last executing test programs: 10.112225469s ago: executing program 1 (id=632): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 7.951104743s ago: executing program 2 (id=645): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(r2, &(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @vbi={0xf, 0x11a, 0x1, 0x384c4150, [0x22e4, 0x400], [0x3, 0x2], 0x1}}) 7.306828839s ago: executing program 1 (id=646): syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000580)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000005c0)=0x5, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010) 6.968863707s ago: executing program 2 (id=649): openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0xae642, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x82102) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x20, &(0x7f0000000440)={0x0, 0x0, 0x40, 0x3, 0x1f4}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/net/rpc/use-gss-proxy\x00', 0x82, 0x184) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x4000000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 5.860153964s ago: executing program 0 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x60, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_b, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0xab0, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x60}}, 0x8800) 5.735987727s ago: executing program 0 (id=657): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='gid', &(0x7f0000000480)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\x00\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 4.564223816s ago: executing program 0 (id=659): io_setup(0x7fce16e3, &(0x7f0000000140)) 4.533342297s ago: executing program 0 (id=661): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(r2, &(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @vbi={0xf, 0x11a, 0x1, 0x384c4150, [0x22e4, 0x400], [0x3, 0x2], 0x1}}) 4.243373534s ago: executing program 1 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032cbd7000fedbdf250000000014000200776731"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 4.209622905s ago: executing program 3 (id=663): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000680)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000700)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000780)="919d", 0x2}], 0x1}, 0x0) 4.088206419s ago: executing program 1 (id=664): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000017"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4", 0x3, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.088042048s ago: executing program 3 (id=665): r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000800)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x2}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x100) 4.068639569s ago: executing program 3 (id=666): r0 = syz_usb_connect(0x0, 0x47, &(0x7f00000024c0)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502"], 0x0) syz_usb_ep_write(r0, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.902445443s ago: executing program 2 (id=667): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x76, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2018d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.736094207s ago: executing program 2 (id=668): syz_emit_ethernet(0x4a, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_create_resource$binfmt(&(0x7f00000009c0)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000a80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000c00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c40)=0x6) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@ipv4_newrule={0x40, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) 3.568296711s ago: executing program 0 (id=669): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='gid', &(0x7f0000000480)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\x00\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 3.311088407s ago: executing program 4 (id=670): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000340)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6}]}, 0x10) 2.440309059s ago: executing program 4 (id=671): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) write$nbd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000"], 0x40) 2.42242158s ago: executing program 0 (id=672): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) 2.375272701s ago: executing program 4 (id=673): chdir(0x0) setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x0, 0x2d8, 0xb8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x5, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'wg1\x00', 'syzkaller0\x00'}, 0x74000002, 0x70, 0xb8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x287, 0xf0, 0x150, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xc}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="e00242ca8f60"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 2.190244615s ago: executing program 1 (id=674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 2.110608127s ago: executing program 1 (id=675): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.354407846s ago: executing program 4 (id=676): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 1.221328059s ago: executing program 3 (id=677): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x89, 0x3a, 'errors=remount-ro', 0x3a, '\xc7b~U\x19[R+\xf0\xb1n\xe9\xef\x00\x80\x94:\x9f\x03\xbe\xd88ov\x84\v|&T\x928\xba\x17\xf1k\x0f|L\x18%\xc7\x9a?\x9f0\xd0\xac\xdc-\x9cX\xc7\xcbY\xc3oK', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x165) 1.19737231s ago: executing program 4 (id=678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x300000b, 0x11, r2, 0x0) 1.155560461s ago: executing program 3 (id=679): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(r2, &(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @vbi={0xf, 0x11a, 0x1, 0x384c4150, [0x22e4, 0x400], [0x3, 0x2], 0x1}}) 1.080191623s ago: executing program 2 (id=680): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300000000000085000000cc000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x3, &(0x7f0000000080)=0x3, 0x40) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000740)={0x0, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000800)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000008c0)={r2, 0x6}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000140)=0x2000008, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1) recvfrom(r5, 0x0, 0x0, 0x4100, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) io_uring_setup(0x5509, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000040)='cgroup\x00', 0x201000, 0x0, 0x7, 0x0, 0x0}) 883.432478ms ago: executing program 4 (id=681): syz_usb_connect(0x0, 0x34, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a000905000000000000000705", @ANYRES64], 0x0) 194.536284ms ago: executing program 3 (id=682): syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='gid', &(0x7f0000000480)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\x00\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000000000)="0d9ccf1cb8d871123f1c06000000000000009a42ffffff7f0000000057a02c6bb4a8afdd55b057d1b81536fbdd13d4", 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sec\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sec/apparmor/.access\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)="2bcb5bfa655902afa497", 0xa) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xe8381, 0x0) write(0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x9, 0xc9}}}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/mtrr\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl(r3, 0x400c4d05, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x400caed0, &(0x7f0000000080)={0x1, 0xff030000, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x2, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0xe, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) r6 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x0) ioctl$EVIOCRMFF(r6, 0x5501, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000600)={'wpan1\x00'}) read(r5, &(0x7f00000091c0)=""/16384, 0x4000) kernel console output (not intermixed with test programs): 68.568597][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.579402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.587391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.595762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.608501][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.625116][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.633519][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 68.635860][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 68.648247][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.657227][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 68.664238][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.671326][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.712124][ T4187] Bluetooth: hci4: command 0x041b tx timeout [ 68.718283][ T4187] Bluetooth: hci3: command 0x041b tx timeout [ 68.725789][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.759099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.798608][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.810599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.826556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.838662][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.849976][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.865107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.879403][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.898479][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.919217][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.940163][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.948863][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.958617][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.967532][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.976607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.985672][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.995655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.007463][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.016604][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.025270][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.032494][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.045533][ T4185] device veth0_vlan entered promiscuous mode [ 69.058077][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.078904][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.087689][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.096991][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.107745][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.117527][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.126921][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.136519][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.147087][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.154215][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.163948][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.173116][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.180975][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.220989][ T4185] device veth1_vlan entered promiscuous mode [ 69.248047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.259871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.278054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.290845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.300221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.310795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.319717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.328764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.337889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.347055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.361135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.371386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.380389][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.395081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.404753][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.456375][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.479890][ T4195] device veth0_vlan entered promiscuous mode [ 69.504783][ T4186] device veth0_vlan entered promiscuous mode [ 69.511978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.520401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.537983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.550260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.559100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.568463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.577876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.587173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.595797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.604387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.613373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.630871][ T4195] device veth1_vlan entered promiscuous mode [ 69.654247][ T4185] device veth0_macvtap entered promiscuous mode [ 69.681269][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.701980][ T4185] device veth1_macvtap entered promiscuous mode [ 69.716273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.725989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.734738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.743956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.753011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.760516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.782059][ T4186] device veth1_vlan entered promiscuous mode [ 69.817923][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.847759][ T4195] device veth0_macvtap entered promiscuous mode [ 69.857065][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.872543][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.888082][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.898408][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.907995][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.918073][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.927367][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.937850][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.955057][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.969519][ T4186] device veth0_macvtap entered promiscuous mode [ 69.979588][ T4195] device veth1_macvtap entered promiscuous mode [ 69.988715][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.999461][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.008422][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.017558][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.027337][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.036276][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.047079][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.065247][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.075697][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.085013][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.094300][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.125119][ T4186] device veth1_macvtap entered promiscuous mode [ 70.138050][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.148530][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.168392][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.179294][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.192237][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.204994][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.215874][ T4193] device veth0_vlan entered promiscuous mode [ 70.224660][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.234480][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.243427][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.250924][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.259082][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.268256][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.299382][ T4193] device veth1_vlan entered promiscuous mode [ 70.308866][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.320687][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.333637][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.360128][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.369513][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.381220][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.390967][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.425354][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.434639][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.443127][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.452866][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.465128][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.476935][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.488701][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.499707][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.512913][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.542013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.550885][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.564407][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.575783][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.592047][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.602838][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.614595][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.625562][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.638673][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.671436][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.685992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.695388][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.705785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.713559][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 70.718509][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.722538][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 70.730645][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.744258][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 70.744735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.758933][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.770389][ T4193] device veth0_macvtap entered promiscuous mode [ 70.782305][ T4193] device veth1_macvtap entered promiscuous mode [ 70.792508][ T4187] Bluetooth: hci3: command 0x040f tx timeout [ 70.798741][ T4187] Bluetooth: hci4: command 0x040f tx timeout [ 70.810818][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.820112][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.829212][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.838089][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.874851][ T4197] device veth0_vlan entered promiscuous mode [ 70.891168][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.907869][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.957989][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.968378][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.978899][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.994013][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.005327][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.015518][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.026340][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.037214][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.048459][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.060257][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.085379][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.096012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.107906][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.121352][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.131317][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.142660][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.152563][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.163569][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.175426][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.201970][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.202543][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.209837][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.228058][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.239763][ T4197] device veth1_vlan entered promiscuous mode [ 71.249353][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.262814][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.275287][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.282016][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.288486][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.297533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.312584][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.321326][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.331136][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.340606][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.382661][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.390574][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.419008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.484130][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.493034][ T4242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.500936][ T4242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.519504][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.544557][ T4197] device veth0_macvtap entered promiscuous mode [ 71.558204][ T4197] device veth1_macvtap entered promiscuous mode [ 71.570442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.582920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.591202][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.648659][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.665274][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.676382][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.687349][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.697565][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.709352][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.720224][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.732338][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.745117][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.762497][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.778359][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.793329][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.806241][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.808137][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.828124][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.857577][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.873600][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.890611][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.901925][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.922993][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.940015][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.952624][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.977540][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.996811][ T4268] FAULT_INJECTION: forcing a failure. [ 71.996811][ T4268] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 72.029150][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.038375][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.054746][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.067077][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.083333][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.102891][ T4268] CPU: 1 PID: 4268 Comm: syz.1.6 Not tainted syzkaller #0 [ 72.110065][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 72.120172][ T4268] Call Trace: [ 72.123488][ T4268] [ 72.126451][ T4268] dump_stack_lvl+0x188/0x250 [ 72.131185][ T4268] ? show_regs_print_info+0x20/0x20 [ 72.136425][ T4268] ? load_image+0x410/0x410 [ 72.140982][ T4268] should_fail+0x383/0x4b0 [ 72.145447][ T4268] prepare_alloc_pages+0x1e3/0x5b0 [ 72.150603][ T4268] __alloc_pages+0x11b/0x480 [ 72.155237][ T4268] ? zone_statistics+0x170/0x170 [ 72.160221][ T4268] ? alloc_pages+0x452/0x560 [ 72.164857][ T4268] system_heap_allocate+0x30c/0xf40 [ 72.170112][ T4268] ? system_heap_create+0x100/0x100 [ 72.175386][ T4268] dma_heap_ioctl+0x486/0x590 [ 72.180116][ T4268] ? dma_heap_init+0xb0/0xb0 [ 72.184762][ T4268] ? bpf_lsm_file_ioctl+0x5/0x10 [ 72.189734][ T4268] ? security_file_ioctl+0x7c/0xa0 [ 72.194883][ T4268] ? dma_heap_init+0xb0/0xb0 [ 72.199511][ T4268] __se_sys_ioctl+0xfa/0x170 [ 72.204133][ T4268] do_syscall_64+0x4c/0xa0 [ 72.208611][ T4268] ? clear_bhb_loop+0x30/0x80 [ 72.213409][ T4268] ? clear_bhb_loop+0x30/0x80 [ 72.218173][ T4268] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.224112][ T4268] RIP: 0033:0x7f376284c2d9 [ 72.228657][ T4268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.248303][ T4268] RSP: 002b:00007f3760aa4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.256758][ T4268] RAX: ffffffffffffffda RBX: 00007f3762ad3fa0 RCX: 00007f376284c2d9 [ 72.264804][ T4268] RDX: 0000200000000640 RSI: 000000004008af00 RDI: 0000000000000004 [ 72.265035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.272806][ T4268] RBP: 00007f37628e3888 R08: 0000000000000000 R09: 0000000000000000 [ 72.272822][ T4268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.272835][ T4268] R13: 00007f3762ad4038 R14: 00007f3762ad3fa0 R15: 00007ffefe44b698 [ 72.272866][ T4268] [ 72.310686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.327407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.360612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.124492][ T1110] Bluetooth: hci0: command 0x0419 tx timeout [ 73.137001][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 73.166790][ T1110] Bluetooth: hci2: command 0x0419 tx timeout [ 73.185450][ T1110] Bluetooth: hci4: command 0x0419 tx timeout [ 73.207941][ T1110] Bluetooth: hci3: command 0x0419 tx timeout [ 73.315998][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.326871][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.361871][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.431288][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.471016][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.486995][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.503488][ T4281] device bridge_slave_0 left promiscuous mode [ 73.511783][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.541395][ T4281] device bridge_slave_1 left promiscuous mode [ 73.557987][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.591179][ T4281] bond0: (slave bond_slave_0): Releasing backup interface [ 73.648349][ T4281] bond0: (slave bond_slave_1): Releasing backup interface [ 73.771150][ T4281] team0: Port device team_slave_0 removed [ 73.803567][ T4281] team0: Port device team_slave_1 removed [ 73.817921][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.825879][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.837725][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.846016][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.879228][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.913472][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.937156][ T4279] netlink: 'syz.4.5': attribute type 39 has an invalid length. [ 74.032901][ T4283] device vlan0 entered promiscuous mode [ 74.081314][ T4283] team0: Port device vlan0 added [ 74.100494][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.132227][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.160412][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.180078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.374443][ T4297] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 74.433542][ T4300] netlink: 104 bytes leftover after parsing attributes in process `syz.4.15'. [ 74.543348][ T4309] netlink: 830 bytes leftover after parsing attributes in process `syz.2.16'. [ 75.663657][ T4331] loop0: detected capacity change from 0 to 512 [ 75.779649][ T4331] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,sysvgroups,usrquota,. Quota mode: writeback. [ 75.805096][ T4331] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.845013][ T4344] loop2: detected capacity change from 0 to 1024 [ 75.879526][ T4331] EXT4-fs warning (device loop0): ext4_group_extend:1823: can't shrink FS - resize aborted [ 75.895448][ T4344] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 75.906347][ T4344] EXT4-fs (loop2): inline encryption not supported [ 75.916126][ T4344] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 75.974335][ T4344] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,auto_da_alloc,noblock_validity,nomblk_io_submit,inlinecrypt,quota,nomblk_io_submit,grpjquota=,nolazytime,,errors=continue. Quota mode: writeback. [ 75.995780][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.008811][ T4344] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.136365][ T4344] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.27: lblock 0 mapped to illegal pblock 0 (length 1) [ 76.162585][ T4344] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 76.183245][ T4344] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.183245][ T4344] [ 77.351271][ T4356] infiniband syz1: set active [ 77.367504][ T4356] infiniband syz1: added bond_slave_1 [ 77.675938][ T4357] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.27: bg 0: block 112: padding at end of block bitmap is not set [ 77.693675][ T4357] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 77.881605][ C0] sched: RT throttling activated [ 78.883111][ T26] audit: type=1326 audit(1791910486.296:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.4.33" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 78.919584][ T4357] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.919584][ T4357] [ 78.985967][ T26] audit: type=1326 audit(1791910486.296:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.4.33" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 79.018999][ T4356] RDS/IB: syz1: added [ 79.035471][ T26] audit: type=1326 audit(1791910486.306:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm="syz.4.33" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 79.071169][ T4356] smc: adding ib device syz1 with port count 1 [ 79.083988][ T4356] smc: ib device syz1 port 1 has pnetid [ 79.155249][ T4357] EXT4-fs (loop2): Total free blocks count 0 [ 79.161381][ T4357] EXT4-fs (loop2): Free/Dirty block details [ 79.173033][ T4357] EXT4-fs (loop2): free_blocks=0 [ 79.178192][ T4357] EXT4-fs (loop2): dirty_blocks=64 [ 79.183863][ T4357] EXT4-fs (loop2): Block reservation details [ 79.189967][ T4357] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 79.306602][ T26] audit: type=1326 audit(1791910486.306:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm=FF exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 79.451830][ T26] audit: type=1326 audit(1791910486.306:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm=FF exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 79.565294][ T26] audit: type=1326 audit(1791910486.306:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm=FF exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 79.617071][ T26] audit: type=1326 audit(1791910486.306:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm=FF exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 79.644367][ T26] audit: type=1326 audit(1791910486.306:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4359 comm=FF exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 79.688564][ T26] audit: type=1326 audit(1791910486.306:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm=FF exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd54d8e3b0e code=0x7ffc0000 [ 79.738714][ T4379] loop0: detected capacity change from 0 to 256 [ 79.741886][ T26] audit: type=1326 audit(1791910486.486:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4366 comm=FF exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 80.002734][ T4386] netlink: 'syz.1.38': attribute type 29 has an invalid length. [ 80.224084][ T4386] netlink: 'syz.1.38': attribute type 29 has an invalid length. [ 80.277083][ T4391] netlink: 'syz.1.38': attribute type 29 has an invalid length. [ 80.629220][ T4388] sctp: failed to load transform for md5: -2 [ 82.805687][ T4427] netlink: 'syz.4.49': attribute type 46 has an invalid length. [ 82.843855][ T4425] syz.2.48 (4425) used obsolete PPPIOCDETACH ioctl [ 83.063497][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.839492][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.983269][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.047240][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.406289][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.422840][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.439120][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.450267][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.592474][ T4441] syz.3.55 (4441) used greatest stack depth: 19792 bytes left [ 84.659639][ T4461] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.841893][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.824534][ T4482] netlink: 'syz.2.68': attribute type 10 has an invalid length. [ 85.851912][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.872083][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 85.924372][ T4487] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.999559][ T13] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 86.091723][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 86.177096][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 86.189683][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 86.200693][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 86.212023][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 86.222309][ T4500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 86.974533][ T7] cfg80211: failed to load regulatory.db [ 86.997983][ T26] audit: type=1400 audit(1791910494.786:12): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=4507 comm="syz.2.75" [ 87.031982][ T4229] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 87.051853][ T13] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 87.061045][ T4229] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 87.075331][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.084126][ T4229] usb 4-1: config 0 has no interface number 0 [ 87.090268][ T4229] usb 4-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 87.101067][ T13] usb 2-1: Product: syz [ 87.110537][ T13] usb 2-1: Manufacturer: syz [ 87.135680][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.145786][ T13] usb 2-1: config 0 descriptor?? [ 87.161729][ T4367] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.177119][ T13] usb 2-1: can't set config #0, error -71 [ 87.192047][ T4229] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 87.207719][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 87.398799][ T13] usb 2-1: USB disconnect, device number 2 [ 87.404878][ T4229] usb 4-1: Product: syz [ 87.415806][ T4229] usb 4-1: config 0 descriptor?? [ 87.432767][ T4465] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 87.517328][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 87.592432][ T4367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.682250][ T4367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.956167][ T4367] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 88.031775][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.039710][ T4367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.076476][ T4367] usb 1-1: config 0 descriptor?? [ 88.125691][ T4231] usb 4-1: USB disconnect, device number 2 [ 88.497346][ T4543] loop3: detected capacity change from 0 to 256 [ 88.580581][ T4367] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 88.598807][ T4367] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 88.617126][ T4367] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 88.635343][ T4367] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 88.643470][ T23] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 88.658935][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.668544][ T4367] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 88.688671][ T23] usb 3-1: Product: syz [ 88.697444][ T23] usb 3-1: Manufacturer: syz [ 88.704625][ T4367] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 88.721734][ T23] usb 3-1: SerialNumber: syz [ 88.852366][ T4367] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 9: -71 [ 88.869752][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 88.879897][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 88.890639][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 88.901737][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 89.034116][ T4367] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -71 [ 89.072215][ T4367] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 89.265017][ T4367] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 89.352195][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 89.548612][ T4367] playstation: probe of 0003:054C:0DF2.0001 failed with error -71 [ 89.571731][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 89.635473][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 89.651487][ T4367] usb 1-1: USB disconnect, device number 2 [ 89.670613][ T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 89.683877][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88806233b000: rx timeout, send abort [ 89.705546][ T23] lan78xx: probe of 3-1:1.0 failed with error -71 [ 89.739362][ T23] usb 3-1: USB disconnect, device number 2 [ 89.830680][ T4561] fido_id[4561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 90.193301][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88806233b000: abort rx timeout. Force session deactivation [ 91.142198][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.231987][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.291676][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 92.364869][ T4601] FAULT_INJECTION: forcing a failure. [ 92.364869][ T4601] name failslab, interval 1, probability 0, space 0, times 1 [ 92.411689][ T4601] CPU: 1 PID: 4601 Comm: syz.2.102 Not tainted syzkaller #0 [ 92.419149][ T4601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.429292][ T4601] Call Trace: [ 92.432610][ T4601] [ 92.435582][ T4601] dump_stack_lvl+0x188/0x250 [ 92.440321][ T4601] ? show_regs_print_info+0x20/0x20 [ 92.445567][ T4601] ? load_image+0x410/0x410 [ 92.446996][ T4603] Disabled LAPIC found during irq injection [ 92.450110][ T4601] ? __lock_acquire+0x7d40/0x7d40 [ 92.450177][ T4601] should_fail+0x383/0x4b0 [ 92.450208][ T4601] should_failslab+0x5/0x20 [ 92.470270][ T4601] slab_pre_alloc_hook+0x51/0xc0 [ 92.475254][ T4601] ? can_rx_register+0x169/0x790 [ 92.480235][ T4601] kmem_cache_alloc+0x3d/0x280 [ 92.485046][ T4601] can_rx_register+0x169/0x790 [ 92.489851][ T4601] ? j1939_send_one+0x3d0/0x3d0 [ 92.494883][ T4601] j1939_netdev_start+0x722/0xac0 [ 92.499969][ T4601] j1939_sk_bind+0x91b/0xc30 [ 92.504602][ T4601] __sys_bind+0x2e9/0x3e0 [ 92.508976][ T4601] ? __ia32_sys_socketpair+0xb0/0xb0 [ 92.514327][ T4601] __x64_sys_bind+0x76/0x80 [ 92.518876][ T4601] do_syscall_64+0x4c/0xa0 [ 92.523339][ T4601] ? clear_bhb_loop+0x30/0x80 [ 92.528054][ T4601] ? clear_bhb_loop+0x30/0x80 [ 92.532777][ T4601] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.538693][ T4601] RIP: 0033:0x7f147a3f22d9 [ 92.543138][ T4601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.562778][ T4601] RSP: 002b:00007f147864a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 92.571220][ T4601] RAX: ffffffffffffffda RBX: 00007f147a679fa0 RCX: 00007f147a3f22d9 [ 92.579213][ T4601] RDX: 0000000000000018 RSI: 0000200000000340 RDI: 0000000000000007 [ 92.587600][ T4601] RBP: 00007f147a489888 R08: 0000000000000000 R09: 0000000000000000 [ 92.595591][ T4601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.603579][ T4601] R13: 00007f147a67a038 R14: 00007f147a679fa0 R15: 00007ffd79a5b3d8 [ 92.611683][ T4601] [ 92.619654][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.640264][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.661777][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 92.671497][ T21] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 92.691687][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 92.711699][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.831825][ T23] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 92.840206][ T21] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 92.872507][ T21] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 92.880744][ T21] usb 1-1: Manufacturer: syz [ 92.913710][ T21] usb 1-1: config 0 descriptor?? [ 93.054902][ T23] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 93.084472][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.114892][ T23] usb 4-1: Product: syz [ 93.119132][ T23] usb 4-1: Manufacturer: syz [ 93.156518][ T23] usb 4-1: SerialNumber: syz [ 93.182596][ T23] usb 4-1: config 0 descriptor?? [ 93.455431][ T23] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 93.648744][ T23] dvb-usb: bulk message failed: -22 (2/0) [ 93.818272][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.902164][ T23] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 93.921809][ T21] rc_core: IR keymap rc-hauppauge not found [ 93.928997][ T21] Registered IR keymap rc-empty [ 93.940793][ T23] usb 4-1: media controller created [ 93.972093][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 94.034234][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 94.043079][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 94.145074][ T4621] __nla_validate_parse: 1 callbacks suppressed [ 94.145092][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 94.161123][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 94.170259][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 94.179391][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 94.188441][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 94.556188][ T21] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 94.577271][ T23] usb 4-1: selecting invalid altsetting 7 [ 94.585287][ T21] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 94.598883][ T23] cxusb: set interface failed [ 94.604648][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 94.768431][ T23] DVB: Unable to find symbol lgdt330x_attach() [ 94.785124][ T23] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 94.848369][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 95.821910][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 95.913814][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 96.127634][ T4231] Bluetooth: hci4: command 0x0409 tx timeout [ 96.151847][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 96.197607][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 96.250928][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 96.312222][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 96.354910][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 96.421905][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 96.429243][ T23] rc_core: IR keymap rc-dvico-portable not found [ 96.449509][ T23] Registered IR keymap rc-empty [ 96.498393][ T21] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 96.513501][ T23] rc rc1: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1 [ 96.582198][ T23] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc1/input6 [ 96.596326][ T21] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 96.621881][ T21] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 96.641921][ T21] usb 1-1: USB disconnect, device number 3 [ 96.655346][ T23] dvb-usb: schedule remote query interval to 100 msecs. [ 96.667023][ T23] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 96.716591][ T23] usb 4-1: USB disconnect, device number 3 [ 96.856991][ T23] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 96.872726][ T4655] svc: failed to register nfsdv3 RPC service (errno 111). [ 96.914254][ T4655] svc: failed to register nfsaclv3 RPC service (errno 111). [ 97.020163][ T4668] loop3: detected capacity change from 0 to 256 [ 97.292230][ T4680] cgroup: No subsys list or none specified [ 97.302975][ T4684] process 'syz.2.129' launched './file0' with NULL argv: empty string added [ 97.311812][ T4229] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.328620][ T4686] loop1: detected capacity change from 0 to 256 [ 97.374923][ T4651] mmap: syz.4.119 (4651) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 97.691760][ T4229] usb 1-1: Using ep0 maxpacket: 8 [ 97.832091][ T4229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.911993][ T4229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.968495][ T4229] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 98.181925][ T4229] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 98.808381][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.816865][ T4229] usb 1-1: Product: syz [ 98.821069][ T4229] usb 1-1: Manufacturer: syz [ 98.826084][ T4229] usb 1-1: SerialNumber: syz [ 98.847692][ T4703] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 98.863576][ T4703] comedi comedi1: 8255: I/O port conflict (0xffffffffffffffff,4) [ 98.871464][ T4703] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 98.878843][ T4703] comedi comedi1: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 98.889943][ T4229] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 98.897929][ T4229] usbtest 1-1:1.0: Linux user mode ISO test driver [ 98.906111][ T4703] comedi comedi1: 8255: I/O port conflict (0x20000004,4) [ 98.919259][ T4229] usbtest 1-1:1.0: high-speed {control iso-in} tests (+alt) [ 98.931419][ T4703] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 98.938309][ T4703] comedi comedi1: 8255: I/O port conflict (0xffe,4) [ 98.946709][ T4703] comedi comedi1: 8255: I/O port conflict (0x7fffffff,4) [ 98.954157][ T4703] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 98.960739][ T4703] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 98.967755][ T4703] comedi comedi1: 8255: I/O port conflict (0xffffffffffffffff,4) [ 98.986641][ T4703] comedi comedi1: 8255: I/O port conflict (0x7,4) [ 99.108587][ T4229] usb 1-1: USB disconnect, device number 4 [ 100.581699][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.675602][ T4748] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 100.834131][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 100.945440][ T4769] netlink: 'syz.0.161': attribute type 10 has an invalid length. [ 100.962683][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.979331][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 101.005801][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 101.026460][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 101.063198][ T13] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 101.089809][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.852411][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.934788][ T4769] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 101.969241][ T4770] netlink: 14 bytes leftover after parsing attributes in process `syz.0.161'. [ 101.980680][ T13] hub 5-1:1.0: bad descriptor, ignoring hub [ 101.997044][ T13] hub: probe of 5-1:1.0 failed with error -5 [ 102.008116][ T13] cdc_wdm 5-1:1.0: skipping garbage [ 102.021974][ T13] cdc_wdm 5-1:1.0: skipping garbage [ 102.046134][ T13] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 102.060409][ T13] cdc_wdm 5-1:1.0: Unknown control protocol [ 102.080457][ T4770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.130661][ T4770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.139773][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 102.299960][ T4770] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 102.309176][ T13] usb 5-1: USB disconnect, device number 2 [ 102.333798][ T4770] bond0 (unregistering): Released all slaves [ 102.412432][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.642903][ T23] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 102.752832][ T23] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 103.104419][ T23] usb 3-1: Product: syz [ 103.108765][ T23] usb 3-1: Manufacturer: syz [ 103.165338][ T23] usb 3-1: SerialNumber: syz [ 103.234746][ T23] usb 3-1: config 0 descriptor?? [ 103.254303][ T4798] netlink: 'syz.1.170': attribute type 4 has an invalid length. [ 103.273126][ T23] hub 3-1:0.0: bad descriptor, ignoring hub [ 103.291777][ T23] hub: probe of 3-1:0.0 failed with error -5 [ 103.607531][ T23] usb 3-1: USB disconnect, device number 3 [ 106.337559][ T4873] syz.3.191 uses obsolete (PF_INET,SOCK_PACKET) [ 107.675642][ T4885] loop2: detected capacity change from 0 to 256 [ 107.944632][ T4887] overlayfs: missing 'lowerdir' [ 108.672425][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.981922][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 109.133095][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.469922][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 109.691816][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 109.702362][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 110.522528][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.534037][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 110.678574][ T23] usb 1-1: SerialNumber: syz [ 110.722138][ T4907] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.749810][ T4907] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.777007][ T23] hub 1-1:1.0: bad descriptor, ignoring hub [ 110.788259][ T23] hub: probe of 1-1:1.0 failed with error -5 [ 110.991630][ T4277] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.002799][ T4907] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.040025][ T4907] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 111.264703][ T13] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 111.347652][ T23] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 111.793104][ T23] usb 1-1: USB disconnect, device number 5 [ 111.917622][ T26] audit: type=1326 audit(1791910519.706:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.4.213" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 112.006491][ T26] audit: type=1326 audit(1791910519.756:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.4.213" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 112.031969][ T26] audit: type=1326 audit(1791910519.756:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.4.213" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 112.057022][ T26] audit: type=1326 audit(1791910519.756:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.4.213" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 112.138059][ T4970] ./dev/sda1: Can't open blockdev [ 112.151192][ T26] audit: type=1326 audit(1791910519.756:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.4.213" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 112.175542][ T4277] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.196013][ T4277] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 112.220876][ T4277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.232642][ T13] usb 4-1: config 8 has an invalid interface number: 186 but max is 0 [ 112.246004][ T13] usb 4-1: config 8 has no interface number 0 [ 112.270968][ T26] audit: type=1326 audit(1791910519.756:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.4.213" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 112.296338][ T13] usb 4-1: config 8 interface 186 has no altsetting 0 [ 112.304411][ T4277] usb 3-1: config 0 descriptor?? [ 112.328412][ T4976] loop1: detected capacity change from 0 to 256 [ 112.330232][ T26] audit: type=1326 audit(1791910519.756:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.4.213" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 112.390118][ T26] audit: type=1326 audit(1791910519.756:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.4.213" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 112.431940][ T26] audit: type=1326 audit(1791910519.756:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.4.213" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 112.512083][ T13] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=d7.cd [ 112.573032][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.584199][ T13] usb 4-1: Product: syz [ 112.588710][ T13] usb 4-1: Manufacturer: syz [ 112.596331][ T13] usb 4-1: SerialNumber: syz [ 112.772090][ T4277] ath6kl: Failed to submit usb control message: -71 [ 112.783965][ T4277] ath6kl: unable to send the bmi data to the device: -71 [ 113.229417][ T26] audit: type=1326 audit(1791910519.756:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.4.213" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54d9232d9 code=0x7ffc0000 [ 113.232300][ T13] usb 4-1: can't set config #8, error -71 [ 113.253494][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.267766][ T4277] ath6kl: Unable to send get target info: -71 [ 113.343565][ T13] usb 4-1: USB disconnect, device number 4 [ 113.371670][ T23] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 113.401722][ T4277] ath6kl: Failed to init ath6kl core: -71 [ 113.450361][ T4277] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 113.480167][ T4277] usb 3-1: USB disconnect, device number 4 [ 114.052607][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.172278][ T23] usb 1-1: config 142 has an invalid interface number: 251 but max is 0 [ 114.200570][ T23] usb 1-1: config 142 has no interface number 0 [ 114.391834][ T23] usb 1-1: config 142 interface 251 altsetting 11 has an invalid endpoint with address 0x9F, skipping [ 114.621622][ T23] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 114.657403][ T23] usb 1-1: config 142 interface 251 has no altsetting 0 [ 114.698214][ T5002] netlink: 'syz.3.226': attribute type 9 has an invalid length. [ 115.070162][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.412547][ T5012] loop2: detected capacity change from 0 to 256 [ 115.432185][ T23] usb 1-1: string descriptor 0 read error: -71 [ 115.458021][ T23] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 115.559909][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.971955][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 115.995999][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.101866][ T23] usb 1-1: can't set config #142, error -71 [ 116.133689][ T23] usb 1-1: USB disconnect, device number 6 [ 116.393908][ T13] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 116.501699][ T4199] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.640193][ T4199] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.659461][ T4199] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 117.792234][ T5052] loop3: detected capacity change from 0 to 256 [ 118.739670][ T4199] usb 2-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 118.861693][ T4199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.887383][ T4199] usb 2-1: Product: syz [ 118.896310][ T4199] usb 2-1: Manufacturer: syz [ 118.901060][ T4199] usb 2-1: SerialNumber: syz [ 119.049917][ T5060] db_root: cannot be changed: target drivers registered [ 119.579585][ T4199] kaweth 2-1:1.0: Firmware present in device. [ 119.641764][ T4199] kaweth 2-1:1.0: Error reading configuration (-71), no net device created [ 119.660243][ T4199] kaweth: probe of 2-1:1.0 failed with error -5 [ 119.672128][ T4277] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.709567][ T4199] usb 2-1: USB disconnect, device number 3 [ 119.899365][ T5076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 119.998256][ T5080] tmpfs: Unknown parameter 'grpquota' [ 120.081932][ T4277] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.099471][ T4277] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.116826][ T4277] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 1.00 [ 120.126544][ T4277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.310547][ T4199] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 121.182411][ T4277] usbtouchscreen: probe of 3-1:1.0 failed with error -71 [ 121.212977][ T4277] usb 3-1: USB disconnect, device number 5 [ 122.472214][ T4199] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 122.487150][ T4199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.496886][ T5106] loop0: detected capacity change from 0 to 256 [ 122.511452][ T4199] usb 4-1: config 0 descriptor?? [ 122.555201][ T4199] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 122.622456][ T4237] usb 5-1: USB disconnect, device number 3 [ 122.691922][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.011517][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 123.152373][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.229870][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.337041][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.430374][ T4199] gp8psk: usb in 128 operation failed. [ 123.552486][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.562152][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.574254][ T23] usb 3-1: config 0 descriptor?? [ 123.731754][ T4199] gp8psk: usb in 146 operation failed. [ 123.737544][ T4199] gp8psk: failed to get FW version [ 123.771920][ T4199] gp8psk: usb in 149 operation failed. [ 123.780820][ T4199] gp8psk: failed to get FPGA version [ 123.811873][ T4277] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 123.821820][ T4199] gp8psk: usb in 138 operation failed. [ 123.832841][ T4199] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 123.870300][ T4199] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 123.919088][ T4199] usb 4-1: USB disconnect, device number 5 [ 124.201846][ T4277] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 124.221726][ T4277] usb 1-1: config 0 has no interface number 0 [ 124.227986][ T4277] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x9F, skipping [ 124.294306][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 124.303217][ T23] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 124.328946][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input9 [ 124.403671][ T4277] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 124.422725][ T4277] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 124.438615][ T23] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 124.457552][ T4277] usb 1-1: Product: syz [ 124.466716][ T4277] usb 1-1: SerialNumber: syz [ 124.488955][ T4277] usb 1-1: config 0 descriptor?? [ 124.502300][ T23] Bluetooth: hci4: command 0x0411 tx timeout [ 124.511387][ T5123] loop4: detected capacity change from 0 to 256 [ 124.531856][ T23] usb 3-1: USB disconnect, device number 6 [ 124.603585][ T4277] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 124.802388][ T4277] usb 1-1: USB disconnect, device number 7 [ 125.886886][ T5125] fido_id[5125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 125.956261][ T5144] loop3: detected capacity change from 0 to 256 [ 127.064239][ T5166] loop0: detected capacity change from 0 to 256 [ 128.254297][ T4277] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.380332][ T5195] loop0: detected capacity change from 0 to 256 [ 129.481692][ T4229] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.491903][ T4277] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 129.501291][ T4277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.522218][ T4277] usb 5-1: config 0 descriptor?? [ 130.336333][ T4277] usb 5-1: can't set config #0, error -71 [ 130.352679][ T4277] usb 5-1: USB disconnect, device number 4 [ 130.690506][ T5218] loop1: detected capacity change from 0 to 256 [ 131.972524][ T4229] usb 3-1: unable to read config index 0 descriptor/all [ 131.981536][ T4229] usb 3-1: can't read configurations, error -71 [ 132.677414][ T5236] loop0: detected capacity change from 0 to 256 [ 132.716387][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.725144][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.855756][ T146] Bluetooth: Wrong link type (-22) [ 134.135854][ T5268] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 134.471725][ T4231] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 134.761942][ T4231] usb 3-1: Using ep0 maxpacket: 32 [ 134.882480][ T4231] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 134.931798][ T4231] usb 3-1: config 0 has no interface number 0 [ 134.953097][ T5276] FAULT_INJECTION: forcing a failure. [ 134.953097][ T5276] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 134.995574][ T5276] CPU: 1 PID: 5276 Comm: syz.4.319 Not tainted syzkaller #0 [ 135.002941][ T5276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.013235][ T5276] Call Trace: [ 135.016560][ T5276] [ 135.019528][ T5276] dump_stack_lvl+0x188/0x250 [ 135.024259][ T5276] ? show_regs_print_info+0x20/0x20 [ 135.029516][ T5276] ? load_image+0x410/0x410 [ 135.034067][ T5276] ? __lock_acquire+0x7d40/0x7d40 [ 135.039167][ T5276] should_fail+0x383/0x4b0 [ 135.043625][ T5276] prepare_alloc_pages+0x1e3/0x5b0 [ 135.048793][ T5276] __alloc_pages+0x11b/0x480 [ 135.053461][ T5276] ? zone_statistics+0x170/0x170 [ 135.058448][ T5276] ? __rwlock_init+0x140/0x140 [ 135.063268][ T5276] ? alloc_pages+0x452/0x560 [ 135.067923][ T5276] __get_free_pages+0x8/0x30 [ 135.072554][ T5276] kasan_populate_vmalloc_pte+0x21/0xc0 [ 135.078132][ T5276] __apply_to_page_range+0x987/0xd10 [ 135.083459][ T5276] ? kasan_populate_vmalloc+0x70/0x70 [ 135.088871][ T5276] alloc_vmap_area+0x19e8/0x1b30 [ 135.093867][ T5276] ? vm_map_ram+0xba0/0xba0 [ 135.098411][ T5276] __get_vm_area_node+0x14f/0x2d0 [ 135.103468][ T5276] __vmalloc_node_range+0xef/0x8b0 [ 135.108608][ T5276] ? snd_dma_alloc_pages+0xfb/0x1d0 [ 135.113846][ T5276] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 135.119511][ T5276] ? mutex_unlock+0x10/0x10 [ 135.124047][ T5276] ? snd_dma_alloc_pages+0xfb/0x1d0 [ 135.129288][ T5276] __vmalloc+0x76/0x80 [ 135.133418][ T5276] ? snd_dma_alloc_pages+0xfb/0x1d0 [ 135.138655][ T5276] snd_dma_alloc_pages+0xfb/0x1d0 [ 135.143727][ T5276] do_alloc_pages+0xee/0x210 [ 135.148361][ T5276] snd_pcm_lib_malloc_pages+0x2e5/0x720 [ 135.153957][ T5276] snd_pcm_hw_params+0x814/0x1cf0 [ 135.159017][ T5276] ? kasan_quarantine_put+0xd4/0x210 [ 135.164368][ T5276] ? slab_free_freelist_hook+0xec/0x170 [ 135.169960][ T5276] ? snd_pcm_hw_param_first+0x5de/0xa60 [ 135.175546][ T5276] ? snd_pcm_forward+0x580/0x580 [ 135.180528][ T5276] ? snd_pcm_hw_param_near+0x3da/0x460 [ 135.186022][ T5276] ? snd_pcm_kernel_ioctl+0xf1/0x340 [ 135.191364][ T5276] snd_pcm_oss_change_params_locked+0x1e46/0x3cf0 [ 135.197869][ T5276] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 135.203034][ T5276] ? mutex_lock_io_nested+0x60/0x60 [ 135.208283][ T5276] snd_pcm_oss_make_ready+0x117/0x330 [ 135.213696][ T5276] snd_pcm_oss_get_ptr+0xd4/0xd20 [ 135.218862][ T5276] ? snd_pcm_oss_get_trigger+0x150/0x150 [ 135.224573][ T5276] snd_pcm_oss_ioctl+0x8fa/0xc60 [ 135.229543][ T5276] ? bpf_lsm_file_ioctl+0x5/0x10 [ 135.234517][ T5276] ? snd_pcm_oss_poll+0x840/0x840 [ 135.239683][ T5276] __se_sys_ioctl+0xfa/0x170 [ 135.244311][ T5276] do_syscall_64+0x4c/0xa0 [ 135.248772][ T5276] ? clear_bhb_loop+0x30/0x80 [ 135.253487][ T5276] ? clear_bhb_loop+0x30/0x80 [ 135.258239][ T5276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.264185][ T5276] RIP: 0033:0x7fd54d9232d9 [ 135.268648][ T5276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.288304][ T5276] RSP: 002b:00007fd54bb7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.297199][ T5276] RAX: ffffffffffffffda RBX: 00007fd54dbaafa0 RCX: 00007fd54d9232d9 [ 135.305228][ T5276] RDX: 0000200000000380 RSI: 00000000800c5011 RDI: 0000000000000004 [ 135.313282][ T5276] RBP: 00007fd54d9ba888 R08: 0000000000000000 R09: 0000000000000000 [ 135.321301][ T5276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.329314][ T5276] R13: 00007fd54dbab038 R14: 00007fd54dbaafa0 R15: 00007ffd25e41838 [ 135.337348][ T5276] [ 135.345711][ T5276] syz.4.319: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 135.363892][ T4277] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.400731][ T5276] CPU: 0 PID: 5276 Comm: syz.4.319 Not tainted syzkaller #0 [ 135.408103][ T5276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.418200][ T5276] Call Trace: [ 135.421521][ T5276] [ 135.424503][ T5276] dump_stack_lvl+0x188/0x250 [ 135.429325][ T5276] ? rcu_lock_release+0x5/0x20 [ 135.434137][ T5276] ? show_regs_print_info+0x20/0x20 [ 135.439417][ T5276] ? load_image+0x410/0x410 [ 135.444032][ T5276] warn_alloc+0x245/0x320 [ 135.448455][ T5276] ? zone_watermark_ok_safe+0x250/0x250 [ 135.454056][ T5276] ? __get_vm_area_node+0x164/0x2d0 [ 135.459303][ T5276] __vmalloc_node_range+0x2b1/0x8b0 [ 135.464540][ T5276] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 135.470220][ T5276] ? mutex_unlock+0x10/0x10 [ 135.474779][ T5276] ? snd_dma_alloc_pages+0xfb/0x1d0 [ 135.480023][ T5276] __vmalloc+0x76/0x80 [ 135.484147][ T5276] ? snd_dma_alloc_pages+0xfb/0x1d0 [ 135.489389][ T5276] snd_dma_alloc_pages+0xfb/0x1d0 [ 135.494469][ T5276] do_alloc_pages+0xee/0x210 [ 135.499117][ T5276] snd_pcm_lib_malloc_pages+0x2e5/0x720 [ 135.504725][ T5276] snd_pcm_hw_params+0x814/0x1cf0 [ 135.509789][ T5276] ? kasan_quarantine_put+0xd4/0x210 [ 135.515117][ T5276] ? slab_free_freelist_hook+0xec/0x170 [ 135.520718][ T5276] ? snd_pcm_hw_param_first+0x5de/0xa60 [ 135.526299][ T5276] ? snd_pcm_forward+0x580/0x580 [ 135.531288][ T5276] ? snd_pcm_hw_param_near+0x3da/0x460 [ 135.536798][ T5276] ? snd_pcm_kernel_ioctl+0xf1/0x340 [ 135.542124][ T5276] snd_pcm_oss_change_params_locked+0x1e46/0x3cf0 [ 135.548721][ T5276] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 135.553874][ T5276] ? mutex_lock_io_nested+0x60/0x60 [ 135.559127][ T5276] snd_pcm_oss_make_ready+0x117/0x330 [ 135.564554][ T5276] snd_pcm_oss_get_ptr+0xd4/0xd20 [ 135.569626][ T5276] ? snd_pcm_oss_get_trigger+0x150/0x150 [ 135.575314][ T5276] snd_pcm_oss_ioctl+0x8fa/0xc60 [ 135.580297][ T5276] ? bpf_lsm_file_ioctl+0x5/0x10 [ 135.585285][ T5276] ? snd_pcm_oss_poll+0x840/0x840 [ 135.590356][ T5276] __se_sys_ioctl+0xfa/0x170 [ 135.594990][ T5276] do_syscall_64+0x4c/0xa0 [ 135.599442][ T5276] ? clear_bhb_loop+0x30/0x80 [ 135.604155][ T5276] ? clear_bhb_loop+0x30/0x80 [ 135.608929][ T5276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.612279][ T4231] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 135.614864][ T5276] RIP: 0033:0x7fd54d9232d9 [ 135.627674][ T5284] loop1: detected capacity change from 0 to 256 [ 135.628321][ T5276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.628342][ T5276] RSP: 002b:00007fd54bb7b028 EFLAGS: 00000246 [ 135.640961][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.654217][ T5276] ORIG_RAX: 0000000000000010 [ 135.654232][ T5276] RAX: ffffffffffffffda RBX: 00007fd54dbaafa0 RCX: 00007fd54d9232d9 [ 135.654247][ T5276] RDX: 0000200000000380 RSI: 00000000800c5011 RDI: 0000000000000004 [ 135.654260][ T5276] RBP: 00007fd54d9ba888 R08: 0000000000000000 R09: 0000000000000000 [ 135.654274][ T5276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.654286][ T5276] R13: 00007fd54dbab038 R14: 00007fd54dbaafa0 R15: 00007ffd25e41838 [ 135.654318][ T5276] [ 135.654431][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.722088][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.736058][ T4231] usb 3-1: Product: syz [ 135.740864][ T4231] usb 3-1: Manufacturer: syz [ 135.745918][ T4231] usb 3-1: SerialNumber: syz [ 135.771196][ T4231] usb 3-1: config 0 descriptor?? [ 135.776428][ T5276] Mem-Info: [ 135.779573][ T5276] active_anon:275 inactive_anon:6306 isolated_anon:0 [ 135.779573][ T5276] active_file:4803 inactive_file:46064 isolated_file:0 [ 135.779573][ T5276] unevictable:768 dirty:61 writeback:0 [ 135.779573][ T5276] slab_reclaimable:20934 slab_unreclaimable:96496 [ 135.779573][ T5276] mapped:30206 shmem:1655 pagetables:721 bounce:0 [ 135.779573][ T5276] kernel_misc_reclaimable:0 [ 135.779573][ T5276] free:1363787 free_pcp:11537 free_cma:0 [ 135.838462][ T5276] Node 0 active_anon:1068kB inactive_anon:25712kB active_file:19004kB inactive_file:184256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121824kB dirty:244kB writeback:0kB shmem:5540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10572kB pagetables:2884kB all_unreclaimable? no [ 135.869669][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.884692][ T5276] Node 1 active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 135.913810][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.926529][ T5276] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.959490][ T4277] usb 4-1: Using ep0 maxpacket: 8 [ 135.964910][ T5276] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 135.970718][ T5276] Node 0 DMA32 free:1522436kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1068kB inactive_anon:30112kB active_file:19004kB inactive_file:184256kB unevictable:1536kB writepending:244kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:33436kB local_pcp:18912kB free_cma:0kB [ 136.000692][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.016742][ T5276] lowmem_reserve[]: 0 0 0 0 0 [ 136.024421][ T5276] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.057091][ T5276] lowmem_reserve[]: 0 0 0 0 0 [ 136.063378][ T5276] Node 1 Normal free:3917352kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:7336kB local_pcp:4924kB free_cma:0kB [ 136.092242][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.106672][ T5276] lowmem_reserve[]: 0 0 0 0 0 [ 136.113122][ T4277] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.128426][ T5276] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 136.149286][ T5276] Node 0 DMA32: 363*4kB (UME) 97*8kB (UME) 355*16kB (UME) 257*32kB (UME) 130*64kB (UME) 33*128kB (UME) 25*256kB (UME) 13*512kB (UM) 6*1024kB (ME) 4*2048kB (UM) 358*4096kB (UM) = 1522436kB [ 136.168368][ T4277] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.168410][ T4277] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.168470][ T4277] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 136.168495][ T4277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.217581][ T4231] smsc95xx v2.0.0 [ 136.229236][ T5276] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 136.241187][ T5276] Node 1 Normal: 72*4kB (UME) 38*8kB (UME) 24*16kB (UME) 144*32kB (UME) 54*64kB (UME) 18*128kB (U) 10*256kB (UM) 4*512kB (U) 2*1024kB (UE) 2*2048kB (ME) 951*4096kB (M) = 3917392kB [ 136.452786][ T5276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.473489][ T5276] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.491430][ T5276] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.850777][ T4277] hub 4-1:1.0: bad descriptor, ignoring hub [ 136.867127][ T5276] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.887059][ T4277] hub: probe of 4-1:1.0 failed with error -5 [ 136.901729][ T5276] 55400 total pagecache pages [ 136.909219][ T4277] cdc_wdm 4-1:1.0: skipping garbage [ 137.018778][ T5276] 0 pages in swap cache [ 137.023656][ T5276] Swap cache stats: add 950, delete 950, find 0/0 [ 137.030208][ T5276] Free swap = 124716kB [ 137.034760][ T5276] Total swap = 124996kB [ 137.039050][ T5276] 2097051 pages RAM [ 137.043199][ T5276] 0 pages HighMem/MovableOnly [ 137.048209][ T5276] 415313 pages reserved [ 137.066203][ T5276] 0 pages cma reserved [ 137.102007][ T4231] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 137.113008][ T4277] cdc_wdm 4-1:1.0: skipping garbage [ 137.122072][ T4277] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 137.128110][ T4277] cdc_wdm 4-1:1.0: Unknown control protocol [ 137.155111][ T4231] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 137.172422][ T4277] usb 4-1: USB disconnect, device number 6 [ 137.294297][ T4231] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 138.320653][ T4231] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 138.482017][ T5301] loop1: detected capacity change from 0 to 256 [ 138.557138][ T5309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.332'. [ 138.620122][ T4231] usb 3-1: USB disconnect, device number 9 [ 139.062180][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.512228][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 139.803513][ T23] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 139.828965][ T23] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 139.842903][ T23] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 139.859130][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.886246][ T5344] netlink: 'syz.2.343': attribute type 4 has an invalid length. [ 140.713310][ T5348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'. [ 140.758751][ T5352] loop1: detected capacity change from 0 to 256 [ 140.810428][ T23] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 140.820570][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.829861][ T23] usb 5-1: Product: syz [ 140.834128][ T23] usb 5-1: Manufacturer: syz [ 140.838759][ T23] usb 5-1: SerialNumber: syz [ 140.857314][ T23] usb 5-1: config 0 descriptor?? [ 141.124169][ T23] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 141.222162][ T4199] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 141.670437][ T4199] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.712216][ T4199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.761188][ T4199] usb 3-1: config 0 descriptor?? [ 141.803194][ T4199] cp210x 3-1:0.0: cp210x converter detected [ 141.887471][ T3543] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 141.914558][ T23] usb 5-1: USB disconnect, device number 5 [ 141.924345][ T3543] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 142.365671][ T5383] jffs2: notice: (5383) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.372609][ T4199] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 142.892168][ T4199] usb 3-1: cp210x converter now attached to ttyUSB0 [ 143.205210][ T4227] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.233688][ T4199] usb 3-1: USB disconnect, device number 10 [ 143.280187][ T4199] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 143.303056][ T4199] cp210x 3-1:0.0: device disconnected [ 143.350155][ T5397] loop0: detected capacity change from 0 to 256 [ 144.153764][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 144.418083][ T5420] loop2: detected capacity change from 0 to 256 [ 144.871954][ T4277] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 146.471855][ T4227] usb 2-1: string descriptor 0 read error: -71 [ 146.471896][ T4277] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.478202][ T4227] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 146.502157][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.512348][ T4227] usb 2-1: config 0 descriptor?? [ 146.531784][ T4227] usb 2-1: can't set config #0, error -71 [ 146.539591][ T4227] usb 2-1: USB disconnect, device number 4 [ 146.852049][ T4277] usb 1-1: not running at top speed; connect to a high speed hub [ 146.935319][ T4277] usb 1-1: config 15 has an invalid interface number: 176 but max is 0 [ 147.018945][ T5451] loop2: detected capacity change from 0 to 256 [ 147.039590][ T4277] usb 1-1: config 15 has no interface number 0 [ 147.131328][ T4277] usb 1-1: config 15 interface 176 has no altsetting 0 [ 147.372113][ T4277] usb 1-1: New USB device found, idVendor=10b8, idProduct=1fa8, bcdDevice=5e.88 [ 147.422103][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.496467][ T4277] usb 1-1: Product: syz [ 147.521179][ T4277] usb 1-1: Manufacturer: syz [ 147.536276][ T4277] usb 1-1: SerialNumber: syz [ 147.581790][ T4277] usb 1-1: can't set config #15, error -71 [ 147.822588][ T4277] usb 1-1: USB disconnect, device number 8 [ 147.915776][ T5463] comedi comedi3: bad chanlist[0]=0x80000004 chan=4 range length=1 [ 147.952502][ T4227] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.231677][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 148.361831][ T4227] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 148.391697][ T4227] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 55, changing to 9 [ 148.428541][ T4227] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8496, setting to 1024 [ 148.441678][ T4227] usb 2-1: config 0 interface 0 has no altsetting 0 [ 148.782025][ T4227] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 148.791138][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.444026][ T4227] usb 2-1: Product: syz [ 149.448310][ T4227] usb 2-1: Manufacturer: syz [ 149.452991][ T4227] usb 2-1: SerialNumber: syz [ 149.472747][ T4227] usb 2-1: config 0 descriptor?? [ 149.501847][ T4227] usb 2-1: can't set config #0, error -71 [ 149.509162][ T4227] usb 2-1: USB disconnect, device number 5 [ 149.545037][ T5475] loop1: detected capacity change from 0 to 256 [ 151.752268][ T5487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.387'. [ 152.015009][ T5501] loop2: detected capacity change from 0 to 256 [ 152.998763][ T4367] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.051675][ T4199] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 153.918396][ T4199] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.929812][ T4199] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.939805][ T4199] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 153.949608][ T4199] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.971886][ T4199] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 153.986266][ T4199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.995174][ T4277] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 154.218564][ T5520] loop4: detected capacity change from 0 to 256 [ 154.373938][ T4277] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.941451][ T4277] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 154.951598][ C0] net_ratelimit: 35 callbacks suppressed [ 155.012485][ T4277] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.067690][ T4277] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.108256][ T4277] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 155.122313][ T4367] usb 2-1: device descriptor read/all, error -71 [ 155.153416][ T5537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.404'. [ 155.168188][ T4277] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 155.177516][ T4277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.211996][ T5516] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 155.234031][ T4277] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 155.252895][ T4277] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 155.275670][ T4277] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 155.308657][ T4277] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 155.334054][ T4277] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 155.343157][ T4277] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 155.352775][ T4277] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 155.401734][ T4199] [drm] Initialized gud 1.0.0 20200422 for 1-1:1.0 on minor 2 [ 155.591310][ T5543] loop3: detected capacity change from 0 to 256 [ 155.649950][ T4199] gud 1-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 155.786654][ T4231] usb 3-1: USB disconnect, device number 11 [ 155.838051][ T4199] usb 1-1: USB disconnect, device number 9 [ 155.894959][ T4231] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 156.033152][ T4231] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 156.055741][ T4231] keyspan 3-1:1.0: device disconnected [ 158.349233][ T5567] loop2: detected capacity change from 0 to 256 [ 158.516574][ T5574] ======================================================= [ 158.516574][ T5574] WARNING: The mand mount option has been deprecated and [ 158.516574][ T5574] and is ignored by this kernel. Remove the mand [ 158.516574][ T5574] option from the mount to silence this warning. [ 158.516574][ T5574] ======================================================= [ 159.582456][ T5590] loop2: detected capacity change from 0 to 256 [ 159.801867][ T4199] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 160.134247][ C1] net_ratelimit: 43 callbacks suppressed [ 160.211696][ T4199] usb 4-1: Using ep0 maxpacket: 32 [ 160.332338][ T4199] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 160.351255][ T4199] usb 4-1: config 0 has no interface number 0 [ 160.367909][ T4199] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 160.541954][ T4199] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 160.562516][ T4199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.580824][ T4199] usb 4-1: Product: syz [ 160.590951][ T4199] usb 4-1: Manufacturer: syz [ 160.601385][ T4199] usb 4-1: SerialNumber: syz [ 160.633271][ T4199] usb 4-1: config 0 descriptor?? [ 160.665302][ T5589] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 160.888632][ T5589] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.910495][ T5623] loop4: detected capacity change from 0 to 256 [ 163.042397][ T4199] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 163.062484][ T4199] asix: probe of 4-1:0.188 failed with error -71 [ 163.069442][ T5628] loop1: detected capacity change from 0 to 256 [ 163.097780][ T4199] usb 4-1: USB disconnect, device number 7 [ 163.404905][ T4192] Bluetooth: hci3: legacy adv larger than 31 bytes [ 164.001911][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 164.557337][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.745631][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 164.757633][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 164.767964][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 164.778514][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 164.788366][ T5652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 164.822759][ T4367] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 164.873777][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.978019][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.142681][ T23] usb 3-1: Product: syz [ 165.172081][ T4367] usb 2-1: Using ep0 maxpacket: 32 [ 165.237589][ T23] usb 3-1: Manufacturer: syz [ 165.298738][ T23] usb 3-1: SerialNumber: syz [ 165.328646][ C1] net_ratelimit: 37 callbacks suppressed [ 165.352529][ T4367] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 165.403148][ T4367] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 165.472630][ T4367] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 165.721983][ T4367] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 165.748867][ T4367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.775523][ T4367] usb 2-1: Product: syz [ 165.787994][ T4367] usb 2-1: Manufacturer: syz [ 165.801645][ T4367] usb 2-1: SerialNumber: syz [ 165.877818][ T4367] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 165.906019][ T4367] imon 2-1:155.0: unable to initialize intf0, err -19 [ 165.914767][ T4367] imon:imon_probe: failed to initialize context! [ 165.921244][ T4367] imon 2-1:155.0: unable to register, err -19 [ 165.960976][ T5669] loop3: detected capacity change from 0 to 256 [ 166.105905][ T5675] loop4: detected capacity change from 0 to 256 [ 166.121702][ T4367] usb 2-1: USB disconnect, device number 8 [ 166.302786][ T23] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 166.352619][ T23] cdc_ncm 3-1:1.0: bind() failure [ 166.404757][ T23] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 166.432135][ T23] cdc_ncm 3-1:1.1: bind() failure [ 166.837938][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 166.848927][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 166.859359][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 166.869826][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 166.885137][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 167.342784][ T23] usb 3-1: USB disconnect, device number 12 [ 167.506660][ T5693] bond0: invalid ARP target specified [ 168.549522][ T5711] loop0: detected capacity change from 0 to 256 [ 169.465430][ T5735] loop0: detected capacity change from 0 to 256 [ 170.409037][ T4469] net_ratelimit: 36 callbacks suppressed [ 170.924782][ T5754] loop3: detected capacity change from 0 to 256 [ 171.351667][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 171.360098][ T146] Bluetooth: hci5: sending frame failed (-49) [ 171.360146][ T5761] MTRR 1 not used [ 171.955499][ T5774] __nla_validate_parse: 6 callbacks suppressed [ 171.955538][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 171.973066][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 171.983340][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 171.993723][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 172.003395][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 172.526181][ T5785] loop1: detected capacity change from 0 to 256 [ 172.533347][ T4367] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 173.282144][ T4367] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 173.330887][ T5791] loop3: detected capacity change from 0 to 256 [ 173.335343][ T4367] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 173.415152][ T4367] usb 1-1: Product: syz [ 173.482312][ T4367] usb 1-1: SerialNumber: syz [ 173.534743][ T4367] usb 1-1: config 0 descriptor?? [ 173.542208][ T4231] Bluetooth: hci5: command 0x1001 tx timeout [ 173.550138][ T146] Bluetooth: hci5: sending frame failed (-49) [ 173.818599][ T4367] hso 1-1:0.0: Failed to find BULK IN ep [ 174.016889][ T4367] usb 1-1: USB disconnect, device number 10 [ 175.171772][ T4199] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 175.591695][ C0] net_ratelimit: 38 callbacks suppressed [ 175.615533][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 175.626594][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 175.636987][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 175.647346][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 175.657220][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 175.851843][ T4199] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 175.881798][ T4199] usb 3-1: config 0 has no interface number 0 [ 175.921068][ T4199] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 175.981225][ T4199] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.137404][ T4367] Bluetooth: hci5: command 0x1009 tx timeout [ 177.130882][ T4199] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 177.140754][ T4199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.148833][ T4199] usb 3-1: Product: syz [ 177.148853][ T4199] usb 3-1: Manufacturer: syz [ 177.148871][ T4199] usb 3-1: SerialNumber: syz [ 177.180842][ T4199] usb 3-1: config 0 descriptor?? [ 177.201883][ T5812] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.223677][ T4199] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 177.248858][ T4199] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 177.442093][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 177.494244][ T5842] FAULT_INJECTION: forcing a failure. [ 177.494244][ T5842] name failslab, interval 1, probability 0, space 0, times 0 [ 177.508402][ T5842] CPU: 0 PID: 5842 Comm: syz.3.497 Not tainted syzkaller #0 [ 177.515745][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 177.525883][ T5842] Call Trace: [ 177.529198][ T5842] [ 177.532186][ T5842] dump_stack_lvl+0x188/0x250 [ 177.536954][ T5842] ? show_regs_print_info+0x20/0x20 [ 177.542161][ T5842] ? load_image+0x410/0x410 [ 177.546694][ T5842] ? __might_sleep+0xf0/0xf0 [ 177.551313][ T5842] ? __lock_acquire+0x7d40/0x7d40 [ 177.556355][ T5842] should_fail+0x383/0x4b0 [ 177.560792][ T5842] should_failslab+0x5/0x20 [ 177.565315][ T5842] slab_pre_alloc_hook+0x51/0xc0 [ 177.570294][ T5842] kmem_cache_alloc_trace+0x47/0x290 [ 177.575617][ T5842] ? __list_lru_init+0x535/0xac0 [ 177.580612][ T5842] __list_lru_init+0x535/0xac0 [ 177.585416][ T5842] alloc_super+0x787/0x970 [ 177.589850][ T5842] ? kill_litter_super+0xa0/0xa0 [ 177.594789][ T5842] sget_fc+0x2d4/0x6f0 [ 177.598888][ T5842] ? kill_litter_super+0xa0/0xa0 [ 177.603856][ T5842] ? shmem_reconfigure+0x790/0x790 [ 177.608998][ T5842] get_tree_nodev+0x26/0x160 [ 177.613613][ T5842] vfs_get_tree+0x88/0x270 [ 177.618086][ T5842] do_new_mount+0x247/0xa40 [ 177.622636][ T5842] __se_sys_mount+0x2e3/0x3d0 [ 177.627359][ T5842] ? __x64_sys_mount+0xc0/0xc0 [ 177.632174][ T5842] ? lockdep_hardirqs_on+0x94/0x140 [ 177.637410][ T5842] ? __x64_sys_mount+0x1c/0xc0 [ 177.642188][ T5842] do_syscall_64+0x4c/0xa0 [ 177.646611][ T5842] ? clear_bhb_loop+0x30/0x80 [ 177.651303][ T5842] ? clear_bhb_loop+0x30/0x80 [ 177.656019][ T5842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.661927][ T5842] RIP: 0033:0x7fa670c952d9 [ 177.666382][ T5842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.686021][ T5842] RSP: 002b:00007fa66eeed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 177.694459][ T5842] RAX: ffffffffffffffda RBX: 00007fa670f1cfa0 RCX: 00007fa670c952d9 [ 177.702442][ T5842] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 177.710425][ T5842] RBP: 00007fa670d2c888 R08: 0000000000000000 R09: 0000000000000000 [ 177.718417][ T5842] R10: 0000000002200cd0 R11: 0000000000000246 R12: 0000000000000000 [ 177.726434][ T5842] R13: 00007fa670f1d038 R14: 00007fa670f1cfa0 R15: 00007ffffc16e678 [ 177.734476][ T5842] [ 177.748487][ T4199] usb 3-1: USB disconnect, device number 13 [ 177.776368][ T4199] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 177.803192][ T4199] cyberjack 3-1:0.69: device disconnected [ 177.900740][ T5846] loop0: detected capacity change from 0 to 256 [ 178.529053][ T5854] FAULT_INJECTION: forcing a failure. [ 178.529053][ T5854] name failslab, interval 1, probability 0, space 0, times 0 [ 178.597942][ T5854] CPU: 0 PID: 5854 Comm: syz.2.501 Not tainted syzkaller #0 [ 178.605310][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 178.615492][ T5854] Call Trace: [ 178.618839][ T5854] [ 178.621831][ T5854] dump_stack_lvl+0x188/0x250 [ 178.626555][ T5854] ? show_regs_print_info+0x20/0x20 [ 178.631800][ T5854] ? load_image+0x410/0x410 [ 178.636382][ T5854] ? __might_sleep+0xf0/0xf0 [ 178.641014][ T5854] ? __lock_acquire+0x7d40/0x7d40 [ 178.646127][ T5854] should_fail+0x383/0x4b0 [ 178.650778][ T5854] should_failslab+0x5/0x20 [ 178.655335][ T5854] slab_pre_alloc_hook+0x51/0xc0 [ 178.660319][ T5854] __kmalloc_node+0x6d/0x3a0 [ 178.665038][ T5854] ? __vmalloc_node_range+0x2dd/0x8b0 [ 178.670459][ T5854] __vmalloc_node_range+0x2dd/0x8b0 [ 178.675707][ T5854] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 178.681295][ T5854] __vmalloc+0x76/0x80 [ 178.685402][ T5854] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 178.690994][ T5854] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 178.696417][ T5854] bpf_prog_alloc+0x1a/0x1e0 [ 178.701051][ T5854] bpf_prog_create_from_user+0xa2/0x420 [ 178.706645][ T5854] ? seccomp_attach_filter+0xbb0/0xbb0 [ 178.712157][ T5854] do_seccomp+0x808/0x16a0 [ 178.716631][ T5854] ? __lock_acquire+0x7d40/0x7d40 [ 178.721709][ T5854] ? prctl_set_seccomp+0x60/0x60 [ 178.726682][ T5854] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 178.732729][ T5854] ? lockdep_hardirqs_on+0x94/0x140 [ 178.738082][ T5854] do_syscall_64+0x4c/0xa0 [ 178.742542][ T5854] ? clear_bhb_loop+0x30/0x80 [ 178.747274][ T5854] ? clear_bhb_loop+0x30/0x80 [ 178.751994][ T5854] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.757934][ T5854] RIP: 0033:0x7f147a3f22d9 [ 178.762394][ T5854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.782098][ T5854] RSP: 002b:00007f147864a028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 178.790567][ T5854] RAX: ffffffffffffffda RBX: 00007f147a679fa0 RCX: 00007f147a3f22d9 [ 178.798594][ T5854] RDX: 0000200000000140 RSI: 000000000000000c RDI: 0000000000000001 [ 178.806610][ T5854] RBP: 00007f147a489888 R08: 0000000000000000 R09: 0000000000000000 [ 178.814618][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.822660][ T5854] R13: 00007f147a67a038 R14: 00007f147a679fa0 R15: 00007ffd79a5b3d8 [ 178.830702][ T5854] [ 179.502799][ T5858] jffs2: notice: (5858) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.089765][ T5875] __nla_validate_parse: 1 callbacks suppressed [ 180.089806][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 180.107793][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 180.118278][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 180.128467][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 180.138251][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 180.191711][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 180.791636][ C0] net_ratelimit: 45 callbacks suppressed [ 181.206102][ T5896] loop1: detected capacity change from 0 to 256 [ 181.401711][ T4261] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 181.651956][ T4261] usb 4-1: Using ep0 maxpacket: 32 [ 181.782482][ T4261] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 181.798524][ T4261] usb 4-1: config 2 has no interface number 0 [ 181.820882][ T4261] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 181.867005][ T4261] usb 4-1: config 2 interface 88 has no altsetting 0 [ 182.041901][ T4261] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 182.061507][ T4261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 182.091670][ T4261] usb 4-1: Product: syz [ 182.111588][ T4261] usb 4-1: Manufacturer: syz [ 182.125872][ T4261] usb 4-1: SerialNumber: syz [ 182.162049][ T5894] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.249342][ T5902] jffs2: notice: (5902) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 182.525662][ T5894] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 182.661374][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 182.673139][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 182.683556][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 182.694034][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 183.582595][ T4261] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 183.610634][ T4261] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 183.670341][ T4261] asix: probe of 4-1:2.88 failed with error -71 [ 183.712025][ T4261] usb 4-1: USB disconnect, device number 8 [ 185.101679][ T4231] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 185.192854][ T5954] __nla_validate_parse: 2 callbacks suppressed [ 185.192891][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 185.210608][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 185.220893][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 185.231964][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 185.241683][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 185.411860][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 185.732040][ T4231] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 185.759916][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.810015][ T4231] usb 2-1: Product: syz [ 185.831599][ C1] net_ratelimit: 34 callbacks suppressed [ 185.836383][ T4231] usb 2-1: Manufacturer: syz [ 185.878977][ T4231] usb 2-1: SerialNumber: syz [ 185.906984][ T4231] usb 2-1: config 0 descriptor?? [ 186.067017][ T5959] loop0: detected capacity change from 0 to 256 [ 186.432314][ T4231] airspy 2-1:0.0: Board ID: 00 [ 186.449177][ T4231] airspy 2-1:0.0: Firmware version: [ 187.102040][ T4231] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 187.120973][ T4231] airspy 2-1:0.0: Registered as swradio24 [ 187.133618][ T4231] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 187.151179][ T4231] usb 2-1: USB disconnect, device number 9 [ 187.983529][ T4231] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 188.037545][ T5949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.174103][ T5977] netlink: 'syz.3.538': attribute type 21 has an invalid length. [ 188.226407][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 188.226423][ T26] audit: type=1807 audit(1791910596.016:86): action=appraise func=FIRMWARE_CHECK res=1 [ 188.243206][ T5976] ima: policy update completed [ 188.269335][ T26] audit: type=1802 audit(1791910596.036:87): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.538" res=1 errno=0 [ 189.048484][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 189.059611][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 189.069939][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 189.080545][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 189.090352][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 189.302071][ T4231] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 189.312390][ T4231] usb 2-1: config 0 has no interface number 0 [ 189.318542][ T4231] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 189.389087][ T6001] loop2: detected capacity change from 0 to 256 [ 189.423450][ T4231] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.411918][ T4231] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 190.421046][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.479133][ T4231] usb 2-1: Product: syz [ 190.496980][ T4231] usb 2-1: Manufacturer: syz [ 190.501832][ T4231] usb 2-1: SerialNumber: syz [ 190.519275][ T4231] usb 2-1: config 0 descriptor?? [ 190.541902][ T5974] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.563425][ T4231] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 190.585535][ T4231] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 190.762820][ T4231] usb 2-1: USB disconnect, device number 10 [ 190.825316][ T4231] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 190.874731][ T4231] cyberjack 2-1:0.69: device disconnected [ 190.893706][ T144] net_ratelimit: 43 callbacks suppressed [ 191.002969][ T6013] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 191.010159][ T6013] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 191.045762][ T6013] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 191.052274][ T6013] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 191.079651][ T6016] netlink: 'syz.1.548': attribute type 3 has an invalid length. [ 191.083993][ T6013] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 191.093866][ T6013] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 191.135270][ T6013] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 191.141826][ T6013] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 191.191786][ T4231] Bluetooth: hci0: command 0x0406 tx timeout [ 191.200372][ T4231] Bluetooth: hci1: command 0x0406 tx timeout [ 191.220286][ T4231] Bluetooth: hci2: command 0x0406 tx timeout [ 191.243760][ T4231] Bluetooth: hci3: command 0x0406 tx timeout [ 191.501841][ T4261] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 192.135198][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 192.404361][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 192.414144][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 192.424461][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 192.434988][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 192.444762][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 192.540830][ T4261] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 192.691693][ T4261] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 192.752413][ T6038] loop3: detected capacity change from 0 to 256 [ 192.758868][ T4261] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30768, setting to 1024 [ 192.846714][ T4261] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 192.880456][ T4261] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 193.628490][ T4261] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 193.637671][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.671941][ T6019] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 193.688894][ T6019] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 193.733739][ T4261] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 193.788236][ T4261] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 193.806465][ T4261] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 193.836411][ T4261] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 193.865579][ T4261] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 194.070155][ T4261] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 194.086431][ T4261] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 194.156986][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.164958][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.619295][ T2288] usb 1-1: USB disconnect, device number 11 [ 194.663565][ T2288] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 194.707287][ T2288] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 194.729203][ T2288] keyspan 1-1:1.0: device disconnected [ 194.833913][ T6061] infiniband syz2: set down [ 194.853345][ T6061] infiniband syz2: added ipvlan0 [ 195.003258][ T6061] RDS/IB: syz2: added [ 195.021777][ T6061] smc: adding ib device syz2 with port count 1 [ 195.041971][ T6061] smc: ib device syz2 port 1 has pnetid [ 195.415930][ T6071] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 195.552710][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 195.911594][ C1] net_ratelimit: 2083 callbacks suppressed [ 196.604767][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 196.616277][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 196.626822][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 197.166341][ T6083] loop1: detected capacity change from 0 to 256 [ 198.984621][ T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 199.352518][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 199.484012][ T6116] __nla_validate_parse: 2 callbacks suppressed [ 199.484054][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 200.096036][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 200.325348][ T6121] loop4: detected capacity change from 0 to 256 [ 201.165417][ T7] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 201.174638][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.174665][ T7] usb 2-1: Product: syz [ 201.174683][ T7] usb 2-1: Manufacturer: syz [ 201.174700][ T7] usb 2-1: SerialNumber: syz [ 201.191608][ C1] net_ratelimit: 48 callbacks suppressed [ 201.216043][ T7] usb 2-1: config 0 descriptor?? [ 201.231900][ T6098] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.239114][ T6098] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.518159][ T6098] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.548710][ T6098] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.831946][ T7] Error reading MAC address [ 201.857814][ T7] usb 2-1: USB disconnect, device number 11 [ 202.937507][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 203.949302][ T6177] netlink: 'syz.2.598': attribute type 21 has an invalid length. [ 203.975657][ T6177] netlink: 'syz.2.598': attribute type 6 has an invalid length. [ 204.000696][ T6177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.598'. [ 204.002107][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 204.143973][ T2288] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 204.252879][ T6170] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 204.271626][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 204.289297][ T6170] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 204.395654][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.409835][ T7] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.552884][ T2288] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 204.651750][ T4367] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 204.712833][ T2288] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 204.741227][ T2288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 204.760583][ T2288] usb 5-1: Product: syz [ 204.767932][ T2288] usb 5-1: Manufacturer: syz [ 204.802351][ T7] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 204.820175][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.831112][ T7] usb 1-1: Product: syz [ 204.839587][ T7] usb 1-1: Manufacturer: syz [ 204.846993][ T7] usb 1-1: SerialNumber: syz [ 205.462109][ T7] usb 1-1: 1:1: invalid format type 0x1b02 is detected, processed as PCM [ 205.472338][ T7] usb 1-1: 1:1 : sample bitwidth 199 in over sample bytes 2 [ 205.479747][ T7] usb 1-1: 1:1: All rates were zero [ 205.503271][ T7] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 205.657989][ T7] usb 1-1: USB disconnect, device number 12 [ 205.732090][ T4367] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.751633][ T4367] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.763241][ T4367] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.794312][ T4367] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.808135][ T4367] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 205.856478][ T4367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.934997][ T4372] udevd[4372]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.066596][ T2288] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input11 [ 206.147454][ T2288] usb 5-1: USB disconnect, device number 6 [ 206.419710][ T4367] lg-g15 0003:046D:C222.0003: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 206.561988][ T4367] lg-g15 0003:046D:C222.0003: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 206.642288][ T4367] usb 3-1: USB disconnect, device number 14 [ 206.851148][ T6214] fido_id[6214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 206.961709][ T4398] net_ratelimit: 53 callbacks suppressed [ 207.242768][ T6210] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 207.380399][ T6231] netlink: 52 bytes leftover after parsing attributes in process `syz.2.613'. [ 207.792579][ T4367] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 208.232020][ T4367] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.242511][ T4367] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 208.251969][ T4367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.311026][ T4367] as10x_usb: device has been detected [ 208.317100][ T4367] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 208.335570][ T4367] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 208.413355][ T4367] usb 3-1: loading /lib/firmware/as102_data1_st.hex failed with error -13 [ 208.432410][ T4367] usb 3-1: Direct firmware load for as102_data1_st.hex failed with error -13 [ 208.450982][ T4367] usb 3-1: Falling back to sysfs fallback for: as102_data1_st.hex [ 208.473175][ T26] audit: type=1800 audit(1791910616.196:88): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/1:8" name="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 res=0 errno=0 [ 208.724537][ T6256] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.811709][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 210.061677][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 210.182023][ T7] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 210.219489][ T7] usb 2-1: config 2 has no interface number 0 [ 210.245465][ T7] usb 2-1: config 2 interface 31 has no altsetting 0 [ 210.427171][ T7] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 210.460124][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.512283][ T7] usb 2-1: Product: syz [ 210.516566][ T7] usb 2-1: Manufacturer: syz [ 210.573242][ T7] usb 2-1: SerialNumber: syz [ 210.813119][ T26] audit: type=1400 audit(1791910618.606:89): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="permhat" pid=6294 comm="syz.4.639" [ 210.831281][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.712002][ T7] ch9200: probe of 2-1:2.31 failed with error -22 [ 211.778780][ T7] usb 2-1: USB disconnect, device number 12 [ 211.831983][ T2288] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 211.991873][ T4398] net_ratelimit: 72 callbacks suppressed [ 212.262316][ T6315] netlink: 'syz.1.646': attribute type 10 has an invalid length. [ 212.270106][ T6315] netlink: 55 bytes leftover after parsing attributes in process `syz.1.646'. [ 212.362678][ T2288] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 212.381580][ T2288] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 212.389656][ T2288] usb 1-1: Product: syz [ 212.401581][ T2288] usb 1-1: SerialNumber: syz [ 212.456421][ T6317] comedi comedi3: bad chanlist[0]=0x00000005 chan=5 range length=1 [ 212.522233][ T2288] usb 1-1: config 0 descriptor?? [ 212.766775][ T6328] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 212.785551][ T6328] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 212.853779][ T2288] hso 1-1:0.0: Failed to find INT IN ep [ 213.020150][ T4199] usb 1-1: USB disconnect, device number 13 [ 215.703481][ T1108] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 215.916207][ T4226] rpcbind: server 127.0.0.1 not responding, timed out [ 216.332894][ T1108] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 216.429714][ T1108] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 216.652502][ T1108] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 216.907482][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.961562][ T1108] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.008666][ T1108] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 217.035833][ T6382] dlm: dev_write: no op 0 0 [ 217.089134][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.156103][ C1] net_ratelimit: 42 callbacks suppressed [ 217.172284][ T6368] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 217.183654][ T6368] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 217.206300][ T6368] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 217.235041][ T1108] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 217.341656][ T4199] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 217.653127][ T1108] usb 4-1: mos7720: usb_control_msg() failed: -71 [ 217.678801][ T1108] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 217.740893][ T1108] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 217.837135][ T1108] usb 4-1: USB disconnect, device number 9 [ 217.951068][ T1108] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 218.007135][ T1108] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 218.049774][ T1108] mos7720 4-1:1.0: device disconnected [ 218.117217][ T4199] usb 1-1: Using ep0 maxpacket: 32 [ 218.197098][ T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 218.241995][ T4199] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 218.251124][ T4199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.307520][ T4199] usb 1-1: config 0 descriptor?? [ 218.354459][ T4199] gspca_main: sunplus-2.14.0 probing 041e:400b [ 218.581645][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 218.741909][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 218.754601][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 218.765080][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.775468][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.789773][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.799203][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.961817][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 219.071842][ T7] usb 2-1: GET_CAPABILITIES returned 0 [ 219.077416][ T7] usbtmc 2-1:16.0: can't read capabilities [ 219.221933][ T4199] gspca_sunplus: reg_w_riv err -71 [ 219.228036][ T4199] sunplus: probe of 1-1:0.0 failed with error -71 [ 219.247535][ T4199] usb 1-1: USB disconnect, device number 14 [ 219.279063][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 219.308318][ T4277] usb 2-1: USB disconnect, device number 13 [ 219.545719][ T6415] zero sized request [ 219.581120][ T6415] ------------[ cut here ]------------ [ 219.586936][ T6415] WARNING: CPU: 1 PID: 6415 at kernel/trace/ring_buffer.c:4528 rb_get_reader_page+0xac0/0xcd0 [ 219.597206][ T6415] Modules linked in: [ 219.601115][ T6415] [ 219.603459][ T6415] CPU: 1 PID: 6415 Comm: syz.2.683 Not tainted syzkaller #0 [ 219.610762][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 219.620852][ T6415] RIP: 0010:rb_get_reader_page+0xac0/0xcd0 [ 219.626711][ T6415] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 d7 67 42 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 65 69 42 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 219.646351][ T6415] RSP: 0018:ffffc90003ba77c0 EFLAGS: 00010002 [ 219.646551][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.652455][ T6415] RAX: 1ffff11002f0f101 RBX: 1ffff11002f0e876 RCX: ffffffff817c009b [ 219.666435][ T6415] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888017870408 [ 219.674462][ T6415] RBP: ffffc90003ba7960 R08: ffff88801787040b R09: 1ffff11002f0e081 [ 219.682485][ T6415] R10: dffffc0000000000 R11: ffffed1002f0e082 R12: ffff888017878810 [ 219.690591][ T6415] R13: 000000000000006c R14: 1ffff11002f0e873 R15: ffff888017870400 [ 219.698606][ T6415] FS: 00007f147864a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 219.698630][ T6415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.698645][ T6415] CR2: 00007f1478648fa8 CR3: 0000000024e1b000 CR4: 00000000003526e0 [ 219.698683][ T6415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 219.698697][ T6415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.698711][ T6415] Call Trace: [ 219.698721][ T6415] [ 219.698752][ T6415] ? ring_buffer_read_page+0x12c0/0x12c0 [ 219.698789][ T6415] ? do_raw_spin_lock+0x128/0x2f0 [ 219.698815][ T6415] ? __rwlock_init+0x140/0x140 [ 219.698840][ T6415] rb_buffer_peek+0x5c/0x780 [ 219.698869][ T6415] ring_buffer_peek+0x1de/0x400 [ 219.698896][ T6415] ? ring_buffer_iter_empty+0x340/0x340 [ 219.722951][ T6415] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 219.722985][ T6415] ? __lock_acquire+0x7d40/0x7d40 [ 219.723014][ T6415] ? lock_chain_count+0x20/0x20 [ 219.723036][ T6415] ? __rwlock_init+0x140/0x140 [ 219.723060][ T6415] __find_next_entry+0x350/0x6b0 [ 219.739531][ T6415] ? lockdep_hardirqs_on+0x94/0x140 [ 219.739580][ T6415] ? trace_find_next_entry+0x3a0/0x3a0 [ 219.746203][ T6415] tracing_read_pipe+0x3b1/0xae0 [ 219.746246][ T6415] ? s_show+0x300/0x300 [ 219.746270][ T6415] vfs_read+0x2ff/0xd50 [ 219.757295][ T6415] ? __lock_acquire+0x7d40/0x7d40 [ 219.766738][ T6415] ? kernel_read+0x1e0/0x1e0 [ 219.766786][ T6415] ? mutex_lock_nested+0x17/0x20 [ 219.766808][ T6415] ? __fdget_pos+0x2bf/0x370 [ 219.766827][ T6415] ? ksys_read+0x70/0x260 [ 219.766850][ T6415] ksys_read+0x153/0x260 [ 219.793546][ T6415] ? vfs_write+0xd70/0xd70 [ 219.793602][ T6415] ? lockdep_hardirqs_on+0x94/0x140 [ 219.793635][ T6415] do_syscall_64+0x4c/0xa0 [ 219.793658][ T6415] ? clear_bhb_loop+0x30/0x80 [ 219.793683][ T6415] ? clear_bhb_loop+0x30/0x80 [ 219.793708][ T6415] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.812776][ C0] kcov: kcov_remote_start: handle = 100000000000002, context: softirq [ 219.814509][ T6415] RIP: 0033:0x7f147a3f22d9 [ 219.819481][ C0] kcov: kcov_start: t = ffff888022538000, size = 262144, area = ffffc90002059000 [ 219.823730][ T6415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.828274][ C0] kcov: kcov_move_area: ffffc90011204000 1048576 <= ffffc90002059000 19 [ 219.832930][ T6415] RSP: 002b:00007f147864a028 EFLAGS: 00000246 [ 219.851506][ T4277] usb usb2: bus auto-suspend, wakeup 1 [ 219.855789][ T6415] ORIG_RAX: 0000000000000000 [ 219.855803][ T6415] RAX: ffffffffffffffda RBX: 00007f147a679fa0 RCX: 00007f147a3f22d9 [ 219.855821][ T6415] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000007 [ 219.855837][ T6415] RBP: 00007f147a489888 R08: 0000000000000000 R09: 0000000000000000 [ 219.855851][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.855865][ T6415] R13: 00007f147a67a038 R14: 00007f147a679fa0 R15: 00007ffd79a5b3d8 [ 219.866168][ T4277] usb usb2: dummy_bus_suspend [ 219.869971][ T6415] [ 219.870015][ T6415] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 219.877902][ C0] virtqueue callback for ffff88814657d600 (ffffffff84450960) [ 219.879346][ T6415] CPU: 1 PID: 6415 Comm: syz.2.683 Not tainted syzkaller #0 [ 219.879370][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 219.879382][ T6415] Call Trace: [ 219.879391][ T6415] [ 219.879398][ T6415] dump_stack_lvl+0x188/0x250 [ 219.885641][ C0] virtqueue interrupt with no work for ffff88814657d500 [ 219.893714][ T6415] ? show_regs_print_info+0x20/0x20 [ 219.898134][ C0] virtqueue interrupt with no work for ffff88814657d400 [ 219.907264][ T6415] ? load_image+0x410/0x410 [ 219.927128][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.935257][ T6415] panic+0x2f8/0x850 [ 219.943649][ T6391] kcov: kcov_task_exit: t = ffff88801a7f3b80, kcov->t = ffff88801a7f3b80 [ 219.946782][ T6415] ? bpf_jit_dump+0xd0/0xd0 [ 219.986562][ T4277] Added buffer head 0 to ffff88814657d600 [ 219.991428][ T6415] ? rb_get_reader_page+0xac0/0xcd0 [ 219.991461][ T6415] __warn+0x248/0x2b0 [ 219.991486][ T6415] ? rb_get_reader_page+0xac0/0xcd0 [ 219.991507][ T6415] report_bug+0x1b9/0x2e0 [ 220.033810][ T4172] nf_conntrack: normal packet for ffff88802b2d0180 [ 220.035024][ T6415] handle_bug+0x3a/0x70 [ 220.038284][ T4172] tcp_in_window: START [ 220.042683][ T6415] exc_invalid_op+0x16/0x40 [ 220.042711][ T6415] asm_exc_invalid_op+0x16/0x20 [ 220.042736][ T6415] RIP: 0010:rb_get_reader_page+0xac0/0xcd0 [ 220.042761][ T6415] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 d7 67 42 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 65 69 42 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18 [ 220.049802][ T4172] tcp_in_window: [ 220.054926][ T6415] RSP: 0018:ffffc90003ba77c0 EFLAGS: 00010002 [ 220.054950][ T6415] RAX: 1ffff11002f0f101 RBX: 1ffff11002f0e876 RCX: ffffffff817c009b [ 220.054968][ T6415] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888017870408 [ 220.061977][ T4172] seq=292582142 ack=1280166394+(0) sack=1280166394+(0) win=24559 end=292582566 [ 220.066405][ T6415] RBP: ffffc90003ba7960 R08: ffff88801787040b R09: 1ffff11002f0e081 [ 220.066424][ T6415] R10: dffffc0000000000 R11: ffffed1002f0e082 R12: ffff888017878810 [ 220.072487][ T4172] tcp_in_window: sender end=292582142 maxend=295387646 maxwin=3143552 scale=7 receiver end=1280166394 maxend=1283309946 maxwin=2805504 scale=7 [ 220.076317][ T6415] R13: 000000000000006c R14: 1ffff11002f0e873 R15: ffff888017870400 [ 220.084853][ T4172] tcp_in_window: [ 220.089254][ T6415] ? rb_get_reader_page+0xabb/0xcd0 [ 220.095041][ T4172] seq=292582142 ack=1280166394+(0) sack=1280166394+(0) win=24559 end=292582566 [ 220.100198][ T6415] ? ring_buffer_read_page+0x12c0/0x12c0 [ 220.104250][ T4172] tcp_in_window: sender end=292582142 maxend=295387646 maxwin=3143552 scale=7 receiver end=1280166394 maxend=1283309946 maxwin=2805504 scale=7 [ 220.109406][ T6415] ? do_raw_spin_lock+0x128/0x2f0 [ 220.113837][ T4172] tcp_in_window: I=1 II=1 III=1 IV=1 [ 220.120258][ T6415] ? __rwlock_init+0x140/0x140 [ 220.124491][ T4172] tcp_in_window: res=1 sender end=292582566 maxend=295387646 maxwin=3143552 receiver end=1280166394 maxend=1283309946 maxwin=2805504 [ 220.128499][ T6415] rb_buffer_peek+0x5c/0x780 [ 220.133127][ T4172] tcp_conntracks: [ 220.137880][ T6415] ring_buffer_peek+0x1de/0x400 [ 220.143807][ T4172] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 220.163310][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.163313][ T6415] ? ring_buffer_iter_empty+0x340/0x340 [ 220.163338][ T6415] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 220.163367][ T6415] ? __lock_acquire+0x7d40/0x7d40 [ 220.205612][ T6418] kcov: kcov_task_exit: t = ffff888074289dc0, kcov->t = ffff888074289dc0 [ 220.206012][ T6415] ? lock_chain_count+0x20/0x20 [ 220.311798][ C0] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 13) [ 220.316452][ T6415] ? __rwlock_init+0x140/0x140 [ 220.316489][ T6415] __find_next_entry+0x350/0x6b0 [ 220.337708][ T4421] nf_conntrack: new packet for ffff88802bd79b00 [ 220.339423][ T6415] ? lockdep_hardirqs_on+0x94/0x140 [ 220.339474][ T6415] ? trace_find_next_entry+0x3a0/0x3a0 [ 220.345030][ T4421] nf_nat: Already setup manip DST for ct ffff88802bd79b00 (status bits 0x188) [ 220.353284][ T6415] tracing_read_pipe+0x3b1/0xae0 [ 220.353326][ T6415] ? s_show+0x300/0x300 [ 220.358198][ T4421] nf_nat: Already setup manip SRC for ct ffff88802bd79b00 (status bits 0x188) [ 220.369928][ T6415] vfs_read+0x2ff/0xd50 [ 220.369966][ T6415] ? __lock_acquire+0x7d40/0x7d40 [ 220.370004][ T6415] ? kernel_read+0x1e0/0x1e0 [ 220.391660][ C0] wireguard: wg1: Handshake for peer 21 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 220.396687][ T6415] ? mutex_lock_nested+0x17/0x20 [ 220.396716][ T6415] ? __fdget_pos+0x2bf/0x370 [ 220.396736][ T6415] ? ksys_read+0x70/0x260 [ 220.396760][ T6415] ksys_read+0x153/0x260 [ 220.414506][ T9] nf_conntrack: new packet for ffff88802bd8a600 [ 220.414986][ T6415] ? vfs_write+0xd70/0xd70 [ 220.424436][ T9] nf_nat: Already setup manip DST for ct ffff88802bd8a600 (status bits 0x188) [ 220.428277][ T6415] ? lockdep_hardirqs_on+0x94/0x140 [ 220.433500][ T9] nf_nat: Already setup manip SRC for ct ffff88802bd8a600 (status bits 0x188) [ 220.437904][ T6415] do_syscall_64+0x4c/0xa0 [ 220.505867][ T6415] ? clear_bhb_loop+0x30/0x80 [ 220.510489][ T4172] No more buffers in queue [ 220.510589][ T6415] ? clear_bhb_loop+0x30/0x80 [ 220.510620][ T6415] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.510643][ T6415] RIP: 0033:0x7f147a3f22d9 [ 220.510665][ T6415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.510685][ T6415] RSP: 002b:00007f147864a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.515526][ T4172] eth0: xmit ffff888019b9b4e8 42:01:0a:80:00:01 [ 220.520069][ T6415] RAX: ffffffffffffffda RBX: 00007f147a679fa0 RCX: 00007f147a3f22d9 [ 220.520088][ T6415] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000007 [ 220.520104][ T6415] RBP: 00007f147a489888 R08: 0000000000000000 R09: 0000000000000000 [ 220.520119][ T6415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.520133][ T6415] R13: 00007f147a67a038 R14: 00007f147a679fa0 R15: 00007ffd79a5b3d8 [ 220.526214][ T4172] Added buffer head 10 to ffff888023ced800 [ 220.526271][ C0] virtqueue callback for ffff888023ced800 (ffffffff854980c0) [ 220.530750][ T6415] [ 220.550400][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.627206][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.633640][ T6415] Kernel Offset: disabled [ 220.638326][ T6415] Rebooting in 86400 seconds..