last executing test programs: 4m27.739917158s ago: executing program 2 (id=147): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup3(r0, r1, 0x80000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r3, 0x5428) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000002f81c461b3fea8"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000000)={0x0, 0x6, 0xf00}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, &(0x7f00000007c0)) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0xffff, 0x6, 0x7, 0x7f5, 0xe, "39c360bf94ad144cce67ca6cf731552d736205"}) syz_emit_ethernet(0x9c, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x66, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [{0x1, 0x9, "a78ce54006598080a8030037004023493b0800000000000000ffff23732472eefa45ad96489269008e254c1e4a8a8b3f0ab0c430d3be27df3e34060c00ca0a5c15b3e5af1802"}, {0xe, 0x1, "000000000400260004000000"}]}}}}}}, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000280)={r8, 0x1, 0x8000, 0x2000}) syz_ublk_setup_io_uring(0x1f, &(0x7f0000000040)={0x0, 0x30b5, 0x40000, 0x3, 0x158, 0x0, r2}, &(0x7f0000002540), &(0x7f0000000280), &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r9) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000081) recvmmsg(r9, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f0000000200)=""/209, 0xd1}], 0x4}, 0x803fffff}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x18000}], 0x3, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x840, 0x3, 0x3, 0x8, 0x0, 0x1}, 0x30, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 4m22.466308783s ago: executing program 2 (id=165): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x80800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r3, 0x43, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000180), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x11e, 0x83, 0x0, &(0x7f0000001100)) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x20a00, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r8, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x0, 0x5}, 0x0, {}, 0x67, 0x2}) syz_emit_ethernet(0xfef3, 0x0, 0x0) 4m20.772054915s ago: executing program 2 (id=170): close(0xffffffffffffffff) setresgid(0x0, 0xee01, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x1e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x10c, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x3a}}}}, [@NL80211_ATTR_IE={0xe4, 0x2a, [@random={0x41, 0x42, "ec2e99295a1b404cd6954a388582008c4b723ee4f1db33b2377278cc29c00faeafbd5fb32968d6b8112fd439a4c2a97e5f19403eb7a9bdff2a598af6a9c6a6996a82"}, @gcr_ga={0xbd, 0x6, @broadcast}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @fast_bss_trans={0x37, 0x8f, {0x5, 0x4, "eb1322ac93c171f7b4af636323ed01e5", "255942d9a562ad235c2e108ca0780d865632ba3dcfc25177b1eaa691822a1f7b", "1a30481fafe17e86c83cacfc80d3d1a8d709fd1ba0ff180ed3d12edfe6847898", [{0x4, 0x19, "c3f13d5d4bf5b45d195020a226b2ab08afb63b8c04ba3652fa"}, {0x2, 0x16, "233dfc07d1035819f8ac7883a7f261dad20b5323ef32"}, {0x3}, {0x4, 0x6, "2f09a348e1b3"}]}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) setuid(0xee00) r4 = msgget$private(0x0, 0x3ac) msgrcv(r4, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x8, 0x800) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) dup(r5) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="24001e1f8c46bb75c9548f696e606dd4bce997bd5bc2ff0b22cd786dfb4f510100dcf913f5a1b7f0b41306"]) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}]}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r10 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000007c0)='=/\xbe9\xfdAQBv=K9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\xa5\xc2 nU\xab\xdc\xd0\xd6\xf6\xb9\x00\x00\x00\x00\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2$\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x91\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2Jl\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x05\x00\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\x01\x00@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6c\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7\x00\x00\x00\x00\x00\x00\x00\x00P\xf3\xaa\xa72\xf6\xf0\xe7M)\t\xc8\x82g\xaaR\x0e\x94\xb8b\x19 \f\xf81\xd5\x84\xd4\x17\x1c\x9e\x1a\x99\xf3M\xc0\xc6 \xad&\x03\xa1\xed\xa9\xd7\xe9o;\x1b\xaf\b\xdeU\xed\x04!\x813\xdeR\x92u\xcfi\x907$\xb6P\xf9\x90\xebK0\xce\xb2\xda:\xe3u=\xe8gw\xc6\xf9Y$\x90/3#\xe2\x99\x9d\f\xb0\x1b\x9c\xb8\x89H YE\xb5\xb7\xb4[3J\xf1g#\xab\xfe\'Q\xf6\x83\xa6\xab\xf9\xfb\xd8\x04us\xc7\xf8_\x8f\xd9,\x00\x8d\xcce>^\x98\x8f\xb4\xe6I\x1f\xc1\xfd-\xa6\x93j>\x1f\x0f\x01\x19\xcb\xdc?\xa3r\xa0\xcdv\x12\xb8\x8bB<\x9c\x86\xbe\xdcFN\x19\xa5\f!w\x18x\xad\xdfRQ\x1d\xc1\'\xd4\x16{\xd2\xadDR\xa6Y\xc8\xfe8\xdf\x88\x9c\x8f\x90\xff6{\xc2E;isd\xc9\xfb\xe6\v\xd7\xd6\xff\x115\xbb\x9c\x14\x83V\xe4\x9fd\xd7\x1b\x1a\n\xd8\xc1\xe5\x86\xc6\xfc\xba\xb3\xac\xfb\xb6\xcd\x1a\xbd\xcf\xbaA\xf1\xfe\x82\x88v\xd0\xb1#\x1d\xfed\xb3\xac\xd9\x85\xf6a\xffU&\x15\xb7\xc5\xc4\xe6\xc0\x85\xca,F\xa2\xb3\xa4\xfc\x85\xf0\xca\x8f\xb5\x00', 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000200)={r9, 0x5, 0x8}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={r9, 0xcf}, &(0x7f0000000200)=0x8) 4m17.797735982s ago: executing program 2 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f00000190c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) r6 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) 4m16.832778756s ago: executing program 2 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/86, 0x56}], 0x1, 0x80000001, 0x2) 4m14.746280485s ago: executing program 2 (id=196): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x1b38, 0x800, 0x3, 0x9}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6e0, 0x40000, 0x0, 0x8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5ae4, 0x10020, 0x1, 0x20b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddb2, 0x80000, 0x2, 0x242}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b7d, 0x40, 0x1, 0xd3}}], 0x4, &(0x7f0000003800)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x4, 0x68d, 0x0, &(0x7f0000002800)=@buf_max_buf="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"}}, &(0x7f0000003880)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 4m14.323322134s ago: executing program 32 (id=196): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x1b38, 0x800, 0x3, 0x9}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6e0, 0x40000, 0x0, 0x8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5ae4, 0x10020, 0x1, 0x20b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddb2, 0x80000, 0x2, 0x242}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b7d, 0x40, 0x1, 0xd3}}], 0x4, &(0x7f0000003800)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x4, 0x68d, 0x0, &(0x7f0000002800)=@buf_max_buf="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"}}, &(0x7f0000003880)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 10.376534975s ago: executing program 0 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="080006"], 0x24}}, 0x4) 9.355787425s ago: executing program 0 (id=1082): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66e", 0x59}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb", 0x3e}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.068667079s ago: executing program 4 (id=1088): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) 7.903104626s ago: executing program 0 (id=1091): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[]) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[], 0xe) 7.036359245s ago: executing program 4 (id=1096): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0xb, 0x4, 0x1, 0x23, 0x2c, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0x18, 0x0, [{0x6, 0xc, "80c014fe524b1603865e"}, {0x2, 0x6, "8e8d288d"}]}]}}}}}) syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, 0x0, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.887609992s ago: executing program 0 (id=1098): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0xa, 0x4, 0x1, 0x23, 0x28, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0x14, 0x0, [{0x6, 0xc, "80c014fe524b1603865e"}, {0x2, 0x2}]}]}}}}}) syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.762785519s ago: executing program 5 (id=1101): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = openat(r2, &(0x7f00000000e0)='./sec\x00', 0x1, 0x3) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x82000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x44, 0x2400) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:07.0/driver_override\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='\n\x00', 0x2) 5.579101885s ago: executing program 0 (id=1103): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, r1, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x10, r4, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0, 0x2e}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000480)="86955d0a24ef6deeb989e9e5ff39b7b8a38306d565baa1f36a685397bb568d3bdd94778dd80ea96735786d7d98129d0ce0a7d43c4dac62e6bfb67ea3d660a20a4d449fd1457ccd54433730cf612fc5f6e5095223b63883568952df369f7f1491f6907a25f8de133cc6f37570576bb58857561c56aab9aedff57ba8e34b4ae75354f7ddd62e56397ea247083b86fddc9002714d", 0x93}, {&(0x7f0000000540)="4257736de52f18e1bfddf04c24f939344b29357933142d75d31457e4c1faaa8d38330adf2614e5bae164a336518fdb80c5e90dce6ebf0e97a5cf099c141ff24160445aa8add638ff2af2ebdf60707e5771", 0x51}, {&(0x7f0000000600)="e4f959f019b23baa2b440ee5ff", 0xd}, {&(0x7f0000000640)="f52230c9aa464d1992ca50705eb7c1233a1ff1a90a3bb99ac9438e98edd3fe4695ddeb93df5ad52955dc027575b7a69b0b81f1e6af01fb8ccc26982016be4067cf26ec2c45dd130dcd1e9564056f3db2c1a5cb6f525bfd5ff5b6ecc5a886ad27f9615c8830e3906d44427e500a76bc83d6f2f98b08f351fad10b7209908572d0fe93d3ea", 0x84}, {&(0x7f0000000700)="d2487391cf45dff9d17a2fd28c197feb299467f5f867", 0x16}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="3dda83a7c3482528b437380cba5b3a578db62b1444bb33963bd221a772eec390aa3f93d4c13eedb05bfb48fe2eb14a41326dd8921b9b017392df706a2b1b7cc73b4d1dc5a0e2762fec4c9548c4d6aef551ab56809e9f1aa809f068b1b2d6cf993fe052715a3aa16d8af4ae39cb53142e9af7c065761db201c51ca6bca695243985a22be959e3dcd78240b02b9cb896b47bed85b992089ac749256d180ab03693ac73cfe174346b8672aeb48b67ef88281c036e6a20462af9ff99f75c4b181eb586fa39c798d3a9ac7dcc48", 0xcb}, {&(0x7f0000001840)="cf07558734374fd1d96362da0c310cad2196c234b4c37fcda10378765c742008d1cb6b4be38daef4bc25139b5589e6ef6ba64176377eace8675854d2604547120ca96f5e50a03b402313445e8cf3582d1c61b2c166c507fbf3003026d90e774ea7000000", 0x64}, {&(0x7f00000018c0)="687d8c3335c14a66d4f28d7c924c5b178c4de213b19a567b0c05e59cb1c0d02eccaa2c8abdf4a80c5bcdfa10b97110ea646dcf1f5e6f90d66b9515e12a188ce69b877480f6e6ac9452b9aee8305dfff1559a4375160224a46d88ea89145d4eb089275f7aad655442f3b10af2bff1e0857d4b16b8071efb7a9a9dd584ffdbfb1128306c52c533c83bb08412988e18488e7a9352364c30500f64d5063c756194e0f5c33732c92ec58e799bf1fad3fa57", 0xaf}, {&(0x7f0000001980)="aaac4f121623e5e54c386288fd3bb7245540a5f04a118750a407e82e56c967c982fe59bf0ec3", 0x26}], 0xa, &(0x7f0000001a80)=ANY=[@ANYBLOB="a800000000000000aa8ddb941fa2ca943a000000313100001e3cf555a6bf356ad7da9aa40e65d9e0a88f17d9c38b270eb0012904975cbd34eb5fa08a185577cc474872b99d485460ae7bff48ef0cb46f3497f350cf4856c4c7b522b9e7888d5ffae6f8e304e2388e76924c322080aa28eaa269053c4101d072aea730edc7c0924104cb5e7383350aada1327fec144a939f078a905e00"/168], 0xa8}, 0xfffffffd, 0x24048800}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff6734", 0xb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b4000000590806000108000604"], 0x0) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000038f030000000000fe020010850000003100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100020062b2d8ab0400000000000000100006000000000020"], 0x24, 0x3) 5.573083999s ago: executing program 4 (id=1104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}}, 0x20}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 5.359860244s ago: executing program 5 (id=1106): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) 4.946990198s ago: executing program 4 (id=1109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="080006"], 0x24}}, 0x4) 4.171654023s ago: executing program 3 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() socket(0x15, 0x80005, 0x0) syz_open_dev$sndctrl(0x0, 0xff1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003280), 0x40001) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000032c0)={0xf, 0x7, 0xe}) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000000c0)=""/141) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') 4.100436711s ago: executing program 5 (id=1111): pipe(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xe) 3.918087443s ago: executing program 4 (id=1113): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0x9, 0x4, 0x1, 0x23, 0x24, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0xe, 0x0, [{0x6, 0x2}, {0x2, 0x6, "8e8d288d"}]}]}}}}}) syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66e", 0x59}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc0740", 0x52}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.885187753s ago: executing program 5 (id=1114): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0xb, 0x4, 0x1, 0x23, 0x2c, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0x18, 0x0, [{0x6, 0xc, "80c014fe524b1603865e"}, {0x2, 0x6, "8e8d288d"}]}]}}}}}) syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, 0x0, 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.016596882s ago: executing program 1 (id=1115): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 3.013604621s ago: executing program 3 (id=1116): syz_open_dev$video4linux(&(0x7f0000000000), 0x10001, 0xa141) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) creat(&(0x7f0000000040)='./bus\x00', 0x0) (fail_nth: 1) 2.971006924s ago: executing program 1 (id=1117): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a"], 0x68}}, 0x64000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.875363573s ago: executing program 4 (id=1118): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000001940), 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x24, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xdc1b}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c885}, 0x20000000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x1e0, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2, @ANYRES32, @ANYRESHEX, @ANYRESHEX], 0x50) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='ip6gre0\x00'}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0xbd, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020820513014000010203010902ab0003010570030904000000010100000a240104002000020102092404051843f1e8030d240802030001818dfce484db0904010000010200000904010101010200000924020181050040040724010709000009050109080001fc02072501000302000904020000010200000904020101010200000c240201000294068c89ffb610240202020000100285b716136f3a2f092402011600040705090582091000020aa10725010c7fff07"], &(0x7f0000001740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3, 0x3, 0x9, 0x8, 0xd}, 0x4b, &(0x7f0000000600)=ANY=[@ANYBLOB="050f4b000514100a09020200000f0f01000f000000afffff0003100b1410048d46d0ccb1d21d7dc420a344cb84bfc4c1a6360f23300710023a42ff07141004002fb019db6cae945cda3063da097d90fb"], 0x3, [{0xf1, &(0x7f0000001780)=ANY=[@ANYBLOB="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"/380]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x500a}}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000680)=""/4096}, 0x20) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r8, 0x89e0, &(0x7f0000000100)=0x45) socket$nl_route(0x10, 0x3, 0x0) 2.664491389s ago: executing program 1 (id=1119): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_test', 0x82, 0x10a) io_setup(0x4fe, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f0000000000)="46cac79185c2641b", 0x8, 0x9, 0x0, 0x0, r0}]) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r2 = syz_clone(0x40004200, &(0x7f0000000380)="db7cf5f2aea1d97ec36455b0ac527e811b44680e47c616f4dbcbeb731352f5faa5dc2358de50479bb1a7cba352456cdedce9554d22dac0f96ebba7a50cd2669c03739633d0b1e119892ae3382a88d7ae57cc354749fb371a5fbe1658ff45f7bfbb0db8d43de2427525b30261a1ac07efe31c7b40207431645c418eda856f920599b2cdfe8e5086c248b7b17a8984934296a5d52e010c9d86d52199b8d8a0bca7a939ad21868c43c55a9140f378d2587b8a5da532ab95a4a391a14c5e41bfdfd79bb7b0e0ac354916b76ca4b98210e5f61c35327834abb6fdf1bba4762831", 0xde, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="ae35f2ff7048c69983b2811349d54b502544edad3dba3d112bd5925950cc2ebe148e48421f59f541343a540f54d5472cdb9922a241b341f9e4ee568ac8bc2590981f7668af14b70a5da6184937fb45144e6f9c10b36c04f1e5597b6ef0c030d267c7c3ddf9ad9304dcbe82808684b5410d4c70450e002aff68f460a79398198dab92b5d38762e8539043e511e6f4cb24a13d746558c74c5314abdaafe7754b2797f23de6db8aad576ca077f68c81") capset(&(0x7f00000005c0)={0x20080522, r2}, &(0x7f0000000600)={0x3, 0x7f, 0x4, 0x0, 0x4, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') read$dsp(r4, &(0x7f00000002c0)=""/140, 0x8c) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 2.664289696s ago: executing program 3 (id=1120): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) splice(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0xc, 0x3, 0x6) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) 1.583330723s ago: executing program 5 (id=1121): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.539118307s ago: executing program 3 (id=1122): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) 1.467911914s ago: executing program 1 (id=1123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0xa, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB="080006"], 0x24}}, 0x4) 856.600479ms ago: executing program 0 (id=1124): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000001940), 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x24, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xdc1b}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c885}, 0x20000000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x1e0, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYRES8=r1, @ANYRESHEX=r1, @ANYRES32, @ANYRESHEX, @ANYRESHEX], 0x50) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='ip6gre0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0xbd, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020820513014000010203010902ab0003010570030904000000010100000a240104002000020102092404051843f1e8030d240802030001818dfce484db0904010000010200000904010101010200000924020181050040040724010709000009050109080001fc02072501000302000904020000010200000904020101010200000c240201000294068c89ffb610240202020000100285b716136f3a2f092402011600040705090582091000020aa10725010c7fff07"], &(0x7f0000001740)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3, 0x3, 0x9, 0x8, 0xd}, 0x4b, &(0x7f0000000600)=ANY=[@ANYBLOB="050f4b000514100a09020200000f0f01000f000000afffff0003100b1410048d46d0ccb1d21d7dc420a344cb84bfc4c1a6360f23300710023a42ff07141004002fb019db6cae945cda3063da097d90fb"], 0x3, [{0xf1, &(0x7f0000001780)=ANY=[@ANYBLOB="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"/380]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x500a}}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000680)=""/4096}, 0x20) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000100)=0x45) socket$nl_route(0x10, 0x3, 0x0) 749.685026ms ago: executing program 1 (id=1125): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x10, 0x30}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="0000000000000000000000008100", 0xe}, {&(0x7f0000000180)="ff521d6e", 0x4}], 0x2}, 0x4040000) 325.547519ms ago: executing program 1 (id=1126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() socket(0x15, 0x80005, 0x0) syz_open_dev$sndctrl(0x0, 0xff1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003280), 0x40001) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000032c0)={0xf, 0x7, 0xe}) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000000c0)=""/141) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f0000000000)='f2fs\x00', 0x800401, &(0x7f0000000040)='usrquota') 322.259159ms ago: executing program 3 (id=1127): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2) 7.932778ms ago: executing program 5 (id=1128): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0x9, 0x4, 0x1, 0x23, 0x24, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0xe, 0x0, [{0x6, 0x2}, {0x2, 0x6, "8e8d288d"}]}]}}}}}) syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66e", 0x59}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc0740", 0x52}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 3 (id=1129): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a"], 0x68}}, 0x64000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): RBP: 00007f291d486090 R08: 0000000000000000 R09: 0000000000000000 [ 285.895025][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.895035][ T8391] R13: 00007f291f4b6038 R14: 00007f291f4b5fa0 R15: 00007ffc2dde5148 [ 285.895077][ T8391] [ 285.909212][ T8391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.156041][ T1836] usb 6-1: USB disconnect, device number 15 [ 286.293689][ T164] Bluetooth: hci5: Frame reassembly failed (-90) [ 286.293783][ T164] Bluetooth: hci5: Frame reassembly failed (-84) [ 286.293862][ T164] Bluetooth: hci5: Frame reassembly failed (-84) [ 286.293937][ T164] Bluetooth: hci5: Frame reassembly failed (-84) [ 286.294012][ T164] Bluetooth: hci5: Frame reassembly failed (-84) [ 286.716035][ T31] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 286.848412][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'. [ 286.866192][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 286.872513][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 286.872566][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.872591][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 286.872615][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 286.942538][ T31] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 286.942569][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.942588][ T31] usb 5-1: Product: syz [ 286.942602][ T31] usb 5-1: Manufacturer: syz [ 286.942616][ T31] usb 5-1: SerialNumber: syz [ 286.986925][ T31] usb 5-1: config 0 descriptor?? [ 286.989298][ T8405] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 287.153654][ T8423] FAULT_INJECTION: forcing a failure. [ 287.153654][ T8423] name failslab, interval 1, probability 0, space 0, times 0 [ 287.153675][ T8423] CPU: 0 UID: 0 PID: 8423 Comm: syz.0.689 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 287.153695][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.153707][ T8423] Call Trace: [ 287.153714][ T8423] [ 287.153722][ T8423] dump_stack_lvl+0xe8/0x150 [ 287.153756][ T8423] should_fail_ex+0x467/0x600 [ 287.153792][ T8423] should_failslab+0xa8/0x100 [ 287.153812][ T8423] __kmalloc_noprof+0xfe/0x780 [ 287.153822][ T8423] ? rcu_is_watching+0x15/0xb0 [ 287.153836][ T8423] ? tomoyo_realpath_from_path+0xef/0x640 [ 287.153850][ T8423] ? tomoyo_realpath_from_path+0xef/0x640 [ 287.153881][ T8423] tomoyo_realpath_from_path+0xef/0x640 [ 287.153916][ T8423] ? tomoyo_path_number_perm+0x219/0x5f0 [ 287.153938][ T8423] tomoyo_path_number_perm+0x246/0x5f0 [ 287.153963][ T8423] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 287.153977][ T8423] ? __lock_acquire+0x683/0x2ce0 [ 287.153995][ T8423] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 287.154009][ T8423] ? hook_file_ioctl+0x1f3/0x600 [ 287.154028][ T8423] ? lockdep_hardirqs_on+0x7a/0x110 [ 287.154085][ T8423] ? __fget_files+0x2a/0x420 [ 287.154109][ T8423] ? __fget_files+0x2a/0x420 [ 287.154128][ T8423] ? __fget_files+0x3a8/0x420 [ 287.154141][ T8423] ? __fget_files+0x2a/0x420 [ 287.154154][ T8423] security_file_ioctl+0xc3/0x2a0 [ 287.154167][ T8423] __se_sys_ioctl+0x47/0x170 [ 287.154181][ T8423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.154201][ T8423] do_syscall_64+0x174/0x580 [ 287.154225][ T8423] ? trace_irq_disable+0x3b/0x140 [ 287.154245][ T8423] ? clear_bhb_loop+0x40/0x90 [ 287.154269][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.154288][ T8423] RIP: 0033:0x7f27fd48e019 [ 287.154303][ T8423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.154311][ T8423] RSP: 002b:00007f27fb6e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.154323][ T8423] RAX: ffffffffffffffda RBX: 00007f27fd715fa0 RCX: 00007f27fd48e019 [ 287.154330][ T8423] RDX: 0000200000000100 RSI: 0000000040046109 RDI: 0000000000000003 [ 287.154336][ T8423] RBP: 00007f27fb6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 287.154343][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.154349][ T8423] R13: 00007f27fd716038 R14: 00007f27fd715fa0 R15: 00007ffc796e5978 [ 287.154379][ T8423] [ 287.154387][ T8423] ERROR: Out of memory at tomoyo_realpath_from_path. [ 287.270499][ T31] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 287.473983][ T31] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 288.416321][ T8428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.417017][ T8428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.456061][ T4914] Bluetooth: hci5: command 0x1003 tx timeout [ 288.562573][ T5621] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 288.786527][ C1] powermate: config urb returned -71 [ 288.786751][ C1] powermate: config urb returned -71 [ 288.786968][ C1] powermate: config urb returned -71 [ 288.814700][ T1836] usb 5-1: USB disconnect, device number 28 [ 288.814859][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 289.005970][ T10] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 289.158055][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 289.158224][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 289.158251][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.158275][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 289.158308][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 289.162053][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 289.162104][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 289.162129][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.162154][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 289.162176][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 289.163441][ T10] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 289.163489][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 289.163514][ T10] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.163538][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 289.163562][ T10] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 289.235993][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 289.427411][ T10] usb 1-1: string descriptor 0 read error: -22 [ 289.427551][ T10] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 289.427574][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.196928][ T10] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 290.310420][ T31] usb 6-1: device descriptor read/64, error -71 [ 290.556054][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 290.696045][ T31] usb 6-1: device descriptor read/64, error -71 [ 290.819091][ T31] usb usb6-port1: attempt power cycle [ 291.176050][ T31] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 291.200444][ T31] usb 6-1: device descriptor read/8, error -71 [ 292.258675][ T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 292.276323][ T31] usb 6-1: device descriptor read/8, error -71 [ 292.387136][ T31] usb usb6-port1: unable to enumerate USB device [ 292.690534][ T31] usb 1-1: USB disconnect, device number 30 [ 292.825114][ T8486] netlink: 32 bytes leftover after parsing attributes in process `syz.0.708'. [ 292.825157][ T8486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.708'. [ 293.059502][ T8490] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.082143][ T8480] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 293.125996][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 293.286031][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 293.288189][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 293.288218][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 293.288241][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 293.288252][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 293.288266][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 293.290419][ T10] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 293.290446][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.290464][ T10] usb 2-1: Product: syz [ 293.290478][ T10] usb 2-1: Manufacturer: syz [ 293.290491][ T10] usb 2-1: SerialNumber: syz [ 293.294089][ T10] usb 2-1: config 0 descriptor?? [ 293.390668][ T1836] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 293.406010][ T5784] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 293.497253][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 293.497809][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 293.498570][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 293.535985][ T1836] usb 4-1: Using ep0 maxpacket: 8 [ 293.538277][ T1836] usb 4-1: unable to get BOS descriptor or descriptor too short [ 293.539415][ T1836] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 293.539439][ T1836] usb 4-1: config 0 has no interface number 0 [ 293.539524][ T1836] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 293.539539][ T1836] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 293.539551][ T1836] usb 4-1: config 0 interface 88 has no altsetting 0 [ 293.542720][ T1836] usb 4-1: string descriptor 0 read error: -22 [ 293.542856][ T1836] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 293.542869][ T1836] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 293.557377][ T5784] usb 1-1: Using ep0 maxpacket: 8 [ 293.639026][ T1836] usb 4-1: config 0 descriptor?? [ 293.774897][ T1836] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input43 [ 293.854446][ T5784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 293.854551][ T5784] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.854578][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 293.854602][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 293.928166][ T5784] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 293.928592][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.928967][ T5784] usb 1-1: Product: syz [ 293.929369][ T5784] usb 1-1: Manufacturer: syz [ 293.929775][ T5784] usb 1-1: SerialNumber: syz [ 294.535987][ T5621] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 294.592428][ T10] iforce 2-1:0.0: usb_submit_urb failed: -110 [ 294.592879][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.593606][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.595785][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.622968][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.625627][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.639623][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.641967][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.642438][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.643217][ T5784] usb 1-1: config 0 descriptor?? [ 294.644327][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.644931][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.663059][ T8499] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 294.696911][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.699954][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.702446][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.727856][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.734406][ T10] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 294.734447][ T10] input input42: Timeout waiting for response from device. [ 294.911868][ T1836] usb 4-1: USB disconnect, device number 20 [ 294.924284][ T8507] FAULT_INJECTION: forcing a failure. [ 294.924284][ T8507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.924319][ T8507] CPU: 1 UID: 0 PID: 8507 Comm: syz.4.713 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 294.924344][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 294.924356][ T8507] Call Trace: [ 294.924363][ T8507] [ 294.924371][ T8507] dump_stack_lvl+0xe8/0x150 [ 294.924397][ T8507] should_fail_ex+0x467/0x600 [ 294.924416][ T8507] copy_fpstate_to_sigframe+0xac0/0xd80 [ 294.924438][ T8507] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 294.924470][ T8507] ? rt_spin_lock+0x1e0/0x400 [ 294.924501][ T8507] ? rt_spin_lock+0x1e0/0x400 [ 294.924524][ T8507] ? do_raw_spin_lock+0x12b/0x2f0 [ 294.924555][ T8507] ? fpu__alloc_mathframe+0xac/0x130 [ 294.924571][ T8507] get_sigframe+0x603/0x830 [ 294.924589][ T8507] ? __pfx_get_sigframe+0x10/0x10 [ 294.924605][ T8507] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 294.924624][ T8507] ? rt_spin_lock+0x1e0/0x400 [ 294.924650][ T8507] x64_setup_rt_frame+0x164/0xc50 [ 294.924674][ T8507] ? rt_spin_unlock+0x157/0x200 [ 294.924698][ T8507] ? rt_spin_unlock+0x163/0x200 [ 294.924719][ T8507] ? get_signal+0x10de/0x12c0 [ 294.924736][ T8507] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 294.924754][ T8507] arch_do_signal_or_restart+0x45b/0x860 [ 294.924771][ T8507] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 294.924803][ T8507] ? __x64_sys_preadv+0x28e/0x2c0 [ 294.924839][ T8507] exit_to_user_mode_loop+0x104/0x730 [ 294.924859][ T8507] ? rcu_is_watching+0x15/0xb0 [ 294.924883][ T8507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.924895][ T8507] do_syscall_64+0x353/0x580 [ 294.924909][ T8507] ? trace_irq_disable+0x3b/0x140 [ 294.924919][ T8507] ? clear_bhb_loop+0x40/0x90 [ 294.924931][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.924947][ T8507] RIP: 0033:0x7f9ace74e017 [ 294.924965][ T8507] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 294.924981][ T8507] RSP: 002b:00007f9acc985028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 294.925002][ T8507] RAX: 0000000000000127 RBX: 00007f9ace9d6090 RCX: 00007f9ace74e019 [ 294.925015][ T8507] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000004 [ 294.925028][ T8507] RBP: 00007f9acc985090 R08: 000000000000000a R09: 0000000000000000 [ 294.925040][ T8507] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 294.925051][ T8507] R13: 00007f9ace9d6128 R14: 00007f9ace9d6090 R15: 00007ffd7b6bcbe8 [ 294.925068][ T8507] [ 294.945280][ T8499] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 294.953705][ T5784] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 295.225618][ T10] usb 2-1: USB disconnect, device number 24 [ 295.254589][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.322906][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.358620][ T5699] udevd[5699]: Error opening device "/dev/input/event4": No such device [ 295.358745][ T5699] udevd[5699]: Unable to EVIOCGABS device "/dev/input/event4" [ 295.358900][ T5699] udevd[5699]: Unable to EVIOCGABS device "/dev/input/event4" [ 295.478421][ T5784] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input44 [ 295.804395][ C0] powermate: config urb returned -71 [ 295.804597][ C0] powermate: config urb returned -71 [ 295.805228][ C0] powermate: config urb returned -71 [ 295.805432][ C0] powermate: config urb returned -71 [ 296.008745][ T5784] usb 1-1: USB disconnect, device number 31 [ 296.008829][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 296.031039][ T8516] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 296.050998][ T8516] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 296.198211][ T8514] bridge_slave_0: left allmulticast mode [ 296.198245][ T8514] bridge_slave_0: left promiscuous mode [ 296.198586][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.485981][ T10] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 296.530898][ T31] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 296.590557][ T8532] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 296.590707][ T8532] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 296.606221][ T8532] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 296.606264][ T8532] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 296.742300][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 296.742469][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 296.742531][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.742588][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 296.742652][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 296.842578][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 296.843151][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 296.843313][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.843390][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 296.843444][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 297.019884][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 297.020039][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 297.020077][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.020141][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 297.020207][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 297.268757][ T10] usb 5-1: string descriptor 0 read error: -22 [ 297.268904][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 297.268927][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.366644][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 297.370067][ T31] usb 4-1: unable to get BOS descriptor set [ 297.371643][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.371701][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 297.371740][ T31] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.441619][ T10] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 297.451266][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.451295][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.451314][ T31] usb 4-1: Product: syz [ 297.451328][ T31] usb 4-1: Manufacturer: syz [ 297.451340][ T31] usb 4-1: SerialNumber: syz [ 297.786197][ T31] cdc_ncm 4-1:1.0: bind() failure [ 297.823717][ T31] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 297.823764][ T31] cdc_ncm 4-1:1.1: bind() failure [ 297.912715][ T31] usb 4-1: USB disconnect, device number 21 [ 298.521890][ T72] Bluetooth: hci5: Frame reassembly failed (-90) [ 298.866351][ T31] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 299.028513][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 299.034268][ T31] usb 1-1: unable to get BOS descriptor set [ 299.043208][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.043370][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 299.043408][ T31] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 299.058877][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.058905][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.058924][ T31] usb 1-1: Product: syz [ 299.058937][ T31] usb 1-1: Manufacturer: syz [ 299.059111][ T31] usb 1-1: SerialNumber: syz [ 299.171901][ T8553] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 299.244514][ T8557] sctp: [Deprecated]: syz.1.728 (pid 8557) Use of int in max_burst socket option. [ 299.244514][ T8557] Use struct sctp_assoc_value instead [ 299.358729][ T31] cdc_ncm 1-1:1.0: bind() failure [ 299.365212][ T31] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 299.365238][ T31] cdc_ncm 1-1:1.1: bind() failure [ 299.385214][ T31] usb 1-1: USB disconnect, device number 32 [ 299.456103][ T822] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 299.616146][ T822] usb 6-1: Using ep0 maxpacket: 8 [ 299.618385][ T822] usb 6-1: unable to get BOS descriptor or descriptor too short [ 299.619509][ T822] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 299.619532][ T822] usb 6-1: config 0 has no interface number 0 [ 299.619576][ T822] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 299.619600][ T822] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 299.619614][ T822] usb 6-1: config 0 interface 88 has no altsetting 0 [ 299.623079][ T822] usb 6-1: string descriptor 0 read error: -22 [ 299.623191][ T822] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 299.623203][ T822] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 299.627610][ T822] usb 6-1: config 0 descriptor?? [ 299.636207][ T822] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input45 [ 299.809585][ T822] usb 5-1: USB disconnect, device number 29 [ 299.905546][ T31] usb 6-1: USB disconnect, device number 20 [ 300.112629][ T5867] udevd[5867]: Error opening device "/dev/input/event4": No such file or directory [ 300.112682][ T5867] udevd[5867]: Unable to EVIOCGABS device "/dev/input/event4" [ 300.112722][ T5867] udevd[5867]: Unable to EVIOCGABS device "/dev/input/event4" [ 300.112924][ T5867] udevd[5867]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 300.122284][ T8574] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 300.122382][ T8574] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 300.140043][ T8574] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 300.140082][ T8574] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 300.306020][ T198] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 300.525517][ T198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.525586][ T198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.545625][ T4914] Bluetooth: hci5: command 0x1003 tx timeout [ 300.579895][ T5621] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 300.627960][ T198] usb 1-1: New USB device found, idVendor=0926, idProduct=3733, bcdDevice= 0.40 [ 300.628002][ T198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.764324][ T198] usb 1-1: config 0 descriptor?? [ 300.831004][ T4965] udevd[4965]: worker [5867] terminated by signal 6 (Aborted) [ 300.831050][ T4965] udevd[4965]: worker [5867] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input45/event4' [ 301.760485][ T5784] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 302.476010][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 302.479245][ T5784] usb 2-1: unable to get BOS descriptor set [ 302.482119][ T5784] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.482182][ T5784] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 302.482600][ T5784] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 302.554719][ T5784] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.555293][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.555316][ T5784] usb 2-1: Product: syz [ 302.555329][ T5784] usb 2-1: Manufacturer: syz [ 302.555344][ T5784] usb 2-1: SerialNumber: syz [ 302.913407][ T8601] 9p: Bad value for 'wfdno' [ 302.920807][ T31] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 302.937734][ T5784] cdc_ncm 2-1:1.0: bind() failure [ 302.975526][ T5784] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 302.975626][ T5784] cdc_ncm 2-1:1.1: bind() failure [ 303.001714][ T5784] usb 2-1: USB disconnect, device number 25 [ 303.079511][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 303.081878][ T31] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.084779][ T31] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 303.084805][ T31] usb 6-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 303.084824][ T31] usb 6-1: Product: syz [ 303.084836][ T31] usb 6-1: Manufacturer: syz [ 303.084848][ T31] usb 6-1: SerialNumber: syz [ 303.092860][ T31] usb 6-1: config 0 descriptor?? [ 303.098231][ T822] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 303.266039][ T822] usb 5-1: Using ep0 maxpacket: 32 [ 303.269239][ T822] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 303.269270][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 303.269294][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 303.269317][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 303.269341][ T822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 303.271578][ T822] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 303.271603][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.271622][ T822] usb 5-1: Product: syz [ 303.271634][ T822] usb 5-1: Manufacturer: syz [ 303.271648][ T822] usb 5-1: SerialNumber: syz [ 303.279818][ T822] usb 5-1: config 0 descriptor?? [ 303.287242][ T10] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 303.443747][ T5784] usb 6-1: USB disconnect, device number 21 [ 303.490038][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 303.490090][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 303.490371][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.490397][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 303.490422][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 303.492660][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 303.492707][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 303.492963][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.492988][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 303.493013][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 303.494459][ T10] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 303.494506][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 303.494751][ T10] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.494768][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 303.494781][ T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 303.510453][ T822] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 303.511071][ T822] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 303.512054][ T822] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 303.655412][ T10] usb 4-1: string descriptor 0 read error: -22 [ 303.664834][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 303.664864][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.783459][ T10] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 303.881080][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.881559][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.883451][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.885497][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.889079][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.892697][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.893127][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.893594][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.899130][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.899831][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.900284][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.901506][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.905026][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.905446][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.909716][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.912490][ T822] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 303.912531][ T822] input input46: Timeout waiting for response from device. [ 303.963517][ T822] usb 5-1: USB disconnect, device number 30 [ 303.964173][ T198] usbhid 1-1:0.0: can't add hid device: -71 [ 303.964287][ T198] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 303.992422][ T8608] binder: BINDER_SET_CONTEXT_MGR already set [ 303.992438][ T8608] binder: 8604:8608 ioctl 4018620d 200000000040 returned -16 [ 304.056645][ T198] usb 1-1: USB disconnect, device number 33 [ 304.407354][ T8614] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 304.407425][ T8614] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 304.408511][ T8614] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 304.408560][ T8614] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 306.144184][ T8624] FAULT_INJECTION: forcing a failure. [ 306.144184][ T8624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.144217][ T8624] CPU: 1 UID: 0 PID: 8624 Comm: syz.0.748 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 306.144238][ T8624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.144262][ T8624] Call Trace: [ 306.144270][ T8624] [ 306.144277][ T8624] dump_stack_lvl+0xe8/0x150 [ 306.144311][ T8624] should_fail_ex+0x467/0x600 [ 306.144342][ T8624] _copy_from_user+0x2d/0xb0 [ 306.144366][ T8624] ___sys_sendmsg+0x1c6/0x360 [ 306.144391][ T8624] ? __lock_acquire+0x683/0x2ce0 [ 306.144416][ T8624] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.144481][ T8624] ? __fget_files+0x2a/0x420 [ 306.144502][ T8624] ? __fget_files+0x3a8/0x420 [ 306.144531][ T8624] __x64_sys_sendmsg+0x1b7/0x290 [ 306.144559][ T8624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 306.144603][ T8624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.144623][ T8624] do_syscall_64+0x174/0x580 [ 306.144649][ T8624] ? trace_irq_disable+0x3b/0x140 [ 306.144668][ T8624] ? clear_bhb_loop+0x40/0x90 [ 306.144693][ T8624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.144712][ T8624] RIP: 0033:0x7f27fd48e019 [ 306.144730][ T8624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.144744][ T8624] RSP: 002b:00007f27fb6e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.144765][ T8624] RAX: ffffffffffffffda RBX: 00007f27fd715fa0 RCX: 00007f27fd48e019 [ 306.144779][ T8624] RDX: 0000000000000000 RSI: 0000200000004380 RDI: 0000000000000003 [ 306.144792][ T8624] RBP: 00007f27fb6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 306.144804][ T8624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.144815][ T8624] R13: 00007f27fd716038 R14: 00007f27fd715fa0 R15: 00007ffc796e5978 [ 306.144844][ T8624] [ 306.596007][ T8621] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 306.624264][ T8633] binder: 8632:8633 ioctl c018620c 200000000140 returned -22 [ 306.700097][ T822] usb 4-1: USB disconnect, device number 22 [ 306.836065][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 306.986535][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 306.989567][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 306.992178][ T10] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 306.992202][ T10] usb 5-1: config 0 has no interface number 0 [ 306.992242][ T10] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 306.992267][ T10] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 306.992288][ T10] usb 5-1: config 0 interface 88 has no altsetting 0 [ 307.017229][ T10] usb 5-1: string descriptor 0 read error: -22 [ 307.035739][ T10] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 307.035774][ T10] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 307.085601][ T10] usb 5-1: config 0 descriptor?? [ 307.101561][ T10] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input47 [ 307.216130][ T822] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 307.299440][ T10] usb 5-1: USB disconnect, device number 31 [ 307.347299][ T5708] udevd[5708]: Error opening device "/dev/input/event4": No such device [ 307.347430][ T5708] udevd[5708]: Unable to EVIOCGABS device "/dev/input/event4" [ 307.347533][ T5708] udevd[5708]: Unable to EVIOCGABS device "/dev/input/event4" [ 307.383961][ T822] usb 1-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 307.401540][ T822] usb 1-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 307.401558][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.401568][ T822] usb 1-1: Product: syz [ 307.401576][ T822] usb 1-1: Manufacturer: syz [ 307.401583][ T822] usb 1-1: SerialNumber: syz [ 307.664983][ T822] usb 1-1: USB disconnect, device number 34 [ 307.797169][ T8651] FAULT_INJECTION: forcing a failure. [ 307.797169][ T8651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.797190][ T8651] CPU: 1 UID: 0 PID: 8651 Comm: syz.1.757 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 307.797203][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.797210][ T8651] Call Trace: [ 307.797214][ T8651] [ 307.797219][ T8651] dump_stack_lvl+0xe8/0x150 [ 307.797239][ T8651] should_fail_ex+0x467/0x600 [ 307.797259][ T8651] _copy_from_user+0x2d/0xb0 [ 307.797273][ T8651] core_sys_select+0x50b/0xb40 [ 307.797288][ T8651] ? get_pid_task+0x20/0x1f0 [ 307.797310][ T8651] ? __pfx_core_sys_select+0x10/0x10 [ 307.797342][ T8651] ? __pfx_set_user_sigmask+0x10/0x10 [ 307.797356][ T8651] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 307.797374][ T8651] __se_sys_pselect6+0x267/0x320 [ 307.797393][ T8651] ? __pfx___se_sys_pselect6+0x10/0x10 [ 307.797409][ T8651] ? __pfx_ksys_write+0x10/0x10 [ 307.797434][ T8651] ? __x64_sys_pselect6+0x21/0xf0 [ 307.797460][ T8651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.797480][ T8651] do_syscall_64+0x174/0x580 [ 307.797504][ T8651] ? trace_irq_disable+0x3b/0x140 [ 307.797524][ T8651] ? clear_bhb_loop+0x40/0x90 [ 307.797543][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.797552][ T8651] RIP: 0033:0x7f291f22e019 [ 307.797563][ T8651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.797571][ T8651] RSP: 002b:00007f291d486028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 307.797583][ T8651] RAX: ffffffffffffffda RBX: 00007f291f4b5fa0 RCX: 00007f291f22e019 [ 307.797590][ T8651] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000040 [ 307.797596][ T8651] RBP: 00007f291d486090 R08: 0000000000000000 R09: 0000000000000000 [ 307.797602][ T8651] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 307.797609][ T8651] R13: 00007f291f4b6038 R14: 00007f291f4b5fa0 R15: 00007ffc2dde5148 [ 307.797623][ T8651] [ 308.143666][ T8655] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.761'. [ 308.198312][ T8657] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.760'. [ 308.461499][ T8664] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 308.461728][ T8664] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 308.485456][ T8664] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 308.485778][ T8664] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 309.204576][ T822] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 309.547038][ T822] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 309.547092][ T822] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 309.547119][ T822] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.547144][ T822] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 309.547168][ T822] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 309.548985][ T822] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 309.549031][ T822] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 309.549058][ T822] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.549083][ T822] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 309.549107][ T822] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 309.552182][ T822] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 309.552240][ T822] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 309.552265][ T822] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.552278][ T822] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 309.552291][ T822] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 309.717711][ T822] usb 1-1: string descriptor 0 read error: -22 [ 309.717795][ T822] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 309.717806][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.766524][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.764'. [ 309.767009][ T822] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 309.832858][ T8676] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.766'. [ 310.036111][ T198] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 310.200566][ T198] usb 5-1: unable to get BOS descriptor or descriptor too short [ 310.201283][ T198] usb 5-1: not running at top speed; connect to a high speed hub [ 310.202919][ T198] usb 5-1: config 8 has an invalid interface number: 169 but max is 0 [ 310.202943][ T198] usb 5-1: config 8 has no interface number 0 [ 310.202984][ T198] usb 5-1: config 8 interface 169 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 310.203011][ T198] usb 5-1: config 8 interface 169 altsetting 17 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 310.203037][ T198] usb 5-1: config 8 interface 169 has no altsetting 0 [ 310.205662][ T198] usb 5-1: New USB device found, idVendor=0eba, idProduct=1080, bcdDevice=3a.9f [ 310.205688][ T198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.205707][ T198] usb 5-1: Product: syz [ 310.205720][ T198] usb 5-1: Manufacturer: syz [ 310.205735][ T198] usb 5-1: SerialNumber: syz [ 310.358916][ T8674] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 310.606379][ T198] pl2303 5-1:8.169: required interrupt-in endpoint missing [ 310.675520][ T198] usb 5-1: USB disconnect, device number 32 [ 310.810341][ T8686] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 311.022078][ T8690] overlayfs: missing 'lowerdir' [ 311.056058][ T822] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 311.206000][ T822] usb 6-1: Using ep0 maxpacket: 8 [ 311.209267][ T822] usb 6-1: unable to get BOS descriptor or descriptor too short [ 311.210926][ T822] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 311.210951][ T822] usb 6-1: config 0 has no interface number 0 [ 311.210994][ T822] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 311.211020][ T822] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 311.211041][ T822] usb 6-1: config 0 interface 88 has no altsetting 0 [ 311.215286][ T822] usb 6-1: string descriptor 0 read error: -22 [ 311.215420][ T822] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 311.215444][ T822] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 312.068743][ T822] usb 6-1: config 0 descriptor?? [ 312.101786][ T822] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input48 [ 312.342782][ T822] usb 6-1: USB disconnect, device number 22 [ 312.484095][ T8700] overlayfs: missing 'lowerdir' [ 312.500663][ T5708] udevd[5708]: Error opening device "/dev/input/event4": No such file or directory [ 312.500716][ T5708] udevd[5708]: Unable to EVIOCGABS device "/dev/input/event4" [ 312.500756][ T5708] udevd[5708]: Unable to EVIOCGABS device "/dev/input/event4" [ 312.500803][ T5708] udevd[5708]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 312.556269][ T4965] udevd[4965]: worker [5708] terminated by signal 6 (Aborted) [ 312.556314][ T4965] udevd[4965]: worker [5708] failed while handling '/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input48/event4' [ 312.709617][ T198] usb 1-1: USB disconnect, device number 35 [ 312.724270][ T5612] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 312.885950][ T5612] usb 5-1: Using ep0 maxpacket: 16 [ 312.887740][ T5612] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.887770][ T5612] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.887791][ T5612] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 312.887830][ T5612] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 312.887853][ T5612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.956060][ T5612] usb 5-1: config 0 descriptor?? [ 313.296053][ T198] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 313.453710][ T198] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 313.453741][ T198] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 313.453766][ T198] usb 1-1: Product: syz [ 313.453780][ T198] usb 1-1: Manufacturer: syz [ 313.453793][ T198] usb 1-1: SerialNumber: syz [ 313.469952][ T198] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 313.619602][ T5612] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.619641][ T5612] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.619667][ T5612] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.619690][ T5612] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.619714][ T5612] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.619739][ T5612] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.619765][ T5612] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.619790][ T5612] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.619814][ T5612] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.619839][ T5612] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 313.674565][ T5612] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input49 [ 313.721932][ T198] vp7045: USB control message 'out' went wrong. [ 313.721963][ T198] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 313.721998][ T198] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 313.785144][ T198] usb 1-1: USB disconnect, device number 36 [ 313.829979][ T8699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.845994][ T8699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.023529][ T8708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.040753][ T8708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.915385][ T8717] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 314.915537][ T8717] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 314.934441][ T8717] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 314.934474][ T8717] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 315.209693][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.778'. [ 316.294476][ T5612] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 317.815345][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.815443][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.839970][ T822] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 318.046069][ T822] usb 6-1: Using ep0 maxpacket: 16 [ 318.132686][ T822] usb 6-1: device descriptor read/all, error -71 [ 318.229547][ T198] usb 5-1: USB disconnect, device number 33 [ 318.417592][ T5621] Bluetooth: hci1: unexpected cc 0x0c58 length: 29 > 2 [ 318.417637][ T5621] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 318.480022][ T9] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 318.650646][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 318.650699][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 318.650716][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.650729][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 318.650741][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 318.651780][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 318.651827][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 318.651865][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.651880][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 318.651893][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 318.653067][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 318.653112][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 318.653137][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.653160][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 318.653176][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 318.679385][ T9] usb 2-1: string descriptor 0 read error: -22 [ 318.679522][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 318.679543][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.965214][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 319.137275][ T198] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 319.288055][ T198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.288087][ T198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.288123][ T198] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 319.288146][ T198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.307958][ T198] usb 5-1: config 0 descriptor?? [ 320.257861][ T8749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.259612][ T8749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.344328][ T198] hid_parser_main: 5 callbacks suppressed [ 320.344351][ T198] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 320.344391][ T198] cypress 0003:04B4:07B1.0002: item fetching failed at offset 6/41 [ 320.372266][ T198] cypress 0003:04B4:07B1.0002: parse failed [ 320.372395][ T198] cypress 0003:04B4:07B1.0002: probe with driver cypress failed with error -22 [ 320.496934][ T9] usb 5-1: USB disconnect, device number 34 [ 320.628292][ T8769] /dev/nullb0: Can't open blockdev [ 321.581129][ T8773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.793'. [ 321.581162][ T8773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.793'. [ 321.623682][ T8770] bridge0: port 4(erspan0) entered disabled state [ 321.634180][ T8770] erspan0: left allmulticast mode [ 321.634209][ T8770] erspan0: left promiscuous mode [ 321.634471][ T8770] bridge0: port 4(erspan0) entered disabled state [ 321.880720][ T5612] usb 2-1: USB disconnect, device number 26 [ 321.937490][ T8770] bridge0: port 3(netdevsim1) entered disabled state [ 322.283460][ T8770] bridge_slave_0: left allmulticast mode [ 322.283482][ T8770] bridge_slave_0: left promiscuous mode [ 322.283637][ T8770] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.440647][ T8770] bridge_slave_1: left allmulticast mode [ 322.440679][ T8770] bridge_slave_1: left promiscuous mode [ 322.440840][ T8770] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.627087][ T8770] bond0: (slave bond_slave_0): Releasing backup interface [ 322.707322][ T8770] bond0: (slave bond_slave_1): Releasing backup interface [ 322.786587][ T8770] team0: Port device team_slave_0 removed [ 322.888357][ T8770] team0: Port device team_slave_1 removed [ 322.891439][ T8770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.893832][ T8770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.950034][ T8770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.952535][ T8770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.028564][ T8770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 323.105999][ T5612] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 323.177138][ T8784] virt_wifi0 speed is unknown, defaulting to 1000 [ 323.279635][ T5612] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 323.279663][ T5612] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 323.279681][ T5612] usb 6-1: config 4 has no interface number 0 [ 323.279730][ T5612] usb 6-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 323.284645][ T5612] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 323.284674][ T5612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.284701][ T5612] usb 6-1: Product: syz [ 323.284716][ T5612] usb 6-1: Manufacturer: syz [ 323.284729][ T5612] usb 6-1: SerialNumber: syz [ 323.316007][ T198] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 323.420198][ T8797] program syz.3.801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.466039][ T198] usb 1-1: Using ep0 maxpacket: 16 [ 323.467996][ T198] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.468040][ T198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.468067][ T198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.468088][ T198] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 323.468111][ T198] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.469383][ T198] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 323.469407][ T198] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 323.469425][ T198] usb 1-1: Manufacturer: syz [ 323.540848][ T5612] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 323.575809][ T5612] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 323.581304][ T5612] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 323.581389][ T5612] usb 6-1: media controller created [ 323.598553][ T198] usb 1-1: config 0 descriptor?? [ 323.749437][ T5612] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.923602][ T8803] bridge_slave_0: left allmulticast mode [ 323.923638][ T8803] bridge_slave_0: left promiscuous mode [ 323.927344][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.985964][ T198] rc_core: IR keymap rc-hauppauge not found [ 323.985983][ T198] Registered IR keymap rc-empty [ 323.986612][ T198] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 323.989737][ T8809] syz.4.802 (8809): drop_caches: 0 [ 324.006125][ T198] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.063457][ T198] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 324.092280][ T198] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input50 [ 324.114415][ T198] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.126072][ T198] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.146072][ T198] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.166147][ T198] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.175463][ T5612] DVB: Unable to find symbol dib7000p_attach() [ 324.175474][ T5612] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 324.186792][ T198] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.215194][ T8790] FAULT_INJECTION: forcing a failure. [ 324.215194][ T8790] name failslab, interval 1, probability 0, space 0, times 0 [ 324.215220][ T8790] CPU: 1 UID: 0 PID: 8790 Comm: syz.0.798 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 324.215232][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.215238][ T8790] Call Trace: [ 324.215243][ T8790] [ 324.215247][ T8790] dump_stack_lvl+0xe8/0x150 [ 324.215280][ T8790] should_fail_ex+0x467/0x600 [ 324.215315][ T8790] should_failslab+0xa8/0x100 [ 324.215341][ T8790] __kmalloc_noprof+0xfe/0x780 [ 324.215360][ T8790] ? rcu_is_watching+0x15/0xb0 [ 324.215379][ T8790] ? tomoyo_realpath_from_path+0xef/0x640 [ 324.215392][ T8790] ? tomoyo_realpath_from_path+0xef/0x640 [ 324.215409][ T8790] tomoyo_realpath_from_path+0xef/0x640 [ 324.215435][ T8790] ? tomoyo_path_number_perm+0x219/0x5f0 [ 324.215457][ T8790] tomoyo_path_number_perm+0x246/0x5f0 [ 324.215482][ T8790] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 324.215502][ T8790] ? __lock_acquire+0x683/0x2ce0 [ 324.215536][ T8790] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 324.215551][ T8790] ? hook_file_ioctl+0x1f3/0x600 [ 324.215566][ T8790] ? lockdep_hardirqs_on+0x7a/0x110 [ 324.215591][ T8790] ? __fget_files+0x2a/0x420 [ 324.215615][ T8790] ? __fget_files+0x2a/0x420 [ 324.215633][ T8790] ? __fget_files+0x3a8/0x420 [ 324.215652][ T8790] ? __fget_files+0x2a/0x420 [ 324.215680][ T8790] security_file_ioctl+0xc3/0x2a0 [ 324.215704][ T8790] __se_sys_ioctl+0x47/0x170 [ 324.215720][ T8790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.215731][ T8790] do_syscall_64+0x174/0x580 [ 324.215745][ T8790] ? clear_bhb_loop+0x40/0x90 [ 324.215763][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.215782][ T8790] RIP: 0033:0x7f27fd48e019 [ 324.215800][ T8790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.215816][ T8790] RSP: 002b:00007f27fb6e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.215849][ T8790] RAX: ffffffffffffffda RBX: 00007f27fd715fa0 RCX: 00007f27fd48e019 [ 324.215862][ T8790] RDX: 0000200000000140 RSI: 0000000080284504 RDI: 0000000000000005 [ 324.215872][ T8790] RBP: 00007f27fb6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 324.215883][ T8790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.215894][ T8790] R13: 00007f27fd716038 R14: 00007f27fd715fa0 R15: 00007ffc796e5978 [ 324.215924][ T8790] [ 324.222035][ T8790] ERROR: Out of memory at tomoyo_realpath_from_path. [ 324.231722][ T198] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.247106][ T198] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.277451][ T198] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.307907][ T198] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.349233][ T198] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 324.432137][ T5612] rc_core: IR keymap rc-dib0700-rc5 not found [ 324.432156][ T5612] Registered IR keymap rc-empty [ 324.432662][ T5612] dvb-usb: could not initialize remote control. [ 324.432673][ T5612] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 324.545755][ T198] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 324.545780][ T198] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 324.570198][ T198] usb 1-1: USB disconnect, device number 37 [ 324.574120][ T5612] usb 6-1: USB disconnect, device number 25 [ 325.141912][ T5612] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 325.560268][ T8830] netlink: 36 bytes leftover after parsing attributes in process `syz.5.808'. [ 325.931260][ T8837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.810'. [ 325.931295][ T8837] netlink: 28 bytes leftover after parsing attributes in process `syz.5.810'. [ 326.938241][ T8856] FAULT_INJECTION: forcing a failure. [ 326.938241][ T8856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.938274][ T8856] CPU: 1 UID: 0 PID: 8856 Comm: syz.5.818 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 326.938295][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.938308][ T8856] Call Trace: [ 326.938315][ T8856] [ 326.938323][ T8856] dump_stack_lvl+0xe8/0x150 [ 326.938357][ T8856] should_fail_ex+0x467/0x600 [ 326.938392][ T8856] _copy_from_user+0x2d/0xb0 [ 326.938417][ T8856] __se_sys_select+0xe7/0x2d0 [ 326.938445][ T8856] ? fput+0xa0/0xd0 [ 326.938466][ T8856] ? __pfx___se_sys_select+0x10/0x10 [ 326.938494][ T8856] ? __pfx_ksys_write+0x10/0x10 [ 326.938524][ T8856] ? __x64_sys_select+0x20/0xc0 [ 326.938551][ T8856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.938571][ T8856] do_syscall_64+0x174/0x580 [ 326.938596][ T8856] ? trace_irq_disable+0x3b/0x140 [ 326.938615][ T8856] ? clear_bhb_loop+0x40/0x90 [ 326.938638][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.938656][ T8856] RIP: 0033:0x7f688705e019 [ 326.938672][ T8856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.938687][ T8856] RSP: 002b:00007f68852b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 326.938707][ T8856] RAX: ffffffffffffffda RBX: 00007f68872e5fa0 RCX: 00007f688705e019 [ 326.938721][ T8856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.938732][ T8856] RBP: 00007f68852b6090 R08: 0000200000000040 R09: 0000000000000000 [ 326.938744][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.938754][ T8856] R13: 00007f68872e6038 R14: 00007f68872e5fa0 R15: 00007ffede357238 [ 326.938782][ T8856] [ 327.017285][ T8859] netlink: 36 bytes leftover after parsing attributes in process `syz.5.819'. [ 327.813564][ T37] audit: type=1800 audit(1785742033.928:2): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.821" name="bus" dev="ramfs" ino=27520 res=0 errno=0 [ 330.424301][ T8890] netlink: 36 bytes leftover after parsing attributes in process `syz.5.830'. [ 330.510984][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.829'. [ 330.511010][ T8893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.829'. [ 330.675111][ T8893] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 330.675142][ T8893] bond2: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 330.776149][ T8906] netlink: 40 bytes leftover after parsing attributes in process `syz.5.833'. [ 330.778409][ T8893] bond2 (unregistering): Released all slaves [ 330.837979][ T8902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.832'. [ 331.431645][ T8923] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 331.431745][ T8923] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 331.432950][ T8923] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 331.433047][ T8923] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 332.402083][ T8934] netlink: 36 bytes leftover after parsing attributes in process `syz.5.843'. [ 332.569762][ T8939] FAULT_INJECTION: forcing a failure. [ 332.569762][ T8939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.569796][ T8939] CPU: 1 UID: 0 PID: 8939 Comm: syz.3.845 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 332.569818][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.569830][ T8939] Call Trace: [ 332.569837][ T8939] [ 332.569845][ T8939] dump_stack_lvl+0xe8/0x150 [ 332.569878][ T8939] should_fail_ex+0x467/0x600 [ 332.569912][ T8939] _copy_from_user+0x2d/0xb0 [ 332.569937][ T8939] __sys_bpf+0x2e7/0xd90 [ 332.569967][ T8939] ? __pfx___sys_bpf+0x10/0x10 [ 332.569999][ T8939] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 332.570030][ T8939] ? rt_mutex_slowunlock+0x219/0x460 [ 332.570072][ T8939] ? ksys_write+0x248/0x270 [ 332.570099][ T8939] ? __pfx_ksys_write+0x10/0x10 [ 332.570129][ T8939] __x64_sys_bpf+0xba/0xd0 [ 332.570158][ T8939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.570180][ T8939] do_syscall_64+0x174/0x580 [ 332.570206][ T8939] ? trace_irq_disable+0x3b/0x140 [ 332.570224][ T8939] ? clear_bhb_loop+0x40/0x90 [ 332.570248][ T8939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.570267][ T8939] RIP: 0033:0x7efc45f4e019 [ 332.570284][ T8939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.570301][ T8939] RSP: 002b:00007efc441a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.570322][ T8939] RAX: ffffffffffffffda RBX: 00007efc461d5fa0 RCX: 00007efc45f4e019 [ 332.570336][ T8939] RDX: 0000000000000050 RSI: 0000200000000ac0 RDI: 0000000000000000 [ 332.570349][ T8939] RBP: 00007efc441a6090 R08: 0000000000000000 R09: 0000000000000000 [ 332.570362][ T8939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.570373][ T8939] R13: 00007efc461d6038 R14: 00007efc461d5fa0 R15: 00007ffc7bd87938 [ 332.570405][ T8939] [ 332.958028][ T8948] tmpfs: Bad value for 'mpol' [ 333.202858][ T8955] FAULT_INJECTION: forcing a failure. [ 333.202858][ T8955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.202882][ T8955] CPU: 0 UID: 0 PID: 8955 Comm: syz.4.851 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 333.202896][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.202902][ T8955] Call Trace: [ 333.202906][ T8955] [ 333.202911][ T8955] dump_stack_lvl+0xe8/0x150 [ 333.202931][ T8955] should_fail_ex+0x467/0x600 [ 333.202951][ T8955] _copy_from_user+0x2d/0xb0 [ 333.202965][ T8955] core_sys_select+0x50b/0xb40 [ 333.202980][ T8955] ? get_pid_task+0x20/0x1f0 [ 333.203002][ T8955] ? __pfx_core_sys_select+0x10/0x10 [ 333.203028][ T8955] ? __pfx_set_user_sigmask+0x10/0x10 [ 333.203042][ T8955] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 333.203056][ T8955] __se_sys_pselect6+0x267/0x320 [ 333.203074][ T8955] ? __pfx___se_sys_pselect6+0x10/0x10 [ 333.203090][ T8955] ? __pfx_ksys_write+0x10/0x10 [ 333.203105][ T8955] ? __x64_sys_pselect6+0x21/0xf0 [ 333.203120][ T8955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.203136][ T8955] do_syscall_64+0x174/0x580 [ 333.203159][ T8955] ? trace_irq_disable+0x3b/0x140 [ 333.203178][ T8955] ? clear_bhb_loop+0x40/0x90 [ 333.203201][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.203218][ T8955] RIP: 0033:0x7f9ace74e019 [ 333.203235][ T8955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.203249][ T8955] RSP: 002b:00007f9acc9a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 333.203269][ T8955] RAX: ffffffffffffffda RBX: 00007f9ace9d5fa0 RCX: 00007f9ace74e019 [ 333.203281][ T8955] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 333.203288][ T8955] RBP: 00007f9acc9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 333.203294][ T8955] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 333.203300][ T8955] R13: 00007f9ace9d6038 R14: 00007f9ace9d5fa0 R15: 00007ffd7b6bcbe8 [ 333.203315][ T8955] [ 333.806045][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 333.956073][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 333.958434][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 333.958486][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.958511][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 333.958536][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 333.963333][ T10] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 333.963361][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.963380][ T10] usb 2-1: Product: syz [ 333.963394][ T10] usb 2-1: Manufacturer: syz [ 333.963408][ T10] usb 2-1: SerialNumber: syz [ 334.053556][ T10] usb 2-1: config 0 descriptor?? [ 334.055123][ T8961] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 334.369576][ T8977] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 334.369675][ T8977] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 334.414077][ T8980] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 334.424320][ T10] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 334.448123][ T8982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.860'. [ 334.448158][ T8982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.860'. [ 334.450822][ T10] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input52 [ 334.684469][ T8980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.685097][ T8980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.816537][ T8987] netlink: 36 bytes leftover after parsing attributes in process `syz.3.862'. [ 337.129961][ T9004] FAULT_INJECTION: forcing a failure. [ 337.129961][ T9004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.129997][ T9004] CPU: 1 UID: 0 PID: 9004 Comm: syz.4.868 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.130020][ T9004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.130031][ T9004] Call Trace: [ 337.130038][ T9004] [ 337.130046][ T9004] dump_stack_lvl+0xe8/0x150 [ 337.130081][ T9004] should_fail_ex+0x467/0x600 [ 337.130127][ T9004] _copy_from_user+0x2d/0xb0 [ 337.130152][ T9004] isotp_setsockopt+0x3a3/0x940 [ 337.130182][ T9004] ? __pfx_isotp_setsockopt+0x10/0x10 [ 337.130207][ T9004] ? __fget_files+0x2a/0x420 [ 337.130226][ T9004] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 337.130252][ T9004] ? __pfx_isotp_setsockopt+0x10/0x10 [ 337.130276][ T9004] do_sock_setsockopt+0x17c/0x1b0 [ 337.130306][ T9004] __x64_sys_setsockopt+0x143/0x1b0 [ 337.130332][ T9004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.130354][ T9004] do_syscall_64+0x174/0x580 [ 337.130379][ T9004] ? trace_irq_disable+0x3b/0x140 [ 337.130398][ T9004] ? clear_bhb_loop+0x40/0x90 [ 337.130422][ T9004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.130440][ T9004] RIP: 0033:0x7f9ace74e019 [ 337.130458][ T9004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.130474][ T9004] RSP: 002b:00007f9acc9a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 337.130495][ T9004] RAX: ffffffffffffffda RBX: 00007f9ace9d5fa0 RCX: 00007f9ace74e019 [ 337.130509][ T9004] RDX: 0000000000000003 RSI: 000000000000006a RDI: 0000000000000003 [ 337.130519][ T9004] RBP: 00007f9acc9a6090 R08: 0000000000000004 R09: 0000000000000000 [ 337.130531][ T9004] R10: 00000000fffffff4 R11: 0000000000000246 R12: 0000000000000001 [ 337.130543][ T9004] R13: 00007f9ace9d6038 R14: 00007f9ace9d5fa0 R15: 00007ffd7b6bcbe8 [ 337.130574][ T9004] [ 337.540720][ C0] powermate: config urb returned -71 [ 337.540964][ C0] powermate: config urb returned -71 [ 337.541217][ C0] powermate: config urb returned -71 [ 337.541432][ C0] powermate: config urb returned -71 [ 337.542833][ T31] usb 2-1: USB disconnect, device number 27 [ 337.542893][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 338.459907][ T9020] FAULT_INJECTION: forcing a failure. [ 338.459907][ T9020] name fail_futex, interval 1, probability 0, space 0, times 1 [ 338.459944][ T9020] CPU: 1 UID: 0 PID: 9020 Comm: syz.4.871 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 338.459967][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.459979][ T9020] Call Trace: [ 338.459986][ T9020] [ 338.459995][ T9020] dump_stack_lvl+0xe8/0x150 [ 338.460030][ T9020] should_fail_ex+0x467/0x600 [ 338.460065][ T9020] get_futex_key+0x1b3/0x1580 [ 338.460092][ T9020] ? perf_lock_task_context+0x79b/0x850 [ 338.460121][ T9020] ? __pfx_get_futex_key+0x10/0x10 [ 338.460142][ T9020] ? __lock_acquire+0x683/0x2ce0 [ 338.460166][ T9020] ? __lock_acquire+0x683/0x2ce0 [ 338.460192][ T9020] futex_wake+0x119/0x600 [ 338.460226][ T9020] ? __pfx_futex_wake+0x10/0x10 [ 338.460252][ T9020] ? do_raw_spin_lock+0x12b/0x2f0 [ 338.460295][ T9020] do_futex+0x458/0x4e0 [ 338.460324][ T9020] ? __pfx_do_futex+0x10/0x10 [ 338.460354][ T9020] ? __might_fault+0xaf/0x130 [ 338.460378][ T9020] mm_release+0x101/0x290 [ 338.460405][ T9020] exit_mm+0x50/0x240 [ 338.460426][ T9020] do_exit+0x6cd/0x2360 [ 338.460442][ T9020] ? lockdep_hardirqs_on+0x7a/0x110 [ 338.460469][ T9020] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 338.460500][ T9020] ? __pfx_do_exit+0x10/0x10 [ 338.460536][ T9020] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 338.460556][ T9020] ? rt_spin_lock+0x1e0/0x400 [ 338.460582][ T9020] ? rt_spin_unlock+0x157/0x200 [ 338.460605][ T9020] do_group_exit+0x22d/0x2f0 [ 338.460623][ T9020] ? rt_spin_unlock+0x163/0x200 [ 338.460646][ T9020] get_signal+0x121b/0x12c0 [ 338.460690][ T9020] arch_do_signal_or_restart+0xbb/0x860 [ 338.460720][ T9020] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 338.460752][ T9020] ? ksys_write+0x248/0x270 [ 338.460786][ T9020] exit_to_user_mode_loop+0x104/0x730 [ 338.460803][ T9020] ? rcu_is_watching+0x15/0xb0 [ 338.460821][ T9020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.460836][ T9020] do_syscall_64+0x353/0x580 [ 338.460854][ T9020] ? trace_irq_disable+0x3b/0x140 [ 338.460868][ T9020] ? clear_bhb_loop+0x40/0x90 [ 338.460885][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.460898][ T9020] RIP: 0033:0x7f9ace74e019 [ 338.460913][ T9020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.460924][ T9020] RSP: 002b:00007f9acc964028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 338.460940][ T9020] RAX: 0000000000000000 RBX: 00007f9ace9d6180 RCX: 00007f9ace74e019 [ 338.460949][ T9020] RDX: 0000000000000006 RSI: 0000000000800000 RDI: 0000200000000000 [ 338.460958][ T9020] RBP: 00007f9acc964090 R08: 0000000000000000 R09: 0000000000000000 [ 338.460966][ T9020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.460974][ T9020] R13: 00007f9ace9d6218 R14: 00007f9ace9d6180 R15: 00007ffd7b6bcbe8 [ 338.460996][ T9020] [ 339.670406][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 340.296499][ T9044] FAULT_INJECTION: forcing a failure. [ 340.296499][ T9044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.296531][ T9044] CPU: 0 UID: 0 PID: 9044 Comm: syz.5.880 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 340.296552][ T9044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 340.296563][ T9044] Call Trace: [ 340.296569][ T9044] [ 340.296576][ T9044] dump_stack_lvl+0xe8/0x150 [ 340.296609][ T9044] should_fail_ex+0x467/0x600 [ 340.296641][ T9044] _copy_from_user+0x2d/0xb0 [ 340.296663][ T9044] ___sys_sendmsg+0x1c6/0x360 [ 340.296686][ T9044] ? __lock_acquire+0x683/0x2ce0 [ 340.296709][ T9044] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.296763][ T9044] ? __fget_files+0x2a/0x420 [ 340.296782][ T9044] ? __fget_files+0x3a8/0x420 [ 340.296811][ T9044] __x64_sys_sendmsg+0x1b7/0x290 [ 340.296849][ T9044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.296886][ T9044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.296906][ T9044] do_syscall_64+0x174/0x580 [ 340.296931][ T9044] ? trace_irq_disable+0x3b/0x140 [ 340.296949][ T9044] ? clear_bhb_loop+0x40/0x90 [ 340.296971][ T9044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.296989][ T9044] RIP: 0033:0x7f688705e019 [ 340.297008][ T9044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.297032][ T9044] RSP: 002b:00007f68852b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.297052][ T9044] RAX: ffffffffffffffda RBX: 00007f68872e5fa0 RCX: 00007f688705e019 [ 340.297066][ T9044] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 340.297077][ T9044] RBP: 00007f68852b6090 R08: 0000000000000000 R09: 0000000000000000 [ 340.297088][ T9044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.297099][ T9044] R13: 00007f68872e6038 R14: 00007f68872e5fa0 R15: 00007ffede357238 [ 340.297124][ T9044] [ 341.282975][ T9057] netlink: 'syz.3.881': attribute type 1 has an invalid length. [ 341.436006][ T5612] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 341.456000][ T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 341.678311][ T31] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 341.678341][ T31] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 341.678359][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 341.678407][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 341.678431][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 341.981755][ T5612] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 341.981789][ T5612] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 341.981814][ T5612] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 341.982064][ T5612] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 341.982087][ T5612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.983451][ T31] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 341.983477][ T31] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 341.983498][ T31] usb 5-1: Product: syz [ 341.983511][ T31] usb 5-1: Manufacturer: syz [ 342.142067][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 342.142088][ T31] cdc_wdm 5-1:1.0: skipping garbage [ 342.169963][ T9041] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 342.268597][ T31] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 342.268634][ T31] cdc_wdm 5-1:1.0: Unknown control protocol [ 342.351499][ T9055] FAULT_INJECTION: forcing a failure. [ 342.351499][ T9055] name failslab, interval 1, probability 0, space 0, times 0 [ 342.351532][ T9055] CPU: 0 UID: 0 PID: 9055 Comm: syz.4.882 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 342.351553][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.351563][ T9055] Call Trace: [ 342.351570][ T9055] [ 342.351578][ T9055] dump_stack_lvl+0xe8/0x150 [ 342.351613][ T9055] should_fail_ex+0x467/0x600 [ 342.351647][ T9055] should_failslab+0xa8/0x100 [ 342.351672][ T9055] __kmalloc_noprof+0xfe/0x780 [ 342.351692][ T9055] ? vfs_write+0x231/0xbb0 [ 342.351716][ T9055] ? kernfs_fop_write_iter+0x158/0x540 [ 342.351742][ T9055] ? kernfs_fop_write_iter+0x158/0x540 [ 342.351774][ T9055] kernfs_fop_write_iter+0x158/0x540 [ 342.351804][ T9055] vfs_write+0x61e/0xbb0 [ 342.351835][ T9055] ? __pfx_vfs_write+0x10/0x10 [ 342.351861][ T9055] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 342.351887][ T9055] ? lockdep_hardirqs_on+0x7a/0x110 [ 342.351911][ T9055] ? mutex_lock_nested+0x152/0x1d0 [ 342.351929][ T9055] ? fdget_pos+0x252/0x320 [ 342.351957][ T9055] ksys_write+0x156/0x270 [ 342.351983][ T9055] ? __pfx_ksys_write+0x10/0x10 [ 342.352015][ T9055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.352035][ T9055] do_syscall_64+0x174/0x580 [ 342.352059][ T9055] ? trace_irq_disable+0x3b/0x140 [ 342.352078][ T9055] ? clear_bhb_loop+0x40/0x90 [ 342.352100][ T9055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.352118][ T9055] RIP: 0033:0x7f9ace74e019 [ 342.352136][ T9055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.352151][ T9055] RSP: 002b:00007f9acc9a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.352175][ T9055] RAX: ffffffffffffffda RBX: 00007f9ace9d5fa0 RCX: 00007f9ace74e019 [ 342.352189][ T9055] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 342.352200][ T9055] RBP: 00007f9acc9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 342.352212][ T9055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.352221][ T9055] R13: 00007f9ace9d6038 R14: 00007f9ace9d5fa0 R15: 00007ffd7b6bcbe8 [ 342.352251][ T9055] [ 342.366024][ T10] usb 5-1: USB disconnect, device number 35 [ 342.503855][ T5612] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 342.533108][ T9075] netlink: 40 bytes leftover after parsing attributes in process `syz.5.887'. [ 342.643008][ T5612] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input53 [ 342.830199][ T149] tipc: Subscription rejected, illegal request [ 342.857629][ T5612] usb 2-1: USB disconnect, device number 28 [ 342.857726][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 343.486437][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 343.925962][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 343.928581][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 343.931320][ T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 343.931348][ T10] usb 6-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 343.931368][ T10] usb 6-1: Product: syz [ 343.931381][ T10] usb 6-1: Manufacturer: syz [ 343.931395][ T10] usb 6-1: SerialNumber: syz [ 344.215224][ T10] usb 6-1: config 0 descriptor?? [ 344.835909][ T9101] Invalid ELF header magic: != ELF [ 345.553643][ T9109] FAULT_INJECTION: forcing a failure. [ 345.553643][ T9109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.553674][ T9109] CPU: 0 UID: 0 PID: 9109 Comm: syz.1.899 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 345.553697][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.553710][ T9109] Call Trace: [ 345.553716][ T9109] [ 345.553725][ T9109] dump_stack_lvl+0xe8/0x150 [ 345.553760][ T9109] should_fail_ex+0x467/0x600 [ 345.553795][ T9109] _copy_from_user+0x2d/0xb0 [ 345.553818][ T9109] ___sys_sendmsg+0x1c6/0x360 [ 345.553842][ T9109] ? __lock_acquire+0x683/0x2ce0 [ 345.553867][ T9109] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.553918][ T9109] ? __fget_files+0x2a/0x420 [ 345.553936][ T9109] ? __fget_files+0x3a8/0x420 [ 345.553963][ T9109] __x64_sys_sendmsg+0x1b7/0x290 [ 345.553990][ T9109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.554036][ T9109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.554056][ T9109] do_syscall_64+0x174/0x580 [ 345.554082][ T9109] ? trace_irq_disable+0x3b/0x140 [ 345.554100][ T9109] ? clear_bhb_loop+0x40/0x90 [ 345.554123][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.554143][ T9109] RIP: 0033:0x7f291f22e019 [ 345.554161][ T9109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.554178][ T9109] RSP: 002b:00007f291d486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.554213][ T9109] RAX: ffffffffffffffda RBX: 00007f291f4b5fa0 RCX: 00007f291f22e019 [ 345.554228][ T9109] RDX: 0000000008000002 RSI: 0000200000000180 RDI: 0000000000000003 [ 345.554240][ T9109] RBP: 00007f291d486090 R08: 0000000000000000 R09: 0000000000000000 [ 345.554252][ T9109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.554263][ T9109] R13: 00007f291f4b6038 R14: 00007f291f4b5fa0 R15: 00007ffc2dde5148 [ 345.554293][ T9109] [ 345.743271][ T5612] usb 6-1: USB disconnect, device number 26 [ 346.311526][ T9121] FAULT_INJECTION: forcing a failure. [ 346.311526][ T9121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.311559][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.5.903 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 346.311582][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.311596][ T9121] Call Trace: [ 346.311604][ T9121] [ 346.311612][ T9121] dump_stack_lvl+0xe8/0x150 [ 346.311646][ T9121] should_fail_ex+0x467/0x600 [ 346.311680][ T9121] _copy_from_user+0x2d/0xb0 [ 346.311703][ T9121] ___sys_sendmsg+0x1c6/0x360 [ 346.311726][ T9121] ? __lock_acquire+0x683/0x2ce0 [ 346.311750][ T9121] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.311810][ T9121] ? __fget_files+0x2a/0x420 [ 346.311830][ T9121] ? __fget_files+0x3a8/0x420 [ 346.311860][ T9121] __x64_sys_sendmsg+0x1b7/0x290 [ 346.311888][ T9121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.311931][ T9121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.311952][ T9121] do_syscall_64+0x174/0x580 [ 346.311977][ T9121] ? trace_irq_disable+0x3b/0x140 [ 346.311996][ T9121] ? clear_bhb_loop+0x40/0x90 [ 346.312020][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.312038][ T9121] RIP: 0033:0x7f688705e019 [ 346.312056][ T9121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.312073][ T9121] RSP: 002b:00007f68852b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.312093][ T9121] RAX: ffffffffffffffda RBX: 00007f68872e5fa0 RCX: 00007f688705e019 [ 346.312107][ T9121] RDX: 0000000000000080 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 346.312120][ T9121] RBP: 00007f68852b6090 R08: 0000000000000000 R09: 0000000000000000 [ 346.312132][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.312143][ T9121] R13: 00007f68872e6038 R14: 00007f68872e5fa0 R15: 00007ffede357238 [ 346.312174][ T9121] [ 346.836430][ T9131] FAULT_INJECTION: forcing a failure. [ 346.836430][ T9131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.836460][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.5.906 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 346.836477][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.836487][ T9131] Call Trace: [ 346.836493][ T9131] [ 346.836499][ T9131] dump_stack_lvl+0xe8/0x150 [ 346.836528][ T9131] should_fail_ex+0x467/0x600 [ 346.836556][ T9131] _copy_from_user+0x2d/0xb0 [ 346.836575][ T9131] __sys_bpf+0x2e7/0xd90 [ 346.836598][ T9131] ? __pfx___sys_bpf+0x10/0x10 [ 346.836619][ T9131] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 346.836646][ T9131] ? rt_mutex_slowunlock+0x219/0x460 [ 346.836679][ T9131] ? rcu_is_watching+0x15/0xb0 [ 346.836703][ T9131] __x64_sys_bpf+0xba/0xd0 [ 346.836728][ T9131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.836745][ T9131] do_syscall_64+0x174/0x580 [ 346.836765][ T9131] ? trace_irq_disable+0x3b/0x140 [ 346.836781][ T9131] ? clear_bhb_loop+0x40/0x90 [ 346.836800][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.836815][ T9131] RIP: 0033:0x7f688705e019 [ 346.836830][ T9131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.836843][ T9131] RSP: 002b:00007f6885295028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.836862][ T9131] RAX: ffffffffffffffda RBX: 00007f68872e6090 RCX: 00007f688705e019 [ 346.836873][ T9131] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 0000000000000018 [ 346.836893][ T9131] RBP: 00007f6885295090 R08: 0000000000000000 R09: 0000000000000000 [ 346.836903][ T9131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.836913][ T9131] R13: 00007f68872e6128 R14: 00007f68872e6090 R15: 00007ffede357238 [ 346.836940][ T9131] [ 347.566878][ T9150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.911'. [ 348.599379][ T4914] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 348.601343][ T9161] tipc: Can't bind to reserved service type 2 [ 350.079344][ T9170] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 350.161722][ T9175] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.161749][ T9175] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 350.161939][ T9175] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 350.161957][ T9175] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 350.771144][ T9191] FAULT_INJECTION: forcing a failure. [ 350.771144][ T9191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.771177][ T9191] CPU: 0 UID: 0 PID: 9191 Comm: syz.1.926 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 350.771200][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 350.771212][ T9191] Call Trace: [ 350.771268][ T9191] [ 350.771341][ T9191] dump_stack_lvl+0xe8/0x150 [ 350.771535][ T9191] should_fail_ex+0x467/0x600 [ 350.771656][ T9191] _copy_from_user+0x2d/0xb0 [ 350.771728][ T9191] __keyctl_dh_compute+0x1c3/0xd10 [ 350.771836][ T9191] ? __lock_acquire+0x683/0x2ce0 [ 350.771942][ T9191] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 350.771999][ T9191] ? get_pid_task+0x20/0x1f0 [ 350.772084][ T9191] ? get_pid_task+0x20/0x1f0 [ 350.772114][ T9191] keyctl_dh_compute+0x124/0x180 [ 350.772145][ T9191] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 350.772179][ T9191] ? do_raw_spin_lock+0x12b/0x2f0 [ 350.772215][ T9191] __se_sys_keyctl+0x44c/0x9d0 [ 350.772241][ T9191] ? __pfx___se_sys_keyctl+0x10/0x10 [ 350.772263][ T9191] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 350.772363][ T9191] ? rt_mutex_slowunlock+0x219/0x460 [ 350.772382][ T9191] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 350.772407][ T9191] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 350.772437][ T9191] ? fput+0xa0/0xd0 [ 350.772515][ T9191] ? ksys_write+0x248/0x270 [ 350.772574][ T9191] ? __pfx_ksys_write+0x10/0x10 [ 350.772603][ T9191] ? __x64_sys_keyctl+0x20/0xc0 [ 350.772625][ T9191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.772665][ T9191] do_syscall_64+0x174/0x580 [ 350.772737][ T9191] ? trace_irq_disable+0x3b/0x140 [ 350.772800][ T9191] ? clear_bhb_loop+0x40/0x90 [ 350.772824][ T9191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.772843][ T9191] RIP: 0033:0x7f291f22e019 [ 350.772891][ T9191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.772908][ T9191] RSP: 002b:00007f291d486028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 350.772957][ T9191] RAX: ffffffffffffffda RBX: 00007f291f4b5fa0 RCX: 00007f291f22e019 [ 350.772968][ T9191] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000017 [ 350.772977][ T9191] RBP: 00007f291d486090 R08: 0000000000000000 R09: 0000000000000000 [ 350.772986][ T9191] R10: fffffffffffffd7e R11: 0000000000000246 R12: 0000000000000001 [ 350.772994][ T9191] R13: 00007f291f4b6038 R14: 00007f291f4b5fa0 R15: 00007ffc2dde5148 [ 350.773017][ T9191] [ 351.917607][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.931'. [ 351.917698][ T9204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.931'. [ 352.078211][ T9206] 8021q: VLANs not supported on ipvlan0 [ 352.432698][ T9216] Invalid ELF header magic: != ELF [ 353.189787][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 353.336148][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 353.344964][ T9] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 353.344993][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.447545][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 353.684324][ T9230] netlink: 'syz.5.939': attribute type 1 has an invalid length. [ 354.440301][ T9241] netlink: 36 bytes leftover after parsing attributes in process `syz.4.942'. [ 354.530129][ T9] gspca_nw80x: reg_r err -71 [ 354.530297][ T9] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 354.554207][ T9] usb 2-1: USB disconnect, device number 29 [ 354.823585][ T9244] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 354.823863][ T9244] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 354.878679][ T9248] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 354.878764][ T9248] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 354.902830][ T9246] bridge_slave_0: left allmulticast mode [ 354.902862][ T9246] bridge_slave_0: left promiscuous mode [ 354.903103][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.436091][ T31] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 355.496559][ T822] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 355.544419][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.948'. [ 355.544453][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.948'. [ 355.586277][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 355.588216][ T31] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 355.588238][ T31] usb 1-1: config 0 has no interface number 0 [ 355.588274][ T31] usb 1-1: config 0 interface 184 has no altsetting 0 [ 355.628300][ T31] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 355.628328][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.628348][ T31] usb 1-1: Product: syz [ 355.628361][ T31] usb 1-1: Manufacturer: syz [ 355.628375][ T31] usb 1-1: SerialNumber: syz [ 355.667754][ T31] usb 1-1: config 0 descriptor?? [ 355.699807][ T822] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 355.699859][ T822] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 355.699939][ T822] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.702103][ T822] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 355.702151][ T822] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 355.702228][ T822] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.704245][ T822] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 355.704348][ T822] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 355.704373][ T822] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.795531][ T822] usb 2-1: string descriptor 0 read error: -22 [ 355.803123][ T822] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 355.810338][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.851466][ T822] adutux 2-1:168.0: interrupt endpoints not found [ 356.089251][ T10] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 356.168529][ T9264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.951'. [ 356.168562][ T9264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.951'. [ 356.238266][ T10] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 356.238301][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 356.238332][ T10] usb 4-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 356.238354][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.249731][ T10] usb 4-1: config 0 descriptor?? [ 356.269803][ T9260] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 356.797167][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 356.797198][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 357.021602][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 357.021700][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 357.052499][ T10] usb 4-1: USB disconnect, device number 23 [ 357.162529][ T9277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.954'. [ 357.443122][ T9279] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 357.443616][ T9279] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 357.562475][ T9282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.563486][ T9282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.976002][ T10] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 358.128630][ T10] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 358.128665][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 358.128700][ T10] usb 6-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 358.128722][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.145479][ T10] usb 6-1: config 0 descriptor?? [ 358.178142][ T9284] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 358.743841][ T9295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.960'. [ 359.109432][ T5612] usb 2-1: USB disconnect, device number 30 [ 359.212765][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 359.212884][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 359.233807][ T10] usb 6-1: USB disconnect, device number 27 [ 359.402679][ T9307] netlink: 36 bytes leftover after parsing attributes in process `syz.5.965'. [ 359.433584][ T9294] virt_wifi0 speed is unknown, defaulting to 1000 [ 360.878887][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.969'. [ 361.089106][ T9330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.971'. [ 361.817218][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110 [ 361.817249][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -110 [ 361.817268][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 361.817284][ T31] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -110 [ 361.817561][ T31] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -110 [ 361.942500][ T9347] loop8: detected capacity change from 0 to 8 [ 361.978988][ T37] audit: type=1326 audit(1785742068.058:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9348 comm="syz.5.979" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f688705e019 code=0x0 [ 362.426041][ T9347] Dev loop8: unable to read RDB block 8 [ 362.431009][ T9347] loop8: unable to read partition table [ 362.482098][ T9347] loop8: partition table beyond EOD, truncated [ 362.482269][ T9347] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 362.761154][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.981'. [ 362.818971][ T198] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 362.967570][ T198] usb 6-1: Using ep0 maxpacket: 32 [ 362.970078][ T198] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 362.970103][ T198] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 362.970121][ T198] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 362.970141][ T198] usb 6-1: config 1 has no interface number 0 [ 362.970203][ T198] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.970229][ T198] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 362.970268][ T198] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 362.970289][ T198] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.095623][ T198] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 363.515542][ T198] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 363.553702][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 363.740317][ T9378] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 363.740382][ T9378] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 364.297372][ T9388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.992'. [ 364.596685][ T9393] Invalid ELF header magic: != ELF [ 365.347559][ T9] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 365.612586][ T822] usb 6-1: USB disconnect, device number 28 [ 365.625409][ T822] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 366.071747][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.998'. [ 366.124328][ T9411] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 366.124344][ T9411] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 366.124449][ T9411] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 366.124460][ T9411] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 366.889484][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'. [ 367.066019][ T9] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 367.184442][ T9430] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 367.188391][ T9430] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 367.217626][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 367.217647][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 367.217665][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 367.217677][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.222767][ T9] usb 5-1: config 0 descriptor?? [ 367.223914][ T9414] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 367.326022][ T822] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 367.441107][ T9412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.457869][ T9412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.477826][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 367.477953][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 367.487236][ T822] usb 4-1: Using ep0 maxpacket: 32 [ 367.512225][ T822] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 367.514874][ T9] usb 5-1: USB disconnect, device number 36 [ 367.515482][ T822] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 367.515506][ T822] usb 4-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 367.515526][ T822] usb 4-1: Product: syz [ 367.515539][ T822] usb 4-1: Manufacturer: syz [ 367.515562][ T822] usb 4-1: SerialNumber: syz [ 367.545522][ T822] usb 4-1: config 0 descriptor?? [ 367.961910][ T9] usb 4-1: USB disconnect, device number 24 [ 368.552495][ T9449] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 368.552579][ T9449] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 368.926083][ T5784] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 369.089040][ T5784] usb 6-1: unable to get BOS descriptor or descriptor too short [ 369.104274][ T5784] usb 6-1: config 8 has an invalid interface number: 59 but max is 3 [ 369.104298][ T5784] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 369.104316][ T5784] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 369.104334][ T5784] usb 6-1: config 8 has no interface number 0 [ 369.104375][ T5784] usb 6-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 369.104399][ T5784] usb 6-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 369.104418][ T5784] usb 6-1: config 8 interface 59 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 369.104457][ T5784] usb 6-1: config 8 interface 59 has no altsetting 0 [ 369.190780][ T5784] usb 6-1: string descriptor 0 read error: -22 [ 369.190909][ T5784] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 369.190932][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.243672][ T5784] ttusbir 6-1:8.59: cannot find expected altsetting [ 369.481751][ T5784] usb 6-1: USB disconnect, device number 29 [ 370.091818][ T9477] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 370.091902][ T9477] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 370.816027][ T822] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 370.969130][ T822] usb 6-1: Using ep0 maxpacket: 32 [ 370.971158][ T822] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 370.973339][ T822] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 370.973365][ T822] usb 6-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 370.973384][ T822] usb 6-1: Product: syz [ 370.973397][ T822] usb 6-1: Manufacturer: syz [ 370.973411][ T822] usb 6-1: SerialNumber: syz [ 370.978822][ T822] usb 6-1: config 0 descriptor?? [ 371.414199][ T9] usb 6-1: USB disconnect, device number 30 [ 371.978977][ T9] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 372.084652][ T9515] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 372.084687][ T9515] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 372.086074][ T9515] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 372.086136][ T9515] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 372.098337][ T822] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 372.297107][ T822] usb 2-1: Using ep0 maxpacket: 32 [ 372.320694][ T822] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 372.320762][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 372.320798][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 372.320867][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 372.320929][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 372.450201][ T822] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 372.450232][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.450251][ T822] usb 2-1: Product: syz [ 372.450265][ T822] usb 2-1: Manufacturer: syz [ 372.450279][ T822] usb 2-1: SerialNumber: syz [ 372.600925][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 372.600964][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 372.601000][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 372.601023][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.749527][ T9] usb 5-1: config 0 descriptor?? [ 372.750228][ T9507] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 372.771006][ T822] usb 2-1: config 0 descriptor?? [ 372.976179][ T822] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 372.977318][ T822] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 372.978261][ T822] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 373.134146][ T9520] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 373.134686][ T9520] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 373.155450][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 373.155477][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 373.190910][ T9507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.203739][ T9507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.361222][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.361916][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.379678][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.380118][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.380545][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.381117][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.382400][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.382813][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.383849][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.384501][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.384916][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.422425][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.442049][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.465655][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.472123][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.478655][ T822] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 373.478771][ T822] input input55: Timeout waiting for response from device. [ 373.507357][ T822] usb 2-1: USB disconnect, device number 31 [ 373.831176][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 373.831291][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 373.845988][ T9] usb 5-1: USB disconnect, device number 37 [ 374.134568][ T9534] virt_wifi0 speed is unknown, defaulting to 1000 [ 375.056005][ T822] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 375.183732][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'. [ 375.211413][ T822] usb 6-1: Using ep0 maxpacket: 32 [ 375.213664][ T822] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 375.232051][ T822] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 375.232080][ T822] usb 6-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 375.232098][ T822] usb 6-1: Product: syz [ 375.232112][ T822] usb 6-1: Manufacturer: syz [ 375.232125][ T822] usb 6-1: SerialNumber: syz [ 375.282329][ T822] usb 6-1: config 0 descriptor?? [ 375.296799][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 375.296826][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 375.466003][ T5739] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 375.619259][ T5739] usb 2-1: unable to get BOS descriptor or descriptor too short [ 375.633429][ T5739] usb 2-1: config 8 has an invalid interface number: 59 but max is 3 [ 375.633456][ T5739] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 375.633474][ T5739] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 375.633494][ T5739] usb 2-1: config 8 has no interface number 0 [ 375.633537][ T5739] usb 2-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 375.633563][ T5739] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 375.633584][ T5739] usb 2-1: config 8 interface 59 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 375.633610][ T5739] usb 2-1: config 8 interface 59 has no altsetting 0 [ 375.714481][ T5739] usb 2-1: string descriptor 0 read error: -22 [ 375.714627][ T5739] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 375.714651][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.736118][ T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 375.776419][ T5739] ttusbir 2-1:8.59: cannot find expected altsetting [ 375.796654][ T5784] usb 6-1: USB disconnect, device number 31 [ 375.889054][ T9] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 375.889088][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 375.889119][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 375.889141][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.904528][ T9] usb 4-1: config 0 descriptor?? [ 375.907613][ T9561] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 376.121779][ T5784] usb 2-1: USB disconnect, device number 32 [ 376.346100][ T9561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.346661][ T9561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.262821][ T9585] 9p: Bad value for 'rfdno' [ 377.317104][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 377.317214][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 377.378697][ T9] usb 4-1: USB disconnect, device number 25 [ 377.872266][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1054'. [ 377.872296][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1054'. [ 378.550252][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.550322][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.770828][ T9618] 9p: Bad value for 'rfdno' [ 378.816171][ T5784] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 378.971006][ T5784] usb 6-1: unable to get BOS descriptor or descriptor too short [ 378.993460][ T5784] usb 6-1: config 8 has an invalid interface number: 59 but max is 3 [ 378.993487][ T5784] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 378.993506][ T5784] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 378.993525][ T5784] usb 6-1: config 8 has no interface number 0 [ 378.993633][ T5784] usb 6-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 378.993659][ T5784] usb 6-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 378.993679][ T5784] usb 6-1: config 8 interface 59 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 378.993695][ T5784] usb 6-1: config 8 interface 59 has no altsetting 0 [ 379.038965][ T5784] usb 6-1: string descriptor 0 read error: -22 [ 379.039059][ T5784] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 379.039072][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.112575][ T5784] ttusbir 6-1:8.59: cannot find expected altsetting [ 379.329840][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1067'. [ 379.351427][ T5739] usb 6-1: USB disconnect, device number 32 [ 379.927993][ T9641] 9p: Bad value for 'wfdno' [ 380.704686][ T9654] 9p: Bad value for 'rfdno' [ 381.366797][ T9670] virt_wifi0 speed is unknown, defaulting to 1000 [ 381.885839][ T5784] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 382.038054][ T5784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 382.047498][ T5784] usb 2-1: config 8 has an invalid interface number: 59 but max is 3 [ 382.047523][ T5784] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 382.047542][ T5784] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 382.047561][ T5784] usb 2-1: config 8 has no interface number 0 [ 382.047604][ T5784] usb 2-1: config 8 interface 59 altsetting 2 has an endpoint descriptor with address 0x1A, changing to 0xA [ 382.047629][ T5784] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 382.047650][ T5784] usb 2-1: config 8 interface 59 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 382.047676][ T5784] usb 2-1: config 8 interface 59 has no altsetting 0 [ 382.140032][ T5784] usb 2-1: string descriptor 0 read error: -22 [ 382.140172][ T5784] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88 [ 382.140194][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.182305][ T5784] ttusbir 2-1:8.59: cannot find expected altsetting [ 382.319416][ T9687] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 382.319508][ T9687] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 382.320561][ T9687] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 382.320669][ T9687] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 383.017809][ T1836] usb 2-1: USB disconnect, device number 33 [ 383.176160][ T9694] 9p: Bad value for 'rfdno' [ 383.242513][ T9696] 9p: Bad value for 'wfdno' [ 384.024046][ T9715] FAULT_INJECTION: forcing a failure. [ 384.024046][ T9715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.024094][ T9715] CPU: 0 UID: 0 PID: 9715 Comm: syz.1.1094 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 384.024117][ T9715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.024133][ T9715] Call Trace: [ 384.024140][ T9715] [ 384.024150][ T9715] dump_stack_lvl+0xe8/0x150 [ 384.024185][ T9715] should_fail_ex+0x467/0x600 [ 384.024220][ T9715] _copy_from_user+0x2d/0xb0 [ 384.024245][ T9715] __sys_bpf+0x2e7/0xd90 [ 384.024347][ T9715] ? __pfx___sys_bpf+0x10/0x10 [ 384.024371][ T9715] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 384.024402][ T9715] ? rt_mutex_slowunlock+0x219/0x460 [ 384.024441][ T9715] ? ksys_write+0x248/0x270 [ 384.024469][ T9715] ? __pfx_ksys_write+0x10/0x10 [ 384.024506][ T9715] __x64_sys_bpf+0xba/0xd0 [ 384.024563][ T9715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.024584][ T9715] do_syscall_64+0x174/0x580 [ 384.024609][ T9715] ? trace_irq_disable+0x3b/0x140 [ 384.024631][ T9715] ? clear_bhb_loop+0x40/0x90 [ 384.024655][ T9715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.024679][ T9715] RIP: 0033:0x7f291f22e019 [ 384.024698][ T9715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.024715][ T9715] RSP: 002b:00007f291d486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.024735][ T9715] RAX: ffffffffffffffda RBX: 00007f291f4b5fa0 RCX: 00007f291f22e019 [ 384.024749][ T9715] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 384.024762][ T9715] RBP: 00007f291d486090 R08: 0000000000000000 R09: 0000000000000000 [ 384.024774][ T9715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.024786][ T9715] R13: 00007f291f4b6038 R14: 00007f291f4b5fa0 R15: 00007ffc2dde5148 [ 384.024818][ T9715] [ 384.713507][ T9730] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 384.713585][ T9730] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 384.719711][ T9730] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 384.719957][ T9730] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 385.480424][ T9736] 9p: Bad value for 'rfdno' [ 385.532052][ T9727] virt_wifi0 speed is unknown, defaulting to 1000 [ 386.202754][ T9754] 9p: Bad value for 'wfdno' [ 387.195719][ T9766] 9p: Bad value for 'rfdno' [ 387.557101][ T9772] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 387.557137][ T9772] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 387.569066][ T9772] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 387.569159][ T9772] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 388.392358][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 388.392386][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 388.448930][ T9787] FAULT_INJECTION: forcing a failure. [ 388.448930][ T9787] name failslab, interval 1, probability 0, space 0, times 0 [ 388.448962][ T9787] CPU: 1 UID: 0 PID: 9787 Comm: syz.3.1116 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 388.448983][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.448994][ T9787] Call Trace: [ 388.449001][ T9787] [ 388.449009][ T9787] dump_stack_lvl+0xe8/0x150 [ 388.449044][ T9787] should_fail_ex+0x467/0x600 [ 388.449077][ T9787] should_failslab+0xa8/0x100 [ 388.449215][ T9787] kmem_cache_alloc_noprof+0xa4/0x650 [ 388.449274][ T9787] ? do_getname+0x2e/0x250 [ 388.449325][ T9787] ? do_getname+0x2e/0x250 [ 388.449353][ T9787] ? rt_mutex_slowunlock+0x219/0x460 [ 388.449378][ T9787] do_getname+0x2e/0x250 [ 388.449405][ T9787] ? getname_flags+0x11/0x20 [ 388.449435][ T9787] do_sys_openat2+0xcc/0x200 [ 388.449458][ T9787] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.449478][ T9787] ? ksys_write+0x248/0x270 [ 388.449504][ T9787] ? __pfx_ksys_write+0x10/0x10 [ 388.449530][ T9787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.449551][ T9787] __x64_sys_creat+0x8f/0xc0 [ 388.449574][ T9787] do_syscall_64+0x174/0x580 [ 388.449600][ T9787] ? trace_irq_disable+0x3b/0x140 [ 388.449619][ T9787] ? clear_bhb_loop+0x40/0x90 [ 388.449642][ T9787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.449662][ T9787] RIP: 0033:0x7efc45f4e019 [ 388.449680][ T9787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.449696][ T9787] RSP: 002b:00007efc441a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 388.449716][ T9787] RAX: ffffffffffffffda RBX: 00007efc461d5fa0 RCX: 00007efc45f4e019 [ 388.449728][ T9787] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 388.449740][ T9787] RBP: 00007efc441a6090 R08: 0000000000000000 R09: 0000000000000000 [ 388.449750][ T9787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.449760][ T9787] R13: 00007efc461d6038 R14: 00007efc461d5fa0 R15: 00007ffc7bd87938 [ 388.449790][ T9787] [ 388.747643][ T9793] virt_wifi0 speed is unknown, defaulting to 1000 [ 388.767188][ T9794] 9p: Bad value for 'rfdno' [ 388.925824][ T5784] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 389.074902][ T5784] usb 5-1: Using ep0 maxpacket: 8 [ 389.077067][ T5784] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 389.077204][ T5784] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.077228][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.077253][ T5784] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 389.080150][ T5784] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 389.080185][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.080205][ T5784] usb 5-1: Product: syz [ 389.080218][ T5784] usb 5-1: Manufacturer: syz [ 389.080232][ T5784] usb 5-1: SerialNumber: syz [ 389.086870][ T5784] usb 5-1: config 0 descriptor?? [ 389.087858][ T9789] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 389.608591][ T5784] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 389.633534][ T5784] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input59 [ 389.827940][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.855574][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.079647][ T9806] 9p: Bad value for 'wfdno' [ 390.846775][ T9801] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 390.858875][ T9818] bond0: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 390.859680][ T9818] bond0: (slave ip6gre0): Error -95 calling set_mac_address [ 390.931870][ T9815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.944384][ T9815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.584761][ T9828] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 391.584929][ T9828] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 391.586185][ T9828] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 391.586239][ T9828] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 497.991664][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 497.991686][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9678/1:b..l P164/2:b..l P9/1:b..l P9829/2:b..l P72/2:b..l P9799/2:b..l P13/1:b..l P29/3:b..l [ 497.991795][ C0] rcu: (detected by 0, t=10502 jiffies, g=34537, q=76 ncpus=2) [ 497.991815][ C0] task:ktimers/1 state:R running task stack:23632 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 497.991870][ C0] Call Trace: [ 497.991876][ C0] [ 497.991890][ C0] __schedule+0x16dc/0x5500 [ 497.992012][ C0] ? __pfx___schedule+0x10/0x10 [ 497.992038][ C0] ? __lock_acquire+0x683/0x2ce0 [ 497.992071][ C0] preempt_schedule_irq+0x4d/0xa0 [ 497.992094][ C0] irqentry_exit+0x14f/0x8f0 [ 497.992126][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 497.992148][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 497.992169][ C0] Code: ff ff ff e8 f1 9b a2 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 bb b6 fc 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d e8 96 11 [ 497.992185][ C0] RSP: 0018:ffffc90000a3f800 EFLAGS: 00000286 [ 497.992201][ C0] RAX: d3253c7834124500 RBX: 0000000000000000 RCX: 0000000000000046 [ 497.992213][ C0] RDX: 000000002ce19388 RSI: ffffffff8daf6ba4 RDI: ffffffff8bca7880 [ 497.992226][ C0] RBP: ffffffff8b465b20 R08: ffffffff8b465b20 R09: 0000000000000000 [ 497.992240][ C0] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000002 [ 497.992251][ C0] R13: ffffffff8e1c3000 R14: 0000000000000000 R15: 0000000000000246 [ 497.992267][ C0] ? rt_spin_lock+0x1e0/0x400 [ 497.992288][ C0] ? rt_spin_lock+0x1e0/0x400 [ 497.992317][ C0] rt_spin_lock+0x1fc/0x400 [ 497.992335][ C0] ? rt_spin_lock+0x1e0/0x400 [ 497.992356][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 497.992380][ C0] ? rt_spin_unlock+0x157/0x200 [ 497.992403][ C0] snd_seq_prioq_cell_out+0x3c/0x3b0 [ 497.992504][ C0] snd_seq_check_queue+0x1e4/0x4a0 [ 497.992534][ C0] ? __pfx_snd_seq_check_queue+0x10/0x10 [ 497.992559][ C0] ? rt_spin_unlock+0x163/0x200 [ 497.992580][ C0] ? snd_seq_timer_interrupt+0x2ed/0x400 [ 497.992607][ C0] ? __pfx_snd_seq_timer_interrupt+0x10/0x10 [ 497.992630][ C0] snd_timer_interrupt+0x1133/0x13a0 [ 497.992730][ C0] snd_hrtimer_callback+0x1b2/0x330 [ 497.992765][ C0] ? __pfx_snd_hrtimer_callback+0x10/0x10 [ 497.992788][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 497.992888][ C0] hrtimer_run_softirq+0x18f/0x260 [ 497.992921][ C0] handle_softirqs+0x1d9/0x6c0 [ 497.992985][ C0] run_ktimerd+0x69/0x100 [ 497.993010][ C0] smpboot_thread_fn+0x57c/0xa80 [ 497.993061][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 497.993093][ C0] kthread+0x388/0x470 [ 497.993147][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 497.993170][ C0] ? __pfx_kthread+0x10/0x10 [ 497.993199][ C0] ret_from_fork+0x514/0xb70 [ 497.993264][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 497.993292][ C0] ? __switch_to+0xc89/0x1420 [ 497.993345][ C0] ? __pfx_kthread+0x10/0x10 [ 497.993374][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.993409][ C0] [ 497.993416][ C0] task:kworker/u8:1 state:R running task stack:22568 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 497.993470][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 497.993609][ C0] Call Trace: [ 497.993615][ C0] [ 497.993626][ C0] __schedule+0x16dc/0x5500 [ 497.993673][ C0] ? __pfx___schedule+0x10/0x10 [ 497.993694][ C0] ? __lock_acquire+0x683/0x2ce0 [ 497.993727][ C0] preempt_schedule_irq+0x4d/0xa0 [ 497.993757][ C0] irqentry_exit+0x14f/0x8f0 [ 497.993780][ C0] ? trace_irq_disable+0x3b/0x140 [ 497.993806][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 497.993825][ C0] RIP: 0010:lock_release+0x44/0x3c0 [ 497.993844][ C0] Code: 8b 05 e0 87 fc 10 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 e3 87 fc 10 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 cc 0a 0e 0e <73> 0d e8 d5 0e 09 00 84 c0 0f 84 94 02 00 00 83 3d 06 1e 0e 0e 00 [ 497.993858][ C0] RSP: 0018:ffffc900001271f8 EFLAGS: 00000293 [ 497.993873][ C0] RAX: 0000000000000000 RBX: ffffc90000127318 RCX: 0000000080000001 [ 497.993886][ C0] RDX: ffffc90000127301 RSI: ffffffff8177825f RDI: ffffffff8e1c3000 [ 497.993900][ C0] RBP: 1ffffffff2081b01 R08: ffffc90000127ce8 R09: 0000000000000000 [ 497.993913][ C0] R10: ffffc90000127358 R11: fffff52000024e6d R12: ffffc90000120000 [ 497.993926][ C0] R13: ffffffff8177825f R14: ffffffff8e1c3000 R15: ffffc90000127cf8 [ 497.993941][ C0] ? unwind_next_frame+0x8f/0x2550 [ 497.994025][ C0] ? unwind_next_frame+0x8f/0x2550 [ 497.994052][ C0] ? deref_stack_reg+0x18e/0x220 [ 497.994073][ C0] ? unwind_next_frame+0x8f/0x2550 [ 497.994094][ C0] unwind_next_frame+0x1baa/0x2550 [ 497.994120][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 497.994142][ C0] ? unwind_next_frame+0x8f/0x2550 [ 497.994166][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 497.994185][ C0] arch_stack_walk+0x11b/0x150 [ 497.994255][ C0] ? worker_thread+0xa47/0xfb0 [ 497.994282][ C0] stack_trace_save+0xa9/0x100 [ 497.994334][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 497.994367][ C0] ? __lock_acquire+0x683/0x2ce0 [ 497.994390][ C0] kasan_save_track+0x3e/0x80 [ 497.994443][ C0] ? kasan_save_track+0x3e/0x80 [ 497.994461][ C0] ? kasan_save_free_info+0x40/0x50 [ 497.994485][ C0] ? __kasan_slab_free+0x5c/0x80 [ 497.994503][ C0] ? kfree+0x1c5/0x6c0 [ 497.994518][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1ea1/0x2c40 [ 497.994576][ C0] ? ieee80211_iface_work+0x78a/0x1010 [ 497.994622][ C0] ? cfg80211_wiphy_work+0x29e/0x420 [ 497.994641][ C0] ? process_scheduled_works+0xa8e/0x14e0 [ 497.994706][ C0] kasan_save_free_info+0x40/0x50 [ 497.994732][ C0] __kasan_slab_free+0x5c/0x80 [ 497.994759][ C0] kfree+0x1c5/0x6c0 [ 497.994775][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1ea1/0x2c40 [ 497.994806][ C0] ieee80211_ibss_rx_queued_mgmt+0x1ea1/0x2c40 [ 497.994847][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 497.994874][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 497.994905][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 497.994930][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 497.994954][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 497.994978][ C0] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 497.995001][ C0] ? reacquire_held_locks+0x104/0x190 [ 497.995039][ C0] ? rt_spin_unlock+0x163/0x200 [ 497.995065][ C0] ieee80211_iface_work+0x78a/0x1010 [ 497.995101][ C0] cfg80211_wiphy_work+0x29e/0x420 [ 497.995124][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 497.995147][ C0] process_scheduled_works+0xa8e/0x14e0 [ 497.995194][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.995223][ C0] ? assign_work+0x3cf/0x5d0 [ 497.995249][ C0] worker_thread+0xa47/0xfb0 [ 497.995297][ C0] kthread+0x388/0x470 [ 497.995324][ C0] ? __pfx_worker_thread+0x10/0x10 [ 497.995346][ C0] ? __pfx_kthread+0x10/0x10 [ 497.995375][ C0] ret_from_fork+0x514/0xb70 [ 497.995405][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 497.995433][ C0] ? __switch_to+0xc89/0x1420 [ 497.995460][ C0] ? __pfx_kthread+0x10/0x10 [ 497.995489][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.995522][ C0] [ 497.995529][ C0] task:syz.4.1118 state:R running task stack:24368 pid:9799 tgid:9788 ppid:5605 task_flags:0x40044c flags:0x00080002 [ 497.995582][ C0] Call Trace: [ 497.995588][ C0] [ 497.995599][ C0] __schedule+0x16dc/0x5500 [ 497.995632][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 497.995672][ C0] ? __pfx___schedule+0x10/0x10 [ 497.995700][ C0] ? ___migrate_enable+0x19c/0x1f0 [ 497.995784][ C0] ? __pfx____migrate_enable+0x10/0x10 [ 497.995808][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 497.995859][ C0] preempt_schedule_common+0x82/0xd0 [ 497.995883][ C0] preempt_schedule_thunk+0x16/0x40 [ 497.995911][ C0] rt_spin_unlock+0xf0/0x200 [ 497.995934][ C0] __zap_vma_range+0x3ba8/0x49e0 [ 497.996018][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 497.996086][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 497.996111][ C0] ? unmap_vmas+0x1b9/0x550 [ 497.996144][ C0] ? unmap_vmas+0x1b9/0x550 [ 497.996171][ C0] unmap_vmas+0x390/0x550 [ 497.996204][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 497.996251][ C0] exit_mmap+0x293/0x9f0 [ 497.996319][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 497.996337][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 497.996374][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 497.996408][ C0] ? __pfx_exit_aio+0x10/0x10 [ 497.996465][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 497.996498][ C0] ? uprobe_clear_state+0x2af/0x3e0 [ 497.996590][ C0] __mmput+0xcb/0x3d0 [ 497.996637][ C0] exit_mm+0x186/0x240 [ 497.996657][ C0] do_exit+0x6cd/0x2360 [ 497.996673][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 497.996697][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 497.996726][ C0] ? __pfx_do_exit+0x10/0x10 [ 497.996782][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 497.996801][ C0] ? rt_spin_lock+0x1e0/0x400 [ 497.996826][ C0] ? rt_spin_unlock+0x157/0x200 [ 497.996848][ C0] do_group_exit+0x22d/0x2f0 [ 497.996865][ C0] ? rt_spin_unlock+0x163/0x200 [ 497.996887][ C0] get_signal+0x121b/0x12c0 [ 497.996972][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 497.996999][ C0] ? fput+0xa0/0xd0 [ 497.997018][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 497.997042][ C0] ? __x64_sys_recvmsg+0x260/0x290 [ 497.997116][ C0] exit_to_user_mode_loop+0x104/0x730 [ 497.997158][ C0] ? rcu_is_watching+0x15/0xb0 [ 497.997232][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.997252][ C0] do_syscall_64+0x353/0x580 [ 497.997276][ C0] ? trace_irq_disable+0x3b/0x140 [ 497.997295][ C0] ? clear_bhb_loop+0x40/0x90 [ 497.997318][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.997336][ C0] RIP: 0033:0x7f9ace74e019 [ 497.997352][ C0] RSP: 002b:00007f9acc985028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 497.997370][ C0] RAX: 0000000000034000 RBX: 00007f9ace9d6090 RCX: 00007f9ace74e019 [ 497.997384][ C0] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 497.997395][ C0] RBP: 00007f9ace7e500c R08: 0000000000000000 R09: 0000000000000000 [ 497.997407][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.997418][ C0] R13: 00007f9ace9d6128 R14: 00007f9ace9d6090 R15: 00007ffd7b6bcbe8 [ 497.997448][ C0] [ 497.997455][ C0] task:kworker/u8:4 state:R running task stack:19872 pid:72 tgid:72 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 497.997504][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 497.997604][ C0] Call Trace: [ 497.997610][ C0] [ 497.997620][ C0] __schedule+0x16dc/0x5500 [ 497.997668][ C0] ? __pfx___schedule+0x10/0x10 [ 497.997692][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 497.997715][ C0] ? irqentry_exit+0x218/0x8f0 [ 497.997753][ C0] ? unwind_next_frame+0x8f/0x2550 [ 497.997774][ C0] preempt_schedule_notrace+0x57/0x90 [ 497.997798][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 497.997822][ C0] ? unwind_next_frame+0x8f/0x2550 [ 497.997845][ C0] rcu_is_watching+0x7f/0xb0 [ 497.997867][ C0] ? nsim_dev_trap_report_work+0x879/0xcb0 [ 497.997893][ C0] unwind_next_frame+0xbe/0x2550 [ 497.997918][ C0] ? kmem_cache_free+0x187/0x6c0 [ 497.997939][ C0] ? unwind_next_frame+0x8f/0x2550 [ 497.997962][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 497.997980][ C0] arch_stack_walk+0x11b/0x150 [ 497.998006][ C0] ? nsim_dev_trap_report_work+0x879/0xcb0 [ 497.998036][ C0] stack_trace_save+0xa9/0x100 [ 497.998064][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 497.998091][ C0] ? kfree+0x1c5/0x6c0 [ 497.998112][ C0] ? __lock_acquire+0x683/0x2ce0 [ 497.998135][ C0] kasan_save_track+0x3e/0x80 [ 497.998152][ C0] ? kasan_save_track+0x3e/0x80 [ 497.998169][ C0] ? kasan_save_free_info+0x40/0x50 [ 497.998193][ C0] ? __kasan_slab_free+0x5c/0x80 [ 497.998211][ C0] ? kmem_cache_free+0x187/0x6c0 [ 497.998230][ C0] ? nsim_dev_trap_report_work+0x879/0xcb0 [ 497.998298][ C0] ? nsim_dev_trap_report_work+0x879/0xcb0 [ 497.998323][ C0] kasan_save_free_info+0x40/0x50 [ 497.998348][ C0] __kasan_slab_free+0x5c/0x80 [ 497.998369][ C0] kmem_cache_free+0x187/0x6c0 [ 497.998390][ C0] ? nsim_dev_trap_report_work+0x879/0xcb0 [ 497.998415][ C0] ? nsim_dev_trap_report_work+0x79d/0xcb0 [ 497.998442][ C0] nsim_dev_trap_report_work+0x879/0xcb0 [ 497.998481][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 497.998503][ C0] process_scheduled_works+0xa8e/0x14e0 [ 497.998550][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.998578][ C0] ? assign_work+0x3cf/0x5d0 [ 497.998606][ C0] worker_thread+0xa47/0xfb0 [ 497.998653][ C0] kthread+0x388/0x470 [ 497.998681][ C0] ? __pfx_worker_thread+0x10/0x10 [ 497.998702][ C0] ? __pfx_kthread+0x10/0x10 [ 497.998731][ C0] ret_from_fork+0x514/0xb70 [ 497.998766][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 497.998794][ C0] ? __switch_to+0xc89/0x1420 [ 497.998822][ C0] ? __pfx_kthread+0x10/0x10 [ 497.998851][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.998883][ C0] [ 497.998890][ C0] task:syz.3.1129 state:R running task stack:23672 pid:9829 tgid:9829 ppid:5604 task_flags:0x400040 flags:0x00080000 [ 497.998942][ C0] Call Trace: [ 497.998947][ C0] [ 497.998957][ C0] __schedule+0x16dc/0x5500 [ 497.999000][ C0] ? __lock_acquire+0x683/0x2ce0 [ 497.999022][ C0] ? __pfx___schedule+0x10/0x10 [ 497.999046][ C0] ? __pfx___css_rstat_updated+0x10/0x10 [ 497.999100][ C0] preempt_schedule_irq+0x4d/0xa0 [ 497.999124][ C0] irqentry_exit+0x14f/0x8f0 [ 497.999146][ C0] ? trace_irq_disable+0x3b/0x140 [ 497.999169][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 497.999188][ C0] RIP: 0010:folio_add_lru+0x0/0x220 [ 497.999259][ C0] Code: bc ff 4c 89 f7 48 c7 c6 e0 64 78 8b e8 69 b7 1e ff 90 0f 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 89 fb 49 bf 00 00 00 [ 497.999274][ C0] RSP: 0018:ffffc9000e907a98 EFLAGS: 00000293 [ 497.999289][ C0] RAX: ffffffff82091f1e RBX: ffffea0001c7e1c0 RCX: ffff888036ebbe00 [ 497.999303][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea0001c7e1c0 [ 497.999315][ C0] RBP: ffffc9000e907b28 R08: 0000000000000000 R09: 0000000000000000 [ 497.999327][ C0] R10: dffffc0000000000 R11: fffff52001d20f59 R12: 0000000008100077 [ 497.999341][ C0] R13: 1ffff92001d20f54 R14: 0000000000000000 R15: dffffc0000000000 [ 497.999362][ C0] ? folio_add_lru_vma+0x18e/0x210 [ 497.999397][ C0] folio_add_lru_vma+0x196/0x210 [ 497.999424][ C0] ? __pfx_folio_add_lru_vma+0x10/0x10 [ 497.999461][ C0] map_anon_folio_pte_nopf+0x2ee/0x5e0 [ 497.999488][ C0] map_anon_folio_pte_pf+0xbe/0x220 [ 497.999515][ C0] do_pte_missing+0x27c4/0x28f0 [ 497.999551][ C0] handle_mm_fault+0xd28/0x13f0 [ 497.999578][ C0] ? handle_mm_fault+0xe8/0x13f0 [ 497.999598][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 497.999616][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 497.999637][ C0] ? __pfx_do_futex+0x10/0x10 [ 497.999706][ C0] do_user_addr_fault+0xa4d/0x1340 [ 497.999734][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 497.999760][ C0] exc_page_fault+0x6a/0xc0 [ 497.999785][ C0] asm_exc_page_fault+0x26/0x30 [ 497.999802][ C0] RIP: 0033:0x7efc45e1b458 [ 497.999817][ C0] RSP: 002b:00007ffc7bd87aa0 EFLAGS: 00010246 [ 497.999831][ C0] RAX: 0000200000000280 RBX: 0000000000000002 RCX: 000000000000002a [ 497.999843][ C0] RDX: e13bbcbd544feaf0 RSI: 0000000000000000 RDI: 000055557fb843d8 [ 497.999856][ C0] RBP: fffffffffffffffe R08: 0000001b31e20000 R09: 000000000000000f [ 497.999870][ C0] R10: 00001fffffffffff R11: 0000000000000006 R12: 00007ffc7bd87bc0 [ 497.999882][ C0] R13: 00007efc461d5fac R14: 000000000005f897 R15: 00007ffc7bd87ba0 [ 497.999912][ C0] [ 497.999918][ C0] task:kworker/0:0 state:R running task stack:22152 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 497.999967][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 498.000039][ C0] Call Trace: [ 498.000044][ C0] [ 498.000055][ C0] __schedule+0x16dc/0x5500 [ 498.000102][ C0] ? __pfx___schedule+0x10/0x10 [ 498.000125][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 498.000149][ C0] ? irqentry_exit+0x218/0x8f0 [ 498.000183][ C0] preempt_schedule_notrace+0x57/0x90 [ 498.000207][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 498.000235][ C0] ? rt_spin_lock+0x1e0/0x400 [ 498.000252][ C0] rcu_is_watching+0x7f/0xb0 [ 498.000276][ C0] lock_acquire+0x5f/0x350 [ 498.000301][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 498.000329][ C0] rt_spin_lock+0x1fc/0x400 [ 498.000346][ C0] ? rt_spin_lock+0x1e0/0x400 [ 498.000367][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 498.000392][ C0] ? rt_spin_unlock+0x163/0x200 [ 498.000414][ C0] wg_ratelimiter_gc_entries+0x5d/0x470 [ 498.000443][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 498.000465][ C0] process_scheduled_works+0xa8e/0x14e0 [ 498.000513][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.000542][ C0] ? assign_work+0x3cf/0x5d0 [ 498.000568][ C0] worker_thread+0xa47/0xfb0 [ 498.000616][ C0] kthread+0x388/0x470 [ 498.000643][ C0] ? __pfx_worker_thread+0x10/0x10 [ 498.000664][ C0] ? __pfx_kthread+0x10/0x10 [ 498.000693][ C0] ret_from_fork+0x514/0xb70 [ 498.000723][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 498.000757][ C0] ? __switch_to+0xc89/0x1420 [ 498.000784][ C0] ? __pfx_kthread+0x10/0x10 [ 498.000812][ C0] ret_from_fork_asm+0x1a/0x30 [ 498.000845][ C0] [ 498.000852][ C0] task:kworker/u8:6 state:R running task stack:21352 pid:164 tgid:164 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 498.000901][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 498.000926][ C0] Call Trace: [ 498.000931][ C0] [ 498.000942][ C0] __schedule+0x16dc/0x5500 [ 498.000975][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 498.001057][ C0] ? __pfx___schedule+0x10/0x10 [ 498.001079][ C0] ? irqentry_exit+0x218/0x8f0 [ 498.001102][ C0] ? trace_irq_disable+0x3b/0x140 [ 498.001128][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 498.001152][ C0] preempt_schedule_common+0x82/0xd0 [ 498.001176][ C0] preempt_schedule_thunk+0x16/0x40 [ 498.001204][ C0] rt_spin_lock+0x316/0x400 [ 498.001226][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 498.001245][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 498.001270][ C0] ? nsim_dev_trap_report_work+0x79d/0xcb0 [ 498.001293][ C0] ? nsim_dev_trap_report_work+0x79d/0xcb0 [ 498.001322][ C0] nsim_dev_trap_report_work+0x7b4/0xcb0 [ 498.001360][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 498.001382][ C0] process_scheduled_works+0xa8e/0x14e0 [ 498.001429][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.001457][ C0] ? assign_work+0x3cf/0x5d0 [ 498.001484][ C0] worker_thread+0xa47/0xfb0 [ 498.001519][ C0] ? __kthread_parkme+0x71/0x1f0 [ 498.001553][ C0] kthread+0x388/0x470 [ 498.001580][ C0] ? __pfx_worker_thread+0x10/0x10 [ 498.001601][ C0] ? __pfx_kthread+0x10/0x10 [ 498.001628][ C0] ret_from_fork+0x514/0xb70 [ 498.001655][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 498.001682][ C0] ? __switch_to+0xc89/0x1420 [ 498.001709][ C0] ? __pfx_kthread+0x10/0x10 [ 498.001738][ C0] ret_from_fork_asm+0x1a/0x30 [ 498.001777][ C0] [ 498.001783][ C0] task:syz.5.1078 state:R running task stack:21648 pid:9678 tgid:9678 ppid:6503 task_flags:0x40064c flags:0x00080001 [ 498.001833][ C0] Call Trace: [ 498.001839][ C0] [ 498.001849][ C0] __schedule+0x16dc/0x5500 [ 498.001888][ C0] ? __lock_acquire+0x683/0x2ce0 [ 498.001913][ C0] ? __pfx___schedule+0x10/0x10 [ 498.001938][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 498.001975][ C0] preempt_schedule_irq+0x4d/0xa0 [ 498.001998][ C0] irqentry_exit+0x14f/0x8f0 [ 498.002021][ C0] ? trace_irq_disable+0x3b/0x140 [ 498.002044][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 498.002064][ C0] RIP: 0010:page_ext_get+0x154/0x2e0 [ 498.002108][ C0] Code: 74 0c 48 c7 c7 00 a9 af 99 e8 88 f9 f8 ff 48 8b 05 41 53 79 17 48 85 c0 74 3b 4e 8d 3c f8 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 ff e8 62 f9 f8 ff 4d 8b 3f 4d 85 ff 74 20 4d 89 f4 49 [ 498.002124][ C0] RSP: 0000:ffffc9000e68f078 EFLAGS: 00000246 [ 498.002139][ C0] RAX: 1ffff11047ffc600 RBX: ffffffff823654a2 RCX: ffff888038ec3e00 [ 498.002153][ C0] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000000 [ 498.002165][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 498.002176][ C0] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000001000 [ 498.002188][ C0] R13: dffffc0000000000 R14: 0000000000071f8e R15: ffff88823ffe3000 [ 498.002205][ C0] ? page_ext_get+0x22/0x2e0 [ 498.002232][ C0] ? page_ext_get+0x111/0x2e0 [ 498.002253][ C0] __reset_page_owner+0x28/0x1f0 [ 498.002299][ C0] free_unref_folios+0xcd4/0x1910 [ 498.002356][ C0] folios_put_refs+0x815/0x920 [ 498.002384][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 498.002406][ C0] ? folio_batch_remove_exceptionals+0x183/0x1f0 [ 498.002430][ C0] shmem_undo_range+0x4e6/0x15d0 [ 498.002526][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 498.002578][ C0] ? __lock_acquire+0x683/0x2ce0 [ 498.002619][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 498.002660][ C0] shmem_evict_inode+0x280/0xa80 [ 498.002681][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 498.002706][ C0] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 498.002731][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 498.002765][ C0] ? rt_spin_unlock+0x157/0x200 [ 498.002789][ C0] ? rt_spin_unlock+0x163/0x200 [ 498.002808][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 498.002830][ C0] evict+0x624/0xb50 [ 498.002910][ C0] ? __pfx_evict+0x10/0x10 [ 498.002938][ C0] ? rt_spin_unlock+0x163/0x200 [ 498.002959][ C0] ? iput+0xb84/0xf00 [ 498.002984][ C0] dentry_kill+0x1b9/0x880 [ 498.003015][ C0] finish_dput+0x1a/0x260 [ 498.003038][ C0] __fput+0x699/0xa80 [ 498.003064][ C0] task_work_run+0x1d9/0x270 [ 498.003086][ C0] ? __pfx_task_work_run+0x10/0x10 [ 498.003105][ C0] ? do_exit+0x735/0x2360 [ 498.003120][ C0] ? kmem_cache_free+0x187/0x6c0 [ 498.003139][ C0] ? put_net+0x16a/0x260 [ 498.003160][ C0] ? do_exit+0x735/0x2360 [ 498.003180][ C0] do_exit+0x73a/0x2360 [ 498.003195][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 498.003227][ C0] ? __pfx_do_exit+0x10/0x10 [ 498.003256][ C0] ? proc_coredump_connector+0x187/0x4e0 [ 498.003334][ C0] ? rt_spin_unlock+0x157/0x200 [ 498.003356][ C0] do_group_exit+0x22d/0x2f0 [ 498.003372][ C0] ? rt_spin_unlock+0x163/0x200 [ 498.003394][ C0] get_signal+0x121b/0x12c0 [ 498.003436][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 498.003466][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 498.003498][ C0] ? force_sig+0xdd/0x130 [ 498.003525][ C0] irqentry_exit+0x2ba/0x8f0 [ 498.003548][ C0] ? rcu_is_watching+0x15/0xb0 [ 498.003575][ C0] exc_general_protection+0x16b/0x1f0 [ 498.003607][ C0] asm_exc_general_protection+0x26/0x30 [ 498.003625][ C0] RIP: 0033:0x7f688705e021 [ 498.003640][ C0] RSP: 002b:0000200000000450 EFLAGS: 00010217 [ 498.003654][ C0] RAX: 0000000000000000 RBX: 00007f68872e6090 RCX: 00007f688705e019 [ 498.003667][ C0] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000040004200 [ 498.003680][ C0] RBP: 00007f68870f500c R08: 0000200000000500 R09: 0000200000000500 [ 498.003693][ C0] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000 [ 498.003705][ C0] R13: 00007f68872e6128 R14: 00007f68872e6090 R15: 00007ffede357238 [ 498.003735][ C0] [ 498.003742][ C0] task:syz.1.1119 state:R running task stack:21912 pid:9798 tgid:9798 ppid:5602 task_flags:0x400640 flags:0x00080000 [ 498.003798][ C0] Call Trace: [ 498.003803][ C0] [ 498.003814][ C0] __schedule+0x16dc/0x5500 [ 498.003838][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 498.003875][ C0] ? irqentry_exit+0x218/0x8f0 [ 498.003900][ C0] ? irqentry_exit+0x218/0x8f0 [ 498.003926][ C0] ? __pfx___schedule+0x10/0x10 [ 498.003963][ C0] preempt_schedule_irq+0x4d/0xa0 [ 498.003986][ C0] irqentry_exit+0x14f/0x8f0 [ 498.004009][ C0] ? trace_irq_disable+0x3b/0x140 [ 498.004032][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 498.004052][ C0] RIP: 0010:mod_memcg_lruvec_state+0x158/0x270 [ 498.004101][ C0] Code: 00 00 48 c7 c2 40 b1 7c 8b e8 e4 2c 6f ff eb 04 4d 8b 24 24 4d 85 e4 74 51 4d 8d 74 24 4c 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 <84> c0 75 25 41 f6 06 10 74 39 49 81 c4 08 01 00 00 4c 89 e0 48 c1 [ 498.004116][ C0] RSP: 0000:ffffc9000e9465a0 EFLAGS: 00000a03 [ 498.004131][ C0] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 0000000080000001 [ 498.004143][ C0] RDX: 00000000e3d29065 RSI: ffffffff8bca7860 RDI: ffffffff8bca7820 [ 498.004156][ C0] RBP: 0000000000000001 R08: ffffffff82328445 R09: 0000000000000000 [ 498.004168][ C0] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: ffff88806010eac0 [ 498.004181][ C0] R13: dffffc0000000000 R14: ffff88806010eb0c R15: ffff88813fffb440 [ 498.004201][ C0] ? mod_memcg_lruvec_state+0xd5/0x270 [ 498.004233][ C0] ? mod_memcg_lruvec_state+0xd5/0x270 [ 498.004256][ C0] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 498.004282][ C0] lruvec_stat_mod_folio+0x239/0x3e0 [ 498.004311][ C0] shmem_add_to_page_cache+0x900/0xc10 [ 498.004348][ C0] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 498.004392][ C0] shmem_get_folio_gfp+0x8b2/0x1c40 [ 498.004442][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 498.004476][ C0] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 498.004525][ C0] shmem_write_begin+0x166/0x320 [ 498.004550][ C0] generic_perform_write+0x2ad/0x8b0 [ 498.004604][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 498.004622][ C0] ? generic_write_checks_count+0x426/0x530 [ 498.004658][ C0] ? file_update_time_flags+0x3b9/0x4b0 [ 498.004684][ C0] shmem_file_write_iter+0xfb/0x120 [ 498.004711][ C0] __kernel_write_iter+0x453/0x8f0 [ 498.004740][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 498.004776][ C0] ? __asan_memset+0x22/0x50 [ 498.004803][ C0] ? iov_iter_bvec+0xb8/0x180 [ 498.004860][ C0] dump_user_range+0xc1c/0x12c0 [ 498.004924][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 498.004955][ C0] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 498.004988][ C0] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 498.005018][ C0] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 498.005040][ C0] ? elf_core_dump+0x2a8f/0x3a90 [ 498.005098][ C0] elf_core_dump+0x3485/0x3a90 [ 498.005141][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 498.005165][ C0] ? __lock_acquire+0x683/0x2ce0 [ 498.005187][ C0] ? get_signal+0x1095/0x12c0 [ 498.005207][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 498.005232][ C0] ? irqentry_exit+0x2ba/0x8f0 [ 498.005253][ C0] ? exc_general_protection+0x16b/0x1f0 [ 498.005270][ C0] ? asm_exc_general_protection+0x26/0x30 [ 498.005329][ C0] ? vfs_coredump+0x3705/0x44b0 [ 498.005355][ C0] ? 0xffffffffff600000 [ 498.005383][ C0] coredump_write+0x129c/0x1960 [ 498.005423][ C0] ? __pfx_coredump_write+0x10/0x10 [ 498.005465][ C0] ? unshare_files+0xab/0x140 [ 498.005493][ C0] vfs_coredump+0x3705/0x44b0 [ 498.005538][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 498.005568][ C0] ? count_memcg_event_mm+0x21/0x260 [ 498.005591][ C0] ? __lock_acquire+0x683/0x2ce0 [ 498.005618][ C0] ? __lock_acquire+0x683/0x2ce0 [ 498.005651][ C0] ? unwind_next_frame+0x8f/0x2550 [ 498.005678][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 498.005734][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 498.005765][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 498.005787][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 498.005811][ C0] ? kernel_text_address+0xa5/0xe0 [ 498.005831][ C0] ? __kernel_text_address+0xd/0x30 [ 498.005849][ C0] ? unwind_get_return_address+0x4d/0x90 [ 498.005869][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 498.005887][ C0] ? arch_stack_walk+0xfb/0x150 [ 498.005922][ C0] ? __lock_acquire+0x683/0x2ce0 [ 498.005944][ C0] ? __lock_acquire+0x683/0x2ce0 [ 498.005967][ C0] ? kasan_save_track+0x4f/0x80 [ 498.005984][ C0] ? kasan_save_track+0x3e/0x80 [ 498.006002][ C0] ? kasan_save_free_info+0x40/0x50 [ 498.006025][ C0] ? __kasan_slab_free+0x5c/0x80 [ 498.006043][ C0] ? kmem_cache_free+0x187/0x6c0 [ 498.006062][ C0] ? get_signal+0x9e8/0x12c0 [ 498.006082][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 498.006106][ C0] ? irqentry_exit+0x2ba/0x8f0 [ 498.006129][ C0] ? exc_general_protection+0x16b/0x1f0 [ 498.006145][ C0] ? asm_exc_general_protection+0x26/0x30 [ 498.006170][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 498.006208][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 498.006232][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 498.006266][ C0] ? proc_coredump_connector+0x187/0x4e0 [ 498.006295][ C0] ? rt_spin_unlock+0x157/0x200 [ 498.006318][ C0] ? rt_spin_unlock+0x163/0x200 [ 498.006340][ C0] get_signal+0x1095/0x12c0 [ 498.006381][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 498.006411][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 498.006443][ C0] ? force_sig+0xdd/0x130 [ 498.006469][ C0] irqentry_exit+0x2ba/0x8f0 [ 498.006492][ C0] ? rcu_is_watching+0x15/0xb0 [ 498.006519][ C0] exc_general_protection+0x16b/0x1f0 [ 498.006551][ C0] asm_exc_general_protection+0x26/0x30 [ 498.006569][ C0] RIP: 0033:0x7f291f22e021 [ 498.006583][ C0] RSP: 002b:0000200000000450 EFLAGS: 00010217 [ 498.006598][ C0] RAX: 0000000000000000 RBX: 00007f291f4b5fa0 RCX: 00007f291f22e019 [ 498.006611][ C0] RDX: 0000200000000480 RSI: 0000200000000450 RDI: 0000000040004200 [ 498.006624][ C0] RBP: 00007f291f2c500c R08: 0000200000000500 R09: 0000200000000500 [ 498.006638][ C0] R10: 00002000000004c0 R11: 0000000000000206 R12: 0000000000000000 [ 498.006650][ C0] R13: 00007f291f4b6038 R14: 00007f291f4b5fa0 R15: 00007ffc2dde5148 [ 498.006679][ C0] [ 498.006686][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g34537 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 498.006706][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=16895 [ 498.006716][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g34537 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 498.006735][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 498.006750][ C0] rcu: RCU grace-period kthread stack dump: [ 498.006756][ C0] task:rcu_preempt state:I stack:27784 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 498.006806][ C0] Call Trace: [ 498.006812][ C0] [ 498.006822][ C0] __schedule+0x16dc/0x5500 [ 498.006859][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 498.006892][ C0] ? __pfx___schedule+0x10/0x10 [ 498.006922][ C0] ? schedule+0x90/0x2b0 [ 498.006946][ C0] schedule+0x164/0x2b0 [ 498.006970][ C0] schedule_timeout+0x152/0x2c0 [ 498.006992][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 498.007014][ C0] ? __pfx_process_timeout+0x10/0x10 [ 498.007046][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 498.007070][ C0] ? prepare_to_swait_event+0x322/0x350 [ 498.007149][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 498.007172][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 498.007196][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 498.007227][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 498.007246][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 498.007275][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 498.007303][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 498.007325][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 498.007346][ C0] ? __kthread_parkme+0x71/0x1f0 [ 498.007372][ C0] ? __kthread_parkme+0x196/0x1f0 [ 498.007401][ C0] kthread+0x388/0x470 [ 498.007428][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 498.007446][ C0] ? __pfx_kthread+0x10/0x10 [ 498.007473][ C0] ret_from_fork+0x514/0xb70 [ 498.007505][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 498.007532][ C0] ? __switch_to+0xc89/0x1420 [ 498.007559][ C0] ? __pfx_kthread+0x10/0x10 [ 498.007587][ C0] ret_from_fork_asm+0x1a/0x30 [ 498.007619][ C0] [ 498.007626][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 498.007640][ C0] Sending NMI from CPU 0 to CPUs 1: [ 498.007669][ C1] NMI backtrace for cpu 1 [ 498.007689][ C1] CPU: 1 UID: 0 PID: 9822 Comm: syz.1.1126 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 498.007731][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.007740][ C1] RIP: 0010:preempt_count_sub+0x5c/0x170 [ 498.007764][ C1] Code: 05 29 dc 09 11 89 c1 81 e1 ff ff ff 7f 39 cf 7f 2a 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 58 65 8b 05 04 dc 09 11 df 65 01 3d fb db 09 11 5b 5d c3 cc cc cc cc cc 90 e8 0d cf 2a [ 498.007778][ C1] RSP: 0018:ffffc9000e9b7ac8 EFLAGS: 00000202 [ 498.007791][ C1] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 498.007803][ C1] RDX: 0000000000000104 RSI: ffffffff8bca7860 RDI: 0000000000000001 [ 498.007814][ C1] RBP: 0000000000000001 R08: ffffffff8fafa337 R09: 1ffffffff1f5f466 [ 498.007827][ C1] R10: dffffc0000000000 R11: ffffffff8b42a8e0 R12: ffff88802a71f930 [ 498.007840][ C1] R13: 0000000000000001 R14: 00000104a25a4182 R15: 00000000000014c4 [ 498.007851][ C1] FS: 000055556256b500(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 498.007866][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.007878][ C1] CR2: 000000110c24d410 CR3: 000000006377c000 CR4: 00000000003526f0 [ 498.007893][ C1] Call Trace: [ 498.007899][ C1] [ 498.007906][ C1] delay_tsc+0x4e/0xc0 [ 498.007924][ C1] snd_timer_close_locked+0x5ec/0xd80 [ 498.007953][ C1] ? snd_timer_close+0x39/0xc0 [ 498.007978][ C1] snd_timer_close+0x44/0xc0 [ 498.008003][ C1] snd_seq_timer_close+0x8a/0xc0 [ 498.008026][ C1] snd_seq_queue_delete+0x8d/0xf0 [ 498.008045][ C1] snd_seq_oss_release+0x1e9/0x330 [ 498.008110][ C1] ? __pfx_snd_seq_oss_release+0x10/0x10 [ 498.008142][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 498.008163][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 498.008185][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 498.008207][ C1] ? mutex_lock_nested+0x152/0x1d0 [ 498.008222][ C1] ? odev_release+0x4e/0x80 [ 498.008252][ C1] ? __pfx_odev_release+0x10/0x10 [ 498.008276][ C1] odev_release+0x56/0x80 [ 498.008299][ C1] __fput+0x42a/0xa80 [ 498.008320][ C1] task_work_run+0x1d9/0x270 [ 498.008338][ C1] ? __pfx_task_work_run+0x10/0x10 [ 498.008359][ C1] exit_to_user_mode_loop+0x1fa/0x730 [ 498.008376][ C1] ? rcu_is_watching+0x15/0xb0 [ 498.008396][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.008413][ C1] do_syscall_64+0x353/0x580 [ 498.008435][ C1] ? trace_irq_disable+0x3b/0x140 [ 498.008451][ C1] ? clear_bhb_loop+0x40/0x90 [ 498.008476][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.008493][ C1] RIP: 0033:0x7f291f22e019 [ 498.008510][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.008524][ C1] RSP: 002b:00007ffc2dde52a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 498.008540][ C1] RAX: 0000000000000000 RBX: 00007f291f4b7da0 RCX: 00007f291f22e019 [ 498.008552][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 498.008562][ C1] RBP: 00007f291f4b7da0 R08: 0000000000000006 R09: 0000000000000000 [ 498.008572][ C1] R10: 00007f291f4b7cb0 R11: 0000000000000246 R12: 000000000005fab1 [ 498.008584][ C1] R13: 00007f291f4b609c R14: 000000000005f916 R15: 00007ffc2dde53b0 [ 498.008605][ C1] [ 674.128589][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 282s! [ 674.128633][ C0] Showing busy workqueues and worker pools: [ 674.128639][ C0] workqueue events: flags=0x100 [ 674.128667][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=9 refcnt=10 [ 674.128688][ C0] pending: vmstat_shepherd, 2*nsim_dev_hwstats_traffic_work, 2*psi_avgs_work, 3*ovs_dp_masks_rebalance, switchdev_deferred_process_work [ 674.128921][ C0] workqueue events_highpri: flags=0x110 [ 674.128928][ C0] pwq 3: cpus=0 node=0 flags=0x0 nice=-20 active=1 refcnt=3 [ 674.128947][ C0] in-flight: 11:snd_vmidi_output_work for 281s BAR(9823) [ 674.129021][ C0] workqueue events_long: flags=0x100 [ 674.129027][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=7 refcnt=8 [ 674.129045][ C0] pending: 4*defense_work_handler, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work [ 674.129207][ C0] workqueue events_unbound: flags=0x2 [ 674.129213][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=5 refcnt=6 [ 674.129230][ C0] in-flight: 7919:call_usermodehelper_exec_work for 282s ,164:nsim_dev_trap_report_work for 282s [ 674.129296][ C0] pending: 3*cfg80211_wiphy_work [ 674.129313][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=3 refcnt=4 [ 674.129329][ C0] in-flight: 72:nsim_dev_trap_report_work for 282s ,12:cfg80211_wiphy_work for 281s ,13:cfg80211_wiphy_work for 281s [ 674.129382][ C0] workqueue events_freezable: flags=0x104 [ 674.129387][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 674.129405][ C0] pending: update_balloon_stats_func [ 674.129515][ C0] workqueue events_power_efficient: flags=0x180 [ 674.129522][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=6 refcnt=7 [ 674.129540][ C0] in-flight: 9:wg_ratelimiter_gc_entries for 282s [ 674.129566][ C0] pending: neigh_managed_work, neigh_periodic_work, check_lifetime, do_cache_clean, check_lifetime [ 674.129769][ C0] workqueue rcu_gp: flags=0x108 [ 674.129775][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 674.129793][ C0] pending: srcu_invoke_callbacks [ 674.129810][ C0] workqueue kvfree_rcu_reclaim: flags=0xa [ 674.129815][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 674.129831][ C0] pending: kfree_rcu_monitor [ 674.129868][ C0] workqueue netns: flags=0x6000a [ 674.129874][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 674.129889][ C0] in-flight: 1516:cleanup_net for 284s [ 674.129939][ C0] workqueue mm_percpu_wq: flags=0x108 [ 674.129944][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 674.129962][ C0] pending: vmstat_update [ 674.129981][ C0] workqueue kblockd: flags=0x118 [ 674.129987][ C0] pwq 3: cpus=0 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 674.130005][ C0] pending: blk_mq_timeout_work [ 674.130137][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 674.130143][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=5 [ 674.130162][ C0] pending: addrconf_verify_work [ 674.130221][ C0] inactive: addrconf_verify_work [ 674.130243][ C0] workqueue bat_events: flags=0x6000a [ 674.130249][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=6 [ 674.130267][ C0] pending: batadv_bla_periodic_work [ 674.130324][ C0] inactive: 2*batadv_bla_periodic_work [ 674.130356][ C0] workqueue wg-kex-wg0: flags=0x6 [ 674.130362][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 674.130379][ C0] in-flight: 4564:wg_packet_handshake_send_worker for 0s [ 674.130405][ C0] workqueue wg-kex-wg1: flags=0x6 [ 674.130411][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 674.130429][ C0] pending: 2*wg_packet_handshake_send_worker [ 674.130446][ C0] workqueue wg-kex-wg0: flags=0x6 [ 674.130451][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 674.130469][ C0] pending: wg_packet_handshake_send_worker [ 674.130485][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 674.130491][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 674.130510][ C0] pending: wg_packet_tx_worker [ 674.130525][ C0] workqueue wg-kex-wg2: flags=0x6 [ 674.130531][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 674.130548][ C0] pending: wg_packet_handshake_send_worker [ 674.130564][ C0] workqueue wg-kex-wg1: flags=0x6 [ 674.130569][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 674.130587][ C0] pending: 2*wg_packet_handshake_send_worker [ 674.130605][ C0] workqueue wg-kex-wg2: flags=0x6 [ 674.130611][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 674.130628][ C0] pending: wg_packet_handshake_send_worker [ 674.130644][ C0] workqueue wg-kex-wg0: flags=0x6 [ 674.130649][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 674.130666][ C0] pending: wg_packet_handshake_send_worker [ 674.130683][ C0] workqueue wg-kex-wg1: flags=0x6 [ 674.130689][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 674.130706][ C0] pending: wg_packet_handshake_send_worker [ 674.130723][ C0] workqueue wg-kex-wg2: flags=0x6 [ 674.130729][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 674.130751][ C0] pending: wg_packet_handshake_send_worker [ 674.130771][ C0] workqueue wg-kex-wg0: flags=0x6 [ 674.130777][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 674.130794][ C0] pending: wg_packet_handshake_send_worker [ 674.130810][ C0] workqueue wg-kex-wg1: flags=0x6 [ 674.130815][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 674.130832][ C0] pending: 2*wg_packet_handshake_send_worker [ 674.130849][ C0] workqueue wg-kex-wg2: flags=0x6 [ 674.130855][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 674.130872][ C0] pending: wg_packet_handshake_send_worker [ 674.130893][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=282s workers=10 idle: 1836 5784 198 10 7068 5786 5731 7067 5781 [ 674.130963][ C0] pool 3: cpus=0 node=0 flags=0x0 nice=-20 hung=0s workers=3 idle: 7358 58 [ 674.130999][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=0s workers=18 idle: 3402 1003 56 1528 1544 149 552 1026 3705 42 3355 [ 674.131079][ C0] Showing backtraces of busy workers in stalled worker pools: [ 674.131086][ C0] pool 2: [ 674.131090][ C0] task:kworker/0:0 state:R running task stack:22152 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 674.131129][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 674.131146][ C0] Call Trace: [ 674.131151][ C0] [ 674.131159][ C0] __schedule+0x16dc/0x5500 [ 674.131211][ C0] ? __pfx___schedule+0x10/0x10 [ 674.131239][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 674.131259][ C0] ? irqentry_exit+0x218/0x8f0 [ 674.131279][ C0] preempt_schedule_notrace+0x57/0x90 [ 674.131294][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 674.131315][ C0] ? rt_spin_lock+0x1e0/0x400 [ 674.131326][ C0] rcu_is_watching+0x7f/0xb0 [ 674.131341][ C0] lock_acquire+0x5f/0x350 [ 674.131357][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 674.131374][ C0] rt_spin_lock+0x1fc/0x400 [ 674.131385][ C0] ? rt_spin_lock+0x1e0/0x400 [ 674.131397][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 674.131412][ C0] ? rt_spin_unlock+0x163/0x200 [ 674.131425][ C0] wg_ratelimiter_gc_entries+0x5d/0x470 [ 674.131443][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 674.131457][ C0] process_scheduled_works+0xa8e/0x14e0 [ 674.131487][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 674.131504][ C0] ? assign_work+0x3cf/0x5d0 [ 674.131520][ C0] worker_thread+0xa47/0xfb0 [ 674.131549][ C0] kthread+0x388/0x470 [ 674.131566][ C0] ? __pfx_worker_thread+0x10/0x10 [ 674.131579][ C0] ? __pfx_kthread+0x10/0x10 [ 674.131596][ C0] ret_from_fork+0x514/0xb70 [ 674.131616][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 674.131632][ C0] ? __switch_to+0xc89/0x1420 [ 674.131649][ C0] ? __pfx_kthread+0x10/0x10 [ 674.131666][ C0] ret_from_fork_asm+0x1a/0x30 [ 674.131686][ C0] [ 676.253133][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 676.253200][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=3448 sent=0 n=-1 (errno 32: Broken pipe) [ 682.757120][ C0] powermate: config urb returned -71 [ 682.757355][ C0] powermate: config urb returned -71 [ 682.757567][ C0] powermate: config urb returned -71 [ 682.757847][ C0] powermate: config urb returned -71 [ 682.758767][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 682.758821][ T1836] usb 5-1: USB disconnect, device number 38