last executing test programs: 7m16.038356394s ago: executing program 1 (id=1398): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @remote}, 0x80ad}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ab}, 0x1c) 7m15.943352953s ago: executing program 1 (id=1400): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 7m15.721772252s ago: executing program 1 (id=1402): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0xe00, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) 7m15.597841546s ago: executing program 1 (id=1404): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) 7m15.414236619s ago: executing program 1 (id=1407): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='on', 0x53) syz_clone(0x40000300, 0x0, 0x0, 0x0, 0x0, 0x0) 7m14.963795534s ago: executing program 1 (id=1413): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000002440)="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", 0x559, r0) 6m59.8478844s ago: executing program 32 (id=1413): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000002440)="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", 0x559, r0) 17.898708441s ago: executing program 0 (id=2948): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pnp/devices/00:02/resources\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='activ', 0x5) 17.218425581s ago: executing program 0 (id=2952): r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x4, 0x20, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, {&(0x7f00000002c0)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000002280)="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", 0x396}], 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000200)=0x1) 12.582184647s ago: executing program 0 (id=2964): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 12.379922294s ago: executing program 0 (id=2966): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 12.066101822s ago: executing program 0 (id=2967): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 11.76161302s ago: executing program 0 (id=2969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x4c, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r2, 0x1, 0x2, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x14, 0x0, @l2={'eth', 0x3a, 'hsr0\x00'}}}}}, 0x34}}, 0x20042000) 2.94680549s ago: executing program 3 (id=3014): mkdir(&(0x7f0000000040)='my_sys\x00', 0xd6) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) 2.020381279s ago: executing program 4 (id=3017): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) 1.819127279s ago: executing program 4 (id=3018): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='usbip-vud', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1\x00', 0xffffffffffffff9c, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') write(0xffffffffffffffff, &(0x7f0000000780)='pcspkr\x00', 0x6) r3 = syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x48) 1.78763208s ago: executing program 3 (id=3019): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x100) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.634241043s ago: executing program 3 (id=3020): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) 1.612633034s ago: executing program 4 (id=3022): r0 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x3, &(0x7f0000000040)={{}, {0x0, 0xea60}}, &(0x7f0000000380)) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000480)="2399", 0x2}], 0x1) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)}}], 0x1, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000044000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r8) 1.474445913s ago: executing program 2 (id=3023): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="737562f874730275fdd6a35b36743a6d6f643ab6b7d996e659c1f68f8eb892792c9f6d6fdd831aeb23efe200", 0x2c) 1.305750261s ago: executing program 3 (id=3024): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0200', 0x6) write(0xffffffffffffffff, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6", 0x95) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000007c0)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r5, &(0x7f0000000840)='8\n', 0x2) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f00000008c0)="05010906a101050719e029e71500250175019508810295017508810395057501050819012905910295017503910395067508150025650507190029658100c0", 0x3f) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000a40)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x2) 855.118183ms ago: executing program 2 (id=3025): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2a020480) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086607, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) r1 = userfaultfd(0x80001) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000002640)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) 582.062469ms ago: executing program 4 (id=3026): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) 578.152842ms ago: executing program 2 (id=3027): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 482.671176ms ago: executing program 2 (id=3028): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 468.808037ms ago: executing program 4 (id=3029): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) 281.011566ms ago: executing program 2 (id=3030): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='usbip-vud', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1\x00', 0xffffffffffffff9c, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') write(0xffffffffffffffff, &(0x7f0000000780)='pcspkr\x00', 0x6) r3 = syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048000}, 0x48) 211.327887ms ago: executing program 4 (id=3031): mkdir(&(0x7f0000000040)='my_sys\x00', 0xd6) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) 149.766252ms ago: executing program 3 (id=3032): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x200, 0x4) setsockopt(r0, 0x11b, 0x9, 0x0, 0x4) 99.854218ms ago: executing program 2 (id=3033): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./config\x00', &(0x7f0000000880)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./img\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000980)='1\n\x00', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000ac0)='1\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/subsystems/testsubsys/namespaces/1/resv_enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000b40)='1\n\x00', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000000bc0)='1\n\x00', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r5, &(0x7f0000000c80)='loop\n\x00', 0x5) close(r5) symlinkat(&(0x7f0000000cc0)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write(r6, &(0x7f0000000d80)='transport=loop,nqn=testsubsys\x00', 0x1e) close(r6) nanosleep(&(0x7f0000000dc0)={0x0, 0xee6b280}, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/diskstats\x00', 0x0, 0x0) read(r7, &(0x7f0000000e40)=""/2000, 0x7d0) close(r7) 0s ago: executing program 3 (id=3034): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) socket(0x25, 0xa, 0x405) kernel console output (not intermixed with test programs): 689][ T5717] usb 3-1: SerialNumber: syz [ 171.104122][ T5717] usb 3-1: config 0 descriptor?? [ 171.200156][ T31] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 171.231366][ T31] usb 2-1: device descriptor read/8, error -71 [ 171.246038][ T32] audit: type=1800 audit(1790108519.659:4): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.435" name="!" dev="sda1" ino=2040 res=0 errno=0 [ 172.020163][ T31] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 172.116380][ T31] usb 2-1: device descriptor read/8, error -71 [ 172.355508][ T31] usb usb2-port1: unable to enumerate USB device [ 172.869550][ T6915] fuse: Bad value for 'fd' [ 174.371420][ T5717] usb 3-1: USB disconnect, device number 20 [ 174.735649][ T32] audit: type=1800 audit(1790108523.149:5): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.446" name="!" dev="sda1" ino=2040 res=0 errno=0 [ 174.835684][ T6934] fuse: Bad value for 'fd' [ 175.200166][ T5717] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 175.371052][ T5717] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 175.375081][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.375113][ T5717] usb 4-1: Product: syz [ 175.375128][ T5717] usb 4-1: Manufacturer: syz [ 175.375145][ T5717] usb 4-1: SerialNumber: syz [ 175.389906][ T5717] usb 4-1: config 0 descriptor?? [ 175.420433][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 175.550141][ T10] usb 3-1: device descriptor read/64, error -71 [ 175.800454][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 175.940289][ T10] usb 3-1: device descriptor read/64, error -71 [ 176.055785][ T10] usb usb3-port1: attempt power cycle [ 176.450917][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 176.494753][ T10] usb 3-1: device descriptor read/8, error -71 [ 176.752744][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 176.788097][ T10] usb 3-1: device descriptor read/8, error -71 [ 176.901601][ T10] usb usb3-port1: unable to enumerate USB device [ 178.549012][ T5717] usb 4-1: USB disconnect, device number 10 [ 178.765755][ T6963] fuse: Bad value for 'fd' [ 178.893524][ T32] audit: type=1800 audit(1790108527.309:6): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.460" name="!" dev="sda1" ino=2040 res=0 errno=0 [ 178.894417][ T6967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.458'. [ 179.132072][ T6979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.132462][ T6979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.722887][ T939] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 179.948480][ T939] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 180.003010][ T939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.003485][ T939] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 180.006205][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.248173][ T939] usb 2-1: config 0 descriptor?? [ 182.748921][ T939] usb 2-1: USB disconnect, device number 41 [ 182.846678][ T6997] fuse: Bad value for 'fd' [ 182.896656][ T32] audit: type=1800 audit(1790108531.309:7): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.470" name="!" dev="sda1" ino=2040 res=0 errno=0 [ 182.946254][ T7001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.473'. [ 183.148416][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.149215][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.273124][ T7022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.326938][ T7022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.804429][ T7038] fuse: Bad value for 'fd' [ 186.912302][ T7037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.485'. [ 187.180170][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 187.343071][ T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 187.344704][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.344742][ T10] usb 3-1: config 0 has no interface number 0 [ 187.347128][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.347154][ T10] usb 3-1: Product: syz [ 187.347169][ T10] usb 3-1: Manufacturer: syz [ 187.347184][ T10] usb 3-1: SerialNumber: syz [ 187.371851][ T10] usb 3-1: config 0 descriptor?? [ 187.584019][ T10] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 187.596822][ T10] usb 3-1: USB disconnect, device number 25 [ 187.740448][ T5726] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 187.939286][ T5726] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 188.024148][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.024179][ T5726] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 188.024218][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.967533][ T5726] usb 2-1: config 0 descriptor?? [ 191.020093][ T7073] fuse: Bad value for 'fd' [ 191.224919][ T7082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.498'. [ 191.615683][ T5726] usb 2-1: USB disconnect, device number 42 [ 192.250127][ T5726] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 192.701054][ T5726] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 192.755554][ T5726] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.755586][ T5726] usb 2-1: config 0 has no interface number 0 [ 192.910745][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.910777][ T5726] usb 2-1: Product: syz [ 192.910794][ T5726] usb 2-1: Manufacturer: syz [ 192.910810][ T5726] usb 2-1: SerialNumber: syz [ 193.913787][ T5726] usb 2-1: config 0 descriptor?? [ 194.478639][ T7104] fuse: Invalid rootmode [ 194.604456][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.604519][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.933973][ T5726] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 194.951826][ T5726] usb 2-1: USB disconnect, device number 43 [ 195.199163][ T7108] pimreg: entered allmulticast mode [ 195.405456][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.512'. [ 195.520158][ T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 195.671003][ T25] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 195.672179][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.672225][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.672284][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.675235][ T25] usb 2-1: config 0 descriptor?? [ 195.729985][ T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 195.997790][ T7131] fuse: Invalid rootmode [ 196.450099][ T5726] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 197.049963][ T5726] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 197.122065][ T5726] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.122113][ T5726] usb 4-1: config 0 has no interface number 0 [ 197.375099][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.375131][ T5726] usb 4-1: Product: syz [ 197.375147][ T5726] usb 4-1: Manufacturer: syz [ 197.375163][ T5726] usb 4-1: SerialNumber: syz [ 197.979074][ T5726] usb 4-1: config 0 descriptor?? [ 199.201040][ T32] audit: type=1800 audit(1790108547.619:8): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.519" name="!" dev="sda1" ino=2040 res=0 errno=0 [ 199.209452][ T5726] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 199.250339][ T939] usb 4-1: USB disconnect, device number 11 [ 199.295883][ T5726] usb 2-1: USB disconnect, device number 44 [ 199.464873][ T5623] Bluetooth: Wrong link type (-71) [ 199.647357][ T7160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.523'. [ 199.683654][ T7162] fuse: Invalid rootmode [ 200.027775][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.028552][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.260873][ T7175] pimreg: entered allmulticast mode [ 202.638460][ T7190] fuse: Bad value for 'rootmode' [ 204.340134][ T5694] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 204.447495][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.447986][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.491192][ T5694] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 204.492474][ T5694] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.492498][ T5694] usb 4-1: config 0 has no interface number 0 [ 204.494830][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.494854][ T5694] usb 4-1: Product: syz [ 204.494873][ T5694] usb 4-1: Manufacturer: syz [ 204.494889][ T5694] usb 4-1: SerialNumber: syz [ 204.498125][ T5694] usb 4-1: config 0 descriptor?? [ 204.710664][ T5694] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 204.731926][ T5694] usb 4-1: USB disconnect, device number 12 [ 204.885050][ T7214] fuse: Bad value for 'rootmode' [ 204.949195][ T7216] 9pnet_fd: p9_fd_create_unix (7216): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 208.362753][ T7239] 9pnet_fd: p9_fd_create_unix (7239): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 208.364632][ T7240] fuse: Bad value for 'rootmode' [ 208.507282][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.507877][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.780320][ T5708] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 208.931097][ T5708] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 208.932147][ T5708] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.932171][ T5708] usb 3-1: config 0 has no interface number 0 [ 208.934344][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.934369][ T5708] usb 3-1: Product: syz [ 208.934385][ T5708] usb 3-1: Manufacturer: syz [ 208.934438][ T5708] usb 3-1: SerialNumber: syz [ 208.937188][ T5708] usb 3-1: config 0 descriptor?? [ 209.192526][ T5708] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 209.401815][ T5708] usb 3-1: USB disconnect, device number 26 [ 212.052989][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 212.053337][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 212.053369][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 212.053396][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 212.368393][ T7268] fuse: Unknown parameter 'use00000000000000000000' [ 212.449669][ T7272] 9pnet_fd: p9_fd_create_unix (7272): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 212.581508][ T7279] netlink: Conntrack attr has 12 unknown bytes [ 212.581560][ T7279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.583917][ T7279] netlink: Conntrack attr has 12 unknown bytes [ 212.583981][ T7279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.684670][ T7281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.685382][ T7281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.020221][ T5708] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 213.041045][ T939] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 213.170845][ T5708] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 213.181573][ T5708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.181798][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 213.181965][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.193033][ T939] usb 3-1: Using ep0 maxpacket: 32 [ 213.197599][ T939] usb 3-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 213.204443][ T939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.205694][ T939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 213.205856][ T939] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 213.205937][ T939] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 213.243649][ T5708] usb 2-1: config 0 descriptor?? [ 213.276625][ T939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.276792][ T939] usb 3-1: Product: syz [ 213.276841][ T939] usb 3-1: Manufacturer: syz [ 213.276951][ T939] usb 3-1: SerialNumber: syz [ 213.324581][ T7285] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 213.325467][ T5708] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 213.538509][ T939] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 213.538611][ T939] usb 3-1: MIDIStreaming interface descriptor not found [ 214.802410][ T939] usb 3-1: USB disconnect, device number 27 [ 216.686372][ T5717] usb 2-1: USB disconnect, device number 45 [ 216.724259][ T7302] fuse: Unknown parameter 'use00000000000000000000' [ 216.944192][ T7307] 9pnet_fd: p9_fd_create_unix (7307): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 217.219332][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.670891][ T5717] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 218.066607][ T5717] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 218.115812][ T5717] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.115843][ T5717] usb 2-1: config 0 has no interface number 0 [ 218.421557][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.421588][ T5717] usb 2-1: Product: syz [ 218.421604][ T5717] usb 2-1: Manufacturer: syz [ 218.421621][ T5717] usb 2-1: SerialNumber: syz [ 218.710450][ T5717] usb 2-1: config 0 descriptor?? [ 218.807102][ T7328] fuse: Unknown parameter 'use00000000000000000000' [ 218.924819][ T5717] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 218.940130][ T5708] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 218.992967][ T5717] usb 2-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 218.993202][ T5717] usb 2-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 219.290277][ T5708] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 219.354976][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.355033][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.355080][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.189846][ T7339] 9pnet_fd: p9_fd_create_unix (7339): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 220.514739][ T5708] usb 4-1: config 0 descriptor?? [ 221.386277][ T5708] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 222.302150][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.302666][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.335417][ T939] usb 4-1: USB disconnect, device number 13 [ 222.434215][ T7362] 9pnet_fd: p9_fd_create_unix (7362): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 226.277093][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.279589][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.397371][ T7392] 9pnet_fd: p9_fd_create_unix (7392): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 226.606468][ T7401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.710178][ T5694] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 226.886003][ T5694] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 226.889010][ T5694] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.889038][ T5694] usb 4-1: config 0 has no interface number 0 [ 226.899723][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.899753][ T5694] usb 4-1: Product: syz [ 226.899771][ T5694] usb 4-1: Manufacturer: syz [ 226.899787][ T5694] usb 4-1: SerialNumber: syz [ 226.915971][ T5694] usb 4-1: config 0 descriptor?? [ 227.132501][ T5694] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 227.880506][ T7417] 9pnet_fd: p9_fd_create_unix (7417): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 229.080467][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 230.848256][ T5617] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 232.188534][ T7449] 9pnet_fd: p9_fd_create_unix (7449): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 232.350134][ T939] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 232.581520][ T939] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 232.664406][ T939] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 232.666280][ T939] usb 3-1: config 0 has no interface number 0 [ 232.791397][ T939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.792008][ T939] usb 3-1: Product: syz [ 232.792027][ T939] usb 3-1: Manufacturer: syz [ 232.792042][ T939] usb 3-1: SerialNumber: syz [ 233.096871][ T939] usb 3-1: config 0 descriptor?? [ 233.696094][ T939] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 235.320604][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.631'. [ 235.972627][ T7474] fuse: Bad value for 'fd' [ 239.594987][ T7497] fuse: Bad value for 'fd' [ 240.200030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 240.350032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 240.430039][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 241.050037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 241.100647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 241.150028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 241.220069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 241.240020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 241.510212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 242.918203][ T7504] syz.2.648 (7504) used greatest stack depth: 19112 bytes left [ 249.084411][ T7533] fuse: Bad value for 'fd' [ 250.081547][ T7549] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 252.242919][ T7568] fuse: Unknown parameter '0x0000000000000003' [ 256.043179][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.043238][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.960267][ T7596] fuse: Unknown parameter '0x0000000000000003' [ 259.015621][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.016304][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.292935][ T7602] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 259.293000][ T7602] device-mapper: ioctl: error adding target to table [ 259.317828][ T7613] input: syz0 as /devices/virtual/input/input9 [ 259.785482][ T7632] fuse: Unknown parameter '0x0000000000000003' [ 260.422946][ T7655] fuse: Unknown parameter '0x0000000000000003' [ 261.409351][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 261.920975][ T7682] fuse: Unknown parameter '0x0000000000000003' [ 262.053343][ T7686] block nbd1: shutting down sockets [ 262.688809][ T7698] tipc: Started in network mode [ 262.688939][ T7698] tipc: Node identity ac1414aa, cluster identity 4711 [ 262.689785][ T7698] tipc: New replicast peer: 172.20.20.187 [ 262.695842][ T7698] tipc: Enabled bearer , priority 10 [ 263.087144][ T7716] FAULT_INJECTION: forcing a failure. [ 263.087144][ T7716] name fail_futex, interval 1, probability 0, space 0, times 1 [ 263.087194][ T7716] CPU: 0 UID: 0 PID: 7716 Comm: syz.0.726 Not tainted syzkaller #0 PREEMPT(full) [ 263.087221][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.087243][ T7716] Call Trace: [ 263.087256][ T7716] [ 263.087274][ T7716] dump_stack_lvl+0xe8/0x150 [ 263.087322][ T7716] should_fail_ex+0x3eb/0x540 [ 263.087354][ T7716] get_futex_key+0x1b4/0x1580 [ 263.087405][ T7716] ? __pfx_get_futex_key+0x10/0x10 [ 263.087439][ T7716] ? userfaultfd_unmap_complete+0x292/0x310 [ 263.087481][ T7716] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 263.087517][ T7716] futex_wake+0x119/0x5f0 [ 263.087555][ T7716] ? __pfx_futex_wake+0x10/0x10 [ 263.087585][ T7716] ? __se_sys_mremap+0x1160/0x12d0 [ 263.087622][ T7716] do_futex+0x458/0x4e0 [ 263.087646][ T7716] ? __asan_memcpy+0x40/0x70 [ 263.087684][ T7716] ? __pfx_do_futex+0x10/0x10 [ 263.087710][ T7716] ? lock_acquire+0x115/0x350 [ 263.087749][ T7716] __se_sys_futex+0x3a8/0x450 [ 263.087782][ T7716] ? __pfx___se_sys_futex+0x10/0x10 [ 263.087816][ T7716] ? __x64_sys_futex+0x21/0xf0 [ 263.087845][ T7716] do_syscall_64+0x166/0x520 [ 263.087867][ T7716] ? trace_irq_disable+0x3b/0x140 [ 263.087899][ T7716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.087923][ T7716] ? clear_bhb_loop+0x70/0xc0 [ 263.087952][ T7716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.087976][ T7716] RIP: 0033:0x7f3cf8b9e159 [ 263.088004][ T7716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.088025][ T7716] RSP: 002b:00007f3cf9a6d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 263.088055][ T7716] RAX: ffffffffffffffda RBX: 00007f3cf8e25fa8 RCX: 00007f3cf8b9e159 [ 263.088072][ T7716] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3cf8e25fac [ 263.088087][ T7716] RBP: 00007f3cf8e25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 263.088104][ T7716] R10: 0000200000ffd000 R11: 0000000000000246 R12: 0000000000000000 [ 263.088118][ T7716] R13: 00007f3cf8e26038 R14: 00007fffeb6b29b0 R15: 00007fffeb6b2a98 [ 263.088153][ T7716] [ 263.682611][ T2221] tipc: Node number set to 2886997162 [ 264.204315][ T7735] nbd: must specify a device to reconfigure [ 266.238927][ T5617] Bluetooth: hci2: unexpected event for opcode 0x0c14 [ 266.913715][ T7780] device-mapper: table: 248:0: zero-length target [ 266.953137][ T7780] device-mapper: ioctl: error adding target to table [ 273.078498][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.078866][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.279501][ T7816] device-mapper: table: 248:0: zero-length target [ 273.279520][ T7816] device-mapper: ioctl: error adding target to table [ 273.753376][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.757236][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.582556][ T7839] device-mapper: table: 248:0: zero-length target [ 274.582572][ T7839] device-mapper: ioctl: error adding target to table [ 276.541898][ T7865] netlink: 48 bytes leftover after parsing attributes in process `syz.2.783'. [ 276.709391][ T7867] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 276.709421][ T7867] device-mapper: ioctl: error adding target to table [ 276.958262][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.971659][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.322764][ T7898] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 278.322806][ T7898] device-mapper: ioctl: error adding target to table [ 282.594845][ T5717] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 282.594926][ T5717] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 282.599709][ T5717] usb 2-1: USB disconnect, device number 46 [ 285.293860][ T939] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 285.293929][ T5694] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 285.294684][ T5694] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 285.306884][ T939] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 285.321688][ T5694] usb 4-1: USB disconnect, device number 14 [ 285.371320][ T939] usb 3-1: USB disconnect, device number 28 [ 286.240422][ T7975] printk: console [ttyS0] disabled syzkaller syzkaller login: [ 620.575426][T11895] printk: console [ttyS0] enabled [ 624.694756][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.694849][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.858630][T11956] se_dev->se_dev_ptr already set for storage object [ 627.921593][ T939] usb 1-1: USB disconnect, device number 22 [ 628.375846][ T939] cdc_ether 1-1:1.3 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 633.200083][ T939] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 633.351620][ T939] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.03 [ 633.360452][ T939] usb 1-1: Dual-Role OTG device on HNP port [ 633.363203][ T939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.363303][ T939] usb 1-1: Product: HID Gadget [ 633.363352][ T939] usb 1-1: SerialNumber: 0123456789 [ 633.486962][ T939] input: HID Gadget as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:1D6B:0104.0022/input/input30 [ 634.666312][ T939] hid-generic 0003:1D6B:0104.0022: input,hidraw0: USB HID v1.01 Keyboard [HID Gadget] on usb-dummy_hcd.0-1/input0 [ 634.743677][ T939] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 637.207103][ T939] cdc_ether 1-1:1.3 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 62:d1:9e:51:df:50 [ 642.838519][T12082] se_dev->se_dev_ptr already set for storage object [ 642.884401][ T5348] usb 1-1: USB disconnect, device number 23 [ 643.436673][ T5348] cdc_ether 1-1:1.3 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 644.360021][ T2221] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 644.517486][ T2221] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.03 [ 644.530059][ T2221] usb 1-1: Dual-Role OTG device on HNP port [ 644.530404][ T2221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.530428][ T2221] usb 1-1: Product: HID Gadget [ 644.530445][ T2221] usb 1-1: SerialNumber: 0123456789 [ 644.610365][ T2221] input: HID Gadget as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:1D6B:0104.0023/input/input31 [ 644.741494][ T2221] hid-generic 0003:1D6B:0104.0023: input,hidraw0: USB HID v1.01 Keyboard [HID Gadget] on usb-dummy_hcd.0-1/input0 [ 644.768263][ T2221] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 645.819427][ T2221] cdc_ether 1-1:1.3 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 62:d1:9e:51:df:50 [ 649.792503][T12132] se_dev->se_dev_ptr already set for storage object [ 649.835280][ T2221] usb 1-1: USB disconnect, device number 24 [ 650.431561][ T2221] cdc_ether 1-1:1.3 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 656.108212][T12189] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 656.710715][T12185] overlayfs: failed to resolve '/€': -2 [ 657.086329][ T32] audit: type=1800 audit(1790109005.359:103): pid=12193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2170" name=08 dev="sda1" ino=2050 res=0 errno=0 [ 658.002457][T12200] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 661.309990][ T939] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 661.461516][ T939] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.03 [ 661.463551][ T939] usb 1-1: Dual-Role OTG device on HNP port [ 661.463845][ T939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.463870][ T939] usb 1-1: Product: HID Gadget [ 661.463887][ T939] usb 1-1: SerialNumber: 0123456789 [ 661.472343][ T32] audit: type=1326 audit(1790109009.889:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.2179" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc503b9e159 code=0x7ffc0000 [ 661.474786][ T32] audit: type=1326 audit(1790109009.889:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.2179" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc503b9e159 code=0x7ffc0000 [ 661.498988][ T32] audit: type=1326 audit(1790109009.909:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.2179" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc503b9e159 code=0x7ffc0000 [ 661.499608][ T32] audit: type=1326 audit(1790109009.909:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.2179" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc503b9e159 code=0x7ffc0000 [ 661.500508][ T32] audit: type=1326 audit(1790109009.919:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.2179" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc503b9e159 code=0x7ffc0000 [ 661.505674][ T32] audit: type=1326 audit(1790109009.919:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.2179" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc503b9e159 code=0x7ffc0000 [ 661.506320][ T32] audit: type=1326 audit(1790109009.919:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.2179" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc503b9e159 code=0x7ffc0000 [ 661.507379][ T32] audit: type=1326 audit(1790109009.919:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.2179" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc503b9e159 code=0x7ffc0000 [ 661.511599][ T32] audit: type=1326 audit(1790109009.919:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.2179" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc503b9e159 code=0x7ffc0000 [ 661.778333][ T939] input: HID Gadget as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:1D6B:0104.0024/input/input32 [ 661.913428][ T939] hid-generic 0003:1D6B:0104.0024: input,hidraw0: USB HID v1.01 Keyboard [HID Gadget] on usb-dummy_hcd.0-1/input0 [ 661.942434][ T939] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 662.185101][ T32] kauditd_printk_skb: 7 callbacks suppressed [ 662.185124][ T32] audit: type=1326 audit(1790109010.399:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.3.2180" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbdc979e159 code=0x7ffc0000 [ 662.185171][ T32] audit: type=1326 audit(1790109010.399:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.3.2180" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc979e159 code=0x7ffc0000 [ 662.185220][ T32] audit: type=1326 audit(1790109010.399:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.3.2180" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbdc979e159 code=0x7ffc0000 [ 662.185266][ T32] audit: type=1326 audit(1790109010.599:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.3.2180" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc979e159 code=0x7ffc0000 [ 662.185311][ T32] audit: type=1326 audit(1790109010.599:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.3.2180" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc979e159 code=0x7ffc0000 [ 662.195882][ T32] audit: type=1326 audit(1790109010.609:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.3.2180" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbdc979e159 code=0x7ffc0000 [ 662.196041][ T32] audit: type=1326 audit(1790109010.609:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.3.2180" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc979e159 code=0x7ffc0000 [ 662.196169][ T32] audit: type=1326 audit(1790109010.609:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.3.2180" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc979e159 code=0x7ffc0000 [ 662.202439][ T32] audit: type=1326 audit(1790109010.609:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.3.2180" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbdc979e159 code=0x7ffc0000 [ 662.206774][ T32] audit: type=1326 audit(1790109010.609:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12244 comm="syz.3.2180" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc979e159 code=0x7ffc0000 [ 663.056397][ T939] cdc_ether 1-1:1.3 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 62:d1:9e:51:df:50 [ 666.441939][T12274] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2187'. [ 666.441985][T12274] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2187'. [ 671.874356][ T939] usb 1-1: USB disconnect, device number 25 [ 672.270963][ T939] cdc_ether 1-1:1.3 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 672.919914][ T939] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 673.151740][ T939] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.03 [ 673.214318][ T939] usb 1-1: Dual-Role OTG device on HNP port [ 673.216900][ T939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.216927][ T939] usb 1-1: Product: HID Gadget [ 673.217569][ T939] usb 1-1: SerialNumber: 0123456789 [ 673.879648][ T939] input: HID Gadget as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:1D6B:0104.0025/input/input33 [ 674.046580][ T939] hid-generic 0003:1D6B:0104.0025: input,hidraw0: USB HID v1.01 Keyboard [HID Gadget] on usb-dummy_hcd.0-1/input0 [ 674.078451][ T939] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 674.413567][ T939] cdc_ether 1-1:1.3 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 62:d1:9e:51:df:50 [ 677.028074][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 686.230091][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.230227][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.216747][T10818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 691.230731][T10818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 691.231898][T10818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 691.236598][T10818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 691.237435][T10818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 692.236952][ T30] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.276949][ T10] usb 1-1: USB disconnect, device number 26 [ 693.580505][ T5617] Bluetooth: hci1: command tx timeout [ 694.216304][ T30] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.395672][ T10] cdc_ether 1-1:1.3 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 694.415133][T12531] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 694.415173][T12531] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 694.415215][T12531] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 694.419279][T12531] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 694.443947][T12531] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 694.856082][ T30] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.092566][ T30] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.544832][ T5617] Bluetooth: hci1: command tx timeout [ 698.097719][ T30] bridge_slave_1: left allmulticast mode [ 698.097794][ T30] bridge_slave_1: left promiscuous mode [ 698.100749][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.172063][ T30] bridge_slave_0: left allmulticast mode [ 698.173702][ T30] bridge_slave_0: left promiscuous mode [ 698.173937][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.249618][ T30] pimreg: left allmulticast mode [ 698.600272][T10818] Bluetooth: hci1: command tx timeout [ 699.146696][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.156794][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.185917][ T30] bond0 (unregistering): Released all slaves [ 699.225690][ T30] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 699.247338][ T30] bond1 (unregistering): Released all slaves [ 699.300073][ T2221] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 699.641576][ T2221] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.03 [ 699.662490][ T2221] usb 1-1: Dual-Role OTG device on HNP port [ 699.663349][ T2221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.663474][ T2221] usb 1-1: Product: HID Gadget [ 699.663610][ T2221] usb 1-1: SerialNumber: 0123456789 [ 700.505561][T12493] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.505728][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.505872][T12493] bridge_slave_0: entered allmulticast mode [ 700.507968][T12493] bridge_slave_0: entered promiscuous mode [ 700.537973][T12493] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.538084][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.538221][T12493] bridge_slave_1: entered allmulticast mode [ 700.555132][T12493] bridge_slave_1: entered promiscuous mode [ 700.645688][T12493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.668441][T12493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.680972][T10818] Bluetooth: hci1: command tx timeout [ 700.687288][ T2221] input: HID Gadget as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:1D6B:0104.0026/input/input34 [ 700.779425][T12493] team0: Port device team_slave_0 added [ 700.791391][T12493] team0: Port device team_slave_1 added [ 702.765567][ T2221] hid-generic 0003:1D6B:0104.0026: input,hidraw0: USB HID v1.01 Keyboard [HID Gadget] on usb-dummy_hcd.0-1/input0 [ 702.819219][ T2221] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 705.039024][T12493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.039046][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.039075][T12493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.255898][ T2221] cdc_ether 1-1:1.3 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 62:d1:9e:51:df:50 [ 705.298087][ T2221] usb 1-1: USB disconnect, device number 27 [ 705.314824][T12493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.314843][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.314879][T12493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.830895][T12643] fido_id[12643]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 705.967713][ T2221] cdc_ether 1-1:1.3 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 706.030440][T12493] hsr_slave_0: entered promiscuous mode [ 706.035268][T12493] hsr_slave_1: entered promiscuous mode [ 706.039342][T12493] debugfs: 'hsr0' already exists in 'hsr' [ 706.039378][T12493] Cannot create hsr debugfs directory [ 706.389452][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 707.271989][ T2221] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 707.470306][ T2221] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.03 [ 707.472456][ T2221] usb 1-1: Dual-Role OTG device on HNP port [ 707.472777][ T2221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.472802][ T2221] usb 1-1: Product: HID Gadget [ 707.472818][ T2221] usb 1-1: SerialNumber: 0123456789 [ 707.588190][ T2221] input: HID Gadget as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:1D6B:0104.0027/input/input35 [ 707.668347][ T30] hsr_slave_0: left promiscuous mode [ 707.694990][ T30] hsr_slave_1: left promiscuous mode [ 707.696165][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.696231][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.740317][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.740348][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.824787][ T30] veth0_macvtap: left promiscuous mode [ 707.824929][ T30] veth1_vlan: left promiscuous mode [ 707.825036][ T30] veth0_vlan: left promiscuous mode [ 707.826445][ T2221] hid-generic 0003:1D6B:0104.0027: input,hidraw0: USB HID v1.01 Keyboard [HID Gadget] on usb-dummy_hcd.0-1/input0 [ 707.888521][ T2221] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 709.269696][ T30] team0 (unregistering): Port device team_slave_1 removed [ 709.357882][ T30] team0 (unregistering): Port device team_slave_0 removed [ 711.762258][ T2221] cdc_ether 1-1:1.3 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 62:d1:9e:51:df:50 [ 717.252504][T12493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 717.307306][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 717.327027][T12493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 717.366823][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 717.390709][T12493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 717.453454][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 717.454749][T12493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 717.520805][T12754] LUN: removable file: (no medium) [ 717.585009][T12493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 718.508660][T12493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.650855][T12493] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.692978][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.693089][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.484039][ T6755] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.484156][ T6755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.292650][T12803] se_dev->se_dev_ptr already set for storage object [ 724.327132][T11820] usb 1-1: USB disconnect, device number 28 [ 724.766946][T11820] cdc_ether 1-1:1.3 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 728.151616][T12493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.308434][T12493] veth0_vlan: entered promiscuous mode [ 728.326518][T12493] veth1_vlan: entered promiscuous mode [ 728.377994][T12493] veth0_macvtap: entered promiscuous mode [ 728.389233][T12493] veth1_macvtap: entered promiscuous mode [ 728.416207][T12493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.467691][T12493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.499951][ T976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.500000][ T976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.575214][ T976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.579423][ T1890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.715763][ T1890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.715786][ T1890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.786533][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.786558][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.209906][ T939] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 729.361653][ T939] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.03 [ 729.363716][ T939] usb 1-1: Dual-Role OTG device on HNP port [ 729.364003][ T939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.364030][ T939] usb 1-1: Product: HID Gadget [ 729.364048][ T939] usb 1-1: SerialNumber: 0123456789 [ 729.444895][ T939] input: HID Gadget as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:1D6B:0104.0028/input/input36 [ 729.608651][ T939] hid-generic 0003:1D6B:0104.0028: input,hidraw0: USB HID v1.01 Keyboard [HID Gadget] on usb-dummy_hcd.0-1/input0 [ 729.630558][ T939] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 729.745088][ T939] cdc_ether 1-1:1.3 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 62:d1:9e:51:df:50 [ 729.875817][T12862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.876413][T12862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.733716][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 730.738415][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 730.739460][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 730.760703][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 730.778391][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 732.604757][T12914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.605369][T12914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.840003][T10818] Bluetooth: hci0: command tx timeout [ 733.556989][T12934] Failed to get privilege flags for destination (handle=0x2:0x0) [ 734.930065][T10818] Bluetooth: hci0: command tx timeout [ 734.985832][T12943] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 735.910292][T12881] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.910574][T12881] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.911545][T12881] bridge_slave_0: entered allmulticast mode [ 735.914191][T12881] bridge_slave_0: entered promiscuous mode [ 735.949214][T12881] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.949400][T12881] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.949639][T12881] bridge_slave_1: entered allmulticast mode [ 735.963414][T12881] bridge_slave_1: entered promiscuous mode [ 736.186154][T12881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.217817][T12881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.282736][T12967] syz.3.2323 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 737.041958][T10818] Bluetooth: hci0: command tx timeout [ 737.202468][T12881] team0: Port device team_slave_0 added [ 737.220512][T12881] team0: Port device team_slave_1 added [ 737.402407][T12881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.402431][T12881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.402463][T12881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.423831][T12881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.424000][T12881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.424207][T12881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.705766][T12881] hsr_slave_0: entered promiscuous mode [ 737.708497][T12881] hsr_slave_1: entered promiscuous mode [ 738.228682][T12881] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.531216][T12881] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.674081][T12881] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.862133][T12881] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.079952][T10818] Bluetooth: hci0: command tx timeout [ 739.568466][T12881] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 739.617044][T12881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 739.645429][T12881] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 739.698839][T12881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.724532][T12881] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 739.759364][T12881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 739.776759][T12881] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 739.804969][T12881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 740.331600][T12881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.421097][T12881] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.467331][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.467408][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.550287][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.550365][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.278589][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2339'. [ 743.374741][T12881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.586692][T12881] veth0_vlan: entered promiscuous mode [ 743.607779][T12881] veth1_vlan: entered promiscuous mode [ 743.774401][T12881] veth0_macvtap: entered promiscuous mode [ 743.802777][T12881] veth1_macvtap: entered promiscuous mode [ 743.890820][T12881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.932676][T12881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.990440][ T6954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.991721][ T6954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.991768][ T6954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.991856][ T6954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.323370][T11626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.323401][T11626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.560015][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.560040][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.568423][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.568486][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.859239][T13115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2352'. [ 748.148965][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.381929][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 748.394117][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 748.415760][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 748.427818][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 748.438761][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 748.848924][ T7527] rpcbind: server 127.0.0.1 not responding, timed out [ 748.867323][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.563498][T10818] Bluetooth: hci3: command tx timeout [ 750.873404][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.607701][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.041565][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 752.213719][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 752.213775][ T31] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 752.215240][ T31] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 752.217477][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.217526][ T31] usb 5-1: Product: syz [ 752.217538][ T31] usb 5-1: Manufacturer: syz [ 752.217548][ T31] usb 5-1: SerialNumber: syz [ 752.408939][ T59] bridge_slave_1: left allmulticast mode [ 752.408970][ T59] bridge_slave_1: left promiscuous mode [ 752.409277][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.447699][ T59] bridge_slave_0: left allmulticast mode [ 752.447721][ T59] bridge_slave_0: left promiscuous mode [ 752.447914][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.493462][ T59] pimreg: left allmulticast mode [ 752.519394][ T31] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 752.533981][T13187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2365'. [ 752.537142][ T59] bridge_slave_1: left allmulticast mode [ 752.537170][ T59] bridge_slave_1: left promiscuous mode [ 752.537378][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.585618][ T59] bridge_slave_0: left allmulticast mode [ 752.585650][ T59] bridge_slave_0: left promiscuous mode [ 752.597695][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.600317][T10818] Bluetooth: hci3: command tx timeout [ 753.591896][ T59] pimreg: left allmulticast mode [ 753.626985][ T31] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 753.627017][ T31] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 754.133155][ T31] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 754.213024][ T31] usb 5-1: USB disconnect, device number 5 [ 754.464915][T12808] udevd[12808]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 754.679886][T10818] Bluetooth: hci3: command tx timeout [ 755.145797][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.167232][ T59] bond0 (unregistering): Released all slaves [ 755.243708][ T59] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 755.287066][ T59] bond1 (unregistering): Released all slaves [ 755.669586][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.686688][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.701527][ T59] bond0 (unregistering): Released all slaves [ 755.755485][T11626] smbdirect: ib_dev[syz1] removed [ 755.849432][ T59] bond1 (unregistering): Released all slaves [ 756.088191][T12775] infiniband syz1: ib_query_port failed (-19) [ 756.333977][ T59] : left promiscuous mode [ 756.485105][ T59] tipc: Left network mode [ 756.626378][T13237] input: syz0 as /devices/virtual/input/input37 [ 756.760079][T10818] Bluetooth: hci3: command tx timeout [ 759.219738][ T59] hsr_slave_0: left promiscuous mode [ 759.227520][ T59] hsr_slave_1: left promiscuous mode [ 759.229281][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.229310][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.269561][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.269587][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.317305][ T59] hsr_slave_0: left promiscuous mode [ 759.318414][ T59] hsr_slave_1: left promiscuous mode [ 759.319495][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.319552][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.351197][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.351220][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.401648][ T59] veth1_macvtap: left promiscuous mode [ 759.401691][ T59] veth0_macvtap: left promiscuous mode [ 759.401801][ T59] veth1_vlan: left promiscuous mode [ 759.401893][ T59] veth0_vlan: left promiscuous mode [ 759.434095][ T59] veth1_macvtap: left promiscuous mode [ 759.434136][ T59] veth0_macvtap: left promiscuous mode [ 759.434240][ T59] veth1_vlan: left promiscuous mode [ 759.434315][ T59] veth0_vlan: left promiscuous mode [ 760.170084][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2383'. [ 761.628315][ T59] team0 (unregistering): Port device team_slave_1 removed [ 761.661385][ T59] team0 (unregistering): Port device team_slave_0 removed [ 762.313431][ T59] team0 (unregistering): Port device team_slave_1 removed [ 762.344902][ T59] team0 (unregistering): Port device team_slave_0 removed [ 762.461070][T13310] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 762.710114][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 762.773907][T13125] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.774038][T13125] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.774275][T13125] bridge_slave_0: entered allmulticast mode [ 762.819623][T13125] bridge_slave_0: entered promiscuous mode [ 762.823062][T13125] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.823168][T13125] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.823305][T13125] bridge_slave_1: entered allmulticast mode [ 762.825183][T13125] bridge_slave_1: entered promiscuous mode [ 762.912031][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 762.921567][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 762.935952][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 762.935981][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 762.960283][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.960368][ T31] usb 5-1: Product: syz [ 762.960387][ T31] usb 5-1: Manufacturer: syz [ 762.960406][ T31] usb 5-1: SerialNumber: syz [ 763.068622][ T31] usb 5-1: 0:2 : does not exist [ 763.163274][T13125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.194328][T13125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.450142][T13125] team0: Port device team_slave_0 added [ 763.457320][T13125] team0: Port device team_slave_1 added [ 763.906173][ T5348] usb 5-1: USB disconnect, device number 6 [ 763.911579][T13125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.911652][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.911683][T13125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.018083][T13125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.018172][T13125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.018207][T13125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.334733][T13125] hsr_slave_0: entered promiscuous mode [ 765.335968][T13125] hsr_slave_1: entered promiscuous mode [ 765.336761][T13125] debugfs: 'hsr0' already exists in 'hsr' [ 765.336783][T13125] Cannot create hsr debugfs directory [ 766.139263][ T59] IPVS: stop unused estimator thread 0... [ 766.967614][T13125] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.121518][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 767.370879][T13125] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.621576][T13125] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.831261][T13373] KVM: debugfs: duplicate directory 13373-4 [ 767.857916][T13125] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.294842][T13392] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 771.294890][T13392] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 771.294939][T13392] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 771.310031][T13392] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 771.837839][T13125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 771.900714][T13125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 771.918988][T13125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 771.984291][T13125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 771.986184][T13125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 772.097394][T13125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.098628][T13125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 772.164515][T13125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.282787][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 772.594145][T13125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.646082][T13125] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.675353][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.675467][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.723155][T11626] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.723271][T11626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.722666][T13443] FAULT_INJECTION: forcing a failure. [ 773.722666][T13443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.722762][T13443] CPU: 1 UID: 0 PID: 13443 Comm: syz.4.2413 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.722794][T13443] Tainted: [L]=SOFTLOCKUP [ 773.722803][T13443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 773.722818][T13443] Call Trace: [ 773.722827][T13443] [ 773.722838][T13443] dump_stack_lvl+0xe8/0x150 [ 773.722881][T13443] should_fail_ex+0x3eb/0x540 [ 773.722913][T13443] _copy_from_user+0x2d/0xb0 [ 773.722946][T13443] kstrtouint_from_user+0xd6/0x180 [ 773.722974][T13443] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 773.723010][T13443] ? lock_acquire+0x115/0x350 [ 773.723050][T13443] proc_fail_nth_write+0x8e/0x210 [ 773.723086][T13443] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 773.723129][T13443] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 773.723164][T13443] vfs_write+0x296/0xba0 [ 773.723206][T13443] ? __pfx_vfs_write+0x10/0x10 [ 773.723240][T13443] ? __fget_files+0x2a/0x420 [ 773.723275][T13443] ? __fget_files+0x3a2/0x420 [ 773.723303][T13443] ? __fget_files+0x2a/0x420 [ 773.723341][T13443] ksys_write+0x150/0x270 [ 773.723378][T13443] ? __pfx_ksys_write+0x10/0x10 [ 773.723424][T13443] do_syscall_64+0x166/0x520 [ 773.723446][T13443] ? trace_irq_disable+0x3b/0x140 [ 773.723480][T13443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.723505][T13443] ? clear_bhb_loop+0x70/0xc0 [ 773.723534][T13443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.723558][T13443] RIP: 0033:0x7ff3f459e159 [ 773.723579][T13443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.723608][T13443] RSP: 002b:00007ff3f53f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.723636][T13443] RAX: ffffffffffffffda RBX: 00007ff3f4825fa0 RCX: 00007ff3f459e159 [ 773.723655][T13443] RDX: 00000000000008bc RSI: 0000000000000000 RDI: 0000000000000003 [ 773.723670][T13443] RBP: 00007ff3f463506b R08: 0000000000000000 R09: 0000000000000000 [ 773.723686][T13443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.723709][T13443] R13: 00007ff3f4826038 R14: 00007ff3f4825fa0 R15: 00007ffdbd8752b8 [ 773.723746][T13443] [ 774.955227][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 775.376591][T13092] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 775.472849][T13125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.537654][T13479] FAULT_INJECTION: forcing a failure. [ 775.537654][T13479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.537697][T13479] CPU: 1 UID: 0 PID: 13479 Comm: syz.0.2422 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.537733][T13479] Tainted: [L]=SOFTLOCKUP [ 775.537741][T13479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 775.537755][T13479] Call Trace: [ 775.537764][T13479] [ 775.537774][T13479] dump_stack_lvl+0xe8/0x150 [ 775.537810][T13479] should_fail_ex+0x3eb/0x540 [ 775.537911][T13479] _copy_from_user+0x2d/0xb0 [ 775.537943][T13479] kstrtouint_from_user+0xd6/0x180 [ 775.537970][T13479] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 775.538006][T13479] ? lock_acquire+0x115/0x350 [ 775.538046][T13479] proc_fail_nth_write+0x8e/0x210 [ 775.538082][T13479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 775.538127][T13479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 775.538162][T13479] vfs_write+0x296/0xba0 [ 775.538205][T13479] ? __pfx_vfs_write+0x10/0x10 [ 775.538239][T13479] ? __fget_files+0x2a/0x420 [ 775.538274][T13479] ? __fget_files+0x3a2/0x420 [ 775.538302][T13479] ? __fget_files+0x2a/0x420 [ 775.538339][T13479] ksys_write+0x150/0x270 [ 775.538376][T13479] ? __pfx_ksys_write+0x10/0x10 [ 775.538419][T13479] do_syscall_64+0x166/0x520 [ 775.538441][T13479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.538464][T13479] ? clear_bhb_loop+0x70/0xc0 [ 775.538490][T13479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.538513][T13479] RIP: 0033:0x7f64fd79e159 [ 775.538534][T13479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.538554][T13479] RSP: 002b:00007f64fe5e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 775.538580][T13479] RAX: ffffffffffffffda RBX: 00007f64fda25fa0 RCX: 00007f64fd79e159 [ 775.538598][T13479] RDX: 00000000000008bc RSI: 0000000000000000 RDI: 0000000000000003 [ 775.538613][T13479] RBP: 00007f64fd83506b R08: 0000000000000000 R09: 0000000000000000 [ 775.538627][T13479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.538642][T13479] R13: 00007f64fda26038 R14: 00007f64fda25fa0 R15: 00007fff19d542e8 [ 775.538679][T13479] [ 775.643910][T13092] usb 5-1: Using ep0 maxpacket: 32 [ 775.656355][T13092] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 775.673559][T13092] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.673599][T13092] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 775.673628][T13092] usb 5-1: config 0 interface 0 has no altsetting 0 [ 775.673665][T13092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.869466][T13092] usb 5-1: config 0 descriptor?? [ 775.921993][T13125] veth0_vlan: entered promiscuous mode [ 775.939484][T13125] veth1_vlan: entered promiscuous mode [ 776.386412][T13125] veth0_macvtap: entered promiscuous mode [ 776.757907][T13092] greenasia 0003:0E8F:0012.0029: no output reports found [ 776.795097][T13125] veth1_macvtap: entered promiscuous mode [ 776.795116][T13092] greenasia 0003:0E8F:0012.0029: hidraw1: USB HID v80.00 Joystick [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 776.918432][T13125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.954456][ T5348] usb 5-1: USB disconnect, device number 7 [ 777.066142][T13125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.172800][ T6754] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.173174][ T6754] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.173578][ T6754] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.173676][ T6754] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.237538][T13488] fido_id[13488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 777.488343][T11626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.488369][T11626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.702783][ T6754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 777.702807][ T6754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 777.796680][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 777.856248][T13511] FAULT_INJECTION: forcing a failure. [ 777.856248][T13511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.856291][T13511] CPU: 1 UID: 0 PID: 13511 Comm: syz.0.2430 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.856324][T13511] Tainted: [L]=SOFTLOCKUP [ 777.856333][T13511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 777.856348][T13511] Call Trace: [ 777.856361][T13511] [ 777.856372][T13511] dump_stack_lvl+0xe8/0x150 [ 777.856410][T13511] should_fail_ex+0x3eb/0x540 [ 777.856442][T13511] _copy_from_user+0x2d/0xb0 [ 777.856475][T13511] kstrtouint_from_user+0xd6/0x180 [ 777.856503][T13511] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 777.856539][T13511] ? lock_acquire+0x115/0x350 [ 777.856578][T13511] proc_fail_nth_write+0x8e/0x210 [ 777.856614][T13511] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 777.856657][T13511] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 777.856691][T13511] vfs_write+0x296/0xba0 [ 777.856733][T13511] ? __pfx_vfs_write+0x10/0x10 [ 777.856768][T13511] ? __fget_files+0x2a/0x420 [ 777.856808][T13511] ? __fget_files+0x3a2/0x420 [ 777.856836][T13511] ? __fget_files+0x2a/0x420 [ 777.856876][T13511] ksys_write+0x150/0x270 [ 777.856911][T13511] ? __pfx_ksys_write+0x10/0x10 [ 777.856955][T13511] do_syscall_64+0x166/0x520 [ 777.856978][T13511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.857002][T13511] ? clear_bhb_loop+0x70/0xc0 [ 777.857031][T13511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.857055][T13511] RIP: 0033:0x7f64fd79e159 [ 777.857077][T13511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.857098][T13511] RSP: 002b:00007f64fe5e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 777.857125][T13511] RAX: ffffffffffffffda RBX: 00007f64fda25fa0 RCX: 00007f64fd79e159 [ 777.857142][T13511] RDX: 00000000000008bc RSI: 0000000000000000 RDI: 0000000000000003 [ 777.857157][T13511] RBP: 00007f64fd83506b R08: 0000000000000000 R09: 0000000000000000 [ 777.857172][T13511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.857186][T13511] R13: 00007f64fda26038 R14: 00007f64fda25fa0 R15: 00007fff19d542e8 [ 777.857230][T13511] [ 787.309888][ T939] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 787.461161][ T939] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 787.461994][ T939] usb 3-1: config 0 has no interfaces? [ 787.462031][ T939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.468119][ T939] usb 3-1: config 0 descriptor?? [ 787.678902][ T5717] usb 3-1: USB disconnect, device number 37 [ 789.304913][T10818] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 789.796146][T13725] FAULT_INJECTION: forcing a failure. [ 789.796146][T13725] name failslab, interval 1, probability 0, space 0, times 0 [ 789.796309][T13725] CPU: 0 UID: 0 PID: 13725 Comm: syz.0.2495 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.796356][T13725] Tainted: [L]=SOFTLOCKUP [ 789.796368][T13725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 789.796387][T13725] Call Trace: [ 789.796400][T13725] [ 789.796413][T13725] dump_stack_lvl+0xe8/0x150 [ 789.796466][T13725] should_fail_ex+0x3eb/0x540 [ 789.796511][T13725] should_failslab+0xa8/0x100 [ 789.796546][T13725] ? __kernfs_new_node+0xe6/0x980 [ 789.796598][T13725] kmem_cache_alloc_noprof+0x9c/0x600 [ 789.796649][T13725] ? __kernfs_new_node+0xe6/0x980 [ 789.796698][T13725] ? kernfs_add_one+0xfc/0x6f0 [ 789.796751][T13725] __kernfs_new_node+0xe6/0x980 [ 789.796806][T13725] ? up_write+0x19d/0x4a0 [ 789.796844][T13725] ? __pfx___kernfs_new_node+0x10/0x10 [ 789.796883][T13725] ? kernfs_root+0x1c/0x230 [ 789.796931][T13725] ? kernfs_root+0x1c/0x230 [ 789.796967][T13725] ? kernfs_root+0x1c/0x230 [ 789.796999][T13725] ? kernfs_root+0x1c/0x230 [ 789.797040][T13725] kernfs_new_node+0xea/0x140 [ 789.797085][T13725] __kernfs_create_file+0x4b/0x2e0 [ 789.797119][T13725] sysfs_add_file_mode_ns+0x237/0x300 [ 789.797161][T13725] sysfs_create_file_ns+0x12b/0x1b0 [ 789.797221][T13725] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 789.797250][T13725] ? acpi_device_notify+0x171/0x3f0 [ 789.797279][T13725] ? __dev_fwnode+0x50/0x80 [ 789.797311][T13725] ? device_create_file+0xf4/0x1b0 [ 789.797342][T13725] device_add+0x432/0xb80 [ 789.797374][T13725] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 789.797414][T13725] wakeup_source_register+0x17f/0x380 [ 789.797448][T13725] ep_insert+0xfaf/0x1af0 [ 789.797502][T13725] ? __pfx_ep_insert+0x10/0x10 [ 789.797557][T13725] ? do_epoll_ctl_file+0xacd/0xee0 [ 789.797599][T13725] do_epoll_ctl_file+0x8c2/0xee0 [ 789.797640][T13725] ? do_epoll_ctl_file+0xacd/0xee0 [ 789.797681][T13725] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 789.797722][T13725] ? __fget_files+0x3a2/0x420 [ 789.797752][T13725] ? __fget_files+0x2a/0x420 [ 789.797793][T13725] __se_sys_epoll_ctl+0x162/0x230 [ 789.797834][T13725] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 789.797887][T13725] do_syscall_64+0x166/0x520 [ 789.797911][T13725] ? trace_irq_disable+0x3b/0x140 [ 789.797946][T13725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.797973][T13725] ? clear_bhb_loop+0x70/0xc0 [ 789.798003][T13725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.798028][T13725] RIP: 0033:0x7f64fd79e159 [ 789.798052][T13725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.798073][T13725] RSP: 002b:00007f64fe5e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 789.798100][T13725] RAX: ffffffffffffffda RBX: 00007f64fda25fa0 RCX: 00007f64fd79e159 [ 789.798119][T13725] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 789.798134][T13725] RBP: 00007f64fd83506b R08: 0000000000000000 R09: 0000000000000000 [ 789.798149][T13725] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 789.798172][T13725] R13: 00007f64fda26038 R14: 00007f64fda25fa0 R15: 00007fff19d542e8 [ 789.798211][T13725] [ 798.019968][ T32] kauditd_printk_skb: 2 callbacks suppressed [ 798.020028][ T32] audit: type=1326 audit(1790109145.209:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13777 comm="syz.4.2511" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3f459e159 code=0x0 [ 798.748159][T13092] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 798.890859][T13092] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 798.892290][T13092] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.892343][T13092] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 798.896941][T13092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.896968][T13092] usb 4-1: Product: syz [ 798.896984][T13092] usb 4-1: Manufacturer: syz [ 798.896999][T13092] usb 4-1: SerialNumber: syz [ 798.980928][T13092] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 799.222344][T13092] usb 4-1: USB disconnect, device number 28 [ 799.241969][ T31] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 799.366800][T12859] udevd[12859]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 799.412971][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 799.416910][ T31] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 799.417005][ T31] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 799.417039][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 799.417080][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.482577][ T31] usb 3-1: config 0 descriptor?? [ 799.484162][T13807] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 799.728925][T13820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 799.941168][ T31] isku 0003:1E7D:319C.002A: unknown main item tag 0x0 [ 799.941209][ T31] isku 0003:1E7D:319C.002A: unknown main item tag 0x0 [ 799.941238][ T31] isku 0003:1E7D:319C.002A: unknown main item tag 0x0 [ 799.946606][ T31] isku 0003:1E7D:319C.002A: hidraw1: USB HID v10.01 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 800.147450][T13092] usb 3-1: USB disconnect, device number 38 [ 800.775752][T13857] netlink: 'syz.4.2533': attribute type 9 has an invalid length. [ 803.780968][T13868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.781493][T13868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.823831][T13904] FAULT_INJECTION: forcing a failure. [ 804.823831][T13904] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 804.841038][T13904] CPU: 0 UID: 0 PID: 13904 Comm: syz.0.2547 Tainted: G L syzkaller #0 PREEMPT(full) [ 804.841078][T13904] Tainted: [L]=SOFTLOCKUP [ 804.841089][T13904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 804.841104][T13904] Call Trace: [ 804.841113][T13904] [ 804.841124][T13904] dump_stack_lvl+0xe8/0x150 [ 804.841163][T13904] should_fail_ex+0x3eb/0x540 [ 804.841196][T13904] prepare_alloc_pages+0x21e/0x5f0 [ 804.841241][T13904] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 804.841284][T13904] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 804.841341][T13904] alloc_pages_mpol+0x21e/0x390 [ 804.841375][T13904] alloc_pages_noprof+0xb1/0x2b0 [ 804.841406][T13904] folio_alloc_noprof+0x1e/0x30 [ 804.841439][T13904] filemap_alloc_folio_noprof+0x111/0x460 [ 804.841473][T13904] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 804.841512][T13904] __filemap_get_folio_mpol+0x3fd/0xff0 [ 804.841553][T13904] aio_setup_ring+0x3b1/0xe20 [ 804.841604][T13904] ? __pfx_aio_setup_ring+0x10/0x10 [ 804.841656][T13904] ioctx_alloc+0x313/0x830 [ 804.841706][T13904] __se_sys_io_setup+0x7b/0x1d0 [ 804.841745][T13904] do_syscall_64+0x166/0x520 [ 804.841769][T13904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.841796][T13904] ? clear_bhb_loop+0x70/0xc0 [ 804.841828][T13904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.841893][T13904] RIP: 0033:0x7f64fd79e159 [ 804.841917][T13904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.841937][T13904] RSP: 002b:00007f64fe5e4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 804.841965][T13904] RAX: ffffffffffffffda RBX: 00007f64fda25fa0 RCX: 00007f64fd79e159 [ 804.841982][T13904] RDX: 0000000000000000 RSI: 00002000000028c0 RDI: 000000000000ffff [ 804.841998][T13904] RBP: 00007f64fd83506b R08: 0000000000000000 R09: 0000000000000000 [ 804.842014][T13904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.842029][T13904] R13: 00007f64fda26038 R14: 00007f64fda25fa0 R15: 00007fff19d542e8 [ 804.842067][T13904] [ 805.315433][T13915] netlink: 'syz.0.2551': attribute type 1 has an invalid length. [ 805.432840][T13919] fuse: Bad value for 'fd' [ 805.434460][T13919] fuse: Bad value for 'fd' [ 805.571292][T13926] netlink: zone id is out of range [ 805.571305][T13926] netlink: zone id is out of range [ 805.571311][T13926] netlink: zone id is out of range [ 805.571317][T13926] netlink: zone id is out of range [ 805.571323][T13926] netlink: zone id is out of range [ 805.571329][T13926] netlink: zone id is out of range [ 805.571637][T13926] netlink: zone id is out of range [ 805.571645][T13926] netlink: zone id is out of range [ 805.571651][T13926] netlink: zone id is out of range [ 805.571657][T13926] netlink: zone id is out of range [ 809.875032][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.875097][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.890677][ T939] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 810.421565][ T939] usb 3-1: Using ep0 maxpacket: 32 [ 810.427955][ T939] usb 3-1: unable to get BOS descriptor or descriptor too short [ 810.428054][ T939] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 810.429819][ T939] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 810.429892][ T939] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 810.429915][ T939] usb 3-1: config 14 has no interface number 0 [ 810.429933][ T939] usb 3-1: config 14 has no interface number 1 [ 810.429997][ T939] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 810.430073][ T939] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 810.430098][ T939] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 810.430125][ T939] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 810.430153][ T939] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 810.430181][ T939] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.430257][ T939] usb 3-1: config 14 interface 57 has no altsetting 0 [ 810.430278][ T939] usb 3-1: config 14 interface 228 has no altsetting 0 [ 810.448598][ T939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.448627][ T939] usb 3-1: Product: syz [ 810.448644][ T939] usb 3-1: Manufacturer: syz [ 810.448660][ T939] usb 3-1: SerialNumber: syz [ 810.712358][ T939] usb 3-1: can't set config #14, error -71 [ 810.719180][ T939] usb 3-1: USB disconnect, device number 39 [ 810.747448][T13973] udevd[13973]: setting mode of /dev/bus/usb/003/039 to 020664 failed: No such file or directory [ 810.747627][T13973] udevd[13973]: setting owner of /dev/bus/usb/003/039 to uid=0, gid=0 failed: No such file or directory [ 811.577943][T13995] rust_binder: 13993:13995 got reply transaction with no transaction stack [ 811.578060][T13995] rust_binder: 13993:13995 transaction reply to 0:0 failed EINVAL, code 0 size 0-24 [ 813.024279][T12775] rust_binder: 13993: undelivered TRANSACTION_ERROR: 29201 [ 815.733556][T14035] FAULT_INJECTION: forcing a failure. [ 815.733556][T14035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.733596][T14035] CPU: 1 UID: 0 PID: 14035 Comm: syz.4.2588 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.733631][T14035] Tainted: [L]=SOFTLOCKUP [ 815.733640][T14035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 815.733654][T14035] Call Trace: [ 815.733664][T14035] [ 815.733674][T14035] dump_stack_lvl+0xe8/0x150 [ 815.733712][T14035] should_fail_ex+0x3eb/0x540 [ 815.733744][T14035] strncpy_from_user+0x36/0x2c0 [ 815.733776][T14035] __se_sys_add_key+0xdb/0x420 [ 815.733814][T14035] ? __pfx___se_sys_add_key+0x10/0x10 [ 815.733858][T14035] ? __x64_sys_add_key+0x20/0xc0 [ 815.733894][T14035] do_syscall_64+0x166/0x520 [ 815.733918][T14035] ? trace_irq_disable+0x3b/0x140 [ 815.733961][T14035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.733986][T14035] ? clear_bhb_loop+0x70/0xc0 [ 815.734015][T14035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.734039][T14035] RIP: 0033:0x7ff3f459e159 [ 815.734061][T14035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.734081][T14035] RSP: 002b:00007ff3f53f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 815.734107][T14035] RAX: ffffffffffffffda RBX: 00007ff3f4825fa0 RCX: 00007ff3f459e159 [ 815.734125][T14035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 815.734140][T14035] RBP: 00007ff3f463506b R08: fffffffffffffffe R09: 0000000000000000 [ 815.734156][T14035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.734170][T14035] R13: 00007ff3f4826038 R14: 00007ff3f4825fa0 R15: 00007ffdbd8752b8 [ 815.734205][T14035] [ 816.045064][T14040] rust_binder: Failure in copy_transaction_data: EINVAL [ 816.045107][T14040] rust_binder: 14039:14040 transaction call to 14039:0 failed EINVAL, code 0 size 0-24 [ 816.206072][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 816.437853][T13092] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 816.597004][T13092] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 816.620371][T13092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.620405][T13092] usb 3-1: Product: syz [ 816.620422][T13092] usb 3-1: Manufacturer: syz [ 816.620440][T13092] usb 3-1: SerialNumber: syz [ 816.628307][T13092] usb 3-1: config 0 descriptor?? [ 816.884442][T14041] syz.4.2589 (14041) used greatest stack depth: 13424 bytes left [ 816.890231][T12775] rust_binder: 14039: undelivered TRANSACTION_ERROR: 29201 [ 816.936754][T13092] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 040 [ 817.056255][T14040] syz.4.2589 (14040): drop_caches: 2 [ 817.114244][T14040] syz.4.2589 (14040) used greatest stack depth: 11936 bytes left [ 817.173895][T14074] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2598'. [ 817.329142][T13092] usb 3-1: USB disconnect, device number 40 [ 817.421818][T14046] i2c i2c-1: failure writing data [ 819.343889][T14096] netlink: 'syz.2.2606': attribute type 11 has an invalid length. [ 819.344726][T14096] netlink: 'syz.2.2606': attribute type 11 has an invalid length. [ 819.347636][T14095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.207762][ T32] audit: type=1326 audit(1790109173.619:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.3.2623" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 825.207913][ T32] audit: type=1326 audit(1790109173.619:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.3.2623" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 825.210110][ T32] audit: type=1326 audit(1790109173.619:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.3.2623" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 825.210174][ T32] audit: type=1326 audit(1790109173.629:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.3.2623" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 825.210336][ T32] audit: type=1326 audit(1790109173.629:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.3.2623" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 825.286457][ T32] audit: type=1326 audit(1790109173.699:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.3.2623" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 825.318476][ T32] audit: type=1326 audit(1790109173.719:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.3.2623" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 825.318728][ T32] audit: type=1326 audit(1790109173.729:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.3.2623" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 825.318944][ T32] audit: type=1326 audit(1790109173.729:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.3.2623" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 825.351007][ T32] audit: type=1326 audit(1790109173.759:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14152 comm="syz.3.2623" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 826.028557][T14175] FAULT_INJECTION: forcing a failure. [ 826.028557][T14175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 826.028597][T14175] CPU: 0 UID: 0 PID: 14175 Comm: syz.0.2631 Tainted: G L syzkaller #0 PREEMPT(full) [ 826.028630][T14175] Tainted: [L]=SOFTLOCKUP [ 826.028639][T14175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 826.028654][T14175] Call Trace: [ 826.028663][T14175] [ 826.028673][T14175] dump_stack_lvl+0xe8/0x150 [ 826.028710][T14175] should_fail_ex+0x3eb/0x540 [ 826.028743][T14175] prepare_alloc_pages+0x21e/0x5f0 [ 826.028788][T14175] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 826.028829][T14175] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 826.028874][T14175] ? policy_nodemask+0x2cc/0x8e0 [ 826.028906][T14175] alloc_pages_mpol+0x21e/0x390 [ 826.028938][T14175] alloc_pages_noprof+0xb1/0x2b0 [ 826.028967][T14175] system_heap_allocate+0x44d/0xf70 [ 826.029006][T14175] ? __pfx_system_heap_allocate+0x10/0x10 [ 826.029046][T14175] ? __might_fault+0xaf/0x130 [ 826.029082][T14175] dma_heap_ioctl+0x4a7/0x6d0 [ 826.029117][T14175] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 826.029163][T14175] ? bpf_lsm_file_ioctl+0x9/0x20 [ 826.029192][T14175] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 826.029221][T14175] __se_sys_ioctl+0xfc/0x170 [ 826.029270][T14175] do_syscall_64+0x166/0x520 [ 826.029292][T14175] ? trace_irq_disable+0x3b/0x140 [ 826.029325][T14175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.029350][T14175] ? clear_bhb_loop+0x70/0xc0 [ 826.029378][T14175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.029401][T14175] RIP: 0033:0x7f64fd79e159 [ 826.029422][T14175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.029442][T14175] RSP: 002b:00007f64fe5e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 826.029467][T14175] RAX: ffffffffffffffda RBX: 00007f64fda25fa0 RCX: 00007f64fd79e159 [ 826.029484][T14175] RDX: 0000200000000040 RSI: 00000000c0184800 RDI: 0000000000000003 [ 826.029501][T14175] RBP: 00007f64fd83506b R08: 0000000000000000 R09: 0000000000000000 [ 826.029516][T14175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.029530][T14175] R13: 00007f64fda26038 R14: 00007f64fda25fa0 R15: 00007fff19d542e8 [ 826.029566][T14175] [ 828.651438][T14235] jffs2: notice: (14235) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 831.674423][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2664'. [ 832.141907][T14282] FAULT_INJECTION: forcing a failure. [ 832.141907][T14282] name failslab, interval 1, probability 0, space 0, times 0 [ 832.141998][T14282] CPU: 1 UID: 0 PID: 14282 Comm: syz.4.2670 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.142032][T14282] Tainted: [L]=SOFTLOCKUP [ 832.142041][T14282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 832.142056][T14282] Call Trace: [ 832.142065][T14282] [ 832.142075][T14282] dump_stack_lvl+0xe8/0x150 [ 832.142116][T14282] should_fail_ex+0x3eb/0x540 [ 832.142150][T14282] should_failslab+0xa8/0x100 [ 832.142179][T14282] __kmalloc_cache_noprof+0x9e/0x600 [ 832.142216][T14282] ? ceph_create_client+0x6f/0x310 [ 832.142250][T14282] ? ceph_create_client+0x6f/0x310 [ 832.142292][T14282] ceph_create_client+0x6f/0x310 [ 832.142330][T14282] ceph_get_tree+0x1ca/0x1a40 [ 832.142368][T14282] ? apparmor_capable+0x126/0x170 [ 832.142415][T14282] vfs_get_tree+0x92/0x2a0 [ 832.142454][T14282] vfs_cmd_create+0xa2/0x200 [ 832.142483][T14282] __se_sys_fsconfig+0x6b9/0x810 [ 832.142516][T14282] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 832.142546][T14282] ? rcu_is_watching+0x16/0xb0 [ 832.142579][T14282] ? __x64_sys_fsconfig+0x20/0xc0 [ 832.142608][T14282] do_syscall_64+0x166/0x520 [ 832.142805][T14282] ? trace_irq_disable+0x3b/0x140 [ 832.142843][T14282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.142867][T14282] ? clear_bhb_loop+0x70/0xc0 [ 832.142898][T14282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.142923][T14282] RIP: 0033:0x7ff3f459e159 [ 832.142946][T14282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.142967][T14282] RSP: 002b:00007ff3f53f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 832.142996][T14282] RAX: ffffffffffffffda RBX: 00007ff3f4825fa0 RCX: 00007ff3f459e159 [ 832.143014][T14282] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 832.143029][T14282] RBP: 00007ff3f463506b R08: 0000000000000000 R09: 0000000000000000 [ 832.143044][T14282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.143060][T14282] R13: 00007ff3f4826038 R14: 00007ff3f4825fa0 R15: 00007ffdbd8752b8 [ 832.143109][T14282] [ 835.642458][T14378] futex_wake_op: syz.3.2702 tries to shift op by 144; fix this program [ 838.190087][T14412] ALSA: mixer_oss: invalid OSS volume '' [ 838.190111][T14412] ALSA: mixer_oss: invalid OSS volume '+--' [ 838.190126][T14412] ALSA: mixer_oss: invalid OSS volume '+--' [ 838.190141][T14412] ALSA: mixer_oss: invalid OSS volume '+--' [ 838.190199][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.190215][T14412] ALSA: mixer_oss: invalid OSS volume '/8' [ 838.190229][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.190243][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.190258][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.190272][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.190286][T14412] ALSA: mixer_oss: invalid OSS volume '+--' [ 838.190301][T14412] ALSA: mixer_oss: invalid OSS volume '+--' [ 838.190369][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.190384][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190399][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190414][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190429][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190443][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190458][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190472][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190531][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190545][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190558][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190571][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190584][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190606][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190620][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190633][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190692][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190707][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190721][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190735][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190749][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190762][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190776][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190790][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190847][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190861][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190875][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190889][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190903][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190917][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190931][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190945][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.190958][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191012][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191026][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191038][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191051][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191065][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191079][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191093][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191109][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191167][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191182][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191196][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191211][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191225][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191240][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191255][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191269][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191336][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191351][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191366][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191380][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191395][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191408][T14412] ALSA: mixer_oss: invalid OSS volume '/24' [ 838.191422][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.191435][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.191448][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.191507][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.191521][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.191536][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.191550][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.191564][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.191578][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.191592][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.191606][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.201852][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.201914][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.202060][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.202094][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.202133][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.202159][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.202305][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.202382][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.202574][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.202615][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.202649][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.202809][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.202836][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.202897][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.203048][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.203088][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.203122][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.203266][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.203306][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.203480][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.203520][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.203547][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.203588][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.243235][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.243310][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.243483][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.243525][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.243577][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.243711][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.243749][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.243782][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.243909][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.243949][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.243982][T14412] ALSA: mixer_oss: invalid OSS volume '+--' [ 838.244192][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.244234][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.244273][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.244413][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.244451][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.244486][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.244632][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.244671][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.244704][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.244839][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.244879][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.244912][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.244949][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.245079][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.245119][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.245151][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.245311][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.245352][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.245368][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.245393][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.279906][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.279931][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.279947][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.279962][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.279978][T14412] ALSA: mixer_oss: invalid OSS volume '|--' [ 838.280123][T14412] ALSA: mixer_oss: invalid OSS volume '/32' [ 838.281081][T14412] ALSA: mixer_oss: invalid OSS volume '' [ 839.567739][T14425] FAULT_INJECTION: forcing a failure. [ 839.567739][T14425] name failslab, interval 1, probability 0, space 0, times 0 [ 839.567782][T14425] CPU: 1 UID: 0 PID: 14425 Comm: syz.2.2718 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.567816][T14425] Tainted: [L]=SOFTLOCKUP [ 839.567825][T14425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 839.567840][T14425] Call Trace: [ 839.567853][T14425] [ 839.567862][T14425] dump_stack_lvl+0xe8/0x150 [ 839.567900][T14425] should_fail_ex+0x3eb/0x540 [ 839.567933][T14425] should_failslab+0xa8/0x100 [ 839.567958][T14425] ? alloc_empty_file+0x5b/0x1d0 [ 839.567984][T14425] kmem_cache_alloc_noprof+0x9c/0x600 [ 839.568019][T14425] ? alloc_file_pseudo+0x151/0x1e0 [ 839.568044][T14425] ? alloc_empty_file+0x5b/0x1d0 [ 839.568073][T14425] alloc_empty_file+0x5b/0x1d0 [ 839.568101][T14425] alloc_file_clone+0x52/0xe0 [ 839.568130][T14425] create_pipe_files+0x39f/0x7a0 [ 839.568159][T14425] __do_pipe_flags+0x46/0x1f0 [ 839.568184][T14425] do_pipe2+0xaa/0x190 [ 839.568211][T14425] ? __pfx_do_pipe2+0x10/0x10 [ 839.568234][T14425] ? rcu_is_watching+0x16/0xb0 [ 839.568270][T14425] __x64_sys_pipe+0x3a/0x50 [ 839.568292][T14425] do_syscall_64+0x166/0x520 [ 839.568314][T14425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.568338][T14425] ? clear_bhb_loop+0x70/0xc0 [ 839.568368][T14425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.568391][T14425] RIP: 0033:0x7f5f2799e159 [ 839.568412][T14425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.568432][T14425] RSP: 002b:00007f5f2894d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 839.568458][T14425] RAX: ffffffffffffffda RBX: 00007f5f27c25fa0 RCX: 00007f5f2799e159 [ 839.568476][T14425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 839.568491][T14425] RBP: 00007f5f27a3506b R08: 0000000000000000 R09: 0000000000000000 [ 839.568506][T14425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.568520][T14425] R13: 00007f5f27c26038 R14: 00007f5f27c25fa0 R15: 00007fff521decc8 [ 839.568556][T14425] [ 841.166282][T14473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2738'. [ 849.380786][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 849.541360][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 849.542612][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.542664][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 849.546262][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.546290][ T10] usb 3-1: Product: syz [ 849.546306][ T10] usb 3-1: Manufacturer: syz [ 849.546323][ T10] usb 3-1: SerialNumber: syz [ 850.983120][T14631] net_ratelimit: 245 callbacks suppressed [ 850.983185][T14631] netlink: Conntrack attr has 12 unknown bytes [ 850.983486][T14631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.940235][ T31] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 851.960557][T14636] fuse: Bad value for 'fd' [ 852.008906][ T939] usb 3-1: USB disconnect, device number 41 [ 852.101916][ T31] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 852.103968][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 852.104003][ T31] usb 5-1: config 0 has no interface number 0 [ 852.104046][ T31] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 852.104125][ T31] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 852.104171][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.479599][ T31] usb 5-1: config 0 descriptor?? [ 852.502771][T14633] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 852.757069][ T31] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 852.952516][ T10] usb 5-1: USB disconnect, device number 8 [ 852.952532][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 853.948661][T14673] overlay: Unknown parameter 'smackfsfloor' [ 854.800219][ T31] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 854.951683][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 854.965940][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 854.965996][ T31] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 854.967382][ T31] usb 3-1: config 4 interface 0 has no altsetting 0 [ 855.003173][ T31] usb 3-1: string descriptor 0 read error: -22 [ 855.003319][ T31] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 855.053593][ T31] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 855.068021][ T31] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 855.092303][ T31] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 855.092480][ T31] usb 3-1: media controller created [ 855.169635][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 855.233043][T14692] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 855.236001][T14692] usb 3-1: dvb_usb_au6610: wlen=4100, aborting [ 855.268944][ T31] zl10353_read_register: readreg error (reg=127, ret==0) [ 855.379124][ T31] usb 3-1: USB disconnect, device number 42 [ 855.481735][T14704] Bluetooth: hci3: command tx timeout [ 856.103807][T14734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 857.162819][T14704] Bluetooth: hci0: command 0x0406 tx timeout [ 861.688200][T14820] vivid-000: disconnect [ 861.698333][T14819] vivid-000: reconnect [ 862.162672][T14834] kvm: emulating exchange as write [ 862.605111][T14844] FAULT_INJECTION: forcing a failure. [ 862.605111][T14844] name failslab, interval 1, probability 0, space 0, times 0 [ 862.605150][T14844] CPU: 0 UID: 0 PID: 14844 Comm: syz.0.2861 Tainted: G L syzkaller #0 PREEMPT(full) [ 862.605183][T14844] Tainted: [L]=SOFTLOCKUP [ 862.605193][T14844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 862.605207][T14844] Call Trace: [ 862.605216][T14844] [ 862.605226][T14844] dump_stack_lvl+0xe8/0x150 [ 862.605263][T14844] should_fail_ex+0x3eb/0x540 [ 862.605295][T14844] should_failslab+0xa8/0x100 [ 862.605321][T14844] ? new_userfaultfd+0x88/0x3d0 [ 862.605350][T14844] kmem_cache_alloc_noprof+0x9c/0x600 [ 862.605386][T14844] ? new_userfaultfd+0x88/0x3d0 [ 862.605422][T14844] new_userfaultfd+0x88/0x3d0 [ 862.605453][T14844] __x64_sys_userfaultfd+0x81/0xa0 [ 862.605483][T14844] do_syscall_64+0x166/0x520 [ 862.605504][T14844] ? trace_irq_disable+0x3b/0x140 [ 862.605538][T14844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.605562][T14844] ? clear_bhb_loop+0x70/0xc0 [ 862.605591][T14844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.605614][T14844] RIP: 0033:0x7f64fd79e159 [ 862.605636][T14844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.605656][T14844] RSP: 002b:00007f64fe5e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 862.605682][T14844] RAX: ffffffffffffffda RBX: 00007f64fda25fa0 RCX: 00007f64fd79e159 [ 862.605707][T14844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000801 [ 862.605722][T14844] RBP: 00007f64fd83506b R08: 0000000000000000 R09: 0000000000000000 [ 862.605736][T14844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.605751][T14844] R13: 00007f64fda26038 R14: 00007f64fda25fa0 R15: 00007fff19d542e8 [ 862.605787][T14844] [ 866.677326][T14876] FAULT_INJECTION: forcing a failure. [ 866.677326][T14876] name failslab, interval 1, probability 0, space 0, times 0 [ 866.677367][T14876] CPU: 0 UID: 0 PID: 14876 Comm: syz.4.2870 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.677400][T14876] Tainted: [L]=SOFTLOCKUP [ 866.677408][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 866.677423][T14876] Call Trace: [ 866.677432][T14876] [ 866.677444][T14876] dump_stack_lvl+0xe8/0x150 [ 866.677482][T14876] should_fail_ex+0x3eb/0x540 [ 866.677515][T14876] should_failslab+0xa8/0x100 [ 866.677545][T14876] ? __anon_vma_prepare+0x109/0x4d0 [ 866.677577][T14876] kmem_cache_alloc_noprof+0x9c/0x600 [ 866.677610][T14876] ? kmem_cache_alloc_noprof+0x151/0x600 [ 866.677641][T14876] ? __anon_vma_prepare+0x109/0x4d0 [ 866.677679][T14876] __anon_vma_prepare+0x109/0x4d0 [ 866.677716][T14876] do_pte_missing+0x2f18/0x34b0 [ 866.677757][T14876] ? __lock_acquire+0x747/0x2de0 [ 866.677812][T14876] handle_mm_fault+0x1a53/0x3750 [ 866.677852][T14876] ? handle_mm_fault+0xf1/0x3750 [ 866.677894][T14876] ? __pfx_handle_mm_fault+0x10/0x10 [ 866.677921][T14876] ? lock_vma_under_rcu+0x45a/0x500 [ 866.677977][T14876] do_user_addr_fault+0xb35/0x1480 [ 866.678024][T14876] ? trace_page_fault_user+0x84/0x1e0 [ 866.678061][T14876] exc_page_fault+0x6a/0xc0 [ 866.678099][T14876] asm_exc_page_fault+0x26/0x30 [ 866.678122][T14876] RIP: 0033:0x7ff3f4560082 [ 866.678145][T14876] Code: 8d 15 f5 19 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 866.678165][T14876] RSP: 002b:00007ff3f53eed20 EFLAGS: 00010286 [ 866.678187][T14876] RAX: ffffffffffffffff RBX: 00007ff3ec000000 RCX: 00007ff3f459df57 [ 866.678205][T14876] RDX: 00007ff3f4651a53 RSI: 0000000000021000 RDI: 00007ff3ec000000 [ 866.678221][T14876] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 866.678236][T14876] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 866.678251][T14876] R13: 0000000000001000 R14: 00007ff3f0000000 R15: 0000000001a00000 [ 866.678288][T14876] [ 866.678561][T14876] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 870.267949][ T59] IPVS: starting estimator thread 0... [ 870.350107][T14908] IPVS: using max 24 ests per chain, 57600 per kthread [ 870.443372][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.443450][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.602383][T14918] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2883'. [ 870.602418][T14918] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2883'. [ 871.485993][T13497] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 871.642947][T13497] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 871.644608][T13497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.644643][T13497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.644744][T13497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.695394][T13497] usb 3-1: config 0 descriptor?? [ 872.128932][T13497] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 872.128973][T13497] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 872.129048][T13497] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 872.129078][T13497] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 872.129107][T13497] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 872.129136][T13497] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 872.129206][T13497] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 872.185447][T13497] cp2112 0003:10C4:EA90.002B: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 872.327817][T13497] cp2112 0003:10C4:EA90.002B: Part Number: 0x00 Device Version: 0x00 [ 872.523481][T14704] Bluetooth: hci3: command 0x0406 tx timeout [ 872.743137][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2900'. [ 872.942873][T13497] cp2112 0003:10C4:EA90.002B: error reading lock byte: -71 [ 872.966035][T13497] usb 3-1: USB disconnect, device number 43 [ 873.125171][T14978] vmxnet3 0000:00:00.0: Failed to map bar0 [ 873.129199][T14978] vmxnet3 0000:00:00.0: probe with driver vmxnet3 failed with error -5 [ 874.721968][T15019] fuse: fd is not a fuse device [ 874.737349][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 874.891837][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 874.893449][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.893483][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.893525][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.896678][ T10] usb 5-1: config 0 descriptor?? [ 875.315052][ T10] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 875.315093][ T10] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 875.315121][ T10] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 875.342023][ T10] cp2112 0003:10C4:EA90.002C: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 875.512023][ T10] cp2112 0003:10C4:EA90.002C: Part Number: 0x00 Device Version: 0x00 [ 876.122670][ T10] cp2112 0003:10C4:EA90.002C: error reading lock byte: -71 [ 876.127949][ T10] usb 5-1: USB disconnect, device number 9 [ 883.314264][ T32] kauditd_printk_skb: 3 callbacks suppressed [ 883.314380][ T32] audit: type=1800 audit(1790109231.689:146): pid=15122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2949" name=8006 dev="sda1" ino=2057 res=0 errno=0 [ 887.549960][ T5707] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 887.700160][ T5707] usb 3-1: Using ep0 maxpacket: 8 [ 887.702602][ T5707] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 887.704171][ T5707] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 887.704221][ T5707] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 887.704249][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 887.704321][ T5707] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 887.767358][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.767394][ T5707] usb 3-1: Product: syz [ 887.767413][ T5707] usb 3-1: Manufacturer: syz [ 887.767430][ T5707] usb 3-1: SerialNumber: syz [ 887.808597][ T5707] usb 3-1: config 0 descriptor?? [ 887.821912][T15155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 888.057375][ T5707] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 888.085285][ T5707] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input39 [ 888.114923][ C1] powermate: config urb returned -71 [ 888.115266][ C1] powermate: config urb returned -71 [ 888.115490][ C1] powermate: config urb returned -71 [ 888.115716][ C1] powermate: config urb returned -71 [ 888.156817][ T5707] usb 3-1: USB disconnect, device number 44 [ 888.156949][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 889.841868][T15211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 890.062285][T15217] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2985'. [ 892.870653][ T5707] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 893.030531][ T5707] usb 5-1: Using ep0 maxpacket: 8 [ 893.040133][ T5707] usb 5-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 893.072238][ T5707] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 893.072261][ T5707] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 893.111991][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.112154][ T5707] usb 5-1: Product: syz [ 893.112169][ T5707] usb 5-1: Manufacturer: syz [ 893.112182][ T5707] usb 5-1: SerialNumber: syz [ 893.455122][ T5707] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 893.470245][ T5707] usb 5-1: USB disconnect, device number 10 [ 893.514556][T15284] udevd[15284]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 894.879475][T15306] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3001'. [ 895.898921][T15339] input: syz0 as /devices/virtual/input/input40 [ 896.776060][ T32] audit: type=1326 audit(1790109245.109:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15347 comm="syz.3.3010" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 896.776131][ T32] audit: type=1326 audit(1790109245.109:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15347 comm="syz.3.3010" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 896.776241][ T32] audit: type=1326 audit(1790109245.119:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15347 comm="syz.3.3010" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 896.776297][ T32] audit: type=1326 audit(1790109245.119:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15347 comm="syz.3.3010" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 896.776401][ T32] audit: type=1326 audit(1790109245.119:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15347 comm="syz.3.3010" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 896.776455][ T32] audit: type=1326 audit(1790109245.119:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15347 comm="syz.3.3010" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 896.776557][ T32] audit: type=1326 audit(1790109245.119:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15347 comm="syz.3.3010" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 896.776619][ T32] audit: type=1326 audit(1790109245.119:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15347 comm="syz.3.3010" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 896.776729][ T32] audit: type=1326 audit(1790109245.119:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15347 comm="syz.3.3010" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 896.776782][ T32] audit: type=1326 audit(1790109245.119:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15347 comm="syz.3.3010" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f600b59e159 code=0x7ffc0000 [ 898.096897][T15365] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3016'. [ 899.638033][T15395] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3029'. [ 900.052043][T15409] nvmet: adding nsid 1 to subsystem testsubsys [ 900.067600][T15409] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 900.083653][T15409] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 900.096271][T15409] CPU: 1 UID: 0 PID: 15409 Comm: syz.2.3033 Tainted: G L syzkaller #0 PREEMPT(full) [ 900.111484][T15409] Tainted: [L]=SOFTLOCKUP [ 900.115848][T15409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.125942][T15409] RIP: 0010:strlen+0x29/0x70 [ 900.130590][T15409] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 900.150242][T15409] RSP: 0018:ffffc900072bf978 EFLAGS: 00010246 [ 900.156360][T15409] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 900.164376][T15409] RDX: ffffc9001ceda000 RSI: 0000000000000066 RDI: 0000000000000000 [ 900.172392][T15409] RBP: ffffc900072bfab8 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 900.180406][T15409] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 1ffff92000e57f40 [ 900.188418][T15409] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 900.196440][T15409] FS: 00007f5f2894d6c0(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 900.205512][T15409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 900.212136][T15409] CR2: 000000110c3f9f48 CR3: 000000007a90e000 CR4: 00000000003526f0 [ 900.220144][T15409] DR0: ffffffffffffffff DR1: 0000000000000003 DR2: 0000000000000083 [ 900.228153][T15409] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 900.236167][T15409] Call Trace: [ 900.239488][T15409] [ 900.242453][T15409] do_getname_kernel+0x1d/0x230 [ 900.247618][T15409] ? getname_kernel+0xd/0x20 [ 900.252261][T15409] filp_open+0x87/0x1d0 [ 900.256545][T15409] ? __pfx_filp_open+0x10/0x10 [ 900.261350][T15409] ? __pfx___mutex_lock+0x10/0x10 [ 900.266458][T15409] nvmet_file_ns_enable+0x74/0x350 [ 900.271636][T15409] nvmet_ns_enable+0xaa/0x780 [ 900.276359][T15409] ? lock_acquire+0x115/0x350 [ 900.281092][T15409] nvmet_ns_enable_store+0xd7/0x170 [ 900.286389][T15409] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 900.292245][T15409] ? down_read+0x2b9/0x320 [ 900.296694][T15409] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 900.302561][T15409] configfs_write_iter+0x337/0x430 [ 900.307728][T15409] vfs_write+0x612/0xba0 [ 900.312011][T15409] ? __pfx_vfs_write+0x10/0x10 [ 900.316821][T15409] ? __fget_files+0x2a/0x420 [ 900.321460][T15409] ksys_write+0x150/0x270 [ 900.325843][T15409] ? __pfx_ksys_write+0x10/0x10 [ 900.330748][T15409] do_syscall_64+0x166/0x520 [ 900.335370][T15409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.341466][T15409] ? clear_bhb_loop+0x70/0xc0 [ 900.346188][T15409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.352125][T15409] RIP: 0033:0x7f5f2799e159 [ 900.356585][T15409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.376228][T15409] RSP: 002b:00007f5f2894d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 900.384698][T15409] RAX: ffffffffffffffda RBX: 00007f5f27c25fa0 RCX: 00007f5f2799e159 [ 900.392711][T15409] RDX: 0000000000000002 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 900.400719][T15409] RBP: 00007f5f27a3506b R08: 0000000000000000 R09: 0000000000000000 [ 900.408752][T15409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.416758][T15409] R13: 00007f5f27c26038 R14: 00007f5f27c25fa0 R15: 00007fff521decc8 [ 900.424784][T15409] [ 900.427842][T15409] Modules linked in: [ 900.433212][T15409] ---[ end trace 0000000000000000 ]--- [ 900.451327][T15412] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 900.493419][T15409] RIP: 0010:strlen+0x29/0x70 [ 900.493462][T15409] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 900.493528][T15409] RSP: 0018:ffffc900072bf978 EFLAGS: 00010246 [ 900.493553][T15409] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 900.493570][T15409] RDX: ffffc9001ceda000 RSI: 0000000000000066 RDI: 0000000000000000 [ 900.493586][T15409] RBP: ffffc900072bfab8 R08: ffffffff909bb37f R09: 1ffffffff213766f [ 900.493605][T15409] R10: dffffc0000000000 R11: fffffbfff2137670 R12: 1ffff92000e57f40 [ 900.493624][T15409] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 900.493688][T15409] FS: 00007f5f2894d6c0(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 900.493709][T15409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 900.493725][T15409] CR2: 00007feb85b69878 CR3: 000000007a90e000 CR4: 00000000003526f0 [ 900.493745][T15409] DR0: ffffffffffffffff DR1: 0000000000000003 DR2: 0000000000000083 [ 900.493759][T15409] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 900.493793][T15409] Kernel panic - not syncing: Fatal exception [ 900.610860][T15409] Kernel Offset: disabled [ 900.615206][T15409] Rebooting in 86400 seconds..