last executing test programs: 18.16776371s ago: executing program 1 (id=248): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x4b2) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 15.017306484s ago: executing program 1 (id=253): r0 = syz_open_dev$loop(&(0x7f0000000500), 0x7fffffff, 0x5042) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x100000001, 0x10c, 0x0, 0x1, 0xb, 0x4, "a41f0021247c72f07581f11d13b9f74d6d7eaedea87a2962e15a2b1f5a2acc94ef449857b6e54383577a8ac349d69c773109186d331e1d6c746814ac05cbfd7a", "a2cff747c03fdd7464b39de646c0778347b99cbb30f0fed957b6b0754f899e934af7870b05caee5a710e9b9563971ab5adae8e3699101899afdef485366e5300", "76e8009665cbb921abdda2a88e2b1bc195c68f767fd5b130e7dcd75f077c6383", [0x972, 0x80000000]}) 14.527348537s ago: executing program 1 (id=255): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000224)={0x2, 0xfa}, 0x2) 14.103981737s ago: executing program 1 (id=259): socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53e", 0x13}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) 12.451968493s ago: executing program 3 (id=263): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x14) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d) 12.373717324s ago: executing program 1 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x1, 0x5}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x0, 0x10001}) 12.321328147s ago: executing program 3 (id=265): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000600)={{0x12, 0x1, 0x300, 0x52, 0x79, 0x34, 0x8, 0x1b80, 0xd3b2, 0xfd73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x80, 0x10, 0x3, "", [{{0x9, 0x4, 0xec, 0xc, 0x0, 0x6a, 0x11, 0xa7, 0x8, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "95e35526c0"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x10, 0xb0d, 0x3, 0xca}, {0x6, 0x24, 0x1a, 0x8}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 11.927232546s ago: executing program 1 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) read$FUSE(r0, &(0x7f0000003c80)={0x2020}, 0xfffffeea) 8.808105065s ago: executing program 0 (id=277): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000224)={0x2, 0xfa}, 0x2) 8.783132936s ago: executing program 3 (id=278): socket(0xf, 0x1, 0xfffffffe) 8.562165909s ago: executing program 0 (id=279): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) socket(0x200000000000011, 0x2, 0xd) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @remote}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xab7f) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 8.246864065s ago: executing program 3 (id=280): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(r3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) socket$kcm(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mmap$IORING_OFF_PBUF_RING(0x0, 0x10001, 0x5, 0x2010, r4, 0x87ab06a6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r5, &(0x7f0000000280)='1', 0x1) 6.742600267s ago: executing program 0 (id=282): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x4b2) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 4.38960735s ago: executing program 3 (id=285): openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x4000, 0x60) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b74318860809050725018705ee7b09050a000002810bac090504"], 0x0) 3.450533609s ago: executing program 0 (id=287): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000224)={0x2, 0xfa}, 0x2) 3.195531785s ago: executing program 2 (id=288): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') 2.645890045s ago: executing program 3 (id=289): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000140)=[{0xff, 0x0, 0x1, &(0x7f0000000340)="81"}], 0x1}) 2.645521906s ago: executing program 2 (id=290): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x70411, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) 2.644604798s ago: executing program 0 (id=291): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0x1, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x72b7, 0x8}) lseek(r0, 0x3ff, 0x3) 2.303948278s ago: executing program 2 (id=292): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r9, r7, &(0x7f0000000340)={0x0, 0x5a7a, 0x400, 0x2, 0x2ce}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f80, 0x40, 0x2, 0x29e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1963, 0x1, 0x3, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5339, 0x10000, 0x1, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6275, 0x8, 0x0, 0x20a, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x0, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xff}, 0x0, r6, '\x00', {0x4, 0xe52, 0x0, 0x0}}, &(0x7f0000001e40)) 966.216915ms ago: executing program 2 (id=293): r0 = socket(0x10, 0x803, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) 553.729027ms ago: executing program 0 (id=294): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) 125.840975ms ago: executing program 2 (id=295): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=296): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0x4b2) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x7f000001}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 65.134434][ T5597] cgroup: Unknown subsys name 'net' [ 65.214017][ T5597] cgroup: Unknown subsys name 'cpuset' [ 65.216609][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.538277][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.730312][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.731928][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.734661][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.736400][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.737055][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.737493][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.740072][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.740471][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.740574][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.741077][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.741973][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.742291][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.746207][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.746519][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.747760][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.750151][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.774050][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.782912][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.783456][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.784581][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.197050][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.197236][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.197357][ T5606] bridge_slave_0: entered allmulticast mode [ 70.199280][ T5606] bridge_slave_0: entered promiscuous mode [ 70.213044][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.213173][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.213294][ T5606] bridge_slave_1: entered allmulticast mode [ 70.214934][ T5606] bridge_slave_1: entered promiscuous mode [ 70.279173][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.311667][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.347781][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.347932][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.348010][ T5608] bridge_slave_0: entered allmulticast mode [ 70.348926][ T5608] bridge_slave_0: entered promiscuous mode [ 70.352022][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.352118][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.352539][ T5608] bridge_slave_1: entered allmulticast mode [ 70.354308][ T5608] bridge_slave_1: entered promiscuous mode [ 70.355452][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.355545][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.355904][ T5609] bridge_slave_0: entered allmulticast mode [ 70.357813][ T5609] bridge_slave_0: entered promiscuous mode [ 70.361794][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.361914][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.362688][ T5609] bridge_slave_1: entered allmulticast mode [ 70.364342][ T5609] bridge_slave_1: entered promiscuous mode [ 70.463777][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.463902][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.464277][ T5607] bridge_slave_0: entered allmulticast mode [ 70.465878][ T5607] bridge_slave_0: entered promiscuous mode [ 70.470042][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.470142][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.470258][ T5607] bridge_slave_1: entered allmulticast mode [ 70.472800][ T5607] bridge_slave_1: entered promiscuous mode [ 70.477581][ T5606] team0: Port device team_slave_0 added [ 70.497244][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.514392][ T5606] team0: Port device team_slave_1 added [ 70.518134][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.522485][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.569908][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.585006][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.586127][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.586141][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.586154][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.617889][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.618872][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.618885][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.618909][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.647104][ T5609] team0: Port device team_slave_0 added [ 70.705081][ T5607] team0: Port device team_slave_0 added [ 70.706830][ T5608] team0: Port device team_slave_0 added [ 70.708732][ T5609] team0: Port device team_slave_1 added [ 70.732941][ T5607] team0: Port device team_slave_1 added [ 70.735388][ T5608] team0: Port device team_slave_1 added [ 70.771707][ T5615] Bluetooth: hci2: command tx timeout [ 70.771707][ T52] Bluetooth: hci0: command tx timeout [ 70.797082][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.797098][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.797120][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.811778][ T5606] hsr_slave_0: entered promiscuous mode [ 70.812824][ T5606] hsr_slave_1: entered promiscuous mode [ 70.841228][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.841252][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.841276][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.851249][ T5615] Bluetooth: hci3: command tx timeout [ 70.851261][ T52] Bluetooth: hci1: command tx timeout [ 70.860949][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.860966][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.860989][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.863211][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.863223][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.863254][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.874032][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.874047][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.874071][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.064140][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.064156][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.064178][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.119559][ T5609] hsr_slave_0: entered promiscuous mode [ 71.120535][ T5609] hsr_slave_1: entered promiscuous mode [ 71.122067][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 71.122149][ T5609] Cannot create hsr debugfs directory [ 71.184456][ T5607] hsr_slave_0: entered promiscuous mode [ 71.185086][ T5607] hsr_slave_1: entered promiscuous mode [ 71.185474][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 71.185490][ T5607] Cannot create hsr debugfs directory [ 71.205391][ T5608] hsr_slave_0: entered promiscuous mode [ 71.206256][ T5608] hsr_slave_1: entered promiscuous mode [ 71.206943][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 71.206960][ T5608] Cannot create hsr debugfs directory [ 71.415684][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.415982][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.553634][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.559153][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.559980][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.568798][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.594438][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.598611][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.616022][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.618638][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.664883][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.670172][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.685858][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.688786][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.689440][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.694268][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.699388][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.708105][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.811805][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.816990][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.817723][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.820423][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.853148][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.855466][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.856885][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.860024][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.954818][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.957531][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.958124][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.960529][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.974690][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.986289][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.994177][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.013322][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.016102][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.067223][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.089302][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.089405][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.113912][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.113973][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.119625][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.207299][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.239583][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.239676][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.252329][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.252427][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.275699][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.344594][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.384284][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.384378][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.427604][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.427704][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.463511][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.545101][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.577598][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.577788][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.604627][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.604730][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.851512][ T5615] Bluetooth: hci2: command tx timeout [ 72.851545][ T5615] Bluetooth: hci0: command tx timeout [ 72.931737][ T52] Bluetooth: hci3: command tx timeout [ 72.931772][ T52] Bluetooth: hci1: command tx timeout [ 73.120648][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.266812][ T5606] veth0_vlan: entered promiscuous mode [ 73.306916][ T5606] veth1_vlan: entered promiscuous mode [ 73.384973][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.404690][ T5606] veth0_macvtap: entered promiscuous mode [ 73.426150][ T5606] veth1_macvtap: entered promiscuous mode [ 73.477126][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.490450][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.507144][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.576186][ T5609] veth0_vlan: entered promiscuous mode [ 73.581421][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.581548][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.581582][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.581615][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.626265][ T5609] veth1_vlan: entered promiscuous mode [ 73.665340][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.689095][ T5608] veth0_vlan: entered promiscuous mode [ 73.739061][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.739086][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.742144][ T5608] veth1_vlan: entered promiscuous mode [ 73.803297][ T5609] veth0_macvtap: entered promiscuous mode [ 73.826522][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.826543][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.850564][ T5609] veth1_macvtap: entered promiscuous mode [ 73.865446][ T5607] veth0_vlan: entered promiscuous mode [ 73.915796][ T5608] veth0_macvtap: entered promiscuous mode [ 73.920283][ T5607] veth1_vlan: entered promiscuous mode [ 73.925887][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.930442][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.960117][ T5606] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.987889][ T5608] veth1_macvtap: entered promiscuous mode [ 74.019458][ T5607] veth0_macvtap: entered promiscuous mode [ 74.031945][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.031992][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.032025][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.032057][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.052357][ T5607] veth1_macvtap: entered promiscuous mode [ 74.089841][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.145625][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.160943][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.192839][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.192860][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.195427][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.278826][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.278847][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.281497][ T191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.284675][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.284717][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.284751][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.344764][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.351966][ T191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.436413][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.439399][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.499341][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.499362][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.550629][ T5760] ubi0: attaching mtd0 [ 74.560748][ T5760] ubi0: scanning is finished [ 74.560773][ T5760] ubi0: empty MTD device detected [ 74.586013][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.586034][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.614549][ T5763] FAULT_INJECTION: forcing a failure. [ 74.614549][ T5763] name failslab, interval 1, probability 0, space 0, times 1 [ 74.614586][ T5763] CPU: 1 UID: 0 PID: 5763 Comm: syz.2.5 Not tainted syzkaller #0 PREEMPT(full) [ 74.614604][ T5763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.614618][ T5763] Call Trace: [ 74.614627][ T5763] [ 74.614634][ T5763] dump_stack_lvl+0xe8/0x150 [ 74.614664][ T5763] should_fail_ex+0x3eb/0x540 [ 74.614684][ T5763] should_failslab+0xa8/0x100 [ 74.614701][ T5763] ? do_getname_kernel+0x54/0x230 [ 74.614719][ T5763] kmem_cache_alloc_noprof+0x9c/0x600 [ 74.614741][ T5763] ? do_getname_kernel+0x54/0x230 [ 74.614762][ T5763] do_getname_kernel+0x54/0x230 [ 74.614778][ T5763] ? kern_path+0x1b/0x150 [ 74.614797][ T5763] kern_path+0x25/0x150 [ 74.614815][ T5763] lookup_bdev+0xc8/0x2b0 [ 74.614833][ T5763] ? __pfx_lookup_bdev+0x10/0x10 [ 74.614849][ T5763] ? do_getname+0x151/0x250 [ 74.614867][ T5763] __se_sys_quotactl+0x268/0x9a0 [ 74.614883][ T5763] ? __se_sys_futex+0x3a8/0x450 [ 74.614903][ T5763] ? __pfx___se_sys_quotactl+0x10/0x10 [ 74.614919][ T5763] ? rcu_is_watching+0x16/0xb0 [ 74.614948][ T5763] do_syscall_64+0x166/0x520 [ 74.614963][ T5763] ? trace_irq_disable+0x3b/0x140 [ 74.614984][ T5763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.615000][ T5763] ? clear_bhb_loop+0x70/0xc0 [ 74.615016][ T5763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.615030][ T5763] RIP: 0033:0x7f68fc59e159 [ 74.615048][ T5763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.615061][ T5763] RSP: 002b:00007f68fd3a5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 74.615081][ T5763] RAX: ffffffffffffffda RBX: 00007f68fc826090 RCX: 00007f68fc59e159 [ 74.615091][ T5763] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000901 [ 74.615101][ T5763] RBP: 00007f68fc635024 R08: 0000000000000000 R09: 0000000000000000 [ 74.615111][ T5763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.615120][ T5763] R13: 00007f68fc826128 R14: 00007f68fc826090 R15: 00007ffe9f102318 [ 74.615141][ T5763] [ 74.657676][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.657695][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.770125][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.770144][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.872225][ T5751] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.931466][ T5615] Bluetooth: hci0: command tx timeout [ 74.931498][ T5615] Bluetooth: hci2: command tx timeout [ 74.957551][ T5764] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 75.012252][ T52] Bluetooth: hci1: command tx timeout [ 75.012285][ T52] Bluetooth: hci3: command tx timeout [ 75.041213][ T5751] usb 1-1: Using ep0 maxpacket: 8 [ 75.090047][ T5760] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 75.090073][ T5760] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 75.090091][ T5760] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 75.090106][ T5760] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 75.090122][ T5760] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 75.090137][ T5760] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 75.090146][ T5760] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2930318656 [ 75.090156][ T5760] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 75.099485][ T5772] ubi0: background thread "ubi_bgt0d" started, PID 5772 [ 75.223026][ T5768] smpboot: CPU 1 is now offline [ 75.344998][ T5762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.393313][ T5751] usb 1-1: unable to get BOS descriptor or descriptor too short [ 75.393394][ T5751] usb 1-1: New USB device found, idVendor=534d, idProduct=0021, bcdDevice= 0.40 [ 75.427187][ T5751] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 75.427211][ T5751] usb 1-1: can't read configurations, error -71 [ 76.075490][ T5787] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 76.080349][ T5776] Set syz1 is full, maxelem 6117 reached [ 77.012635][ T5615] Bluetooth: hci0: command tx timeout [ 77.012662][ T5615] Bluetooth: hci2: command tx timeout [ 77.092158][ T52] Bluetooth: hci1: command tx timeout [ 77.092182][ T52] Bluetooth: hci3: command tx timeout [ 77.478698][ T5787] smc: net device lo applied user defined pnetid SYZ0 [ 77.478766][ T5787] smc: smcd device lo applied user defined pnetid SYZ0 [ 78.769906][ T5700] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.841992][ T5610] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.943980][ T5700] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 78.948443][ T5700] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.948474][ T5700] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 78.948485][ T5700] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 78.948497][ T5700] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.948519][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.021035][ T5610] usb 4-1: Using ep0 maxpacket: 16 [ 79.022999][ T5610] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 79.028854][ T5610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.028873][ T5610] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.028884][ T5610] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 79.028907][ T5610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.106390][ T5610] usb 4-1: config 0 descriptor?? [ 79.492094][ T5700] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.566365][ T5610] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 79.566390][ T5610] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 79.566406][ T5610] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 79.566421][ T5610] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 79.566435][ T5610] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 79.566450][ T5610] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 79.566464][ T5610] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 79.566479][ T5610] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 79.566493][ T5610] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 79.566507][ T5610] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 79.659385][ T4941] usb 3-1: USB disconnect, device number 2 [ 79.670962][ T5700] usb 1-1: Using ep0 maxpacket: 32 [ 79.673125][ T5700] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 79.677129][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.677148][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.677169][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.737662][ T5700] usb 1-1: config 0 descriptor?? [ 79.748257][ T5610] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input7 [ 79.912124][ T5610] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 79.979769][ T5610] usb 4-1: USB disconnect, device number 2 [ 80.173531][ T5813] fido_id[5813]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 80.414843][ T5700] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 80.415089][ T5700] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -71 [ 80.602607][ T5700] usb 1-1: USB disconnect, device number 4 [ 84.122404][ T5841] Set syz1 is full, maxelem 6117 reached [ 85.470203][ T5863] FAULT_INJECTION: forcing a failure. [ 85.470203][ T5863] name failslab, interval 1, probability 0, space 0, times 0 [ 85.470223][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(full) [ 85.470236][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.470243][ T5863] Call Trace: [ 85.470248][ T5863] [ 85.470253][ T5863] dump_stack_lvl+0xe8/0x150 [ 85.470272][ T5863] should_fail_ex+0x3eb/0x540 [ 85.470288][ T5863] should_failslab+0xa8/0x100 [ 85.470301][ T5863] ? __kernfs_new_node+0xe6/0x980 [ 85.470318][ T5863] kmem_cache_alloc_noprof+0x9c/0x600 [ 85.470333][ T5863] ? kstrdup+0x81/0x100 [ 85.470350][ T5863] ? __kernfs_new_node+0xe6/0x980 [ 85.470384][ T5863] __kernfs_new_node+0xe6/0x980 [ 85.470404][ T5863] ? vsnprintf+0xe42/0xef0 [ 85.470421][ T5863] ? __pfx___kernfs_new_node+0x10/0x10 [ 85.470436][ T5863] ? kernfs_root+0x1c/0x230 [ 85.470454][ T5863] ? kernfs_root+0x1c/0x230 [ 85.470468][ T5863] ? kernfs_root+0x1c/0x230 [ 85.470486][ T5863] kernfs_new_node+0xea/0x140 [ 85.470504][ T5863] __kernfs_create_file+0x4b/0x2e0 [ 85.470518][ T5863] cgroup_addrm_files+0x8f4/0xd50 [ 85.470540][ T5863] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 85.470552][ T5863] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.470567][ T5863] ? __radix_tree_replace+0x272/0x2f0 [ 85.470581][ T5863] ? delete_node+0x3cd/0xa30 [ 85.470605][ T5863] css_populate_dir+0x123/0x3d0 [ 85.470622][ T5863] cgroup_apply_control_enable+0x797/0xda0 [ 85.470641][ T5863] cgroup_mkdir+0xd20/0xf70 [ 85.470656][ T5863] ? __pfx_cgroup_mkdir+0x10/0x10 [ 85.470667][ T5863] kernfs_iop_mkdir+0x213/0x360 [ 85.470680][ T5863] vfs_mkdir+0x398/0x710 [ 85.470693][ T5863] filename_mkdirat+0x285/0x510 [ 85.470702][ T5863] ? __might_fault+0xaf/0x130 [ 85.470718][ T5863] ? __pfx_filename_mkdirat+0x10/0x10 [ 85.470730][ T5863] ? do_getname+0x151/0x250 [ 85.470744][ T5863] __se_sys_mkdirat+0x35/0x150 [ 85.470755][ T5863] do_syscall_64+0x166/0x520 [ 85.470765][ T5863] ? trace_irq_disable+0x3b/0x140 [ 85.470779][ T5863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.470790][ T5863] ? clear_bhb_loop+0x70/0xc0 [ 85.470803][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.470814][ T5863] RIP: 0033:0x7fab9ab9e159 [ 85.470825][ T5863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.470834][ T5863] RSP: 002b:00007fab9b9e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 85.470846][ T5863] RAX: ffffffffffffffda RBX: 00007fab9ae25fa0 RCX: 00007fab9ab9e159 [ 85.470854][ T5863] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 85.470861][ T5863] RBP: 00007fab9ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 85.470867][ T5863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.470873][ T5863] R13: 00007fab9ae26038 R14: 00007fab9ae25fa0 R15: 00007ffd03c2b8c8 [ 85.470890][ T5863] [ 85.790894][ T5863] cgroup: cgroup_addrm_files: failed to add reset_stats, err=-12 [ 86.271074][ T4941] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 86.426434][ T4941] usb 1-1: unable to get BOS descriptor or descriptor too short [ 86.428651][ T4941] usb 1-1: not running at top speed; connect to a high speed hub [ 86.428672][ T4941] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 86.432191][ T4941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.432205][ T4941] usb 1-1: Product: syz [ 86.432213][ T4941] usb 1-1: Manufacturer: syz [ 86.432220][ T4941] usb 1-1: SerialNumber: syz [ 86.785201][ T4941] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.790461][ T10] cfg80211: failed to load regulatory.db [ 88.214622][ T4941] usb 1-1: USB disconnect, device number 5 [ 88.425931][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.596130][ T5894] misc userio: The device must be registered before sending interrupts [ 88.854172][ T5902] e1000e 0000:00:00.0: probe with driver e1000e failed with error -5 [ 89.710081][ T5921] misc userio: The device must be registered before sending interrupts [ 90.522533][ T5700] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 90.664731][ T5945] misc userio: The device must be registered before sending interrupts [ 90.682293][ T5700] usb 2-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 90.693030][ T5700] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.693050][ T5700] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 90.693063][ T5700] usb 2-1: config 0 interface 0 has no altsetting 0 [ 90.693081][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.694950][ T5700] usb 2-1: config 0 descriptor?? [ 90.696845][ T5935] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 90.825089][ T5947] 0x00000000000a-0x000000000309 : "" [ 90.854834][ T5947] ftl_cs: FTL header corrupt! [ 91.128914][ T5700] input: HID 05ac:8102 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8102.0003/input/input23 [ 91.217523][ T5700] apple 0003:05AC:8102.0003: input,hidraw0: USB HID v0.7f Joystick [HID 05ac:8102] on usb-dummy_hcd.1-1/input0 [ 91.339059][ T5700] usb 2-1: USB disconnect, device number 2 [ 92.101393][ T4941] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.215443][ T5960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.250951][ T4941] usb 3-1: Using ep0 maxpacket: 16 [ 92.251522][ T4941] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 92.252503][ T4941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.252854][ T4941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.252869][ T4941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.252880][ T4941] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 92.252891][ T4941] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.255087][ T4941] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 92.255100][ T4941] usb 3-1: Manufacturer: syz [ 92.367344][ T4941] usb 3-1: config 0 descriptor?? [ 92.712247][ T4941] rc_core: IR keymap rc-hauppauge not found [ 92.712260][ T4941] Registered IR keymap rc-empty [ 92.712503][ T4941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.745446][ T4941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.770232][ T4941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 92.789950][ T4941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25 [ 92.843954][ T4941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.867684][ T4941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.881509][ T4941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.901086][ T4941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.922200][ T4941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.941613][ T4941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.960917][ T4941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 92.980936][ T4941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 93.008566][ T4941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 93.033453][ T4941] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 93.745080][ T4941] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 93.745096][ T4941] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 94.153705][ T4941] usb 3-1: USB disconnect, device number 3 [ 94.622125][ T4941] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 94.669080][ T5974] misc userio: No port type given on /dev/userio [ 94.669268][ T5974] misc userio: The device must be registered before sending interrupts [ 94.775639][ T4941] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 94.779472][ T4941] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 94.779489][ T4941] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 94.779498][ T4941] usb 3-1: config 4 has no interface number 0 [ 94.779518][ T4941] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.839387][ T4941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.839404][ T4941] usb 3-1: Product: syz [ 94.839411][ T4941] usb 3-1: Manufacturer: syz [ 94.839419][ T4941] usb 3-1: SerialNumber: syz [ 95.276476][ T4941] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 95.293577][ T4941] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 95.295595][ T4941] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 95.295631][ T4941] usb 3-1: media controller created [ 95.326068][ T4941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.395034][ T4941] DVB: Unable to find symbol dib7000p_attach() [ 95.395048][ T4941] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 95.470937][ T4941] rc_core: IR keymap rc-dib0700-rc5 not found [ 95.470951][ T4941] Registered IR keymap rc-empty [ 95.471304][ T4941] dvb-usb: could not initialize remote control. [ 95.471311][ T4941] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 96.412825][ T5991] FAULT_INJECTION: forcing a failure. [ 96.412825][ T5991] name failslab, interval 1, probability 0, space 0, times 0 [ 96.412845][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT(full) [ 96.412860][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.412867][ T5991] Call Trace: [ 96.412872][ T5991] [ 96.412876][ T5991] dump_stack_lvl+0xe8/0x150 [ 96.412896][ T5991] should_fail_ex+0x3eb/0x540 [ 96.412912][ T5991] should_failslab+0xa8/0x100 [ 96.412924][ T5991] ? prepare_creds+0x30/0x820 [ 96.412942][ T5991] kmem_cache_alloc_noprof+0x9c/0x600 [ 96.412958][ T5991] ? prepare_creds+0x30/0x820 [ 96.412977][ T5991] prepare_creds+0x30/0x820 [ 96.412995][ T5991] cap_task_prctl+0x7b1/0xa40 [ 96.413008][ T5991] security_task_prctl+0xf6/0x190 [ 96.413024][ T5991] __se_sys_prctl+0xbf/0x1910 [ 96.413042][ T5991] ? __pfx___se_sys_prctl+0x10/0x10 [ 96.413061][ T5991] ? __x64_sys_prctl+0x20/0xc0 [ 96.413078][ T5991] do_syscall_64+0x166/0x520 [ 96.413088][ T5991] ? trace_irq_disable+0x3b/0x140 [ 96.413103][ T5991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.413114][ T5991] ? clear_bhb_loop+0x70/0xc0 [ 96.413127][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.413138][ T5991] RIP: 0033:0x7fc05a79e159 [ 96.413149][ T5991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.413158][ T5991] RSP: 002b:00007fc0589f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 96.413170][ T5991] RAX: ffffffffffffffda RBX: 00007fc05aa25fa0 RCX: 00007fc05a79e159 [ 96.413178][ T5991] RDX: 0000000000000000 RSI: 0000000000000024 RDI: 000000000000001c [ 96.413185][ T5991] RBP: 00007fc05a835024 R08: 0000000000000000 R09: 0000000000000000 [ 96.413191][ T5991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.413197][ T5991] R13: 00007fc05aa26038 R14: 00007fc05aa25fa0 R15: 00007ffe6b1e7368 [ 96.413213][ T5991] [ 96.978052][ T5999] misc userio: No port type given on /dev/userio [ 96.979084][ T5999] misc userio: The device must be registered before sending interrupts [ 97.445692][ T6005] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 97.455560][ T5610] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 97.622767][ T5610] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.623220][ T5610] usb 4-1: not running at top speed; connect to a high speed hub [ 97.623238][ T5610] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.624069][ T5610] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 97.625644][ T5610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.625675][ T5610] usb 4-1: Product: syz [ 97.625683][ T5610] usb 4-1: Manufacturer: syz [ 97.625690][ T5610] usb 4-1: SerialNumber: syz [ 97.907972][ T5610] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 97.908003][ T5610] cdc_ncm 4-1:1.0: bind() failure [ 97.934553][ T5610] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 97.934609][ T5610] cdc_ncm 4-1:1.1: bind() failure [ 98.028264][ T5610] usb 4-1: USB disconnect, device number 3 [ 99.882776][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 100.032714][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.035958][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.035987][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.037560][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.037588][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.042138][ T10] usb 1-1: config 0 descriptor?? [ 100.526579][ T10] hid_parser_main: 7 callbacks suppressed [ 100.526595][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 100.526613][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 100.526629][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 100.526644][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 100.526658][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 100.628848][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 100.676454][ T5610] usb 3-1: USB disconnect, device number 4 [ 100.812698][ T5610] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 100.831552][ T10] usb 1-1: USB disconnect, device number 6 [ 100.870466][ T6023] fido_id[6023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 101.038584][ T6027] misc userio: No port type given on /dev/userio [ 101.038785][ T6027] misc userio: The device must be registered before sending interrupts [ 101.516429][ T6036] misc userio: The device must be registered before sending interrupts [ 101.516665][ T6036] misc userio: The device must be registered before sending interrupts [ 101.517458][ T6036] misc userio: The device must be registered before sending interrupts [ 101.721088][ T6039] misc userio: The device must be registered before sending interrupts [ 101.721306][ T6039] misc userio: The device must be registered before sending interrupts [ 101.829234][ T6033] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.285954][ T6055] warning: `syz.1.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.527490][ T6059] misc userio: The device must be registered before sending interrupts [ 102.679744][ T6061] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.709027][ T6059] misc userio: The device must be registered before sending interrupts [ 102.720911][ T6059] misc userio: The device must be registered before sending interrupts [ 102.749785][ T6063] misc userio: The device must be registered before sending interrupts [ 102.750161][ T6063] misc userio: The device must be registered before sending interrupts [ 103.572110][ T30] audit: type=1326 audit(1788701570.585:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.1.121" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05a79e159 code=0x7ffc0000 [ 103.611195][ T30] audit: type=1326 audit(1788701570.635:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.1.121" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05a79e159 code=0x7ffc0000 [ 103.618328][ T30] audit: type=1326 audit(1788701570.635:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.1.121" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fc05a79e159 code=0x7ffc0000 [ 103.618360][ T30] audit: type=1326 audit(1788701570.635:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.1.121" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05a79e159 code=0x7ffc0000 [ 103.618381][ T30] audit: type=1326 audit(1788701570.635:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.1.121" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05a79e159 code=0x7ffc0000 [ 103.868972][ T6093] misc userio: The device must be registered before sending interrupts [ 103.869632][ T6093] misc userio: The device must be registered before sending interrupts [ 103.891351][ T6093] misc userio: The device must be registered before sending interrupts [ 103.959276][ T6095] misc userio: The device must be registered before sending interrupts [ 103.971894][ T6095] misc userio: The device must be registered before sending interrupts [ 104.099934][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'. [ 104.290446][ T6106] netlink: 'syz.1.129': attribute type 10 has an invalid length. [ 104.306574][ T59] IPVS: starting estimator thread 0... [ 104.391859][ T6108] IPVS: using max 53 ests per chain, 127200 per kthread [ 104.393377][ T6106] team0 (unregistering): Port device team_slave_0 removed [ 104.429352][ T6106] team0 (unregistering): Port device team_slave_1 removed [ 104.737401][ T6116] misc userio: No port type given on /dev/userio [ 104.749494][ T6116] misc userio: The device must be registered before sending interrupts [ 104.764219][ T6116] misc userio: The device must be registered before sending interrupts [ 104.764282][ T6116] misc userio: The device must be registered before sending interrupts [ 104.800290][ T6118] misc userio: No port type given on /dev/userio [ 104.811217][ T6118] misc userio: The device must be registered before sending interrupts [ 104.811315][ T6118] misc userio: The device must be registered before sending interrupts [ 105.276961][ T6131] syzkaller1: entered promiscuous mode [ 105.276976][ T6131] syzkaller1: entered allmulticast mode [ 105.496976][ T6136] misc userio: No port type given on /dev/userio [ 105.502179][ T6136] misc userio: The device must be registered before sending interrupts [ 105.525334][ T6136] misc userio: The device must be registered before sending interrupts [ 105.527102][ T6136] misc userio: The device must be registered before sending interrupts [ 105.606644][ T6138] misc userio: No port type given on /dev/userio [ 105.607896][ T6138] misc userio: The device must be registered before sending interrupts [ 105.607951][ T6138] misc userio: The device must be registered before sending interrupts [ 108.378020][ T6165] misc userio: No port type given on /dev/userio [ 108.378226][ T6165] misc userio: The device must be registered before sending interrupts [ 108.402654][ T6165] misc userio: The device must be registered before sending interrupts [ 108.418546][ T6165] misc userio: The device must be registered before sending interrupts [ 108.506055][ T6167] misc userio: No port type given on /dev/userio [ 108.520780][ T6167] misc userio: The device must be registered before sending interrupts [ 108.532392][ T6167] misc userio: The device must be registered before sending interrupts [ 108.606071][ T6169] kernel read not supported for file /sg0 (pid: 6169 comm: syz.2.156) [ 109.092874][ T5692] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.243204][ T5692] usb 2-1: Using ep0 maxpacket: 32 [ 109.244268][ T5692] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 109.247139][ T5692] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 109.247154][ T5692] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 109.247165][ T5692] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 109.247175][ T5692] usb 2-1: config 1 has no interface number 0 [ 109.247197][ T5692] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.247210][ T5692] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 109.247232][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.251178][ T5610] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 109.363762][ T5692] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 109.402990][ T5610] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.403036][ T5610] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 109.406450][ T5610] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 109.406466][ T5610] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 109.406477][ T5610] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 109.406487][ T5610] usb 1-1: config 129 has no interface number 0 [ 109.406495][ T5610] usb 1-1: config 129 has no interface number 1 [ 109.406521][ T5610] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 109.406550][ T5610] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 109.406568][ T5610] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 109.406581][ T5610] usb 1-1: config 129 interface 135 has no altsetting 0 [ 109.406590][ T5610] usb 1-1: config 129 interface 5 has no altsetting 0 [ 109.419741][ T5610] usb 1-1: string descriptor 0 read error: -22 [ 109.419822][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.589731][ T5692] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 109.606982][ T5610] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.607029][ T5610] usb 1-1: MIDIStreaming interface descriptor not found [ 109.781929][ T6194] ªªªªªª: renamed from vlan0 (while UP) [ 109.841367][ T5610] usb 1-1: USB disconnect, device number 7 [ 109.997240][ T5692] usb 2-1: USB disconnect, device number 3 [ 110.025418][ T5692] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 110.259972][ T6200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.660702][ T6206] misc userio: Invalid payload size [ 110.666576][ T6206] misc userio: No port type given on /dev/userio [ 110.666642][ T6206] misc userio: The device must be registered before sending interrupts [ 111.334962][ T6226] misc userio: Invalid payload size [ 111.335151][ T6226] misc userio: No port type given on /dev/userio [ 111.335201][ T6226] misc userio: The device must be registered before sending interrupts [ 111.354714][ T5610] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.492264][ T5692] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 111.510911][ T5610] usb 2-1: Using ep0 maxpacket: 8 [ 111.513475][ T5610] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 111.515918][ T5610] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.515931][ T5610] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.517547][ T5610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.517560][ T5610] usb 2-1: Product: syz [ 111.517568][ T5610] usb 2-1: Manufacturer: syz [ 111.517575][ T5610] usb 2-1: SerialNumber: syz [ 111.644603][ T5692] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 111.662672][ T5692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.662687][ T5692] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 111.665607][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 111.665622][ T5692] usb 1-1: SerialNumber: syz [ 111.669021][ T5692] usb 1-1: config 0 descriptor?? [ 111.721445][ T5692] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 111.721493][ T5692] dvb-usb: bulk message failed: -22 (3/0) [ 111.746695][ T5692] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 111.748721][ T5692] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 111.748753][ T5692] usb 1-1: media controller created [ 111.774771][ T5692] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.806782][ T5692] dvb-usb: bulk message failed: -22 (6/0) [ 111.806869][ T5692] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 111.831992][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 111.835068][ T5692] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 111.836670][ T5692] dvb-usb: schedule remote query interval to 150 msecs. [ 111.836694][ T5692] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 111.951588][ T5692] usb 1-1: USB disconnect, device number 8 [ 112.080707][ T5692] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 113.530698][ T6242] ======================================================= [ 113.530698][ T6242] WARNING: The mand mount option has been deprecated and [ 113.530698][ T6242] and is ignored by this kernel. Remove the mand [ 113.530698][ T6242] option from the mount to silence this warning. [ 113.530698][ T6242] ======================================================= [ 113.575630][ T6242] 9p: Bad value for 'rfdno' [ 113.888641][ T6252] misc userio: Invalid payload size [ 113.896498][ T6252] misc userio: No port type given on /dev/userio [ 113.914487][ T6252] misc userio: The device must be registered before sending interrupts [ 114.042485][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 114.045568][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 114.073510][ T5700] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.230993][ T5700] usb 4-1: Using ep0 maxpacket: 8 [ 114.231598][ T5700] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.232579][ T5700] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 114.232596][ T5700] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 114.232608][ T5700] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.232626][ T5700] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.232647][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.450764][ T5700] usb 4-1: usb_control_msg returned -32 [ 114.460610][ T5700] usbtmc 4-1:16.0: can't read capabilities [ 114.576583][ T5610] usb 2-1: 0:1 : does not exist [ 114.579493][ T5610] usb 2-1: BAAD HEADSET c_chmask mismatch [ 114.743504][ T5610] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 114.764127][ T5610] usb 2-1: USB disconnect, device number 4 [ 114.781806][ T5692] usb 4-1: USB disconnect, device number 4 [ 114.854982][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.214910][ T6278] misc userio: Invalid payload size [ 115.215978][ T6278] misc userio: The device must be registered before sending interrupts [ 115.489850][ T6288] futex_wake_op: syz.0.203 tries to shift op by 144; fix this program [ 115.611020][ T5692] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.760913][ T5692] usb 2-1: Using ep0 maxpacket: 16 [ 115.764526][ T5692] usb 2-1: unable to get BOS descriptor or descriptor too short [ 115.764556][ T5692] usb 2-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=52.b8 [ 115.765631][ T5692] usb 2-1: config 9 has an invalid interface number: 88 but max is 0 [ 115.765644][ T5692] usb 2-1: config 9 has no interface number 0 [ 115.765660][ T5692] usb 2-1: config 9 interface 88 has no altsetting 0 [ 115.769562][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.769576][ T5692] usb 2-1: Product: syz [ 115.769583][ T5692] usb 2-1: Manufacturer: syz [ 115.769590][ T5692] usb 2-1: SerialNumber: syz [ 115.990889][ T5700] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.067788][ T5692] ums-datafab 2-1:9.88: USB Mass Storage device detected [ 116.144514][ T5700] usb 1-1: Using ep0 maxpacket: 8 [ 116.148511][ T5700] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 116.150595][ T5700] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 116.181367][ T5700] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 116.181385][ T5700] usb 1-1: Product: syz [ 116.181393][ T5700] usb 1-1: Manufacturer: syz [ 116.181400][ T5700] usb 1-1: SerialNumber: syz [ 116.228299][ T5692] ums-sddr55 2-1:9.88: USB Mass Storage device detected [ 116.311722][ T5692] usb 2-1: USB disconnect, device number 5 [ 116.438993][ T5700] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 116.439010][ T5700] usb 1-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 116.439019][ T5700] usb 1-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 116.439028][ T5700] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 116.557433][ T6306] misc userio: Invalid payload size [ 116.557723][ T6306] misc userio: The device must be registered before sending interrupts [ 116.655004][ T5700] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 116.683985][ T5700] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 116.702311][ T5700] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 116.866005][ T9] usb 1-1: USB disconnect, device number 9 [ 116.888241][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 116.912105][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 116.916027][ T9] visor 1-1:1.0: device disconnected [ 116.971837][ T5700] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.121883][ T5700] usb 4-1: Using ep0 maxpacket: 16 [ 117.122801][ T5700] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 117.125275][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.125289][ T5700] usb 4-1: Product: syz [ 117.125296][ T5700] usb 4-1: Manufacturer: syz [ 117.125304][ T5700] usb 4-1: SerialNumber: syz [ 117.130338][ T5700] usb 4-1: config 0 descriptor?? [ 117.176602][ T5700] usb 4-1: selecting invalid altsetting 1 [ 117.183950][ T5700] technisat-usb2: could not set alternate setting to 0 [ 117.282031][ T5610] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.387345][ T5700] technisat-usb2: firmware version: 0.0 [ 117.387372][ T5700] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 117.432461][ T5610] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 117.447948][ T5610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.447965][ T5610] usb 2-1: Product: syz [ 117.447989][ T5610] usb 2-1: Manufacturer: syz [ 117.447997][ T5610] usb 2-1: SerialNumber: syz [ 117.601123][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.658478][ T5692] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 117.753207][ T9] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 117.754187][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.754203][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 117.755958][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.755971][ T9] usb 3-1: Product: syz [ 117.756013][ T9] usb 3-1: Manufacturer: syz [ 117.756021][ T9] usb 3-1: SerialNumber: syz [ 117.836730][ T5700] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.838068][ T5700] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 117.838099][ T5700] usb 4-1: media controller created [ 117.838130][ T5700] technisat-usb2: i2c-error: out failed 53 = -22 [ 117.838177][ T5700] dvb-usb: MAC address reading failed. [ 117.884158][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 117.924570][ T5700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.028688][ T6329] misc userio: Invalid payload size [ 118.028958][ T6329] misc userio: The device must be registered before sending interrupts [ 118.057020][ T6308] technisat-usb2: i2c-error: out failed 00 = -22 [ 118.693383][ T5692] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 118.693647][ T5692] ath9k_htc: Failed to initialize the device [ 119.303269][ T9] kaweth 3-1:1.0: Firmware present in device. [ 119.328181][ T5610] usb 2-1: USB disconnect, device number 6 [ 119.363799][ T5700] DVB: Unable to find symbol stv090x_attach() [ 119.366626][ T5700] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 119.390926][ T9] kaweth 3-1:1.0: Statistics collection: 0 [ 119.390940][ T9] kaweth 3-1:1.0: Multicast filter limit: 0 [ 119.390948][ T9] kaweth 3-1:1.0: MTU: 0 [ 119.390955][ T9] kaweth 3-1:1.0: Read MAC address 00:00:00:00:00:00 [ 119.396315][ T5610] usb 2-1: ath9k_htc: USB layer deinitialized [ 119.574020][ T5700] rc_core: IR keymap rc-technisat-usb2 not found [ 119.574034][ T5700] Registered IR keymap rc-empty [ 119.574921][ T5700] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 119.603483][ T5700] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input38 [ 119.634681][ T5700] dvb-usb: schedule remote query interval to 100 msecs. [ 119.638637][ T5700] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 119.676640][ T5700] usb 4-1: USB disconnect, device number 5 [ 119.799218][ T9] kaweth 3-1:1.0: Error setting SOFS wait [ 119.799347][ T9] kaweth 3-1:1.0: probe with driver kaweth failed with error -5 [ 119.845564][ T9] usb 3-1: USB disconnect, device number 5 [ 119.872204][ T5700] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 120.034855][ T6339] misc userio: Invalid payload size [ 120.054632][ T6339] misc userio: No port type given on /dev/userio [ 120.059683][ T6339] misc userio: The device must be registered before sending interrupts [ 120.059772][ T6339] misc userio: The device must be registered before sending interrupts [ 120.059829][ T6339] misc userio: The device must be registered before sending interrupts [ 120.177813][ T6346] misc userio: Invalid payload size [ 120.177999][ T6346] misc userio: No port type given on /dev/userio [ 120.178050][ T6346] misc userio: The device must be registered before sending interrupts [ 120.178097][ T6346] misc userio: The device must be registered before sending interrupts [ 120.351026][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.374076][ T6352] misc userio: Invalid payload size [ 120.501916][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.502766][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.502784][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 120.502804][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.506986][ T6343] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.552325][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.719367][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 120.719387][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 120.719397][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xa9ae instead [ 120.719406][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x6626 instead [ 120.719415][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 120.719423][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 120.719431][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 120.719442][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 120.719459][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 120.719476][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 120.848656][ T6358] jffs2: Further such events for this erase block will not be printed [ 120.848869][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 120.848880][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 120.848890][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xa9ae instead [ 120.848899][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x6626 instead [ 120.848908][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 120.848916][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 120.848925][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 120.848935][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 120.848952][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 120.848968][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 120.848976][ T6358] jffs2: Further such events for this erase block will not be printed [ 120.849154][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 120.849163][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 120.849172][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xa9ae instead [ 120.849181][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x6626 instead [ 120.849203][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 120.849211][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 120.849220][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xa9ae instead [ 120.849229][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x6626 instead [ 120.849251][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 120.849259][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 120.849278][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xa9ae instead [ 120.849288][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x6626 instead [ 120.849310][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 120.849318][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 120.849327][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xa9ae instead [ 120.849336][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x6626 instead [ 120.849359][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 120.849367][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 120.849376][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xa9ae instead [ 120.849386][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x6626 instead [ 120.849408][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 120.849416][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 120.849426][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xa9ae instead [ 120.849436][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x6626 instead [ 120.849459][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 120.849468][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 120.849476][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xa9ae instead [ 120.849494][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x6626 instead [ 120.849517][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 120.849525][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 120.849534][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xa9ae instead [ 120.849544][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x6626 instead [ 120.849567][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 120.849575][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 120.849585][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xa9ae instead [ 120.849595][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x6626 instead [ 121.421125][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 121.421142][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 121.421152][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xa9ae instead [ 121.421162][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x6626 instead [ 121.421190][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 121.421198][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 121.421208][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xa9ae instead [ 121.421217][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x6626 instead [ 121.421256][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 121.421266][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 121.421275][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xa9ae instead [ 121.421285][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x6626 instead [ 121.421308][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 121.421316][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 121.421325][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xa9ae instead [ 121.421342][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x6626 instead [ 121.421366][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 121.421387][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 121.421397][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xa9ae instead [ 121.421407][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x6626 instead [ 121.426958][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 121.426974][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 121.426983][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xa9ae instead [ 121.426994][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x6626 instead [ 121.427021][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 121.427029][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 121.427038][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0xa9ae instead [ 121.427065][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x6626 instead [ 121.427089][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 121.427097][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 121.427106][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xa9ae instead [ 121.427116][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x6626 instead [ 121.427139][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 121.427147][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 121.427157][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0xa9ae instead [ 121.427166][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x6626 instead [ 121.427203][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 121.427212][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 121.427220][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0xa9ae instead [ 121.427230][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x6626 instead [ 121.427252][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 121.427260][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 121.427269][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xa9ae instead [ 121.427278][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x6626 instead [ 121.427300][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 121.427308][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 121.427330][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0xa9ae instead [ 121.427347][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x6626 instead [ 121.427370][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 121.427379][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 121.427388][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0xa9ae instead [ 121.427398][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x6626 instead [ 121.427420][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 121.427429][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 121.427438][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xa9ae instead [ 121.427447][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x6626 instead [ 121.427483][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 121.427491][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 121.427500][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xa9ae instead [ 121.427509][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x6626 instead [ 121.427532][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 121.427540][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 121.427549][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xa9ae instead [ 121.427558][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x6626 instead [ 121.427580][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 121.429952][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 121.429965][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xa9ae instead [ 121.429976][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x6626 instead [ 121.430044][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 121.430054][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 121.430063][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0xa9ae instead [ 121.430073][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x6626 instead [ 121.430097][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 121.430105][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 121.430114][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0xa9ae instead [ 121.430125][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x6626 instead [ 121.430147][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 121.430171][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 121.430180][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xa9ae instead [ 121.430190][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x6626 instead [ 121.430213][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 121.430221][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 121.430230][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0xa9ae instead [ 121.430239][ T6358] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x6626 instead [ 121.430263][ T6358] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 121.430268][ T6358] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 122.555473][ T9] usb 4-1: USB disconnect, device number 6 [ 122.729286][ T6366] misc userio: Invalid payload size [ 122.729487][ T6366] misc userio: No port type given on /dev/userio [ 122.748171][ T6366] misc userio: The device must be registered before sending interrupts [ 122.748275][ T6366] misc userio: The device must be registered before sending interrupts [ 122.748325][ T6366] misc userio: The device must be registered before sending interrupts [ 122.791442][ T6368] misc userio: Invalid payload size [ 122.791667][ T6368] misc userio: No port type given on /dev/userio [ 122.791824][ T6368] misc userio: The device must be registered before sending interrupts [ 122.792904][ T6368] misc userio: The device must be registered before sending interrupts [ 123.227213][ T6379] netlink: 156 bytes leftover after parsing attributes in process `syz.3.238'. [ 123.307610][ T6382] mmap: syz.0.235 (6382) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.346917][ T6381] misc userio: Invalid payload size [ 123.794918][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 123.797188][ T30] audit: type=1807 audit(1788701590.815:7): action=measure func=FILE_CHECK res=1 [ 124.321221][ T6385] ima: policy update completed [ 124.837170][ T6390] syz.2.242 (6390): drop_caches: 2 [ 124.847301][ T30] audit: type=1802 audit(1788701591.345:8): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.241" res=1 errno=0 [ 125.268348][ T30] audit: type=1800 audit(1788701592.285:9): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15090 res=0 errno=0 [ 125.343129][ T30] audit: type=1800 audit(1788701592.365:10): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15090 res=0 errno=0 [ 125.372642][ T30] audit: type=1800 audit(1788701592.395:11): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15213 res=0 errno=0 [ 125.427681][ T30] audit: type=1800 audit(1788701592.445:12): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15213 res=0 errno=0 [ 125.430429][ T30] audit: type=1800 audit(1788701592.445:13): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 125.493858][ T6395] misc userio: Invalid payload size [ 125.497820][ T6397] misc userio: Invalid payload size [ 125.498810][ T6395] misc userio: No port type given on /dev/userio [ 125.499266][ T6395] misc userio: The device must be registered before sending interrupts [ 125.499326][ T6395] misc userio: The device must be registered before sending interrupts [ 125.499381][ T6395] misc userio: The device must be registered before sending interrupts [ 125.499564][ T6397] misc userio: No port type given on /dev/userio [ 125.553092][ T30] audit: type=1800 audit(1788701592.585:14): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 125.575212][ T6397] misc userio: The device must be registered before sending interrupts [ 125.575276][ T6397] misc userio: The device must be registered before sending interrupts [ 125.601458][ T30] audit: type=1800 audit(1788701592.625:15): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14967 res=0 errno=0 [ 125.646184][ T30] audit: type=1800 audit(1788701592.665:16): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14967 res=0 errno=0 [ 125.761285][ T5610] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 125.914687][ T5610] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 125.919723][ T5610] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 125.919739][ T5610] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 125.919748][ T5610] usb 1-1: config 4 has no interface number 0 [ 125.919769][ T5610] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.974051][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.974067][ T5610] usb 1-1: Product: syz [ 125.974074][ T5610] usb 1-1: Manufacturer: syz [ 125.974081][ T5610] usb 1-1: SerialNumber: syz [ 126.083014][ T6396] nvme nvme0: failed to connect socket: -512 [ 126.226907][ T5610] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 126.346348][ T5610] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 126.346394][ T5610] dib0700: firmware download failed at 7 with -22 [ 126.374036][ T5610] usb 1-1: USB disconnect, device number 10 [ 127.352120][ T6415] syz.0.250 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 127.352148][ T6415] CPU: 0 UID: 0 PID: 6415 Comm: syz.0.250 Not tainted syzkaller #0 PREEMPT(full) [ 127.352165][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.352173][ T6415] Call Trace: [ 127.352177][ T6415] [ 127.352183][ T6415] dump_stack_lvl+0xe8/0x150 [ 127.352203][ T6415] dump_header+0xd3/0x4b0 [ 127.352220][ T6415] oom_kill_process+0x3ab/0x9e0 [ 127.352236][ T6415] out_of_memory+0xfb1/0x13b0 [ 127.352248][ T6415] ? try_charge_memcg+0xc16/0x15f0 [ 127.352266][ T6415] ? __pfx_out_of_memory+0x10/0x10 [ 127.352277][ T6415] ? do_raw_spin_unlock+0xf5/0x200 [ 127.352298][ T6415] try_charge_memcg+0xccc/0x15f0 [ 127.352319][ T6415] ? __pfx_try_charge_memcg+0x10/0x10 [ 127.352352][ T6415] ? percpu_ref_tryget+0x15/0x180 [ 127.352380][ T6415] ? __obj_cgroup_charge+0x36/0x2d0 [ 127.352411][ T6415] __obj_cgroup_charge+0x20a/0x2d0 [ 127.352438][ T6415] ? __obj_cgroup_charge+0x36/0x2d0 [ 127.352461][ T6415] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 127.352501][ T6415] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 127.352517][ T6415] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 127.352532][ T6415] ? __d_alloc+0x37/0x6f0 [ 127.352545][ T6415] ? __d_alloc+0x37/0x6f0 [ 127.352563][ T6415] __d_alloc+0x37/0x6f0 [ 127.352580][ T6415] d_alloc+0x4b/0x190 [ 127.352600][ T6415] ? lookup_one_qstr_excl+0xc4/0x360 [ 127.352618][ T6415] lookup_one_qstr_excl+0xd8/0x360 [ 127.352637][ T6415] ? lookup_noperm_common+0x245/0x430 [ 127.352659][ T6415] start_dirop+0x5c/0x90 [ 127.352673][ T6415] simple_start_creating+0xcc/0x110 [ 127.352695][ T6415] ? __pfx_simple_start_creating+0x10/0x10 [ 127.352715][ T6415] ? mntput+0x65/0xc0 [ 127.352736][ T6415] tracefs_start_creating+0x95/0x120 [ 127.352753][ T6415] tracefs_create_file+0xa4/0x620 [ 127.352789][ T6415] init_tracer_tracefs+0xb7b/0x1350 [ 127.352825][ T6415] ? __pfx_init_tracer_tracefs+0x10/0x10 [ 127.352846][ T6415] ? event_trace_add_tracer+0x323/0x3b0 [ 127.352867][ T6415] trace_array_create_dir+0xcf/0x160 [ 127.352885][ T6415] trace_array_create_systems+0xb3c/0xe60 [ 127.352905][ T6415] instance_mkdir+0xd5/0x140 [ 127.352920][ T6415] tracefs_syscall_mkdir+0x11a/0x190 [ 127.352936][ T6415] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 127.352965][ T6415] ? inode_permission+0x2bc/0x5f0 [ 127.352981][ T6415] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 127.352994][ T6415] vfs_mkdir+0x398/0x710 [ 127.353016][ T6415] filename_mkdirat+0x285/0x510 [ 127.353030][ T6415] ? __might_fault+0xaf/0x130 [ 127.353053][ T6415] ? __pfx_filename_mkdirat+0x10/0x10 [ 127.353066][ T6415] ? do_getname+0x151/0x250 [ 127.353079][ T6415] __se_sys_mkdirat+0x35/0x150 [ 127.353096][ T6415] do_syscall_64+0x166/0x520 [ 127.353110][ T6415] ? trace_irq_disable+0x3b/0x140 [ 127.353125][ T6415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.353136][ T6415] ? clear_bhb_loop+0x70/0xc0 [ 127.353162][ T6415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.353173][ T6415] RIP: 0033:0x7fab9ab9e159 [ 127.353184][ T6415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.353193][ T6415] RSP: 002b:00007fab9b9e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 127.353206][ T6415] RAX: ffffffffffffffda RBX: 00007fab9ae25fa0 RCX: 00007fab9ab9e159 [ 127.353214][ T6415] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 127.353221][ T6415] RBP: 00007fab9ac35024 R08: 0000000000000000 R09: 0000000000000000 [ 127.353228][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.353234][ T6415] R13: 00007fab9ae26038 R14: 00007fab9ae25fa0 R15: 00007ffd03c2b8c8 [ 127.353252][ T6415] [ 127.606222][ T6415] memory: usage 96kB, limit 96kB, failcnt 43 [ 127.606236][ T6415] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 127.606245][ T6415] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 127.606252][ T6415] Memory cgroup stats for /syz0/test: [ 127.607009][ T6415] cache 0 [ 127.607015][ T6415] rss 0 [ 127.607019][ T6415] rss_huge 0 [ 127.607022][ T6415] shmem 0 [ 127.607026][ T6415] mapped_file 0 [ 127.607030][ T6415] dirty 0 [ 127.607033][ T6415] writeback 0 [ 127.607037][ T6415] workingset_refault_anon 0 [ 127.607041][ T6415] workingset_refault_file 0 [ 127.607045][ T6415] swap 0 [ 127.607048][ T6415] swapcached 0 [ 127.607052][ T6415] pgpgin 0 [ 127.607055][ T6415] pgpgout 0 [ 127.607059][ T6415] pgfault 0 [ 127.607062][ T6415] pgmajfault 0 [ 127.607066][ T6415] inactive_anon 0 [ 127.607070][ T6415] active_anon 0 [ 127.607074][ T6415] inactive_file 0 [ 127.607077][ T6415] active_file 0 [ 127.607081][ T6415] unevictable 0 [ 127.607085][ T6415] hierarchical_memory_limit 98304 [ 127.607089][ T6415] hierarchical_memsw_limit 9223372036854771712 [ 127.607094][ T6415] total_cache 0 [ 127.607097][ T6415] total_rss 0 [ 127.607101][ T6415] total_rss_huge 0 [ 127.607105][ T6415] total_shmem 0 [ 127.607109][ T6415] total_mapped_file 0 [ 127.607113][ T6415] total_dirty 0 [ 127.607116][ T6415] total_writeback 0 [ 127.607120][ T6415] total_workingset_refault_anon 0 [ 127.607125][ T6415] total_workingset_refault_file 0 [ 127.607129][ T6415] total_swap 0 [ 127.607132][ T6415] total_swapcached 0 [ 127.607136][ T6415] total_pgpgin 0 [ 127.607140][ T6415] total_pgpgout 0 [ 127.607144][ T6415] total_pgfault 0 [ 127.607148][ T6415] total_pgmajfault 0 [ 127.607152][ T6415] total_inactive_anon 0 [ 127.607156][ T6415] total_active_anon 0 [ 127.607160][ T6415] total_inactive_file 0 [ 127.607164][ T6415] total_active_file 0 [ 127.607168][ T6415] total_unevictable 0 [ 127.607172][ T6415] anon_cost 0 [ 127.607175][ T6415] file_cost 0 [ 127.607180][ T6415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.250,pid=6414,uid=0 [ 127.607705][ T6415] Memory cgroup out of memory: Killed process 6414 (syz.0.250) total-vm:102252kB, anon-rss:1428kB, file-rss:23056kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 128.029762][ T6415] Could not create tracefs 'buffer_size_kb' entry [ 128.066137][ T6415] Could not create tracefs 'free_buffer' entry [ 128.105698][ T6415] Could not create tracefs 'trace_marker' entry [ 128.135727][ T6415] Could not create tracefs 'trace_marker_raw' entry [ 128.169903][ T6415] Could not create tracefs 'buffer_percent' entry [ 128.203305][ T6415] Could not create tracefs 'syscall_user_buf_size' entry [ 128.238899][ T6415] Could not create tracefs 'tracing_on' entry [ 128.288584][ T6415] Could not create tracefs 'error_log' entry [ 128.322325][ T6415] Could not create tracefs 'test_nop_accept' entry [ 128.322339][ T6415] ERROR: Failed to create trace option: test_nop_accept [ 128.360171][ T6415] Could not create tracefs 'test_nop_refuse' entry [ 128.631603][ T6419] misc userio: Invalid payload size [ 128.873880][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 128.873891][ T30] audit: type=1800 audit(1788701595.895:35): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15090 res=0 errno=0 [ 129.009707][ T6409] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.068769][ T30] audit: type=1800 audit(1788701596.085:36): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.253" name="fscaps" dev="sysfs" ino=8 res=0 errno=0 [ 129.106447][ T30] audit: type=1800 audit(1788701596.125:37): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 129.179199][ T30] audit: type=1800 audit(1788701596.195:38): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 129.240476][ T30] audit: type=1800 audit(1788701596.255:39): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 129.347893][ T30] audit: type=1800 audit(1788701596.365:40): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15090 res=0 errno=0 [ 129.408759][ T30] audit: type=1800 audit(1788701596.425:41): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15213 res=0 errno=0 [ 129.498479][ T30] audit: type=1800 audit(1788701596.515:42): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 129.540993][ T6428] misc userio: Invalid payload size [ 129.542425][ T6428] misc userio: The device must be registered before sending interrupts [ 129.543996][ T6428] misc userio: The device must be registered before sending interrupts [ 129.601816][ T6430] misc userio: Invalid payload size [ 129.602026][ T6430] misc userio: The device must be registered before sending interrupts [ 129.630997][ T6430] misc userio: The device must be registered before sending interrupts [ 129.631094][ T6430] misc userio: The device must be registered before sending interrupts [ 129.668172][ T30] audit: type=1800 audit(1788701596.685:43): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15213 res=0 errno=0 [ 129.694635][ T30] audit: type=1800 audit(1788701596.715:44): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4842 res=0 errno=0 [ 131.045394][ T6442] FAULT_INJECTION: forcing a failure. [ 131.045394][ T6442] name failslab, interval 1, probability 0, space 0, times 0 [ 131.045415][ T6442] CPU: 0 UID: 0 PID: 6442 Comm: syz.3.261 Not tainted syzkaller #0 PREEMPT(full) [ 131.045428][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.045435][ T6442] Call Trace: [ 131.045439][ T6442] [ 131.045444][ T6442] dump_stack_lvl+0xe8/0x150 [ 131.045464][ T6442] should_fail_ex+0x3eb/0x540 [ 131.045480][ T6442] should_failslab+0xa8/0x100 [ 131.045494][ T6442] __kmalloc_noprof+0xf9/0x710 [ 131.045509][ T6442] ? rcu_is_watching+0x16/0xb0 [ 131.045521][ T6442] ? tomoyo_realpath_from_path+0xef/0x640 [ 131.045535][ T6442] ? tomoyo_realpath_from_path+0xef/0x640 [ 131.045551][ T6442] tomoyo_realpath_from_path+0xef/0x640 [ 131.045569][ T6442] ? tomoyo_path_number_perm+0x219/0x5f0 [ 131.045581][ T6442] tomoyo_path_number_perm+0x246/0x5f0 [ 131.045593][ T6442] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 131.045604][ T6442] ? __lock_acquire+0x747/0x2de0 [ 131.045628][ T6442] ? hook_file_ioctl+0x1f2/0x600 [ 131.045649][ T6442] ? __fget_files+0x2a/0x420 [ 131.045664][ T6442] ? __fget_files+0x2a/0x420 [ 131.045676][ T6442] ? __fget_files+0x3a2/0x420 [ 131.045688][ T6442] ? __fget_files+0x2a/0x420 [ 131.045703][ T6442] security_file_ioctl+0xc3/0x2a0 [ 131.045720][ T6442] __se_sys_ioctl+0x47/0x170 [ 131.045737][ T6442] do_syscall_64+0x166/0x520 [ 131.045748][ T6442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.045759][ T6442] ? clear_bhb_loop+0x70/0xc0 [ 131.045772][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.045783][ T6442] RIP: 0033:0x7fd0acb9e159 [ 131.045794][ T6442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.045804][ T6442] RSP: 002b:00007fd0ad9df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.045816][ T6442] RAX: ffffffffffffffda RBX: 00007fd0ace25fa0 RCX: 00007fd0acb9e159 [ 131.045824][ T6442] RDX: 0000000000000000 RSI: 000000000000540f RDI: 0000000000000003 [ 131.045830][ T6442] RBP: 00007fd0acc35024 R08: 0000000000000000 R09: 0000000000000000 [ 131.045837][ T6442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.045843][ T6442] R13: 00007fd0ace26038 R14: 00007fd0ace25fa0 R15: 00007ffe10bbf8b8 [ 131.045859][ T6442] [ 131.045864][ T6442] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.808020][ T6456] misc userio: Invalid payload size [ 131.808211][ T6456] misc userio: The device must be registered before sending interrupts [ 131.810187][ T6456] misc userio: The device must be registered before sending interrupts [ 131.911855][ T5692] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.980575][ T6458] misc userio: Invalid payload size [ 131.981146][ T6458] misc userio: The device must be registered before sending interrupts [ 131.997837][ T6458] misc userio: The device must be registered before sending interrupts [ 131.998240][ T6458] misc userio: The device must be registered before sending interrupts [ 132.075814][ T5692] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.076695][ T5692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.076721][ T5692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.103755][ T5692] usb 4-1: config 0 descriptor?? [ 132.326077][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.326400][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.371494][ T5692] usbhid 4-1:0.0: can't add hid device: -71 [ 132.371559][ T5692] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 132.381045][ T5692] usb 4-1: USB disconnect, device number 7 [ 132.412762][ T9] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 132.561950][ T9] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 132.562817][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.562835][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.562854][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.606733][ T9] usb 2-1: config 0 descriptor?? [ 132.856343][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.867254][ T5700] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 132.881406][ T5692] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.032460][ T5700] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 133.033687][ T5692] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 133.037798][ T5692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.037865][ T5692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.087943][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.087960][ T5700] usb 1-1: Product: syz [ 133.087968][ T5700] usb 1-1: Manufacturer: syz [ 133.087975][ T5700] usb 1-1: SerialNumber: syz [ 133.091688][ T5692] usb 4-1: config 0 descriptor?? [ 133.146728][ T5700] usb 1-1: config 0 descriptor?? [ 133.149273][ T9] aquacomputer_d5next 0003:0C70:F0B6.0005: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 133.941894][ T5692] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 133.945212][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 133.945224][ T30] audit: type=1800 audit(1788701600.965:93): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=113894 res=0 errno=0 [ 133.946328][ T5692] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input45 [ 133.966535][ T30] audit: type=1800 audit(1788701600.995:94): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=113910 res=0 errno=0 [ 134.028329][ T30] audit: type=1800 audit(1788701601.045:95): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=113913 res=0 errno=0 [ 134.060206][ T30] audit: type=1800 audit(1788701601.075:96): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=113912 res=0 errno=0 [ 134.090086][ T30] audit: type=1800 audit(1788701601.105:97): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=113911 res=0 errno=0 [ 134.119533][ T30] audit: type=1800 audit(1788701601.135:98): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=113902 res=0 errno=0 [ 134.153969][ T30] audit: type=1800 audit(1788701601.175:99): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=113905 res=0 errno=0 [ 134.158124][ T30] audit: type=1800 audit(1788701601.175:100): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=113783 res=0 errno=0 [ 134.215317][ T30] audit: type=1800 audit(1788701601.235:101): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=113786 res=0 errno=0 [ 134.269107][ T30] audit: type=1800 audit(1788701601.285:102): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=113898 res=0 errno=0 [ 134.292186][ T5700] usb 1-1: non-Atmel transceiver xxxx251f [ 134.471330][ T5700] usb 1-1: Firmware version (0.0) predates our first public release. [ 134.471346][ T5700] usb 1-1: Please update to version 0.2 or newer [ 134.473175][ T5700] usb 1-1: atusb_probe: initialization failed, error = -19 [ 134.510476][ T5700] usb 1-1: USB disconnect, device number 11 [ 134.544567][ T9] usb 4-1: USB disconnect, device number 8 [ 134.544673][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 134.593454][ T5692] usb 2-1: reset low-speed USB device number 7 using dummy_hcd [ 134.776936][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 134.911010][ T6475] misc userio: Invalid payload size [ 134.911269][ T6475] misc userio: The device must be registered before sending interrupts [ 134.911330][ T6475] misc userio: The device must be registered before sending interrupts [ 135.109043][ T6479] misc userio: Invalid payload size [ 135.109260][ T6479] misc userio: The device must be registered before sending interrupts [ 135.109924][ T6479] misc userio: The device must be registered before sending interrupts [ 135.116431][ T6479] misc userio: The device must be registered before sending interrupts [ 138.955331][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 138.955344][ T30] audit: type=1800 audit(1788701605.975:123): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15213 res=0 errno=0 [ 139.104509][ T6504] misc userio: Invalid payload size [ 139.105785][ T30] audit: type=1800 audit(1788701606.125:124): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=114167 res=0 errno=0 [ 139.518782][ T30] audit: type=1800 audit(1788701606.535:125): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15336 res=0 errno=0 [ 139.830895][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 139.920966][ T5692] usb 2-1: device descriptor read/64, error -110 [ 139.981402][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 139.981905][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 139.984198][ T10] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 139.984212][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.984221][ T10] usb 4-1: config 0 has no interface number 0 [ 139.984243][ T10] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 139.984256][ T10] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 139.984270][ T10] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 139.984283][ T10] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 28524, setting to 1024 [ 139.984295][ T10] usb 4-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 139.984307][ T10] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 139.984328][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.987987][ T10] usb 4-1: config 0 descriptor?? [ 139.988803][ T30] audit: type=1800 audit(1788701607.005:126): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=114199 res=0 errno=0 [ 139.989027][ T6506] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 139.989166][ T6506] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.072812][ T30] audit: type=1800 audit(1788701607.095:127): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=114228 res=0 errno=0 [ 140.185062][ T30] audit: type=1800 audit(1788701607.215:128): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=114206 res=0 errno=0 [ 140.207755][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.209703][ T30] audit: type=1800 audit(1788701607.235:129): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=114207 res=0 errno=0 [ 140.242465][ T30] audit: type=1800 audit(1788701607.265:130): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=114208 res=0 errno=0 [ 140.281154][ T30] audit: type=1800 audit(1788701607.295:131): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=114248 res=0 errno=0 [ 140.287817][ T30] audit: type=1800 audit(1788701607.305:132): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=114267 res=0 errno=0 [ 140.457203][ T5692] usb 2-1: reset low-speed USB device number 7 using dummy_hcd [ 140.489707][ T10] usb 4-1: USB disconnect, device number 9 [ 140.626201][ T6510] misc userio: Invalid payload size [ 140.721541][ T5692] usb 2-1: device descriptor read/64, error -32 [ 140.726418][ T6512] process 'syz.2.288' launched './file0' with NULL argv: empty string added [ 140.754030][ T6512] FAULT_INJECTION: forcing a failure. [ 140.754030][ T6512] name failslab, interval 1, probability 0, space 0, times 0 [ 140.754049][ T6512] CPU: 0 UID: 0 PID: 6512 Comm: syz.2.288 Not tainted syzkaller #0 PREEMPT(full) [ 140.754061][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.754069][ T6512] Call Trace: [ 140.754074][ T6512] [ 140.754078][ T6512] dump_stack_lvl+0xe8/0x150 [ 140.754097][ T6512] should_fail_ex+0x3eb/0x540 [ 140.754113][ T6512] should_failslab+0xa8/0x100 [ 140.754127][ T6512] __kmalloc_cache_noprof+0x9e/0x600 [ 140.754144][ T6512] ? ima_add_digest_entry+0x56/0x5e0 [ 140.754158][ T6512] ? ima_add_digest_entry+0x56/0x5e0 [ 140.754174][ T6512] ima_add_digest_entry+0x56/0x5e0 [ 140.754186][ T6512] ? ima_add_template_entry+0x20a/0x8d0 [ 140.754202][ T6512] ima_add_template_entry+0x661/0x8d0 [ 140.754216][ T6512] ? ima_add_template_entry+0x20a/0x8d0 [ 140.754230][ T6512] ? ima_alloc_init_template+0x185/0x700 [ 140.754245][ T6512] ? __pfx_ima_add_template_entry+0x10/0x10 [ 140.754260][ T6512] ? ima_calc_field_array_hash+0x432/0x4a0 [ 140.754280][ T6512] ima_store_measurement+0x2af/0x690 [ 140.754299][ T6512] ? __pfx_ima_store_measurement+0x10/0x10 [ 140.754316][ T6512] ? ima_d_path+0x16b/0x230 [ 140.754335][ T6512] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 140.754352][ T6512] process_measurement+0x15ac/0x1c10 [ 140.754375][ T6512] ? __pfx_process_measurement+0x10/0x10 [ 140.754398][ T6512] ? percpu_ref_get_many+0x19/0x140 [ 140.754424][ T6512] ? trace_kmem_cache_alloc+0x29/0xe0 [ 140.754438][ T6512] ? single_open+0x119/0x240 [ 140.754460][ T6512] ima_file_check+0xdc/0x130 [ 140.754475][ T6512] ? file_ra_state_init+0x3d/0xc0 [ 140.754489][ T6512] ? __pfx_ima_file_check+0x10/0x10 [ 140.754508][ T6512] security_file_post_open+0xb3/0x260 [ 140.754520][ T6512] path_openat+0x151a/0x1e40 [ 140.754545][ T6512] do_file_open+0x23e/0x4a0 [ 140.754563][ T6512] ? __pfx_do_file_open+0x10/0x10 [ 140.754583][ T6512] ? __pfx_kfree_link+0x10/0x10 [ 140.754602][ T6512] ? _raw_spin_unlock+0x28/0x50 [ 140.754617][ T6512] ? alloc_fd+0x651/0x6c0 [ 140.754635][ T6512] do_sys_openat2+0x115/0x200 [ 140.754649][ T6512] ? __se_sys_futex+0x3a8/0x450 [ 140.754662][ T6512] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.754677][ T6512] ? rcu_is_watching+0x16/0xb0 [ 140.754691][ T6512] __x64_sys_openat+0x138/0x170 [ 140.754705][ T6512] do_syscall_64+0x166/0x520 [ 140.754715][ T6512] ? trace_irq_disable+0x3b/0x140 [ 140.754730][ T6512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.754741][ T6512] ? clear_bhb_loop+0x70/0xc0 [ 140.754753][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.754764][ T6512] RIP: 0033:0x7f68fc55e98e [ 140.754775][ T6512] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.754784][ T6512] RSP: 002b:00007f68fd3c5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.754796][ T6512] RAX: ffffffffffffffda RBX: 00007f68fd3c66c0 RCX: 00007f68fc55e98e [ 140.754804][ T6512] RDX: 0000000000000002 RSI: 00007f68fd3c5f90 RDI: ffffffffffffff9c [ 140.754811][ T6512] RBP: 00007f68fc635024 R08: 0000000000000000 R09: 0000000000000000 [ 140.754818][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.754824][ T6512] R13: 00007f68fc826038 R14: 00007f68fc825fa0 R15: 00007ffe9f102318 [ 140.754840][ T6512] [ 140.760139][ T6512] ima: OUT OF MEMORY ERROR creating queue entry [ 141.101596][ T5692] usb 2-1: reset low-speed USB device number 7 using dummy_hcd [ 141.164062][ T5692] usb 2-1: device descriptor read/8, error -32 [ 141.500927][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 141.542164][ T5692] usb 2-1: reset low-speed USB device number 7 using dummy_hcd [ 141.563164][ T5692] usb 2-1: device descriptor read/8, error -32 [ 141.670919][ T5692] raw-gadget.1 gadget.1: failed to queue suspend event [ 141.725546][ T10] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 141.868174][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.868191][ T10] usb 4-1: config 0 has no interface number 0 [ 142.189422][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.189439][ T10] usb 4-1: Product: syz [ 142.189446][ T10] usb 4-1: Manufacturer: syz [ 142.189467][ T10] usb 4-1: SerialNumber: syz [ 142.327530][ T5610] usb 2-1: USB disconnect, device number 7 [ 142.689064][ T10] usb 4-1: config 0 descriptor?? [ 142.877762][ T5610] raw-gadget.1 gadget.1: failed to queue reset event [ 142.952038][ T5610] raw-gadget.1 gadget.1: failed to queue resume event [ 143.012588][ T5610] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 143.012790][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 143.014328][ T5610] raw-gadget.1 gadget.1: failed to queue reset event [ 143.049979][ T10] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 143.062499][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 143.062700][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 143.062726][ T10] usb 4-1: media controller created [ 143.082612][ T5610] raw-gadget.1 gadget.1: failed to queue resume event [ 143.122435][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.142371][ T5610] usb 2-1: device descriptor read/64, error -32 [ 143.251110][ T5610] raw-gadget.1 gadget.1: failed to queue suspend event [ 143.251400][ T5610] raw-gadget.1 gadget.1: failed to queue reset event [ 143.321444][ T5610] raw-gadget.1 gadget.1: failed to queue resume event [ 143.381190][ T5610] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 143.381392][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 143.381495][ T5610] raw-gadget.1 gadget.1: failed to queue reset event [ 143.450946][ T5610] raw-gadget.1 gadget.1: failed to queue resume event [ 143.503036][ T6529] misc userio: Invalid payload size [ 143.510919][ T5610] usb 2-1: device descriptor read/64, error -32 [ 143.622032][ T5610] raw-gadget.1 gadget.1: failed to queue suspend event [ 143.622202][ T5610] usb usb2-port1: attempt power cycle [ 143.622280][ T5610] raw-gadget.1 gadget.1: failed to queue disconnect event [ 143.622555][ T5610] raw-gadget.1 gadget.1: failed to queue reset event [ 143.691016][ T5610] raw-gadget.1 gadget.1: failed to queue resume event [ 143.691328][ T5610] raw-gadget.1 gadget.1: failed to queue reset event [ 143.900916][ T5610] raw-gadget.1 gadget.1: failed to queue resume event [ 143.960868][ T5610] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 143.982549][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 143.982659][ T5610] usb 2-1: device descriptor read/8, error -32 [ 144.091003][ T5610] raw-gadget.1 gadget.1: failed to queue suspend event [ 144.091265][ T5610] raw-gadget.1 gadget.1: failed to queue reset event [ 144.155192][ T6538] Set syz1 is full, maxelem 6117 reached [ 144.161944][ T5610] raw-gadget.1 gadget.1: failed to queue resume event [ 144.211928][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 144.212868][ T6515] ================================================================== [ 144.212876][ T6515] BUG: KASAN: slab-out-of-bounds in ec168_i2c_xfer+0x4d4/0x630 [ 144.212895][ T6515] Read of size 1 at addr ffff88802b8d50e1 by task syz.3.289/6515 [ 144.212904][ T6515] [ 144.212911][ T6515] CPU: 0 UID: 0 PID: 6515 Comm: syz.3.289 Not tainted syzkaller #0 PREEMPT(full) [ 144.212923][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.212929][ T6515] Call Trace: [ 144.212934][ T6515] [ 144.212939][ T6515] dump_stack_lvl+0xe8/0x150 [ 144.212955][ T6515] print_address_description+0x55/0x1e0 [ 144.212970][ T6515] ? ec168_i2c_xfer+0x4d4/0x630 [ 144.212981][ T6515] print_report+0x58/0x70 [ 144.212994][ T6515] kasan_report+0x117/0x150 [ 144.213006][ T6515] ? ec168_i2c_xfer+0x4d4/0x630 [ 144.213018][ T6515] ec168_i2c_xfer+0x4d4/0x630 [ 144.213031][ T6515] __i2c_transfer+0x7bf/0x1fe0 [ 144.213048][ T6515] ? rt_mutex_lock_nested+0x15a/0x1c0 [ 144.213060][ T6515] ? i2c_transfer+0xc7/0x2d0 [ 144.213073][ T6515] i2c_transfer+0x1cb/0x2d0 [ 144.213087][ T6515] i2cdev_ioctl_rdwr+0x460/0x740 [ 144.213104][ T6515] i2cdev_ioctl+0x6a5/0x880 [ 144.213117][ T6515] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 144.213132][ T6515] ? __fget_files+0x3a2/0x420 [ 144.213145][ T6515] ? __fget_files+0x2a/0x420 [ 144.213157][ T6515] ? bpf_lsm_file_ioctl+0x9/0x20 [ 144.213170][ T6515] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 144.213183][ T6515] __se_sys_ioctl+0xfc/0x170 [ 144.213199][ T6515] do_syscall_64+0x166/0x520 [ 144.213209][ T6515] ? trace_irq_disable+0x3b/0x140 [ 144.213224][ T6515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.213234][ T6515] ? clear_bhb_loop+0x70/0xc0 [ 144.213246][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.213256][ T6515] RIP: 0033:0x7fd0acb9e159 [ 144.213266][ T6515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.213283][ T6515] RSP: 002b:00007fd0ad9df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.213296][ T6515] RAX: ffffffffffffffda RBX: 00007fd0ace25fa0 RCX: 00007fd0acb9e159 [ 144.213304][ T6515] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 144.213311][ T6515] RBP: 00007fd0acc35024 R08: 0000000000000000 R09: 0000000000000000 [ 144.213318][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.213324][ T6515] R13: 00007fd0ace26038 R14: 00007fd0ace25fa0 R15: 00007ffe10bbf8b8 [ 144.213336][ T6515] [ 144.213339][ T6515] [ 144.213345][ T6515] Allocated by task 6515: [ 144.213350][ T6515] kasan_save_track+0x3e/0x80 [ 144.213366][ T6515] __kasan_kmalloc+0x93/0xb0 [ 144.213374][ T6515] __kmalloc_node_track_caller_noprof+0x4af/0x720 [ 144.213388][ T6515] memdup_user+0x2b/0xd0 [ 144.213403][ T6515] i2cdev_ioctl_rdwr+0x1c6/0x740 [ 144.213417][ T6515] i2cdev_ioctl+0x6a5/0x880 [ 144.213428][ T6515] __se_sys_ioctl+0xfc/0x170 [ 144.213442][ T6515] do_syscall_64+0x166/0x520 [ 144.213450][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.213460][ T6515] [ 144.213463][ T6515] The buggy address belongs to the object at ffff88802b8d50e0 [ 144.213463][ T6515] which belongs to the cache kmalloc-8 of size 8 [ 144.213471][ T6515] The buggy address is located 0 bytes to the right of [ 144.213471][ T6515] allocated 1-byte region [ffff88802b8d50e0, ffff88802b8d50e1) [ 144.213481][ T6515] [ 144.213484][ T6515] The buggy address belongs to the physical page: [ 144.213492][ T6515] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b8d5 [ 144.213502][ T6515] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 144.213510][ T6515] page_type: f5(slab) [ 144.213520][ T6515] raw: 00fff00000000000 ffff88813ff1a500 dead000000000100 dead000000000122 [ 144.213529][ T6515] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 144.213534][ T6515] page dumped because: kasan: bad access detected [ 144.213543][ T6515] page_owner tracks the page as allocated [ 144.213547][ T6515] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10144351936 [ 144.213563][ T6515] post_alloc_hook+0x1f9/0x250 [ 144.213575][ T6515] get_page_from_freelist+0x2209/0x2280 [ 144.213589][ T6515] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 144.213604][ T6515] allocate_slab+0x7d/0x620 [ 144.213614][ T6515] refill_objects+0x2d5/0x350 [ 144.213624][ T6515] __pcs_replace_empty_main+0x2c8/0x6c0 [ 144.213634][ T6515] __kmalloc_node_track_caller_noprof+0x543/0x720 [ 144.213648][ T6515] kvasprintf+0xeb/0x1a0 [ 144.213660][ T6515] kobject_set_name_vargs+0x61/0x110 [ 144.213670][ T6515] dev_set_name+0xe2/0x140 [ 144.213684][ T6515] usb_create_ep_devs+0x124/0x230 [ 144.213694][ T6515] usb_set_configuration+0x1c1e/0x2180 [ 144.213703][ T6515] usb_generic_driver_probe+0x8d/0x150 [ 144.213717][ T6515] usb_probe_device+0x1c3/0x3b0 [ 144.213726][ T6515] really_probe+0x254/0xae0 [ 144.213737][ T6515] __driver_probe_device+0x1e8/0x360 [ 144.213748][ T6515] page last free pid 191 tgid 191 ts 10143949273 stack trace: [ 144.213755][ T6515] __free_frozen_pages+0xc93/0xd90 [ 144.213767][ T6515] __kasan_populate_vmalloc+0x1a8/0x1c0 [ 144.213780][ T6515] alloc_vmap_area+0xd10/0x1410 [ 144.213791][ T6515] __get_vm_area_node+0x200/0x2f0 [ 144.213802][ T6515] __vmalloc_node_range_noprof+0x340/0x1690 [ 144.213814][ T6515] __vmalloc_node_noprof+0xc2/0x100 [ 144.213825][ T6515] dup_task_struct+0x2c6/0xa00 [ 144.213837][ T6515] copy_process+0x81b/0x43e0 [ 144.213847][ T6515] kernel_clone+0x2d7/0x940 [ 144.213857][ T6515] user_mode_thread+0x115/0x180 [ 144.213867][ T6515] call_usermodehelper_exec_work+0x5c/0x230 [ 144.213878][ T6515] process_scheduled_works+0xc3d/0x1630 [ 144.213888][ T6515] worker_thread+0xa47/0xfb0 [ 144.213898][ T6515] kthread+0x38b/0x480 [ 144.213910][ T6515] ret_from_fork+0x514/0xb70 [ 144.213924][ T6515] ret_from_fork_asm+0x1a/0x30 [ 144.213936][ T6515] [ 144.213939][ T6515] Memory state around the buggy address: [ 144.213944][ T6515] ffff88802b8d4f80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 144.213951][ T6515] ffff88802b8d5000: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 144.213957][ T6515] >ffff88802b8d5080: fa fc fc fc fa fc fc fc 00 fc fc fc 01 fc fc fc [ 144.213962][ T6515] ^ [ 144.213968][ T6515] ffff88802b8d5100: 06 fc fc fc 07 fc fc fc 00 fc fc fc fa fc fc fc [ 144.213974][ T6515] ffff88802b8d5180: 00 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 144.213979][ T6515] ================================================================== [ 144.214010][ T6515] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 144.858298][ T6515] CPU: 0 UID: 0 PID: 6515 Comm: syz.3.289 Not tainted syzkaller #0 PREEMPT(full) [ 144.867475][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.877509][ T6515] Call Trace: [ 144.880772][ T6515] [ 144.883684][ T6515] vpanic+0x56d/0xa70 [ 144.887675][ T6515] ? rcu_is_watching+0x16/0xb0 [ 144.892503][ T6515] ? __pfx_vpanic+0x10/0x10 [ 144.896993][ T6515] panic+0xc5/0xd0 [ 144.900699][ T6515] ? __pfx_panic+0x10/0x10 [ 144.905096][ T6515] ? ec168_i2c_xfer+0x4d4/0x630 [ 144.909928][ T6515] ? ec168_i2c_xfer+0x4d4/0x630 [ 144.914755][ T6515] check_panic_on_warn+0x89/0xb0 [ 144.919676][ T6515] ? ec168_i2c_xfer+0x4d4/0x630 [ 144.924504][ T6515] end_report+0x73/0x170 [ 144.928727][ T6515] ? ec168_i2c_xfer+0x4d4/0x630 [ 144.933553][ T6515] kasan_report+0x128/0x150 [ 144.938032][ T6515] ? ec168_i2c_xfer+0x4d4/0x630 [ 144.942864][ T6515] ec168_i2c_xfer+0x4d4/0x630 [ 144.947518][ T6515] __i2c_transfer+0x7bf/0x1fe0 [ 144.952264][ T6515] ? rt_mutex_lock_nested+0x15a/0x1c0 [ 144.957614][ T6515] ? i2c_transfer+0xc7/0x2d0 [ 144.962207][ T6515] i2c_transfer+0x1cb/0x2d0 [ 144.966691][ T6515] i2cdev_ioctl_rdwr+0x460/0x740 [ 144.971618][ T6515] i2cdev_ioctl+0x6a5/0x880 [ 144.976100][ T6515] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 144.981103][ T6515] ? __fget_files+0x3a2/0x420 [ 144.985757][ T6515] ? __fget_files+0x2a/0x420 [ 144.990327][ T6515] ? bpf_lsm_file_ioctl+0x9/0x20 [ 144.995251][ T6515] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 145.000255][ T6515] __se_sys_ioctl+0xfc/0x170 [ 145.005366][ T6515] do_syscall_64+0x166/0x520 [ 145.009934][ T6515] ? trace_irq_disable+0x3b/0x140 [ 145.014953][ T6515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.020997][ T6515] ? clear_bhb_loop+0x70/0xc0 [ 145.025653][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.031519][ T6515] RIP: 0033:0x7fd0acb9e159 [ 145.035929][ T6515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.055528][ T6515] RSP: 002b:00007fd0ad9df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.063920][ T6515] RAX: ffffffffffffffda RBX: 00007fd0ace25fa0 RCX: 00007fd0acb9e159 [ 145.071884][ T6515] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 145.079845][ T6515] RBP: 00007fd0acc35024 R08: 0000000000000000 R09: 0000000000000000 [ 145.087792][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.095754][ T6515] R13: 00007fd0ace26038 R14: 00007fd0ace25fa0 R15: 00007ffe10bbf8b8 [ 145.103706][ T6515] [ 145.106761][ T6515] Kernel Offset: disabled [ 145.111071][ T6515] Rebooting in 86400 seconds..