last executing test programs: 1m10.079055168s ago: executing program 1 (id=750): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x15020, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0xb) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) landlock_restrict_self(r0, 0x9) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mlockall(0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100128ba0d106d047c087ab0010203010902240001400990000904ee09000e01000808240200fe7f"], 0x0) write(r4, &(0x7f0000000040)='4', 0x1) 1m6.600383752s ago: executing program 1 (id=760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="5c00000013006bcc9e3be35c6e17aa31076b", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000001c0)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="30000000120001e7"], 0x30}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000340)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0xed, 0x90, 0x0, 0x3, 0x2, 0x5, 0x7, 0x4, 0xf2, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0x2c, 0x3, 0x5, '\x00', 0x7, 0xffffffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m6.408889734s ago: executing program 1 (id=761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 1m6.334245899s ago: executing program 1 (id=762): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xc, 0x4000}}, @nested_load_code={0x12e, 0x1b, {0x0, "0f31f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x93}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r4 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r4, 0xe2e20001) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r4, 0xffffffffffffffff) 1m6.201890484s ago: executing program 1 (id=763): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6f7332c117c557aefa9c6b26a42e747275726967696e0000000000"]) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a", 0x35}], 0x1}, 0x84884) sendmsg(r2, &(0x7f0000000340)={&(0x7f0000000380)=@isdn={0x22, 0x4, 0x40, 0x0, 0xb}, 0x80, 0x0}, 0x20000800) r3 = creat(&(0x7f00000004c0)='./file0\x00', 0x1) write$tcp_mem(r3, &(0x7f0000000500)={0xfff, 0x20, 0x0, 0x20, 0x8000000000010001}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x2710, 0x0, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x45, &(0x7f0000000440)=[{&(0x7f0000000480)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfe33) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000200)={@my=0x1}) setns(0xc9, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000240)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000005c0)={0x0, 0x0, 0x9, 0x7f}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x20) 1m6.100866907s ago: executing program 1 (id=764): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000200)='./gadget\x00', &(0x7f0000000240)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/dummy_udc\x00', 0x4002, 0x5) pselect6(0x40, &(0x7f00000002c0)={0xe, 0x2, 0x7, 0x10, 0x0, 0xfffffffffffffffa, 0xe, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180), 0x2, 0x189083) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x92142, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 1m4.89571728s ago: executing program 2 (id=771): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)="f617a8ea0700ffffffffffff810016fe0806", 0xfdef, 0x40088d0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x7, 0x6, @local}, 0x14) 1m4.751284998s ago: executing program 2 (id=772): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="4724a29623e508fdbe5c0fb64d061a33", 0x10) 1m3.971659304s ago: executing program 2 (id=775): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x121040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/firmware/acpi/interrupts/gpe00\x00', 0x2002, 0x0) read$FUSE(r1, &(0x7f0000000280)={0x2020}, 0x2020) mmap$IORING_OFF_SQ_RING(0x0, 0x44, 0x2, 0x810, r1, 0x0) 1m1.586063692s ago: executing program 2 (id=785): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000b40)={0x40000000, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f00000004c0)={&(0x7f0000000500)={0xa, 0x4e21, 0xfdff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000029000000040000008200000000000000180000000000000029000000370000006400000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb24"], 0x80}, 0x40080) 1m1.416742658s ago: executing program 3 (id=786): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x200000000) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000280)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000002c0)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r2, 0x7b2, 0x0) r3 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000200)=0x5) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x9}, &(0x7f0000000440)=0x8) read$FUSE(r3, &(0x7f0000000d80)={0x2020}, 0x50a) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000300)=""/101) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004803) write$vhost_msg_v2(r3, &(0x7f0000002dc0)={0x2, 0x0, {&(0x7f0000002e40)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) write(r0, &(0x7f0000000100)='3', 0x4e) getcwd(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="441c00faff050108000000000000000000000004050001000700000005000400000000000d000300686173683a6e65740000000005000500020000000500010006000000"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="440000000206030000000000000000000d0000000900020073797a300000800005000400000000000900020073797a3100f8ffff04000500020000000500010006000000"], 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000400)={0x34, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}}, 0x40) recvfrom(r5, 0x0, 0x0, 0x12002, 0x0, 0x0) 1m0.742754238s ago: executing program 0 (id=788): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x168, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) ioctl$DM_TABLE_STATUS(r0, 0xc138fd0c, 0x0) 1m0.392887313s ago: executing program 0 (id=789): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x1000) write$eventfd(r3, &(0x7f0000000000)=0x3ff, 0x8) r4 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$USERFAULTFD_IOC_NEW(r4, 0xaa00) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x124}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000001400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000001440)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x1, 0x8, 0x0, 0x4, 0x9, 0x8001], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m0.392676895s ago: executing program 2 (id=790): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x48810}, 0x24045044) 1m0.263384171s ago: executing program 3 (id=791): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x0, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) readahead(r0, 0x31e, 0x541) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='3', 0x4e) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000200)={{0x5000, 0x41000, 0x0, 0x9, 0x8, 0x1, 0x9, 0x5b, 0x0, 0x2, 0x6, 0x6}, {0xf000, 0x1ff8, 0xe, 0xf8, 0x4f, 0x6, 0x2, 0x9, 0x6, 0x40, 0xa7}, {0x1ffe, 0xdddd1000, 0x11, 0x9, 0xf9, 0x10, 0x5, 0x0, 0xaf, 0x0, 0x2, 0x1}, {0xc000, 0x5000, 0x9, 0x9, 0x0, 0x4, 0x7, 0x8, 0x1, 0x9, 0x1, 0x3a}, {0x1ff8, 0xa000, 0x16, 0xe, 0x1, 0x10, 0x9, 0xa5, 0x2, 0x0, 0x1, 0x7}, {0x41000, 0x3000, 0xc, 0x4, 0x8, 0xc, 0xb5, 0x2, 0xc, 0x2, 0xa, 0x5}, {0xc000, 0xffc, 0x3, 0x3, 0x0, 0x0, 0x28, 0x1, 0x0, 0x7, 0x7, 0xbe}, {0x7000, 0x0, 0xc, 0xc, 0x8, 0x4, 0x5, 0x6, 0x4, 0x3, 0x7, 0x81}, {0x6000, 0xe2e}, {0x41000, 0x101}, 0x40050008, 0x0, 0x30000, 0x210500, 0x7, 0x100, 0x9000, [0x10001, 0x2833, 0x945c, 0x1ff]}) 1m0.147411097s ago: executing program 2 (id=792): syz_usb_connect(0x0, 0x47, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff"], 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x100) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@favordynmods}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r2, 0x7b0, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000240)={0x2, 'vlan1\x00', {0xc}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x140) write(r5, 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0xb9ddd000) r6 = socket(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f00000002c0)={0x1, 'vlan1\x00', {}, 0x5832}) r7 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r7, &(0x7f0000000000)='net/xfrm_stat\x00') 1m0.032955937s ago: executing program 3 (id=793): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x9c940000, 0x0, 0x3, 0x1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000001c0)={{r0}, "86503f143560d4acaa1c3d55a061f9894bc801611fbda9d5a4894f385b5ff0387730fd8793ef9e97f342bf3362596a4a69354e9c5c367a3195cd3bb69a0d474cf54508c137f826edc8e137c305da456af03ee3e2e32d709762cf377ff0642dabd86c3816629b1c5e440a91e742816bd9351242d78b3237d3d5628461e77fd8b486580746d9048721af4f97a57038f8a579cb99668573db9830d69e9658874805cf117ff5aab8d7a1dfe6caf1ba486333f1cd9750c09e59007adb5807ef7fa655726d9f88f50c2c58358dd238ac26c3fbe91fe465dcc2bcde4e594097365ff54c55660748cb9be82f7f822ac49b8fea176d3bbea00728fcf61d6f3b3b72860d9d3b085875af7ffdd56b684850ec207c979a8e373ea08dee40e251ca2f8941b0edca0ea229bf993f72efdec040e9a0ea12b78a2fd88c31c59c39f98588e27701238e8e63f6f28aca946041fc46282ee4a7251b360d21c91281f7b10fa73a6d09fde3f93a5255b5b96666bfdca74d5e0421bae3b79fa51da086b61b666985b958e0719bbb7ea7fd62b9873ddeaf15d0eddb7a0f5517f4538ea94fbb303b10cc02051e61ce1bc94cf2e0a15c37093476b3446b5888b482da2493406a2fd60c6137d35fac3316cf88667c2ef15c1fa118654d536342a6ba31473f2912107bf83d6a8e1cf24cdcc28dea75cc651ed377fb834073a88667c71dc7facab9f74c9fea0b85fe3089c889423a619dbf153a52bed52f9e49b5bb0893a1b2fe613e3140743d02f38394efb10de8efcd92a5cd596ff39973990d9442c3ced37fb1b55dd5e4a68e3f8dc81bb485e35810b55324e27b4b576b4c8c650fce8b0e81deddb2f9a0b66af7652f6b6ef576bd9d3506af0834f655c6e55a5a0ffe8a5defb6f738073d967b51b86a4a8e44b593c9754ec9c3ef04c216bf3818b5212ff786c3f479bc5d1ce22083d08d0f1a40568b867f36155537f2440243b24939e354b0d9dc276e61218cb0a36eeb4f9f38699ed2517158783a6de6a283bf49075c3bdeb253439f7acceca55baa1baa4253f68ec0b781b4f1e3e35ab659d14f9e251b4b6afc775abf015251f29d301f9fbea7e095aab295021dfc5396814966e242b43cf5c605baf914479c3dd1abc735ebd640d199ea5804702721d8e870b26eec37490d29dc2c4ebb49007ae1d8302bf34d56a97651ecc0fc14cafe2dcf43b17c00c74cf0c6abef198660c4c13be40ca3f776ca2ec9d3753750f92fa4cff85d35580e686490f1b921c164680f19f44f707a3cb0f6e1d9f1504e058191f77c53e0ee8d4efd3040c512925079b62aa280b5903883091ca7a10442fd5791f257219b38089a2eb9a41f531bec7e54986702a04a148d8029867382dc6f68421408ef25ee84043cd62bb058ab08a1212bbdabc1e479bd6269148c5647fbfb729e6f38eba2b2bffcc84eb6f6024529d2231d417fc778837430ed0e036cabdaa6200a4432ff110f6bb713ccd67da887ac50d2cc5f71a69815681e1f4667abdee38cdd0e7414e9514d9228c2938c196eb4abfd9de4b89c67e1a0d8af8e2ef186e2a9f5f725bd074df6153bf745fb4453c6b6117e121abfdd864385801fb7d0167fcacf86bfa158b5fc6e3e11772bd38d1f56dde14d03eab435bdffe553945a71fd51ddc322f02bf20dccc6808090dbce9c467d5fabf1a4e173e0ac8b1d7edfdcdfc5f92d8e376e163603bd5e0cfca82dc300e7cdde396d0f4a37ee9b741a0047d96496f2608f010bc687671ceed495dab2d159be83ee64d2ce00c52f736e6b41bad74deca348a76d371fc6316f76cbcc8981b8af8f762931f6111e85a93b0488db1b5c019630a154abe2910f9bb4101ac5f5bf42add1d16381c32f4e39bc1f2c46f5582e083d24fadcb4e3ea0bebc255fa8dce300403d5a0d201830ba6ed437340044923b8302298de3c5fd902e0208fb60248b49e0653b2ff8b1859f49991c59d2c9954334f1086e3403c99c8bbf5a2c146ffba5dff73f19f5473ae389903bcfed1c4c91896111490620bbb2e540f3c492d7cd1107899a243f98cc3944a8e099ee0f7f960733d95a71fcfc5127d43a018c3d19c2405029de00a79f5af062c4cfdbb5e1c26eda1d19f3bf00f5cd8831060cdb4076c9c3ff8ed9f79b76bf45526d12f243aad103d62020ec5d8c2c3e8226b5d57037cdccbb18adec0cb736dce5dbee0a354e7971157eb9a3172a095ba5920431efc4baabd227e315614eb0b1c522ecee5e53131d50d3aad7488fa425e415703a1191381fb8664f141393107e734f369c6bad3b6c2d26920b87a0deb1715965d46c8eb30b396c8cb4b6346aebac6afc1477bb4b016be691358eed79c203e1670f9f8c5dae825ef01608200739ad92e9e5574cf4650c083c816063b5207b767fc6fa981b5fdf2b569119ae91fdbf1e53f25a28f18c690b77ff1d2bed89e55c0b05f0a142051c3d82c9fef7de393c26ae74a913e7dbafe0c1e1bf12082944ba2db9dab1f11a1d78e9f2044a3b64a81613e90d6f7988e4dc4b31ff94746c2f26d4f8fd02b52f1b142af9ae357a1a0c7e7658ae63bebf202b4483dcdc81b9a915da6ae828e55a65b8fd935a58ca1dc93beb7357e8c4db683aae54e44e981e6cf24888d68d49504a40effdce7f665831818a5f04562baee32a62b22b0b0fcd470b6ac195531fce8b9e387a561b51273f330f35fdcf98c855f795adbe71756c880bc6f03f44c86149882996192aaf7c966346f9f0136e9d4c4dad2eb6c6ec2c89466fdcf5977a4e723c107d3bcf47ec547bcb11f27d9a44ddc2f1543147a0aaf92f42ef3c4a8e2cac61bcfd9e56b509e3c825904925a24a6350415c667aa738555096aa2a791b16e5a527fcc538a243f921d67a5b641302632399a5a4f98b2f393afdd0fa14f913ad2475076b344d65060d36549ef4468e899d01275ad609a42b88bb902afeb3d88d20c2d3decd3f468984dbbc2d56f3026469780e8917e0fb13d6172bea11bcc45a323239db9383fa8b8ff48c23b7812f707b2d3d89eabdf87ef756fa86c212e6b791166f6951e7e599350590101ec4254d35315f945f76f6b94364eefab87b6ae0390cf6fc7f234a9f64ea154342621944e45f6215bd40938216ad689b282317038b51c0c1d7355f7bcfe2db8a2103a7650437981e1a80b935ba5027a0b588c3a16a77a7989c235d15e533ba9a774bfa033d974beb0828b8fb5ac7b52ca6c424a95366498c6db454cb4f45edf71ede172f222698508a592dca78e8c10276b3f23dc9b4b34446e73a4d8d2d4809eba1621f1513822358ce22c1010326f5d0f962cc0c66f01f390f45dada0d64a402da63b94f1281f5d6f67400a73ea67e2e71007b5e5b8c48c48c891127cf248b639a9190957421de500fb3115078e19ee8d6ac33ab64db62f404ba76f540056e358143020c14e34beb1b910b739ffdb8f56939ee3ac88ba86e7d403294b6bcd7cf83e3a59e9df145848d904cd7fdc0928ca2ac6a24d21de18c1582150c65a1beb6c71641663d7cdbd1a48c6ad681782e99ef9f45ad7e9db37f31cffc34e05df7397ddecb470836290e08ab68dce5630f52e895722cd3b0668a74bf2c3244c7d88b34107246822d00689a3dab3b2c3b85716d40434faf6267a866bda9859aeb4e9cbb81b53f1de5faf4e1d059906c698288084dc3dc12b1e8d852b1fae6a15c5ca81b6cb30d68cd7ac6615496717427ddbf29b018e14be7ca981aef95d7219a1a8130d43405040075d3f3b5c40f08b949847737c605acef661bb505c057a507e5e567504934c2bfa17ca8204332856b04220e1e63d4efe3b07b319515d73fcd44abf7dd93563951a39969811649b0a0de8483de25d7c86994c97f09103164117823bc232787526c089f7494797c06ec73c19d8eb767d5a6deb3b74dc160669186f2bf3cc476fd12fd2a65eb035123eb0672a46e17d83df4a54c58a81052f228b5717c2d79c19ee96da71df6c5c99aefe00ba237abc417540445c805fd8e06a65c9928d2548ae7cd8ce8619c7809ad4b90c7606cec3cd6a6822e51f7c59d5b06e0de721b8b5b17fdba11915e1cb2abddf320ccb4c01946e53b2f1b3c93ec6f6b36bbd658e23f89ac6223c5d5688ea82400ce837e9de8c848476d1e4142e14702a4eae6865ce997c038344e7616c37eaad8ef48236ca034e1e8b0b282fa4097397dde85c75d8656d5caa6ff423c548dadfbb5bc633beee2822620127aa8e57e3c04692624739a09a6b9948c9059992302fa4edfefce8c62c5600d59eb89c9716521f5049f8acc4b1191ea44c2b1516e2f86f02c9d679d02a5716a6aa88fca1dfbba9a5649fca5c9738922ec95801e1384b5682dd6425bdf8065833933033b6b4996b711f3add940e325a8d222ec8f0625304c286e8fc3189b3cbeb85dd1585794751ea62ba3f4630fb49ad9bad4ab005a59c963f4485f0b8e883ed0bd80617a745937313f0b5246575dc56cb667c017e4ec93fc299881a1e144c8d17f5af369e6c0cc5038adbbdeb34d394d77d1bf4ad99abd38aa626f9b80a89af6396cc82fdb42e45bfb20c57dbfa85a0558f47e7864f8a79e9eb8a96e116de59685196dee983f2c99f0783fef685619d5d679b19eb7c07ba0ec3a10897fb27eaa4ce80e9108e861af1924914c1432183d9d2e1f348597301378746abffb9cd37f6aa9e12eb2db8ecdbff3a0fea63edaeb80e2307aec704e788c21c51f5e4cf83bfcc6e42f8bb8618b456d94b7e81fea17b2af0a17ef1b2445d95b73802fa6ece6939353108d17ef78fce57ce605c5a2a9cbbef5436e07298cbe03d1f9085c0d32fa0dc6d3b5cbc5e6ddb5e7387935a62596772b416a700b7edd0312a64aad15db6a447e66748e057640a4704f2ed9a6654979083f0abe21293c75846260e19f3103052cb63bb81cc8b4058a6d459249e902fc089612fc0fa91c1477aaa8eec386a94553e9bf10def070de3245c03533baff13c181ff66b29b37d9308836c5645b18c7c0c443a2a701fdc5c1e0b1a400f4b11056a979f820950bc9597334c4f49b27edb558b2641d0760fecb407aa28c15bbcf278f1a6897e1f9aed63314d651459466607c7f55a662ec162b6bc8f2c9889585e9f729da885159c1c06a17e579d5a17c207f49e41fc3d095a6851209fbaf97f4f172a78d448ce089e8225760304b3985ccf0fdf86d637963dd55723b38a2b308115b991de99c29299567ae0c6ed928d1e274e821920f1cb65405cbe38f48c7e94a9396b0a663f613cd1b8bed820446a1d0acb419645ccd30e88416fbbb4a05be05870ff52c0101131108e57462f77974767cef5a2d4ea47e5adf087e4b79fe695d48c6531cf8890270239a9916a315f28db842bbb6fb38e3b7f3c56002ec3cd8129a5ef0eb51646d6152995c9a4a51793031ec6e442bc5d137191b8eda5d9f96661a5159f2bbb01a5cecae6039113f19adcfbe3702886a399e4e892eac37cf4605283cfaf6829d0c9fab2e479d16709426f2df9b799175eb0dd4ac201316f3c0b0b60679f798384b55a221e58956498923b44e264af47091789e61325bc13d69f0b9714c60e9954e732ba27a673579a737ad040aa92ef9cde17d778814118832f9d1800c676b5a903673aca8ca12ec1b09d7bb762993497309c2d12e975db33be54ea3dd961260af39f0d0242eb557dc81cb52d5ec09c6e85b9a3e8baa097ea4b5e0ecfac8fa41c714a58c2e59a5be6ccfc1d6cbc96dad09519f0d40fe502c2e31886673e4f360bd4618d5549115e1698e4e527bc9af5"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@local, 0x9c940000, 0x2, 0x3, 0x2, 0x1, 0x203}, 0x20) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x0, 0x2, "0400ef", 0xf6, 0x5}) write(r0, &(0x7f0000000080)="e86e02c689fd0fad798a222d0ce1a36b5cc90d78e7038162c77e04082c616b9d1d2cfc658877358d306cbb9e8a480c1ba6ef6f2cbb667e7ec8c8222e7781c79a28e6a6fdf1d406323b3a12d1dd83a8c09143ca20082df75cb028b8ed16c493dfc5244b26531f607f522b119b397422da4f7c9ae6c34e09e83a1264a7a2a6fe174c4e22000ead6293e322b529f5d5e8f0871c855ce805b7736d5b008daf54022ae5b2e885cffef2180434940cc2d79c95fb06a4", 0xb3) 59.959420362s ago: executing program 0 (id=794): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x58, 0xa, 0x3, "3258c5c0008faa001b0000f4ff40e7ffffff000000e926ba2800", 0x30314142}) 59.916787573s ago: executing program 3 (id=795): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000580)='127.0.0.1:/export\x00', &(0x7f00000005c0)='./mnt\x00', 0x0, 0x0, &(0x7f0000000640)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000740), 0x100) 59.782371806s ago: executing program 0 (id=796): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) r2 = syz_clone(0x1000000, &(0x7f0000000000)="f3919720b875cab9372b69de3d52d78b4918649f547375f165485a094ad723125f4f11a69f741bec5334a1045b6d0d7c318720fd03", 0x35, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="99fea5ef56ba37d90b5fb934ed3a4d32be9a9b93e0055cc028ddfa07fee0a44f18ded9cf1d4df18aa36b397f0847ca2081d830d2012022de41fc4452e57add7100594445102d7ad9da2a56db3a621d247b0b656f3d8c993afa4f6ba413a7ec6a61530c53aac3e9bb458a0f28f97cef2d8c72ddf305b53cfbc3f1ff1e75352cfb421bec1ea33dbffad497b37b9e41daf342c0dce5dff1f09cf6ab") (async) prlimit64(0x0, 0x7, &(0x7f0000002500)={0x0, 0x100}, 0x0) (async) mq_open(&(0x7f00000025c0)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00\x03\xf0[\xb5\x9d.?-\x19\r\x8c\x93s\x00o\xf5\xbd/5\xa9H\x028\xa7N\xb6RP\x8bq\x03\xa1\xd5:\xaa\xa2\xe1\x1d,\x0e\xd1\xf8J\xdb\x8fl\x1c\x88}Y\xc6\xbb\xd7\n\x06\xeb>\xb5UW\xe0\x19\x86*@\x1c\x9e\xcf\x8b\xe6\x0e\x86\xf2\xe4\x80\xba\xfe\r\xc3\xb6\xa6\xb8\xd4\x03*\xa1\xe58`yneYfZk\xac\v\xdd\xba\x10\x15o\xb9\xd3A\xf3s\xa9}g\xa6\x9da->m\b\xcf8\xcf\x11d!zm\xe9\x8f\x94\xe5\xf6Lk\xeaZK\xa6\xb1+\xd1\xa5\x1d\t\x86&\x85\xd2q\xfa\xc6~R\xe1\xd8\xd6J\x00\x00\x00\x00\x00\x00\x00\x00', 0x800, 0x8c, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) kcmp(r2, r3, 0x1, r0, r0) (async) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000300)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340), 0x2}}], 0x40000000000003a, 0x0) (async) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRES8=r1], 0x1d) 59.032612454s ago: executing program 0 (id=797): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000180)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000400)=0x7) ppoll(&(0x7f0000000440)=[{r1, 0xa74d}], 0x1, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)=@l2={0x1f, 0x7fff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="64d6261a4e19", 0x6}], 0x1}}], 0x1, 0x40) close(r0) 58.921000642s ago: executing program 3 (id=798): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x4000}, 0x20008000) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) ioctl$DM_TABLE_STATUS(r2, 0xc138fd0c, 0x0) 58.720726545s ago: executing program 3 (id=799): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000189000/0x3000)=nil, 0x3000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000180), 0x4) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xa, 0x223c6e, 0xf5ce5}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f00000001c0)=[@nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8, 0x136}}, @uexit={0x0, 0x18, 0xfffffffffffffff9}, @code={0xa, 0x75, {"66b81d000f00d0c441c0c2f116b805000000b9060000000f01d9420f3548b800000000010000000f23d80f21f835000000f00f23f864f30fc7330f01c2f30fae722048b867bf0000000000000f23c00f21f835010009000f23f866ba420066b85a1e66ef"}}, @cpuid={0x64, 0x18, {0x5, 0xd6}}, @nested_intel_msr_list_add={0x155, 0x30, {0x3, 0x2, 0x9da, 0x7}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4b2, 0x9bd9, 0xfff, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x2}, @uexit={0x0, 0x18, 0x6ac20476}, @wr_drn={0x68, 0x20, {0x2, 0x7}}, @nested_load_syzos={0x136, 0xf8, {0x3, 0x3, [@enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xe82e, 0x2}}, @nested_load_syzos={0x136, 0x20, {0x3, 0x320a}}, @enable_nested={0x12c, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x32, @gpa=0xe000}}, @wrmsr={0x65, 0x20, {0x31a, 0x4}}, @nested_load_syzos={0x136, 0x20, {0x3, 0xfffffffffffffff7}}]}}, @wrmsr={0x65, 0x20, {0x40000010, 0xb38}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xef, 0x3, 0xb284, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x600e, 0x2, 0xff, 0x4}}, @wrmsr={0x65, 0x20, {0xaba, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x5b, 0x5, 0x40, 0xffffffffffffffff}}, @uexit={0x0, 0x18, 0xc1}, @nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18, 0x2}], 0x3dd}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000600)={{0x1002, 0xffffffff, 0xb, 0x8, 0x81, 0x7, 0x1, 0xf5, 0xb, 0x1, 0x75, 0x6}, {0x3000, 0x40000, 0xd, 0x9, 0x4, 0x3, 0xeb, 0x6, 0x7, 0x4, 0x1, 0x5}, {0x8080000, 0xeeef0000, 0x4, 0xeb, 0x7f, 0x1d, 0xd, 0x9, 0x1, 0xb2, 0x8, 0x2}, {0x1ffc, 0x7fff8800, 0x9, 0x1, 0x2, 0x4, 0x7, 0x5a, 0x96, 0x41, 0xb, 0x3}, {0x2ffc, 0x5000, 0x4, 0x2, 0x9e, 0x2, 0x7, 0x6, 0xa, 0xe, 0x2, 0x7}, {0x1, 0x1a216090b233c37b, 0xd, 0x50, 0xb7, 0x1, 0x0, 0x9, 0xac, 0x0, 0xdb, 0x7}, {0x200000, 0xd000, 0x7, 0x2, 0x0, 0xb, 0xff, 0x1, 0x1, 0x6, 0xab, 0x7}, {0xf000, 0x2, 0xd, 0x50, 0x6, 0x20, 0x7f, 0x0, 0x7, 0x6, 0x1, 0x6}, {0x2000, 0x7}, {0xeeef0000, 0x5}, 0x30000000, 0x0, 0x80a0000, 0x4104, 0x5, 0x9c00, 0x1ffc, [0x1000, 0x7, 0x80, 0xdcae]}) r4 = syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_getattr(r4, &(0x7f0000000740)={0x38}, 0x38, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000189000/0x3000)=nil, 0x3000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r0, 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000180), 0x4) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xa, 0x223c6e, 0xf5ce5}) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f00000001c0)=[@nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8, 0x136}}, @uexit={0x0, 0x18, 0xfffffffffffffff9}, @code={0xa, 0x75, {"66b81d000f00d0c441c0c2f116b805000000b9060000000f01d9420f3548b800000000010000000f23d80f21f835000000f00f23f864f30fc7330f01c2f30fae722048b867bf0000000000000f23c00f21f835010009000f23f866ba420066b85a1e66ef"}}, @cpuid={0x64, 0x18, {0x5, 0xd6}}, @nested_intel_msr_list_add={0x155, 0x30, {0x3, 0x2, 0x9da, 0x7}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4b2, 0x9bd9, 0xfff, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x2}, @uexit={0x0, 0x18, 0x6ac20476}, @wr_drn={0x68, 0x20, {0x2, 0x7}}, @nested_load_syzos={0x136, 0xf8, {0x3, 0x3, [@enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xe82e, 0x2}}, @nested_load_syzos={0x136, 0x20, {0x3, 0x320a}}, @enable_nested={0x12c, 0x18}, @nested_set_state_pages={0x140, 0x28, {0x0, 0x32, @gpa=0xe000}}, @wrmsr={0x65, 0x20, {0x31a, 0x4}}, @nested_load_syzos={0x136, 0x20, {0x3, 0xfffffffffffffff7}}]}}, @wrmsr={0x65, 0x20, {0x40000010, 0xb38}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xef, 0x3, 0xb284, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control_nat=0x600e, 0x2, 0xff, 0x4}}, @wrmsr={0x65, 0x20, {0xaba, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x5b, 0x5, 0x40, 0xffffffffffffffff}}, @uexit={0x0, 0x18, 0xc1}, @nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18, 0x2}], 0x3dd}) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000600)={{0x1002, 0xffffffff, 0xb, 0x8, 0x81, 0x7, 0x1, 0xf5, 0xb, 0x1, 0x75, 0x6}, {0x3000, 0x40000, 0xd, 0x9, 0x4, 0x3, 0xeb, 0x6, 0x7, 0x4, 0x1, 0x5}, {0x8080000, 0xeeef0000, 0x4, 0xeb, 0x7f, 0x1d, 0xd, 0x9, 0x1, 0xb2, 0x8, 0x2}, {0x1ffc, 0x7fff8800, 0x9, 0x1, 0x2, 0x4, 0x7, 0x5a, 0x96, 0x41, 0xb, 0x3}, {0x2ffc, 0x5000, 0x4, 0x2, 0x9e, 0x2, 0x7, 0x6, 0xa, 0xe, 0x2, 0x7}, {0x1, 0x1a216090b233c37b, 0xd, 0x50, 0xb7, 0x1, 0x0, 0x9, 0xac, 0x0, 0xdb, 0x7}, {0x200000, 0xd000, 0x7, 0x2, 0x0, 0xb, 0xff, 0x1, 0x1, 0x6, 0xab, 0x7}, {0xf000, 0x2, 0xd, 0x50, 0x6, 0x20, 0x7f, 0x0, 0x7, 0x6, 0x1, 0x6}, {0x2000, 0x7}, {0xeeef0000, 0x5}, 0x30000000, 0x0, 0x80a0000, 0x4104, 0x5, 0x9c00, 0x1ffc, [0x1000, 0x7, 0x80, 0xdcae]}) (async) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) sched_getattr(r4, &(0x7f0000000740)={0x38}, 0x38, 0x0) (async) 58.720325076s ago: executing program 0 (id=800): socket$inet(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x22242, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x20100000, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f00000006c0), &(0x7f0000000580)=0xffffffffffffffba) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_open_procfs(r2, &(0x7f0000000140)='status\x00') pread64(r5, &(0x7f0000000180)=""/59, 0x3b, 0x40000000009) connect(r0, &(0x7f0000000d80)=@in={0x2, 0x1500, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x80000003, 0x40000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f0000000540)=ANY=[@ANYBLOB]) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000000600)=[{&(0x7f0000000640)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000540)="c8", 0x1}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="1800240000000000840000ea050000000900000000000000"], 0x18, 0x4040040}], 0x1, 0x890) ioctl$DM_DEV_CREATE(r7, 0xc138fd03, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8dc11, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}}) arch_prctl$ARCH_SET_GS(0x1001, 0x0) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x81e10, 0x0, 0x0, @by_dev={r9}, [@clone={0x0, 0x3c00, 0x0, 0x78, 'clone\x00', {@ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, '7', ' 1 no_discard_passdown'}}]}) pipe2(&(0x7f0000000000), 0x84800) 0s ago: executing program 32 (id=764): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='10', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000200)='./gadget\x00', &(0x7f0000000240)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./gadget/dummy_udc\x00', 0x4002, 0x5) pselect6(0x40, &(0x7f00000002c0)={0xe, 0x2, 0x7, 0x10, 0x0, 0xfffffffffffffffa, 0xe, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180), 0x2, 0x189083) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x92142, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) kernel console output (not intermixed with test programs): 7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.229751][ T7202] RSP: 002b:00007f5741b49028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 157.229768][ T7202] RAX: ffffffffffffffda RBX: 00007f5740e25fa0 RCX: 00007f5740b9f559 [ 157.229780][ T7202] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 157.229790][ T7202] RBP: 00007f5741b49090 R08: 0000000000000000 R09: 0000000000000000 [ 157.229800][ T7202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.229809][ T7202] R13: 00007f5740e26038 R14: 00007f5740e25fa0 R15: 00007ffd0f7616c8 [ 157.229839][ T7202] [ 157.312338][ T10] usb 2-1: device descriptor read/64, error -71 [ 157.565099][ T10] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 157.682039][ T5741] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 157.714082][ T10] usb 2-1: device descriptor read/64, error -71 [ 157.842446][ T10] usb usb2-port1: attempt power cycle [ 157.843148][ T5741] usb 3-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=1.00 [ 157.844357][ T5741] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 157.844379][ T5741] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 157.846413][ T5741] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.846431][ T5741] usb 3-1: Product: syz [ 157.846441][ T5741] usb 3-1: Manufacturer: syz [ 157.846475][ T5741] usb 3-1: SerialNumber: syz [ 157.849546][ T7204] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 157.849694][ T7204] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 157.851816][ T5741] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 157.851836][ T5741] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 157.851886][ T5741] usbserial_generic 3-1:1.0: generic converter detected [ 157.865151][ T5741] usb 3-1: generic converter now attached to ttyUSB0 [ 158.070735][ T5795] usb 3-1: USB disconnect, device number 23 [ 158.083192][ T5795] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 158.083926][ T5795] usbserial_generic 3-1:1.0: device disconnected [ 158.248177][ T10] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 158.269773][ T10] usb 2-1: device descriptor read/8, error -71 [ 158.525506][ T10] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 158.547540][ T10] usb 2-1: device descriptor read/8, error -71 [ 158.666844][ T10] usb usb2-port1: unable to enumerate USB device [ 158.673851][ T7206] cgroup: Need name or subsystem set [ 158.817053][ T7215] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.462' sets config #0 [ 159.169396][ T7230] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 159.169522][ T7230] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 159.422485][ T5795] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 159.584939][ T5795] usb 4-1: unable to get BOS descriptor or descriptor too short [ 159.584994][ T5795] usb 4-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 159.586015][ T5795] usb 4-1: config 1 has an invalid interface number: 64 but max is 2 [ 159.586042][ T5795] usb 4-1: config 1 has no interface number 0 [ 159.586129][ T5795] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 159.588220][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.588245][ T5795] usb 4-1: Product: syz [ 159.588260][ T5795] usb 4-1: Manufacturer: syz [ 159.588275][ T5795] usb 4-1: SerialNumber: syz [ 159.796982][ T7235] netlink: 'syz.2.467': attribute type 27 has an invalid length. [ 159.853703][ T7233] sctp: [Deprecated]: syz.0.466 (pid 7233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.853703][ T7233] Use struct sctp_sack_info instead [ 159.900768][ T5795] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 159.901248][ T5795] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 159.901274][ T5795] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 159.901298][ T5795] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 159.901441][ T5795] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 159.901463][ T5795] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 159.901485][ T5795] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 159.971792][ T5795] usb 4-1: failed to enable PITCH for EP 0x82 [ 160.076187][ T5795] usb 4-1: USB disconnect, device number 24 [ 160.184829][ T6357] udevd[6357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.64/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.319221][ T27] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 160.359504][ T7249] block nbd0: Unsupported socket: should be TCP or UNIX. [ 160.490321][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 160.491117][ T27] usb 3-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 160.494397][ T27] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 160.494448][ T27] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.494480][ T27] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.494509][ T27] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.494538][ T27] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.495596][ T27] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 160.495643][ T27] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.495672][ T27] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.495700][ T27] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.495729][ T27] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.497817][ T27] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 160.497864][ T27] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.497895][ T27] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.497923][ T27] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.497951][ T27] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.591228][ T27] usb 3-1: string descriptor 0 read error: -22 [ 160.591383][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.710014][ T27] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 160.880694][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 160.954526][ T10] usb 3-1: USB disconnect, device number 24 [ 161.020661][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 161.235347][ T7269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.477'. [ 161.542078][ T7273] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 161.554641][ T7273] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.712087][ T7280] tipc: Enabling of bearer rejected, failed to enable media [ 161.950754][ T7289] rxe_eth0 speed is unknown, defaulting to 1000 [ 162.544009][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 163.409801][ T7339] Could not find key with description: [syz0] [ 163.409820][ T7339] process_request_key_err: No key [ 163.409831][ T7339] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 163.409844][ T7339] One or more global auth toks could not properly register; rc = [-2] [ 163.409888][ T7339] Error validating options; rc = [-2] [ 163.917404][ T27] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 164.092037][ T27] usb 2-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 164.094797][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.605474][ T27] usb 2-1: NFC: Reader power on cmd error -71 [ 164.605502][ T27] pn533_usb 2-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 164.605640][ T27] pn533_usb 2-1:1.0: probe with driver pn533_usb failed with error -71 [ 164.642086][ T27] usb 2-1: USB disconnect, device number 36 [ 165.089732][ T7392] trusted_key: encrypted_key: insufficient parameters specified [ 165.106459][ T7392] FAULT_INJECTION: forcing a failure. [ 165.106459][ T7392] name failslab, interval 1, probability 0, space 0, times 0 [ 165.106486][ T7392] CPU: 0 UID: 0 PID: 7392 Comm: syz.3.505 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.106508][ T7392] Tainted: [L]=SOFTLOCKUP [ 165.106514][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 165.106524][ T7392] Call Trace: [ 165.106530][ T7392] [ 165.106536][ T7392] dump_stack_lvl+0xe8/0x150 [ 165.106565][ T7392] should_fail_ex+0x3eb/0x540 [ 165.106594][ T7392] should_failslab+0xa8/0x100 [ 165.106620][ T7392] __kmalloc_cache_noprof+0x9e/0x600 [ 165.106640][ T7392] ? __se_sys_fspick+0x203/0x3c0 [ 165.106664][ T7392] ? __se_sys_fspick+0x203/0x3c0 [ 165.106693][ T7392] __se_sys_fspick+0x203/0x3c0 [ 165.106718][ T7392] ? __pfx___se_sys_futex+0x10/0x10 [ 165.106744][ T7392] ? __pfx___se_sys_fspick+0x10/0x10 [ 165.106777][ T7392] do_syscall_64+0x166/0x520 [ 165.106802][ T7392] ? trace_irq_disable+0x3b/0x140 [ 165.106822][ T7392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.106839][ T7392] ? clear_bhb_loop+0x70/0xc0 [ 165.106859][ T7392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.106878][ T7392] RIP: 0033:0x7fb48139f559 [ 165.106893][ T7392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.106907][ T7392] RSP: 002b:00007fb4821e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 165.106925][ T7392] RAX: ffffffffffffffda RBX: 00007fb481625fa0 RCX: 00007fb48139f559 [ 165.106936][ T7392] RDX: 0000000000000000 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 165.106947][ T7392] RBP: 00007fb481436b50 R08: 0000000000000000 R09: 0000000000000000 [ 165.106979][ T7392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.106992][ T7392] R13: 00007fb481626038 R14: 00007fb481625fa0 R15: 00007ffdab790058 [ 165.107028][ T7392] [ 165.605859][ T10] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 165.625298][ T7409] device-mapper: ioctl: Unable to change name on mapped device to one that already exists: syza2 [ 165.700428][ T5795] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 165.743121][ T10] usb 4-1: device descriptor read/64, error -71 [ 165.861866][ T5795] usb 2-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=0.00 [ 165.862937][ T5795] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.862962][ T5795] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 165.865123][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.865149][ T5795] usb 2-1: Product: syz [ 165.865163][ T5795] usb 2-1: Manufacturer: syz [ 165.865228][ T5795] usb 2-1: SerialNumber: syz [ 165.999349][ T10] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 166.085899][ T5795] usb 2-1: USB disconnect, device number 37 [ 166.088313][ T5642] Bluetooth: hci5: CSR: Local version failed (-71) [ 166.139077][ T10] usb 4-1: device descriptor read/64, error -71 [ 166.255886][ T10] usb usb4-port1: attempt power cycle [ 166.629404][ T10] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 166.652434][ T10] usb 4-1: device descriptor read/8, error -71 [ 166.917772][ T10] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 166.939642][ T10] usb 4-1: device descriptor read/8, error -71 [ 167.067288][ T10] usb usb4-port1: unable to enumerate USB device [ 167.985834][ T5642] Bluetooth: hci4: command 0x1003 tx timeout [ 167.985957][ T5646] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 168.161224][ T7387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.254927][ T7422] tmpfs: Unknown parameter 'mX–hÓe[Üpïl' [ 168.711295][ T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 168.872338][ T10] usb 3-1: New USB device found: idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 168.873776][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.877343][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.877375][ T10] usb 3-1: Product: syz [ 168.877393][ T10] usb 3-1: Manufacturer: syz [ 168.877421][ T10] usb 3-1: SerialNumber: syz [ 168.927305][ T10] usb 3-1: config 0 descriptor?? [ 168.970655][ T33] kauditd_printk_skb: 52 callbacks suppressed [ 168.970677][ T33] audit: type=1326 audit(1793464747.730:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.522" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c539f559 code=0x50000 [ 168.970972][ T33] audit: type=1326 audit(1793464747.730:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.522" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c539f559 code=0x50000 [ 168.971116][ T33] audit: type=1326 audit(1793464747.730:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.522" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c539f559 code=0x50000 [ 168.971272][ T33] audit: type=1326 audit(1793464747.730:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.522" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c539f559 code=0x50000 [ 168.971444][ T33] audit: type=1326 audit(1793464747.730:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.522" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c539f559 code=0x50000 [ 168.971587][ T33] audit: type=1326 audit(1793464747.730:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.522" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c539f559 code=0x50000 [ 168.971665][ T33] audit: type=1326 audit(1793464747.730:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.522" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c539f559 code=0x50000 [ 168.971803][ T33] audit: type=1326 audit(1793464747.730:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.522" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c539f559 code=0x50000 [ 168.971947][ T33] audit: type=1326 audit(1793464747.730:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.522" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c539f559 code=0x50000 [ 168.972080][ T33] audit: type=1326 audit(1793464747.730:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7441 comm="syz.0.522" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c539f559 code=0x50000 [ 169.184034][ T10] cdc_subset 3-1:0.0: probe with driver cdc_subset failed with error -22 [ 169.428212][ T7433] netlink: 'syz.2.518': attribute type 19 has an invalid length. [ 170.016722][ T7447] netlink: 128 bytes leftover after parsing attributes in process `syz.0.524'. [ 171.454230][ T7464] netlink: 'syz.0.531': attribute type 29 has an invalid length. [ 171.455256][ T7464] netlink: 'syz.0.531': attribute type 29 has an invalid length. [ 171.528977][ T7426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.684230][ T5709] usb 3-1: USB disconnect, device number 25 [ 171.905486][ T5796] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 172.063849][ T5796] usb 2-1: Using ep0 maxpacket: 8 [ 172.064710][ T5796] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 172.067918][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.067944][ T5796] usb 2-1: Product: syz [ 172.067959][ T5796] usb 2-1: Manufacturer: syz [ 172.067974][ T5796] usb 2-1: SerialNumber: syz [ 172.070252][ T5796] usb 2-1: config 0 descriptor?? [ 172.181300][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 172.293503][ T5796] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 172.353127][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 172.353985][ T10] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.355142][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 172.355165][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 172.355183][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.355201][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.355231][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.574094][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 172.574130][ T10] usbtmc 4-1:16.0: can't read capabilities [ 172.797417][ T27] usb 4-1: USB disconnect, device number 29 [ 173.245114][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 173.245142][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'. [ 173.807297][ T5796] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 173.814682][ T5796] usb 2-1: USB disconnect, device number 38 [ 174.850978][ T5644] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 175.001146][ T5644] usb 4-1: device descriptor read/64, error -71 [ 175.020178][ T7538] rxe_eth0 speed is unknown, defaulting to 1000 [ 175.257496][ T5644] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 175.405704][ T5644] usb 4-1: device descriptor read/64, error -71 [ 175.538453][ T5644] usb usb4-port1: attempt power cycle [ 175.760086][ T5796] kernel read not supported for file /video7 (pid: 5796 comm: kworker/0:7) [ 175.897431][ T5644] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 175.916198][ T7567] tipc: Started in network mode [ 175.916230][ T7567] tipc: Node identity 8a6b68fbc428, cluster identity 4711 [ 175.916470][ T7567] tipc: Enabled bearer , priority 0 [ 175.941063][ T5644] usb 4-1: device descriptor read/8, error -71 [ 175.947092][ T7567] tipc: Resetting bearer [ 175.990504][ T7566] tipc: Disabling bearer [ 176.206582][ T5644] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 176.228424][ T5644] usb 4-1: device descriptor read/8, error -71 [ 176.287819][ T7583] rxe_eth0 speed is unknown, defaulting to 1000 [ 176.326481][ T7586] netlink: 3 bytes leftover after parsing attributes in process `syz.0.564'. [ 176.345741][ T5644] usb usb4-port1: unable to enumerate USB device [ 176.347008][ T7585] FAULT_INJECTION: forcing a failure. [ 176.347008][ T7585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.347072][ T7585] CPU: 1 UID: 0 PID: 7585 Comm: syz.1.565 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.347102][ T7585] Tainted: [L]=SOFTLOCKUP [ 176.347111][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.347124][ T7585] Call Trace: [ 176.347133][ T7585] [ 176.347142][ T7585] dump_stack_lvl+0xe8/0x150 [ 176.347180][ T7585] should_fail_ex+0x3eb/0x540 [ 176.347221][ T7585] __kvm_read_guest_page+0x18d/0x240 [ 176.347252][ T7585] kvm_fetch_guest_virt+0x10c/0x160 [ 176.347280][ T7585] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 176.347306][ T7585] __do_insn_fetch_bytes+0x53a/0x6c0 [ 176.347345][ T7585] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 176.347392][ T7585] x86_decode_insn+0x374/0x5af0 [ 176.347434][ T7585] ? __handle_changed_spte+0x58d/0x12e0 [ 176.347489][ T7585] ? __pfx_x86_decode_insn+0x10/0x10 [ 176.347538][ T7585] ? __asan_memset+0x22/0x50 [ 176.347560][ T7585] ? init_decode_cache+0xf3/0x160 [ 176.347590][ T7585] ? init_emulate_ctxt+0x4c6/0x630 [ 176.347623][ T7585] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 176.347657][ T7585] ? vmx_read_guest_seg_ar+0x3a3/0x5d0 [ 176.347697][ T7585] x86_emulate_instruction+0x348/0x1e90 [ 176.347734][ T7585] ? ____kvm_emulate_hypercall+0x659/0x1040 [ 176.347783][ T7585] ? vt_handle_exit_irqoff+0x100/0xc60 [ 176.347810][ T7585] ? trace_rcu_utilization+0x4a/0x1f0 [ 176.347842][ T7585] ? __pfx_vt_handle_exit_irqoff+0x10/0x10 [ 176.347868][ T7585] ? rcu_note_context_switch+0x12a/0xe70 [ 176.347891][ T7585] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 176.347924][ T7585] ? __lock_acquire+0x747/0x2de0 [ 176.347962][ T7585] handle_ud+0x19e/0x590 [ 176.347993][ T7585] ? __pfx_handle_ud+0x10/0x10 [ 176.348030][ T7585] ? handle_exception_nmi+0x303/0x1520 [ 176.348063][ T7585] vt_handle_exit+0x28/0x160 [ 176.348090][ T7585] vcpu_run+0x4e8a/0x7a90 [ 176.348143][ T7585] ? vcpu_run+0x35f3/0x7a90 [ 176.348204][ T7585] ? __pfx_vcpu_run+0x10/0x10 [ 176.348226][ T7585] ? lock_acquire+0x115/0x350 [ 176.348256][ T7585] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 176.348285][ T7585] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 176.348325][ T7585] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 176.348351][ T7585] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 176.348376][ T7585] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 176.348411][ T7585] kvm_vcpu_ioctl+0xa61/0xfd0 [ 176.348442][ T7585] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 176.348486][ T7585] ? __fget_files+0x2a/0x420 [ 176.348513][ T7585] ? __fget_files+0x2a/0x420 [ 176.348537][ T7585] ? __fget_files+0x2a/0x420 [ 176.348566][ T7585] ? bpf_lsm_file_ioctl+0x9/0x20 [ 176.348593][ T7585] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 176.348617][ T7585] __se_sys_ioctl+0xfc/0x170 [ 176.348649][ T7585] do_syscall_64+0x166/0x520 [ 176.348688][ T7585] ? trace_irq_disable+0x3b/0x140 [ 176.348715][ T7585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.348738][ T7585] ? clear_bhb_loop+0x70/0xc0 [ 176.348765][ T7585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.348786][ T7585] RIP: 0033:0x7feb54b9f559 [ 176.348807][ T7585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.348826][ T7585] RSP: 002b:00007feb55a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.348849][ T7585] RAX: ffffffffffffffda RBX: 00007feb54e25fa0 RCX: 00007feb54b9f559 [ 176.348865][ T7585] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 176.348879][ T7585] RBP: 00007feb55a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 176.348892][ T7585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.348904][ T7585] R13: 00007feb54e26038 R14: 00007feb54e25fa0 R15: 00007ffca5a5f0b8 [ 176.348939][ T7585] [ 177.736481][ T5795] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 177.893405][ T5795] usb 3-1: Using ep0 maxpacket: 32 [ 177.894243][ T5795] usb 3-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 177.897016][ T5795] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.897041][ T5795] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 177.897101][ T5795] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 177.901306][ T5795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.901334][ T5795] usb 3-1: Product: syz [ 177.901350][ T5795] usb 3-1: Manufacturer: syz [ 177.901366][ T5795] usb 3-1: SerialNumber: syz [ 178.213852][ T5709] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 178.374846][ T5709] usb 4-1: New USB device found: idVendor=1e7d, idProduct=2d50, bcdDevice=0.00 [ 178.376145][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 178.376195][ T5709] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.376237][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.379156][ T5709] usb 4-1: config 0 descriptor?? [ 178.705291][ T5795] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 178.706818][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.711403][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.719781][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.730077][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.825604][ T5709] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 178.825657][ T5709] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 178.825686][ T5709] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 178.825714][ T5709] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 178.825741][ T5709] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 178.825768][ T5709] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 178.825796][ T5709] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 178.825823][ T5709] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 178.825850][ T5709] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 178.826113][ T5709] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 178.882755][ T5709] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 178.978073][ T5795] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 179.065719][ T5795] usb 3-1: USB disconnect, device number 26 [ 179.186614][ T6357] udevd[6357]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.727324][ T5709] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device [ 179.727384][ T5709] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse [ 179.750435][ T5709] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -71 [ 179.774899][ T5709] usb 4-1: USB disconnect, device number 34 [ 179.804709][ T5795] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 179.965055][ T5795] usb 2-1: Using ep0 maxpacket: 16 [ 179.967325][ T5795] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.967360][ T5795] usb 2-1: New USB device found: idVendor=11ba, idProduct=1001, bcdDevice=f1.7f [ 179.968232][ T5795] usb 2-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config [ 179.968250][ T5795] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 179.970207][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.970226][ T5795] usb 2-1: Product: syz [ 179.970237][ T5795] usb 2-1: Manufacturer: syz [ 179.970249][ T5795] usb 2-1: SerialNumber: syz [ 179.972450][ T5795] usb 2-1: config 0 descriptor?? [ 180.256167][ T5795] usb 2-1: USB disconnect, device number 39 [ 180.484395][ T7656] syzkaller1: entered promiscuous mode [ 180.484414][ T7656] syzkaller1: entered allmulticast mode [ 183.156254][ T7717] support for cryptoloop has been removed. Use dm-crypt instead. [ 183.371060][ T5709] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 183.532024][ T5709] usb 4-1: New USB device found: idVendor=057e, idProduct=200e, bcdDevice=0.00 [ 183.533170][ T5709] usb 4-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.533194][ T5709] usb 4-1: config 0 interface 0 has no altsetting 0 [ 183.533218][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.536540][ T5709] usb 4-1: config 0 descriptor?? [ 183.725517][ T5795] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 183.838446][ T7750] FAULT_INJECTION: forcing a failure. [ 183.838446][ T7750] name fail_futex, interval 1, probability 0, space 0, times 0 [ 183.838489][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.0.617 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.838518][ T7750] Tainted: [L]=SOFTLOCKUP [ 183.838526][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 183.838540][ T7750] Call Trace: [ 183.838548][ T7750] [ 183.838558][ T7750] dump_stack_lvl+0xe8/0x150 [ 183.838597][ T7750] should_fail_ex+0x3eb/0x540 [ 183.838637][ T7750] get_futex_key+0x1ab/0x1410 [ 183.838668][ T7750] ? preempt_schedule_thunk+0x16/0x40 [ 183.838705][ T7750] ? __pfx_get_futex_key+0x10/0x10 [ 183.838745][ T7750] futex_wake+0x119/0x5f0 [ 183.838772][ T7750] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 183.838807][ T7750] ? __pfx_futex_wake+0x10/0x10 [ 183.838847][ T7750] do_futex+0x458/0x4e0 [ 183.838885][ T7750] ? __pfx_do_futex+0x10/0x10 [ 183.838927][ T7750] __se_sys_futex+0x3a8/0x450 [ 183.838968][ T7750] ? __pfx___se_sys_futex+0x10/0x10 [ 183.839001][ T7750] ? rcu_is_watching+0x16/0xb0 [ 183.839038][ T7750] ? __x64_sys_futex+0x21/0xf0 [ 183.839073][ T7750] do_syscall_64+0x166/0x520 [ 183.839105][ T7750] ? trace_irq_disable+0x3b/0x140 [ 183.839132][ T7750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.839156][ T7750] ? clear_bhb_loop+0x70/0xc0 [ 183.839185][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.839207][ T7750] RIP: 0033:0x7f13c539f559 [ 183.839227][ T7750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.839246][ T7750] RSP: 002b:00007f13c61e10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 183.839270][ T7750] RAX: ffffffffffffffda RBX: 00007f13c5625fa8 RCX: 00007f13c539f559 [ 183.839286][ T7750] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f13c5625fac [ 183.839305][ T7750] RBP: 00007f13c5625fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 183.839321][ T7750] R10: 0000000000000078 R11: 0000000000000246 R12: 0000000000000000 [ 183.839334][ T7750] R13: 00007f13c5626038 R14: 00007fff96c508a0 R15: 00007fff96c50988 [ 183.839368][ T7750] [ 183.949791][ T5795] usb 3-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 183.970205][ T5795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.088526][ T5795] usb 3-1: config 0 descriptor?? [ 184.134222][ T5709] nintendo 0003:057E:200E.0007: hidraw0: USB HID v90.01 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0 [ 184.138758][ T5709] nintendo 0003:057E:200E.0007: Failed charging grip handshake [ 184.138787][ T5709] nintendo 0003:057E:200E.0007: Failed to initialize controller; ret=-110 [ 184.203489][ T7755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'. [ 184.205748][ T5709] nintendo 0003:057E:200E.0007: probe - fail = -110 [ 184.205940][ T5709] nintendo 0003:057E:200E.0007: probe with driver nintendo failed with error -110 [ 184.258570][ T7715] tipc: Enabling of bearer rejected, failed to enable media [ 184.261773][ T27] usb 4-1: USB disconnect, device number 35 [ 184.334991][ T7754] fido_id[7754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 184.340079][ T7738] FAULT_INJECTION: forcing a failure. [ 184.340079][ T7738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 184.340117][ T7738] CPU: 1 UID: 0 PID: 7738 Comm: syz.2.612 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.340153][ T7738] Tainted: [L]=SOFTLOCKUP [ 184.340162][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 184.340175][ T7738] Call Trace: [ 184.340183][ T7738] [ 184.340192][ T7738] dump_stack_lvl+0xe8/0x150 [ 184.340233][ T7738] should_fail_ex+0x3eb/0x540 [ 184.340273][ T7738] prepare_alloc_pages+0x21e/0x5f0 [ 184.340308][ T7738] __alloc_frozen_pages_noprof+0x17c/0x410 [ 184.340342][ T7738] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 184.340379][ T7738] ? policy_nodemask+0x31b/0x980 [ 184.340418][ T7738] alloc_pages_mpol+0x21e/0x390 [ 184.340456][ T7738] folio_alloc_mpol_noprof+0x39/0x160 [ 184.340491][ T7738] shmem_alloc_and_add_folio+0x43e/0xf60 [ 184.340520][ T7738] ? filemap_get_entry+0xcd/0x3f0 [ 184.340553][ T7738] ? filemap_map_pages+0x1d1/0x2170 [ 184.340583][ T7738] ? __pfx_filemap_get_entry+0x10/0x10 [ 184.340611][ T7738] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 184.340655][ T7738] shmem_get_folio_gfp+0x594/0x1330 [ 184.340701][ T7738] shmem_fault+0x179/0x390 [ 184.340740][ T7738] __do_fault+0x138/0x2a0 [ 184.340763][ T7738] ? do_pte_missing+0x139f/0x3570 [ 184.340786][ T7738] do_pte_missing+0x21d2/0x3570 [ 184.340822][ T7738] ? handle_mm_fault+0xee/0x2f80 [ 184.340859][ T7738] handle_mm_fault+0x1807/0x2f80 [ 184.340904][ T7738] ? handle_mm_fault+0xee/0x2f80 [ 184.340951][ T7738] ? follow_page_pte+0x660/0xf10 [ 184.340982][ T7738] ? __pfx_handle_mm_fault+0x10/0x10 [ 184.341015][ T7738] ? follow_page_pte+0x748/0xf10 [ 184.341054][ T7738] ? __pfx_follow_page_pte+0x10/0x10 [ 184.341108][ T7738] __get_user_pages+0x1670/0x2750 [ 184.341171][ T7738] populate_vma_page_range+0x311/0x3f0 [ 184.341202][ T7738] ? __pfx_populate_vma_page_range+0x10/0x10 [ 184.341233][ T7738] ? down_read+0x2b9/0x320 [ 184.341259][ T7738] __mm_populate+0x25f/0x390 [ 184.341289][ T7738] ? __pfx___mm_populate+0x10/0x10 [ 184.341329][ T7738] vm_mmap_pgoff+0x36e/0x520 [ 184.341359][ T7738] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 184.341385][ T7738] ? rcu_is_watching+0x16/0xb0 [ 184.341418][ T7738] ? ksys_mmap_pgoff+0xf3/0x760 [ 184.341449][ T7738] ? __x64_sys_mmap+0x7f/0x140 [ 184.341477][ T7738] do_syscall_64+0x166/0x520 [ 184.341509][ T7738] ? trace_irq_disable+0x3b/0x140 [ 184.341536][ T7738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.341559][ T7738] ? clear_bhb_loop+0x70/0xc0 [ 184.341585][ T7738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.341608][ T7738] RIP: 0033:0x7f5740b9f559 [ 184.341629][ T7738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.341648][ T7738] RSP: 002b:00007f5741b49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 184.341672][ T7738] RAX: ffffffffffffffda RBX: 00007f5740e25fa0 RCX: 00007f5740b9f559 [ 184.341688][ T7738] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 184.341703][ T7738] RBP: 00007f5740c36b50 R08: ffffffffffffffff R09: 0000000000000000 [ 184.341717][ T7738] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 184.341731][ T7738] R13: 00007f5740e26038 R14: 00007f5740e25fa0 R15: 00007ffd0f7616c8 [ 184.341766][ T7738] [ 184.758703][ T5709] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 184.923303][ T5709] usb 2-1: New USB device found: idVendor=28bd, idProduct=0042, bcdDevice=0.00 [ 184.924295][ T5709] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 184.924318][ T5709] usb 2-1: config 0 has no interface number 0 [ 184.924364][ T5709] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.924390][ T5709] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.924412][ T5709] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.924452][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.000907][ T5709] usb 2-1: config 0 descriptor?? [ 185.190452][ T5795] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 185.334402][ T7781] fuse: Unknown parameter 'rootmode<00000000000000000040000' [ 185.338100][ T7781] FAULT_INJECTION: forcing a failure. [ 185.338100][ T7781] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.338159][ T7781] CPU: 1 UID: 0 PID: 7781 Comm: syz.0.623 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.338190][ T7781] Tainted: [L]=SOFTLOCKUP [ 185.338197][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 185.338210][ T7781] Call Trace: [ 185.338219][ T7781] [ 185.338229][ T7781] dump_stack_lvl+0xe8/0x150 [ 185.338271][ T7781] should_fail_ex+0x3eb/0x540 [ 185.338316][ T7781] prepare_alloc_pages+0x21e/0x5f0 [ 185.338349][ T7781] __alloc_frozen_pages_noprof+0x17c/0x410 [ 185.338378][ T7781] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.338419][ T7781] alloc_pages_mpol+0x21e/0x390 [ 185.338456][ T7781] ? iommufd_test+0x12b8/0x6360 [ 185.338487][ T7781] ___kmalloc_large_node+0x7b/0x170 [ 185.338515][ T7781] __kmalloc_large_node_noprof+0x18/0x90 [ 185.338541][ T7781] __kmalloc_noprof+0x3f6/0x710 [ 185.338563][ T7781] ? __kmalloc_cache_noprof+0x148/0x600 [ 185.338584][ T7781] ? iommufd_test+0x1277/0x6360 [ 185.338612][ T7781] ? iommufd_test+0x12b8/0x6360 [ 185.338648][ T7781] iommufd_test+0x12b8/0x6360 [ 185.338687][ T7781] ? __lock_acquire+0x747/0x2de0 [ 185.338712][ T7781] ? __pfx_iommufd_test+0x10/0x10 [ 185.338756][ T7781] ? tomoyo_path_number_perm+0x219/0x5f0 [ 185.338787][ T7781] ? tomoyo_path_number_perm+0x219/0x5f0 [ 185.338817][ T7781] ? lock_acquire+0x115/0x350 [ 185.338857][ T7781] ? __might_fault+0xaf/0x130 [ 185.338897][ T7781] iommufd_fops_ioctl+0x465/0x600 [ 185.338927][ T7781] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 185.338953][ T7781] ? __se_sys_futex+0x3a8/0x450 [ 185.338999][ T7781] ? bpf_lsm_file_ioctl+0x9/0x20 [ 185.339099][ T7781] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 185.339168][ T7781] __se_sys_ioctl+0xfc/0x170 [ 185.339257][ T7781] do_syscall_64+0x166/0x520 [ 185.339347][ T7781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.339406][ T7781] ? clear_bhb_loop+0x70/0xc0 [ 185.339477][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.339535][ T7781] RIP: 0033:0x7f13c539f559 [ 185.339586][ T7781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.339628][ T7781] RSP: 002b:00007f13c61e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.339694][ T7781] RAX: ffffffffffffffda RBX: 00007f13c5625fa0 RCX: 00007f13c539f559 [ 185.339735][ T7781] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000006 [ 185.339768][ T7781] RBP: 00007f13c5436b50 R08: 0000000000000000 R09: 0000000000000000 [ 185.339827][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.339878][ T7781] R13: 00007f13c5626038 R14: 00007f13c5625fa0 R15: 00007fff96c50988 [ 185.339975][ T7781] [ 185.438669][ T7738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.497784][ T7738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.725816][ T5795] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 185.725845][ T5795] [drm] Initialized udl on minor 1 [ 185.747381][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 185.747409][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 185.747430][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3502 instead [ 185.747477][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x19c1 instead [ 185.747494][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 185.747510][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 185.747527][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 185.747548][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 185.747581][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 185.747637][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 185.747655][ T7759] jffs2: Further such events for this erase block will not be printed [ 185.748156][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 185.748178][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 185.748225][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3502 instead [ 185.748248][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x19c1 instead [ 185.748267][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 185.748285][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 185.748311][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 185.748335][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 185.748392][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 185.748429][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 185.748446][ T7759] jffs2: Further such events for this erase block will not be printed [ 185.777034][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 185.777157][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 185.777229][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x3502 instead [ 185.796410][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x19c1 instead [ 185.796665][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 185.796779][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 185.796848][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x3502 instead [ 185.796948][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x19c1 instead [ 185.797169][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 185.797217][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 185.797319][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x3502 instead [ 185.797370][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x19c1 instead [ 185.803226][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 185.803353][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 185.803391][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x3502 instead [ 185.803447][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x19c1 instead [ 185.835994][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 185.836069][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 185.836172][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x3502 instead [ 185.836225][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x19c1 instead [ 185.836413][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 185.836512][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 185.836556][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x3502 instead [ 185.836607][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x19c1 instead [ 185.836782][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 185.836880][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 185.836925][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x3502 instead [ 185.881632][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x19c1 instead [ 185.881868][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 185.881973][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 185.882017][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x3502 instead [ 185.882075][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x19c1 instead [ 185.882256][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 185.882389][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 185.882438][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x3502 instead [ 185.882496][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x19c1 instead [ 185.882934][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 185.882984][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 185.883078][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x3502 instead [ 185.883130][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x19c1 instead [ 185.883328][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 185.883418][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 185.883468][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x3502 instead [ 185.949370][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x19c1 instead [ 185.949597][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 185.949761][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 185.949808][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x3502 instead [ 185.949921][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x19c1 instead [ 185.950148][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 185.950191][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 185.950292][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x3502 instead [ 185.950480][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x19c1 instead [ 185.950533][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 185.950552][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 185.950573][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x3502 instead [ 185.950634][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x19c1 instead [ 185.950688][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 185.950707][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 185.950727][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x3502 instead [ 185.950784][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x19c1 instead [ 185.950839][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 185.950858][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 185.950877][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x3502 instead [ 185.950933][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x19c1 instead [ 185.950987][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 185.951005][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 185.951037][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x3502 instead [ 185.951080][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x19c1 instead [ 185.951132][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 185.951149][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 185.951169][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x3502 instead [ 185.951189][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x19c1 instead [ 185.951274][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 185.951291][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 185.951317][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x3502 instead [ 185.951338][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x19c1 instead [ 186.023058][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 186.023212][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 186.023263][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x3502 instead [ 186.023374][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x19c1 instead [ 186.023571][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 186.023620][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 186.023722][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x3502 instead [ 186.023775][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x19c1 instead [ 186.023953][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 186.024048][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 186.024233][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x3502 instead [ 186.024285][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x19c1 instead [ 186.024464][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 186.024588][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 186.024639][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x3502 instead [ 186.024690][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x19c1 instead [ 186.024866][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 186.024963][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 186.025012][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x3502 instead [ 186.025056][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x19c1 instead [ 186.112910][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 186.113058][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 186.113117][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x3502 instead [ 186.113219][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x19c1 instead [ 186.113415][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 186.113458][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 186.113585][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x3502 instead [ 186.113643][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x19c1 instead [ 186.114114][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 186.114171][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 186.114268][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x3502 instead [ 186.114331][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x19c1 instead [ 186.114513][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 186.148684][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 186.148810][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x3502 instead [ 186.148863][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x19c1 instead [ 186.149078][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 186.149185][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 186.149228][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x3502 instead [ 186.149278][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x19c1 instead [ 186.149463][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 186.149564][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 186.149612][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x3502 instead [ 186.149664][ T7759] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x19c1 instead [ 186.149851][ T7759] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 186.149902][ T7759] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 187.284617][ T7755] ALSA: seq fatal error: cannot create timer (-19) [ 187.320175][ T5709] uclogic 0003:28BD:0042.0008: failed retrieving string descriptor #100: -71 [ 187.320248][ T5709] uclogic 0003:28BD:0042.0008: failed retrieving pen parameters: -71 [ 187.320287][ T5709] uclogic 0003:28BD:0042.0008: pen probing failed: -71 [ 187.320315][ T5709] uclogic 0003:28BD:0042.0008: failed probing parameters: -71 [ 187.320429][ T5709] uclogic 0003:28BD:0042.0008: probe with driver uclogic failed with error -71 [ 187.373527][ T5709] usb 2-1: USB disconnect, device number 40 [ 187.533740][ T5795] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 187.552140][ T5795] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 187.573101][ T5795] usb 3-1: USB disconnect, device number 27 [ 187.742328][ T7811] FAULT_INJECTION: forcing a failure. [ 187.742328][ T7811] name fail_futex, interval 1, probability 0, space 0, times 0 [ 187.742366][ T7811] CPU: 0 UID: 0 PID: 7811 Comm: syz.0.629 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.742397][ T7811] Tainted: [L]=SOFTLOCKUP [ 187.742405][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 187.742418][ T7811] Call Trace: [ 187.742428][ T7811] [ 187.742437][ T7811] dump_stack_lvl+0xe8/0x150 [ 187.742477][ T7811] should_fail_ex+0x3eb/0x540 [ 187.742519][ T7811] get_futex_key+0x1ab/0x1410 [ 187.742554][ T7811] ? lock_acquire+0x115/0x350 [ 187.742586][ T7811] ? __pfx_get_futex_key+0x10/0x10 [ 187.742613][ T7811] ? lock_acquire+0x115/0x350 [ 187.742648][ T7811] futex_wake+0x119/0x5f0 [ 187.742677][ T7811] ? __pfx_futex_wake+0x10/0x10 [ 187.742703][ T7811] ? do_recvmmsg+0x741/0x800 [ 187.742758][ T7811] do_futex+0x458/0x4e0 [ 187.742797][ T7811] ? __pfx_do_futex+0x10/0x10 [ 187.742828][ T7811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.742869][ T7811] __se_sys_futex+0x3a8/0x450 [ 187.742910][ T7811] ? __pfx___se_sys_futex+0x10/0x10 [ 187.742944][ T7811] ? rcu_is_watching+0x16/0xb0 [ 187.742980][ T7811] ? __x64_sys_futex+0x21/0xf0 [ 187.743015][ T7811] do_syscall_64+0x166/0x520 [ 187.743047][ T7811] ? trace_irq_disable+0x3b/0x140 [ 187.743074][ T7811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.743097][ T7811] ? clear_bhb_loop+0x70/0xc0 [ 187.743124][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.743146][ T7811] RIP: 0033:0x7f13c539f559 [ 187.743167][ T7811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.743187][ T7811] RSP: 002b:00007f13c61e10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 187.743212][ T7811] RAX: ffffffffffffffda RBX: 00007f13c5625fa8 RCX: 00007f13c539f559 [ 187.743229][ T7811] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f13c5625fac [ 187.743243][ T7811] RBP: 00007f13c5625fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 187.743258][ T7811] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 187.743271][ T7811] R13: 00007f13c5626038 R14: 00007fff96c508a0 R15: 00007fff96c50988 [ 187.743305][ T7811] [ 188.046432][ T7817] openvswitch: netlink: IP tunnel TTL not specified. [ 188.071284][ T7817] sctp: [Deprecated]: syz.0.630 (pid 7817) Use of int in max_burst socket option. [ 188.071284][ T7817] Use struct sctp_assoc_value instead [ 188.344766][ T7827] netlink: 'syz.0.634': attribute type 29 has an invalid length. [ 188.571910][ T7834] FAULT_INJECTION: forcing a failure. [ 188.571910][ T7834] name failslab, interval 1, probability 0, space 0, times 0 [ 188.571938][ T7834] CPU: 0 UID: 0 PID: 7834 Comm: syz.1.636 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.571959][ T7834] Tainted: [L]=SOFTLOCKUP [ 188.571965][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 188.571974][ T7834] Call Trace: [ 188.571981][ T7834] [ 188.571987][ T7834] dump_stack_lvl+0xe8/0x150 [ 188.572017][ T7834] should_fail_ex+0x3eb/0x540 [ 188.572045][ T7834] should_failslab+0xa8/0x100 [ 188.572097][ T7834] ? alloc_empty_file+0x5b/0x1d0 [ 188.572119][ T7834] kmem_cache_alloc_noprof+0x9c/0x600 [ 188.572151][ T7834] ? alloc_empty_file+0x5b/0x1d0 [ 188.572171][ T7834] alloc_empty_file+0x5b/0x1d0 [ 188.572187][ T7834] alloc_file_pseudo+0x110/0x1e0 [ 188.572205][ T7834] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 188.572228][ T7834] anon_inode_getfile+0xc5/0x1a0 [ 188.572246][ T7834] iommufd_eventq_init+0xa2/0x180 [ 188.572268][ T7834] iommufd_fault_alloc+0x14d/0x390 [ 188.572289][ T7834] iommufd_fops_ioctl+0x465/0x600 [ 188.572309][ T7834] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 188.572328][ T7834] ? __fget_files+0x2a/0x420 [ 188.572354][ T7834] ? bpf_lsm_file_ioctl+0x9/0x20 [ 188.572374][ T7834] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 188.572407][ T7834] __se_sys_ioctl+0xfc/0x170 [ 188.572440][ T7834] do_syscall_64+0x166/0x520 [ 188.572474][ T7834] ? trace_irq_disable+0x3b/0x140 [ 188.572510][ T7834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.572526][ T7834] ? clear_bhb_loop+0x70/0xc0 [ 188.572546][ T7834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.572562][ T7834] RIP: 0033:0x7feb54b9f559 [ 188.572577][ T7834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.572590][ T7834] RSP: 002b:00007feb55a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.572607][ T7834] RAX: ffffffffffffffda RBX: 00007feb54e25fa0 RCX: 00007feb54b9f559 [ 188.572619][ T7834] RDX: 0000200000000200 RSI: 0000000000003b8e RDI: 0000000000000004 [ 188.572629][ T7834] RBP: 00007feb54c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 188.572638][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.572647][ T7834] R13: 00007feb54e26038 R14: 00007feb54e25fa0 R15: 00007ffca5a5f0b8 [ 188.572671][ T7834] [ 188.576373][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.1.636'. [ 189.091849][ T7842] FAULT_INJECTION: forcing a failure. [ 189.091849][ T7842] name failslab, interval 1, probability 0, space 0, times 0 [ 189.091909][ T7842] CPU: 1 UID: 0 PID: 7842 Comm: syz.2.639 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.091941][ T7842] Tainted: [L]=SOFTLOCKUP [ 189.091956][ T7842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 189.091967][ T7842] Call Trace: [ 189.091973][ T7842] [ 189.091980][ T7842] dump_stack_lvl+0xe8/0x150 [ 189.092011][ T7842] should_fail_ex+0x3eb/0x540 [ 189.092040][ T7842] should_failslab+0xa8/0x100 [ 189.092071][ T7842] __kmalloc_cache_noprof+0x9e/0x600 [ 189.092091][ T7842] ? hugetlbfs_init_fs_context+0x53/0x350 [ 189.092130][ T7842] ? hugetlbfs_init_fs_context+0x53/0x350 [ 189.092165][ T7842] hugetlbfs_init_fs_context+0x53/0x350 [ 189.092197][ T7842] alloc_fs_context+0x99e/0xd00 [ 189.092239][ T7842] __se_sys_fsopen+0x118/0x370 [ 189.092278][ T7842] do_syscall_64+0x166/0x520 [ 189.092303][ T7842] ? trace_irq_disable+0x3b/0x140 [ 189.092323][ T7842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.092340][ T7842] ? clear_bhb_loop+0x70/0xc0 [ 189.092360][ T7842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.092376][ T7842] RIP: 0033:0x7f5740b9f559 [ 189.092391][ T7842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.092405][ T7842] RSP: 002b:00007f5741b49028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 189.092438][ T7842] RAX: ffffffffffffffda RBX: 00007f5740e25fa0 RCX: 00007f5740b9f559 [ 189.092456][ T7842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 189.092471][ T7842] RBP: 00007f5740c36b50 R08: 0000000000000000 R09: 0000000000000000 [ 189.092485][ T7842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.092498][ T7842] R13: 00007f5740e26038 R14: 00007f5740e25fa0 R15: 00007ffd0f7616c8 [ 189.092534][ T7842] [ 192.268692][ T7842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.495475][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 192.766492][ T5709] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 192.830943][ T7867] trusted_key: encrypted_key: insufficient parameters specified [ 192.831925][ T7867] Could not find key with description: [syz] [ 192.831937][ T7867] process_request_key_err: No key [ 192.831944][ T7867] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 192.831953][ T7867] One or more global auth toks could not properly register; rc = [-2] [ 192.831982][ T7867] Error validating options; rc = [-2] [ 192.971931][ T5709] usb 2-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 192.972988][ T5709] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.973014][ T5709] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 192.973072][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.062867][ T5709] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 193.422660][ T7891] FAULT_INJECTION: forcing a failure. [ 193.422660][ T7891] name failslab, interval 1, probability 0, space 0, times 0 [ 193.422696][ T7891] CPU: 1 UID: 0 PID: 7891 Comm: syz.2.653 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.422725][ T7891] Tainted: [L]=SOFTLOCKUP [ 193.422732][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.422749][ T7891] Call Trace: [ 193.422758][ T7891] [ 193.422767][ T7891] dump_stack_lvl+0xe8/0x150 [ 193.422804][ T7891] should_fail_ex+0x3eb/0x540 [ 193.422843][ T7891] should_failslab+0xa8/0x100 [ 193.422875][ T7891] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 193.422901][ T7891] ? x509_cert_parse+0x2ee/0x7a0 [ 193.422928][ T7891] ? x509_cert_parse+0x2ee/0x7a0 [ 193.422963][ T7891] kmemdup_noprof+0x2b/0x70 [ 193.422985][ T7891] x509_cert_parse+0x2ee/0x7a0 [ 193.423018][ T7891] x509_key_preparse+0x64/0x6d0 [ 193.423048][ T7891] ? down_read+0x2b9/0x320 [ 193.423091][ T7891] asymmetric_key_preparse+0xb9/0x1b0 [ 193.423121][ T7891] __key_create_or_update+0x360/0xab0 [ 193.423163][ T7891] ? __pfx___key_create_or_update+0x10/0x10 [ 193.423192][ T7891] ? lookup_user_key+0x112c/0x12c0 [ 193.423239][ T7891] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 193.423283][ T7891] key_create_or_update+0x42/0x60 [ 193.423319][ T7891] __se_sys_add_key+0x349/0x420 [ 193.423346][ T7891] ? __pfx___se_sys_add_key+0x10/0x10 [ 193.423379][ T7891] ? __x64_sys_add_key+0x20/0xc0 [ 193.423404][ T7891] do_syscall_64+0x166/0x520 [ 193.423435][ T7891] ? trace_irq_disable+0x3b/0x140 [ 193.423462][ T7891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.423485][ T7891] ? clear_bhb_loop+0x70/0xc0 [ 193.423511][ T7891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.423531][ T7891] RIP: 0033:0x7f5740b9f559 [ 193.423552][ T7891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.423570][ T7891] RSP: 002b:00007f5741b49028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 193.423606][ T7891] RAX: ffffffffffffffda RBX: 00007f5740e25fa0 RCX: 00007f5740b9f559 [ 193.423624][ T7891] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 193.423639][ T7891] RBP: 00007f5740c36b50 R08: ffffffffffffffff R09: 0000000000000000 [ 193.423655][ T7891] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 193.423669][ T7891] R13: 00007f5740e26038 R14: 00007f5740e25fa0 R15: 00007ffd0f7616c8 [ 193.423707][ T7891] [ 193.780792][ T5709] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 193.946905][ T5709] usb 4-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 193.948470][ T5709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.948495][ T5709] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 193.948613][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.047914][ T5709] usb 4-1: interface 2 not found [ 194.282909][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.292186][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.375254][ T7886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.375953][ T7886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.436141][ T5709] usb 4-1: USB disconnect, device number 36 [ 194.957646][ T7916] loop5: detected capacity change from 0 to 7 [ 194.963700][ T7916] Dev loop5: unable to read RDB block 7 [ 194.963760][ T7916] loop5: unable to read partition table [ 194.963938][ T7916] loop5: partition table beyond EOD, truncated [ 194.963986][ T7916] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑû) failed (rc=-5) [ 195.235813][ T5644] usb 2-1: USB disconnect, device number 41 [ 195.241029][ T5644] idmouse 2-1:1.0: disconnected [ 195.254938][ T5709] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 195.268679][ T7924] netlink: 'syz.3.662': attribute type 10 has an invalid length. [ 195.286912][ T7924] team0: Cannot enslave team device to itself [ 195.414222][ T5709] usb 3-1: Using ep0 maxpacket: 32 [ 195.415104][ T5709] usb 3-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 195.416144][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.416165][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.416192][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.418394][ T5709] usb 3-1: config 0 descriptor?? [ 195.422000][ T5709] hub 3-1:0.0: USB hub found [ 195.606521][ T5742] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 195.665577][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.666316][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.769647][ T5742] usb 4-1: New USB device found: idVendor=2b13, idProduct=0bee, bcdDevice=ee.90 [ 195.770713][ T5742] usb 4-1: config 10 has an invalid interface number: 177 but max is 0 [ 195.770741][ T5742] usb 4-1: config 10 has no interface number 0 [ 195.770779][ T5742] usb 4-1: config 10 interface 177 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 195.770822][ T5742] usb 4-1: config 10 interface 177 altsetting 129 endpoint 0xA has invalid maxpacket 28967, setting to 64 [ 195.770843][ T5742] usb 4-1: config 10 interface 177 altsetting 129 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 195.770862][ T5742] usb 4-1: config 10 interface 177 altsetting 129 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 195.770880][ T5742] usb 4-1: config 10 interface 177 altsetting 129 endpoint 0x85 has invalid maxpacket 24936, setting to 1024 [ 195.770900][ T5742] usb 4-1: config 10 interface 177 altsetting 129 bulk endpoint 0x85 has invalid maxpacket 1024 [ 195.770923][ T5742] usb 4-1: config 10 interface 177 altsetting 129 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 195.770967][ T5742] usb 4-1: config 10 interface 177 has no altsetting 0 [ 195.773205][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.773250][ T5742] usb 4-1: Product: æ–ä§å¨£èœ´ãª»ÐŠè Žå±™ä¼§ë±²Ã˜çœ¯í„˜æ¥¶ä˜®ï´»è…⃣㇊姑ᔴ⛣鋞⪌é¤äŒ½ì¾‰æ°­î¤žï›¿á•²ï¦œê•›ì‰­ä¯§ïˆˆç±«îœ¿ä‘«áˆ–䚳敿à·ç¬”ㇷ⛶翟姦é¶à¢—é“㸑ìˆæ‚¬ê¹¿åƒ¶ë–¶î´¹â£³è¿€ç’¯ì ›åƒè«†è˜ ã—†ã¬ç¹éƒ³ç¶…顶ꭊ瞤꛶꒶߷莄䈘ྴ墄탖ï–æ¿žçˆê›¿ [ 195.773274][ T5742] usb 4-1: Manufacturer: ã©å‰·â›œç¨–ê¬î¹é¬…椪零尯è…ﭔꄈá¢å†›çž’ê¿‹ì‘‚á±áº…෰樥悗╸㻭ꩌî¾à¡ì”†ê¼¸çºá‰î¬¥è±—㊀졈ᷟ巳쭊蘥峒飻α⛼⫊뷹뗽븗汉዆ [ 195.773292][ T5742] usb 4-1: SerialNumber: á¥ë¥žì©¿ï¬ƒìŽ·á‹Šï¸ˆÍ¢æ¥Œæ„¯æ®´ê´êƒœíˆ›ï„‡ë­å€±ä¡ªà«¿ç¬“쌭宖壮ኚ贡ኮ⒫먜䬷æ¯â¾£ë±«î´®Ø…é‡Ò¦îœ®ç‚¢è‹¥å¸ èª«éŒ¼ç¨—엠蒙â¢å‘¸á§³ç‰ì˜‘㓕倫â¥ïŒ¹ë‰©ä¶ïŽ½ä¯¦ê¨•ï¦¦ã„´ä¡¡à ¯é–†ê·œæ‰¥î‚왫ℵè£ì¦¹è‹•á¹¸ê´©éŽºë³˜æŒ²ï€Ÿå°‹åŠŸî‰—漄歯벙å“礽㌱듕ঔé“滃䉠羀䃸ꕖ骗롛岘臉칾頣⋋㫞ã£ãŽ‡ã›´ë¥œï™’솃瀢薖췭͟䕄ມᧅ㗶 [ 195.786954][ T7924] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 196.003919][ T7927] FAULT_INJECTION: forcing a failure. [ 196.003919][ T7927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.003956][ T7927] CPU: 0 UID: 0 PID: 7927 Comm: syz.1.663 Tainted: G L syzkaller #0 PREEMPT(full) [ 196.003984][ T7927] Tainted: [L]=SOFTLOCKUP [ 196.003991][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 196.004004][ T7927] Call Trace: [ 196.004011][ T7927] [ 196.004024][ T7927] dump_stack_lvl+0xe8/0x150 [ 196.004052][ T7927] should_fail_ex+0x3eb/0x540 [ 196.004106][ T7927] _copy_from_user+0x2d/0xb0 [ 196.004127][ T7927] ___sys_sendmsg+0x1c6/0x360 [ 196.004154][ T7927] ? __lock_acquire+0x747/0x2de0 [ 196.004181][ T7927] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.004205][ T7927] ? __schedule+0x17f3/0x5830 [ 196.004272][ T7927] ? __fget_files+0x3a2/0x420 [ 196.004295][ T7927] ? __fget_files+0x2a/0x420 [ 196.004328][ T7927] __x64_sys_sendmsg+0x1b1/0x290 [ 196.004352][ T7927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.004407][ T7927] do_syscall_64+0x166/0x520 [ 196.004437][ T7927] ? trace_irq_disable+0x3b/0x140 [ 196.004462][ T7927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.004485][ T7927] ? clear_bhb_loop+0x70/0xc0 [ 196.004504][ T7927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.004519][ T7927] RIP: 0033:0x7feb54b9f559 [ 196.004547][ T7927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.004566][ T7927] RSP: 002b:00007feb55a2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.004588][ T7927] RAX: ffffffffffffffda RBX: 00007feb54e25fa0 RCX: 00007feb54b9f559 [ 196.004603][ T7927] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 196.004616][ T7927] RBP: 00007feb55a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 196.004633][ T7927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.004642][ T7927] R13: 00007feb54e26038 R14: 00007feb54e25fa0 R15: 00007ffca5a5f0b8 [ 196.004666][ T7927] [ 196.105474][ T5709] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 196.242504][ T5709] usbhid 3-1:0.0: can't add hid device: -71 [ 196.242645][ T5709] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 196.280785][ T5709] usb 3-1: USB disconnect, device number 28 [ 196.328479][ T7922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.662'. [ 196.584630][ T5742] usb-storage 4-1:10.177: USB Mass Storage device detected [ 196.648430][ T5742] usb 4-1: USB disconnect, device number 37 [ 197.070030][ T7940] ubi: bad wear-leveling threshold 813332851 [ 197.264472][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.264918][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.322993][ T7947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.671'. [ 197.326075][ T5742] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 197.490475][ T7949] smpboot: CPU 1 is now offline [ 197.499318][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.513420][ T5741] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 197.514314][ T5742] usb 3-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 197.538258][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.538277][ T5742] usb 3-1: Product: syz [ 197.538288][ T5742] usb 3-1: Manufacturer: syz [ 197.538298][ T5742] usb 3-1: SerialNumber: syz [ 197.680052][ T5741] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 197.680961][ T5741] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 197.680978][ T5741] usb 2-1: config 1 has no interface number 0 [ 197.682925][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.682942][ T5741] usb 2-1: Product: syz [ 197.682953][ T5741] usb 2-1: Manufacturer: syz [ 197.682963][ T5741] usb 2-1: SerialNumber: syz [ 197.744788][ T5741] usb 2-1: 3:0 : does not exist [ 197.744807][ T5741] usb 2-1: 3:0 : does not exist [ 197.915926][ T5796] usb 2-1: USB disconnect, device number 42 [ 198.553411][ T5796] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 198.714192][ T5796] usb 4-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 198.719369][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.719389][ T5796] usb 4-1: Product: syz [ 198.719400][ T5796] usb 4-1: Manufacturer: syz [ 198.719410][ T5796] usb 4-1: SerialNumber: syz [ 198.749938][ T5796] usb 4-1: config 0 descriptor?? [ 198.769070][ T5796] hub 4-1:0.0: bad descriptor, ignoring hub [ 198.769091][ T5796] hub 4-1:0.0: probe with driver hub failed with error -5 [ 198.965692][ T5742] rtl8150 3-1:1.0: couldn't reset the device [ 198.974129][ T5742] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 199.000163][ T5796] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 199.050589][ T7978] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 199.092818][ T5796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.094974][ T5796] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 199.095016][ T5796] usb 4-1: media controller created [ 199.177721][ T5796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.358454][ T5796] DVB: Unable to find symbol dib7000p_attach() [ 199.358489][ T5796] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 199.461028][ T5796] rc_core: IR keymap rc-dib0700-rc5 not found [ 199.461042][ T5796] Registered IR keymap rc-empty [ 199.461778][ T5796] dvb-usb: could not initialize remote control. [ 199.461787][ T5796] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 199.512031][ T5796] usb 4-1: USB disconnect, device number 38 [ 199.597179][ T7985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.682'. [ 199.616356][ T5796] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 200.347337][ T5644] usb 3-1: USB disconnect, device number 29 [ 200.855643][ T8018] FAULT_INJECTION: forcing a failure. [ 200.855643][ T8018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.855669][ T8018] CPU: 0 UID: 0 PID: 8018 Comm: syz.2.695 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.855690][ T8018] Tainted: [L]=SOFTLOCKUP [ 200.855695][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.855704][ T8018] Call Trace: [ 200.855710][ T8018] [ 200.855716][ T8018] dump_stack_lvl+0xe8/0x150 [ 200.855743][ T8018] should_fail_ex+0x3eb/0x540 [ 200.855771][ T8018] _copy_from_iter+0x1d3/0x1680 [ 200.855798][ T8018] ? _copy_from_iter+0x21b/0x1680 [ 200.855819][ T8018] ? sock_alloc_send_pskb+0xc87/0xd90 [ 200.855842][ T8018] ? __pfx__copy_from_iter+0x10/0x10 [ 200.855867][ T8018] ? __pfx__copy_from_iter+0x10/0x10 [ 200.855893][ T8018] copy_page_from_iter+0x219/0x2d0 [ 200.855917][ T8018] skb_copy_datagram_from_iter+0x2f4/0x720 [ 200.855948][ T8018] packet_sendmsg+0x390b/0x5330 [ 200.855981][ T8018] ? futex_unqueue+0x22/0x240 [ 200.856002][ T8018] ? futex_unqueue+0x22/0x240 [ 200.856022][ T8018] ? futex_hash_prctl+0x1b8/0x310 [ 200.856043][ T8018] ? __futex_wait+0x1fd/0x470 [ 200.856062][ T8018] ? __lock_acquire+0x747/0x2de0 [ 200.856081][ T8018] ? __lock_acquire+0x747/0x2de0 [ 200.856101][ T8018] ? __pfx_futex_wake_mark+0x10/0x10 [ 200.856121][ T8018] ? __pfx_packet_sendmsg+0x10/0x10 [ 200.856143][ T8018] ? aa_sk_perm+0x6ff/0x8f0 [ 200.856167][ T8018] ? rwsem_del_wake_waiter+0x2a2/0x2d0 [ 200.856189][ T8018] ? __pfx_aa_sk_perm+0x10/0x10 [ 200.856211][ T8018] ? aa_sock_msg_perm+0x144/0x210 [ 200.856235][ T8018] ? apparmor_socket_sendmsg+0x98/0x360 [ 200.856255][ T8018] ? __pfx_packet_sendmsg+0x10/0x10 [ 200.856277][ T8018] sock_sendmsg_nosec+0x14e/0x190 [ 200.856293][ T8018] __sys_sendto+0x408/0x5a0 [ 200.856315][ T8018] ? __pfx___sys_sendto+0x10/0x10 [ 200.856351][ T8018] ? rcu_is_watching+0x16/0xb0 [ 200.856386][ T8018] __x64_sys_sendto+0xde/0x100 [ 200.856407][ T8018] do_syscall_64+0x166/0x520 [ 200.856429][ T8018] ? trace_irq_disable+0x3b/0x140 [ 200.856449][ T8018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.856464][ T8018] ? clear_bhb_loop+0x70/0xc0 [ 200.856483][ T8018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.856498][ T8018] RIP: 0033:0x7f5740b9f559 [ 200.856512][ T8018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.856524][ T8018] RSP: 002b:00007f5741b49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 200.856559][ T8018] RAX: ffffffffffffffda RBX: 00007f5740e25fa0 RCX: 00007f5740b9f559 [ 200.856571][ T8018] RDX: 000000000000fef2 RSI: 00002000000002c0 RDI: 0000000000000005 [ 200.856581][ T8018] RBP: 00007f5740c36b50 R08: 0000200000000340 R09: 0000000000000014 [ 200.856591][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.856601][ T8018] R13: 00007f5740e26038 R14: 00007f5740e25fa0 R15: 00007ffd0f7616c8 [ 200.856624][ T8018] [ 201.533111][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.699'. [ 201.543140][ T5796] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 201.648439][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 201.731001][ T5796] usb 3-1: not running at top speed; connect to a high speed hub [ 201.731030][ T5796] usb 3-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 201.734486][ T5796] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.772426][ T5796] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 201.772448][ T5796] usb 3-1: Product: syz [ 201.772458][ T5796] usb 3-1: Manufacturer: syz [ 201.809175][ T5796] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 202.092758][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 202.153396][ T8020] program syz.2.696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.262810][ T5796] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 202.263165][ T5796] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 202.263203][ T5796] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 202.264481][ T5796] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 202.333074][ T5796] usb 3-1: USB disconnect, device number 30 [ 203.344207][ T8060] FAULT_INJECTION: forcing a failure. [ 203.344207][ T8060] name fail_futex, interval 1, probability 0, space 0, times 0 [ 203.344234][ T8060] CPU: 0 UID: 0 PID: 8060 Comm: syz.1.712 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.344255][ T8060] Tainted: [L]=SOFTLOCKUP [ 203.344261][ T8060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 203.344271][ T8060] Call Trace: [ 203.344277][ T8060] [ 203.344284][ T8060] dump_stack_lvl+0xe8/0x150 [ 203.344313][ T8060] should_fail_ex+0x3eb/0x540 [ 203.344341][ T8060] get_futex_key+0x1ab/0x1410 [ 203.344373][ T8060] ? __pfx_get_futex_key+0x10/0x10 [ 203.344401][ T8060] futex_wake+0x119/0x5f0 [ 203.344422][ T8060] ? __pfx_futex_wake+0x10/0x10 [ 203.344442][ T8060] ? __raw_spin_lock_init+0x45/0x100 [ 203.344473][ T8060] do_futex+0x458/0x4e0 [ 203.344495][ T8060] ? __asan_memcpy+0x40/0x70 [ 203.344515][ T8060] ? __pfx_do_futex+0x10/0x10 [ 203.344545][ T8060] __se_sys_futex+0x3a8/0x450 [ 203.344574][ T8060] ? __pfx___se_sys_futex+0x10/0x10 [ 203.344597][ T8060] ? rcu_is_watching+0x16/0xb0 [ 203.344623][ T8060] ? __x64_sys_futex+0x21/0xf0 [ 203.344649][ T8060] do_syscall_64+0x166/0x520 [ 203.344674][ T8060] ? trace_irq_disable+0x3b/0x140 [ 203.344694][ T8060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.344710][ T8060] ? clear_bhb_loop+0x70/0xc0 [ 203.344729][ T8060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.344745][ T8060] RIP: 0033:0x7feb54b9f559 [ 203.344759][ T8060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.344773][ T8060] RSP: 002b:00007feb55a2c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 203.344790][ T8060] RAX: ffffffffffffffda RBX: 00007feb54e25fa8 RCX: 00007feb54b9f559 [ 203.344802][ T8060] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feb54e25fac [ 203.344812][ T8060] RBP: 00007feb54e25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 203.344822][ T8060] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 203.344832][ T8060] R13: 00007feb54e26038 R14: 00007ffca5a5efd0 R15: 00007ffca5a5f0b8 [ 203.344856][ T8060] [ 204.076180][ T8053] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.077459][ T8053] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 204.100706][ T8053] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 204.103704][ T8053] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 204.103782][ T8053] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 204.130698][ T8053] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 204.133926][ T8053] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.134003][ T8053] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 204.160972][ T8053] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.161061][ T8053] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.164226][ T8053] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 204.447066][ T5796] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 204.607785][ T5796] usb 2-1: Using ep0 maxpacket: 32 [ 204.608840][ T5796] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 204.609874][ T5796] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 204.609898][ T5796] usb 2-1: config 0 has no interface number 0 [ 204.609934][ T5796] usb 2-1: config 0 interface 184 has no altsetting 0 [ 204.611747][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.611766][ T5796] usb 2-1: Product: syz [ 204.611776][ T5796] usb 2-1: Manufacturer: syz [ 204.611787][ T5796] usb 2-1: SerialNumber: syz [ 204.632779][ T5796] usb 2-1: config 0 descriptor?? [ 204.775694][ T8088] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 204.775736][ T8088] block device autoloading is deprecated and will be removed. [ 204.972655][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 205.130901][ T10] usb 4-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 205.131909][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 205.131927][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.131959][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 205.131995][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.133428][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 205.133445][ T10] usb 4-1: Product: syz [ 205.133455][ T10] usb 4-1: Manufacturer: syz [ 205.231014][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 205.233292][ T5796] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 205.233314][ T5796] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 205.233329][ T5796] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 205.233500][ T5796] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 205.397158][ T5646] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.174564][ T10] usb 4-1: USB disconnect, device number 39 [ 206.251390][ T5646] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.336844][ T5646] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.336901][ T5646] Bluetooth: hci3: command 0x0406 tx timeout [ 206.579593][ T8093] netlink: 'syz.1.714': attribute type 5 has an invalid length. [ 206.755335][ T8095] netlink: NAT attribute has 8 unknown bytes [ 206.755363][ T8095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.762623][ T8095] netlink: 'syz.3.720': attribute type 3 has an invalid length. [ 206.762644][ T8095] netlink: 'syz.3.720': attribute type 3 has an invalid length. [ 207.618184][ T5642] Bluetooth: hci1: command 0x0c1a tx timeout [ 208.472281][ T5642] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.561318][ T5646] Bluetooth: hci2: command 0x0c1a tx timeout [ 208.562026][ T5642] Bluetooth: hci3: command 0x0406 tx timeout [ 208.619798][ T5644] usb 2-1: USB disconnect, device number 43 [ 208.783354][ T8131] 9p: Bad value for 'source' [ 209.361759][ T8148] FAULT_INJECTION: forcing a failure. [ 209.361759][ T8148] name failslab, interval 1, probability 0, space 0, times 0 [ 209.361884][ T8148] CPU: 0 UID: 0 PID: 8148 Comm: syz.2.735 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.361906][ T8148] Tainted: [L]=SOFTLOCKUP [ 209.361911][ T8148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 209.361921][ T8148] Call Trace: [ 209.361927][ T8148] [ 209.361933][ T8148] dump_stack_lvl+0xe8/0x150 [ 209.361961][ T8148] should_fail_ex+0x3eb/0x540 [ 209.361990][ T8148] should_failslab+0xa8/0x100 [ 209.362013][ T8148] __kmalloc_noprof+0xf9/0x710 [ 209.362032][ T8148] ? tomoyo_encode+0x2ad/0x570 [ 209.362073][ T8148] ? tomoyo_encode+0x2ad/0x570 [ 209.362101][ T8148] tomoyo_encode+0x2ad/0x570 [ 209.362130][ T8148] tomoyo_realpath_from_path+0x5fd/0x640 [ 209.362162][ T8148] ? tomoyo_path_number_perm+0x219/0x5f0 [ 209.362183][ T8148] tomoyo_path_number_perm+0x246/0x5f0 [ 209.362206][ T8148] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 209.362225][ T8148] ? __lock_acquire+0x747/0x2de0 [ 209.362272][ T8148] ? __fget_files+0x2a/0x420 [ 209.362292][ T8148] ? __fget_files+0x2a/0x420 [ 209.362310][ T8148] ? __fget_files+0x2a/0x420 [ 209.362331][ T8148] security_file_ioctl+0xc3/0x2a0 [ 209.362352][ T8148] __se_sys_ioctl+0x47/0x170 [ 209.362376][ T8148] do_syscall_64+0x166/0x520 [ 209.362399][ T8148] ? trace_irq_disable+0x3b/0x140 [ 209.362420][ T8148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.362436][ T8148] ? clear_bhb_loop+0x70/0xc0 [ 209.362456][ T8148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.362472][ T8148] RIP: 0033:0x7f5740b9f559 [ 209.362487][ T8148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.362501][ T8148] RSP: 002b:00007f5741b49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.362518][ T8148] RAX: ffffffffffffffda RBX: 00007f5740e25fa0 RCX: 00007f5740b9f559 [ 209.362530][ T8148] RDX: 0000200000000480 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 209.362541][ T8148] RBP: 00007f5741b49090 R08: 0000000000000000 R09: 0000000000000000 [ 209.362551][ T8148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.362560][ T8148] R13: 00007f5740e26038 R14: 00007f5740e25fa0 R15: 00007ffd0f7616c8 [ 209.362585][ T8148] [ 209.362599][ T8148] ERROR: Out of memory at tomoyo_realpath_from_path. [ 209.533768][ T5796] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 209.796811][ T5796] usb 2-1: New USB device found: idVendor=05ac, idProduct=1440, bcdDevice=0.00 [ 209.797994][ T5796] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 209.798018][ T5796] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.798098][ T5796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 209.798122][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.800725][ T5796] usb 2-1: config 0 descriptor?? [ 209.802798][ T8145] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.840900][ T5642] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.010702][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 210.045116][ T5796] input: HID 05ac:1440 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:1440.0009/input/input20 [ 210.088413][ T5796] appleir 0003:05AC:1440.0009: input,hiddev0,hidraw0: USB HID v0.04 Joystick [HID 05ac:1440] on usb-dummy_hcd.1-1/input0 [ 210.172753][ T10] usb 3-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 210.177917][ T10] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 210.177939][ T10] usb 3-1: config 0 has no interface number 0 [ 210.177967][ T10] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.229863][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.229886][ T10] usb 3-1: Product: syz [ 210.229897][ T10] usb 3-1: Manufacturer: syz [ 210.229908][ T10] usb 3-1: SerialNumber: syz [ 210.275926][ T10] usb 3-1: config 0 descriptor?? [ 210.294907][ T10] yurex 3-1:0.50: USB YUREX device now attached to Yurex #1 [ 210.310343][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 210.310364][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 210.310378][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3502 instead [ 210.310393][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x19c1 instead [ 210.310405][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 210.310418][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 210.310430][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 210.310446][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 210.310492][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 210.310517][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 210.310529][ T8151] jffs2: Further such events for this erase block will not be printed [ 210.317352][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 210.317390][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 210.317404][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3502 instead [ 210.317437][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x19c1 instead [ 210.317449][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 210.317462][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 210.317474][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 210.317490][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 210.571686][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 210.571719][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 210.571750][ T8151] jffs2: Further such events for this erase block will not be printed [ 210.572077][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 210.572090][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 210.572103][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x3502 instead [ 210.572117][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x19c1 instead [ 210.572152][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 210.572179][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 210.572192][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x3502 instead [ 210.572206][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x19c1 instead [ 210.572259][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 210.572272][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 210.572285][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x3502 instead [ 210.572299][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x19c1 instead [ 210.572351][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 210.572363][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 210.572376][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x3502 instead [ 210.572390][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x19c1 instead [ 210.572424][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 210.572436][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 210.572472][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x3502 instead [ 210.572486][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x19c1 instead [ 210.572521][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 210.572533][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 210.572546][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x3502 instead [ 210.572560][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x19c1 instead [ 210.572617][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 210.572629][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 210.572642][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x3502 instead [ 210.572656][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x19c1 instead [ 210.572690][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 210.572702][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 210.572715][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x3502 instead [ 210.572729][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x19c1 instead [ 210.572789][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 210.572802][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 210.572815][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x3502 instead [ 210.572830][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x19c1 instead [ 210.572864][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 210.572876][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 210.572941][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x3502 instead [ 210.572956][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x19c1 instead [ 210.572996][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 210.573009][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 210.573022][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x3502 instead [ 210.573037][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x19c1 instead [ 210.573097][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 210.573110][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 210.573124][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x3502 instead [ 210.573138][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x19c1 instead [ 210.573174][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 210.573187][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 210.573200][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x3502 instead [ 210.573229][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x19c1 instead [ 210.573266][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 210.573278][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 210.573292][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x3502 instead [ 210.703265][ T5642] Bluetooth: hci0: command 0x0c1a tx timeout [ 210.744442][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x19c1 instead [ 210.744491][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 210.744504][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 210.744517][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x3502 instead [ 210.744531][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x19c1 instead [ 210.744590][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 210.744603][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 210.744615][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x3502 instead [ 210.744629][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x19c1 instead [ 210.744664][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 210.744676][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 210.744688][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x3502 instead [ 210.744727][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x19c1 instead [ 210.744762][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 210.744775][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 210.744788][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x3502 instead [ 210.744802][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x19c1 instead [ 210.744836][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 210.744869][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 210.744883][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x3502 instead [ 210.744897][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x19c1 instead [ 210.744932][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 210.744944][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 210.744962][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x3502 instead [ 210.744976][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x19c1 instead [ 210.745035][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 210.745047][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 210.745060][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x3502 instead [ 210.745074][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x19c1 instead [ 210.745108][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 210.745120][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 210.745159][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x3502 instead [ 210.745173][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x19c1 instead [ 210.745211][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 210.745222][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 210.745234][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x3502 instead [ 210.745247][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x19c1 instead [ 210.745301][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 210.745313][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 210.745325][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x3502 instead [ 210.745339][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x19c1 instead [ 210.745371][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 210.745383][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 210.745395][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x3502 instead [ 210.745408][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x19c1 instead [ 210.745462][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 210.745474][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 210.745486][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x3502 instead [ 210.745517][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x19c1 instead [ 210.745551][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 210.745564][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 210.745577][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x3502 instead [ 210.745607][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x19c1 instead [ 210.745642][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 210.745654][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 210.745667][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x3502 instead [ 210.745681][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x19c1 instead [ 210.745715][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 210.745749][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 210.745762][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x3502 instead [ 210.745776][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x19c1 instead [ 210.745811][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 210.745823][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 210.745836][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x3502 instead [ 210.745850][ T8151] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x19c1 instead [ 210.745896][ T8151] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 210.745903][ T8151] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 210.779517][ T5642] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.164168][ T10] usb 3-1: USB disconnect, device number 31 [ 211.327342][ T10] yurex 3-1:0.50: USB YUREX #1 now disconnected [ 211.538439][ T5796] usb 2-1: USB disconnect, device number 44 [ 211.869050][ T8153] fido_id[8153]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 212.227987][ T8159] No control pipe specified [ 212.428229][ T8167] netlink: ct_mark mask cannot be 0 [ 212.428254][ T8167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.649507][ T5796] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 212.787385][ T8180] UBLK_F_QUIESCE requires UBLK_F_USER_RECOVERY [ 212.808086][ T5796] usb 4-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 212.810081][ T5796] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 212.810099][ T5796] usb 4-1: config 0 has no interface number 0 [ 212.810127][ T5796] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.812086][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.812102][ T5796] usb 4-1: Product: syz [ 212.812113][ T5796] usb 4-1: Manufacturer: syz [ 212.812123][ T5796] usb 4-1: SerialNumber: syz [ 212.843723][ T5796] usb 4-1: config 0 descriptor?? [ 212.920917][ T5796] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 213.114481][ T5795] usb 4-1: USB disconnect, device number 40 [ 213.139712][ T5795] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 213.175989][ T8187] netlink: 'syz.1.748': attribute type 2 has an invalid length. [ 213.176028][ T8187] netlink: 'syz.1.748': attribute type 2 has an invalid length. [ 213.608318][ T5796] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 213.710382][ T8196] syzkaller0: entered promiscuous mode [ 213.710400][ T8196] syzkaller0: entered allmulticast mode [ 213.776052][ T5796] usb 4-1: Using ep0 maxpacket: 32 [ 213.778003][ T5796] usb 4-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 213.807308][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.807330][ T5796] usb 4-1: Product: syz [ 213.807341][ T5796] usb 4-1: Manufacturer: syz [ 213.807351][ T5796] usb 4-1: SerialNumber: syz [ 213.809507][ T5796] usb 4-1: config 0 descriptor?? [ 213.853474][ T5796] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 214.114900][ T8201] device-mapper: table: 248:6: ram5 too small for target: start=128, len=11264, dev_size=8192 [ 214.114940][ T8201] device-mapper: core: Cannot calculate initial queue limits [ 214.114947][ T8201] device-mapper: ioctl: unable to set up device queue for new table. [ 214.280473][ T5795] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 214.441474][ T5795] usb 2-1: Using ep0 maxpacket: 16 [ 214.443062][ T5795] usb 2-1: New USB device found: idVendor=046d, idProduct=087c, bcdDevice=b0.7a [ 214.444021][ T5795] usb 2-1: config 64 has an invalid interface number: 238 but max is 0 [ 214.444039][ T5795] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 214.444054][ T5795] usb 2-1: config 64 has no interface number 0 [ 214.444074][ T5795] usb 2-1: config 64 interface 238 has no altsetting 0 [ 214.449146][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.449163][ T5795] usb 2-1: Product: syz [ 214.449174][ T5795] usb 2-1: Manufacturer: syz [ 214.449184][ T5795] usb 2-1: SerialNumber: syz [ 214.592783][ T8206] netlink: 'syz.2.755': attribute type 10 has an invalid length. [ 214.592801][ T8206] netlink: 55 bytes leftover after parsing attributes in process `syz.2.755'. [ 214.675264][ T8207] FAULT_INJECTION: forcing a failure. [ 214.675264][ T8207] name failslab, interval 1, probability 0, space 0, times 0 [ 214.675295][ T8207] CPU: 0 UID: 0 PID: 8207 Comm: syz.2.755 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.675318][ T8207] Tainted: [L]=SOFTLOCKUP [ 214.675324][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 214.675334][ T8207] Call Trace: [ 214.675341][ T8207] [ 214.675347][ T8207] dump_stack_lvl+0xe8/0x150 [ 214.675377][ T8207] should_fail_ex+0x3eb/0x540 [ 214.675406][ T8207] ? __pfx_dev_uevent_name+0x10/0x10 [ 214.675425][ T8207] should_failslab+0xa8/0x100 [ 214.675450][ T8207] __kmalloc_cache_noprof+0x9e/0x600 [ 214.675469][ T8207] ? kobject_uevent_env+0x289/0x9e0 [ 214.675491][ T8207] ? kobject_uevent_env+0x289/0x9e0 [ 214.675514][ T8207] ? __pfx_dev_uevent_name+0x10/0x10 [ 214.675532][ T8207] kobject_uevent_env+0x289/0x9e0 [ 214.675560][ T8207] gadget_bind_driver+0x599/0x9e0 [ 214.675591][ T8207] ? __pfx_gadget_bind_driver+0x10/0x10 [ 214.675612][ T8207] really_probe+0x254/0xae0 [ 214.675653][ T8207] __driver_probe_device+0x1e8/0x360 [ 214.675679][ T8207] driver_probe_device+0x4f/0x240 [ 214.675706][ T8207] __driver_attach+0x34e/0x630 [ 214.675732][ T8207] bus_for_each_dev+0x23b/0x2c0 [ 214.675750][ T8207] ? __pfx___driver_attach+0x10/0x10 [ 214.675773][ T8207] ? __pfx_bus_for_each_dev+0x10/0x10 [ 214.675794][ T8207] ? do_raw_spin_unlock+0xf5/0x200 [ 214.675822][ T8207] bus_add_driver+0x38f/0x6e0 [ 214.675846][ T8207] driver_register+0x23a/0x320 [ 214.675882][ T8207] usb_gadget_register_driver_owner+0xf9/0x270 [ 214.675907][ T8207] raw_ioctl+0x1541/0x41c0 [ 214.675928][ T8207] ? tomoyo_path_number_perm+0x219/0x5f0 [ 214.675952][ T8207] ? do_vfs_ioctl+0x116f/0x1530 [ 214.675978][ T8207] ? __pfx_raw_ioctl+0x10/0x10 [ 214.676021][ T8207] ? __fget_files+0x2a/0x420 [ 214.676041][ T8207] ? __fget_files+0x2a/0x420 [ 214.676059][ T8207] ? __fget_files+0x2a/0x420 [ 214.676080][ T8207] ? bpf_lsm_file_ioctl+0x9/0x20 [ 214.676107][ T8207] ? __pfx_raw_ioctl+0x10/0x10 [ 214.676124][ T8207] __se_sys_ioctl+0xfc/0x170 [ 214.676148][ T8207] do_syscall_64+0x166/0x520 [ 214.676173][ T8207] ? trace_irq_disable+0x3b/0x140 [ 214.676194][ T8207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.676210][ T8207] ? clear_bhb_loop+0x70/0xc0 [ 214.676230][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.676247][ T8207] RIP: 0033:0x7f5740b9f1eb [ 214.676262][ T8207] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 214.676275][ T8207] RSP: 002b:00007f5741b25f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.676293][ T8207] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f5740b9f1eb [ 214.676304][ T8207] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 214.676313][ T8207] RBP: 00007f5741b26fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 214.676324][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.676333][ T8207] R13: 0000200000000880 R14: 0000000000000002 R15: 0000000000000000 [ 214.676356][ T8207] [ 215.191375][ T5795] uvcvideo 2-1:64.238: Found Unit with invalid ID 0 [ 215.191445][ T5795] uvcvideo 2-1:64.238: Found UVC 0.00 device syz (046d:087c) [ 215.191467][ T5795] uvcvideo 2-1:64.238: No valid video chain found. [ 215.197580][ T5795] usb 2-1: USB disconnect, device number 45 [ 215.369584][ T5743] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 215.530443][ T5743] usb 3-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 215.532025][ T5743] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 215.532048][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 163, setting to 64 [ 215.534268][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.534285][ T5743] usb 3-1: Product: syz [ 215.534296][ T5743] usb 3-1: Manufacturer: syz [ 215.534325][ T5743] usb 3-1: SerialNumber: syz [ 215.537102][ T5743] usb 3-1: config 0 descriptor?? [ 215.539309][ T8207] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 215.614222][ T5743] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0292 [ 215.854177][ T8213] FAULT_INJECTION: forcing a failure. [ 215.854177][ T8213] name failslab, interval 1, probability 0, space 0, times 0 [ 215.854203][ T8213] CPU: 0 UID: 0 PID: 8213 Comm: syz.0.757 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.854224][ T8213] Tainted: [L]=SOFTLOCKUP [ 215.854230][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 215.854240][ T8213] Call Trace: [ 215.854245][ T8213] [ 215.854252][ T8213] dump_stack_lvl+0xe8/0x150 [ 215.854279][ T8213] should_fail_ex+0x3eb/0x540 [ 215.854311][ T8213] should_failslab+0xa8/0x100 [ 215.854334][ T8213] __kmalloc_noprof+0xf9/0x710 [ 215.854352][ T8213] ? tomoyo_encode+0x2ad/0x570 [ 215.854374][ T8213] ? tomoyo_encode+0x2ad/0x570 [ 215.854401][ T8213] tomoyo_encode+0x2ad/0x570 [ 215.854428][ T8213] tomoyo_realpath_from_path+0x5fd/0x640 [ 215.854458][ T8213] ? tomoyo_path_number_perm+0x219/0x5f0 [ 215.854478][ T8213] tomoyo_path_number_perm+0x246/0x5f0 [ 215.854500][ T8213] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 215.854518][ T8213] ? __lock_acquire+0x747/0x2de0 [ 215.854563][ T8213] ? __fget_files+0x2a/0x420 [ 215.854582][ T8213] ? __fget_files+0x2a/0x420 [ 215.854600][ T8213] ? __fget_files+0x2a/0x420 [ 215.854620][ T8213] security_file_ioctl+0xc3/0x2a0 [ 215.854640][ T8213] __se_sys_ioctl+0x47/0x170 [ 215.854663][ T8213] do_syscall_64+0x166/0x520 [ 215.854687][ T8213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.854703][ T8213] ? clear_bhb_loop+0x70/0xc0 [ 215.854722][ T8213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.854737][ T8213] RIP: 0033:0x7f13c539f559 [ 215.854751][ T8213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.854765][ T8213] RSP: 002b:00007f13c61e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.854781][ T8213] RAX: ffffffffffffffda RBX: 00007f13c5625fa0 RCX: 00007f13c539f559 [ 215.854792][ T8213] RDX: 0000200000000380 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 215.854802][ T8213] RBP: 00007f13c61e1090 R08: 0000000000000000 R09: 0000000000000000 [ 215.854812][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.854821][ T8213] R13: 00007f13c5626038 R14: 00007f13c5625fa0 R15: 00007fff96c50988 [ 215.854845][ T8213] [ 215.857789][ T8213] ERROR: Out of memory at tomoyo_realpath_from_path. [ 216.123076][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.123440][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.152620][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.153500][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.275221][ T8215] FAULT_INJECTION: forcing a failure. [ 216.275221][ T8215] name failslab, interval 1, probability 0, space 0, times 0 [ 216.275250][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: syz.0.758 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.275271][ T8215] Tainted: [L]=SOFTLOCKUP [ 216.275277][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 216.275286][ T8215] Call Trace: [ 216.275292][ T8215] [ 216.275301][ T8215] dump_stack_lvl+0xe8/0x150 [ 216.275329][ T8215] should_fail_ex+0x3eb/0x540 [ 216.275357][ T8215] should_failslab+0xa8/0x100 [ 216.275379][ T8215] ? copy_net_ns+0x1de/0x770 [ 216.275397][ T8215] kmem_cache_alloc_noprof+0x9c/0x600 [ 216.275412][ T8215] ? __kmalloc_noprof+0x387/0x710 [ 216.275430][ T8215] ? copy_net_ns+0x1ac/0x770 [ 216.275446][ T8215] ? copy_net_ns+0x1de/0x770 [ 216.275467][ T8215] copy_net_ns+0x1de/0x770 [ 216.275483][ T8215] ? copy_cgroup_ns+0x66b/0x890 [ 216.275508][ T8215] create_new_namespaces+0x3f0/0x6b0 [ 216.275533][ T8215] ? security_capable+0x7e/0x2c0 [ 216.275559][ T8215] unshare_nsproxy_namespaces+0x144/0x190 [ 216.275584][ T8215] ksys_unshare+0x532/0x890 [ 216.275608][ T8215] ? __pfx_ksys_unshare+0x10/0x10 [ 216.275632][ T8215] ? rcu_is_watching+0x16/0xb0 [ 216.275662][ T8215] __x64_sys_unshare+0x38/0x50 [ 216.275684][ T8215] do_syscall_64+0x166/0x520 [ 216.275707][ T8215] ? trace_irq_disable+0x3b/0x140 [ 216.275727][ T8215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.275744][ T8215] ? clear_bhb_loop+0x70/0xc0 [ 216.275763][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.275778][ T8215] RIP: 0033:0x7f13c539f559 [ 216.275793][ T8215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.275808][ T8215] RSP: 002b:00007f13c61e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 216.275824][ T8215] RAX: ffffffffffffffda RBX: 00007f13c5625fa0 RCX: 00007f13c539f559 [ 216.275836][ T8215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 216.275845][ T8215] RBP: 00007f13c5436b50 R08: 0000000000000000 R09: 0000000000000000 [ 216.275855][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.275864][ T8215] R13: 00007f13c5626038 R14: 00007f13c5625fa0 R15: 00007fff96c50988 [ 216.275888][ T8215] [ 216.847586][ T8220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.760'. [ 216.901445][ T8220] kvm: pic: non byte write [ 217.292040][ T5796] gspca_stk1135: reg_w 0x300 err -110 [ 217.293084][ T5796] gspca_stk1135: serial bus timeout: status=0x00 [ 217.293092][ T5796] gspca_stk1135: Sensor write failed [ 217.293116][ T5796] gspca_stk1135: serial bus timeout: status=0x00 [ 217.293123][ T5796] gspca_stk1135: Sensor write failed [ 217.293148][ T5796] gspca_stk1135: serial bus timeout: status=0x00 [ 217.293155][ T5796] gspca_stk1135: Sensor read failed [ 217.293179][ T5796] gspca_stk1135: serial bus timeout: status=0x00 [ 217.293185][ T5796] gspca_stk1135: Sensor read failed [ 217.293190][ T5796] gspca_stk1135: Detected sensor type unknown (0x0) [ 217.293221][ T5796] gspca_stk1135: serial bus timeout: status=0x00 [ 217.293228][ T5796] gspca_stk1135: Sensor read failed [ 217.293252][ T5796] gspca_stk1135: serial bus timeout: status=0x00 [ 217.293258][ T5796] gspca_stk1135: Sensor read failed [ 217.293283][ T5796] gspca_stk1135: serial bus timeout: status=0x00 [ 217.293289][ T5796] gspca_stk1135: Sensor write failed [ 217.293314][ T5796] gspca_stk1135: serial bus timeout: status=0x00 [ 217.293321][ T5796] gspca_stk1135: Sensor write failed [ 217.293411][ T5796] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 217.546495][ T5795] usb 4-1: USB disconnect, device number 41 [ 217.855043][ T5795] usb 3-1: USB disconnect, device number 32 [ 220.991541][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.782'. [ 221.049903][ T8277] tmpfs: User quota inode hardlimit too large. [ 221.714412][ T5646] Bluetooth: hci4: command 0x1003 tx timeout [ 221.714516][ T5642] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 222.113452][ T8290] netlink: 'syz.3.786': attribute type 5 has an invalid length. [ 222.786885][ T8305] device-mapper: ioctl: Target spec extends beyond end of parameters [ 222.786898][ T8305] device-mapper: ioctl: unable to find target [ 223.602463][ T5796] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 223.707648][ T5642] Bluetooth: hci1: SCO packet for unknown connection handle 256 [ 223.762418][ T5796] usb 3-1: New USB device found: idVendor=045e, idProduct=0775, bcdDevice=1.00 [ 223.763270][ T5796] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.763302][ T5796] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 223.764729][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 223.764746][ T5796] usb 3-1: Product: syz [ 223.764756][ T5796] usb 3-1: Manufacturer: syz [ 224.066807][ T8324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.068390][ T8324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.333234][ T5743] usb 3-1: USB disconnect, device number 33 [ 228.544676][ C0] sched: DL replenish lagged too much [ 263.562808][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.972808][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.365080][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.268174][ T36] INFO: task kworker/u8:20:5883 blocked for more than 152 seconds. [ 437.268200][ T36] Tainted: G L syzkaller #0 [ 437.268210][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.268217][ T36] task:kworker/u8:20 state:D stack:22568 pid:5883 tgid:5883 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 437.268270][ T36] Workqueue: events_unbound cfg80211_wiphy_work [ 437.268309][ T36] Call Trace: [ 437.268315][ T36] [ 437.268326][ T36] __schedule+0x17dd/0x5830 [ 437.268350][ T36] ? __lock_acquire+0x747/0x2de0 [ 437.268386][ T36] ? __pfx___schedule+0x10/0x10 [ 437.268412][ T36] ? lock_acquire+0x115/0x350 [ 437.268436][ T36] ? schedule+0x90/0x2b0 [ 437.268460][ T36] schedule+0x164/0x2b0 [ 437.268483][ T36] synchronize_rcu_expedited+0x60a/0x760 [ 437.268510][ T36] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 437.268534][ T36] ? __pfx_autoremove_wake_function+0x10/0x10 [ 437.268579][ T36] __sta_info_destroy+0x37/0x50 [ 437.268595][ T36] ieee80211_ibss_work+0x81d/0x1060 [ 437.268625][ T36] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 437.268650][ T36] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 437.268672][ T36] ? skb_dequeue+0x124/0x160 [ 437.268686][ T36] ? ieee80211_iface_work+0xca2/0xfa0 [ 437.268713][ T36] ? ieee80211_iface_work+0xef1/0xfa0 [ 437.268745][ T36] cfg80211_wiphy_work+0x29e/0x420 [ 437.268772][ T36] ? process_scheduled_works+0x97a/0x1630 [ 437.268795][ T36] process_scheduled_works+0xc3d/0x1630 [ 437.268839][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.268865][ T36] ? assign_work+0x3cf/0x5d0 [ 437.268890][ T36] worker_thread+0xa47/0xfb0 [ 437.268931][ T36] kthread+0x38b/0x480 [ 437.268948][ T36] ? __pfx_worker_thread+0x10/0x10 [ 437.268968][ T36] ? __pfx_kthread+0x10/0x10 [ 437.268985][ T36] ret_from_fork+0x514/0xb70 [ 437.269003][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 437.269018][ T36] ? __switch_to+0xc78/0x1410 [ 437.269043][ T36] ? __pfx_kthread+0x10/0x10 [ 437.269060][ T36] ret_from_fork_asm+0x1a/0x30 [ 437.269096][ T36] [ 437.269121][ T36] [ 437.269121][ T36] Showing all locks held in the system: [ 437.269132][ T36] locks held by kworker/0:0/10: 3, last CPU#0: [ 437.269143][ T36] #0: ffff8880371c6548 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.269191][ T36] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.269249][ T36] #2: ffff888032ffc888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 437.269288][ T36] locks held by kworker/u8:1/14: 2, last CPU#0: [ 437.269299][ T36] #0: ffff88807d4a8148 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.269344][ T36] #1: ffffc90000137c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.269392][ T36] locks held by khungtaskd/36: 1, last CPU#0: [ 437.269403][ T36] #0: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 437.269444][ T36] locks held by kworker/u8:3/53: 4, last CPU#0: [ 437.269455][ T36] #0: ffff88807cd33148 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.269500][ T36] #1: ffffc90000be7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.269543][ T36] #2: ffff888036ea5480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 437.269580][ T36] #3: ffff888032ffb4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 437.269618][ T36] locks held by kworker/u8:5/65: 2, last CPU#0: [ 437.269628][ T36] #0: ffff88803412f948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.269670][ T36] #1: ffffc9000207fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.269714][ T36] locks held by kswapd0/92: 2, last CPU#0: [ 437.269724][ T36] #0: ffffffff90294f60 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa53/0x3a20 [ 437.269761][ T36] #1: ffff8880377ac100 (&type->s_umount_key#55){++++}-{4:4}, at: super_cache_scan+0x94/0x4a0 [ 437.269809][ T36] locks held by kworker/u8:7/159: 3, last CPU#0: [ 437.269820][ T36] #0: ffff88807cd32948 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.269864][ T36] #1: ffffc9000208fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.269907][ T36] #2: ffff888035952cb0 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 437.269957][ T36] locks held by kworker/0:2/196: 2, last CPU#0: [ 437.269968][ T36] #0: ffff88813fe22548 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.270035][ T36] #1: ffffc900030cfc40 ((work_completion)(&br->mcast_gc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.270090][ T36] locks held by kworker/u8:9/2995: 3, last CPU#0: [ 437.270101][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.270144][ T36] #1: ffffc9000e057c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.270189][ T36] #2: ffff888035a00258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 437.270230][ T36] locks held by kworker/u8:10/3004: 2, last CPU#0: [ 437.270240][ T36] #0: ffff88807cd30948 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.270287][ T36] #1: ffffc9000e127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.270334][ T36] locks held by udevd/5007: 2, last CPU#0: [ 437.270345][ T36] #0: ffffffff90907b98 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 437.270393][ T36] #1: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 437.270434][ T36] locks held by getty/5397: 2, on CPU#0: [ 437.270445][ T36] #0: ffff8880341010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 437.270491][ T36] #1: ffffc900032532e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 437.270533][ T36] locks held by sshd-session/5627: 4, last CPU#0: [ 437.270544][ T36] #0: ffff88803481aa20 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 437.270589][ T36] #1: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x65/0x1b10 [ 437.270631][ T36] #2: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 437.270671][ T36] #3: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 437.270715][ T36] locks held by syz-executor/5628: 2, last CPU#0: [ 437.270726][ T36] #0: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 437.270765][ T36] #1: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 437.270806][ T36] locks held by syz-executor/5639: 2, last CPU#0: [ 437.270817][ T36] #0: ffffffff90907b98 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 437.270858][ T36] #1: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 437.270897][ T36] locks held by syz-executor/5640: 2, last CPU#0: [ 437.270908][ T36] #0: ffffffff90907b98 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 437.270949][ T36] #1: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 437.270988][ T36] locks held by syz-executor/5641: 5, last CPU#0: [ 437.270999][ T36] #0: ffffffff9023a5b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470 [ 437.271038][ T36] #1: ffff888013dfccc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18a/0x1e10 [ 437.271073][ T36] #2: ffff888033468340 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x277/0x1e10 [ 437.271112][ T36] #3: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 437.271150][ T36] #4: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 437.271190][ T36] locks held by kworker/0:3/5644: 3, on CPU#0: [ 437.271201][ T36] #0: ffff88813fe22d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.271254][ T36] #1: ffffc90003adfc40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.271292][ T36] #2: ffffffff90160aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 437.271337][ T36] locks held by kworker/0:4/5743: 2, last CPU#0: [ 437.271347][ T36] #0: ffff88802ffe0548 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.271392][ T36] #1: ffffc900047afc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.271466][ T36] locks held by kworker/0:6/5795: 3, last CPU#0: [ 437.271477][ T36] #0: ffff888033592d48 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.271522][ T36] #1: ffffc90004d4fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.271578][ T36] #2: ffff888035955270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 437.271616][ T36] locks held by kworker/0:7/5796: 4, last CPU#0: [ 437.271627][ T36] #0: ffff888066f06148 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.271672][ T36] #1: ffffc9000480fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.271729][ T36] #2: ffff888078816640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 437.271767][ T36] #3: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 437.271805][ T36] locks held by kworker/u8:13/5876: 4, on CPU#0: [ 437.271815][ T36] #0: ffff88807cd34948 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.271860][ T36] #1: ffffc900050a7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.271902][ T36] #2: ffff888036ea1480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 437.271938][ T36] #3: ffff888035955270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 437.271975][ T36] locks held by kworker/u8:14/5877: 3, last CPU#0: [ 437.271986][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272026][ T36] #1: ffffc90004f67c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272067][ T36] #2: ffff8880666d0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 437.272111][ T36] locks held by kworker/u8:18/5881: 4, last CPU#0: [ 437.272122][ T36] #0: ffff88807e27b948 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272162][ T36] #1: ffffc90005127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272203][ T36] #2: ffff88807fa19480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 437.272240][ T36] #3: ffff888032ffe640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 437.272277][ T36] locks held by kworker/u8:20/5883: 3, on CPU#0: [ 437.272287][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272328][ T36] #1: ffffc90005197c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272369][ T36] #2: ffff888066980800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 437.272418][ T36] locks held by kworker/u8:21/5884: 3, last CPU#0: [ 437.272429][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272469][ T36] #1: ffffc900051a7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272511][ T36] #2: ffff88807c247258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 437.272552][ T36] locks held by kworker/u8:22/5885: 3, last CPU#0: [ 437.272562][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272602][ T36] #1: ffffc9000501fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272644][ T36] #2: ffff88807a51d258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 437.272685][ T36] locks held by kworker/u8:23/5886: 3, last CPU#0: [ 437.272695][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272736][ T36] #1: ffffc900051b7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272776][ T36] #2: ffff888066240800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 437.272821][ T36] locks held by kworker/u8:26/5889: 4, last CPU#0: [ 437.272831][ T36] #0: ffff88807cd37148 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272875][ T36] #1: ffffc900051d7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.272916][ T36] #2: ffff88807fedd480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 437.272952][ T36] #3: ffff888035956640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 437.272988][ T36] locks held by kworker/u8:27/5890: 2, last CPU#0: [ 437.272999][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273039][ T36] #1: ffffc900051e7c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273092][ T36] locks held by kworker/u8:30/6774: 5, last CPU#0: [ 437.273102][ T36] #0: ffff888021ea3948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273140][ T36] #1: ffffc90005657c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273178][ T36] #2: ffff888037624100 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 437.273215][ T36] #3: ffff8880375c0cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1f1/0x4e0 [ 437.273249][ T36] #4: ffffffff902b1c10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 437.273284][ T36] locks held by kworker/u8:32/6776: 2, last CPU#0: [ 437.273294][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273332][ T36] #1: ffffc9000370fc40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273371][ T36] locks held by kworker/u8:36/6780: 3, last CPU#0: [ 437.273381][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273424][ T36] #1: ffffc9000369fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273463][ T36] #2: ffff888066210800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 437.273506][ T36] locks held by kworker/u8:43/6791: 2, last CPU#0: [ 437.273516][ T36] #0: ffff88807cd32948 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273557][ T36] #1: ffffc900035dfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273596][ T36] locks held by kworker/u8:44/6792: 4, on CPU#0: [ 437.273606][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273644][ T36] #1: ffffc900035afc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273682][ T36] #2: ffff888066060800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 437.273723][ T36] #3: ffffffff90160aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 437.273764][ T36] locks held by kworker/u8:46/7629: 3, last CPU#0: [ 437.273773][ T36] #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273812][ T36] #1: ffffc900053f7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 437.273850][ T36] #2: ffff888066570800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 437.273892][ T36] locks held by syz.0.796/8338: 5, last CPU#0: [ 437.273901][ T36] #0: ffff88802c816478 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xac3/0x10c0 [ 437.273938][ T36] #1: ffff88802c9a8340 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1be/0xca0 [ 437.273971][ T36] #2: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x139f/0x3570 [ 437.274004][ T36] #3: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 437.274041][ T36] #4: ffffffff9015a420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 437.274080][ T36] locks held by syz.3.799/8345: 2, last CPU#0: [ 437.274089][ T36] #0: ffff888076d74740 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 437.274135][ T36] #1: ffff8880303c3fa0 (sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_close+0x1d/0x1a0 [ 437.274175][ T36] [ 437.274178][ T36] ============================================= [ 437.274178][ T36] [ 437.274190][ T36] NMI backtrace for cpu 0 [ 437.274205][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 437.274228][ T36] Tainted: [L]=SOFTLOCKUP [ 437.274235][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 437.274245][ T36] Call Trace: [ 437.274251][ T36] [ 437.274259][ T36] dump_stack_lvl+0xe8/0x150 [ 437.274284][ T36] nmi_cpu_backtrace+0x274/0x2d0 [ 437.274307][ T36] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 437.274333][ T36] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 437.274354][ T36] sys_info+0x135/0x170 [ 437.274369][ T36] watchdog+0x1073/0x10f0 [ 437.274396][ T36] ? watchdog+0x209/0x10f0 [ 437.274419][ T36] kthread+0x38b/0x480 [ 437.274433][ T36] ? __pfx_watchdog+0x10/0x10 [ 437.274449][ T36] ? __pfx_kthread+0x10/0x10 [ 437.274464][ T36] ret_from_fork+0x514/0xb70 [ 437.274480][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 437.274494][ T36] ? __switch_to+0xc78/0x1410 [ 437.274516][ T36] ? __pfx_kthread+0x10/0x10 [ 437.274530][ T36] ret_from_fork_asm+0x1a/0x30 [ 437.274564][ T36] [ 437.274576][ T36] Kernel panic - not syncing: hung_task: blocked tasks [ 439.186824][ T36] CPU: 0 UID: 0 PID: 36 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 439.197501][ T36] Tainted: [L]=SOFTLOCKUP [ 439.201816][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 439.211866][ T36] Call Trace: [ 439.215169][ T36] [ 439.218105][ T36] vpanic+0x26f/0x710 [ 439.222098][ T36] panic+0xc5/0xd0 [ 439.225823][ T36] ? __pfx_panic+0x10/0x10 [ 439.230276][ T36] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 439.235397][ T36] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 439.241571][ T36] watchdog+0x10e7/0x10f0 [ 439.245906][ T36] ? watchdog+0x209/0x10f0 [ 439.250342][ T36] kthread+0x38b/0x480 [ 439.254411][ T36] ? __pfx_watchdog+0x10/0x10 [ 439.259103][ T36] ? __pfx_kthread+0x10/0x10 [ 439.263689][ T36] ret_from_fork+0x514/0xb70 [ 439.268277][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 439.273403][ T36] ? __switch_to+0xc78/0x1410 [ 439.278088][ T36] ? __pfx_kthread+0x10/0x10 [ 439.282691][ T36] ret_from_fork_asm+0x1a/0x30 [ 439.287472][ T36] [ 439.290564][ T36] Kernel Offset: disabled [ 439.294889][ T36] Rebooting in 86400 seconds..