last executing test programs: 6.012172618s ago: executing program 3 (id=3245): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x3481cc60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x84001, 0x101) write$tcp_congestion(r4, 0x0, 0x0) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 5.632882089s ago: executing program 3 (id=3246): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) close(r3) 4.566912586s ago: executing program 3 (id=3256): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) 3.62415176s ago: executing program 0 (id=3265): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) close(r3) 3.531924499s ago: executing program 3 (id=3267): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009900", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x581bc0488f52ec67}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000085c0)={0x18, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000b40)=[{&(0x7f00000006c0)="53db", 0x2}], 0x1) 2.95492431s ago: executing program 2 (id=3271): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000240), 0x1, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000b80)=[{0x2a34, 0x8000, 0x0, 0x0}, {0x5, 0x200, 0x0, 0x0}], 0x2}) 2.67302211s ago: executing program 0 (id=3272): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4006080) sendmsg$NL80211_CMD_STOP_NAN(r3, 0x0, 0x20000010) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000240)={[{0x1, 0x0, 0x1, 0x2, 0x6, 0x9, 0x7e, 0x1, 0x81, 0x6, 0xd, 0x54, 0x7}, {0x4, 0xa, 0x5, 0x8, 0x4, 0x5, 0x1, 0x6, 0x9, 0x78, 0xe3, 0xe, 0x9}, {0x6, 0x400, 0x5, 0xb, 0x6, 0x3, 0x0, 0x9, 0x80, 0x6, 0x6, 0x5, 0x4}], 0x8}) 2.612101977s ago: executing program 0 (id=3273): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f00000007c0)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x37, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000940), &(0x7f0000000ac0)={'syz', 0x1}, &(0x7f0000000980)="c5", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x34, 0x64, 0x30, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30, 0x30, 0x75a52dfb969e39f, 0x61, 0x30, 0x61]}, &(0x7f00000009c0)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x38, 0x30, 0x30, 0x64, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000400)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x35, 0x35, 0x63, 0x62, 0x38, 0x38, 0x39, 0x31, 0x62, 0x0, 0xf, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) 2.611590732s ago: executing program 0 (id=3274): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x1, 0x0, &(0x7f0000000000), 0x3000000) 2.544316921s ago: executing program 0 (id=3275): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) 2.392907648s ago: executing program 1 (id=3276): timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz2\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) fcntl$lock(r2, 0x6, &(0x7f0000000280)={0x1, 0x2, 0x3ff, 0x4}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz2/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000059e000/0x400000)=nil) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='4096', 0x4) 1.813336683s ago: executing program 1 (id=3277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 1.617042853s ago: executing program 1 (id=3278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8, 0x100, 0x94, 0x7, 0x38b, 0x7f, 0x400, 0x5, 0x5, 0x7fc, 0x2, 0x9, 0x8000, 0x81, 0x3b], 0x100000, 0x20002}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) 1.3803697s ago: executing program 2 (id=3279): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x6d11) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={0xffffffffffffffff, 0x5, 0x2, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0xafa, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.374662746s ago: executing program 0 (id=3280): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)='n', 0x1}], 0x1) 1.300706182s ago: executing program 1 (id=3281): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) close(r3) 1.194802607s ago: executing program 2 (id=3282): r0 = syz_open_dev$mouse(0x0, 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x4000024, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x4000000, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0xfffffff2, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0xfee, 0xea4, 0xa, 0xd, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x0, 0x9, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ee, 0x2, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0xfffffffd, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0xba, 0x5, 0x4, 0x54fe12da, 0x0, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0xdb7e, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x2, 0xd367, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x1, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x21, 0x6c09, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x7, 0xfff, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) write$UHID_INPUT(r0, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) 1.084237787s ago: executing program 2 (id=3283): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc1}, &(0x7f00000007c0)={0x0, "019af2614ba26291c38206ed71472d664f913df34e60a3f34636d6ee89c849cabd912b106409cfa2bdcb914279bc39e5bf797c6c8e61ec8cfce597ddec4540e5", 0x1a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x37, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000940), &(0x7f0000000ac0)={'syz', 0x1}, &(0x7f0000000980)="c5", 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "18817cd3951197ee3b9d8783bb6f4fcbf211ff4699390ed1e9af20be014fddfc4777e8781b728c03db5f43332641914dea56c4e77e8a513068b4a5f87fa5d809", 0x21}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x34, 0x64, 0x30, 0x30, 0x33, 0x30, 0x30, 0x66, 0x36, 0x30, 0x30, 0x30, 0x75a52dfb969e39f, 0x61, 0x30, 0x61]}, &(0x7f00000009c0)={0x0, "0011223344556677000001000000000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x440}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x38, 0x30, 0x30, 0x64, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000400)={'fscrypt:', @auto=[0x65, 0x61, 0x31, 0x35, 0x35, 0x63, 0x62, 0x38, 0x38, 0x39, 0x31, 0x62, 0x0, 0xf, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) 1.066517494s ago: executing program 2 (id=3284): listen(0xffffffffffffffff, 0xda8d) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 378.028979ms ago: executing program 1 (id=3285): timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz2\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000}) fcntl$lock(r2, 0x6, &(0x7f0000000280)={0x1, 0x2, 0x3ff, 0x4}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz2/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000059e000/0x400000)=nil) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='4096', 0x4) 296.404999ms ago: executing program 3 (id=3286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 293.927976ms ago: executing program 3 (id=3287): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000240), 0x1, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000b80)=[{0x2a34, 0x8000, 0x0, 0x0}, {0x5, 0x200, 0x0, 0x0}], 0x2}) 134.665822ms ago: executing program 2 (id=3288): madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xeeee8000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x81, 0x0, 0x0) 0s ago: executing program 1 (id=3289): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007) kernel console output (not intermixed with test programs): n 0 [ 659.445725][T14547] workingset_refault_file 0 [ 659.445732][T14547] swap 0 [ 659.445739][T14547] swapcached 20480 [ 659.445747][T14547] pgpgin 2 [ 659.445754][T14547] pgpgout 1024 [ 659.445761][T14547] pgfault 16 [ 659.445768][T14547] pgmajfault 0 [ 659.445775][T14547] inactive_anon 0 [ 659.445783][T14547] active_anon 0 [ 659.445790][T14547] inactive_file 0 [ 659.445798][T14547] active_file 0 [ 659.445805][T14547] unevictable 0 [ 659.445812][T14547] hierarchical_memory_limit 4096 [ 659.445820][T14547] hierarchical_memsw_limit 9223372036854771712 [ 659.445828][T14547] total_cache 0 [ 659.445848][T14547] total_rss 0 [ 659.445856][T14547] total_rss_huge 0 [ 659.445864][T14547] total_shmem 0 [ 659.445871][T14547] total_mapped_file 0 [ 659.445879][T14547] total_dirty 0 [ 659.445886][T14547] total_writeback 0 [ 659.445894][T14547] total_workingset_refault_anon 0 [ 659.445903][T14547] total_workingset_refault_file 0 [ 659.445911][T14547] total_swap 0 [ 659.445918][T14547] total_swapcached 20480 [ 659.445926][T14547] total_pgpgin 2 [ 659.445933][T14547] total_pgpgout 1024 [ 659.445941][T14547] total_pgfault 16 [ 659.445949][T14547] total_pgmajfault 0 [ 659.445956][T14547] total_inactive_anon 0 [ 659.445964][T14547] total_active_anon 0 [ 659.445972][T14547] total_inactive_file 0 [ 659.445980][T14547] total_active_file 0 [ 659.445987][T14547] total_unevictable 0 [ 659.445995][T14547] anon_cost 0 [ 659.446002][T14547] file_cost 0 [ 659.446010][T14547] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0/syz2,task_memcg=/syz0/syz2,task=syz.0.3074,pid=14545,uid=0 [ 659.446132][T14547] Memory cgroup out of memory: Killed process 14545 (syz.0.3074) total-vm:102384kB, anon-rss:1428kB, file-rss:22804kB, shmem-rss:68kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 660.133099][T14559] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3077'. [ 660.383728][ T189] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 660.483762][ T5717] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 660.535365][ T189] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 660.537675][ T189] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 660.537719][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.545652][ T189] usb 2-1: config 0 descriptor?? [ 660.550299][ T189] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 660.613703][ T5350] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 660.652632][T14575] syz.0.3084 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 660.652671][T14575] CPU: 0 UID: 0 PID: 14575 Comm: syz.0.3084 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.652700][T14575] Tainted: [L]=SOFTLOCKUP [ 660.652708][T14575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 660.652720][T14575] Call Trace: [ 660.652728][T14575] [ 660.652736][T14575] dump_stack_lvl+0xe8/0x150 [ 660.652769][T14575] dump_header+0xd3/0x4b0 [ 660.652799][T14575] oom_kill_process+0x3ab/0x9e0 [ 660.652826][T14575] out_of_memory+0x1064/0x1480 [ 660.652845][T14575] ? try_charge_memcg+0xc32/0x15e0 [ 660.652877][T14575] ? __pfx_out_of_memory+0x10/0x10 [ 660.652896][T14575] ? do_raw_spin_unlock+0xf5/0x200 [ 660.652930][T14575] try_charge_memcg+0xcdf/0x15e0 [ 660.652969][T14575] ? __pfx_try_charge_memcg+0x10/0x10 [ 660.652997][T14575] ? percpu_ref_tryget+0x15/0x180 [ 660.653028][T14575] ? __memcg_kmem_charge_page+0x15a/0x510 [ 660.653060][T14575] __memcg_kmem_charge_page+0x31c/0x510 [ 660.653088][T14575] ? __memcg_kmem_charge_page+0x15a/0x510 [ 660.653118][T14575] __alloc_frozen_pages_noprof+0x24a/0x5a0 [ 660.653151][T14575] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 660.653191][T14575] ? __pfx_policy_nodemask+0x10/0x10 [ 660.653214][T14575] ? do_raw_spin_unlock+0xf5/0x200 [ 660.653245][T14575] alloc_pages_mpol+0x21e/0x390 [ 660.653273][T14575] alloc_pages_noprof+0xb1/0x2b0 [ 660.653296][T14575] pte_alloc_one+0x22/0x370 [ 660.653319][T14575] __pte_alloc+0x25/0x1a0 [ 660.653344][T14575] ? percpu_ref_put+0xf9/0x180 [ 660.653368][T14575] do_pte_missing+0x2db7/0x34b0 [ 660.653401][T14575] ? do_huge_pmd_anonymous_page+0xaf1/0xbf0 [ 660.653444][T14575] handle_mm_fault+0x1a53/0x3750 [ 660.653477][T14575] ? handle_mm_fault+0xf1/0x3750 [ 660.653511][T14575] ? __pfx_handle_mm_fault+0x10/0x10 [ 660.653532][T14575] ? lock_vma_under_rcu+0x45a/0x500 [ 660.653555][T14575] ? __pfx_do_futex+0x10/0x10 [ 660.653600][T14575] do_user_addr_fault+0xa4f/0x1340 [ 660.653638][T14575] ? trace_page_fault_user+0x84/0x1e0 [ 660.653667][T14575] exc_page_fault+0x6a/0xc0 [ 660.653699][T14575] asm_exc_page_fault+0x26/0x30 [ 660.653718][T14575] RIP: 0033:0x7ffbb6a571b6 [ 660.653737][T14575] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 5c da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 660.653753][T14575] RSP: 002b:00007ffbb7b23f60 EFLAGS: 00010206 [ 660.653772][T14575] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 000020000059e000 [ 660.653786][T14575] RDX: 00000000000025f5 RSI: 000020000059e000 RDI: 000020000059f000 [ 660.653800][T14575] RBP: 00007ffbb6c54660 R08: 0000000000000000 R09: ffffffffffffffff [ 660.653814][T14575] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 660.653828][T14575] R13: 000020000059e000 R14: 00007ffbb6e26090 R15: 0000000000000000 [ 660.653859][T14575] [ 660.653927][T14575] memory: usage 4kB, limit 4kB, failcnt 145 [ 660.653941][T14575] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 660.653954][T14575] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 660.653967][T14575] Memory cgroup stats for /syz0/syz2: [ 660.654100][T14575] cache 0 [ 660.654109][T14575] rss 0 [ 660.654117][T14575] rss_huge 0 [ 660.654124][T14575] shmem 0 [ 660.654132][T14575] mapped_file 0 [ 660.654139][T14575] dirty 0 [ 660.654146][T14575] writeback 0 [ 660.654153][T14575] workingset_refault_anon 0 [ 660.654167][T14575] workingset_refault_file 0 [ 660.654176][T14575] swap 0 [ 660.654183][T14575] swapcached 20480 [ 660.654191][T14575] pgpgin 2 [ 660.654198][T14575] pgpgout 1024 [ 660.654206][T14575] pgfault 17 [ 660.654214][T14575] pgmajfault 0 [ 660.654222][T14575] inactive_anon 0 [ 660.654229][T14575] active_anon 0 [ 660.654237][T14575] inactive_file 0 [ 660.654245][T14575] active_file 0 [ 660.654252][T14575] unevictable 0 [ 660.654259][T14575] hierarchical_memory_limit 4096 [ 660.654268][T14575] hierarchical_memsw_limit 9223372036854771712 [ 660.654277][T14575] total_cache 0 [ 660.654284][T14575] total_rss 0 [ 660.654292][T14575] total_rss_huge 0 [ 660.654300][T14575] total_shmem 0 [ 660.654307][T14575] total_mapped_file 0 [ 660.654315][T14575] total_dirty 0 [ 660.654323][T14575] total_writeback 0 [ 660.654330][T14575] total_workingset_refault_anon 0 [ 660.654338][T14575] total_workingset_refault_file 0 [ 660.654347][T14575] total_swap 0 [ 660.654354][T14575] total_swapcached 20480 [ 660.654362][T14575] total_pgpgin 2 [ 660.654369][T14575] total_pgpgout 1024 [ 660.654377][T14575] total_pgfault 17 [ 660.654385][T14575] total_pgmajfault 0 [ 660.654392][T14575] total_inactive_anon 0 [ 660.654400][T14575] total_active_anon 0 [ 660.654408][T14575] total_inactive_file 0 [ 660.654416][T14575] total_active_file 0 [ 660.654423][T14575] total_unevictable 0 [ 660.654431][T14575] anon_cost 0 [ 660.654438][T14575] file_cost 0 [ 660.654446][T14575] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0/syz2,task_memcg=/syz0/syz2,task=syz.0.3084,pid=14573,uid=0 [ 660.654571][T14575] Memory cgroup out of memory: Killed process 14573 (syz.0.3084) total-vm:102384kB, anon-rss:1428kB, file-rss:22804kB, shmem-rss:68kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 660.665481][ T5717] usb 4-1: Using ep0 maxpacket: 8 [ 660.682150][ T5717] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 660.741554][ T5717] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 660.741580][ T5717] usb 4-1: config 0 has no interface number 0 [ 660.741618][ T5717] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 660.741642][ T5717] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 660.741679][ T5717] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 660.741705][ T5717] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 660.741729][ T5717] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 660.741750][ T5717] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.764224][ T5350] usb 3-1: Using ep0 maxpacket: 16 [ 660.764781][ T5350] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 660.765875][ T5350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.765918][ T5350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.770236][ T5350] usb 3-1: config 0 descriptor?? [ 660.813943][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.813970][ T5717] usb 4-1: Product: syz [ 660.813984][ T5717] usb 4-1: Manufacturer: syz [ 660.814000][ T5717] usb 4-1: SerialNumber: syz [ 660.817350][ T5717] usb 4-1: config 0 descriptor?? [ 660.970240][ T5718] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 661.029501][ T5717] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 661.184560][ T5718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 661.185238][ T5718] usb 1-1: not running at top speed; connect to a high speed hub [ 661.185268][ T5718] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 661.186444][ T5718] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 661.186468][ T5718] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 661.186487][ T5718] usb 1-1: config 14 has no interface number 0 [ 661.186503][ T5718] usb 1-1: config 14 has no interface number 1 [ 661.186582][ T5718] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 661.186604][ T5718] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 661.186627][ T5718] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 661.186650][ T5718] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 661.186698][ T5718] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 661.186722][ T5718] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 661.186743][ T5718] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 661.186768][ T5718] usb 1-1: config 14 interface 57 has no altsetting 0 [ 661.186785][ T5718] usb 1-1: config 14 interface 228 has no altsetting 0 [ 661.189104][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.189128][ T5718] usb 1-1: Product: syz [ 661.189149][ T5718] usb 1-1: Manufacturer: syz [ 661.189185][ T5718] usb 1-1: SerialNumber: syz [ 661.229765][T14563] iowarrior 4-1:0.186: Error -90 while submitting URB [ 661.231469][ T9] usb 4-1: USB disconnect, device number 73 [ 661.388493][ T5350] usbhid 3-1:0.0: can't add hid device: -71 [ 661.388614][ T5350] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 661.398580][ T5350] usb 3-1: USB disconnect, device number 72 [ 661.606164][ T5718] legousbtower 1-1:14.57: interrupt endpoints not found [ 661.810974][T14583] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3087'. [ 661.817209][ T5718] legousbtower 1-1:14.228: get version request failed: -71 [ 661.817442][ T5718] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 661.834087][ T5718] usb 1-1: USB disconnect, device number 67 [ 662.183716][ T25] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 662.354396][ T25] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 662.364537][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 662.364585][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.379956][ T25] usb 3-1: config 0 descriptor?? [ 662.386566][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 662.789748][T14601] syz.0.3093 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 662.806378][T14601] CPU: 0 UID: 0 PID: 14601 Comm: syz.0.3093 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.806413][T14601] Tainted: [L]=SOFTLOCKUP [ 662.806422][T14601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 662.806435][T14601] Call Trace: [ 662.806444][T14601] [ 662.806454][T14601] dump_stack_lvl+0xe8/0x150 [ 662.806487][T14601] dump_header+0xd3/0x4b0 [ 662.806519][T14601] oom_kill_process+0x3ab/0x9e0 [ 662.806547][T14601] out_of_memory+0x1064/0x1480 [ 662.806568][T14601] ? try_charge_memcg+0xc32/0x15e0 [ 662.806602][T14601] ? __pfx_out_of_memory+0x10/0x10 [ 662.806622][T14601] ? do_raw_spin_unlock+0xf5/0x200 [ 662.806658][T14601] try_charge_memcg+0xcdf/0x15e0 [ 662.806700][T14601] ? __pfx_try_charge_memcg+0x10/0x10 [ 662.806728][T14601] ? percpu_ref_tryget+0x15/0x180 [ 662.806762][T14601] ? __memcg_kmem_charge_page+0x15a/0x510 [ 662.806797][T14601] __memcg_kmem_charge_page+0x31c/0x510 [ 662.806824][T14601] ? __memcg_kmem_charge_page+0x15a/0x510 [ 662.806856][T14601] __alloc_frozen_pages_noprof+0x24a/0x5a0 [ 662.806891][T14601] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 662.806926][T14601] ? __pfx_policy_nodemask+0x10/0x10 [ 662.806948][T14601] ? do_raw_spin_unlock+0xf5/0x200 [ 662.806987][T14601] alloc_pages_mpol+0x21e/0x390 [ 662.807016][T14601] alloc_pages_noprof+0xb1/0x2b0 [ 662.807040][T14601] pte_alloc_one+0x22/0x370 [ 662.807065][T14601] __pte_alloc+0x25/0x1a0 [ 662.807091][T14601] ? percpu_ref_put+0xf9/0x180 [ 662.807117][T14601] do_pte_missing+0x2db7/0x34b0 [ 662.807151][T14601] ? do_huge_pmd_anonymous_page+0xaf1/0xbf0 [ 662.807193][T14601] handle_mm_fault+0x1a53/0x3750 [ 662.807226][T14601] ? handle_mm_fault+0xf1/0x3750 [ 662.807253][T14601] ? __pfx_handle_mm_fault+0x10/0x10 [ 662.807269][T14601] ? lock_vma_under_rcu+0x45a/0x500 [ 662.807289][T14601] ? __pfx_do_futex+0x10/0x10 [ 662.807327][T14601] do_user_addr_fault+0xa4f/0x1340 [ 662.807358][T14601] ? trace_page_fault_user+0x84/0x1e0 [ 662.807384][T14601] exc_page_fault+0x6a/0xc0 [ 662.807410][T14601] asm_exc_page_fault+0x26/0x30 [ 662.807427][T14601] RIP: 0033:0x7ffbb6a571b6 [ 662.807443][T14601] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 5c da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 662.807459][T14601] RSP: 002b:00007ffbb7b23f60 EFLAGS: 00010206 [ 662.807476][T14601] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 000020000059e000 [ 662.807489][T14601] RDX: 00000000000025f5 RSI: 000020000059e000 RDI: 000020000059f000 [ 662.807501][T14601] RBP: 00007ffbb6c54660 R08: 0000000000000000 R09: ffffffffffffffff [ 662.807513][T14601] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 662.807525][T14601] R13: 000020000059e000 R14: 00007ffbb6e26090 R15: 0000000000000000 [ 662.807552][T14601] [ 662.807616][T14601] memory: usage 4kB, limit 4kB, failcnt 201 [ 662.807635][T14601] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 662.807651][T14601] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 662.807667][T14601] Memory cgroup stats for /syz0/syz2: [ 662.807794][T14601] cache 0 [ 662.819035][T14601] rss 0 [ 662.819048][T14601] rss_huge 0 [ 662.819057][T14601] shmem 0 [ 662.819064][T14601] mapped_file 0 [ 662.819072][T14601] dirty 0 [ 662.819080][T14601] writeback 0 [ 662.819087][T14601] workingset_refault_anon 0 [ 662.819095][T14601] workingset_refault_file 0 [ 662.819103][T14601] swap 0 [ 662.819110][T14601] swapcached 20480 [ 662.819118][T14601] pgpgin 2 [ 662.819126][T14601] pgpgout 1024 [ 662.819134][T14601] pgfault 18 [ 662.819141][T14601] pgmajfault 0 [ 662.819149][T14601] inactive_anon 0 [ 662.819156][T14601] active_anon 0 [ 662.819163][T14601] inactive_file 0 [ 662.819170][T14601] active_file 0 [ 662.819177][T14601] unevictable 0 [ 662.819184][T14601] hierarchical_memory_limit 4096 [ 662.819193][T14601] hierarchical_memsw_limit 9223372036854771712 [ 662.819202][T14601] total_cache 0 [ 662.819210][T14601] total_rss 0 [ 662.819217][T14601] total_rss_huge 0 [ 662.819224][T14601] total_shmem 0 [ 662.819231][T14601] total_mapped_file 0 [ 662.819237][T14601] total_dirty 0 [ 662.819244][T14601] total_writeback 0 [ 662.819251][T14601] total_workingset_refault_anon 0 [ 662.819258][T14601] total_workingset_refault_file 0 [ 662.819265][T14601] total_swap 0 [ 662.819271][T14601] total_swapcached 20480 [ 662.819277][T14601] total_pgpgin 2 [ 662.819283][T14601] total_pgpgout 1024 [ 662.819290][T14601] total_pgfault 18 [ 662.819296][T14601] total_pgmajfault 0 [ 662.819302][T14601] total_inactive_anon 0 [ 662.819308][T14601] total_active_anon 0 [ 662.819314][T14601] total_inactive_file 0 [ 662.819320][T14601] total_active_file 0 [ 662.819326][T14601] total_unevictable 0 [ 662.819333][T14601] anon_cost 0 [ 662.819338][T14601] file_cost 0 [ 662.819345][T14601] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0/syz2,task_memcg=/syz0/syz2,task=syz.0.3093,pid=14599,uid=0 [ 662.819459][T14601] Memory cgroup out of memory: Killed process 14599 (syz.0.3093) total-vm:102384kB, anon-rss:1428kB, file-rss:22804kB, shmem-rss:68kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 663.062449][T14608] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3096'. [ 663.073681][ T25] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 663.175929][ T5717] usb 2-1: USB disconnect, device number 72 [ 663.233684][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 663.235746][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 663.238315][ T25] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 663.238338][ T25] usb 4-1: config 0 has no interface number 0 [ 663.238375][ T25] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 663.238396][ T25] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 663.238440][ T25] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 663.238465][ T25] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 663.238488][ T25] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 663.238510][ T25] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.240588][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.240610][ T25] usb 4-1: Product: syz [ 663.240624][ T25] usb 4-1: Manufacturer: syz [ 663.240639][ T25] usb 4-1: SerialNumber: syz [ 663.257776][ T25] usb 4-1: config 0 descriptor?? [ 663.471442][ T25] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 663.534646][ T5615] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 663.672159][T14603] iowarrior 4-1:0.186: Error -90 while submitting URB [ 663.677234][ T25] usb 4-1: USB disconnect, device number 74 [ 663.695509][ T5615] usb 1-1: unable to get BOS descriptor or descriptor too short [ 663.698539][ T5615] usb 1-1: not running at top speed; connect to a high speed hub [ 663.698569][ T5615] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 663.699942][ T5615] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 663.699965][ T5615] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 663.699984][ T5615] usb 1-1: config 14 has no interface number 0 [ 663.700000][ T5615] usb 1-1: config 14 has no interface number 1 [ 663.700060][ T5615] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 663.700081][ T5615] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 663.700105][ T5615] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 663.700130][ T5615] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 663.700157][ T5615] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 663.700180][ T5615] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 663.700202][ T5615] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.700228][ T5615] usb 1-1: config 14 interface 57 has no altsetting 0 [ 663.700245][ T5615] usb 1-1: config 14 interface 228 has no altsetting 0 [ 663.705608][ T5615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.705646][ T5615] usb 1-1: Product: syz [ 663.705660][ T5615] usb 1-1: Manufacturer: syz [ 663.705674][ T5615] usb 1-1: SerialNumber: syz [ 664.116281][ T5615] legousbtower 1-1:14.57: interrupt endpoints not found [ 664.241105][T14630] syz.3.3103 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 664.241147][T14630] CPU: 1 UID: 0 PID: 14630 Comm: syz.3.3103 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.241175][T14630] Tainted: [L]=SOFTLOCKUP [ 664.241184][T14630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 664.241197][T14630] Call Trace: [ 664.241205][T14630] [ 664.241215][T14630] dump_stack_lvl+0xe8/0x150 [ 664.241246][T14630] dump_header+0xd3/0x4b0 [ 664.241276][T14630] oom_kill_process+0x3ab/0x9e0 [ 664.241303][T14630] out_of_memory+0x1064/0x1480 [ 664.241323][T14630] ? try_charge_memcg+0xc32/0x15e0 [ 664.241355][T14630] ? __pfx_out_of_memory+0x10/0x10 [ 664.241375][T14630] ? do_raw_spin_unlock+0xf5/0x200 [ 664.241410][T14630] try_charge_memcg+0xcdf/0x15e0 [ 664.241448][T14630] ? __pfx_try_charge_memcg+0x10/0x10 [ 664.241477][T14630] ? percpu_ref_tryget+0x15/0x180 [ 664.241510][T14630] ? __memcg_kmem_charge_page+0x15a/0x510 [ 664.241542][T14630] __memcg_kmem_charge_page+0x31c/0x510 [ 664.241570][T14630] ? __memcg_kmem_charge_page+0x15a/0x510 [ 664.241601][T14630] __alloc_frozen_pages_noprof+0x24a/0x5a0 [ 664.241634][T14630] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 664.241667][T14630] ? __pfx_policy_nodemask+0x10/0x10 [ 664.241689][T14630] ? do_raw_spin_unlock+0xf5/0x200 [ 664.241720][T14630] alloc_pages_mpol+0x21e/0x390 [ 664.241746][T14630] alloc_pages_noprof+0xb1/0x2b0 [ 664.241769][T14630] pte_alloc_one+0x22/0x370 [ 664.241789][T14630] __pte_alloc+0x25/0x1a0 [ 664.241822][T14630] ? percpu_ref_put+0xf9/0x180 [ 664.241846][T14630] do_pte_missing+0x2db7/0x34b0 [ 664.241879][T14630] ? do_huge_pmd_anonymous_page+0xaf1/0xbf0 [ 664.241920][T14630] handle_mm_fault+0x1a53/0x3750 [ 664.241954][T14630] ? handle_mm_fault+0xf1/0x3750 [ 664.241987][T14630] ? __pfx_handle_mm_fault+0x10/0x10 [ 664.242008][T14630] ? lock_vma_under_rcu+0x45a/0x500 [ 664.242033][T14630] ? __pfx_do_futex+0x10/0x10 [ 664.242078][T14630] do_user_addr_fault+0xa4f/0x1340 [ 664.242117][T14630] ? trace_page_fault_user+0x84/0x1e0 [ 664.242147][T14630] exc_page_fault+0x6a/0xc0 [ 664.242178][T14630] asm_exc_page_fault+0x26/0x30 [ 664.242198][T14630] RIP: 0033:0x7fa228e571b6 [ 664.242218][T14630] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 5c da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 664.242234][T14630] RSP: 002b:00007fa229f29f60 EFLAGS: 00010206 [ 664.242253][T14630] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 000020000059e000 [ 664.242267][T14630] RDX: 00000000000025f5 RSI: 000020000059e000 RDI: 000020000059f000 [ 664.242281][T14630] RBP: 00007fa229054660 R08: 0000000000000000 R09: ffffffffffffffff [ 664.242295][T14630] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 664.242310][T14630] R13: 000020000059e000 R14: 00007fa229225fa0 R15: 0000000000000000 [ 664.242342][T14630] [ 664.242392][T14630] memory: usage 4kB, limit 4kB, failcnt 217 [ 664.242407][T14630] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 664.242420][T14630] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 664.242434][T14630] Memory cgroup stats for /syz3/syz2: [ 664.242566][T14630] cache 0 [ 664.242576][T14630] rss 0 [ 664.242583][T14630] rss_huge 0 [ 664.242591][T14630] shmem 0 [ 664.242598][T14630] mapped_file 0 [ 664.242605][T14630] dirty 0 [ 664.242613][T14630] writeback 0 [ 664.242620][T14630] workingset_refault_anon 0 [ 664.242628][T14630] workingset_refault_file 0 [ 664.242636][T14630] swap 0 [ 664.242664][T14630] swapcached 20480 [ 664.242671][T14630] pgpgin 2 [ 664.242679][T14630] pgpgout 1024 [ 664.242687][T14630] pgfault 19 [ 664.242694][T14630] pgmajfault 0 [ 664.242702][T14630] inactive_anon 0 [ 664.242709][T14630] active_anon 0 [ 664.242718][T14630] inactive_file 0 [ 664.242724][T14630] active_file 0 [ 664.242731][T14630] unevictable 0 [ 664.242739][T14630] hierarchical_memory_limit 4096 [ 664.242748][T14630] hierarchical_memsw_limit 9223372036854771712 [ 664.242758][T14630] total_cache 0 [ 664.242766][T14630] total_rss 0 [ 664.242773][T14630] total_rss_huge 0 [ 664.242780][T14630] total_shmem 0 [ 664.242814][T14630] total_mapped_file 0 [ 664.242822][T14630] total_dirty 0 [ 664.242830][T14630] total_writeback 0 [ 664.242838][T14630] total_workingset_refault_anon 0 [ 664.242846][T14630] total_workingset_refault_file 0 [ 664.242854][T14630] total_swap 0 [ 664.242861][T14630] total_swapcached 20480 [ 664.242870][T14630] total_pgpgin 2 [ 664.242877][T14630] total_pgpgout 1024 [ 664.242885][T14630] total_pgfault 19 [ 664.242892][T14630] total_pgmajfault 0 [ 664.242900][T14630] total_inactive_anon 0 [ 664.242907][T14630] total_active_anon 0 [ 664.242915][T14630] total_inactive_file 0 [ 664.242923][T14630] total_active_file 0 [ 664.242952][T14630] total_unevictable 0 [ 664.242960][T14630] anon_cost 0 [ 664.242968][T14630] file_cost 0 [ 664.242976][T14630] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3/syz2,task_memcg=/syz3/syz2,task=syz.3.3103,pid=14629,uid=0 [ 664.243117][T14630] Memory cgroup out of memory: Killed process 14629 (syz.3.3103) total-vm:102252kB, anon-rss:1424kB, file-rss:22804kB, shmem-rss:8kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 664.332754][ T5615] legousbtower 1-1:14.228: get version request failed: -71 [ 664.332930][ T5615] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 664.345920][ T5615] usb 1-1: USB disconnect, device number 68 [ 664.589893][T14635] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3105'. [ 664.930504][ T31] audit: type=1326 audit(1787172608.585:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14646 comm="syz.0.3111" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbb6b9e0d9 code=0x0 [ 665.083761][ T5350] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 665.103699][ T5615] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 665.245635][ T5350] usb 4-1: Using ep0 maxpacket: 32 [ 665.252019][ T5350] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 665.256490][ T5350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.256520][ T5350] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.256556][ T5350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.262750][ T5350] usb 4-1: config 0 descriptor?? [ 665.290600][ T5615] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 665.305390][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.305430][ T5615] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 665.305470][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.318644][ T5615] usb 2-1: config 0 descriptor?? [ 665.326410][ T5615] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 665.433973][ T5615] usb 3-1: USB disconnect, device number 73 [ 665.555076][T14651] syz.2.3112 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 665.555124][T14651] CPU: 1 UID: 0 PID: 14651 Comm: syz.2.3112 Tainted: G L syzkaller #0 PREEMPT(full) [ 665.555153][T14651] Tainted: [L]=SOFTLOCKUP [ 665.555160][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 665.555171][T14651] Call Trace: [ 665.555179][T14651] [ 665.555188][T14651] dump_stack_lvl+0xe8/0x150 [ 665.555219][T14651] dump_header+0xd3/0x4b0 [ 665.555249][T14651] oom_kill_process+0x3ab/0x9e0 [ 665.555277][T14651] out_of_memory+0x1064/0x1480 [ 665.555296][T14651] ? try_charge_memcg+0xc32/0x15e0 [ 665.555329][T14651] ? __pfx_out_of_memory+0x10/0x10 [ 665.555347][T14651] ? do_raw_spin_unlock+0xf5/0x200 [ 665.555381][T14651] try_charge_memcg+0xcdf/0x15e0 [ 665.555420][T14651] ? __pfx_try_charge_memcg+0x10/0x10 [ 665.555440][T14651] ? lock_acquire+0x115/0x350 [ 665.555486][T14651] ? charge_memcg+0x47/0x310 [ 665.555523][T14651] charge_memcg+0x1dd/0x310 [ 665.555555][T14651] __mem_cgroup_charge+0x25/0x80 [ 665.555586][T14651] do_pte_missing+0x175b/0x34b0 [ 665.555620][T14651] ? do_huge_pmd_anonymous_page+0xaf1/0xbf0 [ 665.555659][T14651] handle_mm_fault+0x1a53/0x3750 [ 665.555693][T14651] ? handle_mm_fault+0xf1/0x3750 [ 665.555752][T14651] ? __pfx_handle_mm_fault+0x10/0x10 [ 665.555773][T14651] ? lock_vma_under_rcu+0x45a/0x500 [ 665.555798][T14651] ? __pfx_do_futex+0x10/0x10 [ 665.555844][T14651] do_user_addr_fault+0xa4f/0x1340 [ 665.555883][T14651] ? trace_page_fault_user+0x84/0x1e0 [ 665.555913][T14651] exc_page_fault+0x6a/0xc0 [ 665.555944][T14651] asm_exc_page_fault+0x26/0x30 [ 665.555963][T14651] RIP: 0033:0x7f7be72571b6 [ 665.555983][T14651] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 5c da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 665.556000][T14651] RSP: 002b:00007f7be55d4f60 EFLAGS: 00010206 [ 665.556020][T14651] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 000020000059e000 [ 665.556034][T14651] RDX: 00000000000025f5 RSI: 000020000059e000 RDI: 000020000059f000 [ 665.556049][T14651] RBP: 00007f7be7454660 R08: 0000000000000000 R09: ffffffffffffffff [ 665.556063][T14651] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 665.556077][T14651] R13: 000020000059e000 R14: 00007f7be7626090 R15: 0000000000000000 [ 665.556108][T14651] [ 665.556176][T14651] memory: usage 4kB, limit 4kB, failcnt 98 [ 665.556190][T14651] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 665.556204][T14651] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 665.556217][T14651] Memory cgroup stats for /syz2/syz2: [ 665.556329][T14651] cache 0 [ 665.556338][T14651] rss 0 [ 665.556345][T14651] rss_huge 0 [ 665.556353][T14651] shmem 0 [ 665.556360][T14651] mapped_file 0 [ 665.556368][T14651] dirty 0 [ 665.556375][T14651] writeback 0 [ 665.556382][T14651] workingset_refault_anon 1 [ 665.556390][T14651] workingset_refault_file 0 [ 665.556397][T14651] swap 0 [ 665.556404][T14651] swapcached 8192 [ 665.556412][T14651] pgpgin 5 [ 665.556420][T14651] pgpgout 5 [ 665.556426][T14651] pgfault 220 [ 665.556434][T14651] pgmajfault 1 [ 665.556441][T14651] inactive_anon 0 [ 665.556449][T14651] active_anon 0 [ 665.556457][T14651] inactive_file 0 [ 665.556464][T14651] active_file 0 [ 665.556472][T14651] unevictable 0 [ 665.556479][T14651] hierarchical_memory_limit 4096 [ 665.556487][T14651] hierarchical_memsw_limit 9223372036854771712 [ 665.556496][T14651] total_cache 0 [ 665.556503][T14651] total_rss 0 [ 665.556511][T14651] total_rss_huge 0 [ 665.556518][T14651] total_shmem 0 [ 665.556526][T14651] total_mapped_file 0 [ 665.556534][T14651] total_dirty 0 [ 665.556542][T14651] total_writeback 0 [ 665.556549][T14651] total_workingset_refault_anon 1 [ 665.556557][T14651] total_workingset_refault_file 0 [ 665.556566][T14651] total_swap 0 [ 665.556573][T14651] total_swapcached 8192 [ 665.556581][T14651] total_pgpgin 5 [ 665.556588][T14651] total_pgpgout 5 [ 665.556596][T14651] total_pgfault 220 [ 665.556603][T14651] total_pgmajfault 1 [ 665.556611][T14651] total_inactive_anon 0 [ 665.556618][T14651] total_active_anon 0 [ 665.556626][T14651] total_inactive_file 0 [ 665.556634][T14651] total_active_file 0 [ 665.556642][T14651] total_unevictable 0 [ 665.556650][T14651] anon_cost 0 [ 665.556657][T14651] file_cost 0 [ 665.556665][T14651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2/syz2,task_memcg=/syz2/syz2,task=syz.2.3112,pid=14649,uid=0 [ 665.556791][T14651] Memory cgroup out of memory: Killed process 14649 (syz.2.3112) total-vm:102312kB, anon-rss:1424kB, file-rss:22868kB, shmem-rss:68kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 665.806787][T14655] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3114'. [ 666.006197][ T5350] ft260 0003:0403:6030.007E: unknown main item tag 0x0 [ 666.006233][ T5350] ft260 0003:0403:6030.007E: unknown main item tag 0x0 [ 666.104409][ T5350] ft260 0003:0403:6030.007E: chip code: 0000 0000 [ 666.238580][ T5350] ft260 0003:0403:6030.007E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 666.438572][ T5350] ft260 0003:0403:6030.007E: failed to retrieve status: -32, no wakeup [ 666.543838][ T5718] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 666.654314][T14643] ft260 0003:0403:6030.007E: ft260_i2c_read: failed with -38 [ 666.656018][ T5615] usb 4-1: USB disconnect, device number 75 [ 666.715644][ T5718] usb 1-1: unable to get BOS descriptor or descriptor too short [ 666.724879][ T5718] usb 1-1: not running at top speed; connect to a high speed hub [ 666.724937][ T5718] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 666.726008][ T5718] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 666.726031][ T5718] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 666.726050][ T5718] usb 1-1: config 14 has no interface number 0 [ 666.726066][ T5718] usb 1-1: config 14 has no interface number 1 [ 666.726135][ T5718] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 666.726158][ T5718] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 666.726182][ T5718] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 666.726207][ T5718] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 666.726233][ T5718] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 666.726258][ T5718] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 666.726279][ T5718] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 666.726303][ T5718] usb 1-1: config 14 interface 57 has no altsetting 0 [ 666.726321][ T5718] usb 1-1: config 14 interface 228 has no altsetting 0 [ 666.728359][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.728381][ T5718] usb 1-1: Product: syz [ 666.728396][ T5718] usb 1-1: Manufacturer: syz [ 666.728410][ T5718] usb 1-1: SerialNumber: syz [ 667.137505][ T5718] legousbtower 1-1:14.57: interrupt endpoints not found [ 667.323738][ T5350] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 667.349351][ T5718] legousbtower 1-1:14.228: get version request failed: -71 [ 667.358736][ T5718] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 667.382762][ T5718] usb 1-1: USB disconnect, device number 69 [ 667.484354][ T5350] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 667.495616][ T5350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.505805][ T5350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.517126][ T5350] usb 3-1: config 0 descriptor?? [ 667.525197][ T5350] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 667.853695][ T25] usb 2-1: USB disconnect, device number 73 [ 667.907467][ T31] audit: type=1326 audit(1787172611.565:8938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.1.3122" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff3859e0d9 code=0x0 [ 667.983531][T14685] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3123'. [ 668.323746][ T25] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 668.483772][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 668.489604][ T25] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 668.491802][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.491846][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.499962][ T25] usb 4-1: config 0 descriptor?? [ 669.043833][ T5350] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 669.109687][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 669.109799][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 669.115109][ T25] usb 4-1: USB disconnect, device number 76 [ 669.205595][ T5350] usb 2-1: Using ep0 maxpacket: 32 [ 669.212274][ T5350] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 669.213585][ T5350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.213662][ T5350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.213702][ T5350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.216328][ T5350] usb 2-1: config 0 descriptor?? [ 669.433695][ T189] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 669.584511][ T189] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 669.585944][ T189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.585971][ T189] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 669.586011][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.591132][ T189] usb 1-1: config 0 descriptor?? [ 669.599229][ T189] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 669.629308][ T5350] ft260 0003:0403:6030.007F: unknown main item tag 0x0 [ 669.629341][ T5350] ft260 0003:0403:6030.007F: unknown main item tag 0x0 [ 669.825851][ T5350] ft260 0003:0403:6030.007F: chip code: 0000 0000 [ 669.914530][ T189] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 670.026601][ T5350] ft260 0003:0403:6030.007F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 670.065464][ T189] usb 4-1: unable to get BOS descriptor or descriptor too short [ 670.073494][ T189] usb 4-1: not running at top speed; connect to a high speed hub [ 670.073582][ T189] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 670.084163][ T189] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 670.084188][ T189] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 670.084208][ T189] usb 4-1: config 14 has no interface number 0 [ 670.084224][ T189] usb 4-1: config 14 has no interface number 1 [ 670.084303][ T189] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 670.084326][ T189] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 670.084350][ T189] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 670.084374][ T189] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 670.084422][ T189] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 670.084446][ T189] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 670.084467][ T189] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.084492][ T189] usb 4-1: config 14 interface 57 has no altsetting 0 [ 670.084510][ T189] usb 4-1: config 14 interface 228 has no altsetting 0 [ 670.088020][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.088044][ T189] usb 4-1: Product: syz [ 670.088063][ T189] usb 4-1: Manufacturer: syz [ 670.088075][ T189] usb 4-1: SerialNumber: syz [ 670.227713][ T5350] ft260 0003:0403:6030.007F: failed to retrieve status: -32, no wakeup [ 670.430717][T14703] ft260 0003:0403:6030.007F: ft260_i2c_read: failed with -38 [ 670.431848][ T5350] usb 2-1: USB disconnect, device number 74 [ 670.499980][ T189] legousbtower 4-1:14.57: interrupt endpoints not found [ 670.531222][ T5717] usb 3-1: USB disconnect, device number 74 [ 670.578006][T14713] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3132'. [ 670.707429][ T189] legousbtower 4-1:14.228: get version request failed: -71 [ 670.707608][ T189] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 670.724865][ T189] usb 4-1: USB disconnect, device number 77 [ 671.097376][ T31] audit: type=1326 audit(1787172614.755:8939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14722 comm="syz.1.3136" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff3859e0d9 code=0x0 [ 671.793679][ T5717] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 671.964279][ T5717] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 671.965340][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 671.965368][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 671.965393][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 671.965414][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 671.965452][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.968250][ T5717] usb 3-1: config 0 descriptor?? [ 672.203502][ T5350] usb 1-1: USB disconnect, device number 70 [ 672.211083][ T25] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 672.354194][ T25] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 672.355756][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.355796][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.360573][ T25] usb 2-1: config 0 descriptor?? [ 672.369641][ T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 672.413141][ T5717] plantronics 0003:047F:FFFF.0080: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 672.559356][T14746] syz.3.3144 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 672.559394][T14746] CPU: 1 UID: 0 PID: 14746 Comm: syz.3.3144 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.559425][T14746] Tainted: [L]=SOFTLOCKUP [ 672.559433][T14746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.559445][T14746] Call Trace: [ 672.559452][T14746] [ 672.559460][T14746] dump_stack_lvl+0xe8/0x150 [ 672.559493][T14746] dump_header+0xd3/0x4b0 [ 672.559524][T14746] oom_kill_process+0x3ab/0x9e0 [ 672.559550][T14746] out_of_memory+0x1064/0x1480 [ 672.559570][T14746] ? try_charge_memcg+0xc32/0x15e0 [ 672.559603][T14746] ? __pfx_out_of_memory+0x10/0x10 [ 672.559622][T14746] ? do_raw_spin_unlock+0xf5/0x200 [ 672.559657][T14746] try_charge_memcg+0xcdf/0x15e0 [ 672.559694][T14746] ? __pfx_try_charge_memcg+0x10/0x10 [ 672.559733][T14746] ? charge_memcg+0x47/0x310 [ 672.559767][T14746] charge_memcg+0x1dd/0x310 [ 672.559800][T14746] __mem_cgroup_charge+0x25/0x80 [ 672.559830][T14746] do_wp_page+0x11a8/0x4b80 [ 672.559870][T14746] ? __pfx_do_wp_page+0x10/0x10 [ 672.559889][T14746] ? do_raw_spin_lock+0x12b/0x2f0 [ 672.559915][T14746] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 672.559949][T14746] handle_mm_fault+0x15d7/0x3750 [ 672.559982][T14746] ? handle_mm_fault+0xf1/0x3750 [ 672.560014][T14746] ? __pfx_handle_mm_fault+0x10/0x10 [ 672.560035][T14746] ? lock_vma_under_rcu+0x45a/0x500 [ 672.560060][T14746] ? __pfx_do_futex+0x10/0x10 [ 672.560103][T14746] do_user_addr_fault+0xa4f/0x1340 [ 672.560142][T14746] ? trace_page_fault_user+0x84/0x1e0 [ 672.560180][T14746] exc_page_fault+0x6a/0xc0 [ 672.560212][T14746] asm_exc_page_fault+0x26/0x30 [ 672.560232][T14746] RIP: 0033:0x7fa228e571b6 [ 672.560251][T14746] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 5c da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 672.560269][T14746] RSP: 002b:00007fa229f08f60 EFLAGS: 00010206 [ 672.560287][T14746] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 000020000059e000 [ 672.560300][T14746] RDX: 00000000000025f5 RSI: 000020000059e000 RDI: 000020000059f000 [ 672.560315][T14746] RBP: 00007fa229054660 R08: 0000000000000000 R09: ffffffffffffffff [ 672.560330][T14746] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 672.560344][T14746] R13: 000020000059e000 R14: 00007fa229226090 R15: 0000000000000000 [ 672.560373][T14746] [ 672.560408][T14746] memory: usage 4kB, limit 4kB, failcnt 253 [ 672.560422][T14746] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 672.560436][T14746] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 672.560448][T14746] Memory cgroup stats for /syz3/syz2: [ 672.560682][T14746] cache 0 [ 672.560691][T14746] rss 0 [ 672.560699][T14746] rss_huge 0 [ 672.560706][T14746] shmem 0 [ 672.560713][T14746] mapped_file 0 [ 672.560721][T14746] dirty 0 [ 672.560728][T14746] writeback 0 [ 672.560736][T14746] workingset_refault_anon 0 [ 672.560743][T14746] workingset_refault_file 0 [ 672.560751][T14746] swap 0 [ 672.560758][T14746] swapcached 20480 [ 672.560766][T14746] pgpgin 2 [ 672.560773][T14746] pgpgout 1024 [ 672.560781][T14746] pgfault 364 [ 672.560788][T14746] pgmajfault 0 [ 672.560796][T14746] inactive_anon 0 [ 672.560803][T14746] active_anon 0 [ 672.560811][T14746] inactive_file 0 [ 672.560819][T14746] active_file 0 [ 672.560826][T14746] unevictable 0 [ 672.560834][T14746] hierarchical_memory_limit 4096 [ 672.560842][T14746] hierarchical_memsw_limit 9223372036854771712 [ 672.560850][T14746] total_cache 0 [ 672.560859][T14746] total_rss 0 [ 672.560867][T14746] total_rss_huge 0 [ 672.560875][T14746] total_shmem 0 [ 672.560882][T14746] total_mapped_file 0 [ 672.560890][T14746] total_dirty 0 [ 672.560898][T14746] total_writeback 0 [ 672.560905][T14746] total_workingset_refault_anon 0 [ 672.560914][T14746] total_workingset_refault_file 0 [ 672.560923][T14746] total_swap 0 [ 672.560930][T14746] total_swapcached 20480 [ 672.560939][T14746] total_pgpgin 2 [ 672.560945][T14746] total_pgpgout 1024 [ 672.560953][T14746] total_pgfault 364 [ 672.560961][T14746] total_pgmajfault 0 [ 672.560968][T14746] total_inactive_anon 0 [ 672.560976][T14746] total_active_anon 0 [ 672.560983][T14746] total_inactive_file 0 [ 672.560991][T14746] total_active_file 0 [ 672.560999][T14746] total_unevictable 0 [ 672.561007][T14746] anon_cost 0 [ 672.561014][T14746] file_cost 0 [ 672.561022][T14746] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3/syz2,task_memcg=/syz3/syz2,task=syz.3.3144,pid=14744,uid=0 [ 672.561145][T14746] Memory cgroup out of memory: Killed process 14744 (syz.3.3144) total-vm:102384kB, anon-rss:1432kB, file-rss:22804kB, shmem-rss:2048kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 672.619744][ T5350] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 672.803684][ T5350] usb 1-1: Using ep0 maxpacket: 32 [ 672.804571][ T5350] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 672.805738][ T5350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.805767][ T5350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.805802][ T5350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.808399][ T5350] usb 1-1: config 0 descriptor?? [ 672.964032][ T5717] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 673.166412][ T5717] usb 4-1: unable to get BOS descriptor or descriptor too short [ 673.174676][ T5717] usb 4-1: not running at top speed; connect to a high speed hub [ 673.182700][ T5717] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 673.192642][ T5717] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 673.192685][ T5717] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 673.192720][ T5717] usb 4-1: config 14 has no interface number 0 [ 673.192740][ T5717] usb 4-1: config 14 has no interface number 1 [ 673.192798][ T5717] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 673.192820][ T5717] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 673.192844][ T5717] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 673.192868][ T5717] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 673.192894][ T5717] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 673.192917][ T5717] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 673.192937][ T5717] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.192962][ T5717] usb 4-1: config 14 interface 57 has no altsetting 0 [ 673.192979][ T5717] usb 4-1: config 14 interface 228 has no altsetting 0 [ 673.196616][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.196647][ T5717] usb 4-1: Product: syz [ 673.196662][ T5717] usb 4-1: Manufacturer: syz [ 673.196676][ T5717] usb 4-1: SerialNumber: syz [ 673.212943][ T5615] usb 3-1: USB disconnect, device number 75 [ 673.272591][ T5350] ft260 0003:0403:6030.0081: unknown main item tag 0x0 [ 673.272624][ T5350] ft260 0003:0403:6030.0081: unknown main item tag 0x0 [ 673.458449][ T5350] ft260 0003:0403:6030.0081: chip code: 0000 0000 [ 673.612088][ T5717] legousbtower 4-1:14.57: interrupt endpoints not found [ 673.658914][ T5350] ft260 0003:0403:6030.0081: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 673.819357][ T5717] legousbtower 4-1:14.228: get version request failed: -71 [ 673.819541][ T5717] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 673.845810][ T5717] usb 4-1: USB disconnect, device number 78 [ 673.859708][ T5350] ft260 0003:0403:6030.0081: failed to retrieve status: -32, no wakeup [ 673.939778][T14757] fuse: Bad value for 'fd' [ 674.068470][T14742] ft260 0003:0403:6030.0081: ft260_i2c_read: failed with -38 [ 674.079129][ T5718] usb 1-1: USB disconnect, device number 71 [ 674.395365][ T31] audit: type=1326 audit(1787172618.055:8940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14763 comm="syz.3.3149" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa228f9e0d9 code=0x0 [ 674.874113][ T5615] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 675.044343][ T5615] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 675.045475][ T5615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.045501][ T5615] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 675.045540][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.048378][ T5615] usb 1-1: config 0 descriptor?? [ 675.052182][ T5615] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 675.135421][T14776] syz.2.3153 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 675.143681][T14776] CPU: 1 UID: 0 PID: 14776 Comm: syz.2.3153 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.143715][T14776] Tainted: [L]=SOFTLOCKUP [ 675.143723][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 675.143736][T14776] Call Trace: [ 675.143746][T14776] [ 675.143756][T14776] dump_stack_lvl+0xe8/0x150 [ 675.143788][T14776] dump_header+0xd3/0x4b0 [ 675.143824][T14776] oom_kill_process+0x3ab/0x9e0 [ 675.143853][T14776] out_of_memory+0x1064/0x1480 [ 675.143873][T14776] ? try_charge_memcg+0xc32/0x15e0 [ 675.143906][T14776] ? __pfx_out_of_memory+0x10/0x10 [ 675.143924][T14776] ? do_raw_spin_unlock+0xf5/0x200 [ 675.143959][T14776] try_charge_memcg+0xcdf/0x15e0 [ 675.143997][T14776] ? __pfx_try_charge_memcg+0x10/0x10 [ 675.144015][T14776] ? lock_acquire+0x115/0x350 [ 675.144061][T14776] ? charge_memcg+0x47/0x310 [ 675.144095][T14776] charge_memcg+0x1dd/0x310 [ 675.144127][T14776] __mem_cgroup_charge+0x25/0x80 [ 675.144158][T14776] do_pte_missing+0x175b/0x34b0 [ 675.144203][T14776] handle_mm_fault+0x1a53/0x3750 [ 675.144235][T14776] ? handle_mm_fault+0xf1/0x3750 [ 675.144269][T14776] ? __pfx_handle_mm_fault+0x10/0x10 [ 675.144289][T14776] ? lock_vma_under_rcu+0x45a/0x500 [ 675.144338][T14776] do_user_addr_fault+0xa4f/0x1340 [ 675.144377][T14776] ? trace_page_fault_user+0x84/0x1e0 [ 675.144408][T14776] exc_page_fault+0x6a/0xc0 [ 675.144438][T14776] asm_exc_page_fault+0x26/0x30 [ 675.144458][T14776] RIP: 0033:0x7f7be736d207 [ 675.144476][T14776] Code: 2e a3 de 00 01 74 9d 83 f9 c0 0f 87 8f fe ff ff c5 fe 6f 4e 20 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 a4 c4 c1 7e 7f 00 c4 c1 7e 7f 48 20 e9 0e fd ff ff 0f 1f 80 00 [ 675.144494][T14776] RSP: 002b:00007f7be55b3f58 EFLAGS: 00010206 [ 675.144514][T14776] RAX: 0000200000600000 RBX: 0000000000000009 RCX: 00000000000025f5 [ 675.144527][T14776] RDX: 00000000000025f5 RSI: 00007f7be7404c00 RDI: 0000200000600000 [ 675.144541][T14776] RBP: 00007f7be74546f0 R08: 0000200000600000 R09: ffffffffffffffff [ 675.144556][T14776] R10: 0000000000000000 R11: 0000000000000008 R12: 000020000059e000 [ 675.144569][T14776] R13: 0000000000000008 R14: 0000000000000002 R15: 000000000039a000 [ 675.144599][T14776] [ 675.144750][T14776] memory: usage 4kB, limit 4kB, failcnt 164 [ 675.144764][T14776] memory+swap: usage 12kB, limit 9007199254740988kB, failcnt 0 [ 675.144778][T14776] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 675.144791][T14776] Memory cgroup stats for /syz2/syz2: [ 675.144927][T14776] cache 0 [ 675.144936][T14776] rss 0 [ 675.144943][T14776] rss_huge 0 [ 675.144950][T14776] shmem 0 [ 675.144958][T14776] mapped_file 0 [ 675.144966][T14776] dirty 0 [ 675.144973][T14776] writeback 0 [ 675.144981][T14776] workingset_refault_anon 2 [ 675.144989][T14776] workingset_refault_file 0 [ 675.144997][T14776] swap 8192 [ 675.145005][T14776] swapcached 20480 [ 675.145012][T14776] pgpgin 9 [ 675.145019][T14776] pgpgout 9 [ 675.145027][T14776] pgfault 613 [ 675.145033][T14776] pgmajfault 2 [ 675.145040][T14776] inactive_anon 0 [ 675.145048][T14776] active_anon 0 [ 675.145055][T14776] inactive_file 0 [ 675.145062][T14776] active_file 0 [ 675.145070][T14776] unevictable 0 [ 675.145078][T14776] hierarchical_memory_limit 4096 [ 675.145086][T14776] hierarchical_memsw_limit 9223372036854771712 [ 675.145095][T14776] total_cache 0 [ 675.145102][T14776] total_rss 0 [ 675.145109][T14776] total_rss_huge 0 [ 675.145116][T14776] total_shmem 0 [ 675.145124][T14776] total_mapped_file 0 [ 675.145133][T14776] total_dirty 0 [ 675.145139][T14776] total_writeback 0 [ 675.145148][T14776] total_workingset_refault_anon 2 [ 675.145156][T14776] total_workingset_refault_file 0 [ 675.145165][T14776] total_swap 8192 [ 675.145173][T14776] total_swapcached 20480 [ 675.145181][T14776] total_pgpgin 9 [ 675.145189][T14776] total_pgpgout 9 [ 675.145196][T14776] total_pgfault 613 [ 675.145204][T14776] total_pgmajfault 2 [ 675.145212][T14776] total_inactive_anon 0 [ 675.145220][T14776] total_active_anon 0 [ 675.145228][T14776] total_inactive_file 0 [ 675.145235][T14776] total_active_file 0 [ 675.145243][T14776] total_unevictable 0 [ 675.145251][T14776] anon_cost 0 [ 675.145258][T14776] file_cost 0 [ 675.145266][T14776] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2/syz2,task_memcg=/syz2/syz2,task=syz.2.3153,pid=14773,uid=0 [ 675.145396][T14776] Memory cgroup out of memory: Killed process 14773 (syz.2.3153) total-vm:102444kB, anon-rss:1432kB, file-rss:22836kB, shmem-rss:2048kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 675.471319][ T5615] usb 2-1: USB disconnect, device number 75 [ 675.863698][ T5615] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 675.943727][ T5717] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 676.015713][ T5615] usb 2-1: unable to get BOS descriptor or descriptor too short [ 676.016216][ T5615] usb 2-1: not running at top speed; connect to a high speed hub [ 676.016247][ T5615] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 676.017159][ T5615] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 676.017181][ T5615] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 676.017201][ T5615] usb 2-1: config 14 has no interface number 0 [ 676.017223][ T5615] usb 2-1: config 14 has no interface number 1 [ 676.017279][ T5615] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 676.017300][ T5615] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 676.017325][ T5615] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 676.017350][ T5615] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 676.017376][ T5615] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 676.017400][ T5615] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 676.017420][ T5615] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.017446][ T5615] usb 2-1: config 14 interface 57 has no altsetting 0 [ 676.017465][ T5615] usb 2-1: config 14 interface 228 has no altsetting 0 [ 676.019307][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.019330][ T5615] usb 2-1: Product: syz [ 676.019343][ T5615] usb 2-1: Manufacturer: syz [ 676.019358][ T5615] usb 2-1: SerialNumber: syz [ 676.095340][ T5717] usb 3-1: Using ep0 maxpacket: 32 [ 676.104095][ T5717] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 676.126374][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.126425][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.126460][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.131510][ T5717] usb 3-1: config 0 descriptor?? [ 676.437958][ T5615] legousbtower 2-1:14.57: interrupt endpoints not found [ 676.544399][ T5717] ft260 0003:0403:6030.0082: unknown main item tag 0x0 [ 676.544486][ T5717] ft260 0003:0403:6030.0082: unknown main item tag 0x0 [ 676.647118][ T5615] legousbtower 2-1:14.228: get version request failed: -71 [ 676.647371][ T5615] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 676.659294][ T5615] usb 2-1: USB disconnect, device number 76 [ 676.674875][ T5623] udevd[5623]: setting mode of /dev/bus/usb/002/076 to 020664 failed: No such file or directory [ 676.675696][ T5623] udevd[5623]: setting owner of /dev/bus/usb/002/076 to uid=0, gid=0 failed: No such file or directory [ 676.739326][ T5717] ft260 0003:0403:6030.0082: chip code: 0000 0000 [ 676.940544][ T5717] ft260 0003:0403:6030.0082: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 677.141052][ T5717] ft260 0003:0403:6030.0082: failed to retrieve status: -32, no wakeup [ 677.229667][T14799] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3161'. [ 677.308073][ T31] audit: type=1326 audit(1787172620.955:8941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14802 comm="syz.3.3163" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa228f9e0d9 code=0x0 [ 677.350741][ T5717] usb 3-1: USB disconnect, device number 76 [ 677.365945][T14804] syz.1.3162 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 677.375970][T14804] CPU: 0 UID: 0 PID: 14804 Comm: syz.1.3162 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.376004][T14804] Tainted: [L]=SOFTLOCKUP [ 677.376012][T14804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 677.376025][T14804] Call Trace: [ 677.376034][T14804] [ 677.376043][T14804] dump_stack_lvl+0xe8/0x150 [ 677.376075][T14804] dump_header+0xd3/0x4b0 [ 677.376105][T14804] oom_kill_process+0x3ab/0x9e0 [ 677.376132][T14804] out_of_memory+0x1064/0x1480 [ 677.376152][T14804] ? try_charge_memcg+0xc32/0x15e0 [ 677.376185][T14804] ? __pfx_out_of_memory+0x10/0x10 [ 677.376204][T14804] ? do_raw_spin_unlock+0xf5/0x200 [ 677.376241][T14804] try_charge_memcg+0xcdf/0x15e0 [ 677.376280][T14804] ? __pfx_try_charge_memcg+0x10/0x10 [ 677.376320][T14804] ? charge_memcg+0x47/0x310 [ 677.376356][T14804] charge_memcg+0x1dd/0x310 [ 677.376394][T14804] __mem_cgroup_charge+0x25/0x80 [ 677.376427][T14804] do_wp_page+0x11a8/0x4b80 [ 677.376469][T14804] ? __pfx_do_wp_page+0x10/0x10 [ 677.376488][T14804] ? do_raw_spin_lock+0x12b/0x2f0 [ 677.376514][T14804] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 677.376549][T14804] handle_mm_fault+0x15d7/0x3750 [ 677.376583][T14804] ? handle_mm_fault+0xf1/0x3750 [ 677.376626][T14804] ? __pfx_handle_mm_fault+0x10/0x10 [ 677.376648][T14804] ? lock_vma_under_rcu+0x45a/0x500 [ 677.376675][T14804] ? __pfx_do_futex+0x10/0x10 [ 677.376721][T14804] do_user_addr_fault+0xa4f/0x1340 [ 677.376761][T14804] ? trace_page_fault_user+0x84/0x1e0 [ 677.376793][T14804] exc_page_fault+0x6a/0xc0 [ 677.376826][T14804] asm_exc_page_fault+0x26/0x30 [ 677.376845][T14804] RIP: 0033:0x7eff384571b6 [ 677.376865][T14804] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d 5c da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 677.376883][T14804] RSP: 002b:00007eff39380f60 EFLAGS: 00010206 [ 677.376903][T14804] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 000020000059e000 [ 677.376918][T14804] RDX: 00000000000025f5 RSI: 000020000059e000 RDI: 000020000059f000 [ 677.376933][T14804] RBP: 00007eff38654660 R08: 0000000000000000 R09: ffffffffffffffff [ 677.376951][T14804] R10: ffffffffffffffff R11: 0000000000000000 R12: 00000000003ff000 [ 677.376966][T14804] R13: 000020000059e000 R14: 00007eff38826090 R15: 0000000000000000 [ 677.377000][T14804] [ 677.402776][T14804] memory: usage 4kB, limit 4kB, failcnt 56 [ 677.402788][T14804] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 677.402796][T14804] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 677.402803][T14804] Memory cgroup stats for /syz1/syz2: [ 677.402867][T14804] cache 0 [ 677.402872][T14804] rss 0 [ 677.402876][T14804] rss_huge 0 [ 677.402880][T14804] shmem 0 [ 677.402884][T14804] mapped_file 0 [ 677.402888][T14804] dirty 0 [ 677.402892][T14804] writeback 0 [ 677.402896][T14804] workingset_refault_anon 0 [ 677.402900][T14804] workingset_refault_file 0 [ 677.402905][T14804] swap 0 [ 677.402909][T14804] swapcached 20480 [ 677.402913][T14804] pgpgin 2 [ 677.402917][T14804] pgpgout 1024 [ 677.402921][T14804] pgfault 16 [ 677.402925][T14804] pgmajfault 0 [ 677.402929][T14804] inactive_anon 0 [ 677.402933][T14804] active_anon 0 [ 677.402937][T14804] inactive_file 0 [ 677.402942][T14804] active_file 0 [ 677.402946][T14804] unevictable 0 [ 677.402950][T14804] hierarchical_memory_limit 4096 [ 677.402955][T14804] hierarchical_memsw_limit 9223372036854771712 [ 677.402959][T14804] total_cache 0 [ 677.402964][T14804] total_rss 0 [ 677.402967][T14804] total_rss_huge 0 [ 677.402971][T14804] total_shmem 0 [ 677.402976][T14804] total_mapped_file 0 [ 677.402980][T14804] total_dirty 0 [ 677.402984][T14804] total_writeback 0 [ 677.402988][T14804] total_workingset_refault_anon 0 [ 677.402993][T14804] total_workingset_refault_file 0 [ 677.402998][T14804] total_swap 0 [ 677.403002][T14804] total_swapcached 20480 [ 677.403006][T14804] total_pgpgin 2 [ 677.403010][T14804] total_pgpgout 1024 [ 677.403014][T14804] total_pgfault 16 [ 677.403018][T14804] total_pgmajfault 0 [ 677.403023][T14804] total_inactive_anon 0 [ 677.403027][T14804] total_active_anon 0 [ 677.403032][T14804] total_inactive_file 0 [ 677.403036][T14804] total_active_file 0 [ 677.403040][T14804] total_unevictable 0 [ 677.403045][T14804] anon_cost 0 [ 677.403049][T14804] file_cost 0 [ 677.403053][T14804] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1/syz2,task_memcg=/syz1/syz2,task=syz.1.3162,pid=14800,uid=0 [ 677.403131][T14804] Memory cgroup out of memory: Killed process 14800 (syz.1.3162) total-vm:102384kB, anon-rss:1428kB, file-rss:22804kB, shmem-rss:2048kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 677.687991][ T5717] usb 1-1: USB disconnect, device number 72 [ 678.023728][ T5615] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 678.177218][ T5615] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 678.189576][ T5615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.189634][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.212708][ T5615] usb 2-1: config 0 descriptor?? [ 678.231755][ T5615] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 678.453679][ T189] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 678.607156][ T189] usb 4-1: unable to get BOS descriptor or descriptor too short [ 678.608887][ T189] usb 4-1: not running at top speed; connect to a high speed hub [ 678.608918][ T189] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 678.609826][ T189] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 678.609848][ T189] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 678.609868][ T189] usb 4-1: config 14 has no interface number 0 [ 678.609884][ T189] usb 4-1: config 14 has no interface number 1 [ 678.609940][ T189] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 678.609961][ T189] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 678.609985][ T189] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 678.610015][ T189] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 678.610042][ T189] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 678.610066][ T189] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 678.610086][ T189] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 678.610112][ T189] usb 4-1: config 14 interface 57 has no altsetting 0 [ 678.610131][ T189] usb 4-1: config 14 interface 228 has no altsetting 0 [ 678.612269][ T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.612291][ T189] usb 4-1: Product: syz [ 678.612305][ T189] usb 4-1: Manufacturer: syz [ 678.612319][ T189] usb 4-1: SerialNumber: syz [ 678.810252][T14826] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3171'. [ 679.018783][T14833] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3172'. [ 679.033299][ T189] legousbtower 4-1:14.57: interrupt endpoints not found [ 679.240835][ T189] legousbtower 4-1:14.228: get version request failed: -71 [ 679.241024][ T189] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 679.253195][ T189] usb 4-1: USB disconnect, device number 79 [ 679.303783][ T5615] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 679.454333][ T5615] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 679.464441][ T5615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.464468][ T5615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.464491][ T5615] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 679.464534][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.508598][ T5615] usb 1-1: config 0 descriptor?? [ 679.924771][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 679.932396][ T5615] usbhid 1-1:0.0: can't add hid device: -71 [ 679.938511][ T5615] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 679.949441][ T5615] usb 1-1: USB disconnect, device number 73 [ 680.073372][ T31] audit: type=1326 audit(1787172623.725:8942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14846 comm="syz.2.3178" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7be739e0d9 code=0x0 [ 680.104513][ T189] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 680.253672][ T189] usb 4-1: Using ep0 maxpacket: 32 [ 680.254359][ T189] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 680.255442][ T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.255470][ T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.255505][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.258880][ T189] usb 4-1: config 0 descriptor?? [ 680.666546][ T189] ft260 0003:0403:6030.0083: unknown main item tag 0x0 [ 680.666588][ T189] ft260 0003:0403:6030.0083: unknown main item tag 0x0 [ 680.864987][ T189] ft260 0003:0403:6030.0083: chip code: 0000 0000 [ 680.951755][T14854] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3180'. [ 681.065813][ T189] ft260 0003:0403:6030.0083: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 681.248131][ T5717] usb 2-1: USB disconnect, device number 77 [ 681.268188][ T189] ft260 0003:0403:6030.0083: failed to retrieve status: -32, no wakeup [ 681.475957][ T189] usb 4-1: USB disconnect, device number 80 [ 681.603720][ T5615] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 681.653444][T14869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3185'. [ 681.756729][ T5615] usb 1-1: unable to get BOS descriptor or descriptor too short [ 681.765024][ T5615] usb 1-1: not running at top speed; connect to a high speed hub [ 681.773085][ T5615] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 681.784105][ T5615] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 681.792330][ T5615] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 681.792357][ T5615] usb 1-1: config 14 has no interface number 0 [ 681.792375][ T5615] usb 1-1: config 14 has no interface number 1 [ 681.792439][ T5615] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 681.792461][ T5615] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 681.792488][ T5615] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 681.792512][ T5615] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 681.792538][ T5615] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 681.792561][ T5615] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 681.792581][ T5615] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 681.792606][ T5615] usb 1-1: config 14 interface 57 has no altsetting 0 [ 681.792624][ T5615] usb 1-1: config 14 interface 228 has no altsetting 0 [ 681.911601][ T5615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.911649][ T5615] usb 1-1: Product: syz [ 681.911678][ T5615] usb 1-1: Manufacturer: syz [ 681.911697][ T5615] usb 1-1: SerialNumber: syz [ 682.323693][T12291] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 682.347790][ T5615] legousbtower 1-1:14.57: interrupt endpoints not found [ 682.475329][T12291] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 682.494359][T12291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.494416][T12291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.494458][T12291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 682.494503][T12291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.539701][T12291] usb 4-1: config 0 descriptor?? [ 682.568293][ T5615] legousbtower 1-1:14.228: get version request failed: -71 [ 682.568497][ T5615] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 682.605079][ T5615] usb 1-1: USB disconnect, device number 74 [ 682.853639][T14880] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3189'. [ 682.960743][T12291] usbhid 4-1:0.0: can't add hid device: -71 [ 682.960871][T12291] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 682.978183][T12291] usb 4-1: USB disconnect, device number 81 [ 683.023715][ T189] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 683.186927][ T189] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 683.196905][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.196952][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.197162][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.208925][ T189] usb 2-1: config 0 descriptor?? [ 683.423697][ T5350] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 683.574798][ T5350] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 683.575858][ T5350] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 683.575887][ T5350] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.575948][ T5350] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.621276][ T189] usbhid 2-1:0.0: can't add hid device: -32 [ 683.621414][ T189] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 683.642810][ T189] usb 2-1: USB disconnect, device number 78 [ 683.815531][ T5350] usb 1-1: usb_control_msg returned -32 [ 683.815605][ T5350] usbtmc 1-1:16.0: can't read capabilities [ 684.214595][ T5718] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 684.366032][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 684.366729][ T5718] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 684.368875][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.368902][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.368937][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.386566][ T5718] usb 3-1: config 0 descriptor?? [ 684.551959][T14906] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3199'. [ 684.814015][ T5718] ft260 0003:0403:6030.0084: unknown main item tag 0x0 [ 684.821791][ T5718] ft260 0003:0403:6030.0084: unknown main item tag 0x0 [ 684.853664][ T5615] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 685.001163][ T5718] ft260 0003:0403:6030.0084: chip code: 0000 0000 [ 685.016013][ T5615] usb 2-1: unable to get BOS descriptor or descriptor too short [ 685.024108][ T5615] usb 2-1: not running at top speed; connect to a high speed hub [ 685.024140][ T5615] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 685.042440][ T5615] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 685.042483][ T5615] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 685.042519][ T5615] usb 2-1: config 14 has no interface number 0 [ 685.042534][ T5615] usb 2-1: config 14 has no interface number 1 [ 685.042593][ T5615] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 685.042615][ T5615] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 685.042639][ T5615] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 685.042663][ T5615] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 685.042688][ T5615] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 685.042713][ T5615] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 685.042733][ T5615] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 685.042759][ T5615] usb 2-1: config 14 interface 57 has no altsetting 0 [ 685.042776][ T5615] usb 2-1: config 14 interface 228 has no altsetting 0 [ 685.162137][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.162162][ T5615] usb 2-1: Product: syz [ 685.162176][ T5615] usb 2-1: Manufacturer: syz [ 685.162191][ T5615] usb 2-1: SerialNumber: syz [ 685.202577][ T5718] ft260 0003:0403:6030.0084: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 685.403378][ T5718] ft260 0003:0403:6030.0084: failed to retrieve status: -32, no wakeup [ 685.583730][ T5615] legousbtower 2-1:14.57: interrupt endpoints not found [ 685.618840][ T5717] usb 3-1: USB disconnect, device number 77 [ 685.655165][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.655241][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.792334][ T5615] legousbtower 2-1:14.228: get version request failed: -71 [ 685.792528][ T5615] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 685.808138][ T5615] usb 2-1: USB disconnect, device number 79 [ 685.834338][T12291] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 685.984863][T12291] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 685.985946][T12291] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 685.985975][T12291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 685.986000][T12291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 685.986020][T12291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 685.986058][T12291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.993143][T12291] usb 4-1: config 0 descriptor?? [ 686.200513][ T5718] usb 1-1: USB disconnect, device number 75 [ 686.417840][T12291] plantronics 0003:047F:FFFF.0085: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 686.603779][ T5718] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 686.754384][ T5718] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 686.764768][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.765059][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.765098][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.770121][ T5718] usb 1-1: config 0 descriptor?? [ 687.201484][ T5718] usbhid 1-1:0.0: can't add hid device: -32 [ 687.202781][ T5718] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 687.211170][ T5718] usb 1-1: USB disconnect, device number 76 [ 687.231342][ T5350] usb 4-1: USB disconnect, device number 82 [ 687.425546][T14936] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3209'. [ 687.773765][T12291] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 687.935797][T12291] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 687.945956][T12291] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 687.945986][T12291] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.946025][T12291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.169906][T12291] usb 2-1: usb_control_msg returned -32 [ 688.169956][T12291] usbtmc 2-1:16.0: can't read capabilities [ 688.561276][T14953] syz.3.3216 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 688.561341][T14953] CPU: 1 UID: 0 PID: 14953 Comm: syz.3.3216 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.561368][T14953] Tainted: [L]=SOFTLOCKUP [ 688.561374][T14953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 688.561384][T14953] Call Trace: [ 688.561393][T14953] [ 688.561401][T14953] dump_stack_lvl+0xe8/0x150 [ 688.561433][T14953] dump_header+0xd3/0x4b0 [ 688.561465][T14953] oom_kill_process+0x3ab/0x9e0 [ 688.561492][T14953] out_of_memory+0x1064/0x1480 [ 688.561511][T14953] ? try_charge_memcg+0xc32/0x15e0 [ 688.561541][T14953] ? __pfx_out_of_memory+0x10/0x10 [ 688.561557][T14953] ? do_raw_spin_unlock+0xf5/0x200 [ 688.561594][T14953] try_charge_memcg+0xcdf/0x15e0 [ 688.561635][T14953] ? __pfx_try_charge_memcg+0x10/0x10 [ 688.561671][T14953] ? percpu_ref_tryget+0x15/0x180 [ 688.561705][T14953] ? __memcg_kmem_charge_page+0x15a/0x510 [ 688.561739][T14953] __memcg_kmem_charge_page+0x31c/0x510 [ 688.561766][T14953] ? __memcg_kmem_charge_page+0x15a/0x510 [ 688.561798][T14953] __alloc_frozen_pages_noprof+0x24a/0x5a0 [ 688.561832][T14953] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 688.561866][T14953] ? __pfx_policy_nodemask+0x10/0x10 [ 688.561898][T14953] alloc_pages_mpol+0x21e/0x390 [ 688.561926][T14953] alloc_pages_noprof+0xb1/0x2b0 [ 688.561950][T14953] pte_alloc_one+0x22/0x370 [ 688.561974][T14953] __pte_alloc+0x25/0x1a0 [ 688.562006][T14953] do_pte_missing+0x2db7/0x34b0 [ 688.562036][T14953] ? mtree_range_walk+0x707/0x8b0 [ 688.562150][T14953] handle_mm_fault+0x1a53/0x3750 [ 688.562185][T14953] ? handle_mm_fault+0xf1/0x3750 [ 688.562219][T14953] ? __pfx_handle_mm_fault+0x10/0x10 [ 688.562256][T14953] ? __pfx___up_read+0x10/0x10 [ 688.562284][T14953] ? lock_mm_and_find_vma+0xa7/0x340 [ 688.562314][T14953] do_user_addr_fault+0x746/0x1340 [ 688.562360][T14953] exc_page_fault+0x6a/0xc0 [ 688.562391][T14953] asm_exc_page_fault+0x26/0x30 [ 688.562411][T14953] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 688.562466][T14953] Code: 6e 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 688.562484][T14953] RSP: 0018:ffffc90000b17778 EFLAGS: 00050206 [ 688.562503][T14953] RAX: 00007ffffffff001 RBX: ffff88801ffe0000 RCX: 0000000000000140 [ 688.562519][T14953] RDX: 0000000000000001 RSI: 0000200000e00000 RDI: ffff88801ffe7ec0 [ 688.562534][T14953] RBP: ffffc90000b178d0 R08: ffff88801ffe7fff R09: 1ffff11003ffcfff [ 688.562549][T14953] R10: dffffc0000000000 R11: ffffed1003ffd000 R12: ffffc90000b17bd8 [ 688.562565][T14953] R13: 0000200000df8140 R14: 0000000000008000 R15: 1ffff92000162f7b [ 688.562598][T14953] _copy_from_iter+0x21b/0x1660 [ 688.562721][T14953] ? __alloc_skb+0x27a/0x7a0 [ 688.562816][T14953] ? __pfx__copy_from_iter+0x10/0x10 [ 688.562845][T14953] ? alloc_pages_noprof+0x140/0x2b0 [ 688.562870][T14953] ? skb_page_frag_refill+0x119/0x460 [ 688.562947][T14953] kcm_sendmsg+0xe32/0x2ad0 [ 688.563056][T14953] ? __pfx_kcm_sendmsg+0x10/0x10 [ 688.563087][T14953] ? apparmor_socket_sendmsg+0x98/0x360 [ 688.563165][T14953] ? __pfx_kcm_sendmsg+0x10/0x10 [ 688.563186][T14953] sock_sendmsg_nosec+0x13a/0x180 [ 688.563220][T14953] sock_write_iter+0x2de/0x3e0 [ 688.563251][T14953] ? __pfx_sock_write_iter+0x10/0x10 [ 688.563289][T14953] ? bpf_lsm_file_permission+0x9/0x20 [ 688.563318][T14953] ? security_file_permission+0x75/0x260 [ 688.563377][T14953] vfs_write+0x612/0xba0 [ 688.563418][T14953] ? __pfx_vfs_write+0x10/0x10 [ 688.563455][T14953] ? __fget_files+0x2a/0x420 [ 688.563487][T14953] ksys_write+0x150/0x270 [ 688.563516][T14953] ? __pfx_ksys_write+0x10/0x10 [ 688.563553][T14953] do_syscall_64+0x166/0x520 [ 688.563572][T14953] ? trace_irq_disable+0x3b/0x140 [ 688.563616][T14953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.563636][T14953] ? clear_bhb_loop+0x70/0xc0 [ 688.563669][T14953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.563689][T14953] RIP: 0033:0x7fa228f9e0d9 [ 688.563708][T14953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.563725][T14953] RSP: 002b:00007fa229f2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 688.563744][T14953] RAX: ffffffffffffffda RBX: 00007fa229225fa0 RCX: 00007fa228f9e0d9 [ 688.563760][T14953] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000003 [ 688.563774][T14953] RBP: 00007fa229035024 R08: 0000000000000000 R09: 0000000000000000 [ 688.563787][T14953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.563800][T14953] R13: 00007fa229226038 R14: 00007fa229225fa0 R15: 00007ffe1925ff88 [ 688.563834][T14953] [ 688.566087][T14953] memory: usage 4kB, limit 4kB, failcnt 296 [ 688.566105][T14953] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 688.566119][T14953] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 688.566132][T14953] Memory cgroup stats for /syz3/syz2: [ 688.566270][T14953] cache 0 [ 688.566279][T14953] rss 0 [ 688.566286][T14953] rss_huge 0 [ 688.566294][T14953] shmem 0 [ 688.566301][T14953] mapped_file 0 [ 688.566309][T14953] dirty 0 [ 688.566316][T14953] writeback 0 [ 688.566324][T14953] workingset_refault_anon 0 [ 688.566332][T14953] workingset_refault_file 0 [ 688.566341][T14953] swap 0 [ 688.566348][T14953] swapcached 20480 [ 688.573392][T14953] pgpgin 2 [ 688.573402][T14953] pgpgout 1024 [ 688.573411][T14953] pgfault 365 [ 688.573419][T14953] pgmajfault 0 [ 688.573426][T14953] inactive_anon 0 [ 688.573434][T14953] active_anon 0 [ 688.573442][T14953] inactive_file 0 [ 688.573450][T14953] active_file 0 [ 688.573457][T14953] unevictable 0 [ 688.573465][T14953] hierarchical_memory_limit 4096 [ 688.573474][T14953] hierarchical_memsw_limit 9223372036854771712 [ 688.573484][T14953] total_cache 0 [ 688.573504][T14953] total_rss 0 [ 688.573512][T14953] total_rss_huge 0 [ 688.573520][T14953] total_shmem 0 [ 688.573527][T14953] total_mapped_file 0 [ 688.573536][T14953] total_dirty 0 [ 688.573544][T14953] total_writeback 0 [ 688.573552][T14953] total_workingset_refault_anon 0 [ 688.573560][T14953] total_workingset_refault_file 0 [ 688.573569][T14953] total_swap 0 [ 688.573576][T14953] total_swapcached 20480 [ 688.574330][T14953] total_pgpgin 2 [ 688.574342][T14953] total_pgpgout 1024 [ 688.574350][T14953] total_pgfault 365 [ 688.574358][T14953] total_pgmajfault 0 [ 688.574365][T14953] total_inactive_anon 0 [ 688.574373][T14953] total_active_anon 0 [ 688.574381][T14953] total_inactive_file 0 [ 688.574389][T14953] total_active_file 0 [ 688.574397][T14953] total_unevictable 0 [ 688.574406][T14953] anon_cost 0 [ 688.574413][T14953] file_cost 0 [ 688.574422][T14953] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3/syz2,task_memcg=/syz3/syz2,task=syz.3.3216,pid=14952,uid=0 [ 688.576031][T14953] Memory cgroup out of memory: Killed process 14952 (syz.3.3216) total-vm:102384kB, anon-rss:1432kB, file-rss:22740kB, shmem-rss:2048kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 688.909663][T14964] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3219'. [ 689.313716][ T5615] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 689.343691][T12291] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 689.465359][ T5615] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 689.467553][ T5615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.467581][ T5615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.467617][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.477118][ T5615] usb 1-1: config 0 descriptor?? [ 689.493837][T12291] usb 3-1: Using ep0 maxpacket: 32 [ 689.496612][T12291] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 689.497752][T12291] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 689.497774][T12291] usb 3-1: config 0 has no interface number 0 [ 689.497814][T12291] usb 3-1: config 0 interface 12 has no altsetting 0 [ 689.507279][T12291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.507325][T12291] usb 3-1: Product: syz [ 689.507341][T12291] usb 3-1: Manufacturer: syz [ 689.507354][T12291] usb 3-1: SerialNumber: syz [ 689.513228][T12291] usb 3-1: config 0 descriptor?? [ 689.886184][ T5615] usbhid 1-1:0.0: can't add hid device: -32 [ 689.892290][ T5615] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 689.903255][ T5615] usb 1-1: USB disconnect, device number 77 [ 690.125935][T12291] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 690.136024][T12291] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 690.137292][T12291] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 690.137382][T12291] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 690.143639][T12291] usb 3-1: USB disconnect, device number 78 [ 690.570257][T14982] syz.0.3226 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 690.575287][T12291] usb 2-1: USB disconnect, device number 80 [ 690.592724][T14982] CPU: 0 UID: 0 PID: 14982 Comm: syz.0.3226 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.592759][T14982] Tainted: [L]=SOFTLOCKUP [ 690.592768][T14982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 690.592781][T14982] Call Trace: [ 690.592792][T14982] [ 690.592801][T14982] dump_stack_lvl+0xe8/0x150 [ 690.592835][T14982] dump_header+0xd3/0x4b0 [ 690.592866][T14982] oom_kill_process+0x3ab/0x9e0 [ 690.592895][T14982] out_of_memory+0x1064/0x1480 [ 690.592917][T14982] ? try_charge_memcg+0xc32/0x15e0 [ 690.592953][T14982] ? __pfx_out_of_memory+0x10/0x10 [ 690.592972][T14982] ? do_raw_spin_unlock+0xf5/0x200 [ 690.593009][T14982] try_charge_memcg+0xcdf/0x15e0 [ 690.593053][T14982] ? __pfx_try_charge_memcg+0x10/0x10 [ 690.593096][T14982] ? charge_memcg+0x47/0x310 [ 690.593133][T14982] charge_memcg+0x1dd/0x310 [ 690.593168][T14982] __mem_cgroup_charge+0x25/0x80 [ 690.593201][T14982] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 690.593243][T14982] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 690.593271][T14982] ? shmem_allowable_huge_orders+0x616/0x6c0 [ 690.593314][T14982] shmem_get_folio_gfp+0x5da/0x16d0 [ 690.593358][T14982] shmem_fault+0x179/0x390 [ 690.593390][T14982] __do_fault+0x138/0x2a0 [ 690.593418][T14982] ? do_pte_missing+0x140c/0x34b0 [ 690.593443][T14982] do_pte_missing+0x2215/0x34b0 [ 690.593489][T14982] ? handle_mm_fault+0xf1/0x3750 [ 690.593518][T14982] handle_mm_fault+0x1a53/0x3750 [ 690.593553][T14982] ? handle_mm_fault+0xf1/0x3750 [ 690.593588][T14982] ? __pfx_handle_mm_fault+0x10/0x10 [ 690.593624][T14982] ? __pfx___up_read+0x10/0x10 [ 690.593653][T14982] ? lock_mm_and_find_vma+0xa7/0x340 [ 690.593683][T14982] do_user_addr_fault+0x746/0x1340 [ 690.593730][T14982] exc_page_fault+0x6a/0xc0 [ 690.593762][T14982] asm_exc_page_fault+0x26/0x30 [ 690.593784][T14982] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 690.593812][T14982] Code: 6e 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 690.593830][T14982] RSP: 0018:ffffc9000657f778 EFLAGS: 00050206 [ 690.593851][T14982] RAX: 00007ffffffff001 RBX: ffff88805d478000 RCX: 0000000000003140 [ 690.593867][T14982] RDX: 0000000000000001 RSI: 00002000001f5000 RDI: ffff88805d47cec0 [ 690.593883][T14982] RBP: ffffc9000657f8d0 R08: ffff88805d47ffff R09: 1ffff1100ba8ffff [ 690.593900][T14982] R10: dffffc0000000000 R11: ffffed100ba90000 R12: ffffc9000657fbd8 [ 690.593916][T14982] R13: 00002000001f0140 R14: 0000000000008000 R15: 1ffff92000caff7b [ 690.593951][T14982] _copy_from_iter+0x21b/0x1660 [ 690.593982][T14982] ? __alloc_skb+0x27a/0x7a0 [ 690.594015][T14982] ? __pfx__copy_from_iter+0x10/0x10 [ 690.594046][T14982] ? alloc_pages_noprof+0x140/0x2b0 [ 690.594072][T14982] ? skb_page_frag_refill+0x119/0x460 [ 690.594111][T14982] kcm_sendmsg+0xe32/0x2ad0 [ 690.594181][T14982] ? __pfx_kcm_sendmsg+0x10/0x10 [ 690.594213][T14982] ? apparmor_socket_sendmsg+0x98/0x360 [ 690.594246][T14982] ? __pfx_kcm_sendmsg+0x10/0x10 [ 690.594268][T14982] sock_sendmsg_nosec+0x13a/0x180 [ 690.594303][T14982] sock_write_iter+0x2de/0x3e0 [ 690.594336][T14982] ? __pfx_sock_write_iter+0x10/0x10 [ 690.594375][T14982] ? bpf_lsm_file_permission+0x9/0x20 [ 690.594398][T14982] ? security_file_permission+0x75/0x260 [ 690.594434][T14982] vfs_write+0x612/0xba0 [ 690.594477][T14982] ? __pfx_vfs_write+0x10/0x10 [ 690.594513][T14982] ? __fget_files+0x2a/0x420 [ 690.594546][T14982] ksys_write+0x150/0x270 [ 690.594574][T14982] ? __pfx_ksys_write+0x10/0x10 [ 690.594613][T14982] do_syscall_64+0x166/0x520 [ 690.594631][T14982] ? trace_irq_disable+0x3b/0x140 [ 690.594658][T14982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.594679][T14982] ? clear_bhb_loop+0x70/0xc0 [ 690.594706][T14982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.594726][T14982] RIP: 0033:0x7ffbb6b9e0d9 [ 690.594745][T14982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.594763][T14982] RSP: 002b:00007ffbb7b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 690.594785][T14982] RAX: ffffffffffffffda RBX: 00007ffbb6e25fa0 RCX: 00007ffbb6b9e0d9 [ 690.594800][T14982] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000003 [ 690.594815][T14982] RBP: 00007ffbb6c35024 R08: 0000000000000000 R09: 0000000000000000 [ 690.594829][T14982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.594843][T14982] R13: 00007ffbb6e26038 R14: 00007ffbb6e25fa0 R15: 00007ffcfa5df798 [ 690.594877][T14982] [ 690.714253][T14982] memory: usage 4kB, limit 4kB, failcnt 290 [ 690.714274][T14982] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 690.714288][T14982] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 690.714300][T14982] Memory cgroup stats for /syz0/syz2: [ 690.714409][T14982] cache 0 [ 690.714419][T14982] rss 0 [ 690.714428][T14982] rss_huge 0 [ 690.714435][T14982] shmem 0 [ 690.714441][T14982] mapped_file 0 [ 690.714448][T14982] dirty 0 [ 690.714455][T14982] writeback 0 [ 690.714462][T14982] workingset_refault_anon 0 [ 690.714470][T14982] workingset_refault_file 0 [ 690.714478][T14982] swap 0 [ 690.714486][T14982] swapcached 20480 [ 690.714494][T14982] pgpgin 2 [ 690.714501][T14982] pgpgout 1024 [ 690.714509][T14982] pgfault 19 [ 690.714517][T14982] pgmajfault 0 [ 690.714524][T14982] inactive_anon 0 [ 690.714532][T14982] active_anon 0 [ 690.714540][T14982] inactive_file 0 [ 690.714547][T14982] active_file 0 [ 690.715721][T14982] unevictable 0 [ 690.715731][T14982] hierarchical_memory_limit 4096 [ 690.715740][T14982] hierarchical_memsw_limit 9223372036854771712 [ 690.715749][T14982] total_cache 0 [ 690.715757][T14982] total_rss 0 [ 690.715765][T14982] total_rss_huge 0 [ 690.715772][T14982] total_shmem 0 [ 690.715780][T14982] total_mapped_file 0 [ 690.715788][T14982] total_dirty 0 [ 690.715796][T14982] total_writeback 0 [ 690.715804][T14982] total_workingset_refault_anon 0 [ 690.715812][T14982] total_workingset_refault_file 0 [ 690.715821][T14982] total_swap 0 [ 690.715828][T14982] total_swapcached 20480 [ 690.715837][T14982] total_pgpgin 2 [ 690.715844][T14982] total_pgpgout 1024 [ 690.715852][T14982] total_pgfault 19 [ 690.715861][T14982] total_pgmajfault 0 [ 690.715868][T14982] total_inactive_anon 0 [ 690.715876][T14982] total_active_anon 0 [ 690.715884][T14982] total_inactive_file 0 [ 690.715892][T14982] total_active_file 0 [ 690.715900][T14982] total_unevictable 0 [ 690.715908][T14982] anon_cost 0 [ 690.715916][T14982] file_cost 0 [ 690.715924][T14982] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0/syz2,task_memcg=/syz0/syz2,task=syz.0.3226,pid=14981,uid=0 [ 690.716059][T14982] Memory cgroup out of memory: Killed process 14981 (syz.0.3226) total-vm:102384kB, anon-rss:1428kB, file-rss:22740kB, shmem-rss:2004kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 691.051517][T14991] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3229'. [ 691.783705][T12291] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 691.909356][T15009] kvm: pic: non byte write [ 691.915779][ T189] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 691.934530][T12291] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 691.944803][T12291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.944854][T12291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.944891][T12291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.949658][T12291] usb 4-1: config 0 descriptor?? [ 692.074442][ T189] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 692.087227][ T189] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 692.097218][ T189] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.097295][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.226404][T15012] syz.0.3237 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 692.226487][T15012] CPU: 1 UID: 0 PID: 15012 Comm: syz.0.3237 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.226515][T15012] Tainted: [L]=SOFTLOCKUP [ 692.226522][T15012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 692.226535][T15012] Call Trace: [ 692.226544][T15012] [ 692.226554][T15012] dump_stack_lvl+0xe8/0x150 [ 692.226588][T15012] dump_header+0xd3/0x4b0 [ 692.226613][T15012] oom_kill_process+0x3ab/0x9e0 [ 692.226638][T15012] out_of_memory+0x1064/0x1480 [ 692.226658][T15012] ? try_charge_memcg+0xc32/0x15e0 [ 692.226692][T15012] ? __pfx_out_of_memory+0x10/0x10 [ 692.226712][T15012] ? do_raw_spin_unlock+0xf5/0x200 [ 692.226747][T15012] try_charge_memcg+0xcdf/0x15e0 [ 692.226787][T15012] ? __pfx_try_charge_memcg+0x10/0x10 [ 692.226816][T15012] ? percpu_ref_tryget+0x15/0x180 [ 692.226850][T15012] ? __memcg_kmem_charge_page+0x15a/0x510 [ 692.226883][T15012] __memcg_kmem_charge_page+0x31c/0x510 [ 692.226911][T15012] ? __memcg_kmem_charge_page+0x15a/0x510 [ 692.226943][T15012] __alloc_frozen_pages_noprof+0x24a/0x5a0 [ 692.226978][T15012] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 692.227011][T15012] ? __pfx_policy_nodemask+0x10/0x10 [ 692.227037][T15012] ? stack_trace_save+0xa9/0x100 [ 692.227098][T15012] alloc_pages_mpol+0x21e/0x390 [ 692.227126][T15012] alloc_pages_noprof+0xb1/0x2b0 [ 692.227150][T15012] pte_alloc_one+0x22/0x370 [ 692.227202][T15012] do_huge_pmd_anonymous_page+0x6c2/0xbf0 [ 692.227244][T15012] handle_mm_fault+0x19b5/0x3750 [ 692.227279][T15012] ? handle_mm_fault+0xf1/0x3750 [ 692.227313][T15012] ? __pfx_handle_mm_fault+0x10/0x10 [ 692.227350][T15012] ? __lock_acquire+0x6df/0x2e50 [ 692.227383][T15012] ? lock_mm_and_find_vma+0xa7/0x340 [ 692.227413][T15012] do_user_addr_fault+0x746/0x1340 [ 692.227459][T15012] exc_page_fault+0x6a/0xc0 [ 692.227490][T15012] asm_exc_page_fault+0x26/0x30 [ 692.227510][T15012] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 692.227536][T15012] Code: 6e 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 692.227554][T15012] RSP: 0018:ffffc9000657f778 EFLAGS: 00050206 [ 692.227573][T15012] RAX: 00007ffffffff001 RBX: ffff88807c648000 RCX: 0000000000000140 [ 692.227588][T15012] RDX: 0000000000000001 RSI: 0000200000600000 RDI: ffff88807c64fec0 [ 692.227602][T15012] RBP: ffffc9000657f8d0 R08: ffff88807c64ffff R09: 1ffff1100f8c9fff [ 692.227618][T15012] R10: dffffc0000000000 R11: ffffed100f8ca000 R12: ffffc9000657fbd8 [ 692.227634][T15012] R13: 00002000005f8140 R14: 0000000000008000 R15: 1ffff92000caff7b [ 692.227666][T15012] _copy_from_iter+0x21b/0x1660 [ 692.227697][T15012] ? __alloc_skb+0x27a/0x7a0 [ 692.227730][T15012] ? __pfx__copy_from_iter+0x10/0x10 [ 692.227760][T15012] ? alloc_pages_noprof+0x140/0x2b0 [ 692.227784][T15012] ? skb_page_frag_refill+0x119/0x460 [ 692.227821][T15012] kcm_sendmsg+0xe32/0x2ad0 [ 692.227886][T15012] ? __pfx_kcm_sendmsg+0x10/0x10 [ 692.227917][T15012] ? apparmor_socket_sendmsg+0x98/0x360 [ 692.227947][T15012] ? __pfx_kcm_sendmsg+0x10/0x10 [ 692.227967][T15012] sock_sendmsg_nosec+0x13a/0x180 [ 692.228001][T15012] sock_write_iter+0x2de/0x3e0 [ 692.228032][T15012] ? __pfx_sock_write_iter+0x10/0x10 [ 692.228069][T15012] ? bpf_lsm_file_permission+0x9/0x20 [ 692.228093][T15012] ? security_file_permission+0x75/0x260 [ 692.228127][T15012] vfs_write+0x612/0xba0 [ 692.228168][T15012] ? __pfx_vfs_write+0x10/0x10 [ 692.228204][T15012] ? __fget_files+0x2a/0x420 [ 692.228237][T15012] ksys_write+0x150/0x270 [ 692.228265][T15012] ? __pfx_ksys_write+0x10/0x10 [ 692.228302][T15012] do_syscall_64+0x166/0x520 [ 692.228320][T15012] ? trace_irq_disable+0x3b/0x140 [ 692.228349][T15012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.228369][T15012] ? clear_bhb_loop+0x70/0xc0 [ 692.228395][T15012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.228414][T15012] RIP: 0033:0x7ffbb6b9e0d9 [ 692.228433][T15012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.228450][T15012] RSP: 002b:00007ffbb7b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 692.228471][T15012] RAX: ffffffffffffffda RBX: 00007ffbb6e25fa0 RCX: 00007ffbb6b9e0d9 [ 692.228486][T15012] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000003 [ 692.228501][T15012] RBP: 00007ffbb6c35024 R08: 0000000000000000 R09: 0000000000000000 [ 692.228513][T15012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.228526][T15012] R13: 00007ffbb6e26038 R14: 00007ffbb6e25fa0 R15: 00007ffcfa5df798 [ 692.228561][T15012] [ 692.240788][T15012] memory: usage 4kB, limit 4kB, failcnt 370 [ 692.240831][T15012] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 692.240848][T15012] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 692.240861][T15012] Memory cgroup stats for /syz0/syz2: [ 692.241000][T15012] cache 0 [ 692.241010][T15012] rss 0 [ 692.241018][T15012] rss_huge 0 [ 692.241026][T15012] shmem 0 [ 692.241033][T15012] mapped_file 0 [ 692.241041][T15012] dirty 0 [ 692.241048][T15012] writeback 0 [ 692.241057][T15012] workingset_refault_anon 0 [ 692.241066][T15012] workingset_refault_file 0 [ 692.241074][T15012] swap 0 [ 692.241082][T15012] swapcached 20480 [ 692.241113][T15012] pgpgin 2 [ 692.241121][T15012] pgpgout 1024 [ 692.241130][T15012] pgfault 19 [ 692.241146][T15012] pgmajfault 0 [ 692.241154][T15012] inactive_anon 0 [ 692.241161][T15012] active_anon 0 [ 692.241169][T15012] inactive_file 0 [ 692.241176][T15012] active_file 0 [ 692.241184][T15012] unevictable 0 [ 692.241192][T15012] hierarchical_memory_limit 4096 [ 692.241201][T15012] hierarchical_memsw_limit 9223372036854771712 [ 692.241210][T15012] total_cache 0 [ 692.241218][T15012] total_rss 0 [ 692.241226][T15012] total_rss_huge 0 [ 692.241257][T15012] total_shmem 0 [ 692.241264][T15012] total_mapped_file 0 [ 692.241272][T15012] total_dirty 0 [ 692.241279][T15012] total_writeback 0 [ 692.241286][T15012] total_workingset_refault_anon 0 [ 692.241294][T15012] total_workingset_refault_file 0 [ 692.241303][T15012] total_swap 0 [ 692.241310][T15012] total_swapcached 20480 [ 692.241317][T15012] total_pgpgin 2 [ 692.241326][T15012] total_pgpgout 1024 [ 692.241334][T15012] total_pgfault 19 [ 692.241342][T15012] total_pgmajfault 0 [ 692.241350][T15012] total_inactive_anon 0 [ 692.241358][T15012] total_active_anon 0 [ 692.241364][T15012] total_inactive_file 0 [ 692.241372][T15012] total_active_file 0 [ 692.241402][T15012] total_unevictable 0 [ 692.241411][T15012] anon_cost 0 [ 692.241419][T15012] file_cost 0 [ 692.241427][T15012] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0/syz2,task_memcg=/syz0/syz2,task=syz.0.3237,pid=15011,uid=0 [ 692.241570][T15012] Memory cgroup out of memory: Killed process 15011 (syz.0.3237) total-vm:102384kB, anon-rss:1428kB, file-rss:22740kB, shmem-rss:2048kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 692.338260][ T189] usb 2-1: usb_control_msg returned -32 [ 692.338309][ T189] usbtmc 2-1:16.0: can't read capabilities [ 692.365821][T12291] usbhid 4-1:0.0: can't add hid device: -32 [ 692.365915][T12291] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 692.379440][T12291] usb 4-1: USB disconnect, device number 83 [ 692.454358][T15017] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3239'. [ 693.725881][T15039] kvm: pic: non byte write [ 693.870177][T15047] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3249'. [ 694.183729][ T5615] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 694.334418][ T5615] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 694.348061][ T5615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.348109][ T5615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.348159][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.379627][ T5615] usb 1-1: config 0 descriptor?? [ 694.672045][T12291] usb 2-1: USB disconnect, device number 81 [ 694.797374][ T5615] usbhid 1-1:0.0: can't add hid device: -32 [ 694.804096][ T5615] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 694.822188][ T5615] usb 1-1: USB disconnect, device number 78 [ 695.006048][T15070] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3259'. [ 695.173703][T15072] kvm: pic: non byte write [ 696.048486][T15099] kvm: pic: non byte write [ 696.423766][ T5718] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 696.575520][ T5718] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 696.576496][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.576525][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.576560][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.579759][ T5718] usb 3-1: config 0 descriptor?? [ 696.969677][T15115] syz.1.3276 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 696.979838][T15115] CPU: 0 UID: 0 PID: 15115 Comm: syz.1.3276 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.979872][T15115] Tainted: [L]=SOFTLOCKUP [ 696.979881][T15115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 696.979894][T15115] Call Trace: [ 696.979907][T15115] [ 696.979917][T15115] dump_stack_lvl+0xe8/0x150 [ 696.979951][T15115] dump_header+0xd3/0x4b0 [ 696.979983][T15115] oom_kill_process+0x3ab/0x9e0 [ 696.980012][T15115] out_of_memory+0x1064/0x1480 [ 696.980033][T15115] ? try_charge_memcg+0xc32/0x15e0 [ 696.980069][T15115] ? __pfx_out_of_memory+0x10/0x10 [ 696.980089][T15115] ? do_raw_spin_unlock+0xf5/0x200 [ 696.980126][T15115] try_charge_memcg+0xcdf/0x15e0 [ 696.980168][T15115] ? __pfx_try_charge_memcg+0x10/0x10 [ 696.980212][T15115] ? charge_memcg+0x47/0x310 [ 696.980247][T15115] charge_memcg+0x1dd/0x310 [ 696.980282][T15115] __mem_cgroup_charge+0x25/0x80 [ 696.980322][T15115] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 696.980364][T15115] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 696.980394][T15115] ? shmem_allowable_huge_orders+0x616/0x6c0 [ 696.980436][T15115] shmem_get_folio_gfp+0x5da/0x16d0 [ 696.980479][T15115] shmem_fault+0x179/0x390 [ 696.980513][T15115] __do_fault+0x138/0x2a0 [ 696.980541][T15115] ? do_pte_missing+0x140c/0x34b0 [ 696.980569][T15115] do_pte_missing+0x2215/0x34b0 [ 696.980609][T15115] ? handle_mm_fault+0xf1/0x3750 [ 696.980637][T15115] handle_mm_fault+0x1a53/0x3750 [ 696.980673][T15115] ? handle_mm_fault+0xf1/0x3750 [ 696.980709][T15115] ? __pfx_handle_mm_fault+0x10/0x10 [ 696.980747][T15115] ? __pfx___up_read+0x10/0x10 [ 696.980776][T15115] ? lock_mm_and_find_vma+0xa7/0x340 [ 696.980806][T15115] do_user_addr_fault+0x746/0x1340 [ 696.980853][T15115] exc_page_fault+0x6a/0xc0 [ 696.980887][T15115] asm_exc_page_fault+0x26/0x30 [ 696.980908][T15115] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 696.980936][T15115] Code: 6e 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 696.980954][T15115] RSP: 0018:ffffc90006c3f778 EFLAGS: 00050206 [ 696.980974][T15115] RAX: 00007ffffffff001 RBX: ffff88807daf0000 RCX: 0000000000006140 [ 696.980990][T15115] RDX: 0000000000000001 RSI: 0000200000162000 RDI: ffff88807daf1ec0 [ 696.981005][T15115] RBP: ffffc90006c3f8d0 R08: ffff88807daf7fff R09: 1ffff1100fb5efff [ 696.981021][T15115] R10: dffffc0000000000 R11: ffffed100fb5f000 R12: ffffc90006c3fbd8 [ 696.981037][T15115] R13: 0000200000160140 R14: 0000000000008000 R15: 1ffff92000d87f7b [ 696.981071][T15115] _copy_from_iter+0x21b/0x1660 [ 696.981102][T15115] ? __alloc_skb+0x27a/0x7a0 [ 696.981137][T15115] ? __pfx__copy_from_iter+0x10/0x10 [ 696.981168][T15115] ? alloc_pages_noprof+0x140/0x2b0 [ 696.981194][T15115] ? skb_page_frag_refill+0x119/0x460 [ 696.981237][T15115] kcm_sendmsg+0xe32/0x2ad0 [ 696.981304][T15115] ? __pfx_kcm_sendmsg+0x10/0x10 [ 696.981344][T15115] ? apparmor_socket_sendmsg+0x98/0x360 [ 696.981375][T15115] ? __pfx_kcm_sendmsg+0x10/0x10 [ 696.981397][T15115] sock_sendmsg_nosec+0x13a/0x180 [ 696.981432][T15115] sock_write_iter+0x2de/0x3e0 [ 696.981464][T15115] ? __pfx_sock_write_iter+0x10/0x10 [ 696.981500][T15115] ? bpf_lsm_file_permission+0x9/0x20 [ 696.981523][T15115] ? security_file_permission+0x75/0x260 [ 696.981559][T15115] vfs_write+0x612/0xba0 [ 696.981596][T15115] ? __pfx_vfs_write+0x10/0x10 [ 696.981634][T15115] ? __fget_files+0x2a/0x420 [ 696.981668][T15115] ksys_write+0x150/0x270 [ 696.981698][T15115] ? __pfx_ksys_write+0x10/0x10 [ 696.981736][T15115] do_syscall_64+0x166/0x520 [ 696.981756][T15115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.981777][T15115] ? clear_bhb_loop+0x70/0xc0 [ 696.981804][T15115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.981823][T15115] RIP: 0033:0x7eff3859e0d9 [ 696.981843][T15115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.981861][T15115] RSP: 002b:00007eff39381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 696.981882][T15115] RAX: ffffffffffffffda RBX: 00007eff38826090 RCX: 00007eff3859e0d9 [ 696.981898][T15115] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000004 [ 696.981912][T15115] RBP: 00007eff38635024 R08: 0000000000000000 R09: 0000000000000000 [ 696.981926][T15115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.981939][T15115] R13: 00007eff38826128 R14: 00007eff38826090 R15: 00007fff00ca9c48 [ 696.981974][T15115] [ 697.140259][T15115] memory: usage 4kB, limit 4kB, failcnt 146 [ 697.140277][T15115] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 697.140291][T15115] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 697.140304][T15115] Memory cgroup stats for /syz1/syz2: [ 697.140418][T15115] cache 0 [ 697.140428][T15115] rss 0 [ 697.140436][T15115] rss_huge 0 [ 697.140443][T15115] shmem 0 [ 697.140450][T15115] mapped_file 0 [ 697.140458][T15115] dirty 0 [ 697.140466][T15115] writeback 0 [ 697.140473][T15115] workingset_refault_anon 0 [ 697.140481][T15115] workingset_refault_file 0 [ 697.140489][T15115] swap 0 [ 697.140496][T15115] swapcached 20480 [ 697.140504][T15115] pgpgin 2 [ 697.140511][T15115] pgpgout 1024 [ 697.140518][T15115] pgfault 105 [ 697.140525][T15115] pgmajfault 0 [ 697.140533][T15115] inactive_anon 0 [ 697.140540][T15115] active_anon 0 [ 697.140548][T15115] inactive_file 0 [ 697.140556][T15115] active_file 0 [ 697.140563][T15115] unevictable 0 [ 697.140583][T15115] hierarchical_memory_limit 4096 [ 697.140592][T15115] hierarchical_memsw_limit 9223372036854771712 [ 697.140601][T15115] total_cache 0 [ 697.140609][T15115] total_rss 0 [ 697.140616][T15115] total_rss_huge 0 [ 697.140624][T15115] total_shmem 0 [ 697.140632][T15115] total_mapped_file 0 [ 697.140639][T15115] total_dirty 0 [ 697.140647][T15115] total_writeback 0 [ 697.140655][T15115] total_workingset_refault_anon 0 [ 697.140663][T15115] total_workingset_refault_file 0 [ 697.140671][T15115] total_swap 0 [ 697.140679][T15115] total_swapcached 20480 [ 697.140687][T15115] total_pgpgin 2 [ 697.140694][T15115] total_pgpgout 1024 [ 697.140701][T15115] total_pgfault 105 [ 697.140710][T15115] total_pgmajfault 0 [ 697.140717][T15115] total_inactive_anon 0 [ 697.140725][T15115] total_active_anon 0 [ 697.140733][T15115] total_inactive_file 0 [ 697.140741][T15115] total_active_file 0 [ 697.140749][T15115] total_unevictable 0 [ 697.140757][T15115] anon_cost 0 [ 697.140764][T15115] file_cost 0 [ 697.140773][T15115] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1/syz2,task_memcg=/syz1/syz2,task=syz.1.3276,pid=15113,uid=0 [ 697.147763][T15115] Memory cgroup out of memory: Killed process 15113 (syz.1.3276) total-vm:102516kB, anon-rss:1436kB, file-rss:22804kB, shmem-rss:1416kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 697.168468][ T5718] usbhid 3-1:0.0: can't add hid device: -71 [ 697.168570][ T5718] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 697.299265][ T5718] usb 3-1: USB disconnect, device number 79 [ 697.827939][T15124] kvm: pic: non byte write [ 698.044278][ T5615] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 698.203738][ T5615] usb 1-1: Using ep0 maxpacket: 16 [ 698.204553][ T5615] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 698.208440][ T5615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.208464][ T5615] usb 1-1: Product: syz [ 698.208479][ T5615] usb 1-1: Manufacturer: syz [ 698.208494][ T5615] usb 1-1: SerialNumber: syz [ 698.212573][ T5615] usb 1-1: config 0 descriptor?? [ 698.618889][ T5615] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 698.622648][ T5615] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 698.623560][ T5615] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 698.623894][ T5615] usb 1-1: media controller created [ 698.635896][ T5615] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 698.906430][T15143] syz.1.3285 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 698.906490][T15143] CPU: 1 UID: 0 PID: 15143 Comm: syz.1.3285 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.906519][T15143] Tainted: [L]=SOFTLOCKUP [ 698.906528][T15143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.906547][T15143] Call Trace: [ 698.906556][T15143] [ 698.906566][T15143] dump_stack_lvl+0xe8/0x150 [ 698.906599][T15143] dump_header+0xd3/0x4b0 [ 698.906631][T15143] oom_kill_process+0x3ab/0x9e0 [ 698.906660][T15143] out_of_memory+0x1064/0x1480 [ 698.906681][T15143] ? try_charge_memcg+0xc32/0x15e0 [ 698.906716][T15143] ? __pfx_out_of_memory+0x10/0x10 [ 698.906736][T15143] ? do_raw_spin_unlock+0xf5/0x200 [ 698.906773][T15143] try_charge_memcg+0xcdf/0x15e0 [ 698.906815][T15143] ? __pfx_try_charge_memcg+0x10/0x10 [ 698.906846][T15143] ? percpu_ref_tryget+0x15/0x180 [ 698.906882][T15143] ? __memcg_kmem_charge_page+0x15a/0x510 [ 698.906916][T15143] __memcg_kmem_charge_page+0x31c/0x510 [ 698.906945][T15143] ? __memcg_kmem_charge_page+0x15a/0x510 [ 698.906978][T15143] __alloc_frozen_pages_noprof+0x24a/0x5a0 [ 698.907014][T15143] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 698.907049][T15143] ? __pfx_policy_nodemask+0x10/0x10 [ 698.907083][T15143] alloc_pages_mpol+0x21e/0x390 [ 698.907112][T15143] alloc_pages_noprof+0xb1/0x2b0 [ 698.907137][T15143] pte_alloc_one+0x22/0x370 [ 698.907163][T15143] __pte_alloc+0x25/0x1a0 [ 698.907197][T15143] do_pte_missing+0x2db7/0x34b0 [ 698.907227][T15143] ? mtree_range_walk+0x707/0x8b0 [ 698.907264][T15143] handle_mm_fault+0x1a53/0x3750 [ 698.907300][T15143] ? handle_mm_fault+0xf1/0x3750 [ 698.907336][T15143] ? __pfx_handle_mm_fault+0x10/0x10 [ 698.907373][T15143] ? __pfx___up_read+0x10/0x10 [ 698.907402][T15143] ? lock_mm_and_find_vma+0xa7/0x340 [ 698.907433][T15143] do_user_addr_fault+0x746/0x1340 [ 698.907481][T15143] exc_page_fault+0x6a/0xc0 [ 698.907514][T15143] asm_exc_page_fault+0x26/0x30 [ 698.907534][T15143] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 698.907569][T15143] Code: 6e 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 698.907587][T15143] RSP: 0018:ffffc900037b7778 EFLAGS: 00050206 [ 698.907607][T15143] RAX: 00007ffffffff001 RBX: ffff88807e5e0000 RCX: 0000000000000140 [ 698.907623][T15143] RDX: 0000000000000001 RSI: 0000200000c00000 RDI: ffff88807e5e7ec0 [ 698.907638][T15143] RBP: ffffc900037b78d0 R08: ffff88807e5e7fff R09: 1ffff1100fcbcfff [ 698.907654][T15143] R10: dffffc0000000000 R11: ffffed100fcbd000 R12: ffffc900037b7bd8 [ 698.907670][T15143] R13: 0000200000bf8140 R14: 0000000000008000 R15: 1ffff920006f6f7b [ 698.907704][T15143] _copy_from_iter+0x21b/0x1660 [ 698.907737][T15143] ? __alloc_skb+0x27a/0x7a0 [ 698.907771][T15143] ? __pfx__copy_from_iter+0x10/0x10 [ 698.907802][T15143] ? alloc_pages_noprof+0x140/0x2b0 [ 698.907828][T15143] ? skb_page_frag_refill+0x119/0x460 [ 698.907866][T15143] kcm_sendmsg+0xe32/0x2ad0 [ 698.907934][T15143] ? __pfx_kcm_sendmsg+0x10/0x10 [ 698.907968][T15143] ? apparmor_socket_sendmsg+0x98/0x360 [ 698.907999][T15143] ? __pfx_kcm_sendmsg+0x10/0x10 [ 698.908021][T15143] sock_sendmsg_nosec+0x13a/0x180 [ 698.908056][T15143] sock_write_iter+0x2de/0x3e0 [ 698.908089][T15143] ? __pfx_sock_write_iter+0x10/0x10 [ 698.908127][T15143] ? bpf_lsm_file_permission+0x9/0x20 [ 698.908151][T15143] ? securi ** replaying previous printk message ** [ 698.908151][T15143] ? security_file_permission+0x75/0x260 [ 698.908187][T15143] vfs_write+0x612/0xba0 [ 698.908223][T15143] ? __pfx_vfs_write+0x10/0x10 [ 698.908261][T15143] ? __fget_files+0x2a/0x420 [ 698.908296][T15143] ksys_write+0x150/0x270 [ 698.908325][T15143] ? __pfx_ksys_write+0x10/0x10 [ 698.908364][T15143] do_syscall_64+0x166/0x520 [ 698.908383][T15143] ? trace_irq_disable+0x3b/0x140 [ 698.908412][T15143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.908434][T15143] ? clear_bhb_loop+0x70/0xc0 [ 698.908461][T15143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.908482][T15143] RIP: 0033:0x7eff3859e0d9 [ 698.908502][T15143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.908520][T15143] RSP: 002b:00007eff39381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 698.908549][T15143] RAX: ffffffffffffffda RBX: 00007eff38826090 RCX: 00007eff3859e0d9 [ 698.908565][T15143] RDX: 00000000fffffdef RSI: 0000200000000140 RDI: 0000000000000004 [ 698.908580][T15143] RBP: 00007eff38635024 R08: 0000000000000000 R09: 0000000000000000 [ 698.908593][T15143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.908606][T15143] R13: 00007eff38826128 R14: 00007eff38826090 R15: 00007fff00ca9c48 [ 698.908641][T15143] [ 698.933826][T15143] memory: usage 4kB, limit 4kB, failcnt 236 [ 698.933845][T15143] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 698.933860][T15143] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 698.933873][T15143] Memory cgroup stats for /syz1/syz2: [ 698.933998][T15143] cache 0 [ 698.934007][T15143] rss 0 [ 698.934014][T15143] rss_huge 0 [ 698.934022][T15143] shmem 0 [ 698.934030][T15143] mapped_file 0 [ 698.934044][T15143] dirty 0 [ 698.934052][T15143] writeback 0 [ 698.934060][T15143] workingset_refault_anon 0 [ 698.934068][T15143] workingset_refault_file 0 [ 698.934076][T15143] swap 0 [ 698.934084][T15143] swapcached 20480 [ 698.934091][T15143] pgpgin 2 [ 698.934099][T15143] pgpgout 1024 [ 698.936672][T15143] pgfault 450 [ 698.936683][T15143] pgmajfault 0 [ 698.936690][T15143] inactive_anon 0 [ 698.936698][T15143] active_anon 0 [ 698.936706][T15143] inactive_file 0 [ 698.936714][T15143] active_file 0 [ 698.936722][T15143] unevictable 0 [ 698.936730][T15143] hierarchical_memory_limit 4096 [ 698.936739][T15143] hierarchical_memsw_limit 9223372036854771712 [ 698.936748][T15143] total_cache 0 [ 698.936756][T15143] total_rss 0 [ 698.936763][T15143] total_rss_huge 0 [ 698.936771][T15143] total_shmem 0 [ 698.936778][T15143] total_mapped_file 0 [ 698.936786][T15143] total_dirty 0 [ 698.936794][T15143] total_writeback 0 [ 698.936802][T15143] total_workingset_refault_anon 0 [ 698.936810][T15143] total_workingset_refault_file 0 [ 698.940150][T15143] total_swap 0 [ 698.940161][T15143] total_swapcached 20480 [ 698.940169][T15143] total_pgpgin 2 [ 698.940177][T15143] total_pgpgout 1024 [ 698.940186][T15143] total_pgfault 450 [ 698.940194][T15143] total_pgmajfault 0 [ 698.940202][T15143] total_inactive_anon 0 [ 698.940210][T15143] total_active_anon 0 [ 698.940218][T15143] total_inactive_file 0 [ 698.940226][T15143] total_active_file 0 [ 698.940234][T15143] total_unevictable 0 [ 698.940241][T15143] anon_cost 0 [ 698.940249][T15143] file_cost 0 [ 698.940258][T15143] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1/syz2,task_memcg=/syz1/syz2,task=syz.1.3285,pid=15139,uid=0 [ 698.940422][T15143] Memory cgroup out of memory: Killed process 15139 (syz.1.3285) total-vm:102516kB, anon-rss:1436kB, file-rss:22804kB, shmem-rss:2048kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 699.113956][ T189] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 699.230346][ T5615] zl10353_read_register: readreg error (reg=127, ret==0) [ 699.230408][ T5615] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 699.230422][ T5615] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 699.254189][T15126] ------------[ cut here ]------------ [ 699.254202][T15126] usb 1-1: BOGUS control dir, pipe 80004f80 doesn't match bRequestType c0 [ 699.254227][T15126] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.0.3280/15126 [ 699.674471][T15126] Modules linked in: [ 699.678388][T15126] CPU: 0 UID: 0 PID: 15126 Comm: syz.0.3280 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.689381][T15126] Tainted: [L]=SOFTLOCKUP [ 699.693733][T15126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 699.704195][T15126] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 699.709839][T15126] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 699.729693][T15126] RSP: 0018:ffffc9000681f718 EFLAGS: 00010246 [ 699.736792][T15126] RAX: 0000000000000000 RBX: ffff8880356e2300 RCX: 0000000080004f80 [ 699.744821][T15126] RDX: ffff88807b6618c0 RSI: ffffffff8cc685a0 RDI: ffffffff90a95890 [ 699.752806][T15126] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 699.760843][T15126] R10: ffffc9000681f800 R11: fffff52000d03f0c R12: 1ffff11005475658 [ 699.768861][T15126] R13: ffff88802a3ab2c0 R14: ffff88807b6618c0 R15: 0000000080004f80 [ 699.776904][T15126] FS: 00007ffbb7b456c0(0000) GS:ffff88812488b000(0000) knlGS:0000000000000000 [ 699.786185][T15126] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.792896][T15126] CR2: 000055556d08e9f8 CR3: 000000007b982000 CR4: 00000000003526f0 [ 699.800936][T15126] Call Trace: [ 699.804343][T15126] [ 699.807296][T15126] usb_start_wait_urb+0x13f/0x5b0 [ 699.812383][T15126] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 699.818015][T15126] usb_control_msg+0x234/0x3e0 [ 699.822798][T15126] dtv5100_i2c_msg+0x231/0x2f0 [ 699.827762][T15126] dtv5100_i2c_xfer+0x1a5/0x610 [ 699.832637][T15126] __i2c_transfer+0x7bf/0x1fe0 [ 699.838067][T15126] ? rt_mutex_lock_nested+0x167/0x1c0 [ 699.843505][T15126] ? i2c_transfer+0xc7/0x2d0 [ 699.848165][T15126] i2c_transfer+0x1cb/0x2d0 [ 699.852683][T15126] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 699.858396][T15126] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 699.864600][T15126] ? _copy_from_user+0x94/0xb0 [ 699.869430][T15126] i2cdev_write+0x113/0x1e0 [ 699.874033][T15126] vfs_writev+0x4bb/0x990 [ 699.878372][T15126] ? __pfx_i2cdev_write+0x10/0x10 [ 699.883424][T15126] ? __pfx_vfs_writev+0x10/0x10 [ 699.888665][T15126] ? __fget_files+0x2a/0x420 [ 699.893283][T15126] ? __fget_files+0x3a2/0x420 [ 699.898105][T15126] ? __fget_files+0x2a/0x420 [ 699.902728][T15126] do_writev+0x154/0x2e0 [ 699.907038][T15126] ? __pfx_do_writev+0x10/0x10 [ 699.911822][T15126] do_syscall_64+0x166/0x520 [ 699.916495][T15126] ? trace_irq_disable+0x3b/0x140 [ 699.921539][T15126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.927676][T15126] ? clear_bhb_loop+0x70/0xc0 [ 699.932371][T15126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.938315][T15126] RIP: 0033:0x7ffbb6b9e0d9 [ 699.942742][T15126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.962433][T15126] RSP: 002b:00007ffbb7b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 699.970991][T15126] RAX: ffffffffffffffda RBX: 00007ffbb6e25fa0 RCX: 00007ffbb6b9e0d9 [ 699.979024][T15126] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 699.987031][T15126] RBP: 00007ffbb6c35024 R08: 0000000000000000 R09: 0000000000000000 [ 699.995050][T15126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.003030][T15126] R13: 00007ffbb6e26038 R14: 00007ffbb6e25fa0 R15: 00007ffcfa5df798 [ 700.011080][T15126] [ 700.014171][T15126] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 700.021460][T15126] CPU: 0 UID: 0 PID: 15126 Comm: syz.0.3280 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.032403][T15126] Tainted: [L]=SOFTLOCKUP [ 700.036729][T15126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 700.046787][T15126] Call Trace: [ 700.050074][T15126] [ 700.053012][T15126] vpanic+0x56d/0xa60 [ 700.057016][T15126] ? __pfx__printk+0x10/0x10 [ 700.061619][T15126] ? __pfx_vpanic+0x10/0x10 [ 700.066133][T15126] ? is_bpf_text_address+0x292/0x2b0 [ 700.071455][T15126] ? is_bpf_text_address+0x26/0x2b0 [ 700.076666][T15126] panic+0xc5/0xd0 [ 700.080393][T15126] ? __pfx_panic+0x10/0x10 [ 700.084828][T15126] __warn+0x315/0x4c0 [ 700.088818][T15126] ? usb_submit_urb+0x1057/0x18b0 [ 700.093852][T15126] ? usb_submit_urb+0x1057/0x18b0 [ 700.098884][T15126] __report_bug+0x276/0x570 [ 700.103480][T15126] ? usb_submit_urb+0x1057/0x18b0 [ 700.108514][T15126] ? __pfx___report_bug+0x10/0x10 [ 700.113544][T15126] ? stack_trace_save+0xa9/0x100 [ 700.118496][T15126] ? kasan_save_track+0x4f/0x80 [ 700.123355][T15126] report_bug_entry+0x19b/0x290 [ 700.128217][T15126] ? usb_submit_urb+0x1100/0x18b0 [ 700.133236][T15126] ? usb_submit_urb+0x1105/0x18b0 [ 700.138255][T15126] handle_bug+0xce/0x200 [ 700.142503][T15126] exc_invalid_op+0x1a/0x50 [ 700.147006][T15126] asm_exc_invalid_op+0x1a/0x20 [ 700.151852][T15126] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 700.157489][T15126] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 700.177092][T15126] RSP: 0018:ffffc9000681f718 EFLAGS: 00010246 [ 700.183158][T15126] RAX: 0000000000000000 RBX: ffff8880356e2300 RCX: 0000000080004f80 [ 700.191127][T15126] RDX: ffff88807b6618c0 RSI: ffffffff8cc685a0 RDI: ffffffff90a95890 [ 700.199098][T15126] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 700.207075][T15126] R10: ffffc9000681f800 R11: fffff52000d03f0c R12: 1ffff11005475658 [ 700.215044][T15126] R13: ffff88802a3ab2c0 R14: ffff88807b6618c0 R15: 0000000080004f80 [ 700.223027][T15126] ? usb_submit_urb+0x1091/0x18b0 [ 700.228058][T15126] usb_start_wait_urb+0x13f/0x5b0 [ 700.233091][T15126] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 700.238649][T15126] usb_control_msg+0x234/0x3e0 [ 700.243420][T15126] dtv5100_i2c_msg+0x231/0x2f0 [ 700.248199][T15126] dtv5100_i2c_xfer+0x1a5/0x610 [ 700.253055][T15126] __i2c_transfer+0x7bf/0x1fe0 [ 700.257836][T15126] ? rt_mutex_lock_nested+0x167/0x1c0 [ 700.263211][T15126] ? i2c_transfer+0xc7/0x2d0 [ 700.267809][T15126] i2c_transfer+0x1cb/0x2d0 [ 700.272311][T15126] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 700.277946][T15126] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 700.284109][T15126] ? _copy_from_user+0x94/0xb0 [ 700.288889][T15126] i2cdev_write+0x113/0x1e0 [ 700.293408][T15126] vfs_writev+0x4bb/0x990 [ 700.297749][T15126] ? __pfx_i2cdev_write+0x10/0x10 [ 700.302779][T15126] ? __pfx_vfs_writev+0x10/0x10 [ 700.307637][T15126] ? __fget_files+0x2a/0x420 [ 700.312242][T15126] ? __fget_files+0x3a2/0x420 [ 700.316924][T15126] ? __fget_files+0x2a/0x420 [ 700.321521][T15126] do_writev+0x154/0x2e0 [ 700.325769][T15126] ? __pfx_do_writev+0x10/0x10 [ 700.330544][T15126] do_syscall_64+0x166/0x520 [ 700.335129][T15126] ? trace_irq_disable+0x3b/0x140 [ 700.340161][T15126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.346229][T15126] ? clear_bhb_loop+0x70/0xc0 [ 700.350911][T15126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.356823][T15126] RIP: 0033:0x7ffbb6b9e0d9 [ 700.361235][T15126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.380835][T15126] RSP: 002b:00007ffbb7b45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 700.389255][T15126] RAX: ffffffffffffffda RBX: 00007ffbb6e25fa0 RCX: 00007ffbb6b9e0d9 [ 700.397224][T15126] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 700.405194][T15126] RBP: 00007ffbb6c35024 R08: 0000000000000000 R09: 0000000000000000 [ 700.413161][T15126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.421128][T15126] R13: 00007ffbb6e26038 R14: 00007ffbb6e25fa0 R15: 00007ffcfa5df798 [ 700.429112][T15126] [ 700.432426][T15126] Kernel Offset: disabled [ 700.436760][T15126] Rebooting in 86400 seconds..