last executing test programs: 8.512985226s ago: executing program 4 (id=1719): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 8.354794632s ago: executing program 4 (id=1720): r0 = socket(0xa, 0x3, 0x3a) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) 8.00381588s ago: executing program 4 (id=1722): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x1, 0x253}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]}) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x2, 0x9, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) dup3(r1, r0, 0x0) 7.406322205s ago: executing program 4 (id=1724): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 6.262258368s ago: executing program 4 (id=1731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) close(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x44) 5.558833704s ago: executing program 4 (id=1738): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0x37b0, 0x8, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.179756356s ago: executing program 32 (id=1738): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0x37b0, 0x8, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5.173731734s ago: executing program 1 (id=1740): r0 = syz_io_uring_setup(0x448, &(0x7f0000000280)={0x0, 0x806718, 0x800, 0xffffffff, 0x293}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000040)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10021) io_uring_enter(r0, 0x1, 0x20, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x3f) 5.046569191s ago: executing program 0 (id=1743): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) io_setup(0x8, 0x0) r1 = syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000001c0)=0xcd5) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 4.766694612s ago: executing program 1 (id=1746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x2, 0x0, 0x4, 0x6, 0x100}) 4.330538762s ago: executing program 1 (id=1748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendto$packet(r1, &(0x7f0000000300)="d0f6bc", 0x3, 0x40, 0x0, 0x0) 4.050771922s ago: executing program 0 (id=1749): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500"], &(0x7f0000000180)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) syz_emit_ethernet(0x62, &(0x7f0000000380)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000e3feffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa101000000000007010000f8ffffffb702000005200000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) 4.012041153s ago: executing program 1 (id=1751): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000280)='L', 0x1) 3.157487521s ago: executing program 0 (id=1754): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x4, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x357, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x400, 0xffbffffe, 0x100367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.380987982s ago: executing program 3 (id=1758): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) 2.217433515s ago: executing program 3 (id=1759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0x2}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.124757746s ago: executing program 0 (id=1760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xc, &(0x7f0000000000), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) 1.660335141s ago: executing program 2 (id=1763): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000003c0)) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)=@random={'security.', 'vfat\x00'}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 1.495067418s ago: executing program 3 (id=1764): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 1.378690514s ago: executing program 0 (id=1765): syz_emit_ethernet(0x46, &(0x7f0000002400)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "7c5cd9", 0x10, 0x21, 0xff, @remote, @private2, {[], {{0x4e22, 0x4e22, 0x4, 0x1, 0x2, 0x0, 0x0, 0x6, 0x2, "0be727", 0x8, "f7e063"}}}}}}}, 0x0) 1.378603048s ago: executing program 2 (id=1766): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.204498138s ago: executing program 2 (id=1767): syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x3, 0x6, 0x30, 0x66, 0x0, 0x9, 0x6, 0x0, @local, @private=0xa010101, {[@generic={0x7, 0x2}]}}, @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x1, 0x6, 0x3, 0x2, 0x8d2, 0x0, 0x3, 0x7, 0x1, 0x0, 0x2, 0x0, 0x4, 0x4e22, 0x4e22}}}}}}}, 0x0) 1.076999683s ago: executing program 3 (id=1768): socket$nl_route(0x10, 0x3, 0x0) socket(0x3c, 0x80007, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x280, &(0x7f0000000300)={@_ha_fsid={[0x48]}, {0x2, 0xbe, 0x3, 0x7}}, 0x8, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x8}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) close(0x3) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000406010100000000000000000300000505000100070000000900020077797a31000000000900020073797a3200"], 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0x13, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000280)='wg2\x00', 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}], 0x1c) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)}], 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) munmap(&(0x7f0000185000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r5, 0x8001}}, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) 852.222612ms ago: executing program 0 (id=1769): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 792.786559ms ago: executing program 1 (id=1770): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7, 0x6, 0xa, 0x100, 0x6, 0x86020086}) 741.528933ms ago: executing program 3 (id=1771): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000440)="78cb50", 0x3, 0x44, &(0x7f0000004ff0)={0x2, 0x0, @multicast1}, 0x10) 666.006626ms ago: executing program 2 (id=1772): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 555.929194ms ago: executing program 1 (id=1773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000008700000001000000", @ANYRES32=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000840), &(0x7f0000000340)=r2}, 0x20) 437.271031ms ago: executing program 2 (id=1774): shmat(0x0, &(0x7f00001e1000/0x4000)=nil, 0x5000) 309.896293ms ago: executing program 3 (id=1775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x28}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 0s ago: executing program 2 (id=1776): syz_open_dev$video(&(0x7f00000001c0), 0x7, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x7, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x3ff, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x6, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x1, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): as an endpoint descriptor with address 0x9A, changing to 0x8A [ 351.464431][ T5667] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 351.475923][ T5667] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.491632][ T5667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.500912][ T5667] usb 5-1: Product: syz [ 351.510878][ T5667] usb 5-1: Manufacturer: syz [ 351.520775][ T5667] usb 5-1: SerialNumber: syz [ 351.530236][ T5667] usb 5-1: config 0 descriptor?? [ 351.537491][ T42] usb 2-1: USB disconnect, device number 78 [ 351.687601][ T9] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 351.697525][T10364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.729690][ T9] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30 [ 351.743801][T10364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.812316][ T5667] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 351.837473][T10410] AppArmor: change_hat: Invalid input 'Ÿ 4' [ 351.837669][T10410] AppArmor: change_hat: Invalid input 'Ÿ 4' [ 351.855586][T10410] AppArmor: change_hat: Invalid input 'Ÿ 4' [ 351.863044][T10410] AppArmor: change_hat: Invalid input 'Ÿ 4' [ 351.969831][ T5667] usb 5-1: USB disconnect, device number 63 [ 352.071848][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 352.082162][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1291'. [ 352.125030][ T187] usb 3-1: USB disconnect, device number 74 [ 352.131080][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 352.151551][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 352.181405][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1291'. [ 352.338454][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1292'. [ 352.434166][T10425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1293'. [ 352.529627][ T42] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 352.856708][ T7222] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 353.015790][ T187] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 353.090527][ T5682] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 353.178129][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 353.286750][ T187] usb 3-1: Using ep0 maxpacket: 16 [ 353.292635][ T187] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 353.307726][ T187] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.318664][ T187] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.328488][ T187] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 353.341578][ T187] usb 3-1: config 0 interface 0 has no altsetting 0 [ 353.348920][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.359756][ T187] usb 3-1: config 0 descriptor?? [ 353.369017][ T187] usbhid 3-1:0.0: can't add hid device: -22 [ 353.375104][ T187] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 353.427239][ T7222] usb 5-1: Using ep0 maxpacket: 8 [ 353.435269][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 353.445455][ T7222] usb 5-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 353.456107][ T42] usb 2-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice= 0.40 [ 353.505949][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.524373][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.527521][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.541347][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.581921][ T24] usb 3-1: USB disconnect, device number 75 [ 353.888005][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.898145][ T42] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 353.907155][ T42] usb 2-1: too many endpoints for config 1 interface 1 altsetting 2: 112, using maximum allowed: 30 [ 353.917963][ T42] usb 2-1: config 1 interface 1 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 112 [ 353.931150][ T7222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.942032][ T7222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.951774][ T7222] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.964571][ T7222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.974666][ T7222] usb 5-1: config 0 descriptor?? [ 354.089138][T10448] FAULT_INJECTION: forcing a failure. [ 354.089138][T10448] name failslab, interval 1, probability 0, space 0, times 0 [ 354.106441][T10448] CPU: 0 UID: 0 PID: 10448 Comm: syz.0.1301 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.106473][T10448] Tainted: [L]=SOFTLOCKUP [ 354.106481][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.106492][T10448] Call Trace: [ 354.106513][T10448] [ 354.106520][T10448] dump_stack_lvl+0xe8/0x150 [ 354.106551][T10448] should_fail_ex+0x410/0x560 [ 354.106578][T10448] should_failslab+0xa8/0x100 [ 354.106607][T10448] __kmalloc_cache_noprof+0xa8/0x660 [ 354.106632][T10448] ? assoc_array_insert+0x90/0x2f60 [ 354.106654][T10448] ? assoc_array_insert+0x90/0x2f60 [ 354.106682][T10448] assoc_array_insert+0x90/0x2f60 [ 354.106717][T10448] ? down_write+0x16b/0x200 [ 354.106735][T10448] ? __pfx_down_write+0x10/0x10 [ 354.106753][T10448] ? __pfx_key_set_index_key+0x10/0x10 [ 354.106783][T10448] __key_link_begin+0xd6/0x1f0 [ 354.106811][T10448] __key_create_or_update+0x449/0xa80 [ 354.106844][T10448] ? __pfx___key_create_or_update+0x10/0x10 [ 354.106871][T10448] ? lookup_user_key+0xb68/0x1150 [ 354.106903][T10448] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 354.106933][T10448] key_create_or_update+0x42/0x60 [ 354.106963][T10448] __se_sys_add_key+0x349/0x420 [ 354.106994][T10448] ? __pfx___se_sys_add_key+0x10/0x10 [ 354.107047][T10448] ? __x64_sys_add_key+0x20/0xc0 [ 354.107078][T10448] do_syscall_64+0x166/0x520 [ 354.107106][T10448] ? trace_irq_disable+0x3b/0x140 [ 354.107133][T10448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.107153][T10448] ? clear_bhb_loop+0x70/0xc0 [ 354.107188][T10448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.107208][T10448] RIP: 0033:0x7f050499e0d9 [ 354.107224][T10448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.107241][T10448] RSP: 002b:00007f050593d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 354.107268][T10448] RAX: ffffffffffffffda RBX: 00007f0504c25fa0 RCX: 00007f050499e0d9 [ 354.107282][T10448] RDX: 0000200000000600 RSI: 0000200000000500 RDI: 0000200000000400 [ 354.107296][T10448] RBP: 00007f050593d090 R08: 00000000fffffffd R09: 0000000000000000 [ 354.107308][T10448] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002 [ 354.107320][T10448] R13: 00007f0504c26038 R14: 00007f0504c25fa0 R15: 00007f0504d4fa48 [ 354.107350][T10448] [ 354.671039][T10449] netlink: 'syz.0.1301': attribute type 5 has an invalid length. [ 354.704635][T10452] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 354.795773][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.803830][ T42] usb 2-1: Product: syz [ 354.808156][ T42] usb 2-1: Manufacturer: syz [ 354.810920][T10456] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 354.855001][T10456] kvm: pic: level sensitive irq not supported [ 354.859247][T10456] kvm: pic: non byte read [ 354.908426][ T5682] usb 4-1: unable to get BOS descriptor or descriptor too short [ 354.916391][ T42] usb 2-1: can't set config #1, error -71 [ 354.923890][ T42] usb 2-1: USB disconnect, device number 79 [ 355.029359][ T7222] input: HID 046d:c20a as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C20A.0016/input/input31 [ 355.075083][ T7222] logitech 0003:046D:C20A.0016: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c20a] on usb-dummy_hcd.4-1/input0 [ 355.129182][ T7222] logitech 0003:046D:C20A.0016: missing HID_OUTPUT_REPORT 0 [ 355.142685][ T5682] usb 4-1: not running at top speed; connect to a high speed hub [ 355.150497][ T5682] usb 4-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice=7a.a6 [ 355.167834][T10463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.186844][T10463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.277913][ T7222] usb 5-1: USB disconnect, device number 64 [ 355.288357][ T29] audit: type=1326 audit(1787291772.534:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10450 comm="syz.2.1302" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c41b9e0d9 code=0x7fc00000 [ 355.573991][ T5682] usb 4-1: config 5 has an invalid interface number: 150 but max is 0 [ 355.582294][ T5682] usb 4-1: config 5 has no interface number 0 [ 355.588408][ T5682] usb 4-1: config 5 interface 150 has no altsetting 0 [ 355.903227][ T5682] usb 4-1: string descriptor 0 read error: -71 [ 355.909654][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.011218][ T5682] usb 4-1: can't set config #5, error -71 [ 356.018654][ T5682] usb 4-1: USB disconnect, device number 53 [ 356.099971][T10485] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1312'. [ 356.166986][T10487] Invalid argument reading file caps for ./file0 [ 356.175313][ T5667] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 356.268302][T10489] FAULT_INJECTION: forcing a failure. [ 356.268302][T10489] name failslab, interval 1, probability 0, space 0, times 0 [ 356.305066][T10489] CPU: 0 UID: 0 PID: 10489 Comm: syz.3.1314 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.305096][T10489] Tainted: [L]=SOFTLOCKUP [ 356.305103][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.305114][T10489] Call Trace: [ 356.305126][T10489] [ 356.305133][T10489] dump_stack_lvl+0xe8/0x150 [ 356.305156][T10489] should_fail_ex+0x410/0x560 [ 356.305175][T10489] should_failslab+0xa8/0x100 [ 356.305197][T10489] __kmalloc_cache_noprof+0xa8/0x660 [ 356.305213][T10489] ? assoc_array_walk+0x34d/0x4e0 [ 356.305229][T10489] ? __kmalloc_cache_noprof+0x152/0x660 [ 356.305245][T10489] ? assoc_array_insert+0x417/0x2f60 [ 356.305260][T10489] ? assoc_array_insert+0x417/0x2f60 [ 356.305280][T10489] assoc_array_insert+0x417/0x2f60 [ 356.305306][T10489] ? __pfx_down_write+0x10/0x10 [ 356.305324][T10489] __key_link_begin+0xd6/0x1f0 [ 356.305345][T10489] __key_create_or_update+0x449/0xa80 [ 356.305369][T10489] ? __pfx___key_create_or_update+0x10/0x10 [ 356.305388][T10489] ? lookup_user_key+0xb68/0x1150 [ 356.305410][T10489] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 356.305431][T10489] key_create_or_update+0x42/0x60 [ 356.305450][T10489] __se_sys_add_key+0x349/0x420 [ 356.305473][T10489] ? __pfx___se_sys_add_key+0x10/0x10 [ 356.305499][T10489] ? __x64_sys_add_key+0x20/0xc0 [ 356.305520][T10489] do_syscall_64+0x166/0x520 [ 356.305538][T10489] ? trace_irq_disable+0x3b/0x140 [ 356.305556][T10489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.305569][T10489] ? clear_bhb_loop+0x70/0xc0 [ 356.305585][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.305598][T10489] RIP: 0033:0x7f3303d9e0d9 [ 356.305611][T10489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.305622][T10489] RSP: 002b:00007f3304b9c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 356.305636][T10489] RAX: ffffffffffffffda RBX: 00007f3304025fa0 RCX: 00007f3303d9e0d9 [ 356.305645][T10489] RDX: 0000200000000600 RSI: 0000200000000500 RDI: 0000200000000400 [ 356.305654][T10489] RBP: 00007f3304b9c090 R08: 00000000fffffffd R09: 0000000000000000 [ 356.305663][T10489] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002 [ 356.305670][T10489] R13: 00007f3304026038 R14: 00007f3304025fa0 R15: 00007f330414fa48 [ 356.305693][T10489] [ 356.367461][ T5666] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 356.472752][ T5667] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 356.577254][ T5667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.586096][ T5667] usb 2-1: Product: syz [ 356.590348][ T5667] usb 2-1: Manufacturer: syz [ 356.604982][ T5667] usb 2-1: SerialNumber: syz [ 356.632593][ T5667] r8152-cfgselector 2-1: Unknown version 0x0000 [ 356.801830][T10489] netlink: 'syz.3.1314': attribute type 5 has an invalid length. [ 356.987522][T10498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.266305][ T5666] usb 3-1: Using ep0 maxpacket: 32 [ 357.481050][ T5666] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 357.536830][ T187] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 357.809359][ T187] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.93 [ 357.832473][ T187] usb 5-1: config 0 has an invalid interface number: 161 but max is 0 [ 357.849028][ T187] usb 5-1: config 0 has no interface number 0 [ 357.855584][ T187] usb 5-1: too many endpoints for config 0 interface 161 altsetting 168: 94, using maximum allowed: 30 [ 357.893304][ T187] usb 5-1: config 0 interface 161 altsetting 168 has 0 endpoint descriptors, different from the interface descriptor's value: 94 [ 357.941317][ T5666] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.971920][ T5667] r8152-cfgselector 2-1: Unknown version 0x0000 [ 357.979157][ T187] usb 5-1: config 0 interface 161 has no altsetting 0 [ 357.990000][ T5667] r8153_ecm 2-1:1.0: probe with driver r8153_ecm failed with error -71 [ 358.002478][ T187] usb 5-1: New USB device strings: Mfr=247, Product=2, SerialNumber=3 [ 358.017724][ T187] usb 5-1: Product: syz [ 358.042705][ T187] usb 5-1: Manufacturer: syz [ 358.048973][ T187] usb 5-1: SerialNumber: syz [ 358.054836][ T5667] r8152-cfgselector 2-1: USB disconnect, device number 80 [ 358.071517][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 358.094552][T10515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.106933][ T187] usb 5-1: config 0 descriptor?? [ 358.125458][T10515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.194892][T10511] bridge1: entered promiscuous mode [ 358.615121][T10501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1317'. [ 358.635472][T10501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1317'. [ 358.669073][ T187] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 358.696031][ T187] gspca_m5602: Failed to find a sensor [ 358.736480][ T187] ALi m5602 5-1:0.161: ALi m5602 webcam failed [ 358.822056][ T5666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.830086][ T5666] usb 3-1: Product: syz [ 358.834249][ T5666] usb 3-1: Manufacturer: syz [ 358.846287][ T5666] usb 3-1: SerialNumber: syz [ 358.855686][ T187] usb 5-1: USB disconnect, device number 65 [ 358.869094][ T5666] usb 3-1: config 0 descriptor?? [ 359.050485][ T5666] usb 3-1: can't set config #0, error -71 [ 359.080128][ T5666] usb 3-1: USB disconnect, device number 76 [ 360.412350][T10558] FAULT_INJECTION: forcing a failure. [ 360.412350][T10558] name failslab, interval 1, probability 0, space 0, times 0 [ 360.484789][T10558] CPU: 1 UID: 0 PID: 10558 Comm: syz.2.1334 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.484826][T10558] Tainted: [L]=SOFTLOCKUP [ 360.484834][T10558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.484847][T10558] Call Trace: [ 360.484855][T10558] [ 360.484864][T10558] dump_stack_lvl+0xe8/0x150 [ 360.484906][T10558] should_fail_ex+0x410/0x560 [ 360.484936][T10558] should_failslab+0xa8/0x100 [ 360.484968][T10558] __kmalloc_cache_noprof+0xa8/0x660 [ 360.484997][T10558] ? io_ring_ctx_alloc+0x53/0xc40 [ 360.485027][T10558] ? io_ring_ctx_alloc+0x53/0xc40 [ 360.485064][T10558] io_ring_ctx_alloc+0x53/0xc40 [ 360.485095][T10558] ? io_prepare_config+0x8c8/0xc70 [ 360.485125][T10558] io_uring_create+0x50/0x990 [ 360.485161][T10558] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 360.485187][T10558] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 360.485221][T10558] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 360.485261][T10558] ? __pfx_ksys_write+0x10/0x10 [ 360.485304][T10558] do_syscall_64+0x166/0x520 [ 360.485334][T10558] ? trace_irq_disable+0x3b/0x140 [ 360.485362][T10558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.485383][T10558] ? clear_bhb_loop+0x70/0xc0 [ 360.485409][T10558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.485431][T10558] RIP: 0033:0x7f8c41b9e0d9 [ 360.485450][T10558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.485469][T10558] RSP: 002b:00007f8c42a68ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 360.485491][T10558] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f8c41b9e0d9 [ 360.485507][T10558] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 0000000000000e26 [ 360.485521][T10558] RBP: 0000200000000a80 R08: 0000200000000340 R09: 0000000000000000 [ 360.485535][T10558] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 360.485549][T10558] R13: 0000200000000b10 R14: 00007f8c42a68fd8 R15: 0000000000000000 [ 360.485581][T10558] [ 361.442348][ T5666] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 361.456854][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.483717][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.105982][ T5666] usb 4-1: Using ep0 maxpacket: 16 [ 362.331881][ T5666] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 362.352263][T10584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.361400][T10584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.384148][T10585] binder: 10582:10585 ioctl c040565f 200000000000 returned -22 [ 362.525082][T10591] input: syz0 as /devices/virtual/input/input32 [ 362.589123][T10594] input: syz1 as /devices/virtual/input/input33 [ 362.646610][T10596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.696855][T10596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.866775][ T5667] hid_parser_main: 11 callbacks suppressed [ 362.866792][ T5667] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 362.977513][ T5667] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 363.059161][T10551] syz.4.1333 (10551): drop_caches: 1 [ 363.124730][ T5666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.140102][ T5666] usb 4-1: Product: syz [ 363.145383][ T5666] usb 4-1: Manufacturer: syz [ 363.150680][ T5666] usb 4-1: SerialNumber: syz [ 363.448949][T10603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.579079][T10605] fido_id[10605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 363.813530][ T5666] r8152-cfgselector 4-1: Unknown version 0x0000 [ 363.819844][ T5666] r8152-cfgselector 4-1: config 0 descriptor?? [ 364.033273][ T5666] r8152-cfgselector 4-1: can't set config #0, error -71 [ 364.095720][ T5666] r8152-cfgselector 4-1: USB disconnect, device number 54 [ 364.110735][ T5629] udevd[5629]: setting mode of /dev/bus/usb/004/054 to 020664 failed: No such file or directory [ 364.167067][T10624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.185116][ T5629] udevd[5629]: setting owner of /dev/bus/usb/004/054 to uid=0, gid=0 failed: No such file or directory [ 364.212767][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 364.672230][ T29] audit: type=1326 audit(1787291781.934:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 364.736059][ T29] audit: type=1326 audit(1787291781.934:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 364.783085][T10634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.783865][ T29] audit: type=1326 audit(1787291781.934:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 364.792526][T10634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.832257][ T29] audit: type=1326 audit(1787291781.934:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 364.871820][T10641] ip_tables: iptables: counters copy to user failed while replacing table [ 364.883659][ T29] audit: type=1326 audit(1787291781.934:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 364.908388][ T29] audit: type=1326 audit(1787291781.934:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 364.935359][ T29] audit: type=1326 audit(1787291781.934:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 364.960988][ T29] audit: type=1326 audit(1787291781.934:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f050495e90e code=0x7ffc0000 [ 364.988620][T10639] fuse: Bad value for 'rootmode' [ 365.004132][ T29] audit: type=1326 audit(1787291781.934:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 365.034701][ T29] audit: type=1326 audit(1787291781.934:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.0.1358" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 365.090736][ T5666] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 365.217646][T10643] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1361'. [ 365.582298][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1363'. [ 365.592227][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1363'. [ 365.612058][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'. [ 365.773380][ T5666] usb 3-1: Using ep0 maxpacket: 16 [ 365.812605][T10658] netlink: 'syz.1.1364': attribute type 23 has an invalid length. [ 366.414656][ T5666] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 366.653864][T10669] ALSA: mixer_oss: invalid OSS volume 'sit0' [ 366.855231][ T5666] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 366.863627][ T5666] usb 3-1: config 127 has no interface number 0 [ 366.870796][ T5666] usb 3-1: config 127 interface 124 has no altsetting 0 [ 367.617940][ T5682] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 367.727817][ T5666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.735877][ T5666] usb 3-1: Product: syz [ 367.740108][ T5666] usb 3-1: Manufacturer: syz [ 367.744710][ T5666] usb 3-1: SerialNumber: syz [ 367.833735][ T5666] usb 3-1: can't set config #127, error -71 [ 367.843873][ T5666] usb 3-1: USB disconnect, device number 77 [ 368.052708][ T5682] usb 4-1: device descriptor read/64, error -71 [ 368.102630][T10692] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 368.132085][T10692] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (200000 ns). Using initial count to start timer. [ 368.266425][T10698] bridge1: entered promiscuous mode [ 368.282855][T10698] bridge1: entered allmulticast mode [ 368.389497][ T5682] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 368.835557][ T5682] usb 4-1: device descriptor read/64, error -71 [ 368.939503][ T5682] usb usb4-port1: attempt power cycle [ 369.328720][ T187] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 369.376704][ T5682] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 369.394503][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 369.548376][T10738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.560440][T10738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.576835][T10738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.587720][T10738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.596523][ T187] usb 2-1: Using ep0 maxpacket: 16 [ 369.603984][ T187] usb 2-1: unable to get BOS descriptor or descriptor too short [ 369.614161][ T7221] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 369.626156][ T187] usb 2-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 369.639709][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.654035][ T187] usb 2-1: Product: syz [ 369.662262][ T187] usb 2-1: Manufacturer: syz [ 369.670286][ T187] usb 2-1: SerialNumber: syz [ 369.841428][ T5682] usb 4-1: device descriptor read/8, error -71 [ 369.887382][T10719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.899974][T10719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.970714][ T187] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 369.978048][ T187] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 370.055974][ T187] usb 2-1: USB disconnect, device number 81 [ 370.105576][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.116232][ T5703] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 370.168104][ T5682] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 370.365694][ T5703] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 370.377218][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.397358][ T5703] usb 5-1: config 0 descriptor?? [ 370.406298][T10744] syz_tun: entered promiscuous mode [ 370.423376][T10744] macsec1: entered allmulticast mode [ 370.428763][T10744] syz_tun: entered allmulticast mode [ 370.440244][T10744] syz_tun: left allmulticast mode [ 370.462102][T10744] syz_tun: left promiscuous mode [ 370.502849][ T5682] usb 4-1: device descriptor read/8, error -71 [ 370.511453][ T7221] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 370.547864][T10748] wg2: Caught tx_queue_len zero misconfig [ 370.616681][ T5682] usb usb4-port1: unable to enumerate USB device [ 370.653622][T10736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.663403][T10736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.694257][ T5703] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 370.711757][ T5703] [drm:udl_init] *ERROR* Selecting channel failed [ 370.762788][ T5703] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 370.776295][ T5703] [drm] Initialized udl on minor 1 [ 370.792966][ T5703] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 370.818297][ T5703] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 370.825931][ T187] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 370.849882][T10751] fuse: Bad value for 'user_id' [ 370.854770][T10751] fuse: Bad value for 'user_id' [ 370.874029][ T5703] usb 5-1: USB disconnect, device number 66 [ 370.881113][ T187] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 370.889944][T10751] fuse: Bad value for 'fd' [ 370.904710][ T187] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 370.953563][ T7221] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 370.961875][ T7221] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 370.972166][ T7221] usb 3-1: config 220 has no interface number 2 [ 370.978593][ T7221] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 370.995118][ T7221] usb 3-1: config 220 interface 0 has no altsetting 0 [ 371.001941][ T7221] usb 3-1: config 220 interface 76 has no altsetting 0 [ 371.008832][ T7221] usb 3-1: config 220 interface 1 has no altsetting 0 [ 371.322662][T10758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.331399][T10758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.433747][T10760] input: syz1 as /devices/virtual/input/input34 [ 371.440210][T10760] input: failed to attach handler leds to device input34, error: -6 [ 371.605078][ T5682] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 371.824467][ T7221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.832524][ T7221] usb 3-1: Product: syz [ 371.837679][ T7221] usb 3-1: Manufacturer: syz [ 371.843067][ T7221] usb 3-1: SerialNumber: syz [ 372.078892][T10766] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.086269][T10766] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.268271][ T5682] usb 4-1: Using ep0 maxpacket: 32 [ 372.288612][T10766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.329409][T10766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.485617][ T5682] usb 4-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 372.531576][T10766] bridge1: left allmulticast mode [ 372.584668][ T9505] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.594728][ T9505] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.619900][ T9505] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.659852][ T9505] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.824648][ T7221] usb 3-1: selecting invalid altsetting 0 [ 372.832031][ T7221] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 372.839373][ T7221] uvcvideo 3-1:220.0: No valid video chain found. [ 372.932215][ T5682] usb 4-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 372.942515][ T5682] usb 4-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 373.259236][ T7221] usb 3-1: selecting invalid altsetting 0 [ 373.264990][ T7221] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 373.283031][ T7221] usb 3-1: USB disconnect, device number 78 [ 373.635113][ T187] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 373.796639][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.804671][ T5682] usb 4-1: Product: syz [ 373.808855][ T5682] usb 4-1: Manufacturer: syz [ 373.813441][ T5682] usb 4-1: SerialNumber: syz [ 373.909558][ T187] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 373.917507][ T5682] usb 4-1: can't set config #239, error -71 [ 373.933975][ T5682] usb 4-1: USB disconnect, device number 59 [ 373.993273][ T187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.014824][ T187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.049919][T10784] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1400'. [ 374.064251][ T187] usb 5-1: config 0 descriptor?? [ 374.085889][ T187] pwc: Askey VC010 type 2 USB webcam detected. [ 374.140246][ T7221] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 374.565002][T10786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.654339][T10786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.677674][T10786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1401'. [ 375.027653][ T7221] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 375.264856][ T187] pwc: send_video_command error -71 [ 375.277375][ T187] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 375.324670][ T187] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 375.375314][ T187] usb 5-1: USB disconnect, device number 67 [ 375.467932][ T7221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.482524][ T7221] usb 3-1: config 0 descriptor?? [ 375.689171][ T5682] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 375.701760][ T7221] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 375.709445][ T7221] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 375.910604][ T7221] usb 3-1: USB disconnect, device number 79 [ 376.034254][T10791] tipc: Enabling of bearer rejected, already enabled [ 376.381007][ T5682] usb 4-1: Using ep0 maxpacket: 32 [ 376.560891][ T5682] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 376.997395][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.008244][ T5682] usb 4-1: config 0 descriptor?? [ 377.187970][T10764] Set syz1 is full, maxelem 65536 reached [ 377.212545][ T5682] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 377.365101][T10801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.373927][T10801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.399064][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'. [ 377.532111][T10804] team0: Port device team_slave_0 removed [ 378.048163][T10816] ALSA: mixer_oss: invalid OSS volume 'sit0' [ 378.426915][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.433592][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.779980][T10824] ALSA: mixer_oss: invalid OSS volume 'veth1' [ 379.375212][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'. [ 379.994315][ T5667] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 380.056350][T10840] tipc: Enabling of bearer rejected, already enabled [ 380.162366][T10789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.171179][T10789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.269356][ T5666] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 380.325751][ T5667] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 380.417166][ T5667] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.448352][ T5667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.487989][ T5682] gspca_vc032x: reg_r err -71 [ 380.492722][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.498026][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.503351][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.508660][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.513970][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.519280][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.524586][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.529901][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.535239][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.540548][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.545856][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.599333][ T5667] usb 5-1: config 0 descriptor?? [ 380.626129][ T5667] pwc: Askey VC010 type 2 USB webcam detected. [ 380.636098][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.641436][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.646752][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.652077][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.657425][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.709627][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 380.714973][ T5682] gspca_vc032x: Unknown sensor... [ 380.720132][ T5682] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 380.733086][ T5682] usb 4-1: USB disconnect, device number 60 [ 380.931078][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 381.018949][T10846] netlink: 'syz.0.1418': attribute type 30 has an invalid length. [ 381.096107][T10846] vxlan1: entered promiscuous mode [ 381.108223][T10846] vxlan1: entered allmulticast mode [ 381.264483][ T5666] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 381.609918][T10855] vivid-001: disconnect [ 381.622047][T10855] vivid-001: reconnect [ 382.547397][ T5667] pwc: send_video_command error -71 [ 382.586729][ T5666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.594898][ T5666] usb 2-1: Product: syz [ 382.599074][ T5666] usb 2-1: Manufacturer: syz [ 382.603672][ T5666] usb 2-1: SerialNumber: syz [ 382.609986][ T5667] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 382.622324][ T5666] usb 2-1: config 0 descriptor?? [ 382.657588][ T5667] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 382.720650][ T5667] usb 5-1: USB disconnect, device number 68 [ 382.814470][ T5666] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 382.868791][T10862] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1423'. [ 383.027873][ T5666] gspca_stk1135: reg_w 0x2 err -71 [ 383.034086][ T5666] gspca_stk1135: serial bus timeout: status=0x00 [ 383.040453][ T5666] gspca_stk1135: Sensor write failed [ 383.045781][ T5666] gspca_stk1135: serial bus timeout: status=0x00 [ 383.052185][ T5666] gspca_stk1135: Sensor write failed [ 383.057525][ T5666] gspca_stk1135: serial bus timeout: status=0x00 [ 383.063878][ T5666] gspca_stk1135: Sensor read failed [ 383.069165][ T5666] gspca_stk1135: serial bus timeout: status=0x00 [ 383.075535][ T5666] gspca_stk1135: Sensor read failed [ 383.080761][ T5666] gspca_stk1135: Detected sensor type unknown (0x0) [ 383.087395][ T5666] gspca_stk1135: serial bus timeout: status=0x00 [ 383.113202][ T5666] gspca_stk1135: Sensor read failed [ 383.118479][ T5666] gspca_stk1135: serial bus timeout: status=0x00 [ 383.124836][ T5666] gspca_stk1135: Sensor read failed [ 383.156382][ T5666] gspca_stk1135: serial bus timeout: status=0x00 [ 383.163178][ T5666] gspca_stk1135: Sensor write failed [ 383.168561][ T5666] gspca_stk1135: serial bus timeout: status=0x00 [ 383.174913][ T5666] gspca_stk1135: Sensor write failed [ 383.180325][ T5666] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 383.202978][ T5666] usb 2-1: USB disconnect, device number 82 [ 383.627991][T10860] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 383.644706][T10860] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 383.669183][T10860] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 383.675403][T10860] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 383.744541][T10860] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 383.766019][T10860] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 383.826882][T10860] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 383.834409][T10860] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 383.847334][T10860] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 383.862745][T10860] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 384.061528][T10898] tipc: Enabling of bearer rejected, already enabled [ 384.337162][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'. [ 384.568483][T10912] dvmrp0: entered allmulticast mode [ 385.344043][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 385.427166][T10928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.436879][T10928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.463759][T10911] dvmrp0: left allmulticast mode [ 385.649248][ T187] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 385.671878][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 385.726544][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 385.791582][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 385.889010][ T187] usb 2-1: Using ep0 maxpacket: 32 [ 385.894921][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 385.902261][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 385.909323][ T187] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 385.921058][ T187] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 385.929649][ T187] usb 2-1: config 0 has no interface number 0 [ 385.938320][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.962602][ T187] usb 2-1: Product: syz [ 385.967089][ T187] usb 2-1: Manufacturer: syz [ 385.971991][ T187] usb 2-1: SerialNumber: syz [ 386.059728][ T187] usb 2-1: config 0 descriptor?? [ 386.082213][T10937] ALSA: mixer_oss: invalid OSS volume '' [ 386.167333][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1442'. [ 386.176962][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1442'. [ 386.333092][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 386.379874][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 386.379892][ T29] audit: type=1326 audit(1787291803.614:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 386.464304][ T29] audit: type=1326 audit(1787291803.674:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 386.559123][T10945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1445'. [ 386.568445][ T29] audit: type=1326 audit(1787291803.674:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 386.676619][ T29] audit: type=1326 audit(1787291803.674:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 386.728345][ T29] audit: type=1326 audit(1787291803.674:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 386.788473][ T29] audit: type=1326 audit(1787291803.674:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 386.823157][ T29] audit: type=1326 audit(1787291803.674:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 386.895305][ T187] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 386.913497][ T29] audit: type=1326 audit(1787291803.674:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 386.945437][ T187] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 386.963718][ T187] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 386.975628][ T29] audit: type=1326 audit(1787291803.674:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 387.015441][ T187] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 387.040019][ T187] usb 2-1: USB disconnect, device number 83 [ 387.080552][ T29] audit: type=1326 audit(1787291803.674:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.2.1443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 387.192703][T10956] tipc: Enabling of bearer rejected, already enabled [ 387.222251][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 387.230034][ T24] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 387.438313][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 387.613773][T10961] fuse: Unknown parameter '0x0000000000000006' [ 387.769050][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 387.778700][T10961] input: syz1 as /devices/virtual/input/input36 [ 387.876814][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 387.934211][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 387.940415][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 387.961489][T10966] syzkaller0: entered promiscuous mode [ 387.967213][T10966] syzkaller0: entered allmulticast mode [ 388.095999][ T7222] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 388.127700][T10966] tipc: Enabled bearer , priority 0 [ 388.156573][T10973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.178653][T10965] tipc: Resetting bearer [ 388.183585][T10973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.243512][T10965] tipc: Disabling bearer [ 388.293483][T10978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.304911][T10978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.333454][T10980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1456'. [ 388.542146][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.550325][ T24] usb 4-1: Product: syz [ 388.669639][ T24] usb 4-1: can't set config #1, error -71 [ 388.678149][ T24] usb 4-1: USB disconnect, device number 61 [ 388.726515][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 388.739574][T11001] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.746766][T11001] bridge0: port 2(bridge_slave_1) entered listening state [ 388.764522][T11001] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.771642][T11001] bridge0: port 1(bridge_slave_0) entered listening state [ 388.779598][ T7222] usb 3-1: Using ep0 maxpacket: 8 [ 388.816912][T11001] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 388.829283][T11005] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1465'. [ 388.850764][T11001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.863065][T11001] veth0_to_team: entered promiscuous mode [ 388.991708][ T7222] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 389.315568][T10988] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 389.691409][T11024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.702149][T11024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.716547][T11024] loop5: detected capacity change from 0 to 7 [ 389.738953][T11024] Dev loop5: unable to read RDB block 7 [ 389.747206][T11026] tipc: Enabled bearer , priority 10 [ 389.772391][T11028] syzkaller0: entered promiscuous mode [ 389.779956][T11024] loop5: unable to read partition table [ 389.783537][T11028] syzkaller0: entered allmulticast mode [ 389.786422][T11024] loop5: partition table beyond EOD, truncated [ 389.797446][T11024] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 390.145183][ T5667] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 390.303690][ T7222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.312893][ T5666] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 390.320626][ T7222] usb 3-1: Product: syz [ 390.324819][ T7222] usb 3-1: Manufacturer: syz [ 390.329433][ T7222] usb 3-1: SerialNumber: syz [ 390.336759][ T7222] usb 3-1: config 0 descriptor?? [ 390.440621][ T5667] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 390.463783][ T5667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 390.480194][T11042] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 390.484149][ T5667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 390.502181][ T5667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.521226][ T5667] usb 5-1: config 0 descriptor?? [ 390.544730][ T5667] smsusb:smsusb_probe: board id=8, interface number 0 [ 390.552201][ T5667] smsusb:smsusb_probe: Device initialized with return code -19 [ 390.683705][T11048] vivid-000: ================= START STATUS ================= [ 390.692938][T11048] vivid-000: Radio HW Seek Mode: Bounded [ 390.700693][T11048] vivid-000: Radio Programmable HW Seek: false [ 390.706892][T11048] vivid-000: RDS Rx I/O Mode: Block I/O [ 390.712446][T11048] vivid-000: Generate RBDS Instead of RDS: false [ 390.718778][T11048] vivid-000: RDS Reception: true [ 390.723728][T11048] vivid-000: RDS Program Type: 0 inactive [ 390.729451][T11048] vivid-000: RDS PS Name: inactive [ 390.734652][T11048] vivid-000: RDS Radio Text: inactive [ 390.740137][T11048] vivid-000: RDS Traffic Announcement: false inactive [ 390.751520][ T5703] usb 5-1: USB disconnect, device number 69 [ 390.771688][ T5666] usb 2-1: device descriptor read/64, error -71 [ 390.781156][T11048] vivid-000: RDS Traffic Program: false inactive [ 390.795288][T11048] vivid-000: RDS Music: false inactive [ 390.801543][T11048] vivid-000: ================== END STATUS ================== [ 390.870277][ T7222] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 391.083372][ T5666] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 391.231577][T11051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.240325][T11051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.517821][ T7222] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 391.529557][ T5666] usb 2-1: device descriptor read/64, error -71 [ 391.538298][ T7222] usb 3-1: USB disconnect, device number 80 [ 391.566319][ T6610] udevd[6610]: setting owner of /dev/bus/usb/003/080 to uid=0, gid=0 failed: No such file or directory [ 391.640271][ T5666] usb usb2-port1: attempt power cycle [ 392.014214][ T5667] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 392.073129][ T5666] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 392.081881][ T42] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 392.243335][ T5667] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.255420][ T5667] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.268996][ T5667] usb 5-1: config 0 has no interfaces? [ 392.295153][ T5667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 392.303314][ T5667] usb 5-1: SerialNumber: syz [ 392.313279][ T5667] usb 5-1: config 0 descriptor?? [ 392.395397][ T5703] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 392.502096][ T5666] usb 2-1: device descriptor read/8, error -71 [ 392.595710][T11088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.605738][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 392.611654][T11088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.625887][ T5703] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 392.637120][ T5703] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 392.651436][T11088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.660123][ T5703] usb 3-1: config 127 has no interface number 0 [ 392.668695][ T5703] usb 3-1: config 127 interface 124 has no altsetting 0 [ 392.676791][T11088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.687227][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.696932][ T5703] usb 3-1: Product: syz [ 392.703748][ T5703] usb 3-1: Manufacturer: syz [ 392.714800][ T5703] usb 3-1: SerialNumber: syz [ 392.750738][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 392.841501][ T5666] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 392.860517][T11090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1494'. [ 393.013080][T11072] loop5: detected capacity change from 0 to 7 [ 393.042565][T11072] Dev loop5: unable to read RDB block 7 [ 393.050511][T11072] loop5: unable to read partition table [ 393.117429][T11072] loop5: partition table beyond EOD, truncated [ 393.158526][T11072] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 393.182805][ T5666] usb 2-1: device descriptor read/8, error -71 [ 393.190947][ T7222] usb 5-1: USB disconnect, device number 70 [ 393.287537][ T5666] usb usb2-port1: unable to enumerate USB device [ 393.463848][T11098] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1496'. [ 393.608384][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 393.616106][ T42] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 393.853603][T11108] bond1: (slave bond_slave_1): Device is not our slave [ 393.873260][T11108] bond1: option active_slave: invalid value (bond_slave_1) [ 393.950938][T11108] bond1 (unregistering): Released all slaves [ 394.088258][ T5703] usb 3-1: USB disconnect, device number 81 [ 394.306034][T11109] tipc: Bearer : already 2 bearers with priority 10 [ 394.313289][T11109] tipc: Bearer : trying with adjusted priority [ 394.321708][T11109] tipc: Enabled bearer , priority 9 [ 394.726273][ T5703] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 394.944922][ T5703] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 394.960698][ T5703] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 394.968879][ T5703] usb 3-1: can't read configurations, error -61 [ 395.063642][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.071726][ T42] usb 4-1: Product: syz [ 395.114325][ T5703] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 395.179677][ T42] usb 4-1: can't set config #1, error -71 [ 395.187183][ T42] usb 4-1: USB disconnect, device number 62 [ 395.300948][T11141] ALSA: mixer_oss: invalid OSS volume '' [ 395.375053][ T5703] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 395.405515][ T5703] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 395.416244][ T5703] usb 3-1: can't read configurations, error -61 [ 395.433813][ T5703] usb usb3-port1: attempt power cycle [ 395.775003][ T5703] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 395.798358][T11143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1508'. [ 395.825289][ T5703] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 395.832566][ T42] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 395.856944][ T5703] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 395.867753][ T5703] usb 3-1: can't read configurations, error -61 [ 396.104403][ T5703] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 396.155596][ T5703] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 396.166542][ T5703] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 396.175460][ T5703] usb 3-1: can't read configurations, error -61 [ 396.182855][ T5703] usb usb3-port1: unable to enumerate USB device [ 396.328662][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 396.411741][T11159] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1513'. [ 396.531299][T11166] FAULT_INJECTION: forcing a failure. [ 396.531299][T11166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.550387][T11166] CPU: 0 UID: 0 PID: 11166 Comm: syz.1.1515 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.550421][T11166] Tainted: [L]=SOFTLOCKUP [ 396.550429][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.550442][T11166] Call Trace: [ 396.550455][T11166] [ 396.550464][T11166] dump_stack_lvl+0xe8/0x150 [ 396.550498][T11166] should_fail_ex+0x410/0x560 [ 396.550527][T11166] _copy_to_user+0x31/0xb0 [ 396.550556][T11166] simple_read_from_buffer+0xe1/0x170 [ 396.550607][T11166] proc_fail_nth_read+0x1bb/0x230 [ 396.550632][T11166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.550658][T11166] ? rw_verify_area+0x24a/0x4c0 [ 396.550692][T11166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.550713][T11166] vfs_read+0x213/0xa80 [ 396.550750][T11166] ? __pfx___mutex_lock+0x10/0x10 [ 396.550782][T11166] ? __pfx_vfs_read+0x10/0x10 [ 396.550815][T11166] ? __fget_files+0x2a/0x420 [ 396.550849][T11166] ? __fget_files+0x3a2/0x420 [ 396.550878][T11166] ? __fget_files+0x2a/0x420 [ 396.550916][T11166] ksys_read+0x150/0x270 [ 396.550951][T11166] ? __pfx_ksys_read+0x10/0x10 [ 396.550980][T11166] ? fput+0xa0/0xd0 [ 396.551017][T11166] do_syscall_64+0x166/0x520 [ 396.551046][T11166] ? trace_irq_disable+0x3b/0x140 [ 396.551075][T11166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.551096][T11166] ? clear_bhb_loop+0x70/0xc0 [ 396.551123][T11166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.551145][T11166] RIP: 0033:0x7f03f9f5e90e [ 396.551165][T11166] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 396.551183][T11166] RSP: 002b:00007f03fae07fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.551206][T11166] RAX: ffffffffffffffda RBX: 00007f03fae086c0 RCX: 00007f03f9f5e90e [ 396.551223][T11166] RDX: 000000000000000f RSI: 00007f03fae080a0 RDI: 0000000000000004 [ 396.551236][T11166] RBP: 00007f03fae08090 R08: 0000000000000000 R09: 0000000000000000 [ 396.551249][T11166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.551263][T11166] R13: 00007f03fa226038 R14: 00007f03fa225fa0 R15: 00007f03fa34fa48 [ 396.551307][T11166] [ 396.786223][ T42] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 396.881584][T11169] AppArmor: change_hat: Invalid input '' [ 396.909284][T11173] netlink: 'syz.1.1517': attribute type 2 has an invalid length. [ 397.044760][T11178] syzkaller0: entered promiscuous mode [ 397.050344][T11178] syzkaller0: entered allmulticast mode [ 397.536379][ T7222] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 397.935817][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1522'. [ 398.186136][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.194252][ T42] usb 4-1: Product: syz [ 398.198448][ T42] usb 4-1: Manufacturer: syz [ 398.208945][ T42] usb 4-1: config 0 descriptor?? [ 398.291550][ T42] usb 4-1: can't set config #0, error -71 [ 398.298578][ T42] usb 4-1: USB disconnect, device number 63 [ 398.393733][ T7222] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 398.405092][T11199] nvme nvme0: failed to connect socket: -111 [ 399.278761][ T42] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 399.698270][T11232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.717580][ T7222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.726464][T11232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.726483][ T7222] usb 3-1: Product: syz [ 399.738756][ T42] usb 4-1: device descriptor read/64, error -71 [ 399.745103][ T7222] usb 3-1: Manufacturer: syz [ 399.749738][ T7222] usb 3-1: SerialNumber: syz [ 399.775352][ T7222] usb 3-1: config 0 descriptor?? [ 400.050866][ T42] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 400.059421][ T24] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 400.280508][ T7222] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 400.503481][ T42] usb 4-1: device descriptor read/64, error -71 [ 400.607957][ T42] usb usb4-port1: attempt power cycle [ 400.719953][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 400.937545][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=27.0a [ 401.045651][ T42] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 401.055563][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.064280][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.385007][ T24] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 401.393330][ T24] usb 5-1: config 0 has no interface number 0 [ 401.399698][ T24] usb 5-1: config 0 interface 246 altsetting 249 bulk endpoint 0x9 has invalid maxpacket 1023 [ 401.409993][ T24] usb 5-1: config 0 interface 246 has no altsetting 0 [ 401.489590][ T42] usb 4-1: device descriptor read/8, error -71 [ 401.706644][ T7222] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 401.735570][ T7222] usb 3-1: USB disconnect, device number 86 [ 402.030056][T11285] lo: Caught tx_queue_len zero misconfig [ 402.050400][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 402.050416][ T29] audit: type=1326 audit(1787291819.314:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.0.1544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 402.141191][ T29] audit: type=1326 audit(1787291819.314:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.0.1544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 402.173091][T11285] netlink: 'syz.0.1544': attribute type 4 has an invalid length. [ 402.204731][ T29] audit: type=1326 audit(1787291819.314:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.0.1544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 402.247187][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.249274][ T29] audit: type=1326 audit(1787291819.314:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.0.1544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 402.255223][ T24] usb 5-1: Product: syz [ 402.255243][ T24] usb 5-1: Manufacturer: syz [ 402.255259][ T24] usb 5-1: SerialNumber: syz [ 402.265494][ T24] usb 5-1: config 0 descriptor?? [ 402.308895][ T29] audit: type=1326 audit(1787291819.314:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.0.1544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 402.361180][T11230] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 402.381402][ T29] audit: type=1326 audit(1787291819.314:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.0.1544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 402.454147][ T29] audit: type=1326 audit(1787291819.314:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.0.1544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 402.512534][ T29] audit: type=1326 audit(1787291819.314:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.0.1544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 402.568906][ T29] audit: type=1326 audit(1787291819.314:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.0.1544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 402.625634][ T29] audit: type=1326 audit(1787291819.314:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11284 comm="syz.0.1544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050499e0d9 code=0x7ffc0000 [ 402.642398][T11300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.658667][T11300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.931345][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 402.940280][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1547'. [ 402.970494][T11300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1547'. [ 403.087671][ T24] usb 5-1: USB disconnect, device number 71 [ 403.149021][ T7222] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 403.434839][T11316] ALSA: mixer_oss: invalid OSS volume '' [ 403.581091][ T7222] usb 3-1: device descriptor read/64, error -71 [ 403.823475][ T7222] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 403.929465][T11321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.940321][T11321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.029461][T11324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.057482][ T7222] usb 3-1: device descriptor read/64, error -71 [ 404.092794][T11324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.167330][ T7222] usb usb3-port1: attempt power cycle [ 404.254868][T11321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1553'. [ 404.302053][T11321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.342422][T11321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.468808][T11331] FAULT_INJECTION: forcing a failure. [ 404.468808][T11331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.495925][T11331] CPU: 1 UID: 0 PID: 11331 Comm: syz.4.1555 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.495983][T11331] Tainted: [L]=SOFTLOCKUP [ 404.495992][T11331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.496008][T11331] Call Trace: [ 404.496017][T11331] [ 404.496026][T11331] dump_stack_lvl+0xe8/0x150 [ 404.496062][T11331] should_fail_ex+0x410/0x560 [ 404.496093][T11331] _copy_to_user+0x31/0xb0 [ 404.496124][T11331] io_query+0x2c3/0x6b0 [ 404.496151][T11331] ? __pfx_io_query+0x10/0x10 [ 404.496177][T11331] ? ksys_write+0x1e6/0x270 [ 404.496216][T11331] ? __fget_files+0x2a/0x420 [ 404.496252][T11331] __se_sys_io_uring_register+0x429/0x1ab0 [ 404.496292][T11331] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 404.496328][T11331] ? ksys_write+0x242/0x270 [ 404.496362][T11331] ? __pfx_ksys_write+0x10/0x10 [ 404.496405][T11331] do_syscall_64+0x166/0x520 [ 404.496433][T11331] ? trace_irq_disable+0x3b/0x140 [ 404.496462][T11331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.496483][T11331] ? clear_bhb_loop+0x70/0xc0 [ 404.496508][T11331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.496531][T11331] RIP: 0033:0x7fc301f9e0d9 [ 404.496551][T11331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.496570][T11331] RSP: 002b:00007fc302ebe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 404.496594][T11331] RAX: ffffffffffffffda RBX: 00007fc302225fa0 RCX: 00007fc301f9e0d9 [ 404.496611][T11331] RDX: 0000200000000000 RSI: 0000000000000023 RDI: ffffffffffffffff [ 404.496637][T11331] RBP: 00007fc302ebe090 R08: 0000000000000000 R09: 0000000000000000 [ 404.496650][T11331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.496663][T11331] R13: 00007fc302226038 R14: 00007fc302225fa0 R15: 00007fc30234fa48 [ 404.496702][T11331] [ 404.798274][ T7222] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 405.234687][ T7222] usb 3-1: device descriptor read/8, error -71 [ 405.293961][T11335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.308451][T11335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.504003][ T5703] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 405.561152][ T7222] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 405.775968][ T5703] usb 2-1: not running at top speed; connect to a high speed hub [ 405.785010][ T5703] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=a7.d5 [ 405.796314][ T5703] usb 2-1: config 2 has an invalid interface number: 85 but max is 0 [ 405.804820][ T5703] usb 2-1: config 2 has no interface number 0 [ 405.811273][ T5703] usb 2-1: config 2 interface 85 has no altsetting 0 [ 405.824492][ T5667] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 405.834294][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.845719][ T5703] usb 2-1: Product: syz [ 405.850887][ T5703] usb 2-1: Manufacturer: syz [ 405.856157][ T5703] usb 2-1: SerialNumber: syz [ 405.883912][ T7222] usb 3-1: device descriptor read/8, error -71 [ 405.906497][T11351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1562'. [ 405.970088][T11351] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5) [ 405.982205][T11351] bond1 (unregistering): Released all slaves [ 406.002381][ T7222] usb usb3-port1: unable to enumerate USB device [ 406.090352][T11335] batman_adv: batadv0: Adding interface: macsec1 [ 406.096761][T11335] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.108314][ T5667] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 406.140316][ T5667] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 406.152948][ T5667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 406.168076][T11335] batman_adv: batadv0: Interface activated: macsec1 [ 406.168090][ T5667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.183773][ T5667] usb 5-1: Product: syz [ 406.188150][ T5667] usb 5-1: Manufacturer: syz [ 406.192958][ T5667] usb 5-1: SerialNumber: syz [ 406.205774][ T5667] usb 5-1: config 0 descriptor?? [ 406.432888][ T5703] gspca_main: conex-2.14.0 probing 0572:0041 [ 406.432931][T11357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.477854][T11357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.685907][ T5667] usb 5-1: USB disconnect, device number 72 [ 406.699493][ T5703] usb 2-1: USB disconnect, device number 88 [ 406.899676][T11369] ALSA: mixer_oss: invalid OSS volume '' [ 406.905731][T11369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1565'. [ 406.922770][ T42] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 407.573503][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 407.789869][ T42] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 407.912693][T11388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1569'. [ 408.224527][ T42] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 408.232927][ T42] usb 3-1: config 254 has no interface number 0 [ 408.239193][ T42] usb 3-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 408.251083][ T42] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x8A has invalid wMaxPacketSize 0 [ 408.261183][ T42] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 408.271263][ T42] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 408.281331][ T42] usb 3-1: config 254 interface 235 has no altsetting 0 [ 408.395575][T11391] binder: 11390:11391 ioctl 80087601 200000000100 returned -22 [ 408.472920][T11393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.484669][T11393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.535383][T11396] syzkaller0: entered promiscuous mode [ 408.550431][T11396] syzkaller0: entered allmulticast mode [ 408.575654][T11396] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 408.586403][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1574'. [ 408.595301][T11396] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1574'. [ 409.092349][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.100435][ T42] usb 3-1: Product: syz [ 409.104629][ T42] usb 3-1: Manufacturer: syz [ 409.112791][ T42] usb 3-1: SerialNumber: syz [ 409.474320][ T187] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 409.482095][ T5667] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 409.644747][ T42] usbtest 3-1:254.235: Linux gadget zero [ 409.650518][ T42] usbtest 3-1:254.235: high-speed {control in/out bulk-in iso-in} tests (+alt) [ 409.759172][ T187] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.769158][ T5667] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice= 0.00 [ 409.782620][ T187] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.803944][ T5667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.823760][ T187] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 409.843156][ T5667] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 409.885625][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.902199][ T5667] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 409.917001][ T187] usb 5-1: Product: syz [ 409.924573][ T187] usb 5-1: Manufacturer: syz [ 409.931370][ T5667] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 409.939701][ T187] usb 5-1: SerialNumber: syz [ 409.946176][ T5667] usb 2-1: media controller created [ 410.001807][ T5667] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 410.112152][ T5667] DVB: Unable to find symbol mt352_attach() [ 410.123768][ T5667] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 410.145556][ T5667] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input38 [ 410.178507][ T5667] dvb-usb: schedule remote query interval to 100 msecs. [ 410.214920][ T5667] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 410.421000][ T42] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 410.448876][T11431] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1579'. [ 410.557100][T11427] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 410.587234][T11427] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 410.619019][T11427] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 410.657849][ T9] dvb-usb: error while querying for an remote control event. [ 410.675410][T11427] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 410.695594][T11427] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 410.704356][T11427] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 410.714032][T11427] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 410.722647][T11427] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 410.731228][T11427] kvm: requested 172647 ns i8254 timer period limited to 200000 ns [ 410.759890][T11427] kvm: requested 147504 ns i8254 timer period limited to 200000 ns [ 410.872332][ T187] cdc_ncm 5-1:1.0: bind() failure [ 410.883160][ T187] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 410.894965][ T187] usb 5-1: USB disconnect, device number 73 [ 410.992115][ T24] usb 3-1: USB disconnect, device number 91 [ 411.092769][ T9] dvb-usb: error while querying for an remote control event. [ 411.508096][T11447] usb usb7: check_ctrlrecip: process 11447 (syz.2.1586) requesting ep 01 but needs 81 [ 411.527315][ T187] dvb-usb: error while querying for an remote control event. [ 411.959187][ T187] dvb-usb: error while querying for an remote control event. [ 411.977410][ T42] usb 4-1: unable to get BOS descriptor or descriptor too short [ 412.196721][ T42] usb 4-1: not running at top speed; connect to a high speed hub [ 412.204547][ T42] usb 4-1: New USB device found, idVendor=1235, idProduct=8b13, bcdDevice= 3.00 [ 412.228431][T11464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1599'. [ 412.463863][T11474] vivid-003: disconnect [ 412.468444][T11473] vivid-003: reconnect [ 412.868558][ T42] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 412.876195][ T42] usb 4-1: can't read configurations, error -61 [ 413.083760][ T42] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 413.423056][T11486] syz.2.1606 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 413.436041][T11486] CPU: 1 UID: 0 PID: 11486 Comm: syz.2.1606 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.436072][T11486] Tainted: [L]=SOFTLOCKUP [ 413.436079][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.436093][T11486] Call Trace: [ 413.436102][T11486] [ 413.436112][T11486] dump_stack_lvl+0xe8/0x150 [ 413.436145][T11486] dump_header+0xd3/0x4b0 [ 413.436174][T11486] oom_kill_process+0x3ab/0x9e0 [ 413.436201][T11486] out_of_memory+0x1064/0x1480 [ 413.436232][T11486] ? try_charge_memcg+0xbce/0x1590 [ 413.436274][T11486] ? __pfx_out_of_memory+0x10/0x10 [ 413.436304][T11486] ? do_raw_spin_unlock+0xf5/0x200 [ 413.436340][T11486] try_charge_memcg+0xc78/0x1590 [ 413.436382][T11486] ? __pfx_try_charge_memcg+0x10/0x10 [ 413.436416][T11486] ? percpu_ref_tryget+0x15/0x180 [ 413.436457][T11486] ? __memcg_kmem_charge_page+0x15a/0x510 [ 413.436486][T11486] __memcg_kmem_charge_page+0x31c/0x510 [ 413.436510][T11486] ? __memcg_kmem_charge_page+0x15a/0x510 [ 413.436538][T11486] __alloc_frozen_pages_noprof+0x1be/0x380 [ 413.436570][T11486] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 413.436602][T11486] ? __pfx_policy_nodemask+0x10/0x10 [ 413.436649][T11486] ? __css_rstat_updated+0x237/0x540 [ 413.436689][T11486] alloc_pages_mpol+0x212/0x390 [ 413.436724][T11486] alloc_pages_noprof+0xb1/0x2b0 [ 413.436757][T11486] __pmd_alloc+0x3a/0x5c0 [ 413.436782][T11486] copy_pmd_range+0x548b/0x5890 [ 413.436806][T11486] ? register_lock_class+0x31/0x2e0 [ 413.436839][T11486] ? __lock_acquire+0x683/0x2cf0 [ 413.436872][T11486] ? __pfx___css_rstat_updated+0x10/0x10 [ 413.436903][T11486] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 413.436954][T11486] ? mod_memcg_lruvec_state+0xd5/0x270 [ 413.436998][T11486] ? __pfx_copy_pmd_range+0x10/0x10 [ 413.437020][T11486] ? do_raw_spin_lock+0x12b/0x2f0 [ 413.437058][T11486] ? do_raw_spin_unlock+0xf5/0x200 [ 413.437088][T11486] ? _raw_spin_unlock+0x28/0x50 [ 413.437114][T11486] ? __pud_alloc+0x348/0x460 [ 413.437141][T11486] copy_page_range+0xc26/0x1250 [ 413.437194][T11486] ? __pfx_copy_page_range+0x10/0x10 [ 413.437243][T11486] dup_mmap+0xf21/0x1d90 [ 413.437288][T11486] ? __pfx_dup_mmap+0x10/0x10 [ 413.437310][T11486] ? do_raw_spin_lock+0x12b/0x2f0 [ 413.437349][T11486] ? copy_mm+0x10f/0x480 [ 413.437376][T11486] ? copy_mm+0x10f/0x480 [ 413.437417][T11486] copy_mm+0x11a/0x480 [ 413.437444][T11486] ? copy_process+0xd3c/0x43e0 [ 413.437467][T11486] copy_process+0x1e75/0x43e0 [ 413.437502][T11486] ? copy_process+0xd3c/0x43e0 [ 413.437546][T11486] ? __pfx_copy_process+0x10/0x10 [ 413.437575][T11486] ? futex_private_hash_put+0x132/0x160 [ 413.437617][T11486] kernel_clone+0x2d7/0x940 [ 413.437653][T11486] ? __pfx_futex_wake+0x10/0x10 [ 413.437683][T11486] ? __pfx_kernel_clone+0x10/0x10 [ 413.437722][T11486] ? do_futex+0x458/0x4e0 [ 413.437751][T11486] __x64_sys_clone+0x1b6/0x230 [ 413.437783][T11486] ? __pfx___x64_sys_clone+0x10/0x10 [ 413.437828][T11486] ? rcu_is_watching+0x16/0xb0 [ 413.437864][T11486] do_syscall_64+0x166/0x520 [ 413.437894][T11486] ? trace_irq_disable+0x3b/0x140 [ 413.437922][T11486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.437945][T11486] ? clear_bhb_loop+0x70/0xc0 [ 413.437972][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.437994][T11486] RIP: 0033:0x7f8c41b9e0d9 [ 413.438014][T11486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.438034][T11486] RSP: 002b:00007f8c42a68fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 413.438059][T11486] RAX: ffffffffffffffda RBX: 00007f8c41e25fa0 RCX: 00007f8c41b9e0d9 [ 413.438076][T11486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000040000 [ 413.438089][T11486] RBP: 00007f8c41c35024 R08: 0000000000000000 R09: 0000000000000000 [ 413.438102][T11486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 413.438115][T11486] R13: 00007f8c41e26038 R14: 00007f8c41e25fa0 R15: 00007f8c41f4fa48 [ 413.438168][T11486] [ 413.438179][T11486] memory: usage 96kB, limit 96kB, failcnt 41 [ 413.913555][T11486] memory+swap: usage 100kB, limit 9007199254740988kB, failcnt 0 [ 413.921248][T11486] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 413.969759][ T5667] dvb_usb_m920x 2-1:1.0: probe with driver dvb_usb_m920x failed with error -71 [ 413.979874][ T187] m920x_read = error: -71 [ 413.992458][ T187] dvb-usb: error while querying for an remote control event. [ 414.027534][ T5667] usb 2-1: USB disconnect, device number 89 [ 414.056183][T11486] Memory cgroup stats for /syz2/test: [ 414.056405][T11486] cache 0 [ 414.064787][T11486] rss 0 [ 414.067584][T11486] rss_huge 0 [ 414.070805][T11486] shmem 0 [ 414.073774][T11486] mapped_file 0 [ 414.077256][T11486] dirty 0 [ 414.080230][T11486] writeback 0 [ 414.083551][T11486] workingset_refault_anon 0 [ 414.088076][T11486] workingset_refault_file 0 [ 414.114375][T11486] swap 0 [ 414.117282][T11486] swapcached 0 [ 414.120676][T11486] pgpgin 0 [ 414.123724][T11486] pgpgout 0 [ 414.126860][T11486] pgfault 0 [ 414.129980][T11486] pgmajfault 0 [ 414.133370][T11486] inactive_anon 0 [ 414.139099][ T187] m920x_read = error: -19 [ 414.148578][T11486] active_anon 0 [ 414.152079][T11486] inactive_file 0 [ 414.155737][T11486] active_file 0 [ 414.159237][T11486] unevictable 0 [ 414.162712][T11486] hierarchical_memory_limit 98304 [ 414.167745][T11486] hierarchical_memsw_limit 9223372036854771712 [ 414.173919][T11486] total_cache 0 [ 414.176229][ T187] dvb-usb: error while querying for an remote control event. [ 414.177385][T11486] total_rss 0 [ 414.188063][T11486] total_rss_huge 0 [ 414.191806][T11486] total_shmem 0 [ 414.195281][T11486] total_mapped_file 0 [ 414.199272][T11486] total_dirty 0 [ 414.202748][T11486] total_writeback 0 [ 414.269980][T11486] total_workingset_refault_anon 0 [ 414.275206][T11486] total_workingset_refault_file 0 [ 414.334451][ T10] m920x_read = error: -19 [ 414.339060][T11486] total_swap 0 [ 414.339510][ T10] dvb-usb: error while querying for an remote control event. [ 414.342463][T11486] total_swapcached 0 [ 414.342476][T11486] total_pgpgin 0 [ 414.342486][T11486] total_pgpgout 0 [ 414.342495][T11486] total_pgfault 0 [ 414.342505][T11486] total_pgmajfault 0 [ 414.342514][T11486] total_inactive_anon 0 [ 414.342522][T11486] total_active_anon 0 [ 414.342530][T11486] total_inactive_file 0 [ 414.342538][T11486] total_active_file 0 [ 414.342545][T11486] total_unevictable 0 [ 414.342552][T11486] anon_cost 0 [ 414.342559][T11486] file_cost 0 [ 414.342567][T11486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1606,pid=11484,uid=0 [ 414.419147][T11486] Memory cgroup out of memory: Killed process 11484 (syz.2.1606) total-vm:102252kB, anon-rss:1436kB, file-rss:22868kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 414.505420][ T5667] m920x_read = error: -19 [ 414.510183][ T5667] dvb-usb: error while querying for an remote control event. [ 414.614143][ T5667] m920x_read = error: -19 [ 414.691511][ T24] hid-generic 0000:0000:0000.0018: item fetching failed at offset 0/2 [ 414.700333][ T24] hid-generic 0000:0000:0000.0018: probe with driver hid-generic failed with error -22 [ 414.803273][ T5667] dvb-usb: error while querying for an remote control event. [ 414.895483][ T5667] m920x_read = error: -19 [ 414.899896][ T5667] dvb-usb: error while querying for an remote control event. [ 415.004339][ T5667] m920x_read = error: -19 [ 415.011461][ T5667] dvb-usb: error while querying for an remote control event. [ 415.022030][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'. [ 415.114384][ T5667] m920x_read = error: -19 [ 415.122976][ T5667] dvb-usb: error while querying for an remote control event. [ 415.198515][ T5667] wiimote 0005:057E:0306.0019: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 415.233731][ T5667] wiimote 0005:057E:0306.0019: New device registered [ 415.252192][ T5667] m920x_read = error: -19 [ 415.260972][ T5667] dvb-usb: error while querying for an remote control event. [ 415.384079][ T5667] m920x_read = error: -19 [ 415.391151][ T5667] dvb-usb: error while querying for an remote control event. [ 415.494072][ T5667] m920x_read = error: -19 [ 415.498510][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 415.506124][ T5667] dvb-usb: error while querying for an remote control event. [ 415.603971][ T5667] m920x_read = error: -19 [ 415.610174][ T5667] dvb-usb: error while querying for an remote control event. [ 415.721321][ T5667] m920x_read = error: -19 [ 415.730920][ T5667] dvb-usb: error while querying for an remote control event. [ 415.764108][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 415.772209][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 415.787577][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.801371][ T10] usb 4-1: Product: syz [ 415.810090][ T10] usb 4-1: Manufacturer: syz [ 415.824333][ T5667] m920x_read = error: -19 [ 415.829017][ T5667] dvb-usb: error while querying for an remote control event. [ 415.838726][ T10] usb 4-1: SerialNumber: syz [ 415.934620][ T5667] m920x_read = error: -19 [ 415.939818][ T5667] dvb-usb: error while querying for an remote control event. [ 416.044522][ T5667] m920x_read = error: -19 [ 416.049079][ T5667] dvb-usb: error while querying for an remote control event. [ 416.063922][ T187] wiimote 0005:057E:0306.0019: detected device: Nintendo Wii Remote (Gen 1) [ 416.082647][T11517] wiimote 0005:057E:0306.0019: Device removed [ 416.094714][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 416.166827][ T5703] m920x_read = error: -19 [ 416.171298][ T5703] dvb-usb: error while querying for an remote control event. [ 416.220184][ T187] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0019/input/input40 [ 416.232554][ T10] usb 4-1: USB disconnect, device number 70 [ 416.276667][ T5703] m920x_read = error: -19 [ 416.283300][ T5703] dvb-usb: error while querying for an remote control event. [ 416.306316][ T187] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0019/input/input41 [ 416.387536][ T187] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0019/input/input39 [ 416.430911][T11543] bond0: (slave vlan2): Opening slave failed [ 416.439074][ T9] m920x_read = error: -19 [ 416.455680][ T9] dvb-usb: error while querying for an remote control event. [ 416.489758][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.557566][ T9] m920x_read = error: -19 [ 416.562266][ T9] dvb-usb: error while querying for an remote control event. [ 416.676475][ T9] m920x_read = error: -19 [ 416.683419][ T9] dvb-usb: error while querying for an remote control event. [ 416.784017][ T9] m920x_read = error: -19 [ 416.794484][ T9] dvb-usb: error while querying for an remote control event. [ 416.894033][ T9] m920x_read = error: -19 [ 416.898664][ T9] dvb-usb: error while querying for an remote control event. [ 416.986698][T11547] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1630'. [ 417.004659][ T9] m920x_read = error: -19 [ 417.009068][ T9] dvb-usb: error while querying for an remote control event. [ 417.124029][ T10] m920x_read = error: -19 [ 417.128520][ T10] dvb-usb: error while querying for an remote control event. [ 417.234009][ T10] m920x_read = error: -19 [ 417.243682][ T10] dvb-usb: error while querying for an remote control event. [ 417.344093][ T10] m920x_read = error: -19 [ 417.348760][ T10] dvb-usb: error while querying for an remote control event. [ 417.591819][ T10] m920x_read = error: -19 [ 417.596569][ T10] dvb-usb: error while querying for an remote control event. [ 417.730356][ T10] m920x_read = error: -19 [ 417.743258][ T10] dvb-usb: error while querying for an remote control event. [ 417.874418][ T10] m920x_read = error: -19 [ 417.879717][ T10] dvb-usb: error while querying for an remote control event. [ 417.895371][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 417.914971][T11568] bridge_slave_1: left allmulticast mode [ 417.920633][T11568] bridge_slave_1: left promiscuous mode [ 417.960045][T11568] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.987061][T11568] bridge_slave_0: left allmulticast mode [ 418.004458][ T10] m920x_read = error: -19 [ 418.010379][ T10] dvb-usb: error while querying for an remote control event. [ 418.098200][T11568] bridge_slave_0: left promiscuous mode [ 418.105071][ T10] m920x_read = error: -19 [ 418.105097][ T10] dvb-usb: error while querying for an remote control event. [ 418.133389][T11568] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.223998][ T10] m920x_read = error: -19 [ 418.230269][ T10] dvb-usb: error while querying for an remote control event. [ 418.338399][ T10] m920x_read = error: -19 [ 418.346850][ T10] dvb-usb: error while querying for an remote control event. [ 418.447145][ T10] m920x_read = error: -19 [ 418.452974][ T10] dvb-usb: error while querying for an remote control event. [ 418.598876][ T10] m920x_read = error: -19 [ 418.603552][ T10] dvb-usb: error while querying for an remote control event. [ 418.704442][ T10] m920x_read = error: -19 [ 418.713866][ T10] dvb-usb: error while querying for an remote control event. [ 418.814227][ T10] m920x_read = error: -19 [ 418.823842][ T10] dvb-usb: error while querying for an remote control event. [ 418.935232][ T10] m920x_read = error: -19 [ 418.943020][ T10] dvb-usb: error while querying for an remote control event. [ 419.042045][ T10] m920x_read = error: -19 [ 419.058359][ T10] dvb-usb: error while querying for an remote control event. [ 419.146662][ T10] m920x_read = error: -19 [ 419.151583][ T10] dvb-usb: error while querying for an remote control event. [ 419.194953][T11601] syzkaller0: entered promiscuous mode [ 419.200589][T11601] syzkaller0: entered allmulticast mode [ 419.264299][ T9] m920x_read = error: -19 [ 419.270909][ T9] dvb-usb: error while querying for an remote control event. [ 419.379008][ T9] m920x_read = error: -19 [ 419.383753][ T9] dvb-usb: error while querying for an remote control event. [ 419.484095][ T9] m920x_read = error: -19 [ 419.489210][ T9] dvb-usb: error while querying for an remote control event. [ 419.635169][ T9] m920x_read = error: -19 [ 419.645375][ T9] dvb-usb: error while querying for an remote control event. [ 419.754122][ T9] m920x_read = error: -19 [ 419.758788][ T9] dvb-usb: error while querying for an remote control event. [ 419.914579][ T9] m920x_read = error: -19 [ 419.919325][ T9] dvb-usb: error while querying for an remote control event. [ 420.025272][ T9] m920x_read = error: -19 [ 420.030911][ T9] dvb-usb: error while querying for an remote control event. [ 420.042368][T11615] input: syz1 as /devices/virtual/input/input42 [ 420.134236][ T9] m920x_read = error: -19 [ 420.143477][ T9] dvb-usb: error while querying for an remote control event. [ 420.243942][ T9] m920x_read = error: -19 [ 420.248358][ T9] dvb-usb: error while querying for an remote control event. [ 420.355347][ T9] m920x_read = error: -19 [ 420.365741][ T9] dvb-usb: error while querying for an remote control event. [ 420.464200][ T9] m920x_read = error: -19 [ 420.468662][ T9] dvb-usb: error while querying for an remote control event. [ 420.530217][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 420.530236][ T29] audit: type=1326 audit(1787291837.804:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.2.1659" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 420.561139][ T29] audit: type=1326 audit(1787291837.804:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.2.1659" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 420.577472][ T9] m920x_read = error: -19 [ 420.590459][ T29] audit: type=1326 audit(1787291837.804:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.2.1659" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 420.617034][ T9] dvb-usb: error while querying for an remote control event. [ 420.665931][ T29] audit: type=1326 audit(1787291837.804:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.2.1659" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 420.700428][ T29] audit: type=1326 audit(1787291837.804:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11622 comm="syz.2.1659" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c41b9e0d9 code=0x7ffc0000 [ 420.745672][ T9] m920x_read = error: -19 [ 420.750265][ T9] dvb-usb: error while querying for an remote control event. [ 420.841616][T11629] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1661'. [ 420.868540][ T9] m920x_read = error: -19 [ 420.873071][ T9] dvb-usb: error while querying for an remote control event. [ 421.013800][ T9] m920x_read = error: -19 [ 421.025240][T11629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.044684][ T9] dvb-usb: error while querying for an remote control event. [ 421.108224][T11629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.134793][ T9] m920x_read = error: -19 [ 421.144960][ T9] dvb-usb: error while querying for an remote control event. [ 421.192189][T11629] bond0 (unregistering): Released all slaves [ 421.246079][ T9] m920x_read = error: -19 [ 421.253695][ T9] dvb-usb: error while querying for an remote control event. [ 421.356067][ T9] m920x_read = error: -19 [ 421.371969][ T9] dvb-usb: error while querying for an remote control event. [ 421.467816][ T9] m920x_read = error: -19 [ 421.472452][ T9] dvb-usb: error while querying for an remote control event. [ 421.573998][ T9] m920x_read = error: -19 [ 421.583355][ T9] dvb-usb: error while querying for an remote control event. [ 421.684460][ T5703] m920x_read = error: -19 [ 421.689080][ T5703] dvb-usb: error while querying for an remote control event. [ 421.848034][ T187] m920x_read = error: -19 [ 421.854296][ T187] dvb-usb: error while querying for an remote control event. [ 421.974084][ T187] m920x_read = error: -19 [ 421.978799][ T187] dvb-usb: error while querying for an remote control event. [ 422.134556][ T187] m920x_read = error: -19 [ 422.139144][ T187] dvb-usb: error while querying for an remote control event. [ 422.247116][ T187] m920x_read = error: -19 [ 422.251833][ T187] dvb-usb: error while querying for an remote control event. [ 422.355650][ T187] m920x_read = error: -19 [ 422.360223][ T187] dvb-usb: error while querying for an remote control event. [ 422.464237][ T187] m920x_read = error: -19 [ 422.468834][ T187] dvb-usb: error while querying for an remote control event. [ 422.587687][ T187] m920x_read = error: -19 [ 422.592279][ T187] dvb-usb: error while querying for an remote control event. [ 422.694971][ T187] m920x_read = error: -19 [ 422.710271][ T187] dvb-usb: error while querying for an remote control event. [ 422.804173][ T187] m920x_read = error: -19 [ 422.808803][ T187] dvb-usb: error while querying for an remote control event. [ 422.914257][ T187] m920x_read = error: -19 [ 422.918805][ T187] dvb-usb: error while querying for an remote control event. [ 423.024229][ T187] m920x_read = error: -19 [ 423.028758][ T187] dvb-usb: error while querying for an remote control event. [ 423.138105][ T5667] m920x_read = error: -19 [ 423.142698][ T5667] dvb-usb: error while querying for an remote control event. [ 423.455917][ T187] m920x_read = error: -19 [ 423.476138][ T187] dvb-usb: error while querying for an remote control event. [ 423.629002][ T187] m920x_read = error: -19 [ 423.643923][ T187] dvb-usb: error while querying for an remote control event. [ 423.738375][T11685] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 423.747815][T11685] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 423.780017][T11688] team0: Device xfrm0 is of different type [ 423.819072][ T5667] m920x_read = error: -19 [ 423.829207][ T5667] dvb-usb: error while querying for an remote control event. [ 423.964067][ T187] m920x_read = error: -19 [ 423.968580][ T187] dvb-usb: error while querying for an remote control event. [ 424.074190][ T187] m920x_read = error: -19 [ 424.084382][ T187] dvb-usb: error while querying for an remote control event. [ 424.184808][ T187] m920x_read = error: -19 [ 424.189390][ T187] dvb-usb: error while querying for an remote control event. [ 424.290122][ T7222] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 424.295177][ T187] m920x_read = error: -19 [ 424.306667][ T187] dvb-usb: error while querying for an remote control event. [ 424.404398][ T187] m920x_read = error: -19 [ 424.408832][ T187] dvb-usb: error while querying for an remote control event. [ 424.506564][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 424.557785][ T187] m920x_read = error: -19 [ 424.568062][ T187] dvb-usb: error while querying for an remote control event. [ 424.601341][T11705] ªªªªªª: renamed from vlan0 [ 424.664876][ T187] m920x_read = error: -19 [ 424.670813][ T187] dvb-usb: error while querying for an remote control event. [ 424.742551][T11709] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1694'. [ 424.784286][ T187] m920x_read = error: -19 [ 424.788902][ T187] dvb-usb: error while querying for an remote control event. [ 424.894107][ T187] m920x_read = error: -19 [ 424.898847][ T187] dvb-usb: error while querying for an remote control event. [ 424.945741][ T7222] usb 4-1: Using ep0 maxpacket: 8 [ 425.005801][ T187] m920x_read = error: -19 [ 425.072003][ T187] dvb-usb: error while querying for an remote control event. [ 425.175249][ T187] m920x_read = error: -19 [ 425.200194][ T187] dvb-usb: error while querying for an remote control event. [ 425.383495][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 425.385724][ T187] m920x_read = error: -19 [ 425.485899][ T187] dvb-usb: error while querying for an remote control event. [ 425.509234][T11712] tipc: Failed to remove unknown binding: 66,0,0/0:2421846220/2421846221 [ 425.617093][ T187] m920x_read = error: -19 [ 425.634216][ T187] dvb-usb: error while querying for an remote control event. [ 425.705091][T11720] xt_hashlimit: size too large, truncated to 1048576 [ 425.725826][ T187] m920x_read = error: -19 [ 425.732592][ T187] dvb-usb: error while querying for an remote control event. [ 425.838532][ T7222] usb 4-1: unable to get BOS descriptor or descriptor too short [ 425.844442][ T187] m920x_read = error: -19 [ 425.846269][ T7222] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 425.851517][ T187] dvb-usb: error while querying for an remote control event. [ 425.859706][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.877886][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.005639][ T187] m920x_read = error: -19 [ 426.007872][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.010907][ T187] dvb-usb: error while querying for an remote control event. [ 426.026694][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.041386][ T24] usb 2-1: config 0 descriptor?? [ 426.128107][T11720] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 426.175724][ T187] m920x_read = error: -19 [ 426.180369][ T187] dvb-usb: error while querying for an remote control event. [ 426.213360][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.225994][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.278343][ T7222] usb 4-1: config 4 interface 0 has no altsetting 0 [ 426.285392][ T187] m920x_read = error: -19 [ 426.291660][ T187] dvb-usb: error while querying for an remote control event. [ 426.408925][ T187] m920x_read = error: -19 [ 426.423331][ T187] dvb-usb: error while querying for an remote control event. [ 426.504089][ T187] m920x_read = error: -19 [ 426.582898][ T187] dvb-usb: error while querying for an remote control event. [ 426.724003][ T187] m920x_read = error: -19 [ 426.728555][ T187] dvb-usb: error while querying for an remote control event. [ 426.834807][ T187] m920x_read = error: -19 [ 426.843254][ T187] dvb-usb: error while querying for an remote control event. [ 426.944052][ T187] m920x_read = error: -19 [ 426.948511][ T187] dvb-usb: error while querying for an remote control event. [ 426.957611][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 426.970855][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 426.978396][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 427.003331][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 427.010865][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 427.018289][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 427.025703][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 427.033126][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 427.059089][ T187] m920x_read = error: -19 [ 427.065017][ T187] dvb-usb: error while querying for an remote control event. [ 427.109699][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 427.117252][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 427.156657][T11746] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 427.163274][T11746] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 427.175782][ T187] m920x_read = error: -19 [ 427.177712][ T7222] usb 4-1: string descriptor 0 read error: -71 [ 427.183379][ T187] dvb-usb: error while querying for an remote control event. [ 427.186535][ T7222] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 427.234790][ T24] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 427.284194][ T187] m920x_read = error: -19 [ 427.288966][ T187] dvb-usb: error while querying for an remote control event. [ 427.302469][ T7222] usb 4-1: can't set config #4, error -71 [ 427.369020][ T7222] usb 4-1: USB disconnect, device number 71 [ 427.394064][ T187] m920x_read = error: -19 [ 427.417947][ T187] dvb-usb: error while querying for an remote control event. [ 427.619231][ T187] m920x_read = error: -19 [ 427.624296][ T187] dvb-usb: error while querying for an remote control event. [ 427.723833][ T187] m920x_read = error: -19 [ 427.729361][ T187] dvb-usb: error while querying for an remote control event. [ 427.944556][ T187] m920x_read = error: -19 [ 427.949194][ T187] dvb-usb: error while querying for an remote control event. [ 428.123679][ T187] m920x_read = error: -19 [ 428.128983][ T187] dvb-usb: error while querying for an remote control event. [ 428.224449][ T187] m920x_read = error: -19 [ 428.229130][ T187] dvb-usb: error while querying for an remote control event. [ 428.335323][ T5667] m920x_read = error: -19 [ 428.341393][ T5667] dvb-usb: error while querying for an remote control event. [ 428.444164][ T5667] m920x_read = error: -19 [ 428.453672][ T5667] dvb-usb: error while querying for an remote control event. [ 428.554255][ T5667] m920x_read = error: -19 [ 428.558896][ T5667] dvb-usb: error while querying for an remote control event. [ 428.665664][ T5667] m920x_read = error: -19 [ 428.673525][ T5667] dvb-usb: error while querying for an remote control event. [ 428.774470][ T5667] m920x_read = error: -19 [ 428.797955][ T5667] dvb-usb: error while querying for an remote control event. [ 429.036809][ T5667] m920x_read = error: -19 [ 429.044995][ T5667] dvb-usb: error while querying for an remote control event. [ 429.083525][T11744] syz.2.1705 (11744): drop_caches: 2 [ 429.248383][ T5667] m920x_read = error: -19 [ 429.294136][ T5667] dvb-usb: error while querying for an remote control event. [ 429.352018][T11782] pim6reg: entered allmulticast mode [ 429.385125][ T5667] m920x_read = error: -19 [ 429.389629][ T5667] dvb-usb: error while querying for an remote control event. [ 429.554669][ T5667] m920x_read = error: -19 [ 429.567770][ T5667] dvb-usb: error while querying for an remote control event. [ 429.780953][T11784] syz_tun: entered allmulticast mode [ 429.799629][ T24] usb 2-1: USB disconnect, device number 90 [ 429.825548][ T5667] m920x_read = error: -19 [ 429.842936][ T5667] dvb-usb: error while querying for an remote control event. [ 429.983924][ T5667] m920x_read = error: -19 [ 429.993132][ T5667] dvb-usb: error while querying for an remote control event. [ 430.096744][ T5667] m920x_read = error: -19 [ 430.104162][ T5667] dvb-usb: error while querying for an remote control event. [ 430.257418][ T5667] m920x_read = error: -19 [ 430.282003][ T5667] dvb-usb: error while querying for an remote control event. [ 430.373948][ T5667] m920x_read = error: -19 [ 430.393309][ T5667] dvb-usb: error while querying for an remote control event. [ 430.474026][ T5667] m920x_read = error: -19 [ 430.478590][ T5667] dvb-usb: error while querying for an remote control event. [ 430.594381][ T5667] m920x_read = error: -19 [ 430.598872][ T5667] dvb-usb: error while querying for an remote control event. [ 430.724056][ T5667] m920x_read = error: -19 [ 430.728541][ T5667] dvb-usb: error while querying for an remote control event. [ 430.846075][ T5667] m920x_read = error: -19 [ 430.857344][ T5667] dvb-usb: error while querying for an remote control event. [ 430.886755][T11816] loop7: detected capacity change from 0 to 7 [ 430.903891][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 430.935050][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 430.944707][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 430.965921][ T5667] m920x_read = error: -19 [ 430.983240][ T5667] dvb-usb: error while querying for an remote control event. [ 431.015378][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.025113][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 431.035890][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.045553][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 431.053580][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.063320][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 431.073601][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.083331][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 431.095923][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 431.098459][ T5667] m920x_read = error: -19 [ 431.105715][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.105847][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 431.124517][ T5667] dvb-usb: error while querying for an remote control event. [ 431.129548][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.144432][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 431.153011][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 431.162804][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 431.170928][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 431.179018][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 431.187363][T11816] ldm_validate_partition_table(): Disk read failed. [ 431.264123][ T5667] m920x_read = error: -19 [ 431.268751][ T5667] dvb-usb: error while querying for an remote control event. [ 431.295768][T11816] Dev loop7: unable to read RDB block 0 [ 431.326624][T11816] loop7: unable to read partition table [ 431.355532][T11816] loop7: partition table beyond EOD, truncated [ 431.375771][ T5667] m920x_read = error: -19 [ 431.380356][ T5667] dvb-usb: error while querying for an remote control event. [ 431.394877][T11816] loop_reread_partitions: partition scan of loop7 (úù) failed (rc=-5) [ 431.484223][ T5667] m920x_read = error: -19 [ 431.488925][ T5667] dvb-usb: error while querying for an remote control event. [ 431.594022][ T5667] m920x_read = error: -19 [ 431.598963][ T5667] dvb-usb: error while querying for an remote control event. [ 431.764265][ T5667] m920x_read = error: -19 [ 431.797952][ T5667] dvb-usb: error while querying for an remote control event. [ 431.925551][ T5667] m920x_read = error: -19 [ 431.955061][ T5667] dvb-usb: error while querying for an remote control event. [ 432.083999][ T5667] m920x_read = error: -19 [ 432.088535][ T5667] dvb-usb: error while querying for an remote control event. [ 432.218256][ T5667] m920x_read = error: -19 [ 432.222682][ T5667] dvb-usb: error while querying for an remote control event. [ 432.328536][ T5667] m920x_read = error: -19 [ 432.333031][ T5667] dvb-usb: error while querying for an remote control event. [ 432.434063][ T5667] m920x_read = error: -19 [ 432.451370][ T5667] dvb-usb: error while querying for an remote control event. [ 432.561911][ T5703] m920x_read = error: -19 [ 432.574506][ T5703] dvb-usb: error while querying for an remote control event. [ 432.714485][ T5703] m920x_read = error: -19 [ 432.732503][ T5703] dvb-usb: error while querying for an remote control event. [ 432.815343][ T5703] m920x_read = error: -19 [ 432.819821][ T5703] dvb-usb: error while querying for an remote control event. [ 432.925074][ T5703] m920x_read = error: -19 [ 432.929649][ T5703] dvb-usb: error while querying for an remote control event. [ 433.034683][ T5703] m920x_read = error: -19 [ 433.040144][ T5703] dvb-usb: error while querying for an remote control event. [ 433.144373][ T5703] m920x_read = error: -19 [ 433.149794][ T5703] dvb-usb: error while querying for an remote control event. [ 433.257259][ T5667] m920x_read = error: -19 [ 433.262538][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.278195][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.295341][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.302073][ T5667] dvb-usb: error while querying for an remote control event. [ 433.330639][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.340830][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 433.434760][ T5667] m920x_read = error: -19 [ 433.452769][ T5667] dvb-usb: error while querying for an remote control event. [ 433.593980][ T5667] m920x_read = error: -19 [ 433.598582][ T5667] dvb-usb: error while querying for an remote control event. [ 433.705988][ T5703] m920x_read = error: -19 [ 433.712084][ T5703] dvb-usb: error while querying for an remote control event. [ 433.814153][ T5703] m920x_read = error: -19 [ 433.818560][ T5703] dvb-usb: error while querying for an remote control event. [ 433.935801][ T5667] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 433.954597][ T5703] m920x_read = error: -19 [ 433.959314][ T5703] dvb-usb: error while querying for an remote control event. [ 434.104276][ T5703] m920x_read = error: -19 [ 434.108696][ T5703] dvb-usb: error while querying for an remote control event. [ 434.167911][T11871] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.175264][T11871] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.182465][T11871] bridge_slave_0: entered allmulticast mode [ 434.190099][T11871] bridge_slave_0: entered promiscuous mode [ 434.200017][ T5667] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 434.211643][T11871] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.220103][ T187] m920x_read = error: -19 [ 434.228293][ T187] dvb-usb: error while querying for an remote control event. [ 434.236396][ T5667] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 434.244788][T11871] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.251916][ T5667] usb 2-1: config 0 has no interface number 0 [ 434.258325][T11871] bridge_slave_1: entered allmulticast mode [ 434.265342][ T5667] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.278186][T11871] bridge_slave_1: entered promiscuous mode [ 434.286584][ T5667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.305011][ T5667] usb 2-1: Product: syz [ 434.314015][ T5667] usb 2-1: Manufacturer: syz [ 434.323219][ T5667] usb 2-1: SerialNumber: syz [ 434.334225][ T187] m920x_read = error: -19 [ 434.342884][ T187] dvb-usb: error while querying for an remote control event. [ 434.355077][ T5667] usb 2-1: config 0 descriptor?? [ 434.371011][T11871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.396140][ T5667] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 434.407189][T11871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.475366][T11871] team0: Port device team_slave_0 added [ 434.485367][T11871] team0: Port device team_slave_1 added [ 434.496693][ T5667] m920x_read = error: -19 [ 434.501316][ T5667] dvb-usb: error while querying for an remote control event. [ 434.565483][T11871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.572539][T11871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.609961][T11871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.624407][T11871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.626171][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 434.631615][T11871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.640354][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1755'. [ 434.677418][ T5667] m920x_read = error: -19 [ 434.682645][ T5667] dvb-usb: error while querying for an remote control event. [ 434.696978][T11871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.808816][ T5667] m920x_read = error: -19 [ 434.813680][ T5667] dvb-usb: error while querying for an remote control event. [ 434.825643][T11871] hsr_slave_0: entered promiscuous mode [ 434.867604][T11871] hsr_slave_1: entered promiscuous mode [ 434.874476][T11871] debugfs: 'hsr0' already exists in 'hsr' [ 434.881311][T11871] Cannot create hsr debugfs directory [ 434.917972][ T5667] m920x_read = error: -19 [ 434.922399][ T5667] dvb-usb: error while querying for an remote control event. [ 435.024104][ T5667] m920x_read = error: -19 [ 435.028649][ T5667] dvb-usb: error while querying for an remote control event. [ 435.125696][ T5667] m920x_read = error: -19 [ 435.130219][ T5667] dvb-usb: error while querying for an remote control event. [ 435.254426][ T5667] m920x_read = error: -19 [ 435.259032][ T5667] dvb-usb: error while querying for an remote control event. [ 435.374962][ T187] m920x_read = error: -19 [ 435.379547][ T187] dvb-usb: error while querying for an remote control event. [ 435.387260][ T5612] Bluetooth: hci2: command tx timeout [ 435.491931][ T5703] m920x_read = error: -19 [ 435.511953][ T5703] dvb-usb: error while querying for an remote control event. [ 435.553708][T11871] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 435.596677][T11871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.604570][T11871] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 435.618381][ T5703] m920x_read = error: -19 [ 435.628357][ T5703] dvb-usb: error while querying for an remote control event. [ 435.644321][T11871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.667248][T11871] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 435.705496][ T5703] m920x_read = error: -19 [ 435.719455][ T5703] dvb-usb: error while querying for an remote control event. [ 435.809323][T11871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.817439][ T187] m920x_read = error: -19 [ 435.821842][ T187] dvb-usb: error while querying for an remote control event. [ 435.832062][T11871] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 435.859372][T11871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.923908][ T187] m920x_read = error: -19 [ 435.936636][ T187] dvb-usb: error while querying for an remote control event. [ 436.048213][ T5667] m920x_read = error: -19 [ 436.056722][ T5667] dvb-usb: error while querying for an remote control event. [ 436.154563][ T5667] m920x_read = error: -19 [ 436.166040][ T5667] dvb-usb: error while querying for an remote control event. [ 436.177387][T11871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.197855][ T29] audit: type=1326 audit(1787291853.434:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.1764" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3303d9e0d9 code=0x7ffc0000 [ 436.234979][ T29] audit: type=1326 audit(1787291853.434:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.1764" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3303d9e0d9 code=0x7ffc0000 [ 436.271138][ T5667] m920x_read = error: -19 [ 436.271165][ T5667] dvb-usb: error while querying for an remote control event. [ 436.298577][T11871] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.312999][ T734] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.321083][ T734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.332003][ T29] audit: type=1326 audit(1787291853.494:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.1764" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3303d9e0d9 code=0x7ffc0000 [ 436.383300][ T29] audit: type=1326 audit(1787291853.494:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.1764" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3303d9e0d9 code=0x7ffc0000 [ 436.396424][ T187] m920x_read = error: -19 [ 436.407593][ T29] audit: type=1326 audit(1787291853.494:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.1764" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3303d9e0d9 code=0x7ffc0000 [ 436.407647][ T29] audit: type=1326 audit(1787291853.494:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.1764" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3303d9e0d9 code=0x7ffc0000 [ 436.474681][ T187] dvb-usb: error while querying for an remote control event. [ 436.510669][ T29] audit: type=1326 audit(1787291853.494:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.1764" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3303d9e0d9 code=0x7ffc0000 [ 436.534970][ T29] audit: type=1326 audit(1787291853.494:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.1764" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3303d9e0d9 code=0x7ffc0000 [ 436.569104][ T734] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.576362][ T734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.604525][ T5667] m920x_read = error: -19 [ 436.609198][ T5667] dvb-usb: error while querying for an remote control event. [ 436.619136][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 436.673466][ T29] audit: type=1326 audit(1787291853.494:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11927 comm="syz.3.1764" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3303d9e0d9 code=0x7ffc0000 [ 436.727388][ T5667] m920x_read = error: -19 [ 436.753230][ T5667] dvb-usb: error while querying for an remote control event. [ 436.762760][T11871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.799140][ T5667] usb 2-1: USB disconnect, device number 91 [ 436.859706][T11871] veth0_vlan: entered promiscuous mode [ 436.865287][ T5667] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 436.898512][T11871] veth1_vlan: entered promiscuous mode [ 436.900567][ T9] m920x_read = error: -19 [ 436.918760][ T9] dvb-usb: error while querying for an remote control event. [ 437.018896][T11871] veth0_macvtap: entered promiscuous mode [ 437.035502][T11871] veth1_macvtap: entered promiscuous mode [ 437.054274][ T10] m920x_read = error: -19 [ 437.058747][ T10] dvb-usb: error while querying for an remote control event. [ 437.164380][ T5667] m920x_read = error: -19 [ 437.172576][ T5667] dvb-usb: error while querying for an remote control event. [ 437.191786][T11871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.210870][T11871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.274230][ T734] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.280082][ T5667] m920x_read = error: -19 [ 437.291568][ T734] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.300365][ T734] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.309094][ T734] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.329400][ T5667] dvb-usb: error while querying for an remote control event. [ 437.438205][ T9] m920x_read = error: -19 [ 437.445309][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.474800][ T9] dvb-usb: error while querying for an remote control event. [ 437.491495][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.499961][ T5612] Bluetooth: hci2: command tx timeout [ 437.555847][T11951] ------------[ cut here ]------------ [ 437.562039][T11951] softleaf_cached_writable(entry) [ 437.562059][T11951] WARNING: mm/page_table_check.c:206 at __page_table_check_ptes_set+0x186/0x340, CPU#1: syz.3.1775/11951 [ 437.578311][T11951] Modules linked in: [ 437.582671][T11951] CPU: 1 UID: 0 PID: 11951 Comm: syz.3.1775 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.593609][T11951] Tainted: [L]=SOFTLOCKUP [ 437.607032][T11951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.617126][T11951] RIP: 0010:__page_table_check_ptes_set+0x186/0x340 [ 437.623753][T11951] Code: 89 fe e8 cd 0b 85 ff 48 b8 00 00 00 00 00 00 00 94 4c 01 f8 48 c1 e8 3b 0f 94 c0 4d 39 e5 76 0f 84 c0 74 0b e8 eb 05 85 ff 90 <0f> 0b 90 eb 05 e8 e0 05 85 ff 31 ff 89 ee e8 d7 0a 85 ff 89 e8 85 [ 437.643372][T11951] RSP: 0000:ffffc90003d47030 EFLAGS: 00010287 [ 437.649452][T11951] RAX: ffffffff82422af5 RBX: dfffe7fff6485001 RCX: 0000000000080000 [ 437.657428][T11951] RDX: ffffc9000ea51000 RSI: 000000000001d58d RDI: 000000000001d58e [ 437.665434][T11951] RBP: 0000000000000001 R08: 0000000000000001 R09: 1ffffd400026deb8 [ 437.673445][T11951] R10: dffffc0000000000 R11: fffff9400026deb9 R12: c7fffffffffffffe [ 437.681442][T11951] R13: dfffe7fff6485006 R14: ffff8880429f7000 R15: 6c00000000000000 [ 437.689441][T11951] FS: 00007f3301ff66c0(0000) GS:ffff88812501a000(0000) knlGS:0000000000000000 [ 437.698370][T11951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.704953][T11951] CR2: 000055557d3c3a38 CR3: 0000000036852000 CR4: 00000000003526f0 [ 437.721347][T11951] Call Trace: [ 437.724752][T11951] [ 437.727688][T11951] ? folio_try_share_anon_rmap_pte+0x6c7/0xb60 [ 437.733864][T11951] try_to_migrate_one+0x1f83/0x2ac0 [ 437.739077][T11951] ? try_to_migrate_one+0x586/0x2ac0 [ 437.744398][T11951] ? try_to_migrate_one+0x586/0x2ac0 [ 437.749702][T11951] ? __pfx_try_to_migrate_one+0x10/0x10 [ 437.755263][T11951] ? reacquire_held_locks+0x104/0x190 [ 437.760649][T11951] ? folio_lock_anon_vma_read+0x322/0xa50 [ 437.766393][T11951] ? anon_vma_interval_tree_iter_first+0x273/0x280 [ 437.772911][T11951] ? __pfx_try_to_migrate_one+0x10/0x10 [ 437.778470][T11951] rmap_walk_anon+0x5e3/0x7d0 [ 437.783208][T11951] try_to_migrate+0x33d/0x400 [ 437.787915][T11951] ? __pfx_try_to_migrate+0x10/0x10 [ 437.793132][T11951] ? __pfx_try_to_migrate_one+0x10/0x10 [ 437.798694][T11951] ? __pfx_folio_not_mapped+0x10/0x10 [ 437.804075][T11951] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 437.810149][T11951] ? __pfx_invalid_migration_vma+0x10/0x10 [ 437.815965][T11951] ? folio_get_anon_vma+0xa8/0x680 [ 437.829208][T11951] ? folio_get_anon_vma+0xa8/0x680 [ 437.834345][T11951] ? folio_get_anon_vma+0x464/0x680 [ 437.839565][T11951] ? folio_get_anon_vma+0xa8/0x680 [ 437.844689][T11951] migrate_pages_batch+0x1c00/0x4e50 [ 437.850033][T11951] ? __pfx_alloc_migration_target+0x10/0x10 [ 437.855950][T11951] ? __pfx_migrate_pages_batch+0x10/0x10 [ 437.861611][T11951] ? __pfx_queue_folios_pte_range+0x10/0x10 [ 437.867504][T11951] ? schedule+0x90/0x2b0 [ 437.871789][T11951] ? walk_pgd_range+0x1d60/0x1e40 [ 437.876849][T11951] migrate_pages+0x1b9f/0x2920 [ 437.881658][T11951] ? __pfx_alloc_migration_target+0x10/0x10 [ 437.887572][T11951] ? __walk_page_range+0x6c1/0x720 [ 437.892706][T11951] ? __pfx_migrate_pages+0x10/0x10 [ 437.897829][T11951] ? queue_pages_test_walk+0x3dc/0x410 [ 437.903309][T11951] ? walk_page_range_mm_unsafe+0x595/0x680 [ 437.909140][T11951] ? __pfx___up_read+0x10/0x10 [ 437.913921][T11951] do_migrate_pages+0x656/0x8b0 [ 437.918800][T11951] ? __pfx_do_migrate_pages+0x10/0x10 [ 437.924190][T11951] ? rcu_is_watching+0x16/0xb0 [ 437.937903][T11951] ? security_capable+0xb9/0x2c0 [ 437.942876][T11951] __se_sys_migrate_pages+0xaa2/0xc90 [ 437.948277][T11951] ? __se_sys_futex+0x3a8/0x450 [ 437.953140][T11951] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 437.959091][T11951] ? rcu_is_watching+0x16/0xb0 [ 437.963888][T11951] do_syscall_64+0x166/0x520 [ 437.968504][T11951] ? trace_irq_disable+0x3b/0x140 [ 437.973551][T11951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.979635][T11951] ? clear_bhb_loop+0x70/0xc0 [ 437.984326][T11951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.990325][T11951] RIP: 0033:0x7f3303d9e0d9 [ 437.994754][T11951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.014396][T11951] RSP: 002b:00007f3301ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 438.022832][T11951] RAX: ffffffffffffffda RBX: 00007f3304026090 RCX: 00007f3303d9e0d9 [ 438.030808][T11951] RDX: 0000200000000040 RSI: 0000000000000005 RDI: 0000000000000000 [ 438.047980][T11951] RBP: 00007f3303e35024 R08: 0000000000000000 R09: 0000000000000000 [ 438.055994][T11951] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 438.063992][T11951] R13: 00007f3304026128 R14: 00007f3304026090 R15: 00007f330414fa48 [ 438.071995][T11951] [ 438.075048][T11951] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 438.082350][T11951] CPU: 1 UID: 0 PID: 11951 Comm: syz.3.1775 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.093289][T11951] Tainted: [L]=SOFTLOCKUP [ 438.097620][T11951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.107685][T11951] Call Trace: [ 438.110987][T11951] [ 438.113937][T11951] vpanic+0x56d/0xa60 [ 438.117948][T11951] ? __pfx__printk+0x10/0x10 [ 438.122556][T11951] ? __pfx_vpanic+0x10/0x10 [ 438.127073][T11951] ? is_bpf_text_address+0x292/0x2b0 [ 438.132368][T11951] ? is_bpf_text_address+0x26/0x2b0 [ 438.137577][T11951] panic+0xc5/0xd0 [ 438.141318][T11951] ? __pfx_panic+0x10/0x10 [ 438.145774][T11951] __warn+0x315/0x4c0 [ 438.149774][T11951] ? __page_table_check_ptes_set+0x186/0x340 [ 438.155765][T11951] ? __page_table_check_ptes_set+0x186/0x340 [ 438.161762][T11951] __report_bug+0x276/0x570 [ 438.166288][T11951] ? __page_table_check_ptes_set+0x186/0x340 [ 438.172291][T11951] ? __pfx___report_bug+0x10/0x10 [ 438.177329][T11951] ? __lock_acquire+0x683/0x2cf0 [ 438.182297][T11951] ? __mmu_notifier_arch_invalidate_secondary_tlbs+0x52/0x1b0 [ 438.189756][T11951] ? lock_acquire+0x106/0x350 [ 438.194455][T11951] ? __page_table_check_ptes_set+0x186/0x340 [ 438.200451][T11951] report_bug+0x16b/0x220 [ 438.204792][T11951] ? __page_table_check_ptes_set+0x186/0x340 [ 438.210805][T11951] ? __page_table_check_ptes_set+0x188/0x340 [ 438.216832][T11951] handle_bug+0x9c/0x200 [ 438.221088][T11951] exc_invalid_op+0x1a/0x50 [ 438.225611][T11951] asm_exc_invalid_op+0x1a/0x20 [ 438.230509][T11951] RIP: 0010:__page_table_check_ptes_set+0x186/0x340 [ 438.237107][T11951] Code: 89 fe e8 cd 0b 85 ff 48 b8 00 00 00 00 00 00 00 94 4c 01 f8 48 c1 e8 3b 0f 94 c0 4d 39 e5 76 0f 84 c0 74 0b e8 eb 05 85 ff 90 <0f> 0b 90 eb 05 e8 e0 05 85 ff 31 ff 89 ee e8 d7 0a 85 ff 89 e8 85 [ 438.256748][T11951] RSP: 0000:ffffc90003d47030 EFLAGS: 00010287 [ 438.262973][T11951] RAX: ffffffff82422af5 RBX: dfffe7fff6485001 RCX: 0000000000080000 [ 438.270953][T11951] RDX: ffffc9000ea51000 RSI: 000000000001d58d RDI: 000000000001d58e [ 438.278936][T11951] RBP: 0000000000000001 R08: 0000000000000001 R09: 1ffffd400026deb8 [ 438.286935][T11951] R10: dffffc0000000000 R11: fffff9400026deb9 R12: c7fffffffffffffe [ 438.294934][T11951] R13: dfffe7fff6485006 R14: ffff8880429f7000 R15: 6c00000000000000 [ 438.302947][T11951] ? __page_table_check_ptes_set+0x185/0x340 [ 438.309054][T11951] ? folio_try_share_anon_rmap_pte+0x6c7/0xb60 [ 438.315242][T11951] try_to_migrate_one+0x1f83/0x2ac0 [ 438.320468][T11951] ? try_to_migrate_one+0x586/0x2ac0 [ 438.325764][T11951] ? try_to_migrate_one+0x586/0x2ac0 [ 438.331073][T11951] ? __pfx_try_to_migrate_one+0x10/0x10 [ 438.336639][T11951] ? reacquire_held_locks+0x104/0x190 [ 438.342043][T11951] ? folio_lock_anon_vma_read+0x322/0xa50 [ 438.347796][T11951] ? anon_vma_interval_tree_iter_first+0x273/0x280 [ 438.354329][T11951] ? __pfx_try_to_migrate_one+0x10/0x10 [ 438.359937][T11951] rmap_walk_anon+0x5e3/0x7d0 [ 438.364648][T11951] try_to_migrate+0x33d/0x400 [ 438.369356][T11951] ? __pfx_try_to_migrate+0x10/0x10 [ 438.374562][T11951] ? __pfx_try_to_migrate_one+0x10/0x10 [ 438.380129][T11951] ? __pfx_folio_not_mapped+0x10/0x10 [ 438.385548][T11951] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 438.391643][T11951] ? __pfx_invalid_migration_vma+0x10/0x10 [ 438.397479][T11951] ? folio_get_anon_vma+0xa8/0x680 [ 438.402636][T11951] ? folio_get_anon_vma+0xa8/0x680 [ 438.407767][T11951] ? folio_get_anon_vma+0x464/0x680 [ 438.413005][T11951] ? folio_get_anon_vma+0xa8/0x680 [ 438.418143][T11951] migrate_pages_batch+0x1c00/0x4e50 [ 438.423479][T11951] ? __pfx_alloc_migration_target+0x10/0x10 [ 438.429418][T11951] ? __pfx_migrate_pages_batch+0x10/0x10 [ 438.435096][T11951] ? __pfx_queue_folios_pte_range+0x10/0x10 [ 438.441011][T11951] ? schedule+0x90/0x2b0 [ 438.445276][T11951] ? walk_pgd_range+0x1d60/0x1e40 [ 438.450343][T11951] migrate_pages+0x1b9f/0x2920 [ 438.455140][T11951] ? __pfx_alloc_migration_target+0x10/0x10 [ 438.461058][T11951] ? __walk_page_range+0x6c1/0x720 [ 438.466186][T11951] ? __pfx_migrate_pages+0x10/0x10 [ 438.471328][T11951] ? queue_pages_test_walk+0x3dc/0x410 [ 438.476803][T11951] ? walk_page_range_mm_unsafe+0x595/0x680 [ 438.482631][T11951] ? __pfx___up_read+0x10/0x10 [ 438.487410][T11951] do_migrate_pages+0x656/0x8b0 [ 438.492291][T11951] ? __pfx_do_migrate_pages+0x10/0x10 [ 438.497682][T11951] ? rcu_is_watching+0x16/0xb0 [ 438.502460][T11951] ? security_capable+0xb9/0x2c0 [ 438.507406][T11951] __se_sys_migrate_pages+0xaa2/0xc90 [ 438.512795][T11951] ? __se_sys_futex+0x3a8/0x450 [ 438.517654][T11951] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 438.523586][T11951] ? rcu_is_watching+0x16/0xb0 [ 438.528396][T11951] do_syscall_64+0x166/0x520 [ 438.532999][T11951] ? trace_irq_disable+0x3b/0x140 [ 438.538054][T11951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.544147][T11951] ? clear_bhb_loop+0x70/0xc0 [ 438.548857][T11951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.554761][T11951] RIP: 0033:0x7f3303d9e0d9 [ 438.559201][T11951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.578845][T11951] RSP: 002b:00007f3301ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 438.587279][T11951] RAX: ffffffffffffffda RBX: 00007f3304026090 RCX: 00007f3303d9e0d9 [ 438.595261][T11951] RDX: 0000200000000040 RSI: 0000000000000005 RDI: 0000000000000000 [ 438.603247][T11951] RBP: 00007f3303e35024 R08: 0000000000000000 R09: 0000000000000000 [ 438.611422][T11951] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 438.619423][T11951] R13: 00007f3304026128 R14: 00007f3304026090 R15: 00007f330414fa48 [ 438.627439][T11951] [ 438.631061][T11951] Kernel Offset: disabled [ 438.635420][T11951] Rebooting in 86400 seconds..