last executing test programs: 8.55505366s ago: executing program 2 (id=1763): bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4103"], 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000400)=ANY=[], 0x1c) 6.72054876s ago: executing program 2 (id=1774): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000a010101000000000000000000000000ac1414aa00000000000000000000000000000080000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008000100000000000e0000000000000000000000000000000000000000000000ffffffffffffffff040000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20008045, &(0x7f00000000c0)={0xa, 0x2, 0x401, @empty}, 0x1c) 6.281911655s ago: executing program 2 (id=1777): setuid(0xee01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b000000", 0xfe60) 5.594477751s ago: executing program 0 (id=1782): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.429759144s ago: executing program 0 (id=1784): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = io_uring_setup(0x4dee, &(0x7f0000000200)={0x0, 0x3a30, 0x800, 0x4, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 4.85304049s ago: executing program 0 (id=1788): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000100)='$', 0x1, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x40000041, 0x0, 0x0) 4.507846378s ago: executing program 0 (id=1792): unshare(0x28000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x604000000000000) 4.391744634s ago: executing program 2 (id=1794): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.268505377s ago: executing program 0 (id=1796): syz_emit_ethernet(0x2a, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000180)={0x40, 0x14}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.171578541s ago: executing program 3 (id=1803): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) 2.435097657s ago: executing program 4 (id=1805): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000001a80)={&(0x7f0000000040)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000180)="8d", 0x1}], 0x1}, 0x40004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @local, 0x8}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 2.359519016s ago: executing program 1 (id=1806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x44, r2, 0x1, 0x70bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x4f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x93}, 0x24044884) 2.28856593s ago: executing program 3 (id=1807): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 2.00462451s ago: executing program 2 (id=1808): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") 1.845970507s ago: executing program 3 (id=1809): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r2, &(0x7f0000000040)='./file7/file0\x00', &(0x7f0000000100)=ANY=[], 0x0, 0x1200) 1.751718908s ago: executing program 1 (id=1810): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) 1.691691935s ago: executing program 1 (id=1811): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='mtd0\x00', &(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000001540)='./file0\x00') r0 = open(&(0x7f0000000100)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000140)=""/224, 0xe0) 1.607442576s ago: executing program 3 (id=1812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000040)="070000000000000001000000ffffffff0010a5d4e800"/38) ioctl(r2, 0xc048aeca, &(0x7f00000000c0)='\a\x00'/38) 1.424858676s ago: executing program 1 (id=1813): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xfffffed3) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x7, 0x4, 0x81, 0xffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x48040, 0x6ab858183a7ef6ba) 1.42267876s ago: executing program 0 (id=1814): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$dvb_frontend(&(0x7f0000000240), 0x1, 0x802) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) 1.416260639s ago: executing program 4 (id=1815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000210000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="dfc98e1652aecd9e476f00000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) 1.277002196s ago: executing program 4 (id=1816): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000000c0)=0x8000, 0x4) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1) 1.180544433s ago: executing program 3 (id=1817): r0 = mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x96 [ 232.843480][ T7881] dump_stack_lvl+0xe8/0x150 [ 232.843523][ T7881] should_fail_ex+0x46b/0x600 [ 232.843567][ T7881] _copy_from_user+0x2d/0xb0 [ 232.843607][ T7881] __se_sys_mbind+0x3ad/0x10e0 [ 232.843644][ T7881] ? __pfx___se_sys_mbind+0x10/0x10 [ 232.843669][ T7881] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 232.843705][ T7881] ? __se_sys_futex+0x3a8/0x450 [ 232.843742][ T7881] ? rcu_is_watching+0x16/0xb0 [ 232.843775][ T7881] ? __x64_sys_mbind+0x21/0xf0 [ 232.843802][ T7881] do_syscall_64+0x166/0x520 [ 232.843834][ T7881] ? trace_irq_disable+0x3b/0x140 [ 232.843866][ T7881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.843891][ T7881] ? clear_bhb_loop+0x70/0xc0 [ 232.843922][ T7881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.843947][ T7881] RIP: 0033:0x7fbe8f1de2d9 [ 232.843969][ T7881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.843988][ T7881] RSP: 002b:00007fbe8d436028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 232.844014][ T7881] RAX: ffffffffffffffda RBX: 00007fbe8f465fa0 RCX: 00007fbe8f1de2d9 [ 232.844031][ T7881] RDX: 0000000000008001 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 232.844046][ T7881] RBP: 00007fbe8f275888 R08: 00000000000002bb R09: 0000000000000002 [ 232.844061][ T7881] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 232.844075][ T7881] R13: 00007fbe8f466038 R14: 00007fbe8f465fa0 R15: 00007ffd72b07318 [ 232.844112][ T7881] [ 234.385828][ T7899] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 234.478349][ T5316] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 234.629631][ T5316] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 234.658044][ T5316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.266602][ T7932] netlink: 16366 bytes leftover after parsing attributes in process `syz.1.829'. [ 235.359224][ T5316] cxacru_cm: 4 callbacks suppressed [ 235.359251][ T5316] cxacru 4-1:1.0: wrong cm 0xa0 in response to cm 0x91 [ 235.359378][ T5316] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -5 [ 235.359393][ T5316] ATM dev 0: usbatm_atm_init: atm_start failed: -5! [ 235.585819][ T5316] cxacru 4-1:1.0: probe with driver cxacru failed with error -5 [ 235.671988][ T5316] usb 4-1: USB disconnect, device number 8 [ 235.703975][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'. [ 235.738235][ T202] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 235.925599][ T202] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 235.932341][ T202] usb 3-1: config 1 interface 0 altsetting 225 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 235.932505][ T202] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 235.932595][ T202] usb 3-1: config 1 interface 0 has no altsetting 0 [ 235.932690][ T202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.113874][ T202] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 236.310811][ T202] usb 3-1: string descriptor 0 read error: -71 [ 236.454333][ T202] usb 3-1: USB disconnect, device number 9 [ 236.767740][ T7952] bridge0: port 3(vlan2) entered blocking state [ 236.774896][ T7952] bridge0: port 3(vlan2) entered disabled state [ 236.775129][ T7952] vlan2: entered allmulticast mode [ 236.775150][ T7952] dummy0: entered allmulticast mode [ 236.834844][ T7952] vlan2: entered promiscuous mode [ 236.834872][ T7952] dummy0: entered promiscuous mode [ 236.856803][ T7952] bridge0: port 3(vlan2) entered blocking state [ 236.857251][ T7952] bridge0: port 3(vlan2) entered forwarding state [ 238.283250][ T7995] FAULT_INJECTION: forcing a failure. [ 238.283250][ T7995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 238.283297][ T7995] CPU: 1 UID: 0 PID: 7995 Comm: syz.2.850 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 238.283330][ T7995] Tainted: [L]=SOFTLOCKUP [ 238.283338][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 238.283361][ T7995] Call Trace: [ 238.283372][ T7995] [ 238.283383][ T7995] dump_stack_lvl+0xe8/0x150 [ 238.283425][ T7995] should_fail_ex+0x46b/0x600 [ 238.283468][ T7995] prepare_alloc_pages+0x223/0x650 [ 238.283499][ T7995] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 238.283528][ T7995] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 238.283558][ T7995] ? __pfx_policy_nodemask+0x10/0x10 [ 238.283589][ T7995] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 238.283623][ T7995] alloc_pages_mpol+0xd4/0x280 [ 238.283656][ T7995] alloc_pages_noprof+0xd2/0x2f0 [ 238.283688][ T7995] pte_alloc_one+0x22/0x380 [ 238.283722][ T7995] __pte_alloc+0x25/0x1a0 [ 238.283751][ T7995] walk_pgd_range+0xf2b/0x1c30 [ 238.283807][ T7995] ? __pfx_guard_install_set_pte+0x10/0x10 [ 238.283835][ T7995] ? __pfx_guard_install_set_pte+0x10/0x10 [ 238.283862][ T7995] ? __pfx_guard_install_set_pte+0x10/0x10 [ 238.283888][ T7995] ? __pfx_guard_install_set_pte+0x10/0x10 [ 238.283932][ T7995] ? __pfx_walk_pgd_range+0x10/0x10 [ 238.283974][ T7995] __walk_page_range+0x16d/0x730 [ 238.284007][ T7995] ? tlb_flush_mmu+0x8f4/0xa30 [ 238.284049][ T7995] walk_page_range_vma_unsafe+0x309/0x410 [ 238.284082][ T7995] ? __pfx_zap_vma_range+0x10/0x10 [ 238.284113][ T7995] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 238.284153][ T7995] ? ima_match_policy+0x115/0x2230 [ 238.284187][ T7995] madvise_vma_behavior+0x3581/0x4160 [ 238.284234][ T7995] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 238.284265][ T7995] ? __lock_acquire+0x747/0x2de0 [ 238.284310][ T7995] ? __lock_acquire+0x747/0x2de0 [ 238.284355][ T7995] ? __pfx_guard_install_pud_entry+0x10/0x10 [ 238.284381][ T7995] ? __pfx_guard_install_pmd_entry+0x10/0x10 [ 238.284407][ T7995] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 238.284439][ T7995] ? __pfx_guard_install_set_pte+0x10/0x10 [ 238.284468][ T7995] ? __lock_acquire+0x747/0x2de0 [ 238.284504][ T7995] ? rcu_is_watching+0x16/0xb0 [ 238.284528][ T7995] ? trace_hrtimer_start+0x82/0x200 [ 238.284562][ T7995] ? hrtimer_start_range_ns_common+0x7fc/0xb70 [ 238.284596][ T7995] ? __lock_acquire+0x747/0x2de0 [ 238.284658][ T7995] ? reacquire_held_locks+0x117/0x1a0 [ 238.284680][ T7995] ? lock_vma_under_rcu+0x1d1/0x500 [ 238.284727][ T7995] ? lock_vma_under_rcu+0x116/0x500 [ 238.284767][ T7995] ? lock_vma_under_rcu+0x116/0x500 [ 238.284802][ T7995] ? lock_vma_under_rcu+0x45a/0x500 [ 238.284842][ T7995] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 238.284893][ T7995] ? preempt_schedule_thunk+0x16/0x40 [ 238.284928][ T7995] madvise_walk_vmas+0x924/0xb00 [ 238.284962][ T7995] ? try_to_wake_up+0x887/0x1430 [ 238.284993][ T7995] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 238.285026][ T7995] ? blk_start_plug+0x6e/0x1b0 [ 238.285057][ T7995] madvise_do_behavior+0x385/0x540 [ 238.285089][ T7995] ? __pfx_madvise_do_behavior+0x10/0x10 [ 238.285113][ T7995] ? do_raw_spin_lock+0x12b/0x2f0 [ 238.285161][ T7995] do_madvise+0x26f/0x330 [ 238.285196][ T7995] ? __pfx_do_madvise+0x10/0x10 [ 238.285244][ T7995] ? rcu_is_watching+0x16/0xb0 [ 238.285277][ T7995] __x64_sys_madvise+0xa6/0xc0 [ 238.285306][ T7995] do_syscall_64+0x166/0x520 [ 238.285338][ T7995] ? trace_irq_disable+0x3b/0x140 [ 238.285370][ T7995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.285394][ T7995] ? clear_bhb_loop+0x70/0xc0 [ 238.285424][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.285447][ T7995] RIP: 0033:0x7f226c97e2d9 [ 238.285470][ T7995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.285489][ T7995] RSP: 002b:00007f226abd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 238.285515][ T7995] RAX: ffffffffffffffda RBX: 00007f226cc05fa0 RCX: 00007f226c97e2d9 [ 238.285532][ T7995] RDX: 0000000000000066 RSI: 0000000000600722 RDI: 0000200000000000 [ 238.285547][ T7995] RBP: 00007f226ca15888 R08: 0000000000000000 R09: 0000000000000000 [ 238.285562][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.285576][ T7995] R13: 00007f226cc06038 R14: 00007f226cc05fa0 R15: 00007ffec0b12248 [ 238.285615][ T7995] [ 240.249230][ T8032] jffs2: notice: (8032) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.165077][ T8054] netlink: 'syz.0.871': attribute type 11 has an invalid length. [ 241.717273][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 245.510891][ T8171] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 245.510928][ T8171] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 245.630094][ T8171] overlayfs: conflicting lowerdir path [ 246.323032][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 246.535554][ T8188] ip6gretap1: entered allmulticast mode [ 246.646973][ T8188] batman_adv: batadv0: Adding interface: ip6gretap1 [ 246.646997][ T8188] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.647037][ T8188] batman_adv: batadv0: Interface activated: ip6gretap1 [ 247.147016][ T8200] input: syz1 as /devices/virtual/input/input12 [ 247.728161][ T5847] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 247.879731][ T5847] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 247.888329][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.952904][ T5847] usb 1-1: config 0 descriptor?? [ 248.063396][ T5847] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 248.140504][ T37] audit: type=1400 audit(1791895085.352:29): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="e" requested=r pid=8233 comm="syz.4.936" path="/176/file1" dev="tmpfs" ino=936 [ 248.287918][ T8236] netlink: 'syz.3.937': attribute type 1 has an invalid length. [ 248.288837][ T8236] netlink: 'syz.3.937': attribute type 1 has an invalid length. [ 248.288859][ T8236] netlink: 196 bytes leftover after parsing attributes in process `syz.3.937'. [ 248.289297][ T8236] netlink: 'syz.3.937': attribute type 1 has an invalid length. [ 248.802033][ T8243] input: syz0 as /devices/virtual/input/input13 [ 248.854092][ T5847] gspca_stv06xx: I2C: Read error writing address: -71 [ 248.920858][ T5847] usb 1-1: USB disconnect, device number 5 [ 249.398199][ T5316] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 249.605988][ T5316] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 249.626809][ T5316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.678420][ T5316] usb 3-1: config 0 descriptor?? [ 249.929730][ T5316] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 250.597110][ T5316] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 250.597140][ T5316] [drm] Initialized udl on minor 1 [ 250.641506][ T5316] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 250.642018][ T5316] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 250.697974][ T5847] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 251.200650][ T5316] usb 3-1: USB disconnect, device number 10 [ 251.386249][ T5847] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 251.403423][ T5847] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 251.496693][ T8299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.592196][ T8306] tmpfs: Using encoding : utf8-12.1.0 [ 252.276605][ T8266] IPVS: starting estimator thread 0... [ 252.548315][ T8323] IPVS: using max 8 ests per chain, 19200 per kthread [ 253.029720][ T36] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 253.061686][ T8348] caif0: tun_chr_ioctl cmd 1074025672 [ 253.061712][ T8348] caif0: ignored: set checksum disabled [ 253.179028][ T36] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 253.180619][ T36] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.180695][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.238219][ T36] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 253.238524][ T36] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 253.238603][ T36] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 253.245020][ T36] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 253.245124][ T36] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 253.292134][ T36] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 253.297684][ T36] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 253.297787][ T36] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 253.374750][ T36] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 253.836154][ T5888] usb 1-1: USB disconnect, device number 6 [ 253.894150][ T5888] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 253.996210][ T5888] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 253.997951][ T5888] keyspan 1-1:1.0: device disconnected [ 254.783317][ T8388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.987'. [ 256.352569][ T8424] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1005'. [ 256.867771][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1007'. [ 258.028212][ T5316] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 258.183914][ T5316] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 258.187166][ T5316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.187205][ T5316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.187248][ T5316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.286977][ T5316] usb 5-1: config 0 descriptor?? [ 258.476840][ T8475] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 258.491966][ T8475] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 258.708356][ T37] audit: type=1326 audit(1791895095.912:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226c97e2d9 code=0x7ffc0000 [ 258.711644][ T37] audit: type=1326 audit(1791895095.922:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226c97e2d9 code=0x7ffc0000 [ 258.802442][ T37] audit: type=1326 audit(1791895096.012:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f226c97e2d9 code=0x7ffc0000 [ 258.807249][ T5316] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 258.807303][ T5316] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 258.807332][ T5316] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 258.807359][ T5316] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 258.807386][ T5316] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 258.829836][ T37] audit: type=1326 audit(1791895096.012:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226c97e2d9 code=0x7ffc0000 [ 258.830027][ T37] audit: type=1326 audit(1791895096.042:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226c97e2d9 code=0x7ffc0000 [ 258.943157][ T5316] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 259.061047][ T37] audit: type=1326 audit(1791895096.272:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f226c97e2d9 code=0x7ffc0000 [ 259.061106][ T37] audit: type=1326 audit(1791895096.272:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226c97e2d9 code=0x7ffc0000 [ 259.061152][ T37] audit: type=1326 audit(1791895096.272:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226c97e2d9 code=0x7ffc0000 [ 259.062138][ T37] audit: type=1326 audit(1791895096.272:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f226c97e2d9 code=0x7ffc0000 [ 259.076335][ T37] audit: type=1326 audit(1791895096.282:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8476 comm="syz.2.1026" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f226c97e2d9 code=0x7ffc0000 [ 259.465285][ T5316] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 5: -71 [ 259.465330][ T5316] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense calibration info: -71 [ 259.465384][ T5316] playstation 0003:054C:0DF2.0002: Failed to get calibration data from DualSense [ 259.465411][ T5316] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 259.486123][ T8484] FAULT_INJECTION: forcing a failure. [ 259.486123][ T8484] name failslab, interval 1, probability 0, space 0, times 0 [ 259.486239][ T8484] CPU: 1 UID: 0 PID: 8484 Comm: syz.3.1028 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 259.486305][ T8484] Tainted: [L]=SOFTLOCKUP [ 259.486329][ T8484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 259.486371][ T8484] Call Trace: [ 259.486394][ T8484] [ 259.486418][ T8484] dump_stack_lvl+0xe8/0x150 [ 259.486524][ T8484] should_fail_ex+0x46b/0x600 [ 259.486629][ T8484] ? sock_alloc_inode+0x2c/0x1a0 [ 259.486696][ T8484] should_failslab+0xa8/0x100 [ 259.486783][ T8484] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 259.486893][ T8484] ? sock_alloc_inode+0x2c/0x1a0 [ 259.486963][ T8484] ? __pfx_sock_alloc_inode+0x10/0x10 [ 259.487018][ T8484] sock_alloc_inode+0x2c/0x1a0 [ 259.487085][ T8484] ? __pfx_sock_alloc_inode+0x10/0x10 [ 259.487141][ T8484] alloc_inode+0x6a/0x1b0 [ 259.487220][ T8484] __sock_create+0x12d/0x9d0 [ 259.487298][ T8484] ? __might_fault+0xaf/0x130 [ 259.487407][ T8484] __sys_socketpair+0x1c4/0x560 [ 259.487495][ T8484] __x64_sys_socketpair+0x9b/0xb0 [ 259.487575][ T8484] do_syscall_64+0x166/0x520 [ 259.487668][ T8484] ? trace_irq_disable+0x3b/0x140 [ 259.487751][ T8484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.487829][ T8484] ? clear_bhb_loop+0x70/0xc0 [ 259.487916][ T8484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.487968][ T8484] RIP: 0033:0x7fbe8f1de2d9 [ 259.487988][ T8484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.488007][ T8484] RSP: 002b:00007fbe8d436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 259.488031][ T8484] RAX: ffffffffffffffda RBX: 00007fbe8f465fa0 RCX: 00007fbe8f1de2d9 [ 259.488049][ T8484] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 259.488062][ T8484] RBP: 00007fbe8f275888 R08: 0000000000000000 R09: 0000000000000000 [ 259.488076][ T8484] R10: 0000200000002b80 R11: 0000000000000246 R12: 0000000000000000 [ 259.488090][ T8484] R13: 00007fbe8f466038 R14: 00007fbe8f465fa0 R15: 00007ffd72b07318 [ 259.488153][ T8484] [ 259.498593][ T8484] socket: no more sockets [ 259.806217][ T5316] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -71 [ 259.836842][ T5316] usb 5-1: USB disconnect, device number 9 [ 260.415936][ T8502] FAULT_INJECTION: forcing a failure. [ 260.415936][ T8502] name failslab, interval 1, probability 0, space 0, times 0 [ 260.415976][ T8502] CPU: 1 UID: 0 PID: 8502 Comm: syz.4.1034 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 260.416002][ T8502] Tainted: [L]=SOFTLOCKUP [ 260.416009][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 260.416021][ T8502] Call Trace: [ 260.416029][ T8502] [ 260.416038][ T8502] dump_stack_lvl+0xe8/0x150 [ 260.416080][ T8502] should_fail_ex+0x46b/0x600 [ 260.416119][ T8502] ? __d_alloc+0x37/0x6f0 [ 260.416151][ T8502] should_failslab+0xa8/0x100 [ 260.416179][ T8502] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 260.416216][ T8502] ? __d_alloc+0x37/0x6f0 [ 260.416252][ T8502] __d_alloc+0x37/0x6f0 [ 260.416279][ T8502] ? seqcount_lockdep_reader_access+0xea/0x100 [ 260.416316][ T8502] d_alloc_pseudo+0x21/0xc0 [ 260.416348][ T8502] alloc_path_pseudo+0x107/0x220 [ 260.416376][ T8502] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 260.416403][ T8502] ? hugetlb_reserve_pages+0x3d3/0x1120 [ 260.416440][ T8502] alloc_file_pseudo+0xa8/0x1e0 [ 260.416467][ T8502] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 260.416504][ T8502] hugetlb_file_setup+0x3f0/0x630 [ 260.416540][ T8502] ksys_mmap_pgoff+0x1ec/0x720 [ 260.416576][ T8502] ? __x64_sys_mmap+0x7f/0x140 [ 260.416608][ T8502] do_syscall_64+0x166/0x520 [ 260.416655][ T8502] ? trace_irq_disable+0x3b/0x140 [ 260.416685][ T8502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.416710][ T8502] ? clear_bhb_loop+0x70/0xc0 [ 260.416737][ T8502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.416760][ T8502] RIP: 0033:0x7f344537e2d9 [ 260.416782][ T8502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.416804][ T8502] RSP: 002b:00007f34435d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 260.416831][ T8502] RAX: ffffffffffffffda RBX: 00007f3445605fa0 RCX: 00007f344537e2d9 [ 260.416848][ T8502] RDX: 0000000002000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 260.416863][ T8502] RBP: 00007f3445415888 R08: ffffffffffffffff R09: 0000000000000000 [ 260.416880][ T8502] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000000 [ 260.416894][ T8502] R13: 00007f3445606038 R14: 00007f3445605fa0 R15: 00007ffd34bfbb18 [ 260.416931][ T8502] [ 261.243034][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.243123][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.238186][ T202] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 262.434119][ T202] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 262.437846][ T202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 262.437888][ T202] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.437935][ T202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.630188][ T202] usb 5-1: config 0 descriptor?? [ 262.995800][ T8551] FAULT_INJECTION: forcing a failure. [ 262.995800][ T8551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.995846][ T8551] CPU: 1 UID: 0 PID: 8551 Comm: syz.0.1052 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 262.995878][ T8551] Tainted: [L]=SOFTLOCKUP [ 262.995887][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 262.995902][ T8551] Call Trace: [ 262.995912][ T8551] [ 262.995923][ T8551] dump_stack_lvl+0xe8/0x150 [ 262.995970][ T8551] should_fail_ex+0x46b/0x600 [ 262.996010][ T8551] _copy_from_user+0x2d/0xb0 [ 262.996032][ T8551] __se_sys_epoll_ctl+0xbd/0x230 [ 262.996065][ T8551] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 262.996109][ T8551] do_syscall_64+0x166/0x520 [ 262.996137][ T8551] ? trace_irq_disable+0x3b/0x140 [ 262.996165][ T8551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.996185][ T8551] ? clear_bhb_loop+0x70/0xc0 [ 262.996209][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.996230][ T8551] RIP: 0033:0x7f6eff6fe2d9 [ 262.996250][ T8551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.996268][ T8551] RSP: 002b:00007f6efd956028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 262.996290][ T8551] RAX: ffffffffffffffda RBX: 00007f6eff985fa0 RCX: 00007f6eff6fe2d9 [ 262.996306][ T8551] RDX: ffffffffffffffff RSI: 0000000000000001 RDI: 0000000000000003 [ 262.996319][ T8551] RBP: 00007f6eff795888 R08: 0000000000000000 R09: 0000000000000000 [ 262.996332][ T8551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.996344][ T8551] R13: 00007f6eff986038 R14: 00007f6eff985fa0 R15: 00007ffe6e3e18c8 [ 262.996378][ T8551] [ 263.249900][ T202] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 263.249933][ T202] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 263.249958][ T202] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 263.249977][ T202] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 263.249996][ T202] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 263.376965][ T202] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 263.487324][ T202] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device [ 263.487391][ T202] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse [ 263.635082][ T202] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -71 [ 263.661264][ T202] usb 5-1: USB disconnect, device number 10 [ 263.666727][ T8559] FAULT_INJECTION: forcing a failure. [ 263.666727][ T8559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.666776][ T8559] CPU: 0 UID: 0 PID: 8559 Comm: syz.2.1054 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 263.666810][ T8559] Tainted: [L]=SOFTLOCKUP [ 263.666819][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 263.666834][ T8559] Call Trace: [ 263.666843][ T8559] [ 263.666854][ T8559] dump_stack_lvl+0xe8/0x150 [ 263.666898][ T8559] should_fail_ex+0x46b/0x600 [ 263.666943][ T8559] strncpy_from_user+0x36/0x2c0 [ 263.666983][ T8559] do_getname+0x77/0x250 [ 263.667014][ T8559] __se_sys_mq_unlink+0xf7/0x3a0 [ 263.667052][ T8559] ? __pfx___se_sys_mq_unlink+0x10/0x10 [ 263.667099][ T8559] do_syscall_64+0x166/0x520 [ 263.667133][ T8559] ? trace_irq_disable+0x3b/0x140 [ 263.667166][ T8559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.667190][ T8559] ? clear_bhb_loop+0x70/0xc0 [ 263.667219][ T8559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.667243][ T8559] RIP: 0033:0x7f226c97e2d9 [ 263.667264][ T8559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.667284][ T8559] RSP: 002b:00007f226abd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 263.667311][ T8559] RAX: ffffffffffffffda RBX: 00007f226cc05fa0 RCX: 00007f226c97e2d9 [ 263.667329][ T8559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 263.667345][ T8559] RBP: 00007f226ca15888 R08: 0000000000000000 R09: 0000000000000000 [ 263.667360][ T8559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.667374][ T8559] R13: 00007f226cc06038 R14: 00007f226cc05fa0 R15: 00007ffec0b12248 [ 263.667411][ T8559] [ 263.983226][ T8556] fido_id[8556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 265.965869][ T36] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 266.129338][ T36] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 266.131081][ T36] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 266.131140][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.182380][ T5701] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 266.376345][ T5701] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 266.428744][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.428850][ T5701] usb 1-1: Product: syz [ 266.428869][ T5701] usb 1-1: Manufacturer: syz [ 266.428886][ T5701] usb 1-1: SerialNumber: syz [ 266.530953][ T5701] usb 1-1: config 0 descriptor?? [ 266.658526][ T36] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 266.789261][ T5701] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 267.071930][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 267.073028][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 267.073316][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 267.073336][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 267.073569][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 267.073590][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 267.073834][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 267.073854][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 267.074096][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 267.074117][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 267.074332][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 267.074350][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 267.074574][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 267.074594][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 267.074838][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 267.074858][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 267.075096][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 267.075115][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 267.075348][ C0] qmi_wwan 3-1:1.0: nonzero urb status received: -71 [ 267.075369][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - 0 bytes [ 267.338512][ T36] wwan wwan0: port wwan0qmi0 attached [ 267.734543][ T5701] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 267.906290][ T5701] usb 1-1: USB disconnect, device number 7 [ 267.950235][ C0] qmi_wwan 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 268.044760][ T36] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 7a:01:58:aa:e2:53 [ 268.076401][ T36] usb 3-1: USB disconnect, device number 11 [ 268.200923][ T36] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 268.750936][ T36] wwan wwan0: port wwan0qmi0 disconnected [ 269.087220][ T5722] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 269.248949][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 269.258640][ T5722] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.285441][ T5722] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 269.285534][ T5722] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.285560][ T5722] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.285588][ T5722] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.285614][ T5722] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.285664][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.829919][ T8677] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1091'. [ 270.227231][ T5722] usb 4-1: usb_control_msg returned -32 [ 270.227288][ T5722] usbtmc 4-1:16.0: can't read capabilities [ 270.336503][ T8685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1096'. [ 270.336534][ T8685] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1096'. [ 271.908702][ T5701] usb 4-1: USB disconnect, device number 9 [ 271.936296][ T8731] loop4: detected capacity change from 0 to 7 [ 272.048784][ T8731] Dev loop4: unable to read RDB block 7 [ 272.048841][ T8731] loop4: unable to read partition table [ 272.049065][ T8731] loop4: partition table beyond EOD, truncated [ 272.065114][ T8731] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 272.630323][ T8269] IPVS: starting estimator thread 0... [ 272.738178][ T8747] IPVS: using max 9 ests per chain, 21600 per kthread [ 273.248183][ T5722] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 273.416413][ T5722] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 273.444190][ T5722] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 273.444242][ T5722] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 273.444269][ T5722] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 273.444314][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.493290][ T8758] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 273.493512][ T8758] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 273.522733][ T5722] pl2303 5-1:1.0: pl2303 converter detected [ 273.600178][ T5722] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 273.935096][ T8758] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 273.935533][ T8758] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 274.156753][ T8758] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 274.253084][ T8758] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 274.273001][ T8758] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 274.551118][ T8758] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 274.552802][ T8758] pl2303 ttyUSB0: error sending break = -32 [ 274.587254][ T5701] usb 5-1: USB disconnect, device number 11 [ 274.615897][ T8780] fuse: Bad value for 'fd' [ 274.641437][ T5701] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 274.643441][ T5701] pl2303 5-1:1.0: device disconnected [ 274.947471][ T8783] overlayfs: overlapping lowerdir path [ 275.174184][ T8795] jffs2: notice: (8795) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 275.472038][ T8802] macsec0: entered promiscuous mode [ 275.555721][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 275.808936][ T8802] veth1_macvtap: left promiscuous mode [ 275.976626][ T8802] macsec0 (unregistering): left promiscuous mode [ 276.680959][ T8828] loop5: detected capacity change from 0 to 7 [ 276.830951][ T8828] Dev loop5: unable to read RDB block 7 [ 276.830993][ T8828] loop5: AHDI p1 p2 p3 [ 276.831143][ T8828] loop5: partition table partially beyond EOD, truncated [ 276.831413][ T8828] loop5: p2 start 16777216 is beyond EOD, truncated [ 278.368081][ T5722] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 278.389855][ T8887] comedi comedi1: dt2814: I/O port conflict (0x300,2) [ 278.519468][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 278.520278][ T5722] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.521802][ T5722] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 278.521843][ T5722] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 278.521871][ T5722] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.521898][ T5722] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.521943][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.653156][ T8891] syz.1.1169 uses obsolete (PF_INET,SOCK_PACKET) [ 278.862681][ T5722] usb 3-1: GET_CAPABILITIES returned 0 [ 278.862736][ T5722] usbtmc 3-1:16.0: can't read capabilities [ 279.076780][ T5722] usb 3-1: USB disconnect, device number 12 [ 279.338224][ T8902] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1173'. [ 279.338261][ T8902] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1173'. [ 279.338281][ T8902] netlink: 'syz.3.1173': attribute type 5 has an invalid length. [ 279.338297][ T8902] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1173'. [ 279.340280][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 279.340646][ T8903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.576057][ T8903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.209449][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 280.414965][ T31] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 280.454170][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.454208][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 280.454253][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.507840][ T31] opticon 4-1:1.0: opticon converter detected [ 280.540541][ T31] usb 4-1: opticon converter now attached to ttyUSB0 [ 280.777170][ T5721] usb 4-1: USB disconnect, device number 10 [ 280.852314][ T5721] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 280.867060][ T5721] opticon 4-1:1.0: device disconnected [ 280.907607][ T8929] bond1: entered allmulticast mode [ 280.926995][ T8929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.376535][ T8950] device-mapper: ioctl: Unable to rename non-existent device, to .2\´£«.j—DH [ 281.498052][ T5721] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 281.658100][ T5721] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 281.665259][ T5721] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.665336][ T5721] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 281.665364][ T5721] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 281.709713][ T5701] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 281.763028][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.763060][ T5721] usb 2-1: Product: syz [ 281.763077][ T5721] usb 2-1: Manufacturer: syz [ 281.763094][ T5721] usb 2-1: SerialNumber: syz [ 281.909093][ T5701] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 281.912224][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 281.912258][ T5701] usb 1-1: Product: syz [ 281.947070][ T5701] usb 1-1: config 0 descriptor?? [ 281.964872][ T5701] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 281.990249][ T5701] usb 1-1: Detected FT232H [ 282.241523][ T5701] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 282.294002][ T8945] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 282.711749][ T5721] ATM dev 0: failed to start ADSL synchronisation: -71 [ 282.712531][ C0] usbatm_complete: 4 callbacks suppressed [ 282.712560][ C0] ATM dev 0: usbatm_complete: urb 0xffff888041bda000 failed (-71)! [ 282.715609][ C0] ATM dev 0: usbatm_complete: urb 0xffff888037401100 failed (-71)! [ 282.719272][ C0] ATM dev 0: usbatm_complete: urb 0xffff888037401a00 failed (-71)! [ 282.719351][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802b50e400 failed (-71)! [ 282.795405][ T5721] usb 2-1: USB disconnect, device number 6 [ 282.831867][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff888041bda000 submission failed (-19)! [ 283.097103][ T8276] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 283.202558][ T8276] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 283.311437][ T5701] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 283.343391][ T5701] usb 1-1: USB disconnect, device number 8 [ 283.633016][ T5701] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 283.681987][ T5701] ftdi_sio 1-1:0.0: device disconnected [ 286.984385][ T36] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 287.139036][ T36] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.141266][ T36] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 136, changing to 7 [ 287.141323][ T36] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 287.145358][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.145392][ T36] usb 2-1: Product: syz [ 287.145410][ T36] usb 2-1: Manufacturer: syz [ 287.145427][ T36] usb 2-1: SerialNumber: syz [ 287.237631][ T36] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 287.335075][ T9046] FAULT_INJECTION: forcing a failure. [ 287.335075][ T9046] name failslab, interval 1, probability 0, space 0, times 0 [ 287.335117][ T9046] CPU: 0 UID: 0 PID: 9046 Comm: syz.3.1234 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 287.335145][ T9046] Tainted: [L]=SOFTLOCKUP [ 287.335153][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 287.335167][ T9046] Call Trace: [ 287.335175][ T9046] [ 287.335184][ T9046] dump_stack_lvl+0xe8/0x150 [ 287.335226][ T9046] should_fail_ex+0x46b/0x600 [ 287.335268][ T9046] ? hugetlbfs_alloc_inode+0xef/0x130 [ 287.335302][ T9046] should_failslab+0xa8/0x100 [ 287.335327][ T9046] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 287.335377][ T9046] ? hugetlbfs_alloc_inode+0xef/0x130 [ 287.335415][ T9046] hugetlbfs_alloc_inode+0xef/0x130 [ 287.335456][ T9046] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 287.335488][ T9046] alloc_inode+0x6a/0x1b0 [ 287.335515][ T9046] new_inode+0x1f/0x170 [ 287.335547][ T9046] hugetlbfs_get_inode+0x73/0x660 [ 287.335586][ T9046] hugetlb_file_setup+0x21d/0x630 [ 287.335619][ T9046] memfd_alloc_file+0xbb/0x570 [ 287.335646][ T9046] ? rt_spin_unlock+0x165/0x200 [ 287.335677][ T9046] ? __pfx_memfd_alloc_file+0x10/0x10 [ 287.335702][ T9046] ? alloc_fd+0x654/0x6d0 [ 287.335739][ T9046] __se_sys_memfd_create+0x329/0x420 [ 287.335769][ T9046] do_syscall_64+0x166/0x520 [ 287.335802][ T9046] ? trace_irq_disable+0x3b/0x140 [ 287.335834][ T9046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.335860][ T9046] ? clear_bhb_loop+0x70/0xc0 [ 287.335889][ T9046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.335913][ T9046] RIP: 0033:0x7fbe8f1de2d9 [ 287.335934][ T9046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.335954][ T9046] RSP: 002b:00007fbe8d436028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 287.335979][ T9046] RAX: ffffffffffffffda RBX: 00007fbe8f465fa0 RCX: 00007fbe8f1de2d9 [ 287.335995][ T9046] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000300 [ 287.336015][ T9046] RBP: 00007fbe8f275888 R08: 0000000000000000 R09: 0000000000000000 [ 287.336030][ T9046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.336045][ T9046] R13: 00007fbe8f466038 R14: 00007fbe8f465fa0 R15: 00007ffd72b07318 [ 287.336082][ T9046] [ 287.958254][ T36] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 289.981203][ T9081] batman_adv: batadv0: Adding interface: gretap1 [ 289.981230][ T9081] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 290.165208][ T36] usb 2-1: USB disconnect, device number 7 [ 290.680273][ T9098] FAULT_INJECTION: forcing a failure. [ 290.680273][ T9098] name failslab, interval 1, probability 0, space 0, times 0 [ 290.680321][ T9098] CPU: 1 UID: 0 PID: 9098 Comm: syz.0.1256 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 290.680355][ T9098] Tainted: [L]=SOFTLOCKUP [ 290.680364][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 290.680380][ T9098] Call Trace: [ 290.680389][ T9098] [ 290.680400][ T9098] dump_stack_lvl+0xe8/0x150 [ 290.680443][ T9098] should_fail_ex+0x46b/0x600 [ 290.680490][ T9098] should_failslab+0xa8/0x100 [ 290.680517][ T9098] ? prepare_creds+0x30/0x820 [ 290.680546][ T9098] kmem_cache_alloc_noprof+0x9e/0x690 [ 290.680583][ T9098] ? prepare_creds+0x30/0x820 [ 290.680619][ T9098] prepare_creds+0x30/0x820 [ 290.680653][ T9098] cap_task_prctl+0x3ce/0xaa0 [ 290.680696][ T9098] security_task_prctl+0xf6/0x190 [ 290.680733][ T9098] __se_sys_prctl+0xbf/0x1910 [ 290.680767][ T9098] ? __pfx___se_sys_prctl+0x10/0x10 [ 290.680803][ T9098] ? __x64_sys_prctl+0x20/0xc0 [ 290.680832][ T9098] do_syscall_64+0x166/0x520 [ 290.680866][ T9098] ? trace_irq_disable+0x3b/0x140 [ 290.680903][ T9098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.680927][ T9098] ? clear_bhb_loop+0x70/0xc0 [ 290.680957][ T9098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.680981][ T9098] RIP: 0033:0x7f6eff6fe2d9 [ 290.681012][ T9098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.681033][ T9098] RSP: 002b:00007f6efd956028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 290.681058][ T9098] RAX: ffffffffffffffda RBX: 00007f6eff985fa0 RCX: 00007f6eff6fe2d9 [ 290.681076][ T9098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 290.681089][ T9098] RBP: 00007f6eff795888 R08: 0000000000000000 R09: 0000000000000000 [ 290.681105][ T9098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.681119][ T9098] R13: 00007f6eff986038 R14: 00007f6eff985fa0 R15: 00007ffe6e3e18c8 [ 290.681156][ T9098] [ 290.940111][ T8146] udevd[8146]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.008157][ T36] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 291.072258][ T5602] block nbd3: Receive control failed (result -32) [ 291.190760][ T36] usb 2-1: not running at top speed; connect to a high speed hub [ 291.190808][ T36] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 291.205115][ T36] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 291.205166][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.225206][ T5888] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 291.225504][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 291.361282][ T9087] block nbd3: Cannot add socket to a running device [ 291.378090][ T5888] usb 3-1: device descriptor read/64, error -32 [ 291.402941][ T36] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 291.485312][ T36] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 291.869531][ T5888] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 291.900163][ T36] usb 2-1: USB disconnect, device number 8 [ 291.932513][ T9091] block nbd3: shutting down sockets [ 291.957331][ T36] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 291.970391][ T36] cyberjack 2-1:1.0: device disconnected [ 292.042702][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 292.046130][ T5888] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 292.049491][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.049549][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.155462][ T5888] usb 3-1: config 0 descriptor?? [ 292.387150][ T5888] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 292.669129][ T5316] usb 3-1: USB disconnect, device number 14 [ 292.795844][ T9100] iowarrior 3-1:0.0: Error -2 while submitting URB [ 293.184401][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 293.494623][ T9149] FAULT_INJECTION: forcing a failure. [ 293.494623][ T9149] name failslab, interval 1, probability 0, space 0, times 0 [ 293.494666][ T9149] CPU: 1 UID: 0 PID: 9149 Comm: syz.1.1277 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 293.494698][ T9149] Tainted: [L]=SOFTLOCKUP [ 293.494705][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 293.494719][ T9149] Call Trace: [ 293.494728][ T9149] [ 293.494739][ T9149] dump_stack_lvl+0xe8/0x150 [ 293.494784][ T9149] should_fail_ex+0x46b/0x600 [ 293.494843][ T9149] should_failslab+0xa8/0x100 [ 293.494870][ T9149] ? do_getname+0x2e/0x250 [ 293.494896][ T9149] kmem_cache_alloc_noprof+0x9e/0x690 [ 293.494933][ T9149] ? do_getname+0x2e/0x250 [ 293.494966][ T9149] do_getname+0x2e/0x250 [ 293.494989][ T9149] ? user_path_at+0x1e/0x160 [ 293.495027][ T9149] user_path_at+0x2a/0x160 [ 293.495060][ T9149] __se_sys_mount+0x2dc/0x420 [ 293.495095][ T9149] ? __pfx___se_sys_mount+0x10/0x10 [ 293.495129][ T9149] ? __x64_sys_mount+0x20/0xc0 [ 293.495160][ T9149] do_syscall_64+0x166/0x520 [ 293.495193][ T9149] ? trace_irq_disable+0x3b/0x140 [ 293.495229][ T9149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.495252][ T9149] ? clear_bhb_loop+0x70/0xc0 [ 293.495278][ T9149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.495307][ T9149] RIP: 0033:0x7fdd427be2d9 [ 293.495331][ T9149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.495351][ T9149] RSP: 002b:00007fdd40a16028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 293.495376][ T9149] RAX: ffffffffffffffda RBX: 00007fdd42a45fa0 RCX: 00007fdd427be2d9 [ 293.495393][ T9149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.495406][ T9149] RBP: 00007fdd42855888 R08: 0000000000000000 R09: 0000000000000000 [ 293.495420][ T9149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.495435][ T9149] R13: 00007fdd42a46038 R14: 00007fdd42a45fa0 R15: 00007ffd5efe81a8 [ 293.495472][ T9149] [ 293.729833][ T9151] GUP no longer grows the stack in syz.2.1279 (9151): 200000004000-20000000a000 (200000002000) [ 293.729882][ T9151] CPU: 1 UID: 0 PID: 9151 Comm: syz.2.1279 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 293.729916][ T9151] Tainted: [L]=SOFTLOCKUP [ 293.729925][ T9151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 293.729941][ T9151] Call Trace: [ 293.729950][ T9151] [ 293.729961][ T9151] dump_stack_lvl+0xe8/0x150 [ 293.730005][ T9151] __get_user_pages+0x22b5/0x2650 [ 293.730077][ T9151] get_user_pages_remote+0x307/0xb10 [ 293.730116][ T9151] ? __pfx_mtree_load+0x10/0x10 [ 293.730160][ T9151] ? __pfx_get_user_pages_remote+0x10/0x10 [ 293.730198][ T9151] ? __access_remote_vm+0x42c/0x6f0 [ 293.730239][ T9151] __access_remote_vm+0x222/0x6f0 [ 293.730286][ T9151] ? __pfx___access_remote_vm+0x10/0x10 [ 293.730319][ T9151] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 293.730356][ T9151] ? proc_pid_cmdline_read+0x41f/0x900 [ 293.730385][ T9151] ? proc_pid_cmdline_read+0x41f/0x900 [ 293.730426][ T9151] proc_pid_cmdline_read+0x46e/0x900 [ 293.730469][ T9151] ? __asan_memset+0x22/0x50 [ 293.730512][ T9151] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 293.730548][ T9151] ? rw_verify_area+0x250/0x4d0 [ 293.730583][ T9151] vfs_readv+0x588/0x850 [ 293.730608][ T9151] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 293.730646][ T9151] ? __pfx_vfs_readv+0x10/0x10 [ 293.730686][ T9151] ? __fget_files+0x2a/0x420 [ 293.730721][ T9151] ? __fget_files+0x3a8/0x420 [ 293.730749][ T9151] ? __fget_files+0x2a/0x420 [ 293.730790][ T9151] __x64_sys_preadv+0x19f/0x2c0 [ 293.730828][ T9151] ? __pfx___x64_sys_preadv+0x10/0x10 [ 293.730878][ T9151] do_syscall_64+0x166/0x520 [ 293.730910][ T9151] ? trace_irq_disable+0x3b/0x140 [ 293.730944][ T9151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.730969][ T9151] ? clear_bhb_loop+0x70/0xc0 [ 293.730999][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.731023][ T9151] RIP: 0033:0x7f226c97e2d9 [ 293.731046][ T9151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.731067][ T9151] RSP: 002b:00007f226abd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 293.731094][ T9151] RAX: ffffffffffffffda RBX: 00007f226cc05fa0 RCX: 00007f226c97e2d9 [ 293.731112][ T9151] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 293.731128][ T9151] RBP: 00007f226ca15888 R08: 00000000fffffff9 R09: 0000000000000000 [ 293.731144][ T9151] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 293.731159][ T9151] R13: 00007f226cc06038 R14: 00007f226cc05fa0 R15: 00007ffec0b12248 [ 293.731199][ T9151] [ 294.184901][ T9158] FAULT_INJECTION: forcing a failure. [ 294.184901][ T9158] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 294.184954][ T9158] CPU: 0 UID: 0 PID: 9158 Comm: syz.4.1282 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 294.184986][ T9158] Tainted: [L]=SOFTLOCKUP [ 294.184995][ T9158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 294.185009][ T9158] Call Trace: [ 294.185018][ T9158] [ 294.185029][ T9158] dump_stack_lvl+0xe8/0x150 [ 294.185070][ T9158] should_fail_ex+0x46b/0x600 [ 294.185115][ T9158] prepare_alloc_pages+0x223/0x650 [ 294.185149][ T9158] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 294.185180][ T9158] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.185212][ T9158] ? __pfx_policy_nodemask+0x10/0x10 [ 294.185241][ T9158] ? __futex_wait+0x35a/0x410 [ 294.185282][ T9158] alloc_pages_mpol+0xd4/0x280 [ 294.185315][ T9158] alloc_pages_noprof+0xd2/0x2f0 [ 294.185347][ T9158] pte_alloc_one+0x22/0x380 [ 294.185399][ T9158] __pte_alloc+0x25/0x1a0 [ 294.185432][ T9158] do_pte_missing+0x1bda/0x28f0 [ 294.185477][ T9158] handle_mm_fault+0xf64/0x28c0 [ 294.185520][ T9158] ? handle_mm_fault+0xeb/0x28c0 [ 294.185567][ T9158] ? __pfx_handle_mm_fault+0x10/0x10 [ 294.185600][ T9158] ? lock_vma_under_rcu+0x45a/0x500 [ 294.185638][ T9158] ? __pfx_do_futex+0x10/0x10 [ 294.185693][ T9158] do_user_addr_fault+0xa4f/0x1340 [ 294.185733][ T9158] ? trace_page_fault_user+0x84/0x1e0 [ 294.185769][ T9158] exc_page_fault+0x6a/0xc0 [ 294.185804][ T9158] asm_exc_page_fault+0x26/0x30 [ 294.185826][ T9158] RIP: 0033:0x7f34452372f6 [ 294.185847][ T9158] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 1c db 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 294.185868][ T9158] RSP: 002b:00007f34435d5f60 EFLAGS: 00010206 [ 294.185891][ T9158] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000a80000 [ 294.185912][ T9158] RDX: 00000000000025f5 RSI: 0000200000a80000 RDI: 0000200000a81000 [ 294.185929][ T9158] RBP: 00007f3445435100 R08: 0000000000000000 R09: ffffffffffffffff [ 294.185946][ T9158] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 294.185963][ T9158] R13: 0000200000a80000 R14: 00007f3445605fa0 R15: 0000000000000000 [ 294.186003][ T9158] [ 294.186455][ T9158] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 295.179799][ T9181] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 296.576449][ T9207] jffs2: notice: (9207) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 297.725556][ T9244] bridge0: port 4(syz_tun) entered blocking state [ 297.725691][ T9244] bridge0: port 4(syz_tun) entered disabled state [ 297.725905][ T9244] syz_tun: entered allmulticast mode [ 297.753391][ T9244] syz_tun: entered promiscuous mode [ 298.129931][ T9244] bridge0: port 4(syz_tun) entered blocking state [ 298.130094][ T9244] bridge0: port 4(syz_tun) entered forwarding state [ 298.464373][ T9255] macvlan0: entered promiscuous mode [ 298.590207][ T5602] Bluetooth: hci0: connection err: -111 [ 298.953023][ T9272] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 299.428423][ T9277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.845083][ T9290] FAULT_INJECTION: forcing a failure. [ 299.845083][ T9290] name failslab, interval 1, probability 0, space 0, times 0 [ 299.845133][ T9290] CPU: 0 UID: 0 PID: 9290 Comm: syz.0.1332 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 299.845168][ T9290] Tainted: [L]=SOFTLOCKUP [ 299.845178][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 299.845193][ T9290] Call Trace: [ 299.845203][ T9290] [ 299.845214][ T9290] dump_stack_lvl+0xe8/0x150 [ 299.845255][ T9290] should_fail_ex+0x46b/0x600 [ 299.845299][ T9290] should_failslab+0xa8/0x100 [ 299.845330][ T9290] __kmalloc_cache_noprof+0xa1/0x680 [ 299.845380][ T9290] ? snd_pcm_oss_open+0xa3d/0x1c10 [ 299.845417][ T9290] ? snd_pcm_oss_open+0xa3d/0x1c10 [ 299.845454][ T9290] ? snd_pcm_oss_open+0x957/0x1c10 [ 299.845495][ T9290] snd_pcm_oss_open+0xa3d/0x1c10 [ 299.845554][ T9290] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 299.845610][ T9290] ? rt_spin_unlock+0x159/0x200 [ 299.845640][ T9290] ? __pfx_default_wake_function+0x10/0x10 [ 299.845672][ T9290] ? rt_spin_unlock+0x165/0x200 [ 299.845712][ T9290] chrdev_open+0x4dc/0x600 [ 299.845739][ T9290] ? __pfx_chrdev_open+0x10/0x10 [ 299.845764][ T9290] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 299.845814][ T9290] ? __pfx_chrdev_open+0x10/0x10 [ 299.845835][ T9290] do_dentry_open+0x849/0x1420 [ 299.845874][ T9290] vfs_open+0x3b/0x350 [ 299.845895][ T9290] ? path_openat+0x142d/0x1d60 [ 299.845931][ T9290] path_openat+0x1448/0x1d60 [ 299.845988][ T9290] do_file_open+0x23e/0x4a0 [ 299.846028][ T9290] ? __pfx_do_file_open+0x10/0x10 [ 299.846088][ T9290] ? alloc_fd+0x654/0x6d0 [ 299.846130][ T9290] do_sys_openat2+0x115/0x200 [ 299.846157][ T9290] ? __se_sys_futex+0x3a8/0x450 [ 299.846185][ T9290] ? __pfx_do_sys_openat2+0x10/0x10 [ 299.846219][ T9290] ? rcu_is_watching+0x16/0xb0 [ 299.846249][ T9290] __x64_sys_openat+0x138/0x170 [ 299.846282][ T9290] do_syscall_64+0x166/0x520 [ 299.846316][ T9290] ? trace_irq_disable+0x3b/0x140 [ 299.846359][ T9290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.846385][ T9290] ? clear_bhb_loop+0x70/0xc0 [ 299.846416][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.846442][ T9290] RIP: 0033:0x7f6eff6fe2d9 [ 299.846467][ T9290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.846487][ T9290] RSP: 002b:00007f6efd956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 299.846513][ T9290] RAX: ffffffffffffffda RBX: 00007f6eff985fa0 RCX: 00007f6eff6fe2d9 [ 299.846531][ T9290] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 299.846548][ T9290] RBP: 00007f6eff795888 R08: 0000000000000000 R09: 0000000000000000 [ 299.846564][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.846579][ T9290] R13: 00007f6eff986038 R14: 00007f6eff985fa0 R15: 00007ffe6e3e18c8 [ 299.846618][ T9290] [ 300.652551][ T9301] FAULT_INJECTION: forcing a failure. [ 300.652551][ T9301] name failslab, interval 1, probability 0, space 0, times 0 [ 300.652607][ T9301] CPU: 1 UID: 0 PID: 9301 Comm: syz.3.1340 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 300.652642][ T9301] Tainted: [L]=SOFTLOCKUP [ 300.652651][ T9301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 300.652667][ T9301] Call Trace: [ 300.652678][ T9301] [ 300.652689][ T9301] dump_stack_lvl+0xe8/0x150 [ 300.652736][ T9301] should_fail_ex+0x46b/0x600 [ 300.652780][ T9301] should_failslab+0xa8/0x100 [ 300.652805][ T9301] ? vm_area_alloc+0x24/0x140 [ 300.652830][ T9301] kmem_cache_alloc_noprof+0x9e/0x690 [ 300.652868][ T9301] ? vm_area_alloc+0x24/0x140 [ 300.652898][ T9301] vm_area_alloc+0x24/0x140 [ 300.652923][ T9301] mmap_region+0x1400/0x25c0 [ 300.652964][ T9301] ? do_raw_spin_lock+0x12b/0x2f0 [ 300.652996][ T9301] ? __pfx_mmap_region+0x10/0x10 [ 300.653029][ T9301] ? rcu_is_watching+0x16/0xb0 [ 300.653055][ T9301] ? trace_hrtimer_start+0x82/0x200 [ 300.653088][ T9301] ? hrtimer_start_range_ns_common+0x7fc/0xb70 [ 300.653133][ T9301] ? lockdep_hardirqs_on+0x7b/0x110 [ 300.653256][ T9301] ? futex_unqueue+0x22/0x240 [ 300.653323][ T9301] ? cap_mmap_addr+0xb6/0x100 [ 300.653349][ T9301] ? bpf_lsm_mmap_addr+0x9/0x50 [ 300.653381][ T9301] ? security_mmap_addr+0x71/0x240 [ 300.653431][ T9301] do_mmap+0xe0e/0x1310 [ 300.653474][ T9301] ? __pfx_do_mmap+0x10/0x10 [ 300.653518][ T9301] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 300.653562][ T9301] ? rwbase_write_lock+0x550/0x720 [ 300.653610][ T9301] vm_mmap_pgoff+0x275/0x4e0 [ 300.653648][ T9301] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 300.653765][ T9301] ? rcu_is_watching+0x16/0xb0 [ 300.653800][ T9301] ? __x64_sys_mmap+0x7f/0x140 [ 300.653836][ T9301] do_syscall_64+0x166/0x520 [ 300.653870][ T9301] ? trace_irq_disable+0x3b/0x140 [ 300.653903][ T9301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.653929][ T9301] ? clear_bhb_loop+0x70/0xc0 [ 300.653971][ T9301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.653995][ T9301] RIP: 0033:0x7fbe8f1de2d9 [ 300.654020][ T9301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.654040][ T9301] RSP: 002b:00007fbe8d436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 300.654067][ T9301] RAX: ffffffffffffffda RBX: 00007fbe8f465fa0 RCX: 00007fbe8f1de2d9 [ 300.654085][ T9301] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000000000000000 [ 300.654098][ T9301] RBP: 00007fbe8f275888 R08: ffffffffffffffff R09: 0000000000000000 [ 300.654116][ T9301] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 300.654131][ T9301] R13: 00007fbe8f466038 R14: 00007fbe8f465fa0 R15: 00007ffd72b07318 [ 300.654247][ T9301] [ 301.154590][ T9305] FAULT_INJECTION: forcing a failure. [ 301.154590][ T9305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.154643][ T9305] CPU: 0 UID: 0 PID: 9305 Comm: syz.3.1341 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 301.154667][ T9305] Tainted: [L]=SOFTLOCKUP [ 301.154674][ T9305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 301.154685][ T9305] Call Trace: [ 301.154692][ T9305] [ 301.154700][ T9305] dump_stack_lvl+0xe8/0x150 [ 301.154735][ T9305] should_fail_ex+0x46b/0x600 [ 301.154776][ T9305] strncpy_from_user+0x36/0x2c0 [ 301.154806][ T9305] keyctl_keyring_search+0xb4/0x390 [ 301.154836][ T9305] ? __pfx_keyctl_keyring_search+0x10/0x10 [ 301.154873][ T9305] __se_sys_keyctl+0x638/0x9d0 [ 301.154892][ T9305] ? __pfx___se_sys_keyctl+0x10/0x10 [ 301.154912][ T9305] ? __pfx_do_futex+0x10/0x10 [ 301.154931][ T9305] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 301.154958][ T9305] ? __se_sys_futex+0x3a8/0x450 [ 301.154980][ T9305] ? ksys_write+0x248/0x270 [ 301.155003][ T9305] ? __pfx___se_sys_futex+0x10/0x10 [ 301.155022][ T9305] ? __pfx_ksys_write+0x10/0x10 [ 301.155050][ T9305] ? __x64_sys_keyctl+0x20/0xc0 [ 301.155068][ T9305] do_syscall_64+0x166/0x520 [ 301.155091][ T9305] ? trace_irq_disable+0x3b/0x140 [ 301.155121][ T9305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.155138][ T9305] ? clear_bhb_loop+0x70/0xc0 [ 301.155159][ T9305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.155175][ T9305] RIP: 0033:0x7fbe8f1de2d9 [ 301.155192][ T9305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.155206][ T9305] RSP: 002b:00007fbe8d436028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 301.155225][ T9305] RAX: ffffffffffffffda RBX: 00007fbe8f465fa0 RCX: 00007fbe8f1de2d9 [ 301.155238][ T9305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 301.155248][ T9305] RBP: 00007fbe8f275888 R08: 0000000000000000 R09: 0000000000000000 [ 301.155260][ T9305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.155296][ T9305] R13: 00007fbe8f466038 R14: 00007fbe8f465fa0 R15: 00007ffd72b07318 [ 301.155333][ T9305] [ 301.938004][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 302.088139][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 302.105081][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 302.105146][ T31] usb 4-1: New USB device found, idVendor=ccda, idProduct=c2c7, bcdDevice= 0.40 [ 302.106252][ T31] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 302.106294][ T31] usb 4-1: can't read configurations, error -71 [ 303.652476][ T9327] FAULT_INJECTION: forcing a failure. [ 303.652476][ T9327] name failslab, interval 1, probability 0, space 0, times 0 [ 303.652521][ T9327] CPU: 1 UID: 0 PID: 9327 Comm: syz.2.1350 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 303.652548][ T9327] Tainted: [L]=SOFTLOCKUP [ 303.652556][ T9327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 303.652568][ T9327] Call Trace: [ 303.652576][ T9327] [ 303.652590][ T9327] dump_stack_lvl+0xe8/0x150 [ 303.652628][ T9327] should_fail_ex+0x46b/0x600 [ 303.652667][ T9327] should_failslab+0xa8/0x100 [ 303.652696][ T9327] __kmalloc_node_noprof+0xfd/0x7b0 [ 303.652734][ T9327] ? get_callchain_buffers+0x198/0x350 [ 303.652757][ T9327] ? get_callchain_buffers+0x198/0x350 [ 303.652786][ T9327] get_callchain_buffers+0x198/0x350 [ 303.652813][ T9327] stack_map_alloc+0x301/0x4b0 [ 303.652850][ T9327] map_create+0x1111/0x1e20 [ 303.652895][ T9327] ? __pfx_map_create+0x10/0x10 [ 303.652940][ T9327] ? bpf_lsm_bpf+0x9/0x20 [ 303.652969][ T9327] ? security_bpf+0x7e/0x2d0 [ 303.653001][ T9327] __sys_bpf+0xaea/0xd90 [ 303.653045][ T9327] ? __pfx___sys_bpf+0x10/0x10 [ 303.653094][ T9327] ? do_futex+0x3e7/0x4e0 [ 303.653147][ T9327] ? rcu_is_watching+0x16/0xb0 [ 303.653179][ T9327] __x64_sys_bpf+0xba/0xd0 [ 303.653214][ T9327] do_syscall_64+0x166/0x520 [ 303.653246][ T9327] ? trace_irq_disable+0x3b/0x140 [ 303.653278][ T9327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.653302][ T9327] ? clear_bhb_loop+0x70/0xc0 [ 303.653330][ T9327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.653353][ T9327] RIP: 0033:0x7f226c97e2d9 [ 303.653375][ T9327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.653396][ T9327] RSP: 002b:00007f226abd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 303.653423][ T9327] RAX: ffffffffffffffda RBX: 00007f226cc05fa0 RCX: 00007f226c97e2d9 [ 303.653442][ T9327] RDX: 0000000000000048 RSI: 00002000000005c0 RDI: 0000000000000000 [ 303.653458][ T9327] RBP: 00007f226ca15888 R08: 0000000000000000 R09: 0000000000000000 [ 303.653474][ T9327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.653489][ T9327] R13: 00007f226cc06038 R14: 00007f226cc05fa0 R15: 00007ffec0b12248 [ 303.653528][ T9327] [ 303.810840][ T5701] kernel read not supported for file /kmsg (pid: 5701 comm: kworker/1:5) [ 304.297001][ T37] audit: type=1326 audit(1791895141.502:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9333 comm="syz.0.1356" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6eff6fe2d9 code=0x0 [ 305.144448][ T9354] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 305.467124][ T9359] FAULT_INJECTION: forcing a failure. [ 305.467124][ T9359] name failslab, interval 1, probability 0, space 0, times 0 [ 305.467169][ T9359] CPU: 1 UID: 0 PID: 9359 Comm: syz.4.1363 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 305.467202][ T9359] Tainted: [L]=SOFTLOCKUP [ 305.467211][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 305.467227][ T9359] Call Trace: [ 305.467236][ T9359] [ 305.467247][ T9359] dump_stack_lvl+0xe8/0x150 [ 305.467291][ T9359] should_fail_ex+0x46b/0x600 [ 305.467334][ T9359] should_failslab+0xa8/0x100 [ 305.467362][ T9359] __kmalloc_cache_noprof+0xa1/0x680 [ 305.467402][ T9359] ? push_stack+0x7e/0x380 [ 305.467431][ T9359] ? push_stack+0x7e/0x380 [ 305.467467][ T9359] push_stack+0x7e/0x380 [ 305.467500][ T9359] do_check_insn+0x8194/0x17cc0 [ 305.467524][ T9359] ? do_check_main+0xa2/0x1f0 [ 305.467587][ T9359] ? __pfx_states_equal+0x10/0x10 [ 305.467623][ T9359] ? __pfx_do_check_insn+0x10/0x10 [ 305.467653][ T9359] ? __asan_memset+0x22/0x50 [ 305.467686][ T9359] ? compute_scc_callchain+0x2e8/0x350 [ 305.467731][ T9359] ? bpf_is_state_visited+0x381e/0x48b0 [ 305.467788][ T9359] ? bpf_diag_record_branch+0x58/0x90 [ 305.467832][ T9359] do_check_common+0x364c/0x5610 [ 305.467865][ T9359] ? kasan_quarantine_put+0xbb/0x1f0 [ 305.467929][ T9359] ? __pfx_do_check_common+0x10/0x10 [ 305.467979][ T9359] do_check_main+0xa2/0x1f0 [ 305.468018][ T9359] bpf_check+0x277e/0x2ef0 [ 305.468076][ T9359] ? __pfx_bpf_check+0x10/0x10 [ 305.468113][ T9359] ? bpf_obj_name_cpy+0x194/0x1e0 [ 305.468147][ T9359] bpf_prog_load+0x14d6/0x1c20 [ 305.468185][ T9359] ? __pfx_bpf_prog_load+0x10/0x10 [ 305.468238][ T9359] __sys_bpf+0xd0d/0xd90 [ 305.468284][ T9359] ? __pfx___sys_bpf+0x10/0x10 [ 305.468324][ T9359] ? do_futex+0x3e7/0x4e0 [ 305.468379][ T9359] ? ksys_write+0x248/0x270 [ 305.468411][ T9359] ? __pfx___se_sys_futex+0x10/0x10 [ 305.468437][ T9359] ? __pfx_ksys_write+0x10/0x10 [ 305.468476][ T9359] __x64_sys_bpf+0xba/0xd0 [ 305.468515][ T9359] do_syscall_64+0x166/0x520 [ 305.468548][ T9359] ? trace_irq_disable+0x3b/0x140 [ 305.468581][ T9359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.468606][ T9359] ? clear_bhb_loop+0x70/0xc0 [ 305.468643][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.468667][ T9359] RIP: 0033:0x7f344537e2d9 [ 305.468691][ T9359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.468734][ T9359] RSP: 002b:00007f34435d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.468762][ T9359] RAX: ffffffffffffffda RBX: 00007f3445605fa0 RCX: 00007f344537e2d9 [ 305.468781][ T9359] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 305.468798][ T9359] RBP: 00007f3445415888 R08: 0000000000000000 R09: 0000000000000000 [ 305.468813][ T9359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.468828][ T9359] R13: 00007f3445606038 R14: 00007f3445605fa0 R15: 00007ffd34bfbb18 [ 305.468867][ T9359] [ 305.896106][ T9361] netlink: 'syz.0.1364': attribute type 2 has an invalid length. [ 305.896130][ T9361] netlink: 'syz.0.1364': attribute type 2 has an invalid length. [ 306.566502][ T9387] jffs2: notice: (9387) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 307.068012][ T5316] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 307.101258][ T5888] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 307.217915][ T5316] usb 5-1: Using ep0 maxpacket: 8 [ 307.219114][ T5316] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 307.220860][ T5316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.220914][ T5316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.263444][ T5316] usb 5-1: config 0 descriptor?? [ 307.281098][ T5888] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 307.284572][ T5888] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 307.284608][ T5888] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 307.284630][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 307.284684][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 307.284714][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 307.287622][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 307.287652][ T5888] usb 2-1: Product: syz [ 307.287665][ T5888] usb 2-1: Manufacturer: syz [ 307.403846][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 307.403874][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 307.446488][ T5888] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 307.446517][ T5888] cdc_wdm 2-1:1.0: Unknown control protocol [ 307.511506][ T9407] FAULT_INJECTION: forcing a failure. [ 307.511506][ T9407] name failslab, interval 1, probability 0, space 0, times 0 [ 307.511556][ T9407] CPU: 1 UID: 0 PID: 9407 Comm: syz.2.1380 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 307.511589][ T9407] Tainted: [L]=SOFTLOCKUP [ 307.511599][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 307.511614][ T9407] Call Trace: [ 307.511627][ T9407] [ 307.511637][ T9407] dump_stack_lvl+0xe8/0x150 [ 307.511681][ T9407] should_fail_ex+0x46b/0x600 [ 307.511728][ T9407] should_failslab+0xa8/0x100 [ 307.511759][ T9407] __kvmalloc_node_noprof+0x176/0x890 [ 307.511787][ T9407] ? v4l2_ctrl_handler_init_class+0x1a1/0x2c0 [ 307.511834][ T9407] ? v4l2_ctrl_handler_init_class+0x1a1/0x2c0 [ 307.511878][ T9407] v4l2_ctrl_handler_init_class+0x1a1/0x2c0 [ 307.511919][ T9407] vicodec_open+0x1f2/0xbf0 [ 307.511964][ T9407] v4l2_open+0x1bf/0x3a0 [ 307.512004][ T9407] chrdev_open+0x4dc/0x600 [ 307.512031][ T9407] ? __pfx_chrdev_open+0x10/0x10 [ 307.512056][ T9407] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 307.512103][ T9407] ? __pfx_chrdev_open+0x10/0x10 [ 307.512125][ T9407] do_dentry_open+0x849/0x1420 [ 307.512161][ T9407] vfs_open+0x3b/0x350 [ 307.512183][ T9407] ? path_openat+0x142d/0x1d60 [ 307.512221][ T9407] path_openat+0x1448/0x1d60 [ 307.512276][ T9407] do_file_open+0x23e/0x4a0 [ 307.512314][ T9407] ? __pfx_do_file_open+0x10/0x10 [ 307.512375][ T9407] ? alloc_fd+0x654/0x6d0 [ 307.512417][ T9407] do_sys_openat2+0x115/0x200 [ 307.512446][ T9407] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.512472][ T9407] ? exc_page_fault+0x6a/0xc0 [ 307.512510][ T9407] ? do_user_addr_fault+0xc4c/0x1340 [ 307.512540][ T9407] __x64_sys_openat+0x138/0x170 [ 307.512580][ T9407] do_syscall_64+0x166/0x520 [ 307.512614][ T9407] ? trace_irq_disable+0x3b/0x140 [ 307.512647][ T9407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.512671][ T9407] ? clear_bhb_loop+0x70/0xc0 [ 307.512701][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.512725][ T9407] RIP: 0033:0x7f226c93eb0e [ 307.512750][ T9407] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.512771][ T9407] RSP: 002b:00007f226abd5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.512798][ T9407] RAX: ffffffffffffffda RBX: 00007f226abd66c0 RCX: 00007f226c93eb0e [ 307.512828][ T9407] RDX: 0000000000000002 RSI: 00007f226abd5c00 RDI: ffffffffffffff9c [ 307.512844][ T9407] RBP: 00007f226abd5c00 R08: 0000000000000000 R09: 0000000000000000 [ 307.512860][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 307.512876][ T9407] R13: 00007f226cc06038 R14: 00007f226cc05fa0 R15: 00007ffec0b12248 [ 307.512916][ T9407] [ 307.953676][ T5316] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 308.074017][ T5888] usb 2-1: USB disconnect, device number 9 [ 308.131972][ T9395] cdc_wdm 2-1:1.0: Error submitting int urb - -19 [ 308.141139][ T5721] usb 5-1: USB disconnect, device number 12 [ 309.237212][ T37] audit: type=1326 audit(1791895146.442:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9436 comm="syz.4.1394" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f344537e2d9 code=0x0 [ 310.368980][ T5701] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 310.517948][ T5701] usb 2-1: Using ep0 maxpacket: 8 [ 310.518841][ T5701] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 310.521818][ T5701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.521876][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.571555][ T5701] usb 2-1: config 0 descriptor?? [ 310.758412][ T9484] device-mapper: ioctl: Invalid target message parameters. [ 310.848602][ T5701] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 311.296054][ T36] usb 2-1: USB disconnect, device number 10 [ 312.258203][ T5888] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 312.285250][ T5602] Bluetooth: hci1: connection err: -111 [ 312.447039][ T5888] usb 4-1: unable to get BOS descriptor or descriptor too short [ 312.447106][ T5888] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 312.483620][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.483656][ T5888] usb 4-1: Product: syz [ 312.483673][ T5888] usb 4-1: Manufacturer: syz [ 312.483690][ T5888] usb 4-1: SerialNumber: syz [ 312.571661][ T9510] syz.2.1423 (9510) used greatest stack depth: 18592 bytes left [ 312.770681][ T5888] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 312.787357][ T5888] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 312.809277][ T5888] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 312.813875][ T5888] usb 4-1: USB disconnect, device number 13 [ 314.420971][ T9547] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 314.736511][ T9555] jffs2: notice: (9555) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 315.049314][ T9566] coredump: 158(syz.0.1441): |“¯¤ pipe failed [ 316.008572][ T5721] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 316.161146][ T5721] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 316.163538][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.234704][ T5721] usb 4-1: config 0 descriptor?? [ 316.668017][ T5721] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 316.670371][ T5721] [drm:udl_init] *ERROR* Selecting channel failed [ 316.735514][ T9617] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcl812) [ 316.847224][ T5721] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 316.847254][ T5721] [drm] Initialized udl on minor 1 [ 316.853180][ T5721] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 316.914354][ T5721] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 316.927476][ T5721] usb 4-1: USB disconnect, device number 14 [ 317.057907][ T5847] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 317.211857][ T5847] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 317.236666][ T5847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.236694][ T5847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.249157][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.249247][ T5847] usb 3-1: SerialNumber: syz [ 317.585928][ T5602] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 317.586546][ T5602] Bluetooth: unknown link type 128 [ 317.738860][ T5847] usb 3-1: 0:2 : does not exist [ 318.102871][ T5847] usb 3-1: USB disconnect, device number 15 [ 318.309515][ T9634] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcl812) [ 318.708323][ T9491] udevd[9491]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.988548][ T9651] ip6erspan0: entered allmulticast mode [ 319.233916][ T9669] FAULT_INJECTION: forcing a failure. [ 319.233916][ T9669] name failslab, interval 1, probability 0, space 0, times 0 [ 319.233966][ T9669] CPU: 0 UID: 0 PID: 9669 Comm: syz.2.1481 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 319.234001][ T9669] Tainted: [L]=SOFTLOCKUP [ 319.234010][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 319.234026][ T9669] Call Trace: [ 319.234036][ T9669] [ 319.234047][ T9669] dump_stack_lvl+0xe8/0x150 [ 319.234092][ T9669] should_fail_ex+0x46b/0x600 [ 319.234137][ T9669] should_failslab+0xa8/0x100 [ 319.234165][ T9669] ? __se_sys_mbind+0x82b/0x10e0 [ 319.234190][ T9669] kmem_cache_alloc_noprof+0x9e/0x690 [ 319.234227][ T9669] ? __se_sys_mbind+0x82b/0x10e0 [ 319.234259][ T9669] __se_sys_mbind+0x82b/0x10e0 [ 319.234285][ T9669] ? reduce_interleave_weights+0x174/0x4c0 [ 319.234317][ T9669] ? __pfx___se_sys_mbind+0x10/0x10 [ 319.234353][ T9669] ? __se_sys_futex+0x3a8/0x450 [ 319.234390][ T9669] ? rcu_is_watching+0x16/0xb0 [ 319.234423][ T9669] ? __x64_sys_mbind+0x21/0xf0 [ 319.234451][ T9669] do_syscall_64+0x166/0x520 [ 319.234496][ T9669] ? trace_irq_disable+0x3b/0x140 [ 319.234529][ T9669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.234554][ T9669] ? clear_bhb_loop+0x70/0xc0 [ 319.234585][ T9669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.234609][ T9669] RIP: 0033:0x7f226c97e2d9 [ 319.234630][ T9669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.234652][ T9669] RSP: 002b:00007f226abd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 319.234680][ T9669] RAX: ffffffffffffffda RBX: 00007f226cc05fa0 RCX: 00007f226c97e2d9 [ 319.234698][ T9669] RDX: 0010000000000001 RSI: 0100000000004000 RDI: 00002000005b4000 [ 319.234716][ T9669] RBP: 00007f226ca15888 R08: 0000000000000000 R09: 0000000000000002 [ 319.234735][ T9669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.234750][ T9669] R13: 00007f226cc06038 R14: 00007f226cc05fa0 R15: 00007ffec0b12248 [ 319.234786][ T9669] [ 319.609445][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 320.036617][ T9691] FAULT_INJECTION: forcing a failure. [ 320.036617][ T9691] name failslab, interval 1, probability 0, space 0, times 0 [ 320.036667][ T9691] CPU: 1 UID: 0 PID: 9691 Comm: syz.2.1491 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 320.036701][ T9691] Tainted: [L]=SOFTLOCKUP [ 320.036711][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 320.036727][ T9691] Call Trace: [ 320.036736][ T9691] [ 320.036749][ T9691] dump_stack_lvl+0xe8/0x150 [ 320.036792][ T9691] should_fail_ex+0x46b/0x600 [ 320.036838][ T9691] should_failslab+0xa8/0x100 [ 320.036865][ T9691] ? do_timer_create+0x247/0x1100 [ 320.036896][ T9691] kmem_cache_alloc_noprof+0x9e/0x690 [ 320.036933][ T9691] ? do_timer_create+0x247/0x1100 [ 320.036971][ T9691] do_timer_create+0x247/0x1100 [ 320.037012][ T9691] ? __pfx_do_timer_create+0x10/0x10 [ 320.037043][ T9691] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 320.037081][ T9691] __x64_sys_timer_create+0x14c/0x1c0 [ 320.037112][ T9691] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 320.037150][ T9691] ? rcu_is_watching+0x16/0xb0 [ 320.037194][ T9691] do_syscall_64+0x166/0x520 [ 320.037234][ T9691] ? trace_irq_disable+0x3b/0x140 [ 320.037267][ T9691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.037292][ T9691] ? clear_bhb_loop+0x70/0xc0 [ 320.037326][ T9691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.037350][ T9691] RIP: 0033:0x7f226c97e2d9 [ 320.037374][ T9691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.037395][ T9691] RSP: 002b:00007f226abd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 320.037433][ T9691] RAX: ffffffffffffffda RBX: 00007f226cc05fa0 RCX: 00007f226c97e2d9 [ 320.037453][ T9691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 320.037468][ T9691] RBP: 00007f226ca15888 R08: 0000000000000000 R09: 0000000000000000 [ 320.037483][ T9691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.037499][ T9691] R13: 00007f226cc06038 R14: 00007f226cc05fa0 R15: 00007ffec0b12248 [ 320.037538][ T9691] [ 320.777700][ T9704] coredump: 728(syz.4.1498): |“¯¤ pipe failed [ 321.257577][ T9724] FAULT_INJECTION: forcing a failure. [ 321.257577][ T9724] name failslab, interval 1, probability 0, space 0, times 0 [ 321.257632][ T9724] CPU: 0 UID: 0 PID: 9724 Comm: syz.2.1506 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 321.257666][ T9724] Tainted: [L]=SOFTLOCKUP [ 321.257675][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 321.257690][ T9724] Call Trace: [ 321.257700][ T9724] [ 321.257712][ T9724] dump_stack_lvl+0xe8/0x150 [ 321.257759][ T9724] should_fail_ex+0x46b/0x600 [ 321.257803][ T9724] should_failslab+0xa8/0x100 [ 321.257852][ T9724] ? vm_area_alloc+0x24/0x140 [ 321.257879][ T9724] kmem_cache_alloc_noprof+0x9e/0x690 [ 321.257916][ T9724] ? vm_area_alloc+0x24/0x140 [ 321.257948][ T9724] vm_area_alloc+0x24/0x140 [ 321.257973][ T9724] mmap_region+0x1400/0x25c0 [ 321.258016][ T9724] ? do_raw_spin_lock+0x12b/0x2f0 [ 321.258048][ T9724] ? __pfx_mmap_region+0x10/0x10 [ 321.258078][ T9724] ? rcu_is_watching+0x16/0xb0 [ 321.258104][ T9724] ? trace_hrtimer_start+0x82/0x200 [ 321.258139][ T9724] ? hrtimer_start_range_ns_common+0x7d3/0xb70 [ 321.258186][ T9724] ? lockdep_hardirqs_on+0x7b/0x110 [ 321.258301][ T9724] ? mt_find+0x186/0x630 [ 321.258366][ T9724] ? bpf_lsm_mmap_addr+0x9/0x50 [ 321.258397][ T9724] ? security_mmap_addr+0x71/0x240 [ 321.258443][ T9724] do_mmap+0xe0e/0x1310 [ 321.258485][ T9724] ? __pfx_do_mmap+0x10/0x10 [ 321.258525][ T9724] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 321.258565][ T9724] ? rwbase_write_lock+0x550/0x720 [ 321.258624][ T9724] vm_mmap_pgoff+0x275/0x4e0 [ 321.258665][ T9724] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 321.258701][ T9724] ? rcu_is_watching+0x16/0xb0 [ 321.258732][ T9724] ? __x64_sys_mmap+0x7f/0x140 [ 321.258765][ T9724] do_syscall_64+0x166/0x520 [ 321.258798][ T9724] ? trace_irq_disable+0x3b/0x140 [ 321.258838][ T9724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.258864][ T9724] ? clear_bhb_loop+0x70/0xc0 [ 321.258894][ T9724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.258918][ T9724] RIP: 0033:0x7f226c97e2d9 [ 321.258941][ T9724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.258962][ T9724] RSP: 002b:00007f226abd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 321.258988][ T9724] RAX: ffffffffffffffda RBX: 00007f226cc05fa0 RCX: 00007f226c97e2d9 [ 321.259006][ T9724] RDX: 0000000000000002 RSI: 0000000000001000 RDI: 0000000000000000 [ 321.259021][ T9724] RBP: 00007f226ca15888 R08: ffffffffffffffff R09: 0000000010000000 [ 321.259038][ T9724] R10: 0000000000109031 R11: 0000000000000246 R12: 0000000000000000 [ 321.259051][ T9724] R13: 00007f226cc06038 R14: 00007f226cc05fa0 R15: 00007ffec0b12248 [ 321.259082][ T9724] [ 321.901654][ T36] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 322.020252][ T5888] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 322.050916][ T9741] gretap0: entered promiscuous mode [ 322.065921][ T36] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 322.077141][ T36] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 322.077171][ T36] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 322.096427][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.096458][ T36] usb 4-1: Product: syz [ 322.096475][ T36] usb 4-1: Manufacturer: syz [ 322.096492][ T36] usb 4-1: SerialNumber: syz [ 322.145508][ T9743] could not open pipe file descriptor [ 322.290434][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 322.293993][ T5888] usb 3-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 322.295420][ T5888] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.295504][ T5888] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 322.295525][ T5888] usb 3-1: config 0 interface 0 has no altsetting 0 [ 322.295551][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.376135][ T5888] usb 3-1: config 0 descriptor?? [ 322.377535][ T36] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 322.667011][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.667088][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.773324][ T5316] usb 4-1: USB disconnect, device number 15 [ 322.802337][ T5316] usblp0: removed [ 322.975132][ T5888] hid_parser_main: 227 callbacks suppressed [ 322.975157][ T5888] wacom 0003:056A:00CC.0004: unknown main item tag 0x2 [ 322.975183][ T5888] wacom 0003:056A:00CC.0004: unknown main item tag 0x5 [ 322.975203][ T5888] wacom 0003:056A:00CC.0004: unknown main item tag 0x3 [ 322.975231][ T5888] wacom 0003:056A:00CC.0004: item fetching failed at offset 23/24 [ 322.980460][ T5888] wacom 0003:056A:00CC.0004: parse failed [ 322.980782][ T5888] wacom 0003:056A:00CC.0004: probe with driver wacom failed with error -22 [ 323.196805][ T5888] usb 3-1: USB disconnect, device number 16 [ 323.589514][ T9769] netlink: 'syz.1.1527': attribute type 34 has an invalid length. [ 323.755623][ T9771] batadv_slave_0: entered promiscuous mode [ 323.765667][ T9771] batadv_slave_0: left promiscuous mode [ 324.716355][ T5847] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 324.875336][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 324.876317][ T5847] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 324.878042][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.878097][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.919880][ T5847] usb 4-1: config 0 descriptor?? [ 325.174035][ T5847] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 325.260055][ T37] audit: type=1326 audit(1791895162.462:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.4.1545" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344537e2d9 code=0x7fc00000 [ 325.260233][ T37] audit: type=1326 audit(1791895162.472:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.4.1545" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f344537e2d9 code=0x7fc00000 [ 325.291744][ T37] audit: type=1326 audit(1791895162.472:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9813 comm="syz.4.1545" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344537e2d9 code=0x7fc00000 [ 325.422905][ T5847] usb 4-1: USB disconnect, device number 16 [ 325.828504][ T9836] CIFS: Attempting to mount //127.0.0.1/share [ 326.767132][ T9836] CIFS: VFS: cifs_mount failed w/return code = -512 [ 326.769608][ T9850] CIFS: Attempting to mount //127.0.0.1/share [ 326.871070][ T9836] syz.2.1553 (9836) used greatest stack depth: 18248 bytes left [ 327.482439][ T9850] CIFS: VFS: cifs_mount failed w/return code = -112 [ 328.410051][ T9919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1575'. [ 328.716126][ T9911] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 328.716277][ T9911] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 329.179593][ T9909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.179645][ T9909] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 329.320061][ T9911] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.408391][ T9911] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 329.758401][ T9911] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.758513][ T9911] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 329.829880][ T9909] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 329.829908][ T9909] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 329.903156][ T9909] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.903189][ T9909] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 329.994970][ T9909] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.995003][ T9909] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 330.012693][ T9911] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.012847][ T9911] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 330.078128][ T9909] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.078160][ T9909] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 330.374438][ T5847] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 330.540732][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 330.543668][ T5847] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 330.553416][ T5847] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 330.553523][ T5847] usb 5-1: config 0 has no interface number 0 [ 330.553656][ T5847] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 330.553735][ T5847] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 330.553816][ T5847] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 330.553907][ T5847] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 330.553959][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.743874][ T5847] usb 5-1: config 0 descriptor?? [ 330.814552][ T5847] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 331.063264][ T5701] usb 5-1: USB disconnect, device number 13 [ 331.095327][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 331.232155][ T5701] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 333.517651][T10026] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 333.877159][T10036] ip6erspan0: entered allmulticast mode [ 334.731547][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1636'.        syzkaller syzkaller login: [ 336.765525][T10114] batman_adv: batadv0: Adding interface: syz_tun [ 336.765548][T10114] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.765587][T10114] batman_adv: batadv0: Interface activated: syz_tun [ 337.191925][T10124] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1658'. [ 337.345578][T10129] netlink: 'syz.1.1659': attribute type 12 has an invalid length. [ 337.345607][T10129] netlink: 'syz.1.1659': attribute type 29 has an invalid length. [ 337.345622][T10129] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1659'. [ 337.345644][T10129] netlink: 'syz.1.1659': attribute type 1 has an invalid length. [ 337.769943][T10137] hugetlbfs: syz.0.1661 (10137): Using mlock ulimits for SHM_HUGETLB is obsolete [ 338.459900][T10143] ipvlan2: entered allmulticast mode [ 338.459936][T10143] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 338.800745][T10143] batman_adv: batadv0: Adding interface: ipvlan2 [ 338.800768][T10143] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.800806][T10143] batman_adv: batadv0: Interface activated: ipvlan2 [ 340.352612][T10180] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 340.807849][ T5701] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 340.995404][ T5701] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 341.077033][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.077067][ T5701] usb 1-1: Product: syz [ 341.077083][ T5701] usb 1-1: Manufacturer: syz [ 341.077100][ T5701] usb 1-1: SerialNumber: syz [ 341.135801][ T5701] usb 1-1: config 0 descriptor?? [ 341.717936][ T5575] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 341.872833][ T5701] usb 1-1: Firmware: major: 58, minor: 44, hardware type: UNKNOWN (24) [ 341.914393][ T5575] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.927253][ T5575] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.927286][ T5575] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 341.927311][ T5575] usb 3-1: config 1 has no interface number 0 [ 341.927437][ T5575] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 341.973975][ T5575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.974075][ T5575] usb 3-1: Product: syz [ 341.974093][ T5575] usb 3-1: Manufacturer: syz [ 341.974111][ T5575] usb 3-1: SerialNumber: syz [ 342.089780][ T5701] usb 1-1: failed to fetch extended address, random address set [ 342.089819][ T5701] usb 1-1: atusb_probe: initialization failed, error = -524 [ 342.104018][ T5575] usb 3-1: selecting invalid altsetting 1 [ 342.138683][ T5701] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 342.188881][ T5701] usb 1-1: USB disconnect, device number 9 [ 342.531991][ T5575] usb 3-1: selecting invalid altsetting 1 [ 342.532087][ T5575] cdc_ncm 3-1:1.1: bind() failure [ 342.589516][T10207] FAULT_INJECTION: forcing a failure. [ 342.589516][T10207] name failslab, interval 1, probability 0, space 0, times 0 [ 342.589564][T10207] CPU: 0 UID: 0 PID: 10207 Comm: syz.1.1691 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.589601][T10207] Tainted: [L]=SOFTLOCKUP [ 342.589609][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 342.589623][T10207] Call Trace: [ 342.589631][T10207] [ 342.589642][T10207] dump_stack_lvl+0xe8/0x150 [ 342.589682][T10207] should_fail_ex+0x46b/0x600 [ 342.589722][T10207] should_failslab+0xa8/0x100 [ 342.589746][T10207] ? seq_open+0x62/0x140 [ 342.589766][T10207] kmem_cache_alloc_noprof+0x9e/0x690 [ 342.589798][T10207] ? __kasan_kmalloc+0x93/0xb0 [ 342.589820][T10207] ? seq_open+0x62/0x140 [ 342.589848][T10207] seq_open+0x62/0x140 [ 342.589871][T10207] kernfs_fop_open+0x576/0xcf0 [ 342.589895][T10207] ? fsnotify_open_perm_and_set_mode+0x142/0x6c0 [ 342.589936][T10207] ? __pfx_kernfs_fop_open+0x10/0x10 [ 342.589958][T10207] do_dentry_open+0x849/0x1420 [ 342.589989][T10207] vfs_open+0x3b/0x350 [ 342.590007][T10207] ? path_openat+0x142d/0x1d60 [ 342.590039][T10207] path_openat+0x1448/0x1d60 [ 342.590093][T10207] do_file_open+0x23e/0x4a0 [ 342.590131][T10207] ? __pfx_do_file_open+0x10/0x10 [ 342.590191][T10207] ? alloc_fd+0x654/0x6d0 [ 342.590228][T10207] do_sys_openat2+0x115/0x200 [ 342.590252][T10207] ? __se_sys_futex+0x3a8/0x450 [ 342.590278][T10207] ? __pfx_do_sys_openat2+0x10/0x10 [ 342.590309][T10207] ? rcu_is_watching+0x16/0xb0 [ 342.590348][T10207] __x64_sys_openat+0x138/0x170 [ 342.590379][T10207] do_syscall_64+0x166/0x520 [ 342.590410][T10207] ? trace_irq_disable+0x3b/0x140 [ 342.590442][T10207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.590465][T10207] ? clear_bhb_loop+0x70/0xc0 [ 342.590494][T10207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.590516][T10207] RIP: 0033:0x7fdd427be2d9 [ 342.590539][T10207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.590561][T10207] RSP: 002b:00007fdd40a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 342.590588][T10207] RAX: ffffffffffffffda RBX: 00007fdd42a45fa0 RCX: 00007fdd427be2d9 [ 342.590605][T10207] RDX: 0000000000040002 RSI: 00002000000009c0 RDI: ffffffffffffff9c [ 342.590621][T10207] RBP: 00007fdd42855888 R08: 0000000000000000 R09: 0000000000000000 [ 342.590636][T10207] R10: 0000000000000128 R11: 0000000000000246 R12: 0000000000000000 [ 342.590649][T10207] R13: 00007fdd42a46038 R14: 00007fdd42a45fa0 R15: 00007ffd5efe81a8 [ 342.590685][T10207] [ 342.935893][ T5575] usb 3-1: USB disconnect, device number 17 [ 343.801638][T10230] loop8: detected capacity change from 0 to 8 [ 343.857800][ T202] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 343.892213][T10230] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 343.892486][T10230] loop8: p1 start 3007326008 is beyond EOD, truncated [ 343.892512][T10230] loop8: p2 start 1116552614 is beyond EOD, truncated [ 343.892532][T10230] loop8: p3 start 4058626073 is beyond EOD, truncated [ 343.892552][T10230] loop8: p4 start 3877032223 is beyond EOD, truncated [ 343.892577][T10230] loop8: p5 start 1863299610 is beyond EOD, truncated [ 343.892597][T10230] loop8: p6 start 2539843069 is beyond EOD, truncated [ 343.892617][T10230] loop8: p7 start 1453183921 is beyond EOD, truncated [ 343.892637][T10230] loop8: p8 start 3937267689 is beyond EOD, truncated [ 343.892656][T10230] loop8: p9 start 2621483770 is beyond EOD, truncated [ 343.892676][T10230] loop8: p10 start 1882429387 is beyond EOD, truncated [ 343.892695][T10230] loop8: p11 start 909127271 is beyond EOD, truncated [ 343.892715][T10230] loop8: p12 start 760059908 is beyond EOD, truncated [ 344.023661][ T202] usb 2-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 344.054513][ T202] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 344.054545][ T202] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.054565][ T202] usb 2-1: config 0 interface 0 has no altsetting 0 [ 344.054593][ T202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.123408][ T202] usb 2-1: config 0 descriptor?? [ 344.869286][ T202] asus 0003:0B05:183D.0005: ignoring exceeding usage max [ 345.294981][ T202] asus 0003:0B05:183D.0005: hidraw0: USB HID v0.10 Joystick [HID 0b05:183d] on usb-dummy_hcd.1-1/input0 [ 345.346470][ T202] usb 2-1: USB disconnect, device number 11 [ 345.570106][T10250] fido_id[10250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 346.525402][T10291] FAULT_INJECTION: forcing a failure. [ 346.525402][T10291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.525462][T10291] CPU: 0 UID: 0 PID: 10291 Comm: syz.3.1724 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.525522][T10291] Tainted: [L]=SOFTLOCKUP [ 346.525531][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 346.525554][T10291] Call Trace: [ 346.525564][T10291] [ 346.525576][T10291] dump_stack_lvl+0xe8/0x150 [ 346.525622][T10291] should_fail_ex+0x46b/0x600 [ 346.525667][T10291] _copy_to_user+0x31/0xb0 [ 346.525698][T10291] semctl_info+0x2fe/0x4e0 [ 346.525721][T10291] ? ktime_get+0x1f5/0x220 [ 346.525755][T10291] ? __pfx_semctl_info+0x10/0x10 [ 346.525777][T10291] ? clockevents_program_event+0x491/0x630 [ 346.525833][T10291] ? __pfx_clockevents_program_event+0x10/0x10 [ 346.525873][T10291] __se_sys_semctl+0x2ce/0x3e0 [ 346.525907][T10291] ? irqentry_exit+0x218/0x920 [ 346.525943][T10291] ? __pfx___se_sys_semctl+0x10/0x10 [ 346.525980][T10291] ? irqentry_exit+0x218/0x920 [ 346.526041][T10291] do_syscall_64+0x166/0x520 [ 346.526074][T10291] ? trace_irq_disable+0x3b/0x140 [ 346.526107][T10291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.526132][T10291] ? clear_bhb_loop+0x70/0xc0 [ 346.526161][T10291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.526185][T10291] RIP: 0033:0x7fbe8f1de2d9 [ 346.526208][T10291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.526229][T10291] RSP: 002b:00007fbe8d436028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 346.526257][T10291] RAX: ffffffffffffffda RBX: 00007fbe8f465fa0 RCX: 00007fbe8f1de2d9 [ 346.526275][T10291] RDX: 0000000000000013 RSI: 0000000000000003 RDI: 0000000000000000 [ 346.526290][T10291] RBP: 00007fbe8f275888 R08: 0000000000000000 R09: 0000000000000000 [ 346.526305][T10291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.526320][T10291] R13: 00007fbe8f466038 R14: 00007fbe8f465fa0 R15: 00007ffd72b07318 [ 346.526358][T10291] [ 346.827820][ T5888] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 346.829632][ T37] audit: type=1326 audit(1791895184.032:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.1.1725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd427be2d9 code=0x7ffc0000 [ 346.829694][ T37] audit: type=1326 audit(1791895184.042:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.1.1725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd427be2d9 code=0x7ffc0000 [ 346.829744][ T37] audit: type=1326 audit(1791895184.042:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.1.1725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd427be2d9 code=0x7ffc0000 [ 346.829794][ T37] audit: type=1326 audit(1791895184.042:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.1.1725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fdd427be2d9 code=0x7ffc0000 [ 346.830368][ T37] audit: type=1326 audit(1791895184.042:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.1.1725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd427be2d9 code=0x7ffc0000 [ 346.830421][ T37] audit: type=1326 audit(1791895184.042:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.1.1725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd427be2d9 code=0x7ffc0000 [ 346.831113][ T37] audit: type=1326 audit(1791895184.042:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.1.1725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd427be2d9 code=0x7ffc0000 [ 346.835707][ T37] audit: type=1326 audit(1791895184.042:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10293 comm="syz.1.1725" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd427be2d9 code=0x7ffc0000 [ 347.057934][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 347.059733][ T5888] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 347.063144][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.063185][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.063230][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.123119][ T5888] usb 1-1: config 0 descriptor?? [ 347.580111][ T5888] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 347.580159][ T5888] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 347.744854][ T5888] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 348.226125][ T5722] usb 1-1: USB disconnect, device number 10 [ 348.250931][T10318] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1737'. [ 348.357873][ T5847] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 348.562205][ T5847] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.617520][ T5847] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.617596][ T5847] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 348.617907][ T5847] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 348.655448][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.655480][ T5847] usb 2-1: Product: syz [ 348.655495][ T5847] usb 2-1: Manufacturer: syz [ 348.655510][ T5847] usb 2-1: SerialNumber: syz [ 349.806280][ T5847] cdc_ncm 2-1:1.0: bind() failure [ 349.862084][ T5847] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 349.864098][ T5847] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 349.871576][ T5847] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 349.905765][T10349] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 350.074912][ T5847] usb 2-1: USB disconnect, device number 12 [ 350.133767][ T5316] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 350.360764][ T5316] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 350.396135][ T5316] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 350.396170][ T5316] usb 4-1: Product: syz [ 350.396187][ T5316] usb 4-1: Manufacturer: syz [ 350.396204][ T5316] usb 4-1: SerialNumber: syz [ 350.475801][ T5316] usb 4-1: config 0 descriptor?? [ 350.496093][ T5316] ch341 4-1:0.0: ch341-uart converter detected [ 350.624717][T10363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1755'. [ 350.761397][T10365] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 351.082392][T10368] FAULT_INJECTION: forcing a failure. [ 351.082392][T10368] name failslab, interval 1, probability 0, space 0, times 0 [ 351.082439][T10368] CPU: 1 UID: 0 PID: 10368 Comm: syz.2.1760 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 351.082474][T10368] Tainted: [L]=SOFTLOCKUP [ 351.082484][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 351.082499][T10368] Call Trace: [ 351.082509][T10368] [ 351.082520][T10368] dump_stack_lvl+0xe8/0x150 [ 351.082565][T10368] should_fail_ex+0x46b/0x600 [ 351.082605][T10368] ? __d_alloc+0x37/0x6f0 [ 351.082639][T10368] should_failslab+0xa8/0x100 [ 351.082669][T10368] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 351.082708][T10368] ? __d_alloc+0x37/0x6f0 [ 351.082757][T10368] __d_alloc+0x37/0x6f0 [ 351.082796][T10368] d_alloc_pseudo+0x21/0xc0 [ 351.082833][T10368] alloc_path_pseudo+0x107/0x220 [ 351.082863][T10368] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 351.082888][T10368] ? reacquire_held_locks+0x117/0x1a0 [ 351.082911][T10368] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 351.082951][T10368] alloc_file_pseudo+0xa8/0x1e0 [ 351.082982][T10368] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 351.083019][T10368] anon_inode_getfile+0xc5/0x1a0 [ 351.083046][T10368] do_epoll_create+0x2fc/0x440 [ 351.083074][T10368] __x64_sys_epoll_create1+0x37/0x40 [ 351.083110][T10368] do_syscall_64+0x166/0x520 [ 351.083144][T10368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.083171][T10368] ? clear_bhb_loop+0x70/0xc0 [ 351.083202][T10368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.083227][T10368] RIP: 0033:0x7f226c97e2d9 [ 351.083249][T10368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.083272][T10368] RSP: 002b:00007f226abd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 351.083303][T10368] RAX: ffffffffffffffda RBX: 00007f226cc05fa0 RCX: 00007f226c97e2d9 [ 351.083321][T10368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.083336][T10368] RBP: 00007f226ca15888 R08: 0000000000000000 R09: 0000000000000000 [ 351.083352][T10368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.083367][T10368] R13: 00007f226cc06038 R14: 00007f226cc05fa0 R15: 00007ffec0b12248 [ 351.083407][T10368] [ 351.756363][ T5316] ch341-uart ttyUSB0: failed to read break control: -71 [ 351.756429][ T5316] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 351.802822][ T5316] usb 4-1: USB disconnect, device number 17 [ 351.816731][ T5316] ch341 4-1:0.0: device disconnected [ 351.947888][ T5888] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 352.117863][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 352.120967][ T5888] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 352.124606][ T5888] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 352.124643][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.124674][ T5888] usb 3-1: config 0 has no interface number 0 [ 352.197608][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.201658][ T5888] usb 3-1: Product: syz [ 352.201683][ T5888] usb 3-1: Manufacturer: syz [ 352.201700][ T5888] usb 3-1: SerialNumber: syz [ 352.236875][ T5888] usb 3-1: config 0 descriptor?? [ 352.309637][ T5888] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 352.309769][ T5888] uvcvideo 3-1:0.105: No valid video chain found. [ 352.463961][ T5888] usb 3-1: USB disconnect, device number 18 [ 353.218248][T10388] batadv_slave_1: entered promiscuous mode [ 353.481227][T10386] batadv_slave_1: left promiscuous mode [ 353.584256][T10404] input: syz1 as /devices/virtual/input/input16 [ 354.146497][T10410] FAULT_INJECTION: forcing a failure. [ 354.146497][T10410] name failslab, interval 1, probability 0, space 0, times 0 [ 354.146558][T10410] CPU: 0 UID: 0 PID: 10410 Comm: syz.0.1779 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 354.146592][T10410] Tainted: [L]=SOFTLOCKUP [ 354.146602][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 354.146617][T10410] Call Trace: [ 354.146627][T10410] [ 354.146637][T10410] dump_stack_lvl+0xe8/0x150 [ 354.146680][T10410] should_fail_ex+0x46b/0x600 [ 354.146726][T10410] should_failslab+0xa8/0x100 [ 354.146756][T10410] __kvmalloc_node_noprof+0x176/0x890 [ 354.146785][T10410] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 354.146830][T10410] ? io_alloc_cache_init+0x42/0x140 [ 354.146855][T10410] ? io_alloc_cache_init+0x42/0x140 [ 354.146886][T10410] io_alloc_cache_init+0x42/0x140 [ 354.146915][T10410] io_ring_ctx_alloc+0x518/0xba0 [ 354.146950][T10410] io_uring_create+0x50/0x990 [ 354.146981][T10410] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 354.147009][T10410] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 354.147039][T10410] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 354.147085][T10410] ? rcu_is_watching+0x16/0xb0 [ 354.147124][T10410] do_syscall_64+0x166/0x520 [ 354.147157][T10410] ? trace_irq_disable+0x3b/0x140 [ 354.147190][T10410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.147215][T10410] ? clear_bhb_loop+0x70/0xc0 [ 354.147245][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.147269][T10410] RIP: 0033:0x7f6eff6fe2d9 [ 354.147292][T10410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.147312][T10410] RSP: 002b:00007f6efd955fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 354.147338][T10410] RAX: ffffffffffffffda RBX: 0000200000000240 RCX: 00007f6eff6fe2d9 [ 354.147356][T10410] RDX: 0000200000000440 RSI: 0000200000000240 RDI: 0000000000000021 [ 354.147373][T10410] RBP: 00007f6eff795888 R08: 0000000000000000 R09: 0000000000000000 [ 354.147389][T10410] R10: 0000200000000480 R11: 0000000000000206 R12: 0000200000000440 [ 354.147405][T10410] R13: 0000200000000480 R14: 00002000000002c0 R15: 00007ffe6e3e18c8 [ 354.147442][T10410] [ 355.299352][ T5722] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 355.468232][ T5722] usb 4-1: Using ep0 maxpacket: 16 [ 355.469675][ T5722] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 355.476280][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.476312][ T5722] usb 4-1: Product: syz [ 355.476329][ T5722] usb 4-1: Manufacturer: syz [ 355.476346][ T5722] usb 4-1: SerialNumber: syz [ 355.613042][ T5722] usb 4-1: config 0 descriptor?? [ 356.053649][ T5722] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 356.117944][ T5888] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 356.183672][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 356.186934][ T5722] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 356.187025][ T5722] usb 4-1: media controller created [ 356.270066][T10422] dtv5100: wlen = 0, aborting. [ 356.298738][ T5888] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 356.300361][ T5888] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 356.300400][ T5888] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 356.329160][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.347068][ T5575] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 356.355907][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.355941][ T5888] usb 3-1: Product: syz [ 356.355956][ T5888] usb 3-1: Manufacturer: syz [ 356.355971][ T5888] usb 3-1: SerialNumber: syz [ 356.437397][ T5888] usb 3-1: config 0 descriptor?? [ 356.442992][ T5722] zl10353_read_register: readreg error (reg=127, ret==0) [ 356.443176][ T5722] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 356.443239][ T5722] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 356.449335][T10447] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 356.449593][T10447] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 356.520711][ T5722] usb 4-1: USB disconnect, device number 18 [ 356.591215][ T5575] usb 1-1: Using ep0 maxpacket: 32 [ 356.592407][ T5575] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 356.595535][ T5575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.675195][T10447] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 356.675315][T10447] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 356.744882][ T5575] usb 1-1: config 0 descriptor?? [ 356.899018][ T5575] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 356.904175][ T5888] Error reading MAC address [ 357.030142][ T5722] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 357.063447][ T5888] usb 3-1: USB disconnect, device number 19 [ 357.771985][ T5575] gspca_vc032x: reg_w err -71 [ 357.772096][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772112][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772123][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772133][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772144][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772155][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772166][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772176][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772186][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772197][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772207][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772218][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772229][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772239][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772259][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772269][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772280][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772291][ T5575] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.772302][ T5575] gspca_vc032x: Unknown sensor... [ 357.772443][ T5575] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 357.919782][ T5575] usb 1-1: USB disconnect, device number 11 [ 357.977183][T10477] jffs2: notice: (10477) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 358.393452][T10489] jffs2: notice: (10489) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 358.929112][ T5722] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 359.086525][ T5722] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 359.127427][ T5722] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.127494][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.346557][ T5722] as10x_usb: device has been detected [ 359.350029][ T5722] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 359.528692][ T5722] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 360.063318][T10522] INFO: trying to register non-static key. [ 360.069216][T10522] The code is fine but needs lockdep annotation, or maybe [ 360.076375][T10522] you didn't initialize this object before use? [ 360.082669][T10522] turning off the locking correctness validator. [ 360.089066][T10522] CPU: 0 UID: 0 PID: 10522 Comm: syz.0.1814 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 360.100701][T10522] Tainted: [L]=SOFTLOCKUP [ 360.105073][T10522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 360.115191][T10522] Call Trace: [ 360.118533][T10522] [ 360.121532][T10522] dump_stack_lvl+0xe8/0x150 [ 360.126208][T10522] assign_lock_key+0x133/0x150 [ 360.131052][T10522] register_lock_class+0xcc/0x2e0 [ 360.136158][T10522] ? __lock_acquire+0x747/0x2de0 [ 360.141209][T10522] __lock_acquire+0x10c/0x2de0 [ 360.146139][T10522] ? __lock_acquire+0x747/0x2de0 [ 360.151153][T10522] ? __lock_acquire+0x747/0x2de0 [ 360.156168][T10522] lock_acquire+0x115/0x350 [ 360.160746][T10522] ? as102_stream_ctrl+0x27/0xc0 [ 360.165855][T10522] ? as102_stream_ctrl+0x27/0xc0 [ 360.170887][T10522] ? as102_stream_ctrl+0x27/0xc0 [ 360.175905][T10522] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 360.182042][T10522] ? as102_stream_ctrl+0x27/0xc0 [ 360.187055][T10522] as102_stream_ctrl+0x27/0xc0 [ 360.191940][T10522] __dvb_frontend_open+0x2ef/0xc40 [ 360.197238][T10522] ? mutex_lock_nested+0x152/0x1d0 [ 360.202425][T10522] ? __pfx_dvb_frontend_open+0x10/0x10 [ 360.207967][T10522] dvb_device_open+0x258/0x350 [ 360.212904][T10522] chrdev_open+0x4dc/0x600 [ 360.217379][T10522] ? __pfx_chrdev_open+0x10/0x10 [ 360.222384][T10522] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 360.228822][T10522] ? __pfx_chrdev_open+0x10/0x10 [ 360.233815][T10522] do_dentry_open+0x849/0x1420 [ 360.238655][T10522] vfs_open+0x3b/0x350 [ 360.242927][T10522] ? path_openat+0x142d/0x1d60 [ 360.247770][T10522] path_openat+0x1448/0x1d60 [ 360.252445][T10522] do_file_open+0x23e/0x4a0 [ 360.257018][T10522] ? __pfx_do_file_open+0x10/0x10 [ 360.262136][T10522] ? alloc_fd+0x654/0x6d0 [ 360.266533][T10522] do_sys_openat2+0x115/0x200 [ 360.271276][T10522] ? __se_sys_futex+0x3a8/0x450 [ 360.276195][T10522] ? __pfx_do_sys_openat2+0x10/0x10 [ 360.281469][T10522] ? rcu_is_watching+0x16/0xb0 [ 360.286296][T10522] __x64_sys_openat+0x138/0x170 [ 360.291216][T10522] do_syscall_64+0x166/0x520 [ 360.295882][T10522] ? trace_irq_disable+0x3b/0x140 [ 360.300988][T10522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.307167][T10522] ? clear_bhb_loop+0x70/0xc0 [ 360.311904][T10522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.317855][T10522] RIP: 0033:0x7f6eff6beb0e [ 360.322374][T10522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 360.342036][T10522] RSP: 002b:00007f6efd934b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.350504][T10522] RAX: ffffffffffffffda RBX: 00007f6efd9356c0 RCX: 00007f6eff6beb0e [ 360.358525][T10522] RDX: 0000000000000802 RSI: 00007f6efd934c00 RDI: ffffffffffffff9c [ 360.366551][T10522] RBP: 00007f6efd934c00 R08: 0000000000000000 R09: 0000000000000000 [ 360.374599][T10522] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 360.376795][T10520] A link change request failed with some changes committed already. Interface syzkaller1 may have been left with an inconsistent configuration, please check. [ 360.398480][T10522] R13: 00007f6eff986128 R14: 00007f6eff986090 R15: 00007ffe6e3e18c8 [ 360.406526][T10522] [ 360.476689][ T5722] as10x_usb: error during firmware upload part1 [ 360.477143][ T5722] Registered device Abilis Systems DVB-Titan [ 360.485021][ T5722] usb 1-1: USB disconnect, device number 12 [ 360.510602][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'. [ 360.517327][ T5722] Unregistered device Abilis Systems DVB-Titan [ 360.528603][ T5722] as10x_usb: device has been disconnected