last executing test programs: 12.623560817s ago: executing program 2 (id=636): mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) unshare(0x22020400) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = gettid() rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ptrace(0x10, r2) ptrace$setregs(0x11, r2, 0x200000, &(0x7f00000003c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') sendmsg$netlink(r3, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000680)={0x10, 0x3b, 0x200, 0x70bd26, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f0000002e40)=[@rights={{0x10}}], 0x10, 0x4000}, 0x840) rt_sigqueueinfo(0xffffffffffffffff, 0x18, &(0x7f00000005c0)={0x1a, 0xdcd, 0xfffffffe}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r5) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0xb1) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000040)={r4, r7, 0xb}) 12.442745815s ago: executing program 2 (id=637): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000007000200611300000000000062000000000000009500000c00000100"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) 12.295616472s ago: executing program 2 (id=639): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x5, 0x4000000000000002, 0x4, 0xfffffffffffffffe, 0x0, 0x6}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b70600000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES64=r1], 0xec}}, 0x0) r5 = fsopen(&(0x7f00000001c0)='cpuset\x00', 0x0) close(r1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) r6 = getpid() syz_pidfd_open(r6, 0x0) sched_setattr(r6, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, &(0x7f0000000200)={0x5, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(r6, 0x7, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) 11.283142118s ago: executing program 1 (id=646): syz_usb_connect(0x4, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x300, 0xd1, 0x7b, 0x97, 0x8, 0x5d1, 0x9006, 0x3b8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x1, 0x60, 0xe, [{{0x9, 0x4, 0xe7, 0x9, 0x0, 0x4a, 0xde, 0xd9, 0xe}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7110203010902"], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x6d8a, &(0x7f00000004c0)={0x0, 0x37b3, 0x2, 0x4, 0x0, 0x0, r0}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x6}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.489472339s ago: executing program 4 (id=657): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create(0x3) r2 = socket(0x10, 0x80002, 0x0) socket(0x200000000000011, 0x2, 0x0) (async) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x7, 0xffffffff, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@in6_addr=@remote, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000080)=0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x80000005}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x80000005}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000680)=0x3) (async) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000680)=0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) 9.217697452s ago: executing program 2 (id=658): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x85, 0x0, &(0x7f00000000c0)) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) io_setup(0xb, &(0x7f0000000240)=0x0) io_getevents(r5, 0x1fffe, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)) 8.517963229s ago: executing program 3 (id=660): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x8, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001700000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x6c}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x18, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4841}, 0x8000) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x2000, @fd_index=0x4, 0x8000000000000001, &(0x7f0000000480)=""/208, 0xd0, 0x0, 0x1}) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, 0x0, 0x0) bind$inet(r9, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000001000000000000040000000080", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 7.882897708s ago: executing program 1 (id=662): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000a000200611300000000000062000000000000009500000c00000100"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) 7.37564265s ago: executing program 1 (id=663): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) symlink(&(0x7f0000004500)='./file1/file0\x00', &(0x7f0000004540)='./file0\x00') r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x20, 0x8001, 0x0, 0x0, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 7.131959841s ago: executing program 4 (id=665): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x10c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x12, 0x3, {[0x2, 0x0, 0xfffa, 0xf001, 0x2, 0x0, 0x7, 0x9]}}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x91a, 0x3b, 0x1, 0x3, 0xffff, 0xfffe, 0x400, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x5, 0x7, 0x9, 0x7, 0x2, 0x3, 0x8]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x6, 0x5}, {0x1, 0xa}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x9}, {0x4, 0x8}, {0x2, 0x3}, {0x3, 0x8}, {0x7, 0x8}, {0x5, 0x6}, {0x6, 0x2}, {0x4, 0x4}, {0x2, 0xa}, {0x2, 0xa}, {0x7, 0x4}, {0x0, 0x1}, {0x5, 0x8}, {0x6, 0x7}, {0x3, 0x2}, {0x0, 0x1}, {0x7, 0x4}, {0x5, 0x9}, {0x6, 0x9}, {0x2, 0x4}, {0x7, 0x8}, {0x4, 0x3}, {0x2, 0x6}, {0x1, 0x7}, {0x1, 0x1}, {0x1}, {0x0, 0x5}, {0x7, 0xa}, {}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x4}, {0x4, 0x3}, {0x5, 0x2}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0xc}, {0x6, 0x4}, {0x4, 0x1}, {0x7, 0x3}, {0x5, 0x7}, {0x6, 0x3}, {0x5, 0x5}, {0x1, 0x1}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x1a}, {0x6, 0x5}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x9}, {0x4, 0x9}, {0x1, 0xb}, {0x7, 0xa}, {0x6, 0x1}, {0x0, 0xa}, {0x7, 0x7}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x4}, {0x4, 0x4}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x1, 0x1f}, {0x7, 0x3}, {0x6, 0x5}, {}, {0x1, 0x7}, {0x3, 0xa}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x4, 0x2c, 0x0, 0x88f5, 0x9, 0x3, 0x8]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xd5, 0x0, 0x6, 0x4, 0x401, 0xb9a, 0x3ff]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x9, 0x16, 0x5, 0x60, 0x0, 0x5, 0x1b, 0x3, 0x1, 0xc, 0x16, 0x6c, 0x1, 0x9, 0x1b, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x10c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x40000003, 0xe0, 0x0, 0x4c, 0x1, 0x7, 0x1ff, 0x9, 0x1}}}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0xf0, 0xfffff818, 0x2, 0x2, 0xfffffff8, 0x4}}, {0xc, 0x2, [0x8, 0x80, 0x401, 0x7]}}]}]}, 0x84}}, 0x0) (async) r8 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x10000) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x1, 0x7995}, 0xffffffd6, 0x0, 0xfffffffe, 0x48000000, 0x0, 0x0, 0x0}) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$VT_SETMODE(r8, 0x5602, &(0x7f0000000080)={0x1a, 0x3, 0x7d5, 0xf326, 0x8000}) (async) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) connect$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000002000000190004000400000007fd17e5ffff08000400000000000000008862", 0x3b}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010102}, 0xc) 6.971634771s ago: executing program 3 (id=667): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x9, 0x7, 0x0, 0x0, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in=@local, 0x26, 0x86d14cded5d0cbad}]}, 0x38}}, 0x44040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f00000006c0)={0x0, 0x1, 0xac1d}) fcntl$lock(r1, 0x7, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x9394}) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x408000}, 0xc) r2 = epoll_create(0xf) r3 = openat$userio(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x80000000}) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102e5e3e740d112fad2eb760102030109021200015f6560700904230800ff026689"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "19"}, 0x0, 0x0, 0x0, 0x0}) 6.845609997s ago: executing program 4 (id=668): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000200611300000000000062000000000000009500000c00000100"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0xa000000, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) 6.043216694s ago: executing program 4 (id=670): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe0001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x40042, 0x101) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0xfffffffc, 0xfffffffd, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff1, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0cc5604, &(0x7f0000000440)={0x7, @win={{0x5, 0x0, 0x9, 0x1}, 0x1, 0x8, 0x0, 0x8, 0x0}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30c) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x1000}, 0x20) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x3b4, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8) socket$inet6(0xa, 0xa, 0x9) 5.703413576s ago: executing program 2 (id=671): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) r5 = fcntl$dupfd(r3, 0x0, r3) write$binfmt_script(r5, &(0x7f0000000740)={'#! ', '', [{0x20, 'wg1\x00'}, {0x20, '/dev/video2\x00'}, {0x20, 'vlan0\x00'}, {0x20, '${^\\/'}], 0xa, "5d4a93f59e60a462c7fbdea559d700b693a60000eb58fb023e0350346c2ec7df"}, 0x43) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r7, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e24, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {{0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}, 0x104) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000000)={0x6, 0x400005, 0x0, 0x1, 0xf, "89000200"}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r10, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0x8, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x8001000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x344, 0x0, 0x11, 0x148, 0x220, 0x0, 0x2b0, 0x2a8, 0x2a8, 0x2b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x220, 0x4003, {}, [@common=@inet=@hashlimit2={{0x150}, {'wg1\x00', {0x80000, 0x7, 0x13, 0x3ff, 0x8, 0x6, 0x80000005, 0x18, 0x8}, {0x7}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x6, 0x3, 0x2], 0x5, 0x1}, {0x0, [0x0, 0x6, 0x0, 0x1, 0x0, 0x1], 0x3, 0x1}}}}, {{@ip={@empty, @empty, 0x0, 0xffffff00, 'vlan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x3d}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3a0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x14) 5.17192887s ago: executing program 4 (id=672): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x7, 0x0, 0x0, 0xffffffff}, {0x1000, 0x6, 0xcb, 0x5}, {0x407b, 0xbc, 0x7, 0x6}, {0x0, 0x9, 0xff, 0x7fffffff}, {0x9, 0x10, 0xc, 0x8}, {0x9, 0x4, 0x40, 0x4}, {0x7, 0x7, 0xff, 0xc}]}) 4.851636146s ago: executing program 4 (id=673): syz_usb_connect(0x4, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x300, 0xd1, 0x7b, 0x97, 0x8, 0x5d1, 0x9006, 0x3b8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x1, 0x60, 0xe, [{{0x9, 0x4, 0xe7, 0x9, 0x0, 0x4a, 0xde, 0xd9, 0xe}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7110203010902"], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x6d8a, &(0x7f00000004c0)={0x0, 0x37b3, 0x2, 0x4, 0x0, 0x0, r0}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x6}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.786934671s ago: executing program 1 (id=674): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000010000200611300000000000062000000000000009500000c00000100"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) 4.525994166s ago: executing program 1 (id=675): socket(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) (async) listen(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000000000000014d564b00000000af00000000000000"]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x3, 0x3000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) (async) r6 = syz_open_dev$video4linux(&(0x7f0000001380), 0x2, 0x501) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0405626, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) (async) r7 = creat(0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0x40086602, &(0x7f0000000040)={0xfffffffffffffffd, 0x1}) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[]) 3.562525045s ago: executing program 0 (id=676): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f000000000000000000000000000000090ffffff0000000000000000000000000000000000000000001f00206e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x232) 3.231195873s ago: executing program 3 (id=677): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x3c, r3, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x5, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x78, 0x0, 0x4, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0xc000, 0x3af0, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_delroute={0x5c, 0x19, 0x200, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0xfd, 0x0, 0xfd, 0x1}, [@RTA_UID={0x8, 0x19, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_NH_ID={0x8, 0x1e, 0x5b63}, @RTA_MARK={0x8, 0x10, 0x401}, @RTA_MARK={0x8, 0x10, 0x100000}]}, 0x5c}}, 0x0) (rerun: 64) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x45) (async) r9 = fcntl$dupfd(r7, 0x0, r7) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x500, 0x40420f00}}}, 0x90) (async) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r8, 0x4}}, 0x10) (async, rerun: 64) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000000c0)={r12, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f00000000c0)={r12, 0x17, 0x6}, 0x10) 3.171755219s ago: executing program 0 (id=678): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}, {&(0x7f0000000180)=' E', 0x2}], 0x2) 3.040755674s ago: executing program 0 (id=679): r0 = memfd_secret(0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x20000]}}) 2.827635657s ago: executing program 3 (id=680): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000200611300000000000062000000000000009500000c00000100"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x10000000, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) 2.780552243s ago: executing program 0 (id=681): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$LINK_DETACH(0x22, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000050006000a000000080003"], 0x84}}, 0x0) 2.596539219s ago: executing program 3 (id=682): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002300)={0x7, {"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", 0x1000}}, 0x1006) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r0) (async) write$UHID_INPUT(r1, &(0x7f0000002300)={0x7, {"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", 0x1000}}, 0x1006) (async) 1.67168367s ago: executing program 0 (id=683): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4007fd6, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000080)={0x1, @sdr={0x3631564e, 0x20}}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10270000, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000047c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x1dd8a0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffb96}}, 0x50) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) 1.578248192s ago: executing program 3 (id=684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000259000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000c80)='net/dev_snmp6\x00') getdents64(r3, &(0x7f0000001180)=""/4073, 0xfe9) getdents(r3, 0x0, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.396393377s ago: executing program 0 (id=685): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000100)=0x4, 0xffffffffffffffd3) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_DESTROY(r5, &(0x7f00000000c0), 0xfdf3) lseek(r1, 0x8, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000001680)=@gcm_128={{0x304}, "0000e60000010027", "568c9f21823385cf6b936989b62bac53", "0000001b", "ff00"}, 0x28) sendto$inet6(r2, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r2, 0x0, 0xfdef) sendto$inet6(r2, &(0x7f00000000c0)="c62e", 0x2, 0x8040, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x3fee) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0xd3, &(0x7f0000000080)="22bf4e19337429d542765a5ce6d74b6c8eb918dbfbd4e74bd62ff0d344ffecf71276f6b3a390dcb55d492c4131c6a6af679bbb6e0ab03b", 0x37) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x3, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "dd4291c0"}, 0x0, 0x2, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$incfs(r1, &(0x7f00000004c0)='.log\x00', 0x101040, 0xbb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2c, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa2b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x800, 0x6, &(0x7f00000003c0)=""/6, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000440)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xa, 0x6, 0xb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), 0x10, 0x7f, @void, @value}, 0x94) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) 607.540663ms ago: executing program 1 (id=686): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x5, 0x4000000000000002, 0x4, 0xfffffffffffffffe, 0x0, 0x6}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) lstat(0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b70600000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES64=r1], 0xec}}, 0x0) r5 = fsopen(&(0x7f00000001c0)='cpuset\x00', 0x0) close(r1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) r6 = getpid() syz_pidfd_open(r6, 0x0) sched_setattr(r6, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) setrlimit(0xf, &(0x7f0000000200)={0x5, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(r6, 0x7, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) 0s ago: executing program 2 (id=687): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000018000200611300000000000062000000000000009500000c00000100"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) kernel console output (not intermixed with test programs): Mfr=0, Product=0, SerialNumber=0 [ 184.043953][ T5902] ipheth 1-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 184.054870][ T5902] ipheth 1-1:8.39: probe with driver ipheth failed with error -71 [ 184.103916][ T5902] usb 1-1: USB disconnect, device number 16 [ 184.176887][ T5948] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 184.325896][ T5948] usb 3-1: device descriptor read/64, error -71 [ 184.453182][ T5898] usb 4-1: USB disconnect, device number 17 [ 184.595845][ T5948] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 184.629158][ T7045] syz.3.354 uses obsolete (PF_INET,SOCK_PACKET) [ 184.645202][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.746608][ T5948] usb 3-1: device descriptor read/64, error -71 [ 184.879627][ T5948] usb usb3-port1: attempt power cycle [ 184.963513][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 184.963535][ T30] audit: type=1326 audit(1744092468.572:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 184.998531][ T5898] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 185.026060][ T30] audit: type=1326 audit(1744092468.602:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 185.053887][ T30] audit: type=1326 audit(1744092468.602:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 185.076157][ T7055] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 185.085114][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.358'. [ 185.132134][ T7055] netlink: 36 bytes leftover after parsing attributes in process `syz.4.358'. [ 185.142517][ T30] audit: type=1326 audit(1744092468.602:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 185.170924][ T30] audit: type=1326 audit(1744092468.612:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 185.193538][ T5898] usb 4-1: device descriptor read/64, error -71 [ 185.266040][ T5948] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 185.326760][ T5948] usb 3-1: device descriptor read/8, error -71 [ 185.445851][ T5898] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 185.566038][ T5948] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 185.607989][ T5948] usb 3-1: device descriptor read/8, error -71 [ 185.766799][ T5948] usb usb3-port1: unable to enumerate USB device [ 185.831313][ T30] audit: type=1326 audit(1744092468.622:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 185.914388][ T30] audit: type=1326 audit(1744092468.622:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 186.075812][ T5898] usb 4-1: device descriptor read/64, error -71 [ 186.092804][ T30] audit: type=1326 audit(1744092468.632:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 186.115943][ T30] audit: type=1326 audit(1744092468.632:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 186.144952][ T30] audit: type=1326 audit(1744092468.632:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 186.190424][ T5898] usb usb4-port1: attempt power cycle [ 186.254306][ T7062] loop2: detected capacity change from 0 to 7 [ 186.266942][ T7062] Dev loop2: unable to read RDB block 7 [ 186.281741][ T7062] loop2: unable to read partition table [ 186.292208][ T7062] loop2: partition table beyond EOD, truncated [ 186.304636][ T7062] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.328986][ T5948] usb 2-1: USB disconnect, device number 21 [ 186.425879][ T5902] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 186.433334][ T7065] syzkaller1: entered promiscuous mode [ 186.439511][ T7065] syzkaller1: entered allmulticast mode [ 186.535885][ T5898] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 186.579602][ T5898] usb 4-1: device descriptor read/8, error -71 [ 186.582924][ T5902] usb 5-1: config 0 has no interfaces? [ 186.595047][ T5902] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 186.608921][ T5902] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 186.618592][ T5902] usb 5-1: Product: syz [ 186.623045][ T5902] usb 5-1: Manufacturer: syz [ 186.632231][ T5902] usb 5-1: SerialNumber: syz [ 186.641528][ T5902] usb 5-1: config 0 descriptor?? [ 186.757827][ T1209] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 186.825868][ T5898] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 186.856642][ T5898] usb 4-1: device descriptor read/8, error -71 [ 186.896463][ T1209] usb 2-1: device descriptor read/64, error -71 [ 186.984977][ T5898] usb usb4-port1: unable to enumerate USB device [ 187.145887][ T1209] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 187.231920][ T7088] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 187.242021][ T7088] ALSA: mixer_oss: invalid OSS volume 'Â' [ 187.258785][ T5898] usb 5-1: USB disconnect, device number 23 [ 187.301859][ T1209] usb 2-1: device descriptor read/64, error -71 [ 187.350974][ T7096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.374239][ T7096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.416100][ T1209] usb usb2-port1: attempt power cycle [ 187.585974][ T5948] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 187.756136][ T1209] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 187.765815][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 187.798410][ T1209] usb 2-1: device descriptor read/8, error -71 [ 188.047458][ T1209] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 188.087936][ T1209] usb 2-1: device descriptor read/8, error -71 [ 188.204952][ T5948] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 188.227698][ T5948] usb 1-1: config 0 has no interface number 0 [ 188.236123][ T5948] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 188.244443][ T5948] usb 1-1: config 0 has no interface number 0 [ 188.252260][ T5948] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 188.261015][ T5948] usb 1-1: config 0 has no interface number 0 [ 188.268907][ T5948] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 188.309145][ T5948] usb 1-1: config 0 has no interface number 0 [ 188.396282][ T1209] usb usb2-port1: unable to enumerate USB device [ 188.556428][ T5948] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 188.584692][ T5948] usb 1-1: config 0 has no interface number 0 [ 188.607078][ T5948] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 188.645805][ T5948] usb 1-1: config 0 has no interface number 0 [ 188.645868][ T5898] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 188.669245][ T5948] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d [ 188.680773][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.695822][ T5948] usb 1-1: Product: syz [ 188.705855][ T5948] usb 1-1: Manufacturer: syz [ 188.716721][ T5948] usb 1-1: SerialNumber: syz [ 188.751413][ T5948] usb 1-1: config 0 descriptor?? [ 188.818385][ T7111] loop2: detected capacity change from 0 to 7 [ 188.851685][ T7111] Dev loop2: unable to read RDB block 7 [ 188.860927][ T7111] loop2: unable to read partition table [ 188.867989][ T7111] loop2: partition table beyond EOD, truncated [ 188.885538][ T5898] usb 5-1: config 0 has no interfaces? [ 188.896900][ T7111] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 188.922175][ T5898] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 188.934919][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.949893][ T5898] usb 5-1: Product: syz [ 188.954503][ T5898] usb 5-1: Manufacturer: syz [ 188.961554][ T5898] usb 5-1: SerialNumber: syz [ 188.993490][ T5898] usb 5-1: config 0 descriptor?? [ 189.005921][ T2155] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 189.081800][ T5948] mdc800 1-1:0.109: probe fails -> wrong Number of Configuration [ 189.126305][ T5948] usb 1-1: USB disconnect, device number 17 [ 189.208604][ T2155] usb 4-1: Using ep0 maxpacket: 16 [ 189.236631][ T2155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.290821][ T2155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.297441][ T7107] Cannot find add_set index 1 as target [ 189.323280][ T2155] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 189.383992][ T2155] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 189.405442][ T2155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.443675][ T2155] usb 4-1: config 0 descriptor?? [ 190.148268][ T7109] random: crng reseeded on system resumption [ 190.155487][ T2155] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 190.176160][ T2155] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 190.202282][ T2155] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 190.222740][ T2155] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 190.259186][ T2155] shield 0003:0955:7214.0009: unknown main item tag 0x0 [ 190.311057][ T2155] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 190.403964][ T7134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 190.437676][ T2155] shield 0003:0955:7214.0009: Registered Thunderstrike controller [ 190.480413][ T2155] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 190.520383][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'. [ 190.539822][ T7136] netlink: 9 bytes leftover after parsing attributes in process `syz.0.382'. [ 190.838902][ T7131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.848391][ T7131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.182634][ T47] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 191.197340][ T5902] usb 4-1: USB disconnect, device number 22 [ 191.229118][ T47] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 191.301073][ T47] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 191.324111][ T47] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 191.462209][ T1209] usb 5-1: USB disconnect, device number 24 [ 191.578863][ T7148] loop2: detected capacity change from 0 to 7 [ 191.598977][ T7148] Dev loop2: unable to read RDB block 7 [ 191.604730][ T7148] loop2: unable to read partition table [ 191.612356][ T7148] loop2: partition table beyond EOD, truncated [ 191.631294][ T7148] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 191.663656][ T5213] Dev loop2: unable to read RDB block 7 [ 191.683205][ T5213] loop2: unable to read partition table [ 191.689449][ T5213] loop2: partition table beyond EOD, truncated [ 191.781277][ T5213] Dev loop2: unable to read RDB block 7 [ 191.806366][ T5898] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 191.808020][ T5213] loop2: unable to read partition table [ 191.830342][ T5213] loop2: partition table beyond EOD, truncated [ 191.976162][ T5842] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 192.011090][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 192.020190][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.054280][ T5898] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.077605][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.135112][ T5898] usb 1-1: config 0 descriptor?? [ 192.228221][ T5842] usb 5-1: config 0 has no interfaces? [ 192.247787][ T5842] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 192.267338][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.288639][ T5842] usb 5-1: Product: syz [ 192.292907][ T5842] usb 5-1: Manufacturer: syz [ 192.298633][ T5842] usb 5-1: SerialNumber: syz [ 192.308623][ T5842] usb 5-1: config 0 descriptor?? [ 192.362294][ T5898] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 192.523520][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.533341][ T7174] syz.3.396: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 192.546277][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.557840][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.3.396 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 192.557867][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.557879][ T7174] Call Trace: [ 192.557888][ T7174] [ 192.557896][ T7174] dump_stack_lvl+0x241/0x360 [ 192.557930][ T7174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.557958][ T7174] ? __pfx__printk+0x10/0x10 [ 192.557983][ T7174] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 192.558014][ T7174] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 192.558040][ T7174] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 192.558068][ T7174] warn_alloc+0x27c/0x410 [ 192.558090][ T7174] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 192.558120][ T7174] ? __pfx_warn_alloc+0x10/0x10 [ 192.558140][ T7174] ? kasan_save_track+0x3f/0x80 [ 192.558159][ T7174] ? __kasan_kmalloc+0x9d/0xb0 [ 192.558182][ T7174] ? xsk_setsockopt+0x449/0x840 [ 192.558199][ T7174] ? do_sock_setsockopt+0x3b1/0x710 [ 192.558216][ T7174] ? __ia32_sys_setsockopt+0x1f2/0x280 [ 192.558232][ T7174] ? __do_fast_syscall_32+0xb4/0x110 [ 192.558255][ T7174] ? do_fast_syscall_32+0x34/0x80 [ 192.558276][ T7174] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.558307][ T7174] __vmalloc_node_range_noprof+0x128/0x1390 [ 192.558374][ T7174] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.558419][ T7174] ? __kasan_kmalloc+0x9d/0xb0 [ 192.558447][ T7174] vmalloc_user_noprof+0x74/0x80 [ 192.558465][ T7174] ? xskq_create+0xb6/0x170 [ 192.558483][ T7174] xskq_create+0xb6/0x170 [ 192.558505][ T7174] xsk_init_queue+0xa1/0x100 [ 192.558527][ T7174] xsk_setsockopt+0x449/0x840 [ 192.558548][ T7174] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.558572][ T7174] ? __lock_acquire+0xad5/0xd80 [ 192.558591][ T7174] ? __pfx_aa_sk_perm+0x10/0x10 [ 192.558617][ T7174] ? __lock_acquire+0xad5/0xd80 [ 192.558636][ T7174] ? aa_sock_opt_perm+0x79/0x120 [ 192.558666][ T7174] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.558683][ T7174] do_sock_setsockopt+0x3b1/0x710 [ 192.558708][ T7174] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 192.558726][ T7174] ? __fget_files+0x2a/0x420 [ 192.558745][ T7174] ? __fget_files+0x39d/0x420 [ 192.558761][ T7174] ? __fget_files+0x2a/0x420 [ 192.558786][ T7174] __ia32_sys_setsockopt+0x1f2/0x280 [ 192.558811][ T7174] __do_fast_syscall_32+0xb4/0x110 [ 192.558834][ T7174] ? exc_page_fault+0x5f8/0x920 [ 192.558861][ T7174] do_fast_syscall_32+0x34/0x80 [ 192.558884][ T7174] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.558906][ T7174] RIP: 0023:0xf7fa4579 [ 192.558923][ T7174] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 192.558940][ T7174] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 192.558961][ T7174] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 192.558973][ T7174] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000052 [ 192.558986][ T7174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.558997][ T7174] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.559008][ T7174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.559036][ T7174] [ 192.559143][ T7174] Mem-Info: [ 192.922515][ T7174] active_anon:7732 inactive_anon:0 isolated_anon:0 [ 192.922515][ T7174] active_file:10132 inactive_file:38321 isolated_file:0 [ 192.922515][ T7174] unevictable:768 dirty:59 writeback:0 [ 192.922515][ T7174] slab_reclaimable:9536 slab_unreclaimable:101613 [ 192.922515][ T7174] mapped:29626 shmem:1429 pagetables:973 [ 192.922515][ T7174] sec_pagetables:0 bounce:0 [ 192.922515][ T7174] kernel_misc_reclaimable:0 [ 192.922515][ T7174] free:1326045 free_pcp:652 free_cma:0 [ 192.932790][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.053300][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.113022][ T7174] Node 0 active_anon:31276kB inactive_anon:0kB active_file:40528kB inactive_file:153208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118432kB dirty:256kB writeback:0kB shmem:4180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11220kB pagetables:3788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 193.226285][ T7174] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 193.284877][ T47] usb 1-1: USB disconnect, device number 18 [ 193.322296][ T7174] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 193.371950][ T5902] usb 5-1: USB disconnect, device number 25 [ 193.431161][ T7174] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 193.442277][ T7174] Node 0 DMA32 free:1381316kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:35168kB inactive_anon:0kB active_file:40528kB inactive_file:153116kB unevictable:1536kB writepending:256kB present:3129332kB managed:2547244kB mlocked:0kB bounce:0kB free_pcp:728kB local_pcp:688kB free_cma:0kB [ 193.495143][ T7174] lowmem_reserve[]: 0 0 0 0 0 [ 193.512330][ T7174] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 193.580267][ T7174] lowmem_reserve[]: 0 0 0 0 0 [ 193.591957][ T7174] Node 1 Normal free:3905732kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 193.753101][ T7174] lowmem_reserve[]: 0 0 0 0 0 [ 193.758126][ T7174] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 193.771839][ T7174] Node 0 DMA32: 351*4kB (UME) 344*8kB (UME) 408*16kB (UME) 355*32kB (UME) 566*64kB (UME) 243*128kB (UME) 119*256kB (U) 57*512kB (UME) 34*1024kB (U) 7*2048kB (UM) 292*4096kB (M) = 1394204kB [ 193.791176][ T7174] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 194.009556][ T7174] Node 1 Normal: 219*4kB (UME) 45*8kB (UME) 39*16kB (UME) 220*32kB (UME) 88*64kB (UME) 32*128kB (UME) 8*256kB (UM) 8*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (UM) = 3905732kB [ 194.179018][ T7174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.188942][ T5898] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 194.245855][ T7174] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.324263][ T7174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 194.366233][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.372644][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.407933][ T7174] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 194.448224][ T7174] 49878 total pagecache pages [ 194.452994][ T7174] 0 pages in swap cache [ 194.475881][ T7174] Free swap = 124996kB [ 194.497723][ T5898] usb 5-1: config 0 has no interfaces? [ 194.506469][ T7174] Total swap = 124996kB [ 194.521199][ T7174] 2097051 pages RAM [ 194.525087][ T7174] 0 pages HighMem/MovableOnly [ 194.550663][ T7174] 428582 pages reserved [ 194.554852][ T7174] 0 pages cma reserved [ 194.572726][ T5898] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 194.582827][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.595684][ T5898] usb 5-1: Product: syz [ 194.601267][ T5898] usb 5-1: Manufacturer: syz [ 194.618230][ T5898] usb 5-1: SerialNumber: syz [ 194.788689][ T5898] usb 5-1: config 0 descriptor?? [ 195.028364][ T7187] Cannot find add_set index 1 as target [ 195.047137][ T7207] netlink: 36 bytes leftover after parsing attributes in process `syz.0.406'. [ 195.058361][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.406'. [ 195.080922][ T7207] netlink: 36 bytes leftover after parsing attributes in process `syz.0.406'. [ 195.142397][ T5898] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 195.485919][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 195.494236][ T5898] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 195.505573][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 195.505623][ T5898] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 195.505649][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.563883][ T5898] usb 3-1: config 0 descriptor?? [ 195.885999][ T5902] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 195.979453][ T7202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.996250][ T7202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.014239][ T5898] elecom 0003:056E:00FD.000A: unbalanced collection at end of report description [ 196.045846][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 196.092843][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.093643][ T5898] elecom 0003:056E:00FD.000A: probe with driver elecom failed with error -22 [ 196.139526][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 196.181186][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.220923][ T5902] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.292491][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.339078][ T5902] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 196.365088][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.386496][ T5902] usb 4-1: config 0 descriptor?? [ 196.463858][ T5898] usb 3-1: USB disconnect, device number 23 [ 197.005992][ T1209] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 197.249127][ T1209] usb 2-1: config 0 has an invalid interface number: 173 but max is 0 [ 197.260650][ T1209] usb 2-1: config 0 has no interface number 0 [ 197.267087][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 197.285234][ T1209] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=ff.4d [ 197.294934][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.311605][ T1209] usb 2-1: Product: syz [ 197.316983][ T1209] usb 2-1: Manufacturer: syz [ 197.321850][ T1209] usb 2-1: SerialNumber: syz [ 197.344718][ T1209] usb 2-1: config 0 descriptor?? [ 197.426534][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 197.432385][ T7225] FAULT_INJECTION: forcing a failure. [ 197.432385][ T7225] name failslab, interval 1, probability 0, space 0, times 1 [ 197.435423][ T10] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 197.458316][ T7225] CPU: 0 UID: 0 PID: 7225 Comm: syz.2.414 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 197.458339][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.458349][ T7225] Call Trace: [ 197.458355][ T7225] [ 197.458362][ T7225] dump_stack_lvl+0x241/0x360 [ 197.458391][ T7225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.458414][ T7225] ? __pfx__printk+0x10/0x10 [ 197.458441][ T7225] ? __pfx___might_resched+0x10/0x10 [ 197.458464][ T7225] should_fail_ex+0x424/0x570 [ 197.458483][ T7225] should_failslab+0xac/0x100 [ 197.458506][ T7225] kmem_cache_alloc_noprof+0x78/0x390 [ 197.458527][ T7225] ? getname_flags+0xb6/0x530 [ 197.458553][ T7225] getname_flags+0xb6/0x530 [ 197.458579][ T7225] __ia32_sys_mkdirat+0x7a/0xa0 [ 197.458598][ T7225] __do_fast_syscall_32+0xb4/0x110 [ 197.458618][ T7225] ? exc_page_fault+0x5f8/0x920 [ 197.458639][ T7225] do_fast_syscall_32+0x34/0x80 [ 197.458658][ T7225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.458677][ T7225] RIP: 0023:0xf746d579 [ 197.458690][ T7225] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 197.458703][ T7225] RSP: 002b:00000000f50f63c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000128 [ 197.458720][ T7225] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 197.458731][ T7225] RDX: 00000000000001ff RSI: 0000000080002280 RDI: 0000000000000000 [ 197.458740][ T7225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.458749][ T7225] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 197.458758][ T7225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.458779][ T7225] [ 197.636992][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.649520][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.672796][ T7219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.411'. [ 197.684732][ T10] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 197.695104][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.711245][ T1209] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 197.719387][ T1209] gspca_sunplus: reg_r err -71 [ 197.724335][ T1209] sunplus 2-1:0.173: probe with driver sunplus failed with error -71 [ 197.734182][ T10] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 197.744826][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.767829][ T10] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 197.778343][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.800926][ T1209] usb 2-1: USB disconnect, device number 26 [ 197.807976][ T10] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 197.819371][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.833484][ T10] usb 1-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 197.846994][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 197.863708][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 197.872977][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.885118][ T10] usb 1-1: config 0 descriptor?? [ 197.901676][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 197.999771][ T10] usb 5-1: USB disconnect, device number 26 [ 198.290569][ T10] usb 4-1: USB disconnect, device number 23 [ 198.622845][ T7243] netlink: 36 bytes leftover after parsing attributes in process `syz.3.420'. [ 198.638446][ T7243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.420'. [ 198.650560][ T7243] netlink: 36 bytes leftover after parsing attributes in process `syz.3.420'. [ 198.786001][ T2155] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 198.963110][ T7247] delete_channel: no stack [ 199.063725][ T2155] usb 2-1: config 0 has no interfaces? [ 199.074686][ T2155] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 199.265818][ T2155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.291804][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 199.311903][ T2155] usb 2-1: Product: syz [ 199.318702][ T2155] usb 2-1: Manufacturer: syz [ 199.424828][ T2155] usb 2-1: SerialNumber: syz [ 199.455276][ T47] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 199.540289][ T2155] usb 2-1: config 0 descriptor?? [ 199.647879][ T7257] macsec1: entered allmulticast mode [ 199.737779][ T47] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.800845][ T47] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 199.873487][ T47] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 199.922795][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.973026][ T7247] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 199.995490][ T47] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.045928][ T5898] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 200.136178][ T10] usb 1-1: USB disconnect, device number 19 [ 200.169021][ T7264] FAULT_INJECTION: forcing a failure. [ 200.169021][ T7264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.238613][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.249027][ T5898] usb 5-1: config 0 has no interfaces? [ 200.259994][ T5898] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 200.289285][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.297858][ T5898] usb 5-1: Product: syz [ 200.310297][ T5898] usb 5-1: Manufacturer: syz [ 200.326821][ T5898] usb 5-1: SerialNumber: syz [ 200.360325][ T5898] usb 5-1: config 0 descriptor?? [ 200.368009][ T7264] CPU: 0 UID: 0 PID: 7264 Comm: syz.0.425 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 200.368038][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.368052][ T7264] Call Trace: [ 200.368061][ T7264] [ 200.368069][ T7264] dump_stack_lvl+0x241/0x360 [ 200.368107][ T7264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.368137][ T7264] ? __pfx__printk+0x10/0x10 [ 200.368176][ T7264] should_fail_ex+0x424/0x570 [ 200.368205][ T7264] strncpy_from_user+0x36/0x280 [ 200.368232][ T7264] getname_flags+0xf0/0x530 [ 200.368270][ T7264] __ia32_sys_mkdirat+0x7a/0xa0 [ 200.368297][ T7264] __do_fast_syscall_32+0xb4/0x110 [ 200.368324][ T7264] ? exc_page_fault+0x5f8/0x920 [ 200.368353][ T7264] do_fast_syscall_32+0x34/0x80 [ 200.368380][ T7264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.368405][ T7264] RIP: 0023:0xf746d579 [ 200.368424][ T7264] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 200.368442][ T7264] RSP: 002b:00000000f50f63c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000128 [ 200.368465][ T7264] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 200.368480][ T7264] RDX: 00000000000001ff RSI: 0000000080002280 RDI: 0000000000000000 [ 200.368494][ T7264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.368506][ T7264] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 200.368519][ T7264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.368549][ T7264] [ 200.531667][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.975948][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 201.229101][ T10] usb 4-1: config 0 has no interfaces? [ 201.237533][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 201.247185][ T10] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 201.255281][ T10] usb 4-1: Product: syz [ 201.281074][ T10] usb 4-1: Manufacturer: syz [ 201.297546][ T10] usb 4-1: SerialNumber: syz [ 201.309223][ T10] usb 4-1: config 0 descriptor?? [ 201.662008][ T5948] usb 4-1: USB disconnect, device number 24 [ 201.798220][ T5842] usb 3-1: USB disconnect, device number 24 [ 201.996358][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 202.129314][ T7289] x_tables: ip_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 202.156240][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 202.188509][ T10] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice= 8.e8 [ 202.223337][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.241839][ T10] usb 1-1: Product: syz [ 202.256081][ T10] usb 1-1: Manufacturer: syz [ 202.266122][ T10] usb 1-1: SerialNumber: syz [ 202.284331][ T10] usb 1-1: config 0 descriptor?? [ 202.428207][ T5948] usb 2-1: USB disconnect, device number 27 [ 202.702253][ T5902] usb 5-1: USB disconnect, device number 27 [ 203.084778][ T7301] loop2: detected capacity change from 0 to 7 [ 203.124408][ T7301] Dev loop2: unable to read RDB block 7 [ 203.143455][ T7301] loop2: unable to read partition table [ 203.200892][ T7301] loop2: partition table beyond EOD, truncated [ 203.229885][ T7301] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 203.298849][ T47] usb 1-1: USB disconnect, device number 20 [ 203.375830][ T5902] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 203.471641][ T5213] Dev loop2: unable to read RDB block 7 [ 203.478896][ T5213] loop2: unable to read partition table [ 203.487222][ T5213] loop2: partition table beyond EOD, truncated [ 203.550225][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 203.571370][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 203.596599][ T5902] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 203.614480][ T7312] FAULT_INJECTION: forcing a failure. [ 203.614480][ T7312] name failslab, interval 1, probability 0, space 0, times 0 [ 203.628728][ T7311] FAULT_INJECTION: forcing a failure. [ 203.628728][ T7311] name failslab, interval 1, probability 0, space 0, times 0 [ 203.645861][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 203.656911][ T5902] usb 2-1: Product: syz [ 203.663177][ T5902] usb 2-1: Manufacturer: syz [ 203.672668][ T5902] usb 2-1: SerialNumber: syz [ 203.673834][ T7311] CPU: 0 UID: 0 PID: 7311 Comm: syz.2.438 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 203.673866][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.673881][ T7311] Call Trace: [ 203.673891][ T7311] [ 203.673901][ T7311] dump_stack_lvl+0x241/0x360 [ 203.673945][ T7311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.673977][ T7311] ? __pfx__printk+0x10/0x10 [ 203.674015][ T7311] ? __pfx___might_resched+0x10/0x10 [ 203.674050][ T7311] should_fail_ex+0x424/0x570 [ 203.674079][ T7311] should_failslab+0xac/0x100 [ 203.674113][ T7311] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 203.674145][ T7311] ? __d_alloc+0x31/0x740 [ 203.674176][ T7311] __d_alloc+0x31/0x740 [ 203.674208][ T7311] d_alloc+0x4b/0x190 [ 203.674237][ T7311] lookup_one_qstr_excl+0xe1/0x3a0 [ 203.674267][ T7311] filename_create+0x28b/0x490 [ 203.674300][ T7311] ? __pfx_filename_create+0x10/0x10 [ 203.674344][ T7311] do_mkdirat+0xbf/0x3f0 [ 203.674377][ T7311] ? __pfx_do_mkdirat+0x10/0x10 [ 203.674408][ T7311] ? getname_flags+0x1e2/0x530 [ 203.674447][ T7311] __ia32_sys_mkdirat+0x87/0xa0 [ 203.674476][ T7311] __do_fast_syscall_32+0xb4/0x110 [ 203.674504][ T7311] ? exc_page_fault+0x5f8/0x920 [ 203.674536][ T7311] do_fast_syscall_32+0x34/0x80 [ 203.674564][ T7311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.674593][ T7311] RIP: 0023:0xf746d579 [ 203.674612][ T7311] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 203.674640][ T7311] RSP: 002b:00000000f50f63c8 EFLAGS: 00000206 ORIG_RAX: 0000000000000128 [ 203.674666][ T7311] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 203.674682][ T7311] RDX: 00000000000001ff RSI: 0000000080002280 RDI: 0000000000000000 [ 203.674695][ T7311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.674709][ T7311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 203.674723][ T7311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.674757][ T7311] [ 203.752890][ T7312] CPU: 0 UID: 0 PID: 7312 Comm: syz.3.439 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 203.752924][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.752939][ T7312] Call Trace: [ 203.752948][ T7312] [ 203.752957][ T7312] dump_stack_lvl+0x241/0x360 [ 203.752998][ T7312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.753031][ T7312] ? __pfx__printk+0x10/0x10 [ 203.753067][ T7312] ? __pfx___might_resched+0x10/0x10 [ 203.753102][ T7312] should_fail_ex+0x424/0x570 [ 203.753132][ T7312] should_failslab+0xac/0x100 [ 203.753165][ T7312] ? __get_vm_area_node+0x132/0x2d0 [ 203.753197][ T7312] __kmalloc_cache_node_noprof+0x74/0x3c0 [ 203.753239][ T7312] __get_vm_area_node+0x132/0x2d0 [ 203.753277][ T7312] __vmalloc_node_range_noprof+0x349/0x1390 [ 203.753313][ T7312] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 203.753341][ T7312] ? kstrtoull+0x1d3/0x2f0 [ 203.753368][ T7312] ? __pfx_kstrtoull+0x10/0x10 [ 203.753415][ T7312] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.753461][ T7312] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 203.753489][ T7312] __vmalloc_noprof+0x79/0x90 [ 203.753510][ T7312] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 203.753536][ T7312] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 203.753560][ T7312] ? bpf_prog_alloc+0x28/0x1b0 [ 203.753587][ T7312] bpf_prog_alloc+0x3a/0x1b0 [ 203.753620][ T7312] bpf_prog_load+0x7f4/0x2250 [ 203.753658][ T7312] ? __pfx_bpf_prog_load+0x10/0x10 [ 203.753710][ T7312] ? bpf_lsm_bpf+0x9/0x10 [ 203.753739][ T7312] __sys_bpf+0x5dd/0x8b0 [ 203.753764][ T7312] ? __pfx___sys_bpf+0x10/0x10 [ 203.753801][ T7312] ? ksys_write+0x275/0x2d0 [ 203.753842][ T7312] __ia32_sys_bpf+0x7c/0x90 [ 203.753876][ T7312] __do_fast_syscall_32+0xb4/0x110 [ 203.753907][ T7312] ? exc_page_fault+0x5f8/0x920 [ 203.753938][ T7312] do_fast_syscall_32+0x34/0x80 [ 203.753965][ T7312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.753994][ T7312] RIP: 0023:0xf7fa4579 [ 203.754014][ T7312] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 203.754033][ T7312] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 203.754059][ T7312] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008000e000 [ 203.754075][ T7312] RDX: 0000000000000055 RSI: 0000000000000000 RDI: 0000000000000000 [ 203.754089][ T7312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.754103][ T7312] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 203.754115][ T7312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.754147][ T7312] [ 203.770330][ T7312] syz.3.439: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 203.932254][ T5902] usb 2-1: config 0 descriptor?? [ 204.215312][ T7312] ,cpuset=/,mems_allowed=0-1 [ 204.225853][ T7312] CPU: 1 UID: 0 PID: 7312 Comm: syz.3.439 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 204.225884][ T7312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.225898][ T7312] Call Trace: [ 204.225906][ T7312] [ 204.225915][ T7312] dump_stack_lvl+0x241/0x360 [ 204.225953][ T7312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.225984][ T7312] ? __pfx__printk+0x10/0x10 [ 204.226012][ T7312] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 204.226057][ T7312] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 204.226088][ T7312] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 204.226122][ T7312] warn_alloc+0x27c/0x410 [ 204.226150][ T7312] ? __pfx_warn_alloc+0x10/0x10 [ 204.226182][ T7312] ? __get_vm_area_node+0x280/0x2d0 [ 204.226221][ T7312] __vmalloc_node_range_noprof+0x36e/0x1390 [ 204.226257][ T7312] ? kstrtoull+0x1d3/0x2f0 [ 204.226291][ T7312] ? __pfx_kstrtoull+0x10/0x10 [ 204.226333][ T7312] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 204.226377][ T7312] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 204.226400][ T7312] __vmalloc_noprof+0x79/0x90 [ 204.226420][ T7312] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 204.226444][ T7312] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 204.226466][ T7312] ? bpf_prog_alloc+0x28/0x1b0 [ 204.226491][ T7312] bpf_prog_alloc+0x3a/0x1b0 [ 204.226516][ T7312] bpf_prog_load+0x7f4/0x2250 [ 204.226552][ T7312] ? __pfx_bpf_prog_load+0x10/0x10 [ 204.226600][ T7312] ? bpf_lsm_bpf+0x9/0x10 [ 204.226628][ T7312] __sys_bpf+0x5dd/0x8b0 [ 204.226661][ T7312] ? __pfx___sys_bpf+0x10/0x10 [ 204.226697][ T7312] ? ksys_write+0x275/0x2d0 [ 204.226734][ T7312] __ia32_sys_bpf+0x7c/0x90 [ 204.226767][ T7312] __do_fast_syscall_32+0xb4/0x110 [ 204.226793][ T7312] ? exc_page_fault+0x5f8/0x920 [ 204.226822][ T7312] do_fast_syscall_32+0x34/0x80 [ 204.226849][ T7312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.226879][ T7312] RIP: 0023:0xf7fa4579 [ 204.226897][ T7312] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 204.226916][ T7312] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 204.226938][ T7312] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008000e000 [ 204.226953][ T7312] RDX: 0000000000000055 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.226966][ T7312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.226979][ T7312] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.226992][ T7312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.227022][ T7312] [ 204.227092][ T7312] Mem-Info: [ 204.494252][ T7312] active_anon:5411 inactive_anon:0 isolated_anon:0 [ 204.494252][ T7312] active_file:10187 inactive_file:38325 isolated_file:0 [ 204.494252][ T7312] unevictable:768 dirty:172 writeback:0 [ 204.494252][ T7312] slab_reclaimable:9604 slab_unreclaimable:101260 [ 204.494252][ T7312] mapped:29598 shmem:1433 pagetables:971 [ 204.494252][ T7312] sec_pagetables:0 bounce:0 [ 204.494252][ T7312] kernel_misc_reclaimable:0 [ 204.494252][ T7312] free:1328509 free_pcp:565 free_cma:0 [ 204.541695][ T7312] Node 0 active_anon:21644kB inactive_anon:0kB active_file:40748kB inactive_file:153224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118392kB dirty:684kB writeback:0kB shmem:4196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11112kB pagetables:3884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.577665][ T7312] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.578187][ T7303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 204.651007][ T7321] tipc: Started in network mode [ 204.656031][ T7321] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 204.663840][ T7321] tipc: Enabled bearer , priority 10 [ 204.706867][ T7312] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.854624][ T7312] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 204.861886][ T7312] Node 0 DMA32 free:1392424kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:22136kB inactive_anon:0kB active_file:40748kB inactive_file:153132kB unevictable:1536kB writepending:684kB present:3129332kB managed:2547244kB mlocked:0kB bounce:0kB free_pcp:2140kB local_pcp:976kB free_cma:0kB [ 205.017658][ T7312] lowmem_reserve[]: 0 0 0 0 0 [ 205.022484][ T7312] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 205.067171][ T5948] usb 2-1: USB disconnect, device number 28 [ 205.081193][ T7312] lowmem_reserve[]: 0 0 0 0 0 [ 205.325917][ T7312] Node 1 Normal free:3905860kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.364960][ T7312] lowmem_reserve[]: 0 0 0 0 0 [ 205.370089][ T5902] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 205.385437][ T7312] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 205.417390][ T7312] Node 0 DMA32: 1*4kB (U) 233*8kB (UME) 356*16kB (UME) 356*32kB (UME) 558*64kB (UME) 243*128kB (UME) 118*256kB (U) 58*512kB (UME) 34*1024kB (U) 7*2048kB (UM) 292*4096kB (M) = 1390860kB [ 205.447182][ T7312] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 205.461837][ T7312] Node 1 Normal: 219*4kB (UME) 45*8kB (UME) 45*16kB (UME) 221*32kB (UME) 88*64kB (UME) 32*128kB (UME) 8*256kB (UM) 8*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (UM) = 3905860kB [ 205.486105][ T7312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.506002][ T7312] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.527329][ T7312] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.541434][ T5902] usb 3-1: config 0 has no interfaces? [ 205.549180][ T7312] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.561828][ T5902] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 205.571552][ T5902] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 205.586042][ T7312] 49947 total pagecache pages [ 205.590974][ T7312] 0 pages in swap cache [ 205.603318][ T5902] usb 3-1: Product: syz [ 205.605954][ T7312] Free swap = 124996kB [ 205.619604][ T5902] usb 3-1: Manufacturer: syz [ 205.624279][ T5902] usb 3-1: SerialNumber: syz [ 205.643589][ T7312] Total swap = 124996kB [ 205.644626][ T5902] usb 3-1: config 0 descriptor?? [ 205.658186][ T5948] tipc: Node number set to 9480874 [ 205.686115][ T7312] 2097051 pages RAM [ 205.690004][ T7312] 0 pages HighMem/MovableOnly [ 205.694713][ T7312] 428582 pages reserved [ 205.731499][ T7312] 0 pages cma reserved [ 206.249252][ T5842] usb 3-1: USB disconnect, device number 25 [ 206.413688][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 206.413708][ T30] audit: type=1326 audit(1744092490.022:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 206.485949][ T7349] FAULT_INJECTION: forcing a failure. [ 206.485949][ T7349] name failslab, interval 1, probability 0, space 0, times 0 [ 206.529871][ T7349] CPU: 0 UID: 0 PID: 7349 Comm: syz.4.449 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 206.529907][ T7349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.529921][ T7349] Call Trace: [ 206.529930][ T7349] [ 206.529939][ T7349] dump_stack_lvl+0x241/0x360 [ 206.529977][ T7349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.530008][ T7349] ? __pfx__printk+0x10/0x10 [ 206.530043][ T7349] ? __pfx___might_resched+0x10/0x10 [ 206.530075][ T7349] should_fail_ex+0x424/0x570 [ 206.530104][ T7349] should_failslab+0xac/0x100 [ 206.530135][ T7349] kmem_cache_alloc_noprof+0x78/0x390 [ 206.530165][ T7349] ? audit_log_start+0x41f/0xa20 [ 206.530199][ T7349] audit_log_start+0x41f/0xa20 [ 206.530238][ T7349] ? __pfx_audit_log_start+0x10/0x10 [ 206.530265][ T7349] ? migrate_enable+0x397/0x520 [ 206.530299][ T7349] ? __pfx_migrate_enable+0x10/0x10 [ 206.530334][ T7349] ? __pfx___cant_migrate+0x10/0x10 [ 206.530368][ T7349] audit_seccomp+0x63/0x1f0 [ 206.530400][ T7349] __seccomp_filter+0xaea/0x1f20 [ 206.530428][ T7349] ? vfs_write+0xb29/0xd10 [ 206.530462][ T7349] ? ksys_write+0x24e/0x2d0 [ 206.530490][ T7349] ? __pfx___seccomp_filter+0x10/0x10 [ 206.530514][ T7349] ? __mutex_unlock_slowpath+0x229/0x800 [ 206.530552][ T7349] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 206.530576][ T7349] ? __fget_files+0x2a/0x420 [ 206.530599][ T7349] ? __fget_files+0x2a/0x420 [ 206.530628][ T7349] ? ksys_write+0x275/0x2d0 [ 206.530655][ T7349] ? __secure_computing+0xef/0x2f0 [ 206.530687][ T7349] syscall_trace_enter+0xa6/0x150 [ 206.530715][ T7349] __do_fast_syscall_32+0x9b/0x110 [ 206.530741][ T7349] ? exc_page_fault+0x5f8/0x920 [ 206.530771][ T7349] do_fast_syscall_32+0x34/0x80 [ 206.530805][ T7349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 206.530831][ T7349] RIP: 0023:0xf7fa6579 [ 206.530849][ T7349] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 206.530867][ T7349] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000034 [ 206.530890][ T7349] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000003 [ 206.530905][ T7349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.530918][ T7349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.530931][ T7349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 206.530949][ T7349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 206.530980][ T7349] [ 206.531246][ T7349] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 206.623122][ T30] audit: type=1326 audit(1744092490.062:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 206.690972][ T7349] audit: out of memory in audit_log_start [ 206.695582][ T30] audit: type=1326 audit(1744092490.072:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 206.843719][ T30] audit: type=1326 audit(1744092490.082:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 206.866021][ T30] audit: type=1326 audit(1744092490.082:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 206.888592][ T30] audit: type=1326 audit(1744092490.092:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 206.910546][ T30] audit: type=1326 audit(1744092490.092:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 206.934144][ T30] audit: type=1326 audit(1744092490.092:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 207.265880][ T5898] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 207.576662][ T5898] usb 1-1: config 0 has no interfaces? [ 207.623997][ T5898] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 207.646840][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.673080][ T5898] usb 1-1: Product: syz [ 207.677467][ T5842] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 207.694537][ T5898] usb 1-1: Manufacturer: syz [ 207.728186][ T5898] usb 1-1: SerialNumber: syz [ 207.876227][ T5898] usb 1-1: config 0 descriptor?? [ 207.896187][ T5842] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 207.940755][ T5842] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 207.991456][ T5842] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 208.036107][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.179785][ T7353] Cannot find add_set index 1 as target [ 209.085964][ T5842] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 209.244835][ T5842] usb 2-1: device descriptor read/64, error -71 [ 209.505812][ T5842] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 209.642946][ T5842] usb 2-1: device descriptor read/64, error -71 [ 209.778780][ T5842] usb usb2-port1: attempt power cycle [ 210.076985][ T1209] usb 1-1: USB disconnect, device number 21 [ 210.155807][ T5842] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 210.202354][ T5842] usb 2-1: device descriptor read/8, error -71 [ 210.445800][ T5842] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 210.482483][ T7395] FAULT_INJECTION: forcing a failure. [ 210.482483][ T7395] name failslab, interval 1, probability 0, space 0, times 0 [ 210.514006][ T5842] usb 2-1: device descriptor read/8, error -71 [ 210.549603][ T7395] CPU: 0 UID: 0 PID: 7395 Comm: syz.4.464 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 210.549637][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.549651][ T7395] Call Trace: [ 210.549660][ T7395] [ 210.549670][ T7395] dump_stack_lvl+0x241/0x360 [ 210.549713][ T7395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.549744][ T7395] ? __pfx__printk+0x10/0x10 [ 210.549781][ T7395] ? __pfx___might_resched+0x10/0x10 [ 210.549813][ T7395] should_fail_ex+0x424/0x570 [ 210.549841][ T7395] should_failslab+0xac/0x100 [ 210.549875][ T7395] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 210.549910][ T7395] ? __alloc_skb+0x1c2/0x480 [ 210.549935][ T7395] __alloc_skb+0x1c2/0x480 [ 210.549961][ T7395] ? __pfx___alloc_skb+0x10/0x10 [ 210.549979][ T7395] ? rcu_is_watching+0x15/0xb0 [ 210.550007][ T7395] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 210.550043][ T7395] ? audit_log_start+0x41f/0xa20 [ 210.550077][ T7395] audit_log_start+0x446/0xa20 [ 210.550117][ T7395] ? __pfx_audit_log_start+0x10/0x10 [ 210.550144][ T7395] ? migrate_enable+0x397/0x520 [ 210.550178][ T7395] ? __pfx_migrate_enable+0x10/0x10 [ 210.550206][ T7395] ? __pfx___cant_migrate+0x10/0x10 [ 210.550240][ T7395] audit_seccomp+0x63/0x1f0 [ 210.550272][ T7395] __seccomp_filter+0xaea/0x1f20 [ 210.550299][ T7395] ? vfs_write+0xb29/0xd10 [ 210.550334][ T7395] ? ksys_write+0x24e/0x2d0 [ 210.550360][ T7395] ? __pfx___seccomp_filter+0x10/0x10 [ 210.550385][ T7395] ? __mutex_unlock_slowpath+0x229/0x800 [ 210.550422][ T7395] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 210.550447][ T7395] ? __fget_files+0x2a/0x420 [ 210.550471][ T7395] ? __fget_files+0x2a/0x420 [ 210.550507][ T7395] ? __secure_computing+0xef/0x2f0 [ 210.550539][ T7395] syscall_trace_enter+0xa6/0x150 [ 210.550567][ T7395] __do_fast_syscall_32+0x9b/0x110 [ 210.550593][ T7395] ? exc_page_fault+0x5f8/0x920 [ 210.550623][ T7395] do_fast_syscall_32+0x34/0x80 [ 210.550650][ T7395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.550677][ T7395] RIP: 0023:0xf7fa6579 [ 210.550694][ T7395] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 210.550713][ T7395] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000034 [ 210.550736][ T7395] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000003 [ 210.550751][ T7395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.550764][ T7395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.550775][ T7395] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 210.550786][ T7395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.550817][ T7395] [ 210.841768][ T5842] usb usb2-port1: unable to enumerate USB device [ 210.893118][ T7396] batman_adv: batadv0: Adding interface: dummy0 [ 210.899667][ T7396] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.978222][ T7396] batman_adv: batadv0: Interface activated: dummy0 [ 211.188797][ T7396] openvswitch: netlink: Flow actions attr not present in new flow. [ 211.194217][ T7399] batadv0: mtu less than device minimum [ 211.215243][ T7399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.227508][ T7399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.239585][ T7399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.251625][ T7399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.263712][ T7399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.275828][ T7399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.287890][ T7399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.299489][ T7399] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.516391][ T1209] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 211.540089][ T5902] usb 4-1: USB disconnect, device number 25 [ 211.679211][ T1209] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 211.722946][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.748010][ T7396] netlink: 76 bytes leftover after parsing attributes in process `syz.2.462'. [ 211.761122][ T1209] usb 5-1: config 0 descriptor?? [ 211.787958][ T1209] gspca_main: spca508-2.14.0 probing 8086:0110 [ 211.991332][ T7398] usb usb8: usbfs: process 7398 (syz.4.465) did not claim interface 0 before use [ 212.044265][ T1209] gspca_spca508: reg_read err -71 [ 212.065215][ T1209] gspca_spca508: reg_read err -71 [ 212.091153][ T1209] gspca_spca508: reg_read err -71 [ 212.101255][ T1209] gspca_spca508: reg_read err -71 [ 212.124424][ T1209] gspca_spca508: reg_read err -71 [ 212.148881][ T1209] gspca_spca508: reg write: error -71 [ 212.165057][ T1209] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 212.200297][ T1209] usb 5-1: USB disconnect, device number 28 [ 212.720172][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 212.720195][ T30] audit: type=1326 audit(1744092496.332:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 212.818728][ T7440] ======================================================= [ 212.818728][ T7440] WARNING: The mand mount option has been deprecated and [ 212.818728][ T7440] and is ignored by this kernel. Remove the mand [ 212.818728][ T7440] option from the mount to silence this warning. [ 212.818728][ T7440] ======================================================= [ 212.901729][ T30] audit: type=1326 audit(1744092496.332:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 213.044363][ T30] audit: type=1326 audit(1744092496.342:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 213.153283][ T30] audit: type=1326 audit(1744092496.342:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 213.237931][ T30] audit: type=1326 audit(1744092496.342:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 213.266882][ T30] audit: type=1326 audit(1744092496.342:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 213.325847][ T5902] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 213.346822][ T30] audit: type=1326 audit(1744092496.342:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 213.475928][ T30] audit: type=1326 audit(1744092496.342:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 213.635967][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 213.644309][ T1209] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 213.644471][ T30] audit: type=1326 audit(1744092496.342:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 213.698522][ T5902] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 213.724040][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.773179][ T5902] usb 2-1: config 0 has no interface number 0 [ 213.785971][ T5902] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 213.805825][ T30] audit: type=1326 audit(1744092496.342:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7437 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 213.865792][ T5902] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 213.897939][ T7455] fuse: Unknown parameter 'permit_directio' [ 213.904469][ T5898] IPVS: starting estimator thread 0... [ 213.923135][ T5902] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 213.940994][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.045992][ T7457] IPVS: using max 37 ests per chain, 88800 per kthread [ 214.069944][ T1209] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 214.195019][ T5902] usb 2-1: Product: syz [ 214.201947][ T5902] usb 2-1: Manufacturer: syz [ 214.206948][ T5902] usb 2-1: SerialNumber: syz [ 214.229899][ T1209] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 214.308485][ T1209] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.326700][ T5902] usb 2-1: config 0 descriptor?? [ 214.354818][ T7446] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.368571][ T7446] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.373251][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.399532][ T5902] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.535576][ T7462] loop2: detected capacity change from 0 to 7 [ 214.574751][ T7462] Dev loop2: unable to read RDB block 7 [ 214.596975][ T7462] loop2: unable to read partition table [ 214.602901][ T7462] loop2: partition table beyond EOD, truncated [ 214.650587][ T7462] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 214.810355][ T5902] usb 2-1: USB disconnect, device number 33 [ 215.284002][ T7474] syz_tun: entered allmulticast mode [ 215.505604][ T7477] netlink: 64 bytes leftover after parsing attributes in process `syz.3.489'. [ 216.776005][ T5842] usb 3-1: USB disconnect, device number 26 [ 217.540983][ T7507] sit0: entered promiscuous mode [ 217.573180][ T7507] netlink: 'syz.2.498': attribute type 1 has an invalid length. [ 217.610971][ T7507] netlink: 1 bytes leftover after parsing attributes in process `syz.2.498'. [ 218.385820][ T5902] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 218.548944][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 218.569755][ T5902] usb 2-1: config 0 has no interfaces? [ 218.576657][ T5948] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 218.600326][ T5902] usb 2-1: New USB device found, idVendor=2c42, idProduct=0302, bcdDevice= 0.00 [ 218.630796][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 218.651875][ T5902] usb 2-1: Product: syz [ 218.666579][ T5902] usb 2-1: SerialNumber: syz [ 218.692088][ T5902] usb 2-1: config 0 descriptor?? [ 218.751881][ T5948] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.792924][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 218.842608][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 218.873114][ T5948] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.918472][ T5948] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 218.935947][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.977925][ T5948] usb 3-1: config 0 descriptor?? [ 218.985630][ T7526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.505'. [ 219.042791][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.505'. [ 219.086361][ T7526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.505'. [ 219.202338][ T5948] usb 3-1: USB disconnect, device number 27 [ 219.355263][ T5898] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 219.518016][ T5898] usb 5-1: config 0 has no interfaces? [ 219.532377][ T5898] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 219.541788][ T5898] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 219.572223][ T5898] usb 5-1: Product: syz [ 219.595510][ T5898] usb 5-1: Manufacturer: syz [ 219.606698][ T5898] usb 5-1: SerialNumber: syz [ 219.628926][ T5898] usb 5-1: config 0 descriptor?? [ 219.952207][ T5898] usb 5-1: USB disconnect, device number 29 [ 220.395906][ T47] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 220.563665][ T47] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 220.580919][ T47] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 220.591290][ T47] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 220.624791][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 220.624811][ T30] audit: type=1326 audit(1744092504.232:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 220.659828][ T7543] FAULT_INJECTION: forcing a failure. [ 220.659828][ T7543] name failslab, interval 1, probability 0, space 0, times 0 [ 220.675879][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.676253][ T7543] CPU: 0 UID: 0 PID: 7543 Comm: syz.4.508 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 220.676283][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.676299][ T7543] Call Trace: [ 220.676308][ T7543] [ 220.676317][ T7543] dump_stack_lvl+0x241/0x360 [ 220.676360][ T7543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.676393][ T7543] ? __pfx__printk+0x10/0x10 [ 220.676429][ T7543] ? __pfx___might_resched+0x10/0x10 [ 220.676465][ T7543] should_fail_ex+0x424/0x570 [ 220.676495][ T7543] should_failslab+0xac/0x100 [ 220.676528][ T7543] __kmalloc_cache_noprof+0x73/0x370 [ 220.676560][ T7543] ? audit_log_d_path+0xb5/0x190 [ 220.676597][ T7543] audit_log_d_path+0xb5/0x190 [ 220.676631][ T7543] audit_log_d_path_exe+0x42/0x70 [ 220.676664][ T7543] audit_log_task+0x2cd/0x3e0 [ 220.676696][ T7543] ? __pfx_audit_log_task+0x10/0x10 [ 220.676725][ T7543] ? __pfx___cant_migrate+0x10/0x10 [ 220.676761][ T7543] audit_seccomp+0x7b/0x1f0 [ 220.676794][ T7543] __seccomp_filter+0xaea/0x1f20 [ 220.676821][ T7543] ? vfs_write+0xb29/0xd10 [ 220.676859][ T7543] ? ksys_write+0x24e/0x2d0 [ 220.676887][ T7543] ? __pfx___seccomp_filter+0x10/0x10 [ 220.676913][ T7543] ? __mutex_unlock_slowpath+0x229/0x800 [ 220.676953][ T7543] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 220.676979][ T7543] ? __fget_files+0x2a/0x420 [ 220.677004][ T7543] ? __fget_files+0x2a/0x420 [ 220.677035][ T7543] ? ksys_write+0x275/0x2d0 [ 220.677064][ T7543] ? __secure_computing+0xef/0x2f0 [ 220.677096][ T7543] syscall_trace_enter+0xa6/0x150 [ 220.677125][ T7543] __do_fast_syscall_32+0x9b/0x110 [ 220.677153][ T7543] ? exc_page_fault+0x5f8/0x920 [ 220.677186][ T7543] do_fast_syscall_32+0x34/0x80 [ 220.677221][ T7543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.677250][ T7543] RIP: 0023:0xf7fa6579 [ 220.677270][ T7543] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 220.677289][ T7543] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000034 [ 220.677314][ T7543] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000003 [ 220.677330][ T7543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.677344][ T7543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.677357][ T7543] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 220.677371][ T7543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.677405][ T7543] [ 220.939012][ T30] audit: type=1326 audit(1744092504.272:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 220.961785][ T30] audit: type=1326 audit(1744092504.272:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 220.984495][ T30] audit: type=1326 audit(1744092504.272:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 221.006434][ T30] audit: type=1326 audit(1744092504.272:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 221.028484][ T30] audit: type=1326 audit(1744092504.272:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 221.051897][ T30] audit: type=1326 audit(1744092504.272:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 221.074495][ T30] audit: type=1326 audit(1744092504.272:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 221.102471][ T30] audit: type=1326 audit(1744092504.272:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 221.181311][ T30] audit: type=1326 audit(1744092504.272:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7542 comm="syz.4.508" exe="" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 221.376991][ T7545] netlink: 220 bytes leftover after parsing attributes in process `syz.2.509'. [ 221.399731][ T7547] loop2: detected capacity change from 0 to 7 [ 221.410427][ T7547] Dev loop2: unable to read RDB block 7 [ 221.416828][ T7547] loop2: unable to read partition table [ 221.423216][ T7547] loop2: partition table beyond EOD, truncated [ 221.454297][ T5842] usb 2-1: USB disconnect, device number 34 [ 221.506530][ T7547] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 221.755853][ T47] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 222.066295][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 222.183932][ T47] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 222.194515][ T47] usb 3-1: config 0 has no interface number 0 [ 222.227768][ T47] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.280593][ T47] usb 3-1: config 0 interface 85 has no altsetting 0 [ 222.497296][ T47] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 222.506846][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.522834][ T47] usb 3-1: Product: syz [ 222.542293][ T47] usb 3-1: Manufacturer: syz [ 222.556307][ T47] usb 3-1: SerialNumber: syz [ 222.634094][ T47] usb 3-1: config 0 descriptor?? [ 223.271816][ T47] appletouch 3-1:0.85: Geyser mode initialized. [ 223.310249][ T47] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input14 [ 223.438877][ T5842] usb 1-1: USB disconnect, device number 22 [ 223.524345][ T5902] usb 3-1: USB disconnect, device number 28 [ 223.585416][ T5902] appletouch 3-1:0.85: input: appletouch disconnected [ 223.646113][ T47] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 223.842666][ T47] usb 5-1: config 0 has no interfaces? [ 223.869646][ T47] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 223.910714][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.973953][ T47] usb 5-1: Product: syz [ 223.990560][ T47] usb 5-1: Manufacturer: syz [ 224.002995][ T47] usb 5-1: SerialNumber: syz [ 224.030607][ T47] usb 5-1: config 0 descriptor?? [ 224.786003][ T47] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 224.889753][ T7586] FAULT_INJECTION: forcing a failure. [ 224.889753][ T7586] name failslab, interval 1, probability 0, space 0, times 0 [ 224.919568][ T7586] CPU: 0 UID: 0 PID: 7586 Comm: syz.2.521 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 224.919609][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.919623][ T7586] Call Trace: [ 224.919631][ T7586] [ 224.919640][ T7586] dump_stack_lvl+0x241/0x360 [ 224.919679][ T7586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.919711][ T7586] ? __pfx__printk+0x10/0x10 [ 224.919746][ T7586] ? __pfx___might_resched+0x10/0x10 [ 224.919776][ T7586] should_fail_ex+0x424/0x570 [ 224.919805][ T7586] should_failslab+0xac/0x100 [ 224.919837][ T7586] kmem_cache_alloc_noprof+0x78/0x390 [ 224.919866][ T7586] ? getname_flags+0xb6/0x530 [ 224.919904][ T7586] getname_flags+0xb6/0x530 [ 224.919939][ T7586] user_path_at+0x24/0x60 [ 224.919963][ T7586] __ia32_sys_umount+0xf0/0x170 [ 224.919992][ T7586] ? __pfx___ia32_sys_umount+0x10/0x10 [ 224.920019][ T7586] ? __secure_computing+0xef/0x2f0 [ 224.920056][ T7586] __do_fast_syscall_32+0xb4/0x110 [ 224.920083][ T7586] ? exc_page_fault+0x5f8/0x920 [ 224.920112][ T7586] do_fast_syscall_32+0x34/0x80 [ 224.920143][ T7586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.920169][ T7586] RIP: 0023:0xf746d579 [ 224.920187][ T7586] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 224.920207][ T7586] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000034 [ 224.920230][ T7586] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000003 [ 224.920245][ T7586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 224.920257][ T7586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.920270][ T7586] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 224.920283][ T7586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.920314][ T7586] [ 225.112501][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.160357][ T47] usb 2-1: config 0 has no interfaces? [ 225.340191][ T47] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 225.383526][ T47] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 225.406883][ T7588] loop2: detected capacity change from 0 to 7 [ 225.434617][ T47] usb 2-1: Product: syz [ 225.443339][ T47] usb 2-1: Manufacturer: syz [ 225.443443][ T7588] Dev loop2: unable to read RDB block 7 [ 225.448565][ T47] usb 2-1: SerialNumber: syz [ 225.469798][ T47] usb 2-1: config 0 descriptor?? [ 225.485679][ T7588] loop2: unable to read partition table [ 225.492241][ T7588] loop2: partition table beyond EOD, truncated [ 225.518282][ T7588] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.619893][ T5213] Dev loop2: unable to read RDB block 7 [ 225.633902][ T5213] loop2: unable to read partition table [ 225.673414][ T5213] loop2: partition table beyond EOD, truncated [ 225.773198][ T47] usb 2-1: USB disconnect, device number 35 [ 226.137836][ T5842] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 226.352399][ T1209] usb 5-1: USB disconnect, device number 30 [ 226.375488][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.403260][ T5842] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 226.459177][ T5842] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 226.471621][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.494643][ T5842] usb 3-1: Product: syz [ 226.499416][ T5842] usb 3-1: Manufacturer: syz [ 226.504050][ T5842] usb 3-1: SerialNumber: syz [ 226.539384][ T5842] usb 3-1: config 0 descriptor?? [ 226.559843][ T5842] powermate 3-1:0.0: probe with driver powermate failed with error -22 [ 226.753170][ T5842] usb 3-1: USB disconnect, device number 29 [ 226.926276][ T1209] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 227.040314][ T7492] net_ratelimit: 11 callbacks suppressed [ 227.040332][ T7492] Set syz1 is full, maxelem 65536 reached [ 227.111589][ T1209] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 227.197995][ T1209] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 227.305210][ T1209] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.409301][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.633905][ T7625] netlink: 'syz.1.533': attribute type 12 has an invalid length. [ 227.675538][ T7625] netlink: 'syz.1.533': attribute type 29 has an invalid length. [ 227.692853][ T7625] netlink: 148 bytes leftover after parsing attributes in process `syz.1.533'. [ 227.800174][ T7625] netlink: 'syz.1.533': attribute type 1 has an invalid length. [ 227.808502][ T7629] loop2: detected capacity change from 0 to 7 [ 227.820442][ T7631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.534'. [ 227.833033][ T7629] Dev loop2: unable to read RDB block 7 [ 227.842507][ T7631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.534'. [ 227.843604][ T7621] delete_channel: no stack [ 227.873209][ T7629] loop2: unable to read partition table [ 227.879346][ T7631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.534'. [ 227.905338][ T7629] loop2: partition table beyond EOD, truncated [ 227.918400][ T7629] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 227.937844][ T5213] Dev loop2: unable to read RDB block 7 [ 227.943626][ T5213] loop2: unable to read partition table [ 227.953334][ T5213] loop2: partition table beyond EOD, truncated [ 228.156203][ T1209] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 228.206992][ T7637] loop2: detected capacity change from 0 to 7 [ 228.230449][ T7637] Dev loop2: unable to read RDB block 7 [ 228.246610][ T7637] loop2: unable to read partition table [ 228.264935][ T7637] loop2: partition table beyond EOD, truncated [ 228.286006][ T1209] usb 5-1: device descriptor read/64, error -71 [ 228.306740][ T7637] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 228.553588][ T1209] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 228.707917][ T1209] usb 5-1: device descriptor read/64, error -71 [ 228.826472][ T1209] usb usb5-port1: attempt power cycle [ 228.876615][ T5948] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 228.886788][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.539'. [ 229.118520][ T5948] usb 3-1: config 0 has no interfaces? [ 229.247531][ T1209] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 229.679745][ T5948] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 229.698135][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.797197][ T1209] usb 5-1: device descriptor read/8, error -71 [ 229.830629][ T5948] usb 3-1: Product: syz [ 229.839356][ T5948] usb 3-1: Manufacturer: syz [ 229.852175][ T5948] usb 3-1: SerialNumber: syz [ 229.870106][ T5948] usb 3-1: config 0 descriptor?? [ 229.962769][ T5948] usb 1-1: USB disconnect, device number 23 [ 230.068457][ T1209] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 230.130563][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 230.149297][ T1209] usb 5-1: device descriptor read/8, error -71 [ 230.160994][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 230.161017][ T30] audit: type=1326 audit(1744092513.772:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 230.204126][ T7657] FAULT_INJECTION: forcing a failure. [ 230.204126][ T7657] name failslab, interval 1, probability 0, space 0, times 0 [ 230.229905][ T7657] CPU: 0 UID: 0 PID: 7657 Comm: syz.0.543 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 230.229937][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.229951][ T7657] Call Trace: [ 230.229960][ T7657] [ 230.229968][ T7657] dump_stack_lvl+0x241/0x360 [ 230.230009][ T7657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.230039][ T7657] ? __pfx__printk+0x10/0x10 [ 230.230082][ T7657] ? __pfx___might_resched+0x10/0x10 [ 230.230114][ T7657] should_fail_ex+0x424/0x570 [ 230.230142][ T7657] should_failslab+0xac/0x100 [ 230.230174][ T7657] __kmalloc_noprof+0xdf/0x4d0 [ 230.230203][ T7657] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 230.230234][ T7657] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 230.230272][ T7657] tomoyo_realpath_from_path+0xcf/0x5e0 [ 230.230318][ T7657] tomoyo_path_perm+0x2be/0x640 [ 230.230349][ T7657] ? tomoyo_path_perm+0x28c/0x640 [ 230.230382][ T7657] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 230.230416][ T7657] ? __pfx_stack_trace_save+0x10/0x10 [ 230.230466][ T7657] ? aa_get_newest_label+0x101/0x6f0 [ 230.230494][ T7657] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.230524][ T7657] ? hook_sb_umount+0x1d8/0x460 [ 230.230551][ T7657] ? __pfx_hook_sb_umount+0x10/0x10 [ 230.230580][ T7657] tomoyo_sb_umount+0xd1/0x110 [ 230.230604][ T7657] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 230.230630][ T7657] ? bpf_lsm_capable+0x9/0x10 [ 230.230654][ T7657] ? security_capable+0x7e/0x2d0 [ 230.230688][ T7657] security_sb_umount+0xb9/0x280 [ 230.230721][ T7657] path_umount+0x3ef/0xfb0 [ 230.230760][ T7657] ? user_path_at+0x44/0x60 [ 230.230783][ T7657] ? __pfx_path_umount+0x10/0x10 [ 230.230809][ T7657] ? kmem_cache_free+0x197/0x410 [ 230.230838][ T7657] ? user_path_at+0x44/0x60 [ 230.230885][ T7657] __ia32_sys_umount+0x122/0x170 [ 230.230914][ T7657] ? __pfx___ia32_sys_umount+0x10/0x10 [ 230.230940][ T7657] ? __secure_computing+0xef/0x2f0 [ 230.230978][ T7657] __do_fast_syscall_32+0xb4/0x110 [ 230.231007][ T7657] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 230.231028][ T7657] ? lockdep_hardirqs_on+0x9d/0x150 [ 230.231056][ T7657] do_fast_syscall_32+0x34/0x80 [ 230.231090][ T7657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.231115][ T7657] RIP: 0023:0xf746d579 [ 230.231135][ T7657] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 230.231153][ T7657] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000034 [ 230.231177][ T7657] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000000000003 [ 230.231192][ T7657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.231205][ T7657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.231217][ T7657] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 230.231231][ T7657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.231262][ T7657] [ 230.231327][ T30] audit: type=1326 audit(1744092513.802:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 230.317467][ T7657] ERROR: Out of memory at tomoyo_realpath_from_path. [ 230.547158][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.563532][ T1209] usb usb5-port1: unable to enumerate USB device [ 230.574603][ T30] audit: type=1326 audit(1744092513.802:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 230.621156][ T30] audit: type=1326 audit(1744092513.802:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 230.627750][ T5948] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 230.748302][ T7662] netlink: 104 bytes leftover after parsing attributes in process `syz.4.545'. [ 230.757431][ T30] audit: type=1326 audit(1744092513.802:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 230.757536][ T30] audit: type=1326 audit(1744092513.802:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 230.779354][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.782269][ T7662] netlink: 104 bytes leftover after parsing attributes in process `syz.4.545'. [ 230.805411][ T30] audit: type=1326 audit(1744092513.802:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 230.851853][ T30] audit: type=1326 audit(1744092513.802:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 230.860914][ T5948] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 230.878520][ T30] audit: type=1326 audit(1744092513.802:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 230.935153][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.958579][ T30] audit: type=1326 audit(1744092513.802:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7656 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 230.968150][ T5948] usb 4-1: config 0 descriptor?? [ 231.008919][ T5948] usb 4-1: Invalid firmware size=18. [ 231.088883][ T5902] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 231.229182][ T5948] usb 4-1: USB disconnect, device number 26 [ 231.242612][ T5902] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 231.268718][ T5902] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 231.283547][ T5902] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 231.294826][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.310172][ T7674] netlink: 36 bytes leftover after parsing attributes in process `syz.4.549'. [ 231.320366][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.549'. [ 231.403692][ T7676] loop2: detected capacity change from 0 to 7 [ 231.411725][ T7676] Dev loop2: unable to read RDB block 7 [ 231.418303][ T7676] loop2: unable to read partition table [ 231.424452][ T7676] loop2: partition table beyond EOD, truncated [ 231.430838][ T7676] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.663160][ T5948] usb 3-1: USB disconnect, device number 30 [ 231.912776][ T7685] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 232.017340][ T2155] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 232.136741][ T5902] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 232.149972][ T5902] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input15 [ 232.162607][ T5902] input: failed to attach handler kbd to device input15, error: -5 [ 232.175999][ T1209] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 232.178435][ T2155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.212745][ T2155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.229314][ T2155] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 232.239495][ T2155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.254003][ T2155] usb 1-1: config 0 descriptor?? [ 232.336468][ T1209] usb 4-1: Using ep0 maxpacket: 32 [ 232.348327][ T1209] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.369574][ T1209] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 232.389179][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.402009][ T1209] usb 4-1: config 0 descriptor?? [ 232.410604][ T1209] usb 4-1: bad CDC descriptors [ 232.445922][ T47] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 232.596208][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 232.608120][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 232.624660][ T1209] usb 4-1: USB disconnect, device number 27 [ 232.685659][ T2155] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 232.697801][ T47] usb 5-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=75.43 [ 232.708584][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.789940][ T47] usb 5-1: Product: syz [ 232.801682][ T47] usb 5-1: Manufacturer: syz [ 232.812696][ T47] usb 5-1: SerialNumber: syz [ 232.829518][ T47] usb 5-1: config 0 descriptor?? [ 232.836725][ T5902] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 232.882561][ T2155] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 232.897892][ T2155] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 232.916807][ T2155] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -5 [ 233.039526][ T5902] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 233.070877][ T5902] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 233.080308][ T5902] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.095175][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.103517][ T1209] usb 1-1: USB disconnect, device number 24 [ 233.565851][ T1209] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 233.750018][ T1209] usb 4-1: Using ep0 maxpacket: 32 [ 233.770376][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.803284][ T1209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.821957][ T5902] usb 2-1: USB disconnect, device number 36 [ 233.831705][ T7698] input: syz0 as /devices/virtual/input/input16 [ 233.855973][ T1209] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 233.908574][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.994156][ T1209] usb 4-1: config 0 descriptor?? [ 234.000053][ T7702] QAT: Invalid ioctl -2112327167 [ 234.019190][ T1209] hub 4-1:0.0: USB hub found [ 234.163956][ T7703] QAT: Invalid ioctl -2112327167 [ 234.245118][ T1209] hub 4-1:0.0: 1 port detected [ 234.846220][ T5902] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 234.870859][ T1209] usb 4-1: USB disconnect, device number 28 [ 234.877399][ T5898] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 235.051120][ T5902] usb 1-1: config 0 has no interfaces? [ 235.061622][ T5902] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 235.074787][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.083373][ T5902] usb 1-1: Product: syz [ 235.091058][ T5902] usb 1-1: Manufacturer: syz [ 235.096233][ T5902] usb 1-1: SerialNumber: syz [ 235.112024][ T5902] usb 1-1: config 0 descriptor?? [ 235.225574][ T7724] __nla_validate_parse: 1 callbacks suppressed [ 235.225597][ T7724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.566'. [ 235.241692][ T7724] netlink: 16 bytes leftover after parsing attributes in process `syz.1.566'. [ 235.252845][ T7724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.566'. [ 235.300291][ T47] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 235.365092][ T47] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 235.389600][ T47] dib0700: firmware download failed at 7 with -22 [ 235.422028][ T47] usb 5-1: USB disconnect, device number 35 [ 235.543456][ T5901] usb 3-1: USB disconnect, device number 31 [ 236.349908][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 236.534625][ T7742] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.543943][ T7742] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.552975][ T7742] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.561962][ T7742] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.596345][ T7742] vxlan0: entered promiscuous mode [ 236.652176][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 237.196677][ T5898] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 237.865261][ T5898] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 237.873837][ T5898] usb 2-1: config 0 has no interface number 0 [ 237.896419][ T5898] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 237.957104][ T5898] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 237.975190][ T5898] usb 2-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 238.016685][ T47] usb 1-1: USB disconnect, device number 25 [ 238.046654][ T5898] usb 2-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 238.077637][ T5898] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a [ 238.105784][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.126725][ T5898] usb 2-1: Product: syz [ 238.130972][ T5898] usb 2-1: Manufacturer: syz [ 238.143488][ T5898] usb 2-1: SerialNumber: syz [ 238.152929][ T5898] usb 2-1: config 0 descriptor?? [ 238.158066][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 238.168295][ T7773] loop2: detected capacity change from 0 to 7 [ 238.175433][ T7773] Dev loop2: unable to read RDB block 7 [ 238.182457][ T7773] loop2: unable to read partition table [ 238.189094][ T7773] loop2: partition table beyond EOD, truncated [ 238.196083][ T7773] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 238.226644][ T5898] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 238.328475][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 238.377432][ T10] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.384538][ T5901] usb 2-1: USB disconnect, device number 37 [ 238.410095][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 238.427552][ T10] usb 3-1: string descriptor 0 read error: -22 [ 238.434240][ T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 238.461287][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.389942][ T7800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.591'. [ 240.400430][ T7801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.591'. [ 240.425993][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 240.432107][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 240.456882][ T7800] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 240.482881][ T10] usb 3-1: USB disconnect, device number 32 [ 240.821194][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 240.821216][ T30] audit: type=1326 audit(1744092524.432:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 241.054990][ T7812] loop2: detected capacity change from 0 to 7 [ 241.074160][ T7812] Dev loop2: unable to read RDB block 7 [ 241.148580][ T5901] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 241.261369][ T7812] loop2: unable to read partition table [ 241.290690][ T7812] loop2: partition table beyond EOD, truncated [ 241.296304][ T30] audit: type=1326 audit(1744092524.432:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 241.332711][ T7812] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 241.355329][ T5901] usb 5-1: config 0 has no interfaces? [ 241.394383][ T5901] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 241.415811][ T30] audit: type=1326 audit(1744092524.432:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 241.425808][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.536052][ T30] audit: type=1326 audit(1744092524.432:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 241.541483][ T5901] usb 5-1: Product: syz [ 241.625819][ T5901] usb 5-1: Manufacturer: syz [ 241.625844][ T30] audit: type=1326 audit(1744092524.432:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 241.630459][ T5901] usb 5-1: SerialNumber: syz [ 241.706165][ T5901] usb 5-1: config 0 descriptor?? [ 241.814273][ T30] audit: type=1326 audit(1744092524.432:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 241.895957][ T30] audit: type=1326 audit(1744092524.432:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 242.054686][ T30] audit: type=1326 audit(1744092524.432:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 242.411728][ T30] audit: type=1326 audit(1744092524.432:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 242.818535][ T30] audit: type=1326 audit(1744092524.462:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 243.677665][ T7841] fuse: Unknown parameter 'ór' [ 243.684591][ T7841] netlink: 56 bytes leftover after parsing attributes in process `syz.0.602'. [ 243.881804][ T5898] usb 5-1: USB disconnect, device number 36 [ 243.987310][ T7846] fuse: Bad value for 'group_id' [ 243.992321][ T7846] fuse: Bad value for 'group_id' [ 244.292099][ T7863] loop2: detected capacity change from 0 to 7 [ 244.313499][ T7863] Dev loop2: unable to read RDB block 7 [ 244.321782][ T7863] loop2: unable to read partition table [ 244.330094][ T7863] loop2: partition table beyond EOD, truncated [ 244.372426][ T7863] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 244.526352][ T47] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 244.545828][ T5901] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 244.835476][ T5901] usb 1-1: config 0 has no interfaces? [ 244.864089][ T5901] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 244.882012][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.009052][ T47] usb 5-1: config 0 has no interfaces? [ 245.114656][ T5901] usb 1-1: Product: syz [ 245.120245][ T5901] usb 1-1: Manufacturer: syz [ 245.126992][ T5901] usb 1-1: SerialNumber: syz [ 245.164990][ T5901] usb 1-1: config 0 descriptor?? [ 245.478921][ T47] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 245.488185][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.543170][ T47] usb 5-1: Product: syz [ 245.576070][ T47] usb 5-1: Manufacturer: syz [ 245.591589][ T5213] Dev loop2: unable to read RDB block 7 [ 245.607688][ T47] usb 5-1: SerialNumber: syz [ 245.623494][ T5213] loop2: unable to read partition table [ 245.668796][ T47] usb 5-1: config 0 descriptor?? [ 245.682731][ T5213] loop2: partition table beyond EOD, truncated [ 245.959283][ T7861] Cannot find add_set index 1 as target [ 246.083623][ T7888] netlink: 36 bytes leftover after parsing attributes in process `syz.2.613'. [ 246.117506][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.613'. [ 246.166117][ T7888] netlink: 36 bytes leftover after parsing attributes in process `syz.2.613'. [ 246.676553][ T1209] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 246.843816][ T1209] usb 4-1: config 0 has no interfaces? [ 246.866274][ T1209] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 246.879704][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.897401][ T1209] usb 4-1: Product: syz [ 246.912616][ T1209] usb 4-1: Manufacturer: syz [ 246.931367][ T1209] usb 4-1: SerialNumber: syz [ 246.956403][ T1209] usb 4-1: config 0 descriptor?? [ 247.465772][ T1209] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 247.637925][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.657968][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.690373][ T1209] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.735064][ T1209] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 247.746992][ T47] usb 1-1: USB disconnect, device number 26 [ 247.795399][ T1209] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 247.808155][ T1209] usb 2-1: Manufacturer: syz [ 247.816354][ T5898] usb 5-1: USB disconnect, device number 37 [ 247.859146][ T1209] usb 2-1: config 0 descriptor?? [ 248.456825][ T1209] hid (null): report_id 29495 is invalid [ 248.475920][ T1209] hid (null): bogus close delimiter [ 248.507161][ T1209] topre 0003:0853:0148.000C: unknown main item tag 0x6 [ 248.534519][ T1209] topre 0003:0853:0148.000C: report_id 29495 is invalid [ 248.552399][ T1209] topre 0003:0853:0148.000C: item 0 2 1 8 parsing failed [ 248.560788][ T7918] netlink: 830 bytes leftover after parsing attributes in process `syz.4.622'. [ 248.570454][ T7918] bond_slave_0: entered promiscuous mode [ 248.576442][ T7918] bond_slave_1: entered promiscuous mode [ 248.699597][ T1209] topre 0003:0853:0148.000C: probe with driver topre failed with error -22 [ 248.744654][ T1209] usb 2-1: USB disconnect, device number 38 [ 249.006291][ T7921] loop2: detected capacity change from 0 to 7 [ 249.024697][ T7921] Dev loop2: unable to read RDB block 7 [ 249.033204][ T7921] loop2: unable to read partition table [ 249.056039][ T7921] loop2: partition table beyond EOD, truncated [ 249.104019][ T7921] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 249.135634][ T5213] Dev loop2: unable to read RDB block 7 [ 249.141659][ T5213] loop2: unable to read partition table [ 249.149925][ T5213] loop2: partition table beyond EOD, truncated [ 249.239092][ T5213] Dev loop2: unable to read RDB block 7 [ 249.249342][ T5213] loop2: unable to read partition table [ 249.260577][ T5213] loop2: partition table beyond EOD, truncated [ 249.376365][ T47] usb 4-1: USB disconnect, device number 29 [ 249.523378][ T7934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.628'. [ 249.545622][ T7934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.628'. [ 249.577566][ T7934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.628'. [ 249.604266][ T5901] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 249.758215][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.792760][ T5901] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 249.813454][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.878049][ T5901] usb 3-1: config 0 descriptor?? [ 250.102345][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.111989][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.166009][ T47] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 250.186129][ T5902] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 250.315826][ T10] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 250.340025][ T47] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 250.356199][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.367463][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.369550][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.388404][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.398694][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 250.412614][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 250.419956][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.430171][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 250.438043][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.454111][ T47] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 250.467753][ T5901] usb 3-1: USB disconnect, device number 33 [ 250.473897][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.485803][ T5902] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.501458][ T47] usb 5-1: config 0 descriptor?? [ 250.508017][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 250.509002][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.539611][ T5902] usb 4-1: config 0 descriptor?? [ 250.545823][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.566642][ T7962] netlink: 1 bytes leftover after parsing attributes in process `syz.1.635'. [ 250.600829][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.619671][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 250.647533][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 250.671313][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.687646][ T10] usb 1-1: config 0 descriptor?? [ 250.969880][ T5902] usbhid 4-1:0.0: can't add hid device: -71 [ 250.977568][ T5902] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 250.989730][ T5902] usb 4-1: USB disconnect, device number 30 [ 251.105475][ T7953] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 251.129497][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 251.136202][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 251.158335][ T47] usbhid 5-1:0.0: can't add hid device: -71 [ 251.171050][ T10] usb 1-1: USB disconnect, device number 27 [ 251.183579][ T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 251.213324][ T47] usb 5-1: USB disconnect, device number 38 [ 251.565049][ T7977] loop2: detected capacity change from 0 to 7 [ 251.581032][ T7977] Dev loop2: unable to read RDB block 7 [ 251.588290][ T7977] loop2: unable to read partition table [ 251.594346][ T7977] loop2: partition table beyond EOD, truncated [ 251.601157][ T7977] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.735835][ T5898] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 252.041638][ T5898] usb 3-1: config 0 has no interfaces? [ 252.057696][ T5898] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 252.096052][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.140304][ T5898] usb 3-1: Product: syz [ 252.149261][ T5898] usb 3-1: Manufacturer: syz [ 252.157711][ T5898] usb 3-1: SerialNumber: syz [ 252.182512][ T5898] usb 3-1: config 0 descriptor?? [ 252.218836][ T5902] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 252.427219][ T5902] usb 1-1: config 0 has no interfaces? [ 252.454095][ T5902] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 252.489577][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.515974][ T5902] usb 1-1: Product: syz [ 252.565778][ T5902] usb 1-1: Manufacturer: syz [ 252.582648][ T5902] usb 1-1: SerialNumber: syz [ 252.612148][ T5902] usb 1-1: config 0 descriptor?? [ 252.620482][ T7997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.645'. [ 252.696938][ T7997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.645'. [ 252.712755][ T7997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.645'. [ 253.006353][ T5898] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 253.144452][ T7983] Cannot find add_set index 1 as target [ 253.169650][ T5898] usb 2-1: config 0 has no interfaces? [ 253.180359][ T5898] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 253.201783][ T5898] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 253.243130][ T5898] usb 2-1: Product: syz [ 253.252340][ T5898] usb 2-1: Manufacturer: syz [ 253.262580][ T5898] usb 2-1: SerialNumber: syz [ 253.278713][ T5898] usb 2-1: config 0 descriptor?? [ 253.660286][ T8015] vxcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 253.668261][ T8016] netlink: 'syz.3.653': attribute type 21 has an invalid length. [ 253.995841][ T8022] loop2: detected capacity change from 0 to 7 [ 254.007729][ T8022] Dev loop2: unable to read RDB block 7 [ 254.013613][ T8022] loop2: unable to read partition table [ 254.023664][ T8022] loop2: partition table beyond EOD, truncated [ 254.034368][ T8022] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 254.484884][ T5902] usb 3-1: USB disconnect, device number 34 [ 254.645789][ T2155] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 254.865849][ T2155] usb 5-1: Using ep0 maxpacket: 8 [ 254.898325][ T2155] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 254.907409][ T2155] usb 5-1: config 2 has no interface number 0 [ 254.921840][ T2155] usb 5-1: config 2 interface 31 has no altsetting 0 [ 255.075873][ T5898] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 255.098233][ T2155] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 255.189072][ T10] usb 2-1: USB disconnect, device number 39 [ 255.201482][ T2155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.243295][ T2155] usb 5-1: Product: syz [ 255.260572][ T2155] usb 5-1: Manufacturer: syz [ 255.262978][ T5898] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 255.284328][ T5898] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 255.294718][ T5898] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.308735][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.308751][ T5902] usb 1-1: USB disconnect, device number 28 [ 255.342083][ T8042] openvswitch: netlink: Message has 3 unknown bytes. [ 255.348993][ T8042] openvswitch: netlink: Actions may not be safe on all matching packets [ 255.566668][ T2155] usb 5-1: SerialNumber: syz [ 255.788704][ T2155] ch9200 5-1:2.31: probe with driver ch9200 failed with error -71 [ 255.806307][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.812678][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.063605][ T2155] usb 5-1: USB disconnect, device number 39 [ 256.672514][ T8058] netlink: 'syz.4.665': attribute type 4 has an invalid length. [ 257.145925][ T2155] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 257.318510][ T2155] usb 4-1: unable to get BOS descriptor or descriptor too short [ 257.327343][ T2155] usb 4-1: not running at top speed; connect to a high speed hub [ 257.349492][ T2155] usb 4-1: config 95 has an invalid interface number: 35 but max is 0 [ 257.408862][ T2155] usb 4-1: config 95 has no interface number 0 [ 257.421166][ T2155] usb 4-1: config 95 interface 35 has no altsetting 0 [ 257.438213][ T47] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 257.446625][ T2155] usb 4-1: string descriptor 0 read error: -22 [ 257.453853][ T2155] usb 4-1: New USB device found, idVendor=12d1, idProduct=d2fa, bcdDevice=76.eb [ 257.463787][ T2155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.526567][ T2155] option 4-1:95.35: GSM modem (1-port) converter detected [ 257.599276][ T47] usb 1-1: config 0 has no interfaces? [ 257.609618][ T47] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 257.666164][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.714095][ T47] usb 1-1: Product: syz [ 257.750159][ T47] usb 1-1: Manufacturer: syz [ 257.781785][ T47] usb 1-1: SerialNumber: syz [ 257.813995][ T47] usb 1-1: config 0 descriptor?? [ 257.820021][ T8076] loop2: detected capacity change from 0 to 7 [ 257.837181][ T8076] Dev loop2: unable to read RDB block 7 [ 257.842824][ T8076] loop2: unable to read partition table [ 257.866098][ T8076] loop2: partition table beyond EOD, truncated [ 257.872440][ T8076] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 257.974784][ T2155] usb 3-1: USB disconnect, device number 35 [ 258.024863][ T5213] Dev loop2: unable to read RDB block 7 [ 258.039426][ T5213] loop2: unable to read partition table [ 258.082832][ T5213] loop2: partition table beyond EOD, truncated [ 258.616842][ T47] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 258.705175][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 258.705194][ T30] audit: type=1326 audit(1744092542.312:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 258.761812][ T30] audit: type=1326 audit(1744092542.322:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 258.792707][ T30] audit: type=1326 audit(1744092542.322:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 258.853286][ T47] usb 3-1: config 0 has no interfaces? [ 258.867833][ T47] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 258.879769][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.894767][ T30] audit: type=1326 audit(1744092542.322:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 258.923205][ T47] usb 3-1: Product: syz [ 258.937756][ T47] usb 3-1: Manufacturer: syz [ 258.955872][ T47] usb 3-1: SerialNumber: syz [ 258.980142][ T47] usb 3-1: config 0 descriptor?? [ 258.990700][ T30] audit: type=1326 audit(1744092542.322:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 259.036771][ T30] audit: type=1326 audit(1744092542.322:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 259.060350][ T30] audit: type=1326 audit(1744092542.372:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 259.082745][ T30] audit: type=1326 audit(1744092542.372:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 259.105274][ T30] audit: type=1326 audit(1744092542.372:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 259.141960][ T30] audit: type=1326 audit(1744092542.372:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.4.672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 259.277081][ T8086] Cannot find add_set index 1 as target [ 259.375847][ T5898] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 259.570538][ T5898] usb 5-1: config 0 has no interfaces? [ 259.582844][ T5898] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 259.593340][ T5898] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 259.608345][ T5898] usb 5-1: Product: syz [ 259.620257][ T5898] usb 5-1: Manufacturer: syz [ 259.632899][ T5898] usb 5-1: SerialNumber: syz [ 259.651161][ T5898] usb 5-1: config 0 descriptor?? [ 260.076202][ T2155] usb 1-1: USB disconnect, device number 29 [ 260.359007][ T5902] usb 4-1: USB disconnect, device number 31 [ 260.366444][ T5902] option 4-1:95.35: device disconnected [ 261.368419][ T8118] netlink: 'syz.0.681': attribute type 6 has an invalid length. [ 263.698114][ T5898] usb 3-1: USB disconnect, device number 36 [ 263.816345][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 263.816366][ T30] audit: type=1326 audit(1744092547.422:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 263.967733][ T30] audit: type=1326 audit(1744092547.422:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 267.288917][ T1209] usb 5-1: USB disconnect, device number 40 [ 267.985065][ C1] sched: DL replenish lagged too much [ 269.037691][ T30] audit: type=1326 audit(1744092547.442:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 273.075584][ T30] audit: type=1326 audit(1744092547.442:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 287.726995][ T30] audit: type=1326 audit(1744092547.442:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 295.939419][ T30] audit: type=1326 audit(1744092547.452:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.0.685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 317.469933][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.494877][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.825075][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.844111][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.605631][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 459.612672][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5992/1:b..l P5195/1:b..l P2/1:b..l P5506/1:b..l [ 459.624216][ C0] rcu: (detected by 0, t=10502 jiffies, g=32157, q=551659 ncpus=2) [ 459.632256][ C0] task:dhcpcd state:R running task stack:23320 pid:5506 tgid:5506 ppid:1 task_flags:0x400140 flags:0x00000002 [ 459.646795][ C0] Call Trace: [ 459.650116][ C0] [ 459.653085][ C0] __schedule+0x1b88/0x5240 [ 459.657638][ C0] ? vfs_write+0x70f/0xd10 [ 459.662095][ C0] ? stack_trace_save+0x171/0x1d0 [ 459.667166][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 459.672484][ C0] ? ksys_write+0x19d/0x2d0 [ 459.677040][ C0] ? __pfx___schedule+0x10/0x10 [ 459.681955][ C0] ? stack_trace_save+0x11a/0x1d0 [ 459.687041][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 459.692373][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 459.697520][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 459.703290][ C0] irqentry_exit+0x5e/0x90 [ 459.707752][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 459.713771][ C0] RIP: 0010:lock_release+0x244/0x3e0 [ 459.719102][ C0] Code: 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 0f 85 c3 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 03 <48> 3b 44 24 28 0f 85 82 01 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 459.738765][ C0] RSP: 0018:ffffc90003056ee0 EFLAGS: 00000206 [ 459.744875][ C0] RAX: 13b95fbf140d9f00 RBX: ffffffff9368a020 RCX: 0000000000000001 [ 459.752886][ C0] RDX: dffffc0000000000 RSI: ffffffff8e4fd4cc RDI: ffffffff8ca1b620 [ 459.760888][ C0] RBP: ffff88802fb0a918 R08: ffffc90003057528 R09: 0000000000000000 [ 459.768894][ C0] R10: ffffc90003057070 R11: fffff5200060ae10 R12: 0000000000000001 [ 459.776988][ C0] R13: ffff88802fb09e00 R14: 0000000000000206 R15: ffffffff8ed3dfe0 [ 459.785019][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 459.790188][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 459.795373][ C0] unwind_next_frame+0x1a9f/0x23b0 [ 459.800531][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 459.805685][ C0] ? kasan_quarantine_reduce+0x14f/0x170 [ 459.811365][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 459.817658][ C0] arch_stack_walk+0x11e/0x150 [ 459.822483][ C0] ? __kasan_kmalloc+0x23/0xb0 [ 459.827290][ C0] stack_trace_save+0x11a/0x1d0 [ 459.832181][ C0] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 459.838102][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 459.843347][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 459.848757][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 459.854691][ C0] ? __lock_acquire+0xad5/0xd80 [ 459.859582][ C0] save_stack+0xfc/0x1f0 [ 459.863860][ C0] ? __pfx_save_stack+0x10/0x10 [ 459.868742][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 459.874158][ C0] ? __put_partials+0x160/0x1c0 [ 459.879056][ C0] ? put_cpu_partial+0x17e/0x250 [ 459.884020][ C0] ? __slab_free+0x294/0x390 [ 459.888648][ C0] ? qlist_free_all+0x9a/0x140 [ 459.893443][ C0] ? kasan_quarantine_reduce+0x14f/0x170 [ 459.899121][ C0] ? page_ext_put+0x97/0xc0 [ 459.903668][ C0] __reset_page_owner+0x76/0x1e0 [ 459.908822][ C0] __free_frozen_pages+0xde8/0x10a0 [ 459.914160][ C0] __put_partials+0x160/0x1c0 [ 459.918875][ C0] put_cpu_partial+0x17e/0x250 [ 459.923669][ C0] ? put_cpu_partial+0x72/0x250 [ 459.928561][ C0] __slab_free+0x294/0x390 [ 459.933035][ C0] ? __phys_addr+0xba/0x170 [ 459.937606][ C0] qlist_free_all+0x9a/0x140 [ 459.942236][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 459.947747][ C0] __kasan_kmalloc+0x23/0xb0 [ 459.952373][ C0] __kmalloc_node_track_caller_noprof+0x295/0x4d0 [ 459.958833][ C0] ? __alloc_skb+0x1f2/0x480 [ 459.963454][ C0] ? __alloc_skb+0x1f2/0x480 [ 459.968077][ C0] kmalloc_reserve+0x111/0x2a0 [ 459.972876][ C0] __alloc_skb+0x1f2/0x480 [ 459.977326][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 459.982302][ C0] alloc_skb_with_frags+0xc3/0x830 [ 459.987445][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 459.993379][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 459.999851][ C0] sock_alloc_send_pskb+0x91c/0xa70 [ 460.005111][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 460.010893][ C0] unix_dgram_sendmsg+0x6d4/0x1ea0 [ 460.016074][ C0] ? aa_sk_perm+0x96f/0xac0 [ 460.020623][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 460.026217][ C0] ? __pfx_aa_file_perm+0x10/0x10 [ 460.031281][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 460.036267][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 460.041851][ C0] __sock_sendmsg+0x221/0x270 [ 460.046611][ C0] sock_write_iter+0x2d9/0x3f0 [ 460.051417][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 460.056757][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 460.062176][ C0] vfs_write+0x70f/0xd10 [ 460.066550][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 460.071873][ C0] ? __pfx_vfs_write+0x10/0x10 [ 460.076698][ C0] ksys_write+0x19d/0x2d0 [ 460.081066][ C0] ? __pfx_ksys_write+0x10/0x10 [ 460.085958][ C0] ? __secure_computing+0xef/0x2f0 [ 460.091124][ C0] do_syscall_64+0xf3/0x230 [ 460.095688][ C0] ? clear_bhb_loop+0x45/0xa0 [ 460.100407][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.106338][ C0] RIP: 0033:0x7fa55be8bbf2 [ 460.111319][ C0] RSP: 002b:00007ffe867e9e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.119976][ C0] RAX: ffffffffffffffda RBX: 00005629036eeec0 RCX: 00007fa55be8bbf2 [ 460.128004][ C0] RDX: 0000000000000047 RSI: 00007ffe867e9e90 RDI: 0000000000000005 [ 460.136015][ C0] RBP: 00007ffe867e9e90 R08: 0000000000000008 R09: 0000000000000036 [ 460.144034][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00005628db8aaefc [ 460.152314][ C0] R13: 00007ffe867ea2c0 R14: 0000562903784640 R15: 0000000000000001 [ 460.160344][ C0] [ 460.163394][ C0] task:kthreadd state:R running task stack:25832 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00004000 [ 460.176936][ C0] Call Trace: [ 460.180243][ C0] [ 460.183200][ C0] __schedule+0x1b88/0x5240 [ 460.187759][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 460.193089][ C0] ? __pfx___schedule+0x10/0x10 [ 460.197992][ C0] ? __lock_acquire+0xad5/0xd80 [ 460.202890][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 460.208210][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 460.213355][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 460.219128][ C0] irqentry_exit+0x5e/0x90 [ 460.223578][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 460.229678][ C0] RIP: 0010:unwind_next_frame+0x2af/0x23b0 [ 460.235535][ C0] Code: 11 e3 90 48 c7 c0 9e f5 92 91 48 39 c2 0f 83 da 18 00 00 4b 8d 0c 40 48 01 c9 48 81 c1 e4 11 e3 90 48 39 c1 0f 87 c3 18 00 00 <45> 39 e8 0f 84 1b 02 00 00 4e 8d 3c ad 68 cf 6d 90 45 29 e8 4b 8d [ 460.255181][ C0] RSP: 0018:ffffc900000772a8 EFLAGS: 00000297 [ 460.261289][ C0] RAX: ffffffff9192f59e RBX: ffffffff9194fc34 RCX: ffffffff90eb8994 [ 460.269291][ C0] RDX: ffffffff90eb898e RSI: ffffffff8ca1b600 RDI: ffffffff8ca1b5c0 [ 460.277300][ C0] RBP: 00000000000081a4 R08: 0000000000016948 R09: 0000000000000000 [ 460.285300][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8181a4e5 [ 460.293298][ C0] R13: 0000000000016947 R14: 00000000000b3485 R15: dffffc0000000000 [ 460.301304][ C0] ? copy_process+0x1185/0x3d10 [ 460.306203][ C0] ? unwind_next_frame+0xe7/0x23b0 [ 460.311708][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 460.316860][ C0] ? copy_process+0x1186/0x3d10 [ 460.321756][ C0] ? copy_process+0x1186/0x3d10 [ 460.326644][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 460.332843][ C0] arch_stack_walk+0x11e/0x150 [ 460.337697][ C0] ? copy_process+0x1186/0x3d10 [ 460.342587][ C0] stack_trace_save+0x11a/0x1d0 [ 460.347485][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 460.352897][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 460.358827][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 460.365196][ C0] save_stack+0xfc/0x1f0 [ 460.369475][ C0] ? __pfx_save_stack+0x10/0x10 [ 460.374358][ C0] ? __free_frozen_pages+0xde8/0x10a0 [ 460.379773][ C0] ? __put_partials+0x160/0x1c0 [ 460.384652][ C0] ? put_cpu_partial+0x17e/0x250 [ 460.389623][ C0] ? __slab_free+0x294/0x390 [ 460.394250][ C0] ? qlist_free_all+0x9a/0x140 [ 460.399050][ C0] ? kasan_quarantine_reduce+0x14f/0x170 [ 460.404714][ C0] ? __kasan_kmalloc+0x23/0xb0 [ 460.409514][ C0] ? __kmalloc_cache_noprof+0x236/0x370 [ 460.415100][ C0] ? set_kthread_struct+0xc2/0x330 [ 460.420248][ C0] ? copy_process+0x1186/0x3d10 [ 460.425153][ C0] __reset_page_owner+0x76/0x1e0 [ 460.430137][ C0] __free_frozen_pages+0xde8/0x10a0 [ 460.435418][ C0] __put_partials+0x160/0x1c0 [ 460.440134][ C0] put_cpu_partial+0x17e/0x250 [ 460.444958][ C0] ? put_cpu_partial+0x72/0x250 [ 460.449854][ C0] __slab_free+0x294/0x390 [ 460.454306][ C0] ? __phys_addr+0xba/0x170 [ 460.458848][ C0] qlist_free_all+0x9a/0x140 [ 460.463909][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 460.469414][ C0] __kasan_kmalloc+0x23/0xb0 [ 460.474047][ C0] __kmalloc_cache_noprof+0x236/0x370 [ 460.479546][ C0] ? set_kthread_struct+0xc2/0x330 [ 460.484697][ C0] set_kthread_struct+0xc2/0x330 [ 460.489669][ C0] ? __asan_memset+0x23/0x50 [ 460.494307][ C0] copy_process+0x1186/0x3d10 [ 460.499038][ C0] ? copy_process+0xa07/0x3d10 [ 460.503846][ C0] ? __pfx_copy_process+0x10/0x10 [ 460.508910][ C0] ? finish_task_switch+0x1e5/0x870 [ 460.514152][ C0] kernel_clone+0x242/0x930 [ 460.518694][ C0] ? trace_sched_exit_tp+0x3c/0x120 [ 460.524535][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 460.529633][ C0] kernel_thread+0x1c2/0x250 [ 460.534279][ C0] ? __pfx_kthread+0x10/0x10 [ 460.539031][ C0] ? __pfx_kernel_thread+0x10/0x10 [ 460.544198][ C0] ? __pfx_kthread+0x10/0x10 [ 460.548840][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 460.554095][ C0] kthreadd+0x621/0x850 [ 460.558294][ C0] ? kthreadd+0x3ac/0x850 [ 460.562665][ C0] ? __pfx_kthreadd+0x10/0x10 [ 460.567388][ C0] ? __pfx_kthreadd+0x10/0x10 [ 460.572467][ C0] ? __pfx_kthreadd+0x10/0x10 [ 460.577265][ C0] ? __pfx_kthreadd+0x10/0x10 [ 460.582516][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 460.588026][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 460.593261][ C0] ? __pfx_kthreadd+0x10/0x10 [ 460.598111][ C0] ret_from_fork+0x4b/0x80 [ 460.602574][ C0] ? __pfx_kthreadd+0x10/0x10 [ 460.607391][ C0] ret_from_fork_asm+0x1a/0x30 [ 460.612320][ C0] [ 460.615379][ C0] task:syslogd state:R running task stack:23624 pid:5195 tgid:5195 ppid:1 task_flags:0x400000 flags:0x00004002 [ 460.628979][ C0] Call Trace: [ 460.632322][ C0] [ 460.635301][ C0] __schedule+0x1b88/0x5240 [ 460.640205][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 460.645545][ C0] ? __pfx___schedule+0x10/0x10 [ 460.650468][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 460.655851][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 460.661021][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 460.666898][ C0] irqentry_exit+0x5e/0x90 [ 460.671375][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 460.677404][ C0] RIP: 0010:lock_acquire+0x167/0x2f0 [ 460.683266][ C0] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 460.703098][ C0] RSP: 0018:ffffc90002fe7158 EFLAGS: 00000206 [ 460.709223][ C0] RAX: 8d171cfa8ab61e00 RBX: ffffffff8ed3dfe0 RCX: 8d171cfa8ab61e00 [ 460.717227][ C0] RDX: 0000000000000000 RSI: ffffffff8e4fd4cc RDI: ffffffff8ca1b620 [ 460.725321][ C0] RBP: ffffffff9368a020 R08: 0000000000000000 R09: 0000000000000000 [ 460.733336][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 460.741346][ C0] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 460.749465][ C0] ? __kasan_slab_alloc+0x23/0x80 [ 460.754559][ C0] ? __kmalloc_noprof+0x238/0x4d0 [ 460.759630][ C0] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 460.765407][ C0] ? tomoyo_check_open_permission+0x25a/0x4f0 [ 460.771516][ C0] ? __update_page_owner_free_handle+0x2e/0x460 [ 460.777820][ C0] __update_page_owner_free_handle+0x4b/0x460 [ 460.784011][ C0] ? __update_page_owner_free_handle+0x2e/0x460 [ 460.790315][ C0] ? page_ext_put+0x97/0xc0 [ 460.794860][ C0] __reset_page_owner+0x89/0x1e0 [ 460.799847][ C0] __free_frozen_pages+0xde8/0x10a0 [ 460.805102][ C0] __put_partials+0x160/0x1c0 [ 460.809816][ C0] put_cpu_partial+0x17e/0x250 [ 460.814607][ C0] ? put_cpu_partial+0x72/0x250 [ 460.819492][ C0] __slab_free+0x294/0x390 [ 460.823950][ C0] ? __phys_addr+0xba/0x170 [ 460.828502][ C0] qlist_free_all+0x9a/0x140 [ 460.833133][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 460.838641][ C0] __kasan_slab_alloc+0x23/0x80 [ 460.843545][ C0] __kmalloc_noprof+0x238/0x4d0 [ 460.848444][ C0] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 460.854216][ C0] tomoyo_realpath_from_path+0xcf/0x5e0 [ 460.859820][ C0] tomoyo_check_open_permission+0x25a/0x4f0 [ 460.865758][ C0] ? tomoyo_check_open_permission+0x209/0x4f0 [ 460.871868][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 460.878331][ C0] ? seqcount_lockdep_reader_access+0x1cf/0x230 [ 460.884633][ C0] ? __lock_acquire+0xad5/0xd80 [ 460.889541][ C0] ? mnt_get_write_access+0x68/0x2b0 [ 460.894861][ C0] ? mnt_get_write_access+0x68/0x2b0 [ 460.900281][ C0] ? tomoyo_file_open+0x168/0x220 [ 460.905345][ C0] ? mnt_get_write_access+0x226/0x2b0 [ 460.910759][ C0] security_file_open+0xac/0x250 [ 460.915739][ C0] do_dentry_open+0x320/0x1960 [ 460.920548][ C0] ? vfs_open+0x31/0x370 [ 460.924839][ C0] vfs_open+0x3b/0x370 [ 460.928951][ C0] path_openat+0x2caf/0x35d0 [ 460.933592][ C0] ? stack_depot_save_flags+0x44/0x940 [ 460.939097][ C0] ? kasan_save_track+0x51/0x80 [ 460.943987][ C0] ? __pfx_path_openat+0x10/0x10 [ 460.948961][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.955085][ C0] do_filp_open+0x284/0x4e0 [ 460.959636][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 460.964703][ C0] ? do_raw_spin_lock+0x151/0x370 [ 460.969817][ C0] do_sys_openat2+0x12b/0x1d0 [ 460.974544][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 460.979781][ C0] ? __phys_addr+0xba/0x170 [ 460.984345][ C0] ? fput_close_sync+0x1ef/0x270 [ 460.989323][ C0] __x64_sys_openat+0x249/0x2a0 [ 460.994221][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 460.999646][ C0] ? do_syscall_64+0xb6/0x230 [ 461.004403][ C0] do_syscall_64+0xf3/0x230 [ 461.008949][ C0] ? clear_bhb_loop+0x45/0xa0 [ 461.013763][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.019694][ C0] RIP: 0033:0x7ff0e77b59a4 [ 461.024138][ C0] RSP: 002b:00007fff5a589140 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 461.032594][ C0] RAX: ffffffffffffffda RBX: 00005637f1028910 RCX: 00007ff0e77b59a4 [ 461.040602][ C0] RDX: 0000000000000d41 RSI: 00007ff0e7954443 RDI: 00000000ffffff9c [ 461.048608][ C0] RBP: 00007ff0e7954443 R08: 0000000000000001 R09: 0000000000000000 [ 461.056616][ C0] R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000000d41 [ 461.064623][ C0] R13: 0000000067f4bda3 R14: 0000000000000005 R15: 00005637f1028a60 [ 461.072648][ C0] [ 461.075736][ C0] task:udevd state:R running task stack:23592 pid:5992 tgid:5992 ppid:5213 task_flags:0x400140 flags:0x00004002 [ 461.089275][ C0] Call Trace: [ 461.092585][ C0] [ 461.095552][ C0] __schedule+0x1b88/0x5240 [ 461.100109][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 461.105435][ C0] ? __pfx___schedule+0x10/0x10 [ 461.110424][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 461.115746][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 461.120891][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 461.126649][ C0] ? __lock_acquire+0xad5/0xd80 [ 461.131555][ C0] irqentry_exit+0x5e/0x90 [ 461.136020][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 461.142034][ C0] RIP: 0010:unwind_next_frame+0x20e/0x23b0 [ 461.147881][ C0] Code: 0a 01 00 00 48 c7 c0 00 00 00 81 4c 89 e5 48 29 c5 48 c1 ed 08 48 c7 c0 a0 f5 92 91 48 c7 c1 b4 c7 bf 91 48 29 c1 48 c1 e9 02 <45> 31 f6 80 3d d8 83 0b 0d 00 44 0f 45 f1 41 8d 46 ff 39 e8 0f 86 [ 461.167535][ C0] RSP: 0018:ffffc9000b037128 EFLAGS: 00000202 [ 461.173669][ C0] RAX: ffffffff9192f5a0 RBX: ffffc9000b0372a8 RCX: 00000000000b3485 [ 461.181680][ C0] RDX: 0000000000000000 RSI: ffffffff8ca1b600 RDI: ffffffff8ca1b5c0 [ 461.189770][ C0] RBP: 0000000000006440 R08: 0000000000000000 R09: 0000000000000000 [ 461.197772][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff816440c6 [ 461.205776][ C0] R13: dffffc0000000000 R14: ffffc9000b037295 R15: ffffffff816dfbc8 [ 461.213783][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 461.218942][ C0] ? arch_stack_walk+0xe6/0x150 [ 461.223847][ C0] ? unwind_next_frame+0xe7/0x23b0 [ 461.229003][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 461.234151][ C0] ? arch_stack_walk+0xe7/0x150 [ 461.239053][ C0] __unwind_start+0x59a/0x740 [ 461.243774][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 461.250060][ C0] arch_stack_walk+0xe7/0x150 [ 461.254784][ C0] ? arch_stack_walk+0xe7/0x150 [ 461.259685][ C0] stack_trace_save+0x11a/0x1d0 [ 461.264582][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 461.270017][ C0] save_stack+0xfc/0x1f0 [ 461.274301][ C0] ? __pfx_save_stack+0x10/0x10 [ 461.279205][ C0] ? page_ext_put+0x97/0xc0 [ 461.283752][ C0] __reset_page_owner+0x76/0x1e0 [ 461.288732][ C0] __free_frozen_pages+0xde8/0x10a0 [ 461.293987][ C0] __slab_free+0x2c6/0x390 [ 461.298442][ C0] ? __phys_addr+0xba/0x170 [ 461.303012][ C0] qlist_free_all+0x9a/0x140 [ 461.307643][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 461.313178][ C0] __kasan_slab_alloc+0x23/0x80 [ 461.318070][ C0] kmem_cache_alloc_noprof+0x1e1/0x390 [ 461.323567][ C0] ? seq_open+0x5f/0x140 [ 461.327853][ C0] seq_open+0x5f/0x140 [ 461.331973][ C0] kernfs_fop_open+0x651/0xdf0 [ 461.336830][ C0] ? file_set_fsnotify_mode_from_watchers+0x12a/0x640 [ 461.343654][ C0] ? __pfx_kernfs_fop_open+0x10/0x10 [ 461.348977][ C0] do_dentry_open+0xdec/0x1960 [ 461.353793][ C0] ? vfs_open+0x31/0x370 [ 461.358077][ C0] vfs_open+0x3b/0x370 [ 461.362210][ C0] path_openat+0x2caf/0x35d0 [ 461.366847][ C0] ? stack_depot_save_flags+0x44/0x940 [ 461.372358][ C0] ? kasan_save_track+0x51/0x80 [ 461.377243][ C0] ? __pfx_path_openat+0x10/0x10 [ 461.382215][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.388332][ C0] do_filp_open+0x284/0x4e0 [ 461.392878][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 461.397952][ C0] ? do_raw_spin_lock+0x151/0x370 [ 461.403057][ C0] do_sys_openat2+0x12b/0x1d0 [ 461.407808][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 461.413080][ C0] __x64_sys_openat+0x249/0x2a0 [ 461.417984][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 461.423409][ C0] ? do_syscall_64+0xb6/0x230 [ 461.428132][ C0] do_syscall_64+0xf3/0x230 [ 461.432675][ C0] ? clear_bhb_loop+0x45/0xa0 [ 461.437389][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.443348][ C0] RIP: 0033:0x7fb2c37169a4 [ 461.447797][ C0] RSP: 002b:00007ffee0003c10 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 461.456342][ C0] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fb2c37169a4 [ 461.464357][ C0] RDX: 0000000000080000 RSI: 00007ffee0003d48 RDI: 00000000ffffff9c [ 461.472381][ C0] RBP: 00007ffee0003d48 R08: 0000000000000008 R09: 0000000000000001 [ 461.480394][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 [ 461.488400][ C0] R13: 000055667e378b42 R14: 0000000000000001 R15: 000055667e394160 [ 461.496427][ C0] [ 461.499473][ C0] rcu: rcu_preempt kthread starved for 8259 jiffies! g32157 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 461.510612][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 461.520615][ C0] rcu: RCU grace-period kthread stack dump: [ 461.526528][ C0] task:rcu_preempt state:R running task stack:26952 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 461.540070][ C0] Call Trace: [ 461.543373][ C0] [ 461.546350][ C0] __schedule+0x1b88/0x5240 [ 461.550918][ C0] ? schedule+0x163/0x360 [ 461.555286][ C0] ? __pfx___schedule+0x10/0x10 [ 461.560185][ C0] ? schedule+0x90/0x360 [ 461.564458][ C0] ? schedule+0x90/0x360 [ 461.568730][ C0] schedule+0x163/0x360 [ 461.572925][ C0] schedule_timeout+0x15b/0x2b0 [ 461.577821][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 461.583238][ C0] ? __pfx_process_timeout+0x10/0x10 [ 461.588566][ C0] ? prepare_to_swait_event+0x1e5/0x340 [ 461.594151][ C0] ? prepare_to_swait_event+0x308/0x340 [ 461.599757][ C0] rcu_gp_fqs_loop+0x2e1/0x1340 [ 461.604668][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 461.610875][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 461.616208][ C0] ? finish_swait+0xdb/0x200 [ 461.620844][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 461.626082][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 461.630712][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 461.635955][ C0] ? __kthread_parkme+0x1a8/0x200 [ 461.641024][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 461.646256][ C0] kthread+0x7b7/0x940 [ 461.650363][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 461.655594][ C0] ? __pfx_kthread+0x10/0x10 [ 461.660227][ C0] ? __pfx_kthread+0x10/0x10 [ 461.664858][ C0] ? __pfx_kthread+0x10/0x10 [ 461.669488][ C0] ? __pfx_kthread+0x10/0x10 [ 461.674117][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.679346][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 461.684578][ C0] ? __pfx_kthread+0x10/0x10 [ 461.689216][ C0] ret_from_fork+0x4b/0x80 [ 461.693661][ C0] ? __pfx_kthread+0x10/0x10 [ 461.698298][ C0] ret_from_fork_asm+0x1a/0x30 [ 461.703107][ C0] [ 461.706148][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 461.713020][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 461.722940][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 461.733025][ C0] RIP: 0010:kasan_quarantine_put+0x88/0x230 [ 461.738969][ C0] Code: e8 5d bc 9d ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 87 00 00 00 41 f7 c7 00 02 00 00 74 01 fb 31 c0 <48> 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 8d 80 c0 [ 461.758616][ C0] RSP: 0018:ffffc900000070b0 EFLAGS: 00000206 [ 461.764724][ C0] RAX: 04c815bcb57c3701 RBX: ffff888182632500 RCX: ffffffff81cb464c [ 461.772729][ C0] RDX: 0000000000000000 RSI: ffffffff8e69c651 RDI: ffffffff8ca1b620 [ 461.780732][ C0] RBP: 0000000000000000 R08: ffffffff905fdf77 R09: 1ffffffff20bfbee [ 461.788738][ C0] R10: dffffc0000000000 R11: fffffbfff20bfbef R12: ffffea0006098c80 [ 461.796739][ C0] R13: ffff888182632500 R14: 0000000000036d00 R15: 0000000000000286 [ 461.804738][ C0] FS: 0000000000000000(0000) GS:ffff888124f96000(0000) knlGS:0000000000000000 [ 461.813704][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 461.820317][ C0] CR2: 00000000f75bed1c CR3: 0000000061fba000 CR4: 00000000003526f0 [ 461.828323][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 461.836328][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 461.844333][ C0] Call Trace: [ 461.847645][ C0] [ 461.850519][ C0] ? nft_synproxy_do_eval+0x755/0xa90 [ 461.855954][ C0] kmem_cache_free+0x197/0x410 [ 461.860762][ C0] ? nft_synproxy_do_eval+0x755/0xa90 [ 461.866185][ C0] nft_synproxy_do_eval+0x755/0xa90 [ 461.871447][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 461.877229][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 461.882484][ C0] nft_do_chain+0x4b2/0x1db0 [ 461.887140][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 461.892252][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 461.897496][ C0] nft_do_chain_inet+0x41f/0x6b0 [ 461.902481][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 461.907987][ C0] ? nf_nat_ipv6_local_in+0x1d2/0x620 [ 461.913400][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 461.919163][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 461.924667][ C0] nf_hook_slow+0xc8/0x220 [ 461.929131][ C0] NF_HOOK+0x29b/0x450 [ 461.933257][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 461.938668][ C0] ? NF_HOOK+0x9e/0x450 [ 461.942876][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 461.947512][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 461.952974][ C0] ip6_input+0x169/0x270 [ 461.957256][ C0] ? ip6_input+0x23/0x270 [ 461.961633][ C0] NF_HOOK+0x3a0/0x450 [ 461.965738][ C0] ? skb_orphan+0xae/0xd0 [ 461.970111][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 461.975346][ C0] ? NF_HOOK+0x9e/0x450 [ 461.979548][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 461.984188][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 461.989438][ C0] __netif_receive_skb+0x1ef/0x670 [ 461.994601][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 462.000298][ C0] process_backlog+0x664/0x15c0 [ 462.005195][ C0] ? process_backlog+0x33d/0x15c0 [ 462.010358][ C0] ? __pfx_process_backlog+0x10/0x10 [ 462.015710][ C0] __napi_poll+0xcb/0x480 [ 462.020085][ C0] net_rx_action+0x89d/0x1240 [ 462.024838][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 462.029990][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 462.035683][ C0] ? seqcount_lockdep_reader_access+0x1c3/0x230 [ 462.041979][ C0] handle_softirqs+0x2d6/0x9b0 [ 462.046789][ C0] ? __irq_exit_rcu+0xfb/0x220 [ 462.051597][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 462.056919][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 462.062166][ C0] __irq_exit_rcu+0xfb/0x220 [ 462.066796][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 462.072040][ C0] irq_exit_rcu+0x9/0x30 [ 462.076312][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 462.081986][ C0] [ 462.084939][ C0] [ 462.087896][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 462.093917][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 462.099673][ C0] Code: cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 a1 17 00 f3 0f 1e fa fb f4 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 462.119320][ C0] RSP: 0018:ffffffff8ea07d60 EFLAGS: 000002c6 [ 462.125432][ C0] RAX: 04c815bcb57c3700 RBX: ffffffff8197af7e RCX: ffffffff8c30995c [ 462.133442][ C0] RDX: 0000000000000001 RSI: ffffffff8e69c651 RDI: ffffffff8ca1b620 [ 462.141450][ C0] RBP: ffffffff8ea07eb8 R08: ffff8880b8632b5b R09: 1ffff110170c656b [ 462.149453][ C0] R10: dffffc0000000000 R11: ffffed10170c656c R12: 1ffffffff1d40fc6 [ 462.157453][ C0] R13: 1ffffffff1d52cb0 R14: 0000000000000000 R15: dffffc0000000000 [ 462.165465][ C0] ? do_idle+0x22e/0x5d0 [ 462.169751][ C0] ? ct_kernel_exit+0x12c/0x1a0 [ 462.174645][ C0] default_idle+0x13/0x20 [ 462.179018][ C0] default_idle_call+0x74/0xb0 [ 462.183819][ C0] do_idle+0x22e/0x5d0 [ 462.187922][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 462.193588][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 462.198829][ C0] ? __pfx_do_idle+0x10/0x10 [ 462.203468][ C0] ? do_idle+0x11/0x5d0 [ 462.207661][ C0] ? rest_init+0x31/0x300 [ 462.212025][ C0] cpu_startup_entry+0x42/0x60 [ 462.216826][ C0] rest_init+0x2dc/0x300 [ 462.221110][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 462.226703][ C0] start_kernel+0x484/0x510 [ 462.231249][ C0] x86_64_start_reservations+0x2a/0x30 [ 462.236749][ C0] x86_64_start_kernel+0x66/0x70 [ 462.241730][ C0] common_startup_64+0x13e/0x147 [ 462.246817][ C0] [ 462.550883][ T31] INFO: task kworker/0:2:1209 blocked for more than 154 seconds. [ 462.571958][ T31] Not tainted 6.15.0-rc1-syzkaller #0 [ 462.590761][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.612331][ T31] task:kworker/0:2 state:D stack:20976 pid:1209 tgid:1209 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 462.638219][ T31] Workqueue: usb_hub_wq hub_event [ 462.643321][ T31] Call Trace: [ 462.660537][ T31] [ 462.663534][ T31] __schedule+0x1b88/0x5240 [ 462.681337][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 462.699986][ T31] ? schedule+0x163/0x360 [ 462.704391][ T31] ? __pfx___schedule+0x10/0x10 [ 462.722638][ T31] ? schedule+0x90/0x360 [ 462.741198][ T31] ? schedule+0x90/0x360 [ 462.745540][ T31] schedule+0x163/0x360 [ 462.765436][ T31] schedule_timeout+0xb1/0x2b0 [ 462.783601][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 462.802372][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.821308][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 462.841162][ T31] ? wait_for_completion+0x2d4/0x600 [ 462.860231][ T31] wait_for_completion+0x32f/0x600 [ 462.865433][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 462.884463][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 462.903037][ T31] devtmpfs_delete_node+0x217/0x300 [ 462.921669][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 462.941121][ T31] ? do_raw_spin_lock+0x151/0x370 [ 462.960185][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 462.965515][ T31] ? _raw_spin_unlock+0x28/0x50 [ 462.984268][ T31] ? klist_del+0xc8/0x110 [ 463.002325][ T31] device_del+0x334/0x9b0 [ 463.020173][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 463.039922][ T31] ? __pfx_device_del+0x10/0x10 [ 463.044852][ T31] ? kobject_put+0x44d/0x480 [ 463.064836][ T31] usb_disconnect+0x611/0x960 [ 463.083600][ T31] hub_event+0x1d2a/0x50f0 [ 463.101726][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 463.120960][ T31] ? __pfx_hub_event+0x10/0x10 [ 463.139256][ T31] ? __lock_acquire+0xad5/0xd80 [ 463.144203][ T31] ? process_scheduled_works+0x9cb/0x18e0 [ 463.164574][ T31] process_scheduled_works+0xac3/0x18e0 [ 463.184286][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 463.204133][ T31] ? assign_work+0x367/0x3d0 [ 463.222062][ T31] worker_thread+0x870/0xd50 [ 463.240078][ T31] ? __kthread_parkme+0x1a8/0x200 [ 463.245174][ T31] ? __pfx_worker_thread+0x10/0x10 [ 463.264284][ T31] kthread+0x7b7/0x940 [ 463.282456][ T31] ? __pfx_worker_thread+0x10/0x10 [ 463.300941][ T31] ? __pfx_kthread+0x10/0x10 [ 463.318892][ T31] ? __pfx_kthread+0x10/0x10 [ 463.336986][ T31] ? __pfx_kthread+0x10/0x10 [ 463.356026][ T31] ? __pfx_kthread+0x10/0x10 [ 463.360697][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 463.379712][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 463.385028][ T31] ? __pfx_kthread+0x10/0x10 [ 463.403345][ T31] ret_from_fork+0x4b/0x80 [ 463.421964][ T31] ? __pfx_kthread+0x10/0x10 [ 463.440032][ T31] ret_from_fork_asm+0x1a/0x30 [ 463.444880][ T31] [ 463.461949][ T31] [ 463.461949][ T31] Showing all locks held in the system: [ 463.483194][ T31] 2 locks held by kthreadd/2: [ 463.501173][ T31] 2 locks held by kworker/0:0/9: [ 463.519644][ T31] 2 locks held by kworker/0:1/10: [ 463.524718][ T31] 3 locks held by kworker/u8:0/12: [ 463.543205][ T31] 3 locks held by kworker/u8:1/13: [ 463.562665][ T31] 3 locks held by kdevtmpfs/26: [ 463.581482][ T31] 1 lock held by khungtaskd/31: [ 463.599829][ T31] #0: ffffffff8ed3dfe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x180 [ 463.623433][ T31] 3 locks held by kworker/u8:2/36: [ 463.641887][ T31] 3 locks held by kworker/u8:3/53: [ 463.660953][ T31] 3 locks held by kworker/u8:4/69: [ 463.680148][ T31] 3 locks held by kworker/u8:5/75: [ 463.685334][ T31] 4 locks held by kworker/u8:6/1091: [ 463.704199][ T31] 3 locks held by kworker/u8:7/1097: [ 463.722870][ T31] 3 locks held by kworker/u8:8/1164: [ 463.741522][ T31] 3 locks held by kworker/0:2/1209: [ 463.760243][ T31] #0: ffff8880216b4548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 463.786363][ T31] #1: ffffc90003f8fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 463.812417][ T31] #2: ffff888145f84198 (&dev->mutex){....}-{4:4}, at: hub_event+0x200/0x50f0 [ 463.835469][ T31] 2 locks held by kworker/1:2/2155: [ 463.854134][ T31] 3 locks held by kworker/u8:9/3033: [ 463.873346][ T31] 4 locks held by kworker/R-bat_e/3405: [ 463.892705][ T31] 3 locks held by syslogd/5195: [ 463.910895][ T31] 1 lock held by klogd/5202: [ 463.915538][ T31] 2 locks held by udevd/5213: [ 463.933911][ T31] 1 lock held by dhcpcd/5506: [ 463.952407][ T31] 2 locks held by getty/5594: [ 463.971653][ T31] #0: ffff8880337c00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 463.995447][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x5bb/0x1700 [ 464.034431][ T31] 2 locks held by syz-executor/5829: [ 464.053035][ T31] 2 locks held by kworker/0:3/5839: [ 464.072763][ T31] 2 locks held by kworker/0:4/5842: [ 464.091754][ T31] 2 locks held by syz-executor/5858: [ 464.110648][ T31] 2 locks held by kworker/0:6/5898: [ 464.129173][ T31] 3 locks held by kworker/1:5/5902: [ 464.134424][ T31] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 464.159235][ T31] #1: ffffc90004bdfc60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 464.184020][ T31] #2: ffffffff8ed434f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x384/0x830 [ 464.209013][ T31] 3 locks held by udevd/5992: [ 464.213750][ T31] 1 lock held by udevd/6154: [ 464.231755][ T31] 1 lock held by syz.3.684/8125: [ 464.250142][ T31] 1 lock held by syz.1.686/8131: [ 464.255141][ T31] 2 locks held by syz.0.685/8136: [ 464.274150][ T31] [ 464.290349][ T31] ============================================= [ 464.290349][ T31] [ 464.312144][ T31] NMI backtrace for cpu 0 [ 464.312175][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 464.312200][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 464.312214][ T31] Call Trace: [ 464.312222][ T31] [ 464.312232][ T31] dump_stack_lvl+0x241/0x360 [ 464.312272][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.312304][ T31] ? __pfx__printk+0x10/0x10 [ 464.312345][ T31] nmi_cpu_backtrace+0x4ab/0x4e0 [ 464.312386][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 464.312416][ T31] ? _printk+0xd5/0x120 [ 464.312442][ T31] ? touch_all_softlockup_watchdogs+0x4a/0xf0 [ 464.312469][ T31] ? __wake_up_klogd+0xcc/0x110 [ 464.312502][ T31] ? __pfx__printk+0x10/0x10 [ 464.312531][ T31] ? debug_show_all_locks+0x30/0x180 [ 464.312556][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 464.312580][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 464.312617][ T31] watchdog+0x1058/0x10a0 [ 464.312640][ T31] ? watchdog+0x1ea/0x10a0 [ 464.312668][ T31] ? __pfx_watchdog+0x10/0x10 [ 464.312690][ T31] kthread+0x7b7/0x940 [ 464.312728][ T31] ? __pfx_watchdog+0x10/0x10 [ 464.312750][ T31] ? __pfx_kthread+0x10/0x10 [ 464.312777][ T31] ? __pfx_kthread+0x10/0x10 [ 464.312805][ T31] ? __pfx_kthread+0x10/0x10 [ 464.312834][ T31] ? __pfx_kthread+0x10/0x10 [ 464.312862][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.312882][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 464.312906][ T31] ? __pfx_kthread+0x10/0x10 [ 464.312936][ T31] ret_from_fork+0x4b/0x80 [ 464.312958][ T31] ? __pfx_kthread+0x10/0x10 [ 464.312987][ T31] ret_from_fork_asm+0x1a/0x30 [ 464.313024][ T31] [ 464.313032][ T31] Sending NMI from CPU 0 to CPUs 1: [ 464.823794][ C1] NMI backtrace for cpu 1 [ 464.823814][ C1] CPU: 1 UID: 0 PID: 3405 Comm: kworker/R-bat_e Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 464.823836][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 464.823849][ C1] Workqueue: bat_events batadv_dat_purge [ 464.823882][ C1] RIP: 0010:unwind_next_frame+0x1704/0x23b0 [ 464.823909][ C1] Code: 58 00 00 00 00 49 8d 5c 24 36 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 d2 0a 00 00 c6 03 01 48 8b 5c 24 30 48 8b 44 24 70 <0f> b6 04 28 84 c0 0f 85 5c 08 00 00 48 8b 44 24 68 0f b6 04 28 84 [ 464.823924][ C1] RSP: 0018:ffffc90000a077e8 EFLAGS: 00000246 [ 464.823938][ C1] RAX: 1ffffffff22e36e7 RBX: ffffc90000a07910 RCX: 0000000000000000 [ 464.823952][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000a07920 [ 464.823963][ C1] RBP: dffffc0000000000 R08: ffffc90000a0791f R09: 0000000000000000 [ 464.823975][ C1] R10: ffffc90000a07910 R11: fffff52000140f24 R12: ffffc90000a078c0 [ 464.823988][ C1] R13: ffffc90000a09000 R14: ffffffff9171b738 R15: ffffffff9171b734 [ 464.824002][ C1] FS: 0000000000000000(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 464.824016][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.824028][ C1] CR2: 0000000080024018 CR3: 00000000325ac000 CR4: 00000000003526f0 [ 464.824043][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 464.824053][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 464.824064][ C1] Call Trace: [ 464.824071][ C1] [ 464.824083][ C1] ? unwind_next_frame+0xb8/0x23b0 [ 464.824106][ C1] ? nf_hook_slow+0xc8/0x220 [ 464.824129][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 464.824156][ C1] arch_stack_walk+0x11e/0x150 [ 464.824180][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 464.824205][ C1] ? NF_HOOK+0x29b/0x450 [ 464.824229][ C1] stack_trace_save+0x11a/0x1d0 [ 464.824254][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 464.824279][ C1] ? __kasan_kmalloc+0x9d/0xb0 [ 464.824300][ C1] ? __kmalloc_cache_noprof+0x236/0x370 [ 464.824325][ C1] ? ref_tracker_alloc+0x159/0x4c0 [ 464.824347][ C1] ref_tracker_alloc+0x19f/0x4c0 [ 464.824367][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 464.824385][ C1] ? dst_init+0xee/0x490 [ 464.824403][ C1] ? dst_alloc+0x14f/0x190 [ 464.824419][ C1] ? ip_route_output_key_hash_rcu+0x1378/0x2290 [ 464.824436][ C1] ? ip_route_output_key_hash+0x195/0x2b0 [ 464.824452][ C1] ? ip_route_output_flow+0x29/0x140 [ 464.824476][ C1] ? ip_route_me_harder+0x852/0x13e0 [ 464.824493][ C1] ? synproxy_send_tcp+0x356/0x6c0 [ 464.824515][ C1] ? synproxy_send_client_synack+0x8ea/0xf70 [ 464.824537][ C1] ? nft_synproxy_eval_v4+0x3cc/0x610 [ 464.824575][ C1] ? nft_synproxy_do_eval+0x36a/0xa90 [ 464.824600][ C1] ? nft_do_chain+0x4b2/0x1db0 [ 464.824624][ C1] ? nft_do_chain_inet+0x41f/0x6b0 [ 464.824647][ C1] ? nf_hook_slow+0xc8/0x220 [ 464.824675][ C1] dst_init+0xee/0x490 [ 464.824692][ C1] ? dst_alloc+0x12b/0x190 [ 464.824712][ C1] dst_alloc+0x14f/0x190 [ 464.824732][ C1] ip_route_output_key_hash_rcu+0x1378/0x2290 [ 464.824757][ C1] ip_route_output_key_hash+0x195/0x2b0 [ 464.824775][ C1] ? ip_route_output_key_hash+0xe1/0x2b0 [ 464.824792][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 464.824818][ C1] ip_route_output_flow+0x29/0x140 [ 464.824845][ C1] ip_route_me_harder+0x852/0x13e0 [ 464.824869][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 464.824888][ C1] ? kmem_cache_alloc_node_noprof+0x24e/0x3b0 [ 464.824924][ C1] synproxy_send_tcp+0x356/0x6c0 [ 464.824952][ C1] synproxy_send_client_synack+0x8ea/0xf70 [ 464.824982][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 464.825006][ C1] ? nft_osf_reduce+0x3e8/0x540 [ 464.825031][ C1] ? synproxy_pernet+0x45/0x280 [ 464.825048][ C1] nft_synproxy_eval_v4+0x3cc/0x610 [ 464.825078][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 464.825106][ C1] ? nf_ip_checksum+0x13a/0x500 [ 464.825134][ C1] nft_synproxy_do_eval+0x36a/0xa90 [ 464.825163][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 464.825201][ C1] nft_do_chain+0x4b2/0x1db0 [ 464.825234][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 464.825259][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 464.825292][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 464.825313][ C1] nft_do_chain_inet+0x41f/0x6b0 [ 464.825340][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 464.825364][ C1] ? ipt_do_table+0x314/0x1870 [ 464.825393][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 464.825417][ C1] nf_hook_slow+0xc8/0x220 [ 464.825440][ C1] NF_HOOK+0x29b/0x450 [ 464.825462][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 464.825484][ C1] ? NF_HOOK+0x9e/0x450 [ 464.825504][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 464.825526][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 464.825551][ C1] ? ip_rcv_finish+0x409/0x560 [ 464.825587][ C1] NF_HOOK+0x3a0/0x450 [ 464.825608][ C1] ? rcu_is_watching+0x15/0xb0 [ 464.825631][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 464.825654][ C1] ? NF_HOOK+0x9e/0x450 [ 464.825676][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 464.825698][ C1] ? ip_rcv_core+0x80c/0xd20 [ 464.825724][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 464.825753][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 464.825778][ C1] __netif_receive_skb+0x2c9/0x670 [ 464.825808][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 464.825846][ C1] process_backlog+0x664/0x15c0 [ 464.825873][ C1] ? register_lock_class+0x54/0x330 [ 464.825897][ C1] ? process_backlog+0x33d/0x15c0 [ 464.825929][ C1] ? __pfx_process_backlog+0x10/0x10 [ 464.825956][ C1] ? __lock_acquire+0xad5/0xd80 [ 464.825979][ C1] ? do_raw_spin_lock+0x151/0x370 [ 464.826008][ C1] __napi_poll+0xcb/0x480 [ 464.826036][ C1] net_rx_action+0x89d/0x1240 [ 464.826078][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 464.826105][ C1] ? __run_timer_base+0x1c2/0x8e0 [ 464.826123][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 464.826166][ C1] handle_softirqs+0x2d6/0x9b0 [ 464.826193][ C1] ? do_softirq+0x11f/0x1e0 [ 464.826213][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 464.826240][ C1] do_softirq+0x11f/0x1e0 [ 464.826258][ C1] [ 464.826264][ C1] [ 464.826273][ C1] ? __pfx_do_softirq+0x10/0x10 [ 464.826292][ C1] ? __lock_acquire+0xad5/0xd80 [ 464.826312][ C1] ? batadv_dat_purge+0x2de/0x3c0 [ 464.826342][ C1] ? lockdep_softirqs_on+0x144/0x1d0 [ 464.826364][ C1] __local_bh_enable_ip+0x1be/0x200 [ 464.826385][ C1] ? batadv_dat_purge+0x2de/0x3c0 [ 464.826413][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 464.826433][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 464.826466][ C1] batadv_dat_purge+0x2de/0x3c0 [ 464.826500][ C1] ? process_scheduled_works+0x9cb/0x18e0 [ 464.826523][ C1] process_scheduled_works+0xac3/0x18e0 [ 464.826573][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.826602][ C1] ? assign_work+0x346/0x3d0 [ 464.826627][ C1] rescuer_thread+0x662/0x1020 [ 464.826661][ C1] ? rescuer_thread+0x126/0x1020 [ 464.826692][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 464.826719][ C1] ? __kthread_parkme+0x1a8/0x200 [ 464.826746][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 464.826772][ C1] kthread+0x7b7/0x940 [ 464.826800][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 464.826826][ C1] ? __pfx_kthread+0x10/0x10 [ 464.826852][ C1] ? __pfx_kthread+0x10/0x10 [ 464.826879][ C1] ? __pfx_kthread+0x10/0x10 [ 464.826906][ C1] ? __pfx_kthread+0x10/0x10 [ 464.826932][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.826952][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 464.826973][ C1] ? __pfx_kthread+0x10/0x10 [ 464.827001][ C1] ret_from_fork+0x4b/0x80 [ 464.827022][ C1] ? __pfx_kthread+0x10/0x10 [ 464.827049][ C1] ret_from_fork_asm+0x1a/0x30 [ 464.827078][ C1] [ 464.838339][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 464.838366][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) [ 464.838395][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 464.838410][ T31] Call Trace: [ 464.838420][ T31] [ 464.838433][ T31] dump_stack_lvl+0x241/0x360 [ 464.838475][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.838511][ T31] ? __pfx__printk+0x10/0x10 [ 464.838552][ T31] ? vscnprintf+0x5d/0x90 [ 464.838591][ T31] panic+0x349/0x880 [ 464.838621][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 464.838646][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 464.838684][ T31] ? __pfx_panic+0x10/0x10 [ 464.838711][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 464.838749][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 464.838777][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 464.838811][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 464.838850][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 464.838890][ T31] watchdog+0x1097/0x10a0 [ 464.838915][ T31] ? watchdog+0x1ea/0x10a0 [ 464.838945][ T31] ? __pfx_watchdog+0x10/0x10 [ 464.838970][ T31] kthread+0x7b7/0x940 [ 464.839004][ T31] ? __pfx_watchdog+0x10/0x10 [ 464.839029][ T31] ? __pfx_kthread+0x10/0x10 [ 464.839059][ T31] ? __pfx_kthread+0x10/0x10 [ 464.839090][ T31] ? __pfx_kthread+0x10/0x10 [ 464.839121][ T31] ? __pfx_kthread+0x10/0x10 [ 464.839153][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.839175][ T31] ? lockdep_hardirqs_on+0x9d/0x150 [ 464.839201][ T31] ? __pfx_kthread+0x10/0x10 [ 464.839235][ T31] ret_from_fork+0x4b/0x80 [ 464.839259][ T31] ? __pfx_kthread+0x10/0x10 [ 464.839290][ T31] ret_from_fork_asm+0x1a/0x30 [ 464.839338][ T31] [ 465.746418][ T31] Kernel Offset: disabled [ 465.750760][ T31] Rebooting in 86400 seconds..