last executing test programs: 32.752852628s ago: executing program 3 (id=104): syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000180)=0xe0b) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000000)={0x0, 0xe, 0xe0, {0xe0, 0x4, "6e8481fc130b9e100bd67a0632768fa654ea98c073ff88d7c59a55775e213efb5fab967da9126f17d267775df0a6882d0857b2646547c6260f039c08944501dbb246dec1fbacfefb4b312eafc91cb6cfe64f125c73b17f89e5431eb31d6e26c9f0f01f726b72b5febee53dae52d29d9b158230fd90d91e60209d90444558240d5cf1d558e975cc8e2435eca71684340ed769c20ef47f9f1da45e98ffa09072b3b544769738558aeff23f4f3f67e127df48b77db5cfdd98bc28dfbd9c26b7f9d125d52cefb0183fd3396eeb690bed01a9049e878a60174fb0c1ec3a42d59d"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc14}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x2, 0x2, "c263739d", "53db01b6"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x1, 0x0, 0x3, 0x0, 0x7, 0x8}}}, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x40, 0x9, 0xd, "8576378d9ff5c43c2dac1df08b"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x2, [0x0]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0xe}, &(0x7f0000000480)={0x40, 0xb, 0x2, "13bf"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000500)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000540)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000580)={0x40, 0x19, 0x2, "02a0"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x53}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x7}}) syz_usb_disconnect(0xffffffffffffffff) 29.634514783s ago: executing program 3 (id=117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a300000000090000000030a01020000000000000000020000000900010073797a3000000000700003005916920a2710ed6a83134b160a839ec8909d184c57"], 0xec}, 0x1, 0x1100000000000000}, 0x0) 29.29097426s ago: executing program 3 (id=119): r0 = syz_open_dev$video4linux(0x0, 0xffffffff, 0x2400) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x0, 0x0, 0x102, 0x6, {0x8001, 0x9, 0x53ac4a4c, 0x9}}) 29.073488406s ago: executing program 3 (id=120): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc087, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0x40}}}}}]}}]}}, 0x0) (async) r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f00000009c0)=0x10000, 0x4) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0x2b, {0x2b, 0x31, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f559626"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x8, 0x0, 0x7}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000007c0)={0x14, &(0x7f0000000740)={0x20, 0x11, 0x13, {0x13, 0x2a, "b5915ce7f0fd67b08ed1723503e86789cf"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x1c, &(0x7f0000000800)={0x0, 0x9, 0xee, "ce41599252a22ce7c28abdbafa3c6c2a5be35d01e643df85cb5a03ec06f47204431aa64b1f7bf6eac3fd3910ab08aed19235d1cc5634e48c37a8f7ab1f7930c59ef37a46ea144fa1bd41a6607d653325e661c7cf56fc38c4ae71f4d3a451fe489a052b55cc00e72d3aa2ebdc7030d9d9a422e6a56e44ea3fbf4b4dec25826d6d92b512783c30309eb369774dcb614055325de74d259ff4ce93b716fd1080b4c9d28b6299946e12fb678e90981f5ffe0f5c9d88a293d832688605bc4ff8c01bc0a1b3d796eebd9236bc5cca5c4876eb653ea19937da578e0aa9e3510f2672420ca85bd6fed9133ec9423468eec22f"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x7d}, &(0x7f0000000940)={0x0, 0x8, 0x1}}) (async) r4 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x20, 0xbe, 0x6, 0x7c}, {0x9, 0x5, 0x7, 0x2, 0x20, 0x2, 0x3, 0xfd}, {0x9, 0x5, 0xd, 0x3, 0x200, 0x2, 0xf, 0xe4}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x0, 0x9, 0xe, {0xe, 0x9, "03c0e1e96e424ba555a035c7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="401683000000c8dba5fa9a88e770c1fdca2486f7d8abf28bd5b5b892c2e8bfa5bff78b1838db3028dcce5d99388273edcc3470d4097d05cfc84e92b13d19f60813ba624e3d9fec3a04a8e479465fb11a6d8a79d776bc2437cc948ea264afa143cb53f236b33a0541ed462e80731831554aa0a028c18d4a8c9eda94294aa4ebcbfc7651c0df00c62613"], &(0x7f0000000280)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000006c0)={0x21, 0x0, 0x4, "11f78e25"}}) 28.856398783s ago: executing program 3 (id=122): recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40000100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0xa4}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) 28.337332517s ago: executing program 3 (id=125): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x2, &(0x7f000012d740)=[{0x8000000, 0x0, 0x0, 0x1, 0x80000000}, {0x2000000, 0x0, 0x0, 0x5, 0x8001}]}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, &(0x7f00000002c0)) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x105042, 0x0) vmsplice(r3, &(0x7f0000000440)=[{&(0x7f00000001c0)="4462b080bce68da55e690f0900000000000000a374ddfa1281d40c71b56c21624702dd9fe9c518012d964ce4b2b26caad557968ab04902e49822e2f3d66ab60bafb92f2eae6fed322f67006adb3d6ac10ed778a308a2696e517a6e96ace7302c2913085bc913f18e9aeb66dd8157c86c8d10e2df9b9e2eea4add0ecfe8e14d50de6ea57bd58c7b820542d28c2a5aa25b12e38561c1e307e2eb30f0139427180a9f2b0cfe364fe2257f4d5645d81792273c634bf2799adc9544392ec57f0832de11e082fd6c65198014fcd6c4e31914f0762df8173a41ef12bbc365186a88250fa65e0000", 0xe4}, {&(0x7f00000000c0)="d0042293add03b76e6", 0x9}, {&(0x7f00000007c0)="9ea89b2d1a13fc356a4da93406f448de8a8ada7eb70ecf18c0a62ba906f2eb9ac74b425f4a7df0d8f701a8562a10d94bc3e67100000000000000", 0x3a}, {&(0x7f0000000640)="a664a28c2da147080000ec419c58828aa334ad03f4a86aa901aaab4e0e91d3f8a9e41263363f271103a19be58b1e758674084429ad2334cdeac3397e52000000000000c2a542c43a8b9f06c978124658a8afa90972dc6c5e053333e5e77d835d86119e658ca7f6f6da8c8dcf65736ada", 0x70}, {&(0x7f0000000a80)="bd0da2f7c589ec1badcc71b5975b4763a7688846623cb5e9a0c67a796b8e0e1f4474a34f5695c05cbdfae5bcdcdf32ad26bd3bf42708d9dad8461b463e0856130cfd761c90ee4caf25348ca0a77da129b16836cbd809db5e3d2866334f31c61e29de7b5a6863d48d3443ce0506f3e96f6a756d8fcf441a2fdbfacc5d6548b4a78c0bca9f06dc7e28f18ca9b545bec6d94a4ca68841f9fd56e374e4f2c1dfee90caa3f1c7b0e65b2a13abe5ae7b95178c1032c17f210e0b663815c643f91567ce06e42dc0dbd0b5d714393993d7032ef2fdd3e2a8d74f470e4c0cf9e5", 0xdc}], 0x5, 0xd) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x80) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0xfffffffffffffffe, 0x400000000, 0x6}, 0x9, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x0, 0x0, 0xb7, 0x5, 0xfffffffe}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r6, @ANYRESDEC=r5, @ANYRES64=r2, @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x400d0}, 0x2404489c) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x200040c1) userfaultfd(0x800) 13.044649666s ago: executing program 32 (id=125): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x2, &(0x7f000012d740)=[{0x8000000, 0x0, 0x0, 0x1, 0x80000000}, {0x2000000, 0x0, 0x0, 0x5, 0x8001}]}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, &(0x7f00000002c0)) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x105042, 0x0) vmsplice(r3, &(0x7f0000000440)=[{&(0x7f00000001c0)="4462b080bce68da55e690f0900000000000000a374ddfa1281d40c71b56c21624702dd9fe9c518012d964ce4b2b26caad557968ab04902e49822e2f3d66ab60bafb92f2eae6fed322f67006adb3d6ac10ed778a308a2696e517a6e96ace7302c2913085bc913f18e9aeb66dd8157c86c8d10e2df9b9e2eea4add0ecfe8e14d50de6ea57bd58c7b820542d28c2a5aa25b12e38561c1e307e2eb30f0139427180a9f2b0cfe364fe2257f4d5645d81792273c634bf2799adc9544392ec57f0832de11e082fd6c65198014fcd6c4e31914f0762df8173a41ef12bbc365186a88250fa65e0000", 0xe4}, {&(0x7f00000000c0)="d0042293add03b76e6", 0x9}, {&(0x7f00000007c0)="9ea89b2d1a13fc356a4da93406f448de8a8ada7eb70ecf18c0a62ba906f2eb9ac74b425f4a7df0d8f701a8562a10d94bc3e67100000000000000", 0x3a}, {&(0x7f0000000640)="a664a28c2da147080000ec419c58828aa334ad03f4a86aa901aaab4e0e91d3f8a9e41263363f271103a19be58b1e758674084429ad2334cdeac3397e52000000000000c2a542c43a8b9f06c978124658a8afa90972dc6c5e053333e5e77d835d86119e658ca7f6f6da8c8dcf65736ada", 0x70}, {&(0x7f0000000a80)="bd0da2f7c589ec1badcc71b5975b4763a7688846623cb5e9a0c67a796b8e0e1f4474a34f5695c05cbdfae5bcdcdf32ad26bd3bf42708d9dad8461b463e0856130cfd761c90ee4caf25348ca0a77da129b16836cbd809db5e3d2866334f31c61e29de7b5a6863d48d3443ce0506f3e96f6a756d8fcf441a2fdbfacc5d6548b4a78c0bca9f06dc7e28f18ca9b545bec6d94a4ca68841f9fd56e374e4f2c1dfee90caa3f1c7b0e65b2a13abe5ae7b95178c1032c17f210e0b663815c643f91567ce06e42dc0dbd0b5d714393993d7032ef2fdd3e2a8d74f470e4c0cf9e5", 0xdc}], 0x5, 0xd) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x80) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0xfffffffffffffffe, 0x400000000, 0x6}, 0x9, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x0, 0x0, 0xb7, 0x5, 0xfffffffe}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r6, @ANYRESDEC=r5, @ANYRES64=r2, @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x400d0}, 0x2404489c) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x200040c1) userfaultfd(0x800) 8.970207581s ago: executing program 1 (id=214): setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) 8.499849224s ago: executing program 1 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 8.139284773s ago: executing program 1 (id=217): iopl(0x3) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0xb9104fe3dd834272) 8.000413361s ago: executing program 1 (id=218): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) 7.879929282s ago: executing program 0 (id=219): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x800, @loopback, 0x8}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) sendmsg$netlink(0xffffffffffffffff, 0x0, 0xc854) 7.399579591s ago: executing program 0 (id=220): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x12a, 0x80004100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0x8, 0x4, 0x5d5, 0xbfffb42c, 0x1, "353020000000ff00005b18d8e8022200", 0xb9b3, 0x2}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x38}, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r4 = fcntl$dupfd(r2, 0x406, r2) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) 6.662394744s ago: executing program 0 (id=223): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8051}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x0, 0x20000, 0x1000, &(0x7f000001b000/0x1000)=nil}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 6.498201798s ago: executing program 2 (id=224): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e22, 0x26cb, 0x4e21, 0x101, 0xa, 0xa0, 0xa0, 0x29}, {@in=@multicast2, 0x4d2, 0x3c}, @in6=@mcast2, {0x5a4c58b, 0x43, 0xffffffffffffff79, 0x4, 0x3, 0x4, 0x3, 0xf3}, {0x9, 0x2, 0x2000, 0x2}, {0x3, 0xffffffff, 0xfffffff8}, 0x70bd2d, 0x0, 0xa, 0x0, 0xc5, 0x10}}, 0xf0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 6.394363295s ago: executing program 2 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) munmap(&(0x7f00004a0000/0x2000)=nil, 0x2000) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x0, 0x1}}) 4.500338318s ago: executing program 2 (id=226): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000008780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@assoc={0x18, 0x117, 0x4, 0x401}, @iv={0x18}], 0x30}], 0x1, 0x4040010) 3.242620728s ago: executing program 2 (id=227): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[{0x10, 0x1, 0x4}], 0x10}}], 0x1, 0x0) 2.965621033s ago: executing program 1 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000140)='.\x00', 0x8000, 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x10001011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x8) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 2.965371759s ago: executing program 2 (id=229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) bind$netlink(r0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'ip6gre0\x00', 0x4000}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x841fa2e66efa8cfe) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, 0x0, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat(0xffffffffffffffff, 0x0, 0x103300, 0x40) syz_genetlink_get_family_id$tipc2(0x0, r6) sendmsg$TIPC_NL_BEARER_SET(r2, 0x0, 0x4000000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x490002, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0, 0x0, 0x0, {{0x6, 0x1, 0x24dd, 0x4, 0x8001, 0x100, {0x3, 0x9, 0x3, 0x5, 0x7, 0x7, 0x4, 0x2, 0xb, 0xc000, 0x9af, 0x0, 0x0, 0xb, 0xffffffff}}, {0x0, 0x18}}}, 0xa0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getdents(0xffffffffffffffff, 0x0, 0x40) 2.891426385s ago: executing program 0 (id=230): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x0, 0x1, 0x6}) 498.375943ms ago: executing program 1 (id=231): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 498.203634ms ago: executing program 0 (id=232): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) 130.223881ms ago: executing program 2 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x2, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000002840)=[{0x0}], 0x1) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/71, 0x79c5}, {&(0x7f0000000340)=""/76, 0x4c}], 0x2) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r6, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000) 0s ago: executing program 0 (id=234): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000001340)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.51' (ED25519) to the list of known hosts. [ 97.541764][ T1253] cfg80211: failed to load regulatory.db [ 100.601890][ T5597] cgroup: Unknown subsys name 'net' [ 100.853656][ T5597] cgroup: Unknown subsys name 'cpuset' [ 100.935923][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 103.059087][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.978546][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.982459][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.047105][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.051652][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.060698][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.068085][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.095640][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.099347][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.100811][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.101608][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.103225][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.108853][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.132714][ T4924] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.133247][ T4924] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.138177][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.143738][ T4924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.144181][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.145387][ T4924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.219051][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.221695][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.322041][ T5622] Bluetooth: hci1: command tx timeout [ 108.322241][ T5622] Bluetooth: hci3: command tx timeout [ 108.322338][ T5622] Bluetooth: hci0: command tx timeout [ 108.395426][ T5623] Bluetooth: hci2: command tx timeout [ 108.824627][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.830683][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.841746][ T5615] bridge_slave_0: entered allmulticast mode [ 108.844773][ T5615] bridge_slave_0: entered promiscuous mode [ 108.922751][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.923026][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.923275][ T5615] bridge_slave_1: entered allmulticast mode [ 108.927440][ T5615] bridge_slave_1: entered promiscuous mode [ 108.966814][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.967319][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.967659][ T5613] bridge_slave_0: entered allmulticast mode [ 108.970557][ T5613] bridge_slave_0: entered promiscuous mode [ 109.032002][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.032291][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.032547][ T5616] bridge_slave_0: entered allmulticast mode [ 109.056353][ T5616] bridge_slave_0: entered promiscuous mode [ 109.069123][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.069493][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.069796][ T5613] bridge_slave_1: entered allmulticast mode [ 109.072613][ T5613] bridge_slave_1: entered promiscuous mode [ 109.137377][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.137722][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.137957][ T5616] bridge_slave_1: entered allmulticast mode [ 109.140560][ T5616] bridge_slave_1: entered promiscuous mode [ 109.185541][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.185808][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.186264][ T5614] bridge_slave_0: entered allmulticast mode [ 109.188917][ T5614] bridge_slave_0: entered promiscuous mode [ 109.224790][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.274357][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.274767][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.275103][ T5614] bridge_slave_1: entered allmulticast mode [ 109.303033][ T5614] bridge_slave_1: entered promiscuous mode [ 109.321263][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.358357][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.413358][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.426012][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.490842][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.524505][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.537132][ T5615] team0: Port device team_slave_0 added [ 109.590181][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.594141][ T5615] team0: Port device team_slave_1 added [ 109.656996][ T5613] team0: Port device team_slave_0 added [ 109.705400][ T5616] team0: Port device team_slave_0 added [ 109.709366][ T5613] team0: Port device team_slave_1 added [ 109.764713][ T5616] team0: Port device team_slave_1 added [ 109.792642][ T5614] team0: Port device team_slave_0 added [ 109.809754][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.809770][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.809793][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.886717][ T5614] team0: Port device team_slave_1 added [ 109.888612][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.888625][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.888645][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.950098][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.950112][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.950133][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.024823][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.024837][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.024857][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.066429][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.066493][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.066574][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.129424][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.129439][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.129462][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.181763][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.181818][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.181888][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.395706][ T5623] Bluetooth: hci0: command tx timeout [ 110.395741][ T5623] Bluetooth: hci3: command tx timeout [ 110.395760][ T5623] Bluetooth: hci1: command tx timeout [ 110.485310][ T5622] Bluetooth: hci2: command tx timeout [ 110.637848][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.637885][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.637907][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.768985][ T5615] hsr_slave_0: entered promiscuous mode [ 110.771053][ T5615] hsr_slave_1: entered promiscuous mode [ 110.855033][ T5613] hsr_slave_0: entered promiscuous mode [ 110.861255][ T5613] hsr_slave_1: entered promiscuous mode [ 110.864910][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 110.865016][ T5613] Cannot create hsr debugfs directory [ 110.913946][ T5616] hsr_slave_0: entered promiscuous mode [ 110.918033][ T5616] hsr_slave_1: entered promiscuous mode [ 110.932776][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 110.932833][ T5616] Cannot create hsr debugfs directory [ 111.012053][ T5614] hsr_slave_0: entered promiscuous mode [ 111.014098][ T5614] hsr_slave_1: entered promiscuous mode [ 111.018319][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 111.018369][ T5614] Cannot create hsr debugfs directory [ 112.127352][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.203001][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.239986][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.260773][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.273729][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.313457][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.362030][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.390900][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.476272][ T5623] Bluetooth: hci3: command tx timeout [ 112.476312][ T5623] Bluetooth: hci0: command tx timeout [ 112.476542][ T5622] Bluetooth: hci1: command tx timeout [ 112.557104][ T5622] Bluetooth: hci2: command tx timeout [ 112.569492][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.603261][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.614546][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.641530][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.663112][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.703005][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.741800][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.762920][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.946799][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.998315][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.012942][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.048198][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.052872][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.078935][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.099346][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.150371][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.391544][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.431971][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.460825][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.503963][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.529977][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.561691][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.582553][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.623977][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.674839][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.845965][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.911559][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.911776][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.993817][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.994007][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.026038][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.170575][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.243307][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.259130][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.259333][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.333149][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.333283][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.428479][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.538503][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.538780][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.556494][ T60] Bluetooth: hci0: command tx timeout [ 114.556530][ T60] Bluetooth: hci3: command tx timeout [ 114.556587][ T5622] Bluetooth: hci1: command tx timeout [ 114.600382][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.636317][ T5622] Bluetooth: hci2: command tx timeout [ 114.674297][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.687198][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.849007][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.912661][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.912860][ T1242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.992736][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.992939][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.672539][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.256627][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.386917][ T5615] veth0_vlan: entered promiscuous mode [ 116.547508][ T5615] veth1_vlan: entered promiscuous mode [ 116.763243][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.777288][ T5616] veth0_vlan: entered promiscuous mode [ 116.863024][ T5615] veth0_macvtap: entered promiscuous mode [ 116.895428][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.943527][ T5615] veth1_macvtap: entered promiscuous mode [ 116.978238][ T5616] veth1_vlan: entered promiscuous mode [ 117.103831][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.222210][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.332573][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.344419][ T5613] veth0_vlan: entered promiscuous mode [ 117.358512][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.361466][ T5616] veth0_macvtap: entered promiscuous mode [ 117.383342][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.409003][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.448539][ T5616] veth1_macvtap: entered promiscuous mode [ 117.463699][ T5614] veth0_vlan: entered promiscuous mode [ 117.570863][ T5613] veth1_vlan: entered promiscuous mode [ 117.780678][ T5614] veth1_vlan: entered promiscuous mode [ 117.918823][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.973165][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.057384][ T151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.063424][ T151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.088988][ T151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.127438][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.127457][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.171814][ T151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.289687][ T5613] veth0_macvtap: entered promiscuous mode [ 118.440861][ T5613] veth1_macvtap: entered promiscuous mode [ 118.452280][ T5614] veth0_macvtap: entered promiscuous mode [ 118.488764][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.488785][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.664167][ T5614] veth1_macvtap: entered promiscuous mode [ 118.982577][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.000512][ T1242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.000537][ T1242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.038527][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.072773][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.112287][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.169820][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.193515][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.218770][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.243961][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.263711][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.296860][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.333329][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.374594][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.532212][ T1525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.532237][ T1525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.198169][ T1469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.198193][ T1469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.274241][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.274264][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.304019][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.461287][ T1242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.461309][ T1242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.549545][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 121.585937][ T5704] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 121.592802][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.713851][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 121.713888][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.713911][ T9] usb 1-1: Product: syz [ 121.713928][ T9] usb 1-1: Manufacturer: syz [ 121.713944][ T9] usb 1-1: SerialNumber: syz [ 121.959189][ T5704] usb 4-1: unable to get BOS descriptor or descriptor too short [ 122.004796][ T5704] usb 4-1: not running at top speed; connect to a high speed hub [ 122.011273][ T5704] usb 4-1: config 1 has an invalid interface number: 45 but max is 0 [ 122.011362][ T5704] usb 4-1: config 1 has no interface number 0 [ 122.011465][ T5704] usb 4-1: config 1 interface 45 has no altsetting 0 [ 122.098948][ T5704] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=2c.b5 [ 122.098983][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.099005][ T5704] usb 4-1: Product: syz [ 122.099020][ T5704] usb 4-1: Manufacturer: syz [ 122.099034][ T5704] usb 4-1: SerialNumber: syz [ 122.506002][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.506021][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.775880][ T5704] gspca_main: spca500-2.14.0 probing 046d:0900 [ 122.900947][ T5704] gspca_spca500: reg write: error -71 [ 122.909424][ T5704] gspca_spca500: reg write: error -71 [ 122.916179][ T5704] gspca_spca500: reg write: error -71 [ 122.924041][ T5704] gspca_spca500: reg write: error -71 [ 122.937855][ T5704] gspca_spca500: reg write: error -71 [ 122.939343][ T5704] gspca_spca500: reg write: error -71 [ 122.940450][ T5704] gspca_spca500: reg write: error -71 [ 122.940825][ T5704] gspca_spca500: reg write: error -71 [ 122.954871][ T5704] gspca_spca500: reg write: error -71 [ 122.958576][ T5704] gspca_spca500: reg write: error -71 [ 123.018020][ T5704] gspca_spca500: reg write: error -71 [ 123.018441][ T5704] gspca_spca500: reg write: error -71 [ 123.020126][ T5704] gspca_spca500: reg write: error -71 [ 123.020521][ T5704] gspca_spca500: reg write: error -71 [ 124.171558][ T5704] usb 4-1: USB disconnect, device number 2 [ 124.322783][ T5781] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.051610][ T5787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 125.738436][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 125.861920][ T5788] vivid-000: kernel_thread() failed [ 125.871760][ T9] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 126.391769][ T5797] process 'syz.2.7' launched '/dev/fd/4' with NULL argv: empty string added [ 127.170902][ T9] usb 1-1: USB disconnect, device number 2 [ 127.362756][ T5805] netlink: 393 bytes leftover after parsing attributes in process `syz.2.9'. [ 127.372983][ T5806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 127.696263][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 129.144290][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 130.238706][ T5851] veth1_to_hsr: mtu less than device minimum [ 130.259062][ T5850] veth1_to_hsr: mtu less than device minimum [ 130.382135][ T5761] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.624496][ T5761] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 130.624530][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.624552][ T5761] usb 2-1: Product: syz [ 130.624569][ T5761] usb 2-1: Manufacturer: syz [ 130.624585][ T5761] usb 2-1: SerialNumber: syz [ 131.017983][ T5860] ======================================================= [ 131.017983][ T5860] WARNING: The mand mount option has been deprecated and [ 131.017983][ T5860] and is ignored by this kernel. Remove the mand [ 131.017983][ T5860] option from the mount to silence this warning. [ 131.017983][ T5860] ======================================================= [ 131.136228][ T5765] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 131.136274][ T5765] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 131.136304][ T5765] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 131.136335][ T5765] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 131.136365][ T5765] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 131.136395][ T5765] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 131.136423][ T5765] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 131.136453][ T5765] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 131.136482][ T5765] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 131.136513][ T5765] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 131.253245][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.254737][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.353283][ T5765] hid-generic 0006:0008:0008.0001: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 131.397219][ T5761] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 131.397281][ T5761] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 131.397304][ T5761] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 131.412832][ T10] usb 4-1: device descriptor read/64, error -71 [ 131.459411][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.459442][ T9] usb 1-1: config 0 has no interfaces? [ 131.459474][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.459499][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.461348][ T5761] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 131.598294][ T5861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.613857][ T5861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.649675][ T9] usb 1-1: config 0 descriptor?? [ 131.733092][ T5761] usb 2-1: USB disconnect, device number 2 [ 131.788707][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.858470][ T5856] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.25'. [ 131.861587][ T5856] netlink: 256 bytes leftover after parsing attributes in process `syz.0.25'. [ 131.861623][ T5856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'. [ 131.946783][ T10] usb 4-1: device descriptor read/64, error -71 [ 132.056940][ T10] usb usb4-port1: attempt power cycle [ 132.242529][ T5876] netlink: 'syz.2.30': attribute type 10 has an invalid length. [ 132.242882][ T5876] team0: Device dummy0 is up. Set it down before adding it as a team port [ 132.441776][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.471111][ T10] usb 4-1: device descriptor read/8, error -71 [ 132.535536][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.725684][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.745569][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 132.746932][ T10] usb 4-1: device descriptor read/8, error -71 [ 132.748924][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 132.748964][ T9] usb 3-1: config 0 has no interface number 0 [ 132.754575][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 132.754612][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.754636][ T9] usb 3-1: Product: syz [ 132.754654][ T9] usb 3-1: Manufacturer: syz [ 132.754665][ T9] usb 3-1: SerialNumber: syz [ 132.834044][ T9] usb 3-1: config 0 descriptor?? [ 132.852702][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 132.878662][ T10] usb usb4-port1: unable to enumerate USB device [ 132.895418][ T5341] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.025363][ T5341] usb 2-1: device descriptor read/64, error -71 [ 133.049632][ T5876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.052948][ T5876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.186971][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 133.220882][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 133.306417][ T5341] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.460066][ T5876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.460682][ T5876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.488268][ T5341] usb 2-1: device descriptor read/64, error -71 [ 133.514783][ T5876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.559177][ T5876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.576134][ T5876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.30'. [ 133.602575][ T5341] usb usb2-port1: attempt power cycle [ 133.668459][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.708591][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.749568][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 133.779993][ T9] usb 3-1: USB disconnect, device number 2 [ 133.840207][ T5779] usb 1-1: USB disconnect, device number 3 [ 134.005402][ T5341] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.027274][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 134.041035][ T5341] usb 2-1: device descriptor read/8, error -71 [ 134.098861][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 134.099961][ T9] quatech2 3-1:0.51: device disconnected [ 134.296359][ T5341] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.321561][ T5341] usb 2-1: device descriptor read/8, error -71 [ 134.388463][ T5886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.34'. [ 134.425773][ T5341] usb usb2-port1: unable to enumerate USB device [ 134.559805][ T5890] veth0_to_team: entered promiscuous mode [ 134.593187][ T5892] loop2: detected capacity change from 0 to 7 [ 134.618155][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.619778][ T5893] capability: warning: `syz.2.35' uses 32-bit capabilities (legacy support in use) [ 134.786700][ T5892] Dev loop2: unable to read RDB block 7 [ 134.786735][ T5892] loop2: unable to read partition table [ 134.786917][ T5892] loop2: partition table beyond EOD, truncated [ 134.787001][ T5892] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 134.792399][ T10] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 134.792431][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.792454][ T10] usb 4-1: config 0 has no interface number 0 [ 134.806903][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 134.806933][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.806951][ T10] usb 4-1: Product: syz [ 134.806965][ T10] usb 4-1: Manufacturer: syz [ 134.806978][ T10] usb 4-1: SerialNumber: syz [ 134.933453][ T10] usb 4-1: config 0 descriptor?? [ 135.081797][ T10] ims_pcu 4-1:0.41: Missing CDC union descriptor [ 135.081866][ T10] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22 [ 135.150369][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.151140][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.256605][ T10] usb 4-1: USB disconnect, device number 7 [ 135.392824][ T5901] FAULT_INJECTION: forcing a failure. [ 135.392824][ T5901] name failslab, interval 1, probability 0, space 0, times 1 [ 135.392866][ T5901] CPU: 1 UID: 0 PID: 5901 Comm: syz.0.39 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 135.392890][ T5901] Tainted: [L]=SOFTLOCKUP [ 135.392895][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.392913][ T5901] Call Trace: [ 135.392923][ T5901] [ 135.392930][ T5901] dump_stack_lvl+0xe8/0x150 [ 135.392957][ T5901] should_fail_ex+0x46b/0x600 [ 135.392990][ T5901] should_failslab+0xa8/0x100 [ 135.393015][ T5901] __kmalloc_noprof+0xdf/0x7b0 [ 135.393037][ T5901] ? tomoyo_encode+0x28b/0x550 [ 135.393061][ T5901] tomoyo_encode+0x28b/0x550 [ 135.393086][ T5901] tomoyo_realpath_from_path+0x58d/0x5d0 [ 135.393117][ T5901] tomoyo_path_perm+0x283/0x560 [ 135.393145][ T5901] ? tomoyo_path_perm+0x251/0x560 [ 135.393171][ T5901] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 135.393224][ T5901] ? do_raw_spin_lock+0x12b/0x2f0 [ 135.393255][ T5901] security_inode_getattr+0x12b/0x310 [ 135.393280][ T5901] vfs_getattr+0x23/0x70 [ 135.393299][ T5901] loop_assign_backing_file+0x286/0x4c0 [ 135.393330][ T5901] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 135.393376][ T5901] ? __asan_memcpy+0x40/0x70 [ 135.393393][ T5901] ? loop_set_status_from_info+0x185/0x250 [ 135.393424][ T5901] loop_configure+0x84a/0xdf0 [ 135.393459][ T5901] ? __pfx_loop_configure+0x10/0x10 [ 135.393511][ T5901] lo_ioctl+0xaaf/0x1fc0 [ 135.393539][ T5901] ? __lock_acquire+0x6b5/0x2d10 [ 135.393562][ T5901] ? __pfx_lo_ioctl+0x10/0x10 [ 135.393587][ T5901] ? ktime_get+0x45/0x220 [ 135.393603][ T5901] ? lock_acquire+0x106/0x350 [ 135.393631][ T5901] ? ktime_get+0x45/0x220 [ 135.393650][ T5901] ? ktime_get+0x45/0x220 [ 135.393668][ T5901] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 135.393689][ T5901] ? ktime_get+0x1f5/0x220 [ 135.393708][ T5901] ? lapic_next_event+0x11/0x20 [ 135.393735][ T5901] ? clockevents_program_event+0x491/0x630 [ 135.393763][ T5901] ? __pfx_clockevents_program_event+0x10/0x10 [ 135.393791][ T5901] ? __lock_acquire+0x6b5/0x2d10 [ 135.393817][ T5901] ? __lock_acquire+0x6b5/0x2d10 [ 135.393839][ T5901] ? __lock_acquire+0x6b5/0x2d10 [ 135.393866][ T5901] ? unwind_next_frame+0xa6/0x2550 [ 135.393896][ T5901] ? unwind_next_frame+0xa6/0x2550 [ 135.393921][ T5901] ? is_bpf_text_address+0x26/0x2b0 [ 135.393953][ T5901] ? is_bpf_text_address+0x26/0x2b0 [ 135.393979][ T5901] ? is_bpf_text_address+0x292/0x2b0 [ 135.394000][ T5901] ? is_bpf_text_address+0x26/0x2b0 [ 135.394025][ T5901] ? kernel_text_address+0xa5/0xe0 [ 135.394048][ T5901] ? __kernel_text_address+0xd/0x30 [ 135.394068][ T5901] ? unwind_get_return_address+0x4d/0x90 [ 135.394092][ T5901] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 135.394110][ T5901] ? arch_stack_walk+0xfb/0x150 [ 135.394144][ T5901] ? stack_trace_save+0xa9/0x100 [ 135.394161][ T5901] ? __pfx_stack_trace_save+0x10/0x10 [ 135.394177][ T5901] ? kasan_save_free_info+0x46/0x50 [ 135.394207][ T5901] ? stack_depot_save_flags+0x33/0x810 [ 135.394240][ T5901] ? kasan_save_track+0x4f/0x80 [ 135.394258][ T5901] ? kasan_save_track+0x3e/0x80 [ 135.394275][ T5901] ? kasan_save_free_info+0x46/0x50 [ 135.394300][ T5901] ? __kasan_slab_free+0x5c/0x80 [ 135.394319][ T5901] ? kfree+0x1c5/0x6c0 [ 135.394335][ T5901] ? tomoyo_path_number_perm+0x501/0x630 [ 135.394361][ T5901] ? security_file_ioctl+0xc3/0x2a0 [ 135.394385][ T5901] ? __se_sys_ioctl+0x47/0x170 [ 135.394409][ T5901] ? do_syscall_64+0x174/0x580 [ 135.394434][ T5901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.394456][ T5901] ? __asan_memset+0x22/0x50 [ 135.394473][ T5901] ? blk_get_meta_cap+0x16d/0x7a0 [ 135.394504][ T5901] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 135.394538][ T5901] ? blkdev_common_ioctl+0x14b7/0x3240 [ 135.394562][ T5901] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 135.394581][ T5901] ? kasan_quarantine_put+0xbb/0x1f0 [ 135.394607][ T5901] ? tomoyo_path_number_perm+0x219/0x630 [ 135.394635][ T5901] ? tomoyo_path_number_perm+0x219/0x630 [ 135.394665][ T5901] ? do_vfs_ioctl+0x117b/0x1540 [ 135.394722][ T5901] ? __pfx_lo_ioctl+0x10/0x10 [ 135.394754][ T5901] blkdev_ioctl+0x5e6/0x750 [ 135.394774][ T5901] ? __pfx_blkdev_ioctl+0x10/0x10 [ 135.394790][ T5901] ? __fget_files+0x2a/0x420 [ 135.394813][ T5901] ? bpf_lsm_file_ioctl+0x9/0x20 [ 135.394839][ T5901] ? __pfx_blkdev_ioctl+0x10/0x10 [ 135.394856][ T5901] __se_sys_ioctl+0xff/0x170 [ 135.394881][ T5901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.394900][ T5901] do_syscall_64+0x174/0x580 [ 135.394925][ T5901] ? trace_irq_disable+0x3b/0x140 [ 135.394944][ T5901] ? clear_bhb_loop+0x40/0x90 [ 135.394965][ T5901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.394983][ T5901] RIP: 0033:0x7ff1802fce59 [ 135.395005][ T5901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.395019][ T5901] RSP: 002b:00007ff17e54e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.395037][ T5901] RAX: ffffffffffffffda RBX: 00007ff180575fa0 RCX: 00007ff1802fce59 [ 135.395049][ T5901] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 135.395060][ T5901] RBP: 00007ff17e54e090 R08: 0000000000000000 R09: 0000000000000000 [ 135.395070][ T5901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.395080][ T5901] R13: 00007ff180576038 R14: 00007ff180575fa0 R15: 00007ffd09bac3d8 [ 135.395106][ T5901] [ 135.395126][ T5901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.562546][ T5901] loop8: detected capacity change from 0 to 7 [ 135.633819][ T5901] Buffer I/O error on dev loop8, logical block 0, async page read [ 135.634604][ T5901] Buffer I/O error on dev loop8, logical block 0, async page read [ 135.635959][ T5901] Buffer I/O error on dev loop8, logical block 0, async page read [ 135.648662][ T5901] Buffer I/O error on dev loop8, logical block 0, async page read [ 135.685590][ T5901] Buffer I/O error on dev loop8, logical block 0, async page read [ 135.686507][ T5901] Buffer I/O error on dev loop8, logical block 0, async page read [ 135.689244][ T5901] Buffer I/O error on dev loop8, logical block 0, async page read [ 135.689501][ T5901] ldm_validate_partition_table(): Disk read failed. [ 135.689667][ T5901] Buffer I/O error on dev loop8, logical block 0, async page read [ 135.690146][ T5901] Buffer I/O error on dev loop8, logical block 0, async page read [ 135.690813][ T5901] Buffer I/O error on dev loop8, logical block 0, async page read [ 135.693676][ T5901] Dev loop8: unable to read RDB block 0 [ 135.694910][ T5901] loop8: unable to read partition table [ 135.702525][ T5901] loop8: partition table beyond EOD, truncated [ 135.702653][ T5901] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 136.430364][ T5910] gfs2: error -5 reading superblock [ 136.739800][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 136.778154][ T5915] 9p: Bad value for 'rfdno' [ 137.003826][ T5908] Zero length message leads to an empty skb [ 137.057815][ T822] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 137.295364][ T822] usb 2-1: Using ep0 maxpacket: 16 [ 137.300489][ T822] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 137.300519][ T822] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 137.300540][ T822] usb 2-1: config 4 has no interface number 0 [ 137.300586][ T822] usb 2-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.300615][ T822] usb 2-1: config 4 interface 51 has no altsetting 0 [ 137.308338][ T822] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 137.318773][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.318802][ T822] usb 2-1: Product: syz [ 137.318818][ T822] usb 2-1: Manufacturer: syz [ 137.318834][ T822] usb 2-1: SerialNumber: syz [ 137.562662][ T822] cdc_eem 2-1:4.51: probe with driver cdc_eem failed with error -22 [ 137.694477][ T5341] usb 2-1: USB disconnect, device number 7 [ 137.825320][ T5779] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 137.935912][ T5927] netlink: 'syz.0.47': attribute type 10 has an invalid length. [ 138.038576][ T5779] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 138.038608][ T5779] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 138.043987][ T5779] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 138.044027][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.044050][ T5779] usb 4-1: Product: syz [ 138.044066][ T5779] usb 4-1: Manufacturer: syz [ 138.044081][ T5779] usb 4-1: SerialNumber: syz [ 138.260658][ T5341] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 138.370597][ T5924] netlink: 80 bytes leftover after parsing attributes in process `syz.3.46'. [ 138.411148][ T5341] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 138.411183][ T5341] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 138.414791][ T5341] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 138.414826][ T5341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.414849][ T5341] usb 1-1: Product: syz [ 138.414865][ T5341] usb 1-1: Manufacturer: syz [ 138.414882][ T5341] usb 1-1: SerialNumber: syz [ 138.525076][ T5341] usb 1-1: config 0 descriptor?? [ 138.532031][ T5928] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.657377][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.657880][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.744544][ T5927] team0: Device wg2 is of different type [ 138.769857][ T5928] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.991076][ T5779] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 138.992731][ T5928] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.992909][ T5928] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 139.309664][ T5779] dvb_usb_af9015 4-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 139.313238][ T5779] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 139.313368][ T5779] dvb_usb_af9035 4-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 139.361746][ T5779] usb 4-1: USB disconnect, device number 8 [ 139.702743][ T5341] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 139.930960][ T5913] syz.2.43 (5913) used greatest stack depth: 17888 bytes left [ 140.114262][ T5341] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 140.334922][ T5954] comedi: valid board names for 8255 driver are: [ 140.334940][ T5954] 8255 [ 140.334948][ T5954] comedi: valid board names for vmk80xx driver are: [ 140.334958][ T5954] vmk80xx [ 140.334966][ T5954] comedi: valid board names for usbduxsigma driver are: [ 140.334976][ T5954] usbduxsigma [ 140.334984][ T5954] comedi: valid board names for usbduxfast driver are: [ 140.334993][ T5954] usbduxfast [ 140.335000][ T5954] comedi: valid board names for usbdux driver are: [ 140.335009][ T5954] usbdux [ 140.335017][ T5954] comedi: valid board names for ni6501 driver are: [ 140.335025][ T5954] ni6501 [ 140.335032][ T5954] comedi: valid board names for dt9812 driver are: [ 140.335041][ T5954] dt9812 [ 140.335048][ T5954] comedi: valid board names for ni_labpc_cs driver are: [ 140.335057][ T5954] ni_labpc_cs [ 140.335065][ T5954] comedi: valid board names for ni_daq_700 driver are: [ 140.335075][ T5954] ni_daq_700 [ 140.335082][ T5954] comedi: valid board names for labpc_pci driver are: [ 140.335092][ T5954] labpc_pci [ 140.335099][ T5954] comedi: valid board names for adl_pci9118 driver are: [ 140.335109][ T5954] pci9118dg [ 140.335115][ T5954] pci9118hg [ 140.335122][ T5954] pci9118hr [ 140.335129][ T5954] comedi: valid board names for 8255_pci driver are: [ 140.422784][ T5954] 8255_pci [ 140.422814][ T5954] comedi: valid board names for s526 driver are: [ 140.422825][ T5954] s526 [ 140.422832][ T5954] comedi: valid board names for multiq3 driver are: [ 140.422843][ T5954] multiq3 [ 140.422851][ T5954] comedi: valid board names for pcmuio driver are: [ 140.422869][ T5954] pcmuio48 [ 140.422890][ T5954] pcmuio96 [ 140.422912][ T5954] comedi: valid board names for pcmmio driver are: [ 140.422944][ T5954] pcmmio [ 140.422959][ T5954] comedi: valid board names for pcmda12 driver are: [ 140.422990][ T5954] pcmda12 [ 140.423011][ T5954] comedi: valid board names for pcmad driver are: [ 140.423035][ T5954] pcmad12 [ 140.423055][ T5954] pcmad16 [ 140.423080][ T5954] comedi: valid board names for ni_labpc driver are: [ 140.423104][ T5954] lab-pc-1200 [ 140.423126][ T5954] lab-pc-1200ai [ 140.423147][ T5954] lab-pc+ [ 140.423169][ T5954] comedi: valid board names for atmio16 driver are: [ 140.423192][ T5954] atmio16 [ 140.423213][ T5954] atmio16d [ 140.423269][ T5954] comedi: valid board names for ni_at_ao driver are: [ 140.423299][ T5954] at-ao-6 [ 140.423313][ T5954] at-ao-10 [ 140.423345][ T5954] comedi: valid board names for ni_at_a2150 driver are: [ 140.423375][ T5954] ni_at_a2150 [ 140.423396][ T5954] comedi: valid board names for adq12b driver are: [ 140.423421][ T5954] adq12b [ 140.423442][ T5954] comedi: valid board names for mpc624 driver are: [ 140.423465][ T5954] mpc624 [ 140.423486][ T5954] comedi: valid board names for c6xdigio driver are: [ 140.423517][ T5954] c6xdigio [ 140.423537][ T5954] comedi: valid board names for aio_iiro_16 driver are: [ 140.423561][ T5954] aio_iiro_16 [ 140.423582][ T5954] comedi: valid board names for aio_aio12_8 driver are: [ 140.423606][ T5954] aio_aio12_8 [ 140.423627][ T5954] aio_ai12_8 [ 140.423648][ T5954] aio_ao12_4 [ 140.423663][ T5954] comedi: valid board names for fl512 driver are: [ 140.423693][ T5954] fl512 [ 140.423714][ T5954] comedi: valid board names for dmm32at driver are: [ 140.423737][ T5954] dmm32at [ 140.423752][ T5954] comedi: valid board names for dt282x driver are: [ 140.423775][ T5954] dt2821 [ 140.423796][ T5954] dt2821-f [ 140.423810][ T5954] dt2821-g [ 140.423831][ T5954] dt2823 [ 140.423846][ T5954] dt2824-pgh [ 140.423867][ T5954] dt2824-pgl [ 140.423881][ T5954] dt2825 [ 140.423902][ T5954] dt2827 [ 140.423922][ T5954] dt2828 [ 140.423944][ T5954] dt2829 [ 140.423964][ T5954] dt21-ez [ 140.423985][ T5954] dt23-ez [ 140.423999][ T5954] dt24-ez [ 140.424020][ T5954] dt24-ez-pgl [ 140.424046][ T5954] comedi: valid board names for dt2817 driver are: [ 140.424057][ T5954] dt2817 [ 140.424064][ T5954] comedi: valid board names for dt2815 driver are: [ 140.424074][ T5954] dt2815 [ 140.424081][ T5954] comedi: valid board names for dt2814 driver are: [ 140.424114][ T5954] dt2814 [ 140.424137][ T5954] comedi: valid board names for dt2811 driver are: [ 140.424166][ T5954] dt2811-pgh [ 140.424193][ T5954] dt2811-pgl [ 140.424225][ T5954] comedi: valid board names for dt2801 driver are: [ 140.424257][ T5954] dt2801 [ 140.424284][ T5954] comedi: valid board names for das6402 driver are: [ 140.424309][ T5954] das6402-12 [ 140.424339][ T5954] das6402-16 [ 140.424360][ T5954] comedi: valid board names for das1800 driver are: [ 140.424391][ T5954] das-1701st [ 140.424412][ T5954] das-1701st-da [ 140.424426][ T5954] das-1702st [ 140.424447][ T5954] das-1702st-da [ 140.424468][ T5954] das-1702hr [ 140.424494][ T5954] das-1702hr-da [ 140.424515][ T5954] das-1701ao [ 140.424536][ T5954] das-1702ao [ 140.424550][ T5954] das-1801st [ 140.424565][ T5954] das-1801st-da [ 140.424574][ T5954] das-1802st [ 140.424581][ T5954] das-1802st-da [ 140.424589][ T5954] das-1802hr [ 140.424597][ T5954] das-1802hr-da [ 140.424620][ T5954] das-1801hc [ 140.424641][ T5954] das-1802hc [ 140.424663][ T5954] das-1801ao [ 140.479018][ T5954] das-1802ao [ 140.479061][ T5954] comedi: valid board names for das800 driver are: [ 140.479094][ T5954] das-800 [ 140.479115][ T5954] cio-das800 [ 140.479137][ T5954] das-801 [ 140.479151][ T5954] cio-das801 [ 140.479171][ T5954] das-802 [ 140.479192][ T5954] cio-das802 [ 140.479212][ T5954] cio-das802/16 [ 140.479226][ T5954] comedi: valid board names for isa-das08 driver are: [ 140.479267][ T5954] isa-das08 [ 140.479289][ T5954] das08-pgm [ 140.479318][ T5954] das08-pgh [ 140.479339][ T5954] das08-pgl [ 140.479353][ T5954] das08-aoh [ 140.479373][ T5954] das08-aol [ 140.479394][ T5954] das08-aom [ 140.479413][ T5954] das08/jr-ao [ 140.479434][ T5954] das08jr-16-ao [ 140.479448][ T5954] pc104-das08 [ 140.479469][ T5954] das08jr/16 [ 140.479490][ T5954] comedi: valid board names for das16m1 driver are: [ 140.479520][ T5954] das16m1 [ 140.479534][ T5954] comedi: valid board names for dac02 driver are: [ 140.479565][ T5954] dac02 [ 140.479585][ T5954] comedi: valid board names for rti802 driver are: [ 140.479608][ T5954] rti802 [ 140.479629][ T5954] comedi: valid board names for rti800 driver are: [ 140.479652][ T5954] rti800 [ 140.479672][ T5954] rti815 [ 140.479693][ T5954] comedi: valid board names for pcm3724 driver are: [ 140.479709][ T5954] pcm3724 [ 140.479729][ T5954] comedi: valid board names for pcl818 driver are: [ 140.479753][ T5954] pcl818l [ 140.479767][ T5954] pcl818h [ 140.479780][ T5954] pcl818hd [ 140.479800][ T5954] pcl818hg [ 140.479815][ T5954] pcl818 [ 140.479831][ T5954] pcl718 [ 140.479856][ T5954] pcm3718 [ 140.479884][ T5954] comedi: valid board names for pcl816 driver are: [ 140.480349][ T5954] pcl816 [ 140.480364][ T5954] pcl814b [ 140.480372][ T5954] comedi: valid board names for pcl812 driver are: [ 140.480398][ T5954] pcl812 [ 140.480418][ T5954] pcl812pg [ 140.480432][ T5954] acl8112pg [ 140.480452][ T5954] acl8112dg [ 140.480473][ T5954] acl8112hg [ 140.480494][ T5954] a821pgl [ 140.480514][ T5954] a821pglnda [ 140.480528][ T5954] a821pgh [ 140.480549][ T5954] a822pgl [ 140.480570][ T5954] a822pgh [ 140.480584][ T5954] a823pgl [ 140.480591][ T5954] a823pgh [ 140.480598][ T5954] pcl813 [ 140.480605][ T5954] pcl813b [ 140.480620][ T5954] acl8113 [ 140.480662][ T5954] iso813 [ 140.480726][ T5954] acl8216 [ 140.480740][ T5954] a826pg [ 140.480754][ T5954] comedi: valid board names for pcl730 driver are: [ 140.480776][ T5954] pcl730 [ 140.480796][ T5954] iso730 [ 140.480810][ T5954] acl7130 [ 140.480824][ T5954] pcm3730 [ 140.480844][ T5954] pcl725 [ 140.480858][ T5954] p8r8dio [ 140.487953][ T5954] acl7225b [ 140.487986][ T5954] p16r16dio [ 140.488010][ T5954] pcl733 [ 140.488031][ T5954] pcl734 [ 140.488052][ T5954] opmm-1616-xt [ 140.488071][ T5954] pearl-mm-p [ 140.488085][ T5954] ir104-pbf [ 140.488107][ T5954] comedi: valid board names for pcl726 driver are: [ 140.488136][ T5954] pcl726 [ 140.488158][ T5954] pcl727 [ 140.488177][ T5954] pcl728 [ 140.488191][ T5954] acl6126 [ 140.488211][ T5954] acl6128 [ 140.488231][ T5954] comedi: valid board names for pcl724 driver are: [ 140.488254][ T5954] pcl724 [ 140.488273][ T5954] pcl722 [ 140.488293][ T5954] pcl731 [ 140.488315][ T5954] acl7122 [ 140.488329][ T5954] acl7124 [ 140.488341][ T5954] pet48dio [ 140.488362][ T5954] pcmio48 [ 140.488375][ T5954] onyx-mm-dio [ 140.488396][ T5954] comedi: valid board names for pcl711 driver are: [ 140.488434][ T5954] pcl711 [ 140.488461][ T5954] pcl711b [ 140.488487][ T5954] acl8112hg [ 140.488508][ T5954] acl8112dg [ 140.488535][ T5954] comedi: valid board names for amplc_pc263 driver are: [ 140.488565][ T5954] pc263 [ 140.488579][ T5954] comedi: valid board names for amplc_pc236 driver are: [ 140.488602][ T5954] pc36at [ 140.488622][ T5954] comedi: valid board names for amplc_dio200 driver are: [ 140.488652][ T5954] pc212e [ 140.488665][ T5954] pc214e [ 140.488685][ T5954] pc215e [ 140.488698][ T5954] pc218e [ 140.488717][ T5954] pc272e [ 140.488737][ T5954] comedi: valid board names for comedi_parport driver are: [ 140.488760][ T5954] comedi_parport [ 140.488780][ T5954] comedi: valid board names for comedi_test driver are: [ 140.488802][ T5954] comedi_test [ 140.488827][ T5954] comedi: valid board names for comedi_bond driver are: [ 140.488849][ T5954] comedi_bond [ 141.540118][ T5779] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 141.703213][ T5963] loop8: detected capacity change from 0 to 7 [ 141.704906][ T5963] buffer_io_error: 9 callbacks suppressed [ 141.704923][ T5963] Buffer I/O error on dev loop8, logical block 0, async page read [ 141.705038][ T5963] Buffer I/O error on dev loop8, logical block 0, async page read [ 141.734137][ T5963] Buffer I/O error on dev loop8, logical block 0, async page read [ 141.734274][ T5963] Buffer I/O error on dev loop8, logical block 0, async page read [ 141.734399][ T5963] Buffer I/O error on dev loop8, logical block 0, async page read [ 141.734659][ T5963] Buffer I/O error on dev loop8, logical block 0, async page read [ 141.734771][ T5963] Buffer I/O error on dev loop8, logical block 0, async page read [ 141.734844][ T5963] ldm_validate_partition_table(): Disk read failed. [ 141.734891][ T5963] Buffer I/O error on dev loop8, logical block 0, async page read [ 141.794030][ T5963] Buffer I/O error on dev loop8, logical block 0, async page read [ 141.794145][ T5963] Buffer I/O error on dev loop8, logical block 0, async page read [ 141.794305][ T5963] Dev loop8: unable to read RDB block 0 [ 141.794579][ T5963] loop8: unable to read partition table [ 141.794794][ T5963] loop8: partition table beyond EOD, truncated [ 141.794817][ T5963] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 141.940699][ T5718] usb 1-1: USB disconnect, device number 4 [ 142.085044][ T5965] loop2: detected capacity change from 0 to 7 [ 142.095355][ T5779] usb 3-1: Using ep0 maxpacket: 32 [ 142.109096][ T5779] usb 3-1: config index 0 descriptor too short (expected 1042, got 18) [ 142.109131][ T5779] usb 3-1: config 2 has too many interfaces: 249, using maximum allowed: 32 [ 142.109156][ T5779] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 249 [ 142.109216][ T5779] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 142.109245][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.197178][ T5965] Dev loop2: unable to read RDB block 7 [ 142.197230][ T5965] loop2: unable to read partition table [ 142.197455][ T5965] loop2: partition table beyond EOD, truncated [ 142.197476][ T5965] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 142.234526][ T5779] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 142.826693][ T5779] usb 3-1: USB disconnect, device number 3 [ 143.083022][ T5718] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.362934][ T5718] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 143.362992][ T5718] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.363019][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.404234][ T5718] usb 1-1: config 0 descriptor?? [ 143.424644][ T5977] tmpfs: Invalid uid '0x00000000ffffffff' [ 143.472772][ T5718] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 144.018914][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.019542][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.052307][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 144.152118][ T32] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 144.326120][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.332713][ T32] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 144.365949][ T32] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 144.365988][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.366011][ T32] usb 4-1: Product: 潊风㘄⪈갯ꩊ勼Ḽ㾤㬓譿奩稜㙋≤혴ﮔ뻩戉঒傁㱑돻婝⚆딁ꇾ㔂ᢛ덒჈櫇곅⻐볂䆴Ⱞꕲↅ링덹킶峑䥌፟撝㪡蹚䫕䉃聲ꖷ껽郯嘋㛤朎刖ꨦⳁ㘋ぞꡐ觜⼐斴脳雷篘뎶੺ⲝ훩螏㡔醕ﰰ腐卬 [ 144.366036][ T32] usb 4-1: Manufacturer: ❨牛絲薌ᵳ麲䶚畨稷熘䆭㿛緅࠾鶯闸ࡢ샼죟ᤛ鵬䙽戧⮢챉躵屻ẉ西⟕擀驳㺏᥵ⶍᗖ [ 144.366053][ T32] usb 4-1: SerialNumber: ⱀ [ 144.591872][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.592536][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.709650][ T32] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 145.045114][ T5999] syzkaller1: entered promiscuous mode [ 145.047683][ T5999] syzkaller1: entered allmulticast mode [ 145.138994][ T6005] loop8: detected capacity change from 0 to 7 [ 145.143321][ T6005] ldm_validate_partition_table(): Disk read failed. [ 145.143750][ T6005] Dev loop8: unable to read RDB block 0 [ 145.144181][ T6005] loop8: unable to read partition table [ 145.144417][ T6005] loop8: partition table beyond EOD, truncated [ 145.145316][ T6005] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 145.447479][ T32] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 145.556977][ T5718] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.705335][ T5718] usb 3-1: Using ep0 maxpacket: 16 [ 145.719628][ T32] usb 4-1: USB disconnect, device number 9 [ 145.730852][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.750635][ T5718] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 145.750670][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.750692][ T5718] usb 3-1: Product: syz [ 145.750709][ T5718] usb 3-1: Manufacturer: syz [ 145.750725][ T5718] usb 3-1: SerialNumber: syz [ 145.804479][ T5718] usb 3-1: config 0 descriptor?? [ 145.986450][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.987383][ T5765] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 146.022837][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.024432][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.068472][ T5761] usb 3-1: USB disconnect, device number 4 [ 146.146589][ T5765] usb 2-1: not running at top speed; connect to a high speed hub [ 146.147844][ T5765] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 624, setting to 64 [ 146.147881][ T5765] usb 2-1: config 1 interface 0 has no altsetting 0 [ 146.158473][ T5765] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 146.158506][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.158529][ T5765] usb 2-1: Product: syz [ 146.158544][ T5765] usb 2-1: Manufacturer: syz [ 146.158560][ T5765] usb 2-1: SerialNumber: syz [ 146.222256][ T32] usb 1-1: USB disconnect, device number 5 [ 146.249483][ T6012] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 146.393669][ T6015] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 146.393907][ T6015] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 146.481636][ T5765] usblp0: Disabling reads from problematic bidirectional printer [ 146.558126][ T5765] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 4 proto 1 vid 0x03F0 pid 0x0004 [ 146.592567][ T5765] usb 2-1: USB disconnect, device number 8 [ 146.628119][ T5765] usblp0: removed [ 147.261231][ T6034] tipc: Can't bind to reserved service type 0 [ 147.535382][ T5761] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 147.585113][ T6045] overlayfs: missing 'lowerdir' [ 147.608610][ T38] audit: type=1326 audit(1780583590.863:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.3.79" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde4e61ce59 code=0x0 [ 147.662478][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 147.712711][ T5761] usb 2-1: device descriptor read/64, error -71 [ 147.975350][ T5761] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 148.045590][ T5718] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.117715][ T5761] usb 2-1: device descriptor read/64, error -71 [ 148.196083][ T5718] usb 1-1: Using ep0 maxpacket: 8 [ 148.204124][ T5718] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 148.204175][ T5718] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.204220][ T5718] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 148.204247][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.231614][ T5761] usb usb2-port1: attempt power cycle [ 148.260682][ T5718] usb 1-1: config 0 descriptor?? [ 148.595405][ T5761] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 148.626256][ T5761] usb 2-1: device descriptor read/8, error -71 [ 148.763197][ T5718] hid_parser_main: 7 callbacks suppressed [ 148.763224][ T5718] a4tech 0003:09DA:022B.0002: unknown main item tag 0x1 [ 148.763254][ T5718] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 148.763278][ T5718] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 148.763303][ T5718] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 148.763329][ T5718] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 148.763354][ T5718] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 148.763380][ T5718] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 148.763407][ T5718] a4tech 0003:09DA:022B.0002: unknown main item tag 0x0 [ 148.806714][ T5779] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 148.881469][ T5718] a4tech 0003:09DA:022B.0002: hidraw0: USB HID v0.04 Device [HID 09da:022b] on usb-dummy_hcd.0-1/input0 [ 148.908156][ T5718] usb 1-1: USB disconnect, device number 6 [ 148.925776][ T5761] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 148.965186][ T5761] usb 2-1: device descriptor read/8, error -71 [ 148.975339][ T5765] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.005396][ T5779] usb 4-1: Using ep0 maxpacket: 16 [ 149.027959][ T5779] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 149.028015][ T5779] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.028038][ T5779] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 149.028058][ T5779] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 1024 [ 149.028082][ T5779] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 149.028104][ T5779] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 149.029362][ T5779] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.029396][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.029412][ T5779] usb 4-1: SerialNumber: syz [ 149.078586][ T5761] usb usb2-port1: unable to enumerate USB device [ 149.114529][ T6061] fido_id[6061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 149.170947][ T6058] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 149.171091][ T6058] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 149.228560][ T5765] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 149.254652][ T5765] usb 3-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 0.40 [ 149.254690][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.254715][ T5765] usb 3-1: Product: syz [ 149.254733][ T5765] usb 3-1: Manufacturer: syz [ 149.254750][ T5765] usb 3-1: SerialNumber: syz [ 149.450810][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.453334][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.579631][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.584686][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.683740][ T5765] usb 3-1: unit 4 not found! [ 149.683769][ T5765] usb 3-1: unit 0 not found! [ 149.721414][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.738697][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.354698][ T5779] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 150.468163][ T5779] usb 4-1: USB disconnect, device number 10 [ 150.490443][ T5622] block nbd2: Receive control failed (result -32) [ 150.657846][ T5810] udevd[5810]: setting owner of /dev/ttyACM0 to uid=0, gid=18 failed: No such file or directory [ 151.103363][ T6077] loop8: detected capacity change from 0 to 7 [ 151.138219][ T6077] FAULT_INJECTION: forcing a failure. [ 151.138219][ T6077] name failslab, interval 1, probability 0, space 0, times 0 [ 151.138323][ T6077] CPU: 0 UID: 0 PID: 6077 Comm: syz.1.90 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 151.138356][ T6077] Tainted: [L]=SOFTLOCKUP [ 151.138365][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 151.138379][ T6077] Call Trace: [ 151.138389][ T6077] [ 151.138398][ T6077] dump_stack_lvl+0xe8/0x150 [ 151.138444][ T6077] should_fail_ex+0x46b/0x600 [ 151.138487][ T6077] should_failslab+0xa8/0x100 [ 151.138519][ T6077] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 151.138548][ T6077] ? preload_this_cpu_lock+0x49/0xc0 [ 151.138588][ T6077] preload_this_cpu_lock+0x49/0xc0 [ 151.138621][ T6077] alloc_vmap_area+0x3dc/0x1480 [ 151.138662][ T6077] ? __pfx_alloc_vmap_area+0x10/0x10 [ 151.138690][ T6077] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 151.138719][ T6077] ? __get_vm_area_node+0x13f/0x300 [ 151.138745][ T6077] ? bdev_disk_changed+0x4e7/0x1780 [ 151.138782][ T6077] __get_vm_area_node+0x1f8/0x300 [ 151.138814][ T6077] __vmalloc_node_range_noprof+0x36a/0x1750 [ 151.138843][ T6077] ? bdev_disk_changed+0x4e7/0x1780 [ 151.138911][ T6077] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 151.138949][ T6077] ? __kasan_kmalloc+0x93/0xb0 [ 151.138978][ T6077] ? bdev_disk_changed+0x4e7/0x1780 [ 151.139014][ T6077] vzalloc_noprof+0xb2/0xe0 [ 151.139041][ T6077] ? bdev_disk_changed+0x4e7/0x1780 [ 151.139079][ T6077] bdev_disk_changed+0x4e7/0x1780 [ 151.139115][ T6077] ? do_raw_spin_lock+0x12b/0x2f0 [ 151.139156][ T6077] ? __pfx_bdev_disk_changed+0x10/0x10 [ 151.139190][ T6077] ? lockdep_hardirqs_on+0x7a/0x110 [ 151.139226][ T6077] ? mutex_lock_nested+0x152/0x1d0 [ 151.139251][ T6077] ? loop_reread_partitions+0x46/0xf0 [ 151.139292][ T6077] loop_reread_partitions+0x5f/0xf0 [ 151.139330][ T6077] loop_configure+0xb7c/0xdf0 [ 151.139379][ T6077] ? __pfx_loop_configure+0x10/0x10 [ 151.139451][ T6077] lo_ioctl+0xaaf/0x1fc0 [ 151.139482][ T6077] ? __lock_acquire+0x6b5/0x2d10 [ 151.139508][ T6077] ? __pfx_lo_ioctl+0x10/0x10 [ 151.139541][ T6077] ? do_raw_spin_lock+0x12b/0x2f0 [ 151.139568][ T6077] ? rcu_is_watching+0x15/0xb0 [ 151.139594][ T6077] ? trace_hrtimer_start+0x82/0x200 [ 151.139617][ T6077] ? hrtimer_start_range_ns_common+0x821/0xba0 [ 151.139655][ T6077] ? __lock_acquire+0x6b5/0x2d10 [ 151.139683][ T6077] ? __lock_acquire+0x6b5/0x2d10 [ 151.139707][ T6077] ? __lock_acquire+0x6b5/0x2d10 [ 151.139737][ T6077] ? unwind_next_frame+0xa6/0x2550 [ 151.139770][ T6077] ? unwind_next_frame+0xa6/0x2550 [ 151.139798][ T6077] ? is_bpf_text_address+0x26/0x2b0 [ 151.139838][ T6077] ? is_bpf_text_address+0x26/0x2b0 [ 151.139873][ T6077] ? is_bpf_text_address+0x292/0x2b0 [ 151.139902][ T6077] ? is_bpf_text_address+0x26/0x2b0 [ 151.139935][ T6077] ? kernel_text_address+0xa5/0xe0 [ 151.139960][ T6077] ? __kernel_text_address+0xd/0x30 [ 151.139983][ T6077] ? unwind_get_return_address+0x4d/0x90 [ 151.140009][ T6077] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 151.140030][ T6077] ? arch_stack_walk+0xfb/0x150 [ 151.140066][ T6077] ? stack_trace_save+0xa9/0x100 [ 151.140090][ T6077] ? __pfx_stack_trace_save+0x10/0x10 [ 151.140113][ T6077] ? stack_depot_save_flags+0x33/0x810 [ 151.140148][ T6077] ? kasan_save_track+0x4f/0x80 [ 151.140168][ T6077] ? kasan_save_track+0x3e/0x80 [ 151.140187][ T6077] ? kasan_save_free_info+0x46/0x50 [ 151.140215][ T6077] ? __kasan_slab_free+0x5c/0x80 [ 151.140236][ T6077] ? kfree+0x1c5/0x6c0 [ 151.140254][ T6077] ? tomoyo_path_number_perm+0x501/0x630 [ 151.140284][ T6077] ? security_file_ioctl+0xc3/0x2a0 [ 151.140311][ T6077] ? __se_sys_ioctl+0x47/0x170 [ 151.140338][ T6077] ? do_syscall_64+0x174/0x580 [ 151.140366][ T6077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.140391][ T6077] ? __asan_memset+0x22/0x50 [ 151.140410][ T6077] ? blk_get_meta_cap+0x16d/0x7a0 [ 151.140459][ T6077] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 151.140498][ T6077] ? blkdev_common_ioctl+0x14b7/0x3240 [ 151.140523][ T6077] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 151.140545][ T6077] ? kasan_quarantine_put+0xbb/0x1f0 [ 151.140574][ T6077] ? tomoyo_path_number_perm+0x219/0x630 [ 151.140604][ T6077] ? tomoyo_path_number_perm+0x219/0x630 [ 151.140638][ T6077] ? do_vfs_ioctl+0x117b/0x1540 [ 151.140707][ T6077] ? __pfx_lo_ioctl+0x10/0x10 [ 151.140737][ T6077] blkdev_ioctl+0x5e6/0x750 [ 151.140759][ T6077] ? __pfx_blkdev_ioctl+0x10/0x10 [ 151.140775][ T6077] ? __fget_files+0x2a/0x420 [ 151.140799][ T6077] ? bpf_lsm_file_ioctl+0x9/0x20 [ 151.140825][ T6077] ? __pfx_blkdev_ioctl+0x10/0x10 [ 151.140844][ T6077] __se_sys_ioctl+0xff/0x170 [ 151.140870][ T6077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.140890][ T6077] do_syscall_64+0x174/0x580 [ 151.140918][ T6077] ? clear_bhb_loop+0x40/0x90 [ 151.140943][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.140962][ T6077] RIP: 0033:0x7f1300cbce59 [ 151.140980][ T6077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.140996][ T6077] RSP: 002b:00007f12fef16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.141015][ T6077] RAX: ffffffffffffffda RBX: 00007f1300f35fa0 RCX: 00007f1300cbce59 [ 151.141029][ T6077] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 151.141040][ T6077] RBP: 00007f12fef16090 R08: 0000000000000000 R09: 0000000000000000 [ 151.141051][ T6077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 151.141061][ T6077] R13: 00007f1300f36038 R14: 00007f1300f35fa0 R15: 00007ffffdb0d3d8 [ 151.141088][ T6077] [ 151.315404][ T5779] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 151.773561][ T6077] buffer_io_error: 23 callbacks suppressed [ 151.773586][ T6077] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.773779][ T6077] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.774040][ T6077] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.774219][ T6077] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.774515][ T6077] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.774728][ T6077] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.774900][ T6077] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.775041][ T6077] ldm_validate_partition_table(): Disk read failed. [ 151.775091][ T6077] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.785821][ T6077] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.925023][ T6077] Buffer I/O error on dev loop8, logical block 0, async page read [ 151.936784][ T6077] Dev loop8: unable to read RDB block 0 [ 151.937401][ T6077] loop8: unable to read partition table [ 151.959836][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.959887][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.959929][ T5779] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 151.959953][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.023385][ T6077] loop8: partition table beyond EOD, truncated [ 152.023450][ T6077] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 152.082205][ T5779] usb 4-1: config 0 descriptor?? [ 152.100157][ T6071] block nbd2: shutting down sockets [ 152.618865][ T5779] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 152.618907][ T5779] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 152.653504][ T5779] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 152.754327][ T5779] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 152.900206][ T5765] usb 3-1: USB disconnect, device number 5 [ 152.985377][ T5341] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 153.167713][ T5341] usb 2-1: Using ep0 maxpacket: 8 [ 153.173908][ T5341] usb 2-1: config 0 has no interfaces? [ 153.203564][ T5341] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 153.203602][ T5341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.203626][ T5341] usb 2-1: Product: syz [ 153.203644][ T5341] usb 2-1: Manufacturer: syz [ 153.203661][ T5341] usb 2-1: SerialNumber: syz [ 153.357436][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.542749][ T5341] usb 2-1: config 0 descriptor?? [ 153.610325][ T6073] overlayfs: invalid origin (0000) [ 153.655342][ T5765] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.724143][ T6088] loop8: detected capacity change from 0 to 7 [ 153.779108][ T5779] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 153.807253][ T5765] usb 3-1: Using ep0 maxpacket: 8 [ 153.809792][ T5765] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.809848][ T5765] usb 3-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.809879][ T5765] usb 3-1: config 1 interface 0 has no altsetting 0 [ 153.898940][ T5765] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 153.898974][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.898996][ T5765] usb 3-1: Product: syz [ 153.899012][ T5765] usb 3-1: Manufacturer: syz [ 153.899027][ T5765] usb 3-1: SerialNumber: syz [ 154.016436][ T6079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.91'. [ 154.016477][ T6079] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 154.201780][ T5341] usb 2-1: USB disconnect, device number 13 [ 154.387474][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.387651][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.390709][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.391312][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.862282][ T5765] usb 3-1: USB disconnect, device number 6 [ 154.915328][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 155.122184][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.152467][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.152498][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.187901][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 155.187937][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.187959][ T10] usb 1-1: Product: syz [ 155.187976][ T10] usb 1-1: Manufacturer: syz [ 155.187993][ T10] usb 1-1: SerialNumber: syz [ 155.288373][ T6104] loop2: detected capacity change from 0 to 7 [ 155.345670][ T6104] Dev loop2: unable to read RDB block 7 [ 155.345718][ T6104] loop2: unable to read partition table [ 155.345935][ T6104] loop2: partition table beyond EOD, truncated [ 155.345970][ T6104] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 155.442316][ T5779] usb 4-1: USB disconnect, device number 11 [ 155.458491][ T5765] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 155.484855][ T10] usb 1-1: selecting invalid altsetting 1 [ 155.491903][ T10] usb 1-1: unit 3 not found! [ 155.494012][ T10] usb 1-1: cannot request logical cluster ID: 0 (err: -71) [ 155.494037][ T10] usb 1-1: invalid MIXER UNIT descriptor 6 [ 155.625632][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 155.643271][ T5765] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 155.643304][ T5765] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 155.643328][ T5765] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 155.643348][ T5765] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 155.686474][ T5765] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.686508][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.686531][ T5765] usb 3-1: Product: syz [ 155.686548][ T5765] usb 3-1: Manufacturer: syz [ 155.686565][ T5765] usb 3-1: SerialNumber: syz [ 155.845318][ T32] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 156.001331][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 156.017813][ T32] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.017850][ T32] usb 2-1: config 1 interface 0 has no altsetting 0 [ 156.052660][ T32] usb 2-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.40 [ 156.052698][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.052721][ T32] usb 2-1: Product: syz [ 156.052738][ T32] usb 2-1: Manufacturer: ౼ [ 156.052755][ T32] usb 2-1: SerialNumber: syz [ 156.269566][ T5765] usb 3-1: 0:2 : does not exist [ 156.286798][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 156.316640][ T5765] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 156.345541][ T10] usb 1-1: USB disconnect, device number 7 [ 156.499952][ T6117] fuse: Bad value for 'fd' [ 156.581314][ T5765] usb 3-1: USB disconnect, device number 7 [ 156.718481][ T32] usbhid 2-1:1.0: can't add hid device: -71 [ 156.718630][ T32] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 156.764317][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.833582][ T32] usb 2-1: USB disconnect, device number 14 [ 156.858924][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.365094][ T6134] loop2: detected capacity change from 0 to 7 [ 157.379125][ T6134] Dev loop2: unable to read RDB block 7 [ 157.379171][ T6134] loop2: unable to read partition table [ 157.379358][ T6134] loop2: partition table beyond EOD, truncated [ 157.381084][ T6134] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 157.386036][ T5779] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 157.525543][ T5765] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 157.536272][ T5779] usb 4-1: Using ep0 maxpacket: 32 [ 157.575772][ T5779] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 157.575806][ T5779] usb 4-1: config 0 has no interface number 0 [ 157.575858][ T5779] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.575900][ T5779] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.575928][ T5779] usb 4-1: config 0 interface 85 has no altsetting 0 [ 157.629283][ T5779] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 157.629324][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.629340][ T5779] usb 4-1: Product: syz [ 157.629352][ T5779] usb 4-1: Manufacturer: syz [ 157.629365][ T5779] usb 4-1: SerialNumber: syz [ 157.707848][ T5779] usb 4-1: config 0 descriptor?? [ 157.728168][ T5765] usb 1-1: Using ep0 maxpacket: 16 [ 157.782315][ T5765] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.782352][ T5765] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.782376][ T5765] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.782422][ T5765] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 157.782448][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.836599][ T5765] usb 1-1: config 0 descriptor?? [ 158.122213][ T5779] appletouch 4-1:0.85: Geyser mode initialized. [ 158.130582][ T5779] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input6 [ 158.310593][ T5765] hid (null): global environment stack underflow [ 158.310625][ T5765] hid (null): unknown global tag 0xde [ 158.310660][ T5765] hid (null): unknown global tag 0xe [ 158.310671][ T5765] hid (null): report_id 0 is invalid [ 158.310683][ T5765] hid (null): unknown global tag 0xc [ 158.313792][ T5765] hid (null): report_id 0 is invalid [ 158.555347][ T32] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 158.611046][ T5765] usb 4-1: USB disconnect, device number 12 [ 158.777838][ T5765] appletouch 4-1:0.85: input: appletouch disconnected [ 158.778902][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.778960][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.778987][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.779028][ T32] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 158.779053][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.867836][ T32] usb 2-1: config 0 descriptor?? [ 159.319355][ T6153] overlayfs: statfs failed on './file0' [ 159.322970][ T32] hid-rmi 0003:0461:4E72.0005: ignoring exceeding usage max [ 159.418916][ T32] hid-rmi 0003:0461:4E72.0005: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 159.660801][ T32] usb 2-1: USB disconnect, device number 15 [ 160.124574][ T6174] warning: `syz.3.122' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 160.165414][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 160.324429][ T6178] binder: BINDER_SET_CONTEXT_MGR already set [ 160.324445][ T6178] binder: 6176:6178 ioctl 4018620d 2000000002c0 returned -16 [ 160.473938][ T6173] bridge_slave_1: left allmulticast mode [ 160.473979][ T6173] bridge_slave_1: left promiscuous mode [ 160.501605][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.722356][ T6173] bridge_slave_0: left allmulticast mode [ 160.722397][ T6173] bridge_slave_0: left promiscuous mode [ 160.722708][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.357041][ T5718] usb 1-1: USB disconnect, device number 8 [ 161.835412][ T5718] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 162.000940][ T5718] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.000974][ T5718] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.001009][ T5718] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.039497][ T5718] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 162.039529][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.039652][ T5718] usb 1-1: Product: syz [ 162.039669][ T5718] usb 1-1: Manufacturer: syz [ 162.039685][ T5718] usb 1-1: SerialNumber: syz [ 162.097093][ T5718] hub 1-1:1.0: bad descriptor, ignoring hub [ 162.097137][ T5718] hub 1-1:1.0: probe with driver hub failed with error -5 [ 162.330099][ T5718] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 162.588800][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.589366][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.980016][ T5718] usb 1-1: USB disconnect, device number 9 [ 163.004361][ T5718] usblp0: removed [ 163.040588][ T6196] ubi0: attaching mtd0 [ 163.221331][ T6196] ubi0: scanning is finished [ 163.221372][ T6196] ubi0: empty MTD device detected [ 164.011689][ T6196] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 164.715413][ T822] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.890033][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 164.896000][ T822] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 164.896032][ T822] usb 3-1: config 0 has no interface number 0 [ 164.945861][ T822] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 164.945898][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.945923][ T822] usb 3-1: Product: syz [ 164.945940][ T822] usb 3-1: Manufacturer: syz [ 164.945957][ T822] usb 3-1: SerialNumber: syz [ 165.026240][ T822] usb 3-1: config 0 descriptor?? [ 165.057576][ T822] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 165.242631][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.243309][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.558251][ T822] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 165.584354][ T822] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 165.649460][ T6233] loop2: detected capacity change from 0 to 7 [ 165.654679][ T6233] Dev loop2: unable to read RDB block 7 [ 165.654733][ T6233] loop2: unable to read partition table [ 165.654949][ T6233] loop2: partition table beyond EOD, truncated [ 165.654970][ T6233] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 165.673949][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.698780][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.703890][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.704450][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.802924][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.804137][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.871346][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 165.872625][ T5765] usb 3-1: USB disconnect, device number 8 [ 165.909060][ T5765] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 165.933372][ T5765] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 165.957390][ T5765] quatech2 3-1:0.51: device disconnected [ 166.495432][ T5765] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.545765][ T5718] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 166.645523][ T5765] usb 1-1: Using ep0 maxpacket: 8 [ 166.654451][ T5765] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.669521][ T5765] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.669550][ T5765] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.694518][ T5765] usb 1-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.38 [ 166.694551][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.694572][ T5765] usb 1-1: Product: syz [ 166.694587][ T5765] usb 1-1: Manufacturer: syz [ 166.694604][ T5765] usb 1-1: SerialNumber: syz [ 166.718013][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 166.734817][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.750746][ T5718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 166.750791][ T5718] usb 2-1: can't read configurations, error -61 [ 166.875361][ T5718] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 167.044301][ T5765] usb 1-1: 0:1 : does not exist [ 167.044327][ T5765] usb 1-1: 0:2 : does not exist [ 167.085292][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 167.091241][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.108832][ T5718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 167.108873][ T5718] usb 2-1: can't read configurations, error -61 [ 167.109468][ T5718] usb usb2-port1: attempt power cycle [ 167.207436][ T5765] usb 1-1: USB disconnect, device number 10 [ 167.299294][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.465341][ T5718] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 167.486183][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 167.494376][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.507362][ T5718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 167.507401][ T5718] usb 2-1: can't read configurations, error -61 [ 167.635410][ T5718] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 167.661575][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 167.687043][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.692341][ T5718] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 167.692384][ T5718] usb 2-1: can't read configurations, error -61 [ 167.693174][ T5718] usb usb2-port1: unable to enumerate USB device [ 167.992956][ T6263] FAULT_INJECTION: forcing a failure. [ 167.992956][ T6263] name failslab, interval 1, probability 0, space 0, times 0 [ 167.993001][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz.0.157 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 167.993034][ T6263] Tainted: [L]=SOFTLOCKUP [ 167.993044][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.993059][ T6263] Call Trace: [ 167.993068][ T6263] [ 167.993079][ T6263] dump_stack_lvl+0xe8/0x150 [ 167.993114][ T6263] should_fail_ex+0x46b/0x600 [ 167.993156][ T6263] should_failslab+0xa8/0x100 [ 167.993192][ T6263] __kmalloc_noprof+0xdf/0x7b0 [ 167.993221][ T6263] ? kfree+0x4d/0x6c0 [ 167.993247][ T6263] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 167.993283][ T6263] tomoyo_realpath_from_path+0xe3/0x5d0 [ 167.993316][ T6263] ? tomoyo_domain+0xd7/0x130 [ 167.993352][ T6263] ? tomoyo_path_number_perm+0x219/0x630 [ 167.993393][ T6263] tomoyo_path_number_perm+0x246/0x630 [ 167.993435][ T6263] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 167.993471][ T6263] ? __lock_acquire+0x6b5/0x2d10 [ 167.993504][ T6263] ? do_raw_spin_lock+0x12b/0x2f0 [ 167.993569][ T6263] ? __fget_files+0x2a/0x420 [ 167.993602][ T6263] ? __fget_files+0x2a/0x420 [ 167.993630][ T6263] ? __fget_files+0x3a6/0x420 [ 167.993658][ T6263] ? __fget_files+0x2a/0x420 [ 167.993692][ T6263] security_file_ioctl+0xc3/0x2a0 [ 167.993729][ T6263] __se_sys_ioctl+0x47/0x170 [ 167.993766][ T6263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.993793][ T6263] do_syscall_64+0x174/0x580 [ 167.993830][ T6263] ? trace_irq_disable+0x3b/0x140 [ 167.993858][ T6263] ? clear_bhb_loop+0x40/0x90 [ 167.993915][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.993949][ T6263] RIP: 0033:0x7ff1802fce59 [ 167.993971][ T6263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.993991][ T6263] RSP: 002b:00007ff17e54e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.994016][ T6263] RAX: ffffffffffffffda RBX: 00007ff180575fa0 RCX: 00007ff1802fce59 [ 167.994035][ T6263] RDX: 00002000000000c0 RSI: 00000000c040563e RDI: 0000000000000003 [ 167.994051][ T6263] RBP: 00007ff17e54e090 R08: 0000000000000000 R09: 0000000000000000 [ 167.994066][ T6263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.994080][ T6263] R13: 00007ff180576038 R14: 00007ff180575fa0 R15: 00007ffd09bac3d8 [ 167.994116][ T6263] [ 167.994471][ T6263] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.622080][ T6274] sctp: [Deprecated]: syz.2.160 (pid 6274) Use of int in max_burst socket option. [ 168.622080][ T6274] Use struct sctp_assoc_value instead [ 168.785930][ T6272] input: syz1 as /devices/virtual/input/input7 [ 169.443487][ T6285] sctp: [Deprecated]: syz.1.165 (pid 6285) Use of int in max_burst socket option deprecated. [ 169.443487][ T6285] Use struct sctp_assoc_value instead [ 170.033888][ T6295] FAULT_INJECTION: forcing a failure. [ 170.033888][ T6295] name failslab, interval 1, probability 0, space 0, times 0 [ 170.033929][ T6295] CPU: 1 UID: 0 PID: 6295 Comm: syz.1.168 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 170.033961][ T6295] Tainted: [L]=SOFTLOCKUP [ 170.033969][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.033983][ T6295] Call Trace: [ 170.033992][ T6295] [ 170.034001][ T6295] dump_stack_lvl+0xe8/0x150 [ 170.034036][ T6295] should_fail_ex+0x46b/0x600 [ 170.034078][ T6295] should_failslab+0xa8/0x100 [ 170.034111][ T6295] __kmalloc_noprof+0xdf/0x7b0 [ 170.034140][ T6295] ? tomoyo_encode+0x28b/0x550 [ 170.034173][ T6295] tomoyo_encode+0x28b/0x550 [ 170.034218][ T6295] tomoyo_realpath_from_path+0x58d/0x5d0 [ 170.034258][ T6295] ? tomoyo_path_number_perm+0x219/0x630 [ 170.034297][ T6295] tomoyo_path_number_perm+0x246/0x630 [ 170.034337][ T6295] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.034373][ T6295] ? __lock_acquire+0x6b5/0x2d10 [ 170.034403][ T6295] ? do_raw_spin_lock+0x12b/0x2f0 [ 170.034462][ T6295] ? __fget_files+0x2a/0x420 [ 170.034493][ T6295] ? __fget_files+0x2a/0x420 [ 170.034519][ T6295] ? __fget_files+0x3a6/0x420 [ 170.034546][ T6295] ? __fget_files+0x2a/0x420 [ 170.034578][ T6295] security_file_ioctl+0xc3/0x2a0 [ 170.034614][ T6295] __se_sys_ioctl+0x47/0x170 [ 170.034649][ T6295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.034676][ T6295] do_syscall_64+0x174/0x580 [ 170.034712][ T6295] ? trace_irq_disable+0x3b/0x140 [ 170.034738][ T6295] ? clear_bhb_loop+0x40/0x90 [ 170.034768][ T6295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.034792][ T6295] RIP: 0033:0x7f1300cbce59 [ 170.034813][ T6295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.034833][ T6295] RSP: 002b:00007f12fef16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.034858][ T6295] RAX: ffffffffffffffda RBX: 00007f1300f35fa0 RCX: 00007f1300cbce59 [ 170.034876][ T6295] RDX: 00002000000000c0 RSI: 00000000c040563e RDI: 0000000000000003 [ 170.034891][ T6295] RBP: 00007f12fef16090 R08: 0000000000000000 R09: 0000000000000000 [ 170.034905][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.034919][ T6295] R13: 00007f1300f36038 R14: 00007f1300f35fa0 R15: 00007ffffdb0d3d8 [ 170.034957][ T6295] [ 170.035066][ T6295] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.544558][ T6301] loop2: detected capacity change from 0 to 7 [ 170.577068][ T6301] Dev loop2: unable to read RDB block 7 [ 170.577117][ T6301] loop2: unable to read partition table [ 170.577357][ T6301] loop2: partition table beyond EOD, truncated [ 170.577380][ T6301] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 170.644288][ T6303] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 170.644288][ T6303] Please contact the netfilter-devel mailing list or update your nftables rules. [ 170.835403][ T5761] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 171.001672][ T5761] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 171.001707][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.001729][ T5761] usb 1-1: Product: syz [ 171.001745][ T5761] usb 1-1: Manufacturer: syz [ 171.001761][ T5761] usb 1-1: SerialNumber: syz [ 171.122346][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.123099][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.155378][ T5765] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 171.163385][ T5761] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 171.204132][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.204888][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.309854][ T5718] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 171.327805][ T5765] usb 3-1: Using ep0 maxpacket: 32 [ 171.331159][ T5765] usb 3-1: unable to get BOS descriptor or descriptor too short [ 171.333010][ T5765] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 171.333041][ T5765] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 171.333065][ T5765] usb 3-1: config 7 has no interface number 0 [ 171.400742][ T5776] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 171.403566][ T5765] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 171.403596][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.403616][ T5765] usb 3-1: Product: syz [ 171.403631][ T5765] usb 3-1: Manufacturer: syz [ 171.403646][ T5765] usb 3-1: SerialNumber: syz [ 171.610886][ C1] usb 1-1: ath: unknown panic pattern! [ 171.672205][ T5765] usb 3-1: Invalid number of CPorts: 0 [ 171.672254][ T5765] es2_ap_driver 3-1:7.187: probe with driver es2_ap_driver failed with error -22 [ 171.925301][ T5718] usb 2-1: device descriptor read/64, error -71 [ 172.195322][ T5718] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 172.232276][ T6318] netlink: 'syz.2.174': attribute type 11 has an invalid length. [ 172.232305][ T6318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.174'. [ 172.368451][ T5718] usb 2-1: device descriptor read/64, error -71 [ 172.475981][ T5718] usb usb2-port1: attempt power cycle [ 172.775636][ T5776] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 172.832872][ T5761] usb 1-1: USB disconnect, device number 11 [ 172.837404][ T5718] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 172.856013][ T5718] usb 2-1: device descriptor read/8, error -71 [ 172.949582][ T5776] ath9k_htc: Failed to initialize the device [ 172.977045][ T5761] usb 1-1: ath9k_htc: USB layer deinitialized [ 173.096714][ T5718] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 173.116123][ T5718] usb 2-1: device descriptor read/8, error -71 [ 173.227658][ T5718] usb usb2-port1: unable to enumerate USB device [ 174.021815][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 174.200097][ T5718] usb 3-1: USB disconnect, device number 9 [ 174.223419][ T6326] FAULT_INJECTION: forcing a failure. [ 174.223419][ T6326] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 174.223481][ T6326] CPU: 1 UID: 0 PID: 6326 Comm: syz.0.180 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 174.223515][ T6326] Tainted: [L]=SOFTLOCKUP [ 174.223524][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.223538][ T6326] Call Trace: [ 174.223547][ T6326] [ 174.223558][ T6326] dump_stack_lvl+0xe8/0x150 [ 174.223594][ T6326] should_fail_ex+0x46b/0x600 [ 174.223635][ T6326] _copy_from_user+0x2d/0xb0 [ 174.223665][ T6326] video_usercopy+0x36f/0x1450 [ 174.223706][ T6326] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 174.223748][ T6326] ? __pfx_video_usercopy+0x10/0x10 [ 174.223792][ T6326] ? __fget_files+0x2a/0x420 [ 174.223825][ T6326] ? __fget_files+0x2a/0x420 [ 174.223852][ T6326] ? __fget_files+0x3a6/0x420 [ 174.223885][ T6326] v4l2_ioctl+0x190/0x1e0 [ 174.223917][ T6326] ? __pfx_v4l2_ioctl+0x10/0x10 [ 174.223955][ T6326] __se_sys_ioctl+0xff/0x170 [ 174.223990][ T6326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.224018][ T6326] do_syscall_64+0x174/0x580 [ 174.224054][ T6326] ? trace_irq_disable+0x3b/0x140 [ 174.224081][ T6326] ? clear_bhb_loop+0x40/0x90 [ 174.224111][ T6326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.224141][ T6326] RIP: 0033:0x7ff1802fce59 [ 174.224163][ T6326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.224184][ T6326] RSP: 002b:00007ff17e54e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.224210][ T6326] RAX: ffffffffffffffda RBX: 00007ff180575fa0 RCX: 00007ff1802fce59 [ 174.224228][ T6326] RDX: 00002000000000c0 RSI: 00000000c040563e RDI: 0000000000000003 [ 174.224244][ T6326] RBP: 00007ff17e54e090 R08: 0000000000000000 R09: 0000000000000000 [ 174.224259][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.224273][ T6326] R13: 00007ff180576038 R14: 00007ff180575fa0 R15: 00007ffd09bac3d8 [ 174.224308][ T6326] [ 174.597591][ T6330] loop2: detected capacity change from 0 to 7 [ 174.599821][ T6330] Dev loop2: unable to read RDB block 7 [ 174.599866][ T6330] loop2: unable to read partition table [ 174.600094][ T6330] loop2: partition table beyond EOD, truncated [ 174.600114][ T6330] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 174.867970][ T6335] netlink: 'syz.0.184': attribute type 46 has an invalid length. [ 174.936832][ T5776] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 175.097715][ T5776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 175.097773][ T5776] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 175.097800][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.160952][ T5776] usb 2-1: config 0 descriptor?? [ 175.162030][ T6333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 175.199403][ T5761] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 175.348109][ T5761] usb 1-1: device descriptor read/64, error -71 [ 175.606112][ T5776] hid_parser_main: 5 callbacks suppressed [ 175.606138][ T5776] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 175.606169][ T5776] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 175.606194][ T5776] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 175.606220][ T5776] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 175.606243][ T5776] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 175.606268][ T5776] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 175.606292][ T5776] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 175.606328][ T5776] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 175.606354][ T5776] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 175.606396][ T5776] asus 0003:0B05:1ABE.0006: unknown main item tag 0x0 [ 175.630519][ T5761] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 175.708575][ T5776] asus 0003:0B05:1ABE.0006: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.1-1/input0 [ 175.812248][ T5776] usb 2-1: USB disconnect, device number 24 [ 175.887170][ T5761] usb 1-1: device descriptor read/64, error -71 [ 176.003429][ T6346] fido_id[6346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 176.019366][ T5761] usb usb1-port1: attempt power cycle [ 176.373732][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.404989][ T5761] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 176.434592][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.447529][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.451271][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.452398][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.490205][ T5761] usb 1-1: device descriptor read/8, error -71 [ 176.715413][ T5776] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 176.737906][ T5761] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 176.766152][ T5761] usb 1-1: device descriptor read/8, error -71 [ 176.865828][ T5761] usb usb1-port1: unable to enumerate USB device [ 176.886503][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 176.889798][ T5776] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 176.889825][ T5776] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.889844][ T5776] usb 3-1: config 0 has no interface number 0 [ 176.889886][ T5776] usb 3-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 176.889914][ T5776] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 176.889939][ T5776] usb 3-1: config 0 interface 239 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.976175][ T5776] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 176.976224][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.976248][ T5776] usb 3-1: Product: syz [ 176.976264][ T5776] usb 3-1: Manufacturer: syz [ 176.976282][ T5776] usb 3-1: SerialNumber: syz [ 177.064402][ T5776] usb 3-1: config 0 descriptor?? [ 177.065541][ T6353] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.283322][ T5776] ath6kl: Failed to submit usb control message: -71 [ 177.283376][ T5776] ath6kl: unable to send the bmi data to the device: -71 [ 177.283393][ T5776] ath6kl: Unable to send get target info: -71 [ 177.323143][ T5776] ath6kl: Failed to init ath6kl core: -71 [ 177.334881][ T5776] ath6kl_usb 3-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 177.381057][ T5776] usb 3-1: USB disconnect, device number 10 [ 178.068103][ T6380] netlink: 393 bytes leftover after parsing attributes in process `syz.0.197'. [ 178.376863][ T6385] netlink: 140 bytes leftover after parsing attributes in process `syz.1.199'. [ 178.376895][ T6385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.199'. [ 178.376912][ T6385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'. [ 178.565399][ T5622] Bluetooth: hci4: command tx timeout [ 178.808157][ T6393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.203'. [ 178.939257][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.839493][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.065215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.085199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.095213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.105194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.115196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.125226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.135215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.145218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.155221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.165200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.637159][ T5622] Bluetooth: hci4: command tx timeout [ 180.841909][ T6423] netlink: 'syz.2.216': attribute type 4 has an invalid length. [ 180.898781][ T6424] netlink: 'syz.2.216': attribute type 4 has an invalid length. [ 181.143733][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.287221][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.374257][ T5622] Bluetooth: hci4: command tx timeout [ 186.611670][ T5622] Bluetooth: hci4: command tx timeout [ 190.130365][ T6476] ================================================================== [ 190.130386][ T6476] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240 [ 190.130433][ T6476] Read of size 8 at addr ffff88803e7029e0 by task syz.2.233/6476 [ 190.130453][ T6476] [ 190.130469][ T6476] CPU: 1 UID: 0 PID: 6476 Comm: syz.2.233 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 190.130503][ T6476] Tainted: [L]=SOFTLOCKUP [ 190.130512][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.130527][ T6476] Call Trace: [ 190.130537][ T6476] [ 190.130547][ T6476] dump_stack_lvl+0xe8/0x150 [ 190.130578][ T6476] print_address_description+0x55/0x1e0 [ 190.130609][ T6476] ? reverse_path_check_proc+0x5b/0x240 [ 190.130645][ T6476] print_report+0x58/0x70 [ 190.130673][ T6476] kasan_report+0x117/0x150 [ 190.130703][ T6476] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 190.130740][ T6476] ? reverse_path_check_proc+0x5b/0x240 [ 190.130781][ T6476] ? ep_insert+0xbbb/0x1820 [ 190.130814][ T6476] reverse_path_check_proc+0x5b/0x240 [ 190.130854][ T6476] ? ep_insert+0xbbb/0x1820 [ 190.130885][ T6476] ep_insert+0xc6c/0x1820 [ 190.130923][ T6476] ? __pfx_ep_insert+0x10/0x10 [ 190.130959][ T6476] ? lockdep_hardirqs_on+0x7a/0x110 [ 190.130996][ T6476] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 190.131031][ T6476] ? mutex_lock_nested+0x152/0x1d0 [ 190.131058][ T6476] ? do_epoll_ctl_file+0xc69/0xed0 [ 190.131092][ T6476] do_epoll_ctl_file+0x8bb/0xed0 [ 190.131124][ T6476] ? do_epoll_ctl_file+0xac3/0xed0 [ 190.131169][ T6476] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 190.131204][ T6476] ? __fget_files+0x3a6/0x420 [ 190.131232][ T6476] ? __fget_files+0x2a/0x420 [ 190.131264][ T6476] __se_sys_epoll_ctl+0x14e/0x210 [ 190.131300][ T6476] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 190.131340][ T6476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.131364][ T6476] do_syscall_64+0x174/0x580 [ 190.131401][ T6476] ? clear_bhb_loop+0x40/0x90 [ 190.131429][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.131453][ T6476] RIP: 0033:0x7efff2afce59 [ 190.131475][ T6476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.131496][ T6476] RSP: 002b:00007efff04ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 190.131523][ T6476] RAX: ffffffffffffffda RBX: 00007efff2d76360 RCX: 00007efff2afce59 [ 190.131542][ T6476] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000007 [ 190.131557][ T6476] RBP: 00007efff2b92d6f R08: 0000000000000000 R09: 0000000000000000 [ 190.131573][ T6476] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.131589][ T6476] R13: 00007efff2d763f8 R14: 00007efff2d76360 R15: 00007ffd8e91c738 [ 190.131618][ T6476] [ 190.131628][ T6476] [ 190.131633][ T6476] Allocated by task 6475: [ 190.131645][ T6476] kasan_save_track+0x3e/0x80 [ 190.131671][ T6476] __kasan_slab_alloc+0x6c/0x80 [ 190.131697][ T6476] kmem_cache_alloc_noprof+0x33b/0x680 [ 190.131723][ T6476] ep_insert+0x512/0x1820 [ 190.131750][ T6476] do_epoll_ctl_file+0x8bb/0xed0 [ 190.131778][ T6476] __se_sys_epoll_ctl+0x14e/0x210 [ 190.131809][ T6476] do_syscall_64+0x174/0x580 [ 190.131844][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.131866][ T6476] [ 190.131871][ T6476] Freed by task 6475: [ 190.131882][ T6476] kasan_save_track+0x3e/0x80 [ 190.131906][ T6476] kasan_save_free_info+0x46/0x50 [ 190.131942][ T6476] __kasan_slab_free+0x5c/0x80 [ 190.131996][ T6476] kmem_cache_free+0x187/0x6c0 [ 190.132025][ T6476] eventpoll_release_file+0xc2/0x240 [ 190.132054][ T6476] __fput+0x83c/0xa70 [ 190.132078][ T6476] task_work_run+0x1d9/0x270 [ 190.132105][ T6476] get_signal+0x11eb/0x1330 [ 190.132169][ T6476] arch_do_signal_or_restart+0xbc/0x840 [ 190.132193][ T6476] exit_to_user_mode_loop+0xa9/0x680 [ 190.132220][ T6476] do_syscall_64+0x353/0x580 [ 190.132255][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.132278][ T6476] [ 190.132284][ T6476] The buggy address belongs to the object at ffff88803e7029e0 [ 190.132284][ T6476] which belongs to the cache ep_head of size 16 [ 190.132305][ T6476] The buggy address is located 0 bytes inside of [ 190.132305][ T6476] freed 16-byte region [ffff88803e7029e0, ffff88803e7029f0) [ 190.132330][ T6476] [ 190.132337][ T6476] The buggy address belongs to the physical page: [ 190.132366][ T6476] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803e702aa0 pfn:0x3e702 [ 190.132390][ T6476] memcg:ffff888060505001 [ 190.132402][ T6476] flags: 0x80000000000200(workingset|node=0|zone=1) [ 190.132428][ T6476] page_type: f5(slab) [ 190.132452][ T6476] raw: 0080000000000200 ffff8880202f4dc0 ffff88801afab088 ffffea0000fd0810 [ 190.132475][ T6476] raw: ffff88803e702aa0 0000000800800035 00000000f5000000 ffff888060505001 [ 190.132488][ T6476] page dumped because: kasan: bad access detected [ 190.132505][ T6476] page_owner tracks the page as allocated [ 190.132514][ T6476] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4984, tgid 4984 (udevd), ts 49282604637, free_ts 0 [ 190.132553][ T6476] post_alloc_hook+0x1f9/0x250 [ 190.132575][ T6476] get_page_from_freelist+0x265c/0x26e0 [ 190.132600][ T6476] __alloc_frozen_pages_noprof+0x18d/0x380 [ 190.132624][ T6476] allocate_slab+0x74/0x5e0 [ 190.132651][ T6476] refill_objects+0x33c/0x3d0 [ 190.132677][ T6476] __pcs_replace_empty_main+0x373/0x720 [ 190.132705][ T6476] kmem_cache_alloc_noprof+0x433/0x680 [ 190.132725][ T6476] ep_insert+0x512/0x1820 [ 190.132748][ T6476] do_epoll_ctl_file+0x8bb/0xed0 [ 190.132771][ T6476] __se_sys_epoll_ctl+0x14e/0x210 [ 190.132795][ T6476] do_syscall_64+0x174/0x580 [ 190.132824][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.132842][ T6476] page_owner free stack trace missing [ 190.132851][ T6476] [ 190.132856][ T6476] Memory state around the buggy address: [ 190.132868][ T6476] ffff88803e702880: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 190.132883][ T6476] ffff88803e702900: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 190.132897][ T6476] >ffff88803e702980: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 190.132907][ T6476] ^ [ 190.132919][ T6476] ffff88803e702a00: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 190.132934][ T6476] ffff88803e702a80: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 190.132944][ T6476] ================================================================== [ 190.132967][ T6476] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 190.132987][ T6476] CPU: 1 UID: 0 PID: 6476 Comm: syz.2.233 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 190.133018][ T6476] Tainted: [L]=SOFTLOCKUP [ 190.133026][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.133040][ T6476] Call Trace: [ 190.133050][ T6476] [ 190.133059][ T6476] vpanic+0x56c/0xa60 [ 190.133094][ T6476] ? __pfx_vpanic+0x10/0x10 [ 190.133141][ T6476] panic+0xc5/0xd0 [ 190.133172][ T6476] ? __pfx_panic+0x10/0x10 [ 190.133204][ T6476] ? reverse_path_check_proc+0x5b/0x240 [ 190.133255][ T6476] ? rcu_is_watching+0x15/0xb0 [ 190.133287][ T6476] ? reverse_path_check_proc+0x5b/0x240 [ 190.133319][ T6476] check_panic_on_warn+0x89/0xb0 [ 190.133345][ T6476] ? reverse_path_check_proc+0x5b/0x240 [ 190.133376][ T6476] end_report+0x73/0x170 [ 190.133405][ T6476] ? reverse_path_check_proc+0x5b/0x240 [ 190.133438][ T6476] kasan_report+0x128/0x150 [ 190.133466][ T6476] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 190.133501][ T6476] ? reverse_path_check_proc+0x5b/0x240 [ 190.133532][ T6476] ? ep_insert+0xbbb/0x1820 [ 190.133555][ T6476] reverse_path_check_proc+0x5b/0x240 [ 190.133585][ T6476] ? ep_insert+0xbbb/0x1820 [ 190.133608][ T6476] ep_insert+0xc6c/0x1820 [ 190.133640][ T6476] ? __pfx_ep_insert+0x10/0x10 [ 190.133670][ T6476] ? lockdep_hardirqs_on+0x7a/0x110 [ 190.133700][ T6476] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 190.133730][ T6476] ? mutex_lock_nested+0x152/0x1d0 [ 190.133751][ T6476] ? do_epoll_ctl_file+0xc69/0xed0 [ 190.133781][ T6476] do_epoll_ctl_file+0x8bb/0xed0 [ 190.133812][ T6476] ? do_epoll_ctl_file+0xac3/0xed0 [ 190.133841][ T6476] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 190.133870][ T6476] ? __fget_files+0x3a6/0x420 [ 190.133895][ T6476] ? __fget_files+0x2a/0x420 [ 190.133926][ T6476] __se_sys_epoll_ctl+0x14e/0x210 [ 190.133960][ T6476] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 190.133998][ T6476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.134022][ T6476] do_syscall_64+0x174/0x580 [ 190.134059][ T6476] ? clear_bhb_loop+0x40/0x90 [ 190.134085][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.134107][ T6476] RIP: 0033:0x7efff2afce59 [ 190.134127][ T6476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.134158][ T6476] RSP: 002b:00007efff04ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 190.134182][ T6476] RAX: ffffffffffffffda RBX: 00007efff2d76360 RCX: 00007efff2afce59 [ 190.134200][ T6476] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000007 [ 190.134212][ T6476] RBP: 00007efff2b92d6f R08: 0000000000000000 R09: 0000000000000000 [ 190.134227][ T6476] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.134242][ T6476] R13: 00007efff2d763f8 R14: 00007efff2d76360 R15: 00007ffd8e91c738 [ 190.134269][ T6476] [ 190.134895][ T6476] Kernel Offset: disabled