccad06038 R14: 00007fdccad05fa0 R15: 00007ffc677ade38 [ 661.269214][T13137] [ 661.928313][T13151] netlink: 'syz.0.2113': attribute type 4 has an invalid length. [ 662.323151][ T5333] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 662.453499][ T5333] usb 1-1: device descriptor read/64, error -71 [ 662.617744][T13166] netlink: 'syz.1.2119': attribute type 10 has an invalid length. [ 662.653568][T13166] syz_tun: entered promiscuous mode [ 662.693033][ T5333] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 662.718071][T13166] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 662.835541][ T5333] usb 1-1: device descriptor read/64, error -71 [ 662.962959][ T5333] usb usb1-port1: attempt power cycle [ 663.322721][ T5333] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 663.345390][ T5333] usb 1-1: device descriptor read/8, error -71 [ 663.582689][ T5333] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 663.603350][ T5333] usb 1-1: device descriptor read/8, error -71 [ 663.712925][ T5333] usb usb1-port1: unable to enumerate USB device [ 663.762985][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 663.924261][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.924350][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 663.924381][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 663.926906][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 663.926941][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.926957][ T9] usb 3-1: Product: syz [ 663.926968][ T9] usb 3-1: Manufacturer: syz [ 663.926979][ T9] usb 3-1: SerialNumber: syz [ 664.152243][ T8821] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 664.202570][T13196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.203222][T13196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.292241][ T8821] usb 4-1: device descriptor read/64, error -71 [ 664.492566][ T9] usb 3-1: USB disconnect, device number 108 [ 664.532172][ T8821] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 664.627776][ T7878] udevd[7878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.661995][ T8821] usb 4-1: device descriptor read/64, error -71 [ 664.773408][ T8821] usb usb4-port1: attempt power cycle [ 665.046716][T13202] vivid-004: disconnect [ 665.121847][ T8821] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 665.142598][ T8821] usb 4-1: device descriptor read/8, error -71 [ 665.278202][T13210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.292588][T13210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.381602][ T8821] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 665.402278][ T8821] usb 4-1: device descriptor read/8, error -71 [ 665.513428][ T8821] usb usb4-port1: unable to enumerate USB device [ 666.022856][T13201] vivid-004: reconnect [ 666.151246][ T8821] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 666.301134][ T8821] usb 2-1: Using ep0 maxpacket: 32 [ 666.303246][ T8821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.303279][ T8821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.303317][ T8821] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 666.303335][ T8821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.355695][ T8821] usb 2-1: config 0 descriptor?? [ 666.389611][ T8821] hub 2-1:0.0: USB hub found [ 666.567203][ T8821] hub 2-1:0.0: 26 ports detected [ 666.567599][ T8821] hub 2-1:0.0: insufficient power available to use all downstream ports [ 666.774517][ T8821] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 666.774549][ T8821] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 666.784773][ T8821] usbhid 2-1:0.0: can't add hid device: -71 [ 666.785146][ T8821] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 666.815379][ T8821] usb 2-1: USB disconnect, device number 4 [ 667.351161][ T38] audit: type=1326 audit(1784065384.436:43): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13238 comm="syz.1.2141" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdccaa7de59 code=0x0 [ 667.850463][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 668.010220][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 668.014656][ T10] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 668.014695][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 668.014734][ T10] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 668.014760][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.055287][ T10] usb 1-1: config 0 descriptor?? [ 668.390096][ T8821] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 668.506640][ T10] hid_parser_main: 46 callbacks suppressed [ 668.506667][ T10] dragonrise 0003:0079:0011.001F: unknown main item tag 0x2 [ 668.506701][ T10] dragonrise 0003:0079:0011.001F: unknown main item tag 0x0 [ 668.506726][ T10] dragonrise 0003:0079:0011.001F: unknown main item tag 0x0 [ 668.506751][ T10] dragonrise 0003:0079:0011.001F: unknown main item tag 0x0 [ 668.506776][ T10] dragonrise 0003:0079:0011.001F: unknown main item tag 0x0 [ 668.506802][ T10] dragonrise 0003:0079:0011.001F: unknown main item tag 0x0 [ 668.506830][ T10] dragonrise 0003:0079:0011.001F: unknown main item tag 0x0 [ 668.506859][ T10] dragonrise 0003:0079:0011.001F: unknown main item tag 0x0 [ 668.506886][ T10] dragonrise 0003:0079:0011.001F: unknown main item tag 0x0 [ 668.506913][ T10] dragonrise 0003:0079:0011.001F: unknown main item tag 0x0 [ 668.581081][ T8821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.581151][ T8821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 668.581182][ T8821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.581225][ T8821] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 668.581252][ T8821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.672746][ T8821] usb 4-1: config 0 descriptor?? [ 668.741496][ T10] dragonrise 0003:0079:0011.001F: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 668.788335][ T10] usb 1-1: USB disconnect, device number 11 [ 668.869342][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2147'. [ 669.050759][T13260] fido_id[13260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 669.080980][T13267] netlink: 'syz.1.2149': attribute type 14 has an invalid length. [ 669.107649][ T8821] hid-picolcd 0003:04D8:F002.0020: item fetching failed at offset 3/5 [ 669.108208][ T8821] hid-picolcd 0003:04D8:F002.0020: device report parse failed [ 669.108288][ T8821] hid-picolcd 0003:04D8:F002.0020: probe with driver hid-picolcd failed with error -22 [ 669.203421][T13271] tmpfs: Unknown parameter 'usrquota%½p' [ 669.453880][ T10] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 669.609507][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 669.611642][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.611678][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.611730][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 669.611760][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.616681][ T10] usb 3-1: config 0 descriptor?? [ 669.631323][ T10] hub 3-1:0.0: USB hub found [ 669.832190][ T10] hub 3-1:0.0: 26 ports detected [ 669.832693][ T10] hub 3-1:0.0: insufficient power available to use all downstream ports [ 670.036185][ T10] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 670.036217][ T10] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 670.060777][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 670.060924][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 670.100694][ T10] usb 3-1: USB disconnect, device number 109 [ 670.549385][ T8821] usb 4-1: USB disconnect, device number 112 [ 670.795024][T13292] syzkaller1: entered promiscuous mode [ 670.795044][T13292] syzkaller1: entered allmulticast mode [ 670.824409][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'. [ 671.255113][T13307] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 671.368835][ T8821] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 671.518811][ T8821] usb 2-1: Using ep0 maxpacket: 16 [ 671.537108][ T8821] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 671.537142][ T8821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.537166][ T8821] usb 2-1: Product: syz [ 671.537182][ T8821] usb 2-1: Manufacturer: syz [ 671.537199][ T8821] usb 2-1: SerialNumber: syz [ 671.612096][ T8821] usb 2-1: config 0 descriptor?? [ 671.632281][ T8821] gspca_main: spca508-2.14.0 probing 041e:4018 [ 671.635243][ T5704] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 671.778528][ T5704] usb 3-1: device descriptor read/64, error -71 [ 671.823551][ T8821] gspca_spca508: reg_read err -32 [ 671.824754][ T8821] gspca_spca508: reg_read err -32 [ 672.027404][ T8821] gspca_spca508: reg_read err -32 [ 672.034366][ T8821] gspca_spca508: reg_read err -32 [ 672.048446][ T5704] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 672.178608][ T5704] usb 3-1: device descriptor read/64, error -71 [ 672.299226][ T5704] usb usb3-port1: attempt power cycle [ 672.451333][ T8821] gspca_spca508: reg write: error -71 [ 672.451424][ T8821] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 672.495770][ T8821] usb 2-1: USB disconnect, device number 5 [ 672.648161][ T5704] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 672.668763][ T5704] usb 3-1: device descriptor read/8, error -71 [ 672.907881][ T5704] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 672.928475][ T5704] usb 3-1: device descriptor read/8, error -71 [ 673.056221][ T5704] usb usb3-port1: unable to enumerate USB device [ 673.283271][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'. [ 673.728650][ T8821] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 673.867416][ T8821] usb 2-1: device descriptor read/64, error -71 [ 674.107342][ T8821] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 674.237216][ T8821] usb 2-1: device descriptor read/64, error -71 [ 674.347729][ T8821] usb usb2-port1: attempt power cycle [ 674.691401][ T8821] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 674.713976][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2172'. [ 674.714574][ T8821] usb 2-1: device descriptor read/8, error -71 [ 674.837034][ T5817] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 674.956918][ T8821] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 674.977376][ T8821] usb 2-1: device descriptor read/8, error -71 [ 674.995213][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.995253][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.995289][ T5817] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 674.995306][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.013492][ T5817] usb 3-1: config 0 descriptor?? [ 675.111100][ T8821] usb usb2-port1: unable to enumerate USB device [ 675.448548][ T5817] hid_parser_main: 8 callbacks suppressed [ 675.448568][ T5817] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 675.448595][ T5817] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 675.448615][ T5817] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 675.448634][ T5817] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 675.448658][ T5817] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 675.448678][ T5817] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 675.448701][ T5817] pyra 0003:1E7D:2CF6.0021: unknown main item tag 0x0 [ 675.454220][ T5817] pyra 0003:1E7D:2CF6.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 675.626583][ T8821] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 675.776534][ T8821] usb 1-1: Using ep0 maxpacket: 32 [ 675.792820][ T8821] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 675.792854][ T8821] usb 1-1: config 0 has no interface number 0 [ 675.792933][ T8821] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 675.792952][ T8821] usb 1-1: config 0 interface 89 has no altsetting 0 [ 675.795604][ T8821] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 675.795636][ T8821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.795693][ T8821] usb 1-1: Product: syz [ 675.795706][ T8821] usb 1-1: Manufacturer: syz [ 675.795717][ T8821] usb 1-1: SerialNumber: syz [ 675.861439][ T8821] usb 1-1: config 0 descriptor?? [ 675.890865][ T8821] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 675.890935][ T8821] em28xx 1-1:0.89: Video interface 89 found: [ 676.138532][ T8821] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 676.255487][ T8821] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 676.255709][ T8821] em28xx 1-1:0.89: board has no eeprom [ 676.317170][ T8821] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 676.317201][ T8821] em28xx 1-1:0.89: analog set to bulk mode. [ 676.374340][ T5333] em28xx 1-1:0.89: Registering V4L2 extension [ 676.458552][ T8821] usb 1-1: USB disconnect, device number 12 [ 676.549610][ T5817] pyra 0003:1E7D:2CF6.0021: couldn't init struct pyra_device [ 676.549657][ T5817] pyra 0003:1E7D:2CF6.0021: couldn't install mouse [ 676.579094][ T8821] em28xx 1-1:0.89: Disconnecting em28xx [ 676.713416][ T5333] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 676.713444][ T5333] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 676.713460][ T5333] em28xx 1-1:0.89: No AC97 audio processor [ 676.831431][ T5817] pyra 0003:1E7D:2CF6.0021: probe with driver pyra failed with error -71 [ 676.867751][ T5817] usb 3-1: USB disconnect, device number 114 [ 676.955326][T13381] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2180'. [ 676.974818][T13382] FAULT_INJECTION: forcing a failure. [ 676.974818][T13382] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 676.974865][T13382] CPU: 1 UID: 0 PID: 13382 Comm: syz.0.2179 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 676.974888][T13382] Tainted: [L]=SOFTLOCKUP [ 676.974895][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 676.974905][T13382] Call Trace: [ 676.974912][T13382] [ 676.974919][T13382] dump_stack_lvl+0xe8/0x150 [ 676.974944][T13382] should_fail_ex+0x467/0x600 [ 676.974970][T13382] prepare_alloc_pages+0x223/0x650 [ 676.975020][T13382] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 676.975064][T13382] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 676.975119][T13382] ? __pfx_policy_nodemask+0x10/0x10 [ 676.975151][T13382] ? lockdep_hardirqs_on+0x7a/0x110 [ 676.975169][T13382] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 676.975196][T13382] alloc_pages_mpol+0xd4/0x280 [ 676.975216][T13382] alloc_pages_noprof+0xd2/0x2f0 [ 676.975235][T13382] get_free_pages_noprof+0xf/0x80 [ 676.975251][T13382] __kasan_populate_vmalloc+0x38/0x1c0 [ 676.975275][T13382] ? rt_spin_unlock+0x163/0x200 [ 676.975299][T13382] alloc_vmap_area+0xd1a/0x1420 [ 676.975332][T13382] ? __pfx_alloc_vmap_area+0x10/0x10 [ 676.975353][T13382] ? __kmalloc_cache_node_noprof+0x459/0x670 [ 676.975379][T13382] ? __get_vm_area_node+0x136/0x300 [ 676.975399][T13382] ? __get_vm_area_node+0x136/0x300 [ 676.975424][T13382] __get_vm_area_node+0x1f2/0x300 [ 676.975449][T13382] __vmalloc_node_range_noprof+0x34e/0x1560 [ 676.975473][T13382] ? copy_process+0x820/0x43f0 [ 676.975498][T13382] ? percpu_ref_get_many+0x19/0x140 [ 676.975520][T13382] ? __memcg_slab_post_alloc_hook+0x4d6/0xf60 [ 676.975555][T13382] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 676.975579][T13382] ? trace_kmem_cache_alloc+0x29/0xe0 [ 676.975620][T13382] ? memcpy_and_pad+0x48/0x80 [ 676.975658][T13382] __vmalloc_node_noprof+0xc2/0x100 [ 676.975689][T13382] ? copy_process+0x820/0x43f0 [ 676.975710][T13382] ? copy_process+0x820/0x43f0 [ 676.975737][T13382] dup_task_struct+0x2a0/0x8e0 [ 676.975761][T13382] ? rt_spin_unlock+0x163/0x200 [ 676.975796][T13382] copy_process+0x820/0x43f0 [ 676.975852][T13382] ? __pfx_copy_process+0x10/0x10 [ 676.975890][T13382] vhost_task_create+0x1f9/0x380 [ 676.975921][T13382] ? look_up_lock_class+0x57/0x110 [ 676.975941][T13382] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 676.975966][T13382] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 676.975991][T13382] ? __pfx_vhost_task_create+0x10/0x10 [ 676.976033][T13382] ? __pfx_vhost_task_fn+0x10/0x10 [ 676.976068][T13382] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 676.976090][T13382] ? lockdep_hardirqs_on+0x7a/0x110 [ 676.976112][T13382] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 676.976135][T13382] ? mutex_lock_nested+0x152/0x1d0 [ 676.976164][T13382] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 676.976195][T13382] kvm_mmu_post_init_vm+0x147/0x2b0 [ 676.976224][T13382] kvm_arch_vcpu_ioctl_run+0x7c/0x1920 [ 676.976261][T13382] ? rt_write_unlock+0x19c/0x360 [ 676.976303][T13382] kvm_vcpu_ioctl+0xa64/0xfe0 [ 676.976346][T13382] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 676.976384][T13382] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 676.976406][T13382] ? lockdep_hardirqs_on+0x7a/0x110 [ 676.976448][T13382] ? __fget_files+0x2a/0x420 [ 676.976476][T13382] ? __fget_files+0x3a8/0x420 [ 676.976499][T13382] ? __fget_files+0x2a/0x420 [ 676.976526][T13382] ? bpf_lsm_file_ioctl+0x9/0x20 [ 676.976564][T13382] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 676.976609][T13382] __se_sys_ioctl+0xff/0x170 [ 676.976651][T13382] do_syscall_64+0x17b/0x530 [ 676.976675][T13382] ? irqentry_exit+0x10f/0x8f0 [ 676.976696][T13382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.976720][T13382] ? clear_bhb_loop+0x40/0x90 [ 676.976749][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.976773][T13382] RIP: 0033:0x7f658e14de59 [ 676.976795][T13382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.976815][T13382] RSP: 002b:00007f658c385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.976840][T13382] RAX: ffffffffffffffda RBX: 00007f658e3d6090 RCX: 00007f658e14de59 [ 676.976858][T13382] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 676.976872][T13382] RBP: 00007f658c385090 R08: 0000000000000000 R09: 0000000000000000 [ 676.976887][T13382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.976902][T13382] R13: 00007f658e3d6128 R14: 00007f658e3d6090 R15: 00007ffd98fc44d8 [ 676.976939][T13382] [ 676.979017][T13382] syz.0.2179: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 676.979097][T13382] CPU: 1 UID: 0 PID: 13382 Comm: syz.0.2179 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 676.979128][T13382] Tainted: [L]=SOFTLOCKUP [ 676.979137][T13382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 676.979150][T13382] Call Trace: [ 676.979159][T13382] [ 676.979169][T13382] dump_stack_lvl+0xe8/0x150 [ 676.979203][T13382] warn_alloc+0x24c/0x270 [ 676.979238][T13382] ? kasan_quarantine_put+0xbb/0x1f0 [ 676.979274][T13382] ? __pfx_warn_alloc+0x10/0x10 [ 676.979310][T13382] ? __get_vm_area_node+0x20b/0x300 [ 676.979345][T13382] ? __get_vm_area_node+0x20b/0x300 [ 676.979382][T13382] __vmalloc_node_range_noprof+0x376/0x1560 [ 676.979422][T13382] ? percpu_ref_get_many+0x19/0x140 [ 676.979452][T13382] ? __memcg_slab_post_alloc_hook+0x4d6/0xf60 [ 676.979497][T13382] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 676.979528][T13382] ? trace_kmem_cache_alloc+0x29/0xe0 [ 676.979560][T13382] ? memcpy_and_pad+0x48/0x80 [ 676.979591][T13382] __vmalloc_node_noprof+0xc2/0x100 [ 676.979621][T13382] ? copy_process+0x820/0x43f0 [ 676.979675][T13382] ? copy_process+0x820/0x43f0 [ 676.979702][T13382] dup_task_struct+0x2a0/0x8e0 [ 676.979725][T13382] ? rt_spin_unlock+0x163/0x200 [ 676.979760][T13382] copy_process+0x820/0x43f0 [ 676.979818][T13382] ? __pfx_copy_process+0x10/0x10 [ 676.979857][T13382] vhost_task_create+0x1f9/0x380 [ 676.979887][T13382] ? look_up_lock_class+0x57/0x110 [ 676.979958][T13382] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 676.980028][T13382] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 676.980103][T13382] ? __pfx_vhost_task_create+0x10/0x10 [ 676.980220][T13382] ? __pfx_vhost_task_fn+0x10/0x10 [ 676.980311][T13382] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 676.980377][T13382] ? lockdep_hardirqs_on+0x7a/0x110 [ 676.980434][T13382] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 676.980513][T13382] ? mutex_lock_nested+0x152/0x1d0 [ 676.980589][T13382] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 676.980665][T13382] kvm_mmu_post_init_vm+0x147/0x2b0 [ 676.980751][T13382] kvm_arch_vcpu_ioctl_run+0x7c/0x1920 [ 676.980845][T13382] ? rt_write_unlock+0x19c/0x360 [ 676.980956][T13382] kvm_vcpu_ioctl+0xa64/0xfe0 [ 676.981076][T13382] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 676.981178][T13382] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 676.981242][T13382] ? lockdep_hardirqs_on+0x7a/0x110 [ 676.981329][T13382] ? __fget_files+0x2a/0x420 [ 676.981365][T13382] ? __fget_files+0x3a8/0x420 [ 676.981444][T13382] ? __fget_files+0x2a/0x420 [ 676.981531][T13382] ? bpf_lsm_file_ioctl+0x9/0x20 [ 676.981638][T13382] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 676.981738][T13382] __se_sys_ioctl+0xff/0x170 [ 676.981834][T13382] do_syscall_64+0x17b/0x530 [ 676.981891][T13382] ? irqentry_exit+0x10f/0x8f0 [ 676.981947][T13382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.982020][T13382] ? clear_bhb_loop+0x40/0x90 [ 676.982097][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.982163][T13382] RIP: 0033:0x7f658e14de59 [ 676.982220][T13382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.982273][T13382] RSP: 002b:00007f658c385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.982342][T13382] RAX: ffffffffffffffda RBX: 00007f658e3d6090 RCX: 00007f658e14de59 [ 676.982386][T13382] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 676.982415][T13382] RBP: 00007f658c385090 R08: 0000000000000000 R09: 0000000000000000 [ 676.982456][T13382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.982490][T13382] R13: 00007f658e3d6128 R14: 00007f658e3d6090 R15: 00007ffd98fc44d8 [ 676.982587][T13382] [ 677.006769][T13382] Mem-Info: [ 677.006812][T13382] active_anon:72380 inactive_anon:0 isolated_anon:0 [ 677.006812][T13382] active_file:0 inactive_file:22194 isolated_file:0 [ 677.006812][T13382] unevictable:768 dirty:35 writeback:0 [ 677.006812][T13382] slab_reclaimable:12833 slab_unreclaimable:96444 [ 677.006812][T13382] mapped:26043 shmem:67111 pagetables:1341 [ 677.006812][T13382] sec_pagetables:0 bounce:0 [ 677.006812][T13382] kernel_misc_reclaimable:0 [ 677.006812][T13382] free:1277035 free_pcp:2101 free_cma:0 [ 677.007047][T13382] Node 0 active_anon:289520kB inactive_anon:0kB active_file:0kB inactive_file:88548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104080kB dirty:140kB writeback:0kB shmem:266908kB kernel_stack:14388kB pagetables:5228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 677.007186][T13382] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 677.007325][T13382] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.007689][T13382] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 677.007805][T13382] Node 0 DMA32 free:1171136kB boost:0kB min:3908kB low:6428kB high:8948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:289520kB inactive_anon:0kB active_file:0kB inactive_file:88548kB unevictable:1536kB writepending:140kB zspages:0kB present:3129332kB managed:2550076kB mlocked:0kB bounce:0kB free_pcp:8404kB local_pcp:3764kB free_cma:0kB [ 677.007974][T13382] lowmem_reserve[]: 0 0 0 0 0 [ 677.008081][T13382] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:552kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.008278][T13382] lowmem_reserve[]: 0 0 0 0 0 [ 677.011898][T13382] Node 1 Normal free:3921644kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.012092][T13382] lowmem_reserve[]: 0 0 0 0 0 [ 677.012204][T13382] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 677.012567][T13382] Node 0 DMA32: 98*4kB (UME) 355*8kB (UME) 255*16kB (UME) 139*32kB (UM) 55*64kB (UME) 18*128kB (UM) 20*256kB (UM) 35*512kB (UME) 12*1024kB (UM) 4*2048kB (UM) 271*4096kB (UM) = 1171120kB [ 677.013223][T13382] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 677.013635][T13382] Node 1 Normal: 5*4kB (UM) 1*8kB (U) 23*16kB (UM) 7*32kB (UM) 8*64kB (UM) 5*128kB (UM) 2*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 956*4096kB (M) = 3921644kB [ 677.021175][T13382] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.021230][T13382] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 677.021284][T13382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.021337][T13382] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 677.021382][T13382] 89301 total pagecache pages [ 677.021405][T13382] 0 pages in swap cache [ 677.021427][T13382] Free swap = 124996kB [ 677.021457][T13382] Total swap = 124996kB [ 677.021488][T13382] 2097051 pages RAM [ 677.021511][T13382] 0 pages HighMem/MovableOnly [ 677.021534][T13382] 427780 pages reserved [ 677.021556][T13382] 0 pages cma reserved [ 678.532279][ T5333] usb 1-1: Decoder not found [ 678.532303][ T5333] em28xx 1-1:0.89: failed to create media graph [ 678.532395][ T5333] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 678.635242][ T823] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 678.653033][ T5333] INFO: trying to register non-static key. [ 678.653119][ T5333] The code is fine but needs lockdep annotation, or maybe [ 678.653128][ T5333] you didn't initialize this object before use? [ 678.653168][ T5333] turning off the locking correctness valid[ 678.653168][ T5333] turning off the locking correctness validator. [ 678.653219][ T5333] CPU: 1 UID: 0 PID: 5333 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 678.653249][ T5333] Tainted: [L]=SOFTLOCKUP [ 678.653257][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 678.653272][ T5333] Workqueue: events request_module_async [ 678.653301][ T5333] Call Trace: [ 678.653310][ T5333] [ 678.653318][ T5333] dump_stack_lvl+0xe8/0x150 [ 678.653349][ T5333] assign_lock_key+0x133/0x150 [ 678.653374][ T5333] register_lock_class+0xcc/0x2e0 [ 678.653411][ T5333] __lock_acquire+0xaf/0x2e40 [ 678.653433][ T5333] ? ret_from_fork_asm+0x1a/0x30 [ 678.653466][ T5333] ? stack_trace_save+0xa9/0x100 [ 678.653497][ T5333] ? __pfx_stack_trace_save+0x10/0x10 [ 678.653533][ T5333] lock_acquire+0x115/0x350 [ 678.653566][ T5333] ? __wake_up_common_lock+0x2f/0x1f0 [ 678.653604][ T5333] rt_spin_lock+0x83/0x400 [ 678.653632][ T5333] ? __wake_up_common_lock+0x2f/0x1f0 [ 678.653664][ T5333] ? __pfx_rt_spin_lock+0x10/0x10 [ 678.653696][ T5333] __wake_up_common_lock+0x2f/0x1f0 [ 678.653729][ T5333] __vb2_queue_cancel+0x2de/0xdc0 [ 678.653761][ T5333] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 678.653781][ T5333] ? lockdep_hardirqs_on+0x7a/0x110 [ 678.653802][ T5333] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 678.653841][ T5333] vb2_core_queue_release+0x2f/0x150 [ 678.653877][ T5333] vb2_video_unregister_device+0x15b/0x200 [ 678.653914][ T5333] em28xx_v4l2_init+0x1c60/0x3140 [ 678.653946][ T5333] em28xx_init_extension+0x120/0x1d0 [ 678.653992][ T5333] ? process_one_work+0x7fd/0x1480 [ 678.654016][ T5333] process_one_work+0xaaf/0x1480 [ 678.654049][ T5333] ? __pfx_process_one_work+0x10/0x10 [ 678.654070][ T5333] ? do_raw_spin_lock+0x12b/0x2f0 [ 678.654103][ T5333] ? assign_work+0x3cf/0x5d0 [ 678.654128][ T5333] worker_thread+0xb05/0x10d0 [ 678.654156][ T5333] ? __kthread_parkme+0x71/0x1f0 [ 678.654187][ T5333] kthread+0x388/0x470 [ 678.654216][ T5333] ? __pfx_worker_thread+0x10/0x10 [ 678.654240][ T5333] ? __pfx_kthread+0x10/0x10 [ 678.654269][ T5333] ret_from_fork+0x514/0xb70 [ 678.654301][ T5333] ? __pfx_ret_from_fork+0x10/0x10 [ 678.654331][ T5333] ? __switch_to+0xc89/0x1420 [ 678.654356][ T5333] ? __pfx_kthread+0x10/0x10 [ 678.654385][ T5333] ret_from_fork_asm+0x1a/0x30 [ 678.654422][ T5333] [ 678.662951][ T5333] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 678.663181][ T5333] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 678.663265][ T5333] CPU: 1 UID: 0 PID: 5333 Comm: kworker/1:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 678.663350][ T5333] Tainted: [L]=SOFTLOCKUP [ 678.663371][ T5333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 678.663413][ T5333] Workqueue: events request_module_async [ 678.663483][ T5333] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 678.663571][ T5333] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 1c ce 93 00 48 ba 00 00 00 00 00 fc [ 678.663624][ T5333] RSP: 0000:ffffc900047df908 EFLAGS: 00010246 [ 678.663677][ T5333] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 678.663723][ T5333] RDX: dffffc0000000000 RSI: ffffffff8bcbd060 RDI: 00000000ffffffff [ 678.663781][ T5333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 678.663828][ T5333] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff8880348e5b14 [ 678.663910][ T5333] R13: ffff8880348e5c28 R14: 0000000000000000 R15: 0000000000000000 [ 678.663951][ T5333] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 678.664006][ T5333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.664055][ T5333] CR2: 000000110c261ad1 CR3: 000000003701e000 CR4: 00000000003526f0 [ 678.664098][ T5333] Call Trace: [ 678.664121][ T5333] [ 678.664153][ T5333] __vb2_queue_cancel+0x2de/0xdc0 [ 678.664241][ T5333] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 678.664305][ T5333] ? lockdep_hardirqs_on+0x7a/0x110 [ 678.664358][ T5333] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 678.664446][ T5333] vb2_core_queue_release+0x2f/0x150 [ 678.664528][ T5333] vb2_video_unregister_device+0x15b/0x200 [ 678.664628][ T5333] em28xx_v4l2_init+0x1c60/0x3140 [ 678.664712][ T5333] em28xx_init_extension+0x120/0x1d0 [ 678.664779][ T5333] ? process_one_work+0x7fd/0x1480 [ 678.664801][ T5333] process_one_work+0xaaf/0x1480 [ 678.664879][ T5333] ? __pfx_process_one_work+0x10/0x10 [ 678.664933][ T5333] ? do_raw_spin_lock+0x12b/0x2f0 [ 678.665020][ T5333] ? assign_work+0x3cf/0x5d0 [ 678.665083][ T5333] worker_thread+0xb05/0x10d0 [ 678.665185][ T5333] ? __kthread_parkme+0x71/0x1f0 [ 678.665269][ T5333] kthread+0x388/0x470 [ 678.665345][ T5333] ? __pfx_worker_thread+0x10/0x10 [ 678.665381][ T5333] ? __pfx_kthread+0x10/0x10 [ 678.665410][ T5333] ret_from_fork+0x514/0xb70 [ 678.665441][ T5333] ? __pfx_ret_from_fork+0x10/0x10 [ 678.665470][ T5333] ? __switch_to+0xc89/0x1420 [ 678.665496][ T5333] ? __pfx_kthread+0x10/0x10 [ 678.665553][ T5333] ret_from_fork_asm+0x1a/0x30 [ 678.665652][ T5333] [ 678.665683][ T5333] Modules linked in: [ 678.665852][ T5333] ---[ end trace 0000000000000000 ]--- [ 678.679562][ T5333] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 678.679689][ T5333] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 1c ce 93 00 48 ba 00 00 00 00 00 fc [ 678.679744][ T5333] RSP: 0000:ffffc900047df908 EFLAGS: 00010246 [ 678.679801][ T5333] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 678.679842][ T5333] RDX: dffffc0000000000 RSI: ffffffff8bcbd060 RDI: 00000000ffffffff [ 678.679886][ T5333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 678.679962][ T5333] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff8880348e5b14 [ 678.680046][ T5333] R13: ffff8880348e5c28 R14: 0000000000000000 R15: 0000000000000000 [ 678.680088][ T5333] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 678.680139][ T5333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.680182][ T5333] CR2: 000000110c261ad1 CR3: 000000003701e000 CR4: 00000000003526f0 [ 678.680311][ T5333] Kernel panic - not syncing: Fatal exception [ 678.680950][ T5333] Kernel Offset: disabled