last executing test programs: 5m12.198037941s ago: executing program 2 (id=1213): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) 5m12.061803186s ago: executing program 2 (id=1216): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 5m11.875005661s ago: executing program 2 (id=1218): timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x4, 0x200000000008}) unshare(0x60000600) 5m11.173009389s ago: executing program 2 (id=1230): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 5m10.875475813s ago: executing program 2 (id=1234): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5m10.016904748s ago: executing program 2 (id=1241): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@uuid_off, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 5m9.410904704s ago: executing program 32 (id=1241): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@uuid_off, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 3m5.832987124s ago: executing program 0 (id=2539): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0xff}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000084}, 0x20048015) 3m5.824668731s ago: executing program 0 (id=2540): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) read$FUSE(r0, &(0x7f00000043c0)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x0, @meta={0x54505356, 0xf4b83c9, 0xc4bb, 0x3c1c, 0xc55c324}}) 3m5.753577446s ago: executing program 0 (id=2542): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) 3m5.679520015s ago: executing program 0 (id=2543): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 3m5.647011122s ago: executing program 0 (id=2544): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x2, 0x0, {0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x97}}}, 0x80, 0x0}, 0x200477e5) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="030000000018"}) 3m5.492844023s ago: executing program 0 (id=2545): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) write(r0, &(0x7f0000000400)='4', 0x1) 3m5.163974197s ago: executing program 33 (id=2545): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) write(r0, &(0x7f0000000400)='4', 0x1) 1m20.26921506s ago: executing program 4 (id=3765): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00001a00", @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x51) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000680)=[{&(0x7f0000002540)=""/4097, 0x1001}, {&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000b00)=""/225, 0xe1}, {&(0x7f0000000640)=""/21, 0x15}], 0x4) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m20.09097242s ago: executing program 4 (id=3767): ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000002c0)={0x28, 0x2, 0x0, 0x0, 0x3a98fa, 0x800, 0x6, 0x20b4e9}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604, 0x4, 0x0, 0x1}, 0x10) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) 1m19.970803933s ago: executing program 4 (id=3769): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x0, 0x6}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'batadv_slave_0\x00', @random="f29ff91d255e"}) 1m19.847208723s ago: executing program 4 (id=3770): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 1m19.728390706s ago: executing program 4 (id=3774): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x2, 0x82, 0xd2, 0xd2, 0x0, [], [{{0x9, 0x5, 0x9f, 0x2, 0x40, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m19.30675911s ago: executing program 4 (id=3782): r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) 1m18.967026218s ago: executing program 34 (id=3782): r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) 4.24138102s ago: executing program 1 (id=4633): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4.052858582s ago: executing program 1 (id=4634): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0xf5, 0x80000}) 1.577976099s ago: executing program 6 (id=4667): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') exit(0x5) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0xb2, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.496678924s ago: executing program 5 (id=4669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x1, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "e9c2"}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c840}, 0x0) 1.47273669s ago: executing program 3 (id=4670): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) 1.43094428s ago: executing program 5 (id=4671): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/191, &(0x7f0000000080)=0xbf) 1.386209604s ago: executing program 1 (id=4672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001100), 0xb4dac462410a8f85, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020281", 0x4}], 0x3) 1.385502813s ago: executing program 5 (id=4673): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000003) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x40, 0x7fffffff}) fcntl$setpipe(r1, 0x407, 0x100000) 1.2806945s ago: executing program 5 (id=4674): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0xe0302, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x13, r2, 0x0, r1}) 1.280296571s ago: executing program 1 (id=4675): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000340)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) 1.241843073s ago: executing program 5 (id=4676): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read \\+tc/passwd task.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"!=\"/bin\"\n', 0x4c) 1.205255139s ago: executing program 1 (id=4677): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x42799000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.128679883s ago: executing program 5 (id=4678): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000200000040d81310000000000000010902"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/firmware/usbduxfast_firmware.bin/loading\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='0', 0x1) 664.701776ms ago: executing program 6 (id=4679): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x68) read$FUSE(r1, &(0x7f0000002880)={0x2020}, 0x2020) 591.117466ms ago: executing program 6 (id=4680): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) 524.893951ms ago: executing program 3 (id=4681): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 466.72224ms ago: executing program 6 (id=4682): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 424.557736ms ago: executing program 3 (id=4683): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/3\x00') pwritev(r0, &(0x7f0000000640)=[{&(0x7f0000000680)="cf", 0x1}], 0x1, 0x7ff, 0x0) 244.955824ms ago: executing program 3 (id=4684): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)={[&(0x7f0000000340)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) 174.620619ms ago: executing program 6 (id=4685): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001880)={0x64, 0x0, &(0x7f0000001ac0)=[@dead_binder_done={0x40086310, 0x1}, @release, @free_buffer={0x40086303, r2}, @transaction={0x40406300, {0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x0, 0x60, 0x18, &(0x7f00000018c0)={@flat=@binder={0x73622a85, 0x100, 0x2, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x1a}, @fda={0x66646185, 0xa, 0xfffffffffffffffd, 0x2d}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}}], 0xb54, 0x0, &(0x7f0000000d00)=""/2900}) 140.011126ms ago: executing program 1 (id=4686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x180000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x8, 0x7fffffff, &(0x7f0000000280)='H'}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x7, 0x0, 0x7ffffffe, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0xffffffff, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x4, 0x0, 0xc, 0x0}, {0x3, 0x0, 0xde56351, 0x0}, {0x0, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x15, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) 68.876642ms ago: executing program 3 (id=4687): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x20}}, 0x4) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x44000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x2}}, 0x20) 38.15733ms ago: executing program 6 (id=4688): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) preadv(r0, &(0x7f0000004d00)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x74, 0x80000002) 0s ago: executing program 3 (id=4689): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x231c02, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x40) bind(r0, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) kernel console output (not intermixed with test programs): ] hsr_slave_1: left promiscuous mode [ 199.446132][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.446161][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.478731][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.478750][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.635349][ T63] veth1_macvtap: left promiscuous mode [ 199.635395][ T63] veth0_macvtap: left promiscuous mode [ 199.635541][ T63] veth1_vlan: left promiscuous mode [ 199.635602][ T63] veth0_vlan: left promiscuous mode [ 200.227492][ T8601] sd 0:0:1:0: PR command failed: 1026 [ 200.227526][ T8601] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 200.227554][ T8601] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 200.567691][ T8612] rnbd_client L203: map_device: Unknown parameter or missing value '0x0000000000000fb6' [ 200.650168][ T54] Bluetooth: hci1: command tx timeout [ 201.195259][ T63] team0 (unregistering): Port device team_slave_1 removed [ 201.288809][ T63] team0 (unregistering): Port device team_slave_0 removed [ 201.486917][ T8632] program syz.1.1275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.833825][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 202.695145][ T63] IPVS: stop unused estimator thread 0... [ 202.730141][ T54] Bluetooth: hci1: command tx timeout [ 202.900502][ T8661] program syz.0.1284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.765633][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.767402][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.767533][ T8528] bridge_slave_0: entered allmulticast mode [ 203.797089][ T8528] bridge_slave_0: entered promiscuous mode [ 203.864741][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.864997][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.865142][ T8528] bridge_slave_1: entered allmulticast mode [ 203.895712][ T8528] bridge_slave_1: entered promiscuous mode [ 204.062396][ T8528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.082182][ T8528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.182650][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 204.203814][ T8528] team0: Port device team_slave_0 added [ 204.228165][ T8528] team0: Port device team_slave_1 added [ 204.326105][ T8700] bond0: option arp_interval: invalid value (uy-`24~Nla 4) [ 204.326127][ T8700] bond0: option arp_interval: allowed values 0 - 2147483647 [ 204.365650][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.365665][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.365684][ T8528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.423693][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.423708][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.423727][ T8528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.680911][ T8528] hsr_slave_0: entered promiscuous mode [ 204.686890][ T8528] hsr_slave_1: entered promiscuous mode [ 204.687402][ T8528] debugfs: 'hsr0' already exists in 'hsr' [ 204.687418][ T8528] Cannot create hsr debugfs directory [ 204.812403][ T54] Bluetooth: hci1: command tx timeout [ 204.874796][ T8713] binder: Write failure EFAULT in pid:698 [ 205.111496][ T8720] jffs2: notice: (8720) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 206.217823][ T8528] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.266695][ T8528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.279185][ T8528] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.320352][ T8528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.321404][ T8528] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.388664][ T8528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.389403][ T8528] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.419320][ T8528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 206.606116][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 206.826320][ T8528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.928229][ T8528] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.954473][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.956253][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.999388][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.999466][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.095129][ T8775] loop9: detected capacity change from 0 to 524287936 [ 207.845102][ T8794] jffs2: notice: (8794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 208.440430][ T5725] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 208.592581][ T5725] usb 1-1: New USB device found: idVendor=0079, idProduct=fff2, bcdDevice=ff.ff [ 208.593441][ T5725] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 208.593458][ T5725] usb 1-1: config 0 has no interface number 0 [ 208.593485][ T5725] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.593503][ T5725] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.593519][ T5725] usb 1-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.593548][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.620353][ T5725] usb 1-1: config 0 descriptor?? [ 208.859318][ T8528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.169904][ T5725] input: HID 0079:fff2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.6/0003:0079:FFF2.000B/input/input25 [ 209.642221][ T5725] hid-generic 0003:0079:FFF2.000B: input,hidraw0: USB HID v0.00 Joystick [HID 0079:fff2] on usb-dummy_hcd.0-1/input6 [ 209.715056][ T5725] usb 1-1: USB disconnect, device number 17 [ 209.958455][ T8850] fido_id[8850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 209.998456][ T8528] veth0_vlan: entered promiscuous mode [ 210.099176][ T8528] veth1_vlan: entered promiscuous mode [ 210.256929][ T8528] veth0_macvtap: entered promiscuous mode [ 210.291647][ T8528] veth1_macvtap: entered promiscuous mode [ 210.415811][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.486104][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.530293][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.530330][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.530356][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.530381][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.924081][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.924098][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.255562][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.255579][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.382827][ T8876] netlink: 436 bytes leftover after parsing attributes in process `syz.1.1353'. [ 212.813536][ T8928] jffs2: notice: (8928) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 213.130651][ T5616] Bluetooth: hci4: command 0x1003 tx timeout [ 213.130729][ T54] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 213.179650][ T8942] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [71] [ 213.179669][ T8942] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 213.179680][ T8942] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 213.179689][ T8942] One or more global auth toks could not properly register; rc = [-22] [ 213.179730][ T8942] Error validating options; rc = [-22] [ 213.584928][ T8955] jffs2: notice: (8955) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 213.953404][ T8973] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [118] [ 213.953422][ T8973] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 213.953434][ T8973] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 213.953442][ T8973] One or more global auth toks could not properly register; rc = [-22] [ 213.953466][ T8973] Error validating options; rc = [-22] [ 214.361579][ T8989] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 214.361579][ T8989] program syz.0.1401 not setting count and/or reply_len properly [ 214.972777][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 215.127444][ T5757] hid_parser_main: 7 callbacks suppressed [ 215.150510][ T5757] hid-generic 0005:4C4A:090E.000C: unknown main item tag 0x0 [ 215.312920][ T5757] hid-generic 0005:4C4A:090E.000C: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 215.771996][ T5757] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 215.920948][ T5757] usb 4-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 215.922065][ T5757] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.922084][ T5757] usb 4-1: config 0 has no interface number 0 [ 215.924124][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.924142][ T5757] usb 4-1: Product: syz [ 215.924152][ T5757] usb 4-1: Manufacturer: syz [ 215.924163][ T5757] usb 4-1: SerialNumber: syz [ 215.929326][ T5757] usb 4-1: config 0 descriptor?? [ 216.191491][ T5757] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 216.193891][ T5757] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 216.194148][ T5757] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 216.194183][ T5757] usb 4-1: media controller created [ 216.243934][ T5757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 216.972178][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 217.297249][ T5757] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 217.386104][ T5757] usb 4-1: USB disconnect, device number 16 [ 217.993102][ T9058] can0: slcan on ttyS3. [ 218.198818][ T9058] can0 (unregistered): slcan off ttyS3. [ 218.220295][ T5757] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 218.377182][ T5757] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.377941][ T5757] usb 2-1: not running at top speed; connect to a high speed hub [ 218.377965][ T5757] usb 2-1: New USB device found: idVendor=10b8, idProduct=1fa8, bcdDevice=5e.88 [ 218.379779][ T5757] usb 2-1: config 15 has an invalid interface number: 176 but max is 0 [ 218.379806][ T5757] usb 2-1: config 15 has no interface number 0 [ 218.379827][ T5757] usb 2-1: config 15 interface 176 has no altsetting 0 [ 218.443864][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.443886][ T5757] usb 2-1: Product: syz [ 218.443897][ T5757] usb 2-1: Manufacturer: syz [ 218.443907][ T5757] usb 2-1: SerialNumber: syz [ 218.492477][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1432'. [ 218.725916][ T9079] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1435'. [ 218.780656][ T5709] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 218.815095][ T5616] block nbd0: Receive control failed (result -32) [ 218.931146][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 218.931829][ T5709] usb 4-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 218.934942][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.934966][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.934993][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.939611][ T5709] usb 4-1: config 0 descriptor?? [ 219.117728][ T5757] dvb-usb: found a 'DiBcom NIM8096MD reference design' in warm state. [ 219.137562][ T5757] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 219.153053][ T5757] dvbdev: DVB: registering new adapter (DiBcom NIM8096MD reference design) [ 219.153114][ T5757] usb 2-1: media controller created [ 219.177965][ T5757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 219.347504][ T5757] DVB: Unable to find symbol dib8000_attach() [ 219.347537][ T5757] dvb-usb: no frontend was attached by 'DiBcom NIM8096MD reference design' [ 219.430465][ T5709] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 219.430494][ T5709] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 219.550660][ T5757] rc_core: IR keymap rc-dib0700-rc5 not found [ 219.550689][ T5757] Registered IR keymap rc-empty [ 219.551677][ T5757] dvb-usb: could not initialize remote control. [ 219.551700][ T5757] dvb-usb: DiBcom NIM8096MD reference design successfully initialized and connected. [ 219.604056][ T5757] usb 2-1: USB disconnect, device number 17 [ 219.627813][ T5709] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 219.663684][ T5757] dvb-usb: DiBcom NIM8096MD reference design successfully deinitialized and disconnected. [ 219.828732][ T5709] ft260 0003:0403:6030.000D: failed to retrieve system status [ 219.829023][ T5709] ft260 0003:0403:6030.000D: probe with driver ft260 failed with error -71 [ 219.863371][ T5709] usb 4-1: USB disconnect, device number 17 [ 220.046013][ T9101] bond0: unable to remove nonexistent ARP target 192.0.2.1 [ 220.046037][ T9101] bond0: option arp_ip_target: invalid value (-192.0.2.1) [ 223.162430][ T5709] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 223.312257][ T5709] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 223.313616][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.313651][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 223.313667][ T5709] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.316151][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.316169][ T5709] usb 2-1: Product: syz [ 223.316179][ T5709] usb 2-1: Manufacturer: syz [ 223.316190][ T5709] usb 2-1: SerialNumber: syz [ 223.396426][ T5709] usb 2-1: config 0 descriptor?? [ 223.912070][ T5709] usb 2-1: USB disconnect, device number 18 [ 224.100755][ T5725] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 224.250495][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 224.603258][ T5725] usb 1-1: unable to get BOS descriptor or descriptor too short [ 224.603296][ T5725] usb 1-1: New USB device found: idVendor=2b73, idProduct=001b, bcdDevice=0.40 [ 224.604311][ T5725] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 224.604337][ T5725] usb 1-1: can't read configurations, error -71 [ 224.640217][ T5709] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 224.810100][ T5709] usb 5-1: Using ep0 maxpacket: 32 [ 224.810635][ T5709] usb 5-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 224.811576][ T5709] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 224.811595][ T5709] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 224.811609][ T5709] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 224.811641][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.811656][ T5709] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 224.811673][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 224.811688][ T5709] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 224.811704][ T5709] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 224.811733][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.819798][ T5709] usb 5-1: config 0 descriptor?? [ 225.071122][ T9232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.075162][ T9232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.203543][ T5709] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 225.242206][ T5709] usb 5-1: USB disconnect, device number 2 [ 225.325457][ T5709] usblp0: removed [ 225.706682][ T5709] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 225.861705][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 225.862861][ T5709] usb 5-1: New USB device found: idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 225.863734][ T5709] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 157 [ 225.863755][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 225.863771][ T5709] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 225.868624][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.868643][ T5709] usb 5-1: Product: syz [ 225.868661][ T5709] usb 5-1: Manufacturer: syz [ 225.868672][ T5709] usb 5-1: SerialNumber: syz [ 225.938872][ T5709] usb 5-1: config 0 descriptor?? [ 225.999688][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 226.017195][ T5709] port100 5-1:0.0: NFC: Could not get supported command types [ 226.206944][ T5725] usb 5-1: USB disconnect, device number 3 [ 226.286105][ T9274] blkio.reset_stats is deprecated [ 226.630202][ T9286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1501'. [ 227.253856][ T9308] bond0: option slaves: interface -VetN6h0-g does not exist! [ 228.154459][ T33] audit: type=1400 audit(1791815144.153:16): apparmor="STATUS" operation="profile_load" profile="unconfined" name=222F6F pid=9339 comm="syz.0.1523" [ 228.229624][ T9344] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.332341][ T1437] IPVS: starting estimator thread 0... [ 228.339038][ T9347] IPVS: lc: FWM 3 0x00000003 - no destination available [ 228.371444][ T5758] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 228.422470][ T9349] IPVS: using max 38 ests per chain, 91200 per kthread [ 228.519782][ T9355] zero sized request [ 228.526500][ T5758] usb 2-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 228.529562][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 228.529587][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 228.529603][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 228.529621][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 228.590553][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.590574][ T5758] usb 2-1: Product: syz [ 228.590584][ T5758] usb 2-1: Manufacturer: syz [ 228.590595][ T5758] usb 2-1: SerialNumber: syz [ 228.596693][ T5758] usb 2-1: config 0 descriptor?? [ 228.824384][ T5758] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 229.071541][ T5758] usb 2-1: USB disconnect, device number 19 [ 229.444513][ T9383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.524375][ T9387] binder: Write failure EFAULT in pid:836 [ 229.707068][ T9390] nbd1: detected capacity change from 0 to 127 [ 229.726956][ T5616] block nbd1: Receive control failed (result -32) [ 229.743039][ T4946] block nbd1: Dead connection, failed to find a fallback [ 229.743059][ T4946] block nbd1: shutting down sockets [ 229.743116][ T4946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.743224][ T4946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 229.747143][ T4946] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.747169][ T4946] Buffer I/O error on dev nbd1, logical block 1, async page read [ 229.747245][ T4946] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.747264][ T4946] Buffer I/O error on dev nbd1, logical block 2, async page read [ 229.747335][ T4946] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.747353][ T4946] Buffer I/O error on dev nbd1, logical block 3, async page read [ 229.747666][ T4946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.747686][ T4946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 229.747765][ T4946] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.747783][ T4946] Buffer I/O error on dev nbd1, logical block 1, async page read [ 229.747850][ T4946] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.747868][ T4946] Buffer I/O error on dev nbd1, logical block 2, async page read [ 229.747935][ T4946] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.747954][ T4946] Buffer I/O error on dev nbd1, logical block 3, async page read [ 229.748031][ T4946] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.748049][ T4946] Buffer I/O error on dev nbd1, logical block 0, async page read [ 229.748115][ T4946] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.748134][ T4946] Buffer I/O error on dev nbd1, logical block 1, async page read [ 229.875636][ T8857] ldm_validate_partition_table(): Disk read failed. [ 229.955856][ T8857] Dev nbd1: unable to read RDB block 0 [ 229.978666][ T8857] nbd1: unable to read partition table [ 230.014947][ T8857] ldm_validate_partition_table(): Disk read failed. [ 230.015407][ T8857] Dev nbd1: unable to read RDB block 0 [ 230.015976][ T8857] nbd1: unable to read partition table [ 230.208297][ T9399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.694084][ T9418] netlink: 'syz.0.1560': attribute type 6 has an invalid length. [ 230.694102][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1560'. [ 230.965978][ T9427] bond0: no command found in arp_ip_targets file - use + or - [ 231.324947][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1572'. [ 231.424550][ T9445] dummy0: entered allmulticast mode [ 231.444281][ T9445] dummy0: left allmulticast mode [ 231.710181][ T5758] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 231.863994][ T5758] usb 5-1: New USB device found: idVendor=04fc, idProduct=05d8, bcdDevice=0.00 [ 231.865456][ T5758] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.865479][ T5758] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.865511][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.868025][ T5758] usb 5-1: config 0 descriptor?? [ 232.345804][ T5758] input: HID 04fc:05d8 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04FC:05D8.000E/input/input27 [ 232.504567][ T5758] sunplus 0003:04FC:05D8.000E: input,hidraw0: USB HID vd.8f Joystick [HID 04fc:05d8] on usb-dummy_hcd.4-1/input0 [ 233.119099][ T5758] usb 5-1: USB disconnect, device number 4 [ 233.831048][ T9492] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1594'. [ 234.136168][ T9500] tmpfs: Invalid gid '0x00000000ffffffff' [ 234.400227][ T5709] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 234.552462][ T5758] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 234.580941][ T5709] usb 1-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 234.583563][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.583584][ T5709] usb 1-1: Product: syz [ 234.583595][ T5709] usb 1-1: Manufacturer: syz [ 234.583605][ T5709] usb 1-1: SerialNumber: syz [ 234.585602][ T5709] usb 1-1: config 0 descriptor?? [ 234.645064][ T5709] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 234.713253][ T5758] usb 4-1: New USB device found: idVendor=0a99, idProduct=0001, bcdDevice=0.00 [ 234.714234][ T5758] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.714256][ T5758] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.715694][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 234.715712][ T5758] usb 4-1: Product: syz [ 234.715723][ T5758] usb 4-1: Manufacturer: syz [ 234.785565][ T5758] navman 4-1:1.0: navman converter detected [ 234.809869][ T5758] usb 4-1: navman converter now attached to ttyUSB0 [ 234.949257][ T9522] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 234.993801][ T9508] navman ttyUSB0: navman_open - failed submitting interrupt urb, error -90 [ 234.999089][ T5758] usb 4-1: USB disconnect, device number 18 [ 235.035161][ T5758] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 235.035614][ T5758] navman 4-1:1.0: device disconnected [ 235.137239][ T9524] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1610'. [ 235.296242][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1613'. [ 235.296360][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1613'. [ 235.443933][ T9534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1615'. [ 235.491246][ T5709] gspca_stk1135: reg_w 0x5 err -71 [ 235.492309][ T5709] gspca_stk1135: serial bus timeout: status=0x00 [ 235.492319][ T5709] gspca_stk1135: Sensor write failed [ 235.492344][ T5709] gspca_stk1135: serial bus timeout: status=0x00 [ 235.492351][ T5709] gspca_stk1135: Sensor write failed [ 235.492381][ T5709] gspca_stk1135: serial bus timeout: status=0x00 [ 235.492388][ T5709] gspca_stk1135: Sensor read failed [ 235.492413][ T5709] gspca_stk1135: serial bus timeout: status=0x00 [ 235.492419][ T5709] gspca_stk1135: Sensor read failed [ 235.492424][ T5709] gspca_stk1135: Detected sensor type unknown (0x0) [ 235.492455][ T5709] gspca_stk1135: serial bus timeout: status=0x00 [ 235.492462][ T5709] gspca_stk1135: Sensor read failed [ 235.492486][ T5709] gspca_stk1135: serial bus timeout: status=0x00 [ 235.492493][ T5709] gspca_stk1135: Sensor read failed [ 235.492518][ T5709] gspca_stk1135: serial bus timeout: status=0x00 [ 235.492525][ T5709] gspca_stk1135: Sensor write failed [ 235.492550][ T5709] gspca_stk1135: serial bus timeout: status=0x00 [ 235.492557][ T5709] gspca_stk1135: Sensor write failed [ 235.492612][ T5709] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 235.603374][ T5709] usb 1-1: USB disconnect, device number 20 [ 236.013630][ T63] rpcbind: server 127.0.0.1 not responding, timed out [ 236.242093][ T9555] jffs2: notice: (9555) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 237.110400][ T5709] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 237.262667][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 237.264656][ T5709] usb 5-1: unable to get BOS descriptor or descriptor too short [ 237.264698][ T5709] usb 5-1: New USB device found: idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 237.265555][ T5709] usb 5-1: config 127 has an invalid interface number: 124 but max is 0 [ 237.265573][ T5709] usb 5-1: config 127 has no interface number 0 [ 237.265593][ T5709] usb 5-1: config 127 interface 124 has no altsetting 0 [ 237.267721][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.267740][ T5709] usb 5-1: Product: syz [ 237.267750][ T5709] usb 5-1: Manufacturer: syz [ 237.267761][ T5709] usb 5-1: SerialNumber: syz [ 237.861682][ T9608] netlink: 'syz.3.1646': attribute type 1 has an invalid length. [ 238.242076][ T5757] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 238.270850][ T5709] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 238.403516][ T5757] usb 4-1: New USB device found: idVendor=04d8, idProduct=f002, bcdDevice=0.00 [ 238.404409][ T5757] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.404431][ T5757] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.404449][ T5757] usb 4-1: config 0 interface 0 has no altsetting 0 [ 238.404472][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.409506][ T5757] usb 4-1: config 0 descriptor?? [ 238.524831][ T5709] usb 5-1: unable to get BOS descriptor or descriptor too short [ 238.524890][ T5709] usb 5-1: device firmware changed [ 238.576090][ T5709] usb 5-1: USB disconnect, device number 5 [ 238.960167][ T5757] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf3 found [ 238.960188][ T5757] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf4 found [ 239.111905][ C0] hid-picolcd 0003:04D8:F002.000F: invalid size value (89) for picolcd raw event (0) [ 239.316355][ T5757] usb 4-1: USB disconnect, device number 19 [ 239.891770][ T9652] tipc: Started in network mode [ 239.891797][ T9652] tipc: Node identity ac14140f, cluster identity 4711 [ 239.900336][ T9652] tipc: New replicast peer: 255.255.255.255 [ 239.930805][ T9652] tipc: Enabled bearer , priority 10 [ 240.514473][ T9656] ftl_cs: FTL header not found. [ 240.700092][ T5757] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 240.850615][ T5757] usb 2-1: New USB device found: idVendor=056a, idProduct=5012, bcdDevice=0.00 [ 240.852013][ T5757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 240.852036][ T5757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.852074][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.857548][ T5757] usb 2-1: config 0 descriptor?? [ 241.023596][ T5709] tipc: Node number set to 2886997007 [ 241.049651][ T9656] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536] [ 241.232136][ T9688] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 241.353843][ T5757] wacom 0003:056A:5012.0010: unknown main item tag 0x0 [ 241.353871][ T5757] wacom 0003:056A:5012.0010: unknown main item tag 0x0 [ 241.353890][ T5757] wacom 0003:056A:5012.0010: unknown main item tag 0x0 [ 241.353908][ T5757] wacom 0003:056A:5012.0010: unknown main item tag 0x0 [ 241.353926][ T5757] wacom 0003:056A:5012.0010: unknown main item tag 0x0 [ 241.353944][ T5757] wacom 0003:056A:5012.0010: unknown main item tag 0x0 [ 241.353962][ T5757] wacom 0003:056A:5012.0010: unknown main item tag 0x0 [ 241.353980][ T5757] wacom 0003:056A:5012.0010: unknown main item tag 0x0 [ 241.353999][ T5757] wacom 0003:056A:5012.0010: unknown main item tag 0x0 [ 241.354017][ T5757] wacom 0003:056A:5012.0010: unknown main item tag 0x0 [ 241.359026][ T5757] wacom 0003:056A:5012.0010: ignoring exceeding usage max [ 241.568964][ T5757] usb 2-1: USB disconnect, device number 20 [ 241.679624][ T9698] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input28 [ 241.864008][ T9703] syz.3.1688 uses obsolete (PF_INET,SOCK_PACKET) [ 241.987276][ T9705] input: syz0 as /devices/virtual/input/input29 [ 242.325214][ T9714] loop9: detected capacity change from 0 to 255852544 [ 243.011726][ T9735] kAFS: bad VL server IP address [ 243.198871][ T9740] netlink: 'syz.1.1706': attribute type 83 has an invalid length. [ 243.640475][ T9754] input: syz0 as /devices/virtual/input/input30 [ 244.950830][ T5758] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 245.102010][ T5758] usb 2-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 245.102920][ T5758] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 245.102954][ T5758] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 245.102973][ T5758] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.102992][ T5758] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 245.103011][ T5758] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 245.107084][ T5758] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 245.107120][ T5758] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 245.107148][ T5758] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.107166][ T5758] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 245.107185][ T5758] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 245.108291][ T5758] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 245.108323][ T5758] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 245.108342][ T5758] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.108360][ T5758] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 245.108378][ T5758] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 245.227108][ T5758] usb 2-1: string descriptor 0 read error: -22 [ 245.227208][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.338124][ T5758] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 245.498913][ T9802] jffs2: notice: (9802) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 246.542077][ T9834] IPVS: ip_vs_add_dest(): tunnel port is zero [ 247.298799][ T9854] MTRR 0 not used [ 247.699797][ T5709] usb 2-1: USB disconnect, device number 21 [ 247.770596][ T5758] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 247.921829][ T5758] usb 1-1: Using ep0 maxpacket: 32 [ 247.923918][ T5758] usb 1-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 247.924838][ T5758] usb 1-1: config 32 has an invalid interface number: 85 but max is 0 [ 247.924857][ T5758] usb 1-1: config 32 has no interface number 0 [ 247.924885][ T5758] usb 1-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.924905][ T5758] usb 1-1: config 32 interface 85 has no altsetting 0 [ 247.935441][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.935460][ T5758] usb 1-1: Product: syz [ 247.935471][ T5758] usb 1-1: Manufacturer: syz [ 247.935481][ T5758] usb 1-1: SerialNumber: syz [ 248.226600][ T9878] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1771'. [ 248.595599][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1774'. [ 248.810541][ T5758] appletouch 1-1:32.85: Geyser mode initialized. [ 248.814668][ T5758] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.85/input/input31 [ 248.819538][ C0] appletouch 1-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 249.027458][ T9902] kvm_intel: kvm [9901]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2000000400009 [ 249.057079][ T5709] usb 1-1: USB disconnect, device number 21 [ 249.245004][ T5709] appletouch 1-1:32.85: input: appletouch disconnected [ 249.670534][ T5757] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 249.827184][ T5757] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.827223][ T5757] usb 2-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 249.828780][ T5757] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.828799][ T5757] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.874589][ T5757] usb 2-1: string descriptor 0 read error: -22 [ 249.874696][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.907397][ T5757] usb 2-1: selecting invalid altsetting 1 [ 249.936053][ T5757] usb 2-1: unit 6 not found! [ 250.318581][ T9928] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 250.337978][ T5757] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 250.517581][ T5757] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 250.563417][ T5757] usb 2-1: USB disconnect, device number 22 [ 250.948483][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 251.000666][ T9941] ovs-dp0: entered promiscuous mode [ 251.018530][ T9943] ovs-dp0: left promiscuous mode [ 251.422236][ T9949] Falling back ldisc for ttyS3. [ 252.591975][ T5725] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 252.742646][ T5725] usb 1-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 252.765062][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.765085][ T5725] usb 1-1: Product: syz [ 252.765095][ T5725] usb 1-1: Manufacturer: syz [ 252.765106][ T5725] usb 1-1: SerialNumber: syz [ 252.768076][ T5725] usb 1-1: config 0 descriptor?? [ 253.022240][ T5725] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 022 [ 253.698471][ T33] audit: type=1326 audit(1791815169.693:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1829" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62aa79e1d9 code=0x7fc00000 [ 254.162284][ T5757] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 254.318112][ T5757] usb 2-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 254.329772][ T5757] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 254.329801][ T5757] usb 2-1: can't read configurations, error -71 [ 254.409164][ T33] audit: type=1326 audit(1791815170.403:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1829" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f62aa79e1d9 code=0x7fc00000 [ 254.553456][T10023] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1834'. [ 254.692426][T10027] i2c i2c-0: new_device: Can't parse I2C address [ 255.293862][ T9980] i2c i2c-1: failure writing data [ 255.296527][ T5757] usb 1-1: USB disconnect, device number 22 [ 255.393714][T10047] sg_write: data in/out 344028/136 bytes for SCSI command 0x0-- guessing data in; [ 255.393714][T10047] program syz.3.1846 not setting count and/or reply_len properly [ 255.853630][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.024804][T10072] tmpfs: Using encoding : utf8-12.1.0 [ 256.038651][T10072] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 256.800117][ T5758] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 256.950302][ T5758] usb 1-1: Using ep0 maxpacket: 16 [ 256.952424][ T5758] usb 1-1: unable to get BOS descriptor or descriptor too short [ 256.952462][ T5758] usb 1-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 256.953390][ T5758] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 256.956236][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.956255][ T5758] usb 1-1: Product: syz [ 256.956266][ T5758] usb 1-1: Manufacturer: syz [ 256.956277][ T5758] usb 1-1: SerialNumber: syz [ 257.243212][ T5758] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 257.245798][ T5758] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 257.437551][ T5758] usb 1-1: 2:1 : can't get High Capability descriptor [ 257.679028][ T5757] usb 1-1: USB disconnect, device number 23 [ 258.659561][T10148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.707091][T10152] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 258.707535][T10152] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 258.730389][ T5616] Bluetooth: hci1: command tx timeout [ 258.886515][ T33] audit: type=1400 audit(1791815174.883:19): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=10155 comm="syz.0.1897" name="p" offset=64 [ 259.562609][ T33] audit: type=1400 audit(1791815175.563:20): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="fo/" pid=10173 comm="syz.3.1906" name="fo/" offset=50 [ 260.124864][T10192] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 260.310811][T10195] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.312377][T10195] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 260.460884][T10195] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.460987][T10195] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 260.468553][T10195] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.468646][T10195] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 260.518101][T10195] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 260.532765][T10195] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.532878][T10195] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 260.786653][T10195] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 260.907891][ T33] audit: type=1400 audit(1791815176.903:21): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=10212 comm="syz.1.1921" name="p" offset=79 [ 261.350202][ T5758] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 261.501345][ T5758] usb 2-1: New USB device found: idVendor=0457, idProduct=07da, bcdDevice=0.00 [ 261.502619][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 261.502645][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.502661][ T5758] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 261.502691][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.505812][ T5758] usb 2-1: config 0 descriptor?? [ 261.543038][ T5709] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 261.730018][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 261.730785][ T5709] usb 4-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 261.731846][ T5709] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 261.731873][ T5709] usb 4-1: config 0 has no interface number 0 [ 261.734935][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.734956][ T5709] usb 4-1: Product: syz [ 261.734967][ T5709] usb 4-1: Manufacturer: syz [ 261.734978][ T5709] usb 4-1: SerialNumber: syz [ 261.797288][ T5709] usb 4-1: config 0 descriptor?? [ 261.818977][ T5709] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 261.928822][ T5758] hid-multitouch 0003:0457:07DA.0011: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 261.945434][ T5725] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 262.031776][ T5709] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 262.037711][ T5709] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 262.093404][ T5725] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 262.111936][ T5725] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 262.111958][ T5725] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 262.115167][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.115188][ T5725] usb 1-1: Product: syz [ 262.115199][ T5725] usb 1-1: Manufacturer: syz [ 262.115210][ T5725] usb 1-1: SerialNumber: syz [ 262.196866][ T5709] usb 2-1: USB disconnect, device number 25 [ 262.330159][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 262.465572][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 262.466277][ T5709] usb 4-1: USB disconnect, device number 20 [ 262.491090][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 262.491179][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 262.499211][ T5709] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 262.534583][ T5709] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 262.535254][ T5709] quatech2 4-1:0.51: device disconnected [ 262.571700][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 262.794691][ C0] usb 1-1: invalid arpc response id received: 28 [ 262.995683][ T5725] usb 1-1: failed to send ARPC request 1: -71 [ 262.996008][ T5725] usb 1-1: failed to execute ARPC: -71 [ 262.996021][ T5725] usb 1-1: failed to set connected state for cport 0: -71 [ 262.996035][ T5725] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 262.996731][ T5725] usb 1-1: failed to send ARPC request 3: -71 [ 262.996929][ T5725] usb 1-1: failed to execute ARPC: -71 [ 262.996941][ T5725] usb 1-1: failed to clear cport 0: -71 [ 262.996959][ T5725] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 263.106425][ T5725] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 263.141545][ T5725] usb 1-1: USB disconnect, device number 24 [ 263.960115][ T5709] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 264.031358][ T33] audit: type=1400 audit(1791815180.033:22): apparmor="STATUS" operation="profile_load" info="failed to create" error=-2 profile="unconfined" name="//o" pid=10272 comm="syz.3.1949" [ 264.110682][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 264.113786][ T5709] usb 1-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 264.115465][ T5709] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 264.115495][ T5709] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 264.115521][ T5709] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 264.115540][ T5709] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 264.115560][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 264.117326][ T5709] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 264.117345][ T5709] usb 1-1: Product: syz [ 264.117355][ T5709] usb 1-1: Manufacturer: syz [ 264.117365][ T5709] usb 1-1: SerialNumber: syz [ 264.229223][ T5709] usb 1-1: config 0 descriptor?? [ 264.248362][ T5709] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 264.271809][ T5709] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 264.411473][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 264.515450][ T5709] usb 1-1: USB disconnect, device number 25 [ 264.515497][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 264.538776][ T5709] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 264.570261][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 264.570309][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 264.650419][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 264.950241][ T5758] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 265.102277][ T5758] usb 4-1: Using ep0 maxpacket: 16 [ 265.104352][ T5758] usb 4-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 265.105252][ T5758] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.105275][ T5758] usb 4-1: config 0 interface 0 has no altsetting 0 [ 265.105299][ T5758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.161343][ T5758] usb 4-1: config 0 descriptor?? [ 265.203071][ T33] audit: type=1400 audit(1791815181.203:23): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10299 comm="syz.4.1962" name="unknown" offset=16 [ 265.627080][ T5758] mcp2221 0003:04D8:00DD.0012: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 266.071027][ T5758] usb 4-1: USB disconnect, device number 21 [ 266.461880][ T5725] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 266.515833][T10330] netlink: 'syz.4.1976': attribute type 2 has an invalid length. [ 266.515853][T10330] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1976'. [ 266.624195][ T5725] usb 1-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00 [ 266.627807][ T5725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.627844][ T5725] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.627862][ T5725] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.627878][ T5725] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 266.627908][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.650154][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 266.730483][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 266.910504][ T1437] Bluetooth: hci4: Frame reassembly failed (-84) [ 267.165699][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 267.166186][ T5725] lg-g15 0003:046D:C222.0013: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 267.221306][ T5725] lg-g15 0003:046D:C222.0013: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 267.372662][ T5725] usb 1-1: USB disconnect, device number 26 [ 267.566578][T10354] overlayfs: invalid origin (0000) [ 267.927376][T10363] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1991'. [ 267.927408][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1991'. [ 268.972562][ T5616] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 269.486170][T10413] db_root: cannot open: L [ 271.100069][ T5725] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 271.253543][ T5725] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 271.254527][ T5725] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 271.254563][ T5725] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 271.254579][ T5725] usb 2-1: config 0 interface 0 has no altsetting 0 [ 271.256559][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 271.256576][ T5725] usb 2-1: Product: syz [ 271.256587][ T5725] usb 2-1: Manufacturer: syz [ 271.256597][ T5725] usb 2-1: SerialNumber: syz [ 271.323928][ T5725] usb 2-1: config 0 descriptor?? [ 271.328593][ T5725] hub 2-1:0.0: bad descriptor, ignoring hub [ 271.328614][ T5725] hub 2-1:0.0: probe with driver hub failed with error -5 [ 271.356697][ T5725] usb 2-1: selecting invalid altsetting 0 [ 272.094370][T10461] usb 2-1: reset high-speed USB device number 26 using dummy_hcd [ 272.287794][T10481] FAULT_INJECTION: forcing a failure. [ 272.287794][T10481] name fail_futex, interval 1, probability 0, space 0, times 1 [ 272.287833][T10481] CPU: 0 UID: 0 PID: 10481 Comm: syz.4.2043 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.287856][T10481] Tainted: [L]=SOFTLOCKUP [ 272.287862][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 272.287879][T10481] Call Trace: [ 272.287887][T10481] [ 272.287894][T10481] dump_stack_lvl+0xe8/0x150 [ 272.287917][T10481] should_fail_ex+0x3eb/0x540 [ 272.287937][T10481] get_futex_key+0x1b4/0x1580 [ 272.287962][T10481] ? __pfx_get_futex_key+0x10/0x10 [ 272.287981][T10481] ? __pfx___blk_flush_plug+0x10/0x10 [ 272.287997][T10481] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 272.288019][T10481] futex_wake+0x119/0x5f0 [ 272.288038][T10481] ? __pfx_futex_wake+0x10/0x10 [ 272.288056][T10481] ? __pfx___up_read+0x10/0x10 [ 272.288073][T10481] ? madvise_unlock+0x98/0x200 [ 272.288092][T10481] do_futex+0x458/0x4e0 [ 272.288105][T10481] ? madvise_unlock+0x98/0x200 [ 272.288124][T10481] ? __pfx_do_futex+0x10/0x10 [ 272.288152][T10481] __se_sys_futex+0x3a8/0x450 [ 272.288173][T10481] ? __pfx___se_sys_futex+0x10/0x10 [ 272.288187][T10481] ? rcu_is_watching+0x16/0xb0 [ 272.288208][T10481] ? __x64_sys_futex+0x21/0xf0 [ 272.288225][T10481] do_syscall_64+0x166/0x520 [ 272.288241][T10481] ? trace_irq_disable+0x3b/0x140 [ 272.288254][T10481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.288271][T10481] ? clear_bhb_loop+0x70/0xc0 [ 272.288288][T10481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.288304][T10481] RIP: 0033:0x7f62aa79e1d9 [ 272.288323][T10481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.288337][T10481] RSP: 002b:00007f62ab5dd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 272.288354][T10481] RAX: ffffffffffffffda RBX: 00007f62aaa25fa8 RCX: 00007f62aa79e1d9 [ 272.288366][T10481] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f62aaa25fac [ 272.288376][T10481] RBP: 00007f62aaa25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 272.288387][T10481] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 272.288398][T10481] R13: 00007f62aaa26038 R14: 00007ffc836e7530 R15: 00007ffc836e7618 [ 272.288423][T10481] [ 273.018538][ T5709] usb 2-1: USB disconnect, device number 26 [ 273.200202][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 273.350815][ T9] usb 1-1: New USB device found: idVendor=2466, idProduct=8010, bcdDevice=1.00 [ 273.351862][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.351912][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.441561][ T5758] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 273.590109][ T5758] usb 4-1: Using ep0 maxpacket: 8 [ 273.590876][ T5758] usb 4-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 273.591789][ T5758] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 273.591813][ T5758] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 273.591856][ T5758] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 273.591895][ T5758] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.591921][ T5758] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 273.591940][ T5758] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 273.591960][ T5758] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 273.591980][ T5758] usb 4-1: config 168 interface 0 has no altsetting 0 [ 273.592823][ T5758] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 273.592846][ T5758] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 273.592892][ T5758] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 273.592918][ T5758] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.592937][ T5758] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 273.592955][ T5758] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 273.592974][ T5758] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 273.592994][ T5758] usb 4-1: config 168 interface 0 has no altsetting 0 [ 273.594527][ T5758] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 273.594569][ T5758] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 273.594596][ T5758] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 273.594616][ T5758] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.594634][ T5758] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 273.594653][ T5758] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 273.594672][ T5758] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 273.594710][ T5758] usb 4-1: config 168 interface 0 has no altsetting 0 [ 273.598725][ T5758] usb 4-1: string descriptor 0 read error: -22 [ 273.598836][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.941001][ T9] usb 1-1: cannot find UAC_HEADER [ 274.009768][ T5758] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 274.128648][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 274.169446][ T9] usb 1-1: USB disconnect, device number 27 [ 274.261471][ T5758] usb 4-1: USB disconnect, device number 22 [ 274.353728][T10512] netlink: 703 bytes leftover after parsing attributes in process `syz.1.2056'. [ 277.087328][T10554] Invalid argument reading file caps for ./file0 [ 278.132914][T10586] Failure starting scanning (-16) [ 278.137401][ C0] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.137459][ C0] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.137506][ C0] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.301063][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 278.310083][ T5758] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 278.454424][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 278.469751][ T9] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.483293][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.483329][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.485263][ T9] usb 1-1: config 0 descriptor?? [ 278.503252][ T5758] usb 2-1: Using ep0 maxpacket: 32 [ 278.504384][ T5758] usb 2-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 278.514441][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.514466][ T5758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.514512][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.590456][ T5758] usb 2-1: config 0 descriptor?? [ 278.598806][ T5758] hub 2-1:0.0: USB hub found [ 278.703809][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 278.812274][ T5758] hub 2-1:0.0: 1 port detected [ 278.936696][ T5709] usb 1-1: USB disconnect, device number 28 [ 279.022358][ T5758] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 279.045779][ T5758] usbhid 2-1:0.0: can't add hid device: -71 [ 279.045878][ T5758] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 279.081758][ T5758] usb 2-1: USB disconnect, device number 27 [ 280.303933][ T33] audit: type=1326 audit(1791815196.303:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.4.2117" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62aa79e1d9 code=0x0 [ 280.690124][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 280.841084][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 280.841584][ T9] usb 4-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 280.843605][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 280.843625][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 280.843640][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 280.843672][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.843688][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.843705][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.843720][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.843737][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.843769][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.848147][ T9] usb 4-1: config 0 descriptor?? [ 281.204318][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 281.271626][ T9] usb 4-1: USB disconnect, device number 23 [ 281.292441][ T9] usblp0: removed [ 281.653738][T10679] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 281.684265][T10678] syz.4.2130 (10678) used greatest stack depth: 19248 bytes left [ 281.740335][ T9] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 281.892983][ T9] usb 4-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 281.895445][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 281.895466][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 281.895481][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 281.895514][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.895531][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.895546][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.895576][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.901453][ T9] usb 4-1: config 0 descriptor?? [ 282.176993][T10697] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 282.176993][T10697] The task syz.1.2137 (10697) triggered the difference, watch for misbehavior. [ 282.206925][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 282.421717][ T9] usb 4-1: USB disconnect, device number 24 [ 282.448594][ T9] usblp0: removed [ 283.058842][T10712] syzkaller1: entered promiscuous mode [ 283.058860][T10712] syzkaller1: entered allmulticast mode [ 283.490015][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 283.640165][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 283.642323][ T9] usb 4-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 283.645850][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.645870][ T9] usb 4-1: Product: syz [ 283.645880][ T9] usb 4-1: Manufacturer: syz [ 283.645891][ T9] usb 4-1: SerialNumber: syz [ 283.760132][ T5758] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 283.911466][ T5758] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 283.912394][ T5758] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 283.913307][ T5758] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 283.913324][ T5758] usb 1-1: SerialNumber: syz [ 284.015371][T10730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.303719][ T9] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 284.336757][T10740] netlink: 'syz.1.2160': attribute type 1 has an invalid length. [ 284.461831][T10744] FAULT_INJECTION: forcing a failure. [ 284.461831][T10744] name failslab, interval 1, probability 0, space 0, times 1 [ 284.461859][T10744] CPU: 0 UID: 0 PID: 10744 Comm: syz.1.2162 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.461882][T10744] Tainted: [L]=SOFTLOCKUP [ 284.461887][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 284.461898][T10744] Call Trace: [ 284.461904][T10744] [ 284.461910][T10744] dump_stack_lvl+0xe8/0x150 [ 284.461944][T10744] should_fail_ex+0x3eb/0x540 [ 284.461964][T10744] should_failslab+0xa8/0x100 [ 284.461982][T10744] __kmalloc_cache_noprof+0x9e/0x600 [ 284.461999][T10744] ? ext4_init_fs_context+0x4f/0xf0 [ 284.462013][T10744] ? ext4_init_fs_context+0x4f/0xf0 [ 284.462034][T10744] ext4_init_fs_context+0x4f/0xf0 [ 284.462050][T10744] alloc_fs_context+0x99e/0xd00 [ 284.462072][T10744] __se_sys_fsopen+0x118/0x370 [ 284.462090][T10744] do_syscall_64+0x166/0x520 [ 284.462105][T10744] ? trace_irq_disable+0x3b/0x140 [ 284.462119][T10744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.462136][T10744] ? clear_bhb_loop+0x70/0xc0 [ 284.462153][T10744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.462169][T10744] RIP: 0033:0x7fa018f9e1d9 [ 284.462183][T10744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.462198][T10744] RSP: 002b:00007fa019e34028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 284.462215][T10744] RAX: ffffffffffffffda RBX: 00007fa019225fa0 RCX: 00007fa018f9e1d9 [ 284.462227][T10744] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000700 [ 284.462237][T10744] RBP: 00007fa019035888 R08: 0000000000000000 R09: 0000000000000000 [ 284.462247][T10744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.462256][T10744] R13: 00007fa019226038 R14: 00007fa019225fa0 R15: 00007ffdb0cb1918 [ 284.462280][T10744] [ 284.687783][ T9] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 284.698408][ T9] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 284.699028][ T9] usb 4-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 284.745525][ T5758] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 284.885814][ T9] usb 4-1: USB disconnect, device number 25 [ 286.306635][ T5758] usb 1-1: USB disconnect, device number 29 [ 286.326411][ T5758] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 286.434367][T10782] loop5: detected capacity change from 0 to 7 [ 286.473153][T10783] Invalid argument reading file caps for ./file0 [ 286.481399][T10782] Dev loop5: unable to read RDB block 7 [ 286.481439][T10782] loop5: AHDI p1 p2 p4 [ 286.481456][T10782] loop5: partition table partially beyond EOD, truncated [ 286.482139][T10782] loop5: p1 size 4261412863 extends beyond EOD, truncated [ 286.627945][T10782] loop5: p4 start 3288604672 is beyond EOD, truncated [ 286.904093][ T8857] udevd[8857]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 287.224116][T10786] printk: console [ttyS0] disabled [ 472.303778][T15842] printk: console [ttyS0] enabled [ 472.350319][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 472.350742][ T9] usb 2-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 472.351499][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.351515][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.354442][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.354462][ T9] usb 2-1: Product: syz [ 472.354473][ T9] usb 2-1: Manufacturer: syz [ 472.354483][ T9] usb 2-1: SerialNumber: syz [ 472.424951][ T9] usb 2-1: 0:2 : does not exist [ 472.564328][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 472.600440][ T9] usb 2-1: USB disconnect, device number 75 [ 472.638524][ T8857] udevd[8857]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.680358][T14745] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 472.830507][T14745] usb 6-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 472.832005][T14745] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 472.832032][T14745] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 472.832060][T14745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.834275][T15847] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 472.838603][T14745] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 472.941138][ T5709] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 473.047427][T14745] usb 6-1: USB disconnect, device number 36 [ 473.090776][ T5709] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 473.091777][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.091801][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.091817][ T5709] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.091844][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.093078][ T5709] usb 4-1: config 0 descriptor?? [ 473.199468][T15852] FAULT_INJECTION: forcing a failure. [ 473.199468][T15852] name failslab, interval 1, probability 0, space 0, times 0 [ 473.199498][T15852] CPU: 0 UID: 0 PID: 15852 Comm: syz.1.4345 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 473.199522][T15852] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 473.199530][T15852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 473.199540][T15852] Call Trace: [ 473.199546][T15852] [ 473.199553][T15852] dump_stack_lvl+0xe8/0x150 [ 473.199575][T15852] should_fail_ex+0x3eb/0x540 [ 473.199596][T15852] should_failslab+0xa8/0x100 [ 473.199612][T15852] __kmalloc_cache_noprof+0x9e/0x600 [ 473.199627][T15852] ? __mutex_unlock_slowpath+0x731/0x900 [ 473.199644][T15852] ? cec_open+0xe1/0x7a0 [ 473.199693][T15852] ? cec_open+0xe1/0x7a0 [ 473.199707][T15852] ? rcu_is_watching+0x16/0xb0 [ 473.199724][T15852] cec_open+0xe1/0x7a0 [ 473.199738][T15852] ? irqentry_exit+0x218/0x920 [ 473.199753][T15852] ? __pfx_cec_open+0x10/0x10 [ 473.199769][T15852] ? __pfx_cec_open+0x10/0x10 [ 473.199787][T15852] chrdev_open+0x4d9/0x600 [ 473.199803][T15852] ? __pfx_chrdev_open+0x10/0x10 [ 473.199818][T15852] ? rcu_is_watching+0x16/0xb0 [ 473.199835][T15852] ? __pfx_chrdev_open+0x10/0x10 [ 473.199848][T15852] do_dentry_open+0x80e/0x1360 [ 473.199867][T15852] vfs_open_consume+0x4a/0x350 [ 473.199881][T15852] ? path_openat+0x148a/0x1da0 [ 473.199897][T15852] path_openat+0x14a6/0x1da0 [ 473.199918][T15852] do_file_open+0x23e/0x4a0 [ 473.199935][T15852] ? __pfx_do_file_open+0x10/0x10 [ 473.199957][T15852] ? _raw_spin_unlock+0x28/0x50 [ 473.199970][T15852] ? alloc_fd+0x6af/0x760 [ 473.199988][T15852] do_sys_openat2+0x115/0x200 [ 473.200003][T15852] ? rcu_is_watching+0x16/0xb0 [ 473.200017][T15852] ? __pfx_do_sys_openat2+0x10/0x10 [ 473.200034][T15852] ? do_user_addr_fault+0xd3f/0x1480 [ 473.200051][T15852] __x64_sys_openat+0x138/0x170 [ 473.200068][T15852] do_syscall_64+0x166/0x520 [ 473.200081][T15852] ? trace_irq_disable+0x3b/0x140 [ 473.200095][T15852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.200111][T15852] ? clear_bhb_loop+0x70/0xc0 [ 473.200126][T15852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.200142][T15852] RIP: 0033:0x7fa018f5ea0e [ 473.200156][T15852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 473.200171][T15852] RSP: 002b:00007fa019e33b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.200189][T15852] RAX: ffffffffffffffda RBX: 00007fa019e346c0 RCX: 00007fa018f5ea0e [ 473.200200][T15852] RDX: 0000000000000000 RSI: 00007fa019e33c00 RDI: ffffffffffffff9c [ 473.200211][T15852] RBP: 00007fa019e33c00 R08: 0000000000000000 R09: 0000000000000000 [ 473.200222][T15852] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 473.200232][T15852] R13: 00007fa019226038 R14: 00007fa019225fa0 R15: 00007ffdb0cb1918 [ 473.200251][T15852] [ 473.722701][ T5709] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 473.722729][ T5709] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 473.722748][ T5709] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 473.722767][ T5709] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 473.722786][ T5709] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 473.722805][ T5709] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 473.727138][ T5709] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 473.727162][ T5709] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 473.727182][ T5709] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 473.727201][ T5709] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 473.817655][ T5709] plantronics 0003:047F:FFFF.004A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 473.873450][T15861] pimreg: entered allmulticast mode [ 473.932702][ T5757] usb 4-1: USB disconnect, device number 70 [ 474.449951][ T5757] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 474.600308][ T5757] usb 6-1: Using ep0 maxpacket: 8 [ 474.601019][ T5757] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.601835][ T5757] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 474.601858][ T5757] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 474.601876][ T5757] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.601893][ T5757] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.601919][ T5757] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.688112][ T5709] usb 7-1: USB disconnect, device number 11 [ 474.763130][T15889] pimreg: entered allmulticast mode [ 474.816763][ T5757] usb 6-1: GET_CAPABILITIES returned 0 [ 474.816792][ T5757] usbtmc 6-1:16.0: can't read capabilities [ 475.022832][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 475.022886][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 475.022927][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 475.022968][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 475.023009][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 475.023050][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 475.023090][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 475.024556][ T5709] usb 6-1: USB disconnect, device number 37 [ 475.499985][ T5757] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 475.649934][ T5757] usb 2-1: Using ep0 maxpacket: 8 [ 475.650490][ T5757] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 475.651483][ T5757] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.651505][ T5757] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 475.651523][ T5757] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 475.651540][ T5757] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.651568][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.864661][ T5757] usb 2-1: GET_CAPABILITIES returned 0 [ 475.864692][ T5757] usbtmc 2-1:16.0: can't read capabilities [ 475.897890][T15912] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 475.897911][T15912] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 475.898024][T15912] vhci_hcd vhci_hcd.0: Device attached [ 475.928331][T15911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.074172][ T5709] usb 2-1: USB disconnect, device number 76 [ 476.101140][ T5757] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 476.160048][ T5757] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 476.180344][ T9] usb 4-1: new low-speed USB device number 71 using dummy_hcd [ 476.259727][T15931] binder: Failure in copy_transaction_data: EFAULT [ 476.332578][ T9] usb 4-1: New USB device found: idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 476.333691][ T9] usb 4-1: config 0 has no interfaces? [ 476.333713][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.334788][ T9] usb 4-1: config 0 descriptor?? [ 476.453502][T15939] batadv_slave_1: entered promiscuous mode [ 476.453899][T15938] batadv_slave_1: left promiscuous mode [ 476.529794][ T9] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 476.550813][T15913] vhci_hcd: unknown pdu 2 [ 476.555803][ T1417] vhci_hcd vhci_hcd.3: stop threads [ 476.555819][ T1417] vhci_hcd vhci_hcd.3: release socket [ 476.555877][ T1417] vhci_hcd vhci_hcd.3: disconnect device [ 476.580344][ T9] usb 4-1: USB disconnect, device number 71 [ 476.600700][ T5757] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 476.866659][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4389'. [ 477.304964][T15976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.442639][T15984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4403'. [ 477.470589][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 477.619923][ T5709] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 477.620780][ T9] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 477.621578][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.624750][ T9] usb 2-1: config 0 descriptor?? [ 477.648502][T14745] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 477.771142][ T5709] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 477.771920][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.774377][ T5709] usb 6-1: config 0 descriptor?? [ 477.801660][T14745] usb 4-1: Using ep0 maxpacket: 16 [ 477.803744][T14745] usb 4-1: New USB device found: idVendor=054c, idProduct=1000, bcdDevice=0.00 [ 477.824671][T14745] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.824698][T14745] usb 4-1: config 0 interface 0 has no altsetting 0 [ 477.824720][T14745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.862466][T14745] usb 4-1: config 0 descriptor?? [ 477.883613][ T9] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 478.050049][ T5709] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 478.092970][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 478.092991][ T9] [drm] Initialized udl on minor 1 [ 478.199960][ T5757] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 478.258320][ T5709] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 478.258343][ T5709] [drm] Initialized udl on minor 2 [ 478.283880][T14745] sony 0003:054C:1000.004C: missing HID_OUTPUT_REPORT 0 [ 478.290296][T14745] sony 0003:054C:1000.004C: hidraw0: USB HID vff.fe Joystick [HID 054c:1000] on usb-dummy_hcd.3-1/input0 [ 478.290324][T14745] sony 0003:054C:1000.004C: failed to claim input [ 478.350441][ T5757] usb 7-1: Using ep0 maxpacket: 8 [ 478.350904][ T5757] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 478.351812][ T5757] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.351834][ T5757] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 478.351869][ T5757] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 478.351886][ T5757] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.351914][ T5757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.478683][T14745] usb 4-1: USB disconnect, device number 72 [ 478.556311][ T5757] usb 7-1: GET_CAPABILITIES returned 0 [ 478.556366][ T5757] usbtmc 7-1:16.0: can't read capabilities [ 478.758954][T14745] usb 7-1: USB disconnect, device number 12 [ 479.060872][T15997] input: syz1 as /devices/virtual/input/input92 [ 479.361219][T14745] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 479.502771][T16011] FAULT_INJECTION: forcing a failure. [ 479.502771][T16011] name failslab, interval 1, probability 0, space 0, times 0 [ 479.502805][T16011] CPU: 0 UID: 0 PID: 16011 Comm: syz.6.4415 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 479.502829][T16011] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 479.502836][T16011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 479.502847][T16011] Call Trace: [ 479.502853][T16011] [ 479.502860][T16011] dump_stack_lvl+0xe8/0x150 [ 479.502882][T16011] should_fail_ex+0x3eb/0x540 [ 479.502903][T16011] should_failslab+0xa8/0x100 [ 479.502919][T16011] __kmalloc_cache_noprof+0x9e/0x600 [ 479.502935][T16011] ? __se_sys_memfd_create+0x21d/0x410 [ 479.502950][T16011] ? __se_sys_memfd_create+0x21d/0x410 [ 479.502967][T16011] __se_sys_memfd_create+0x21d/0x410 [ 479.502983][T16011] do_syscall_64+0x166/0x520 [ 479.502999][T16011] ? trace_irq_disable+0x3b/0x140 [ 479.503013][T16011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.503030][T16011] ? clear_bhb_loop+0x70/0xc0 [ 479.503045][T16011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.503062][T16011] RIP: 0033:0x7f4100f9e1d9 [ 479.503076][T16011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.503091][T16011] RSP: 002b:00007f4101df8028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 479.503109][T16011] RAX: ffffffffffffffda RBX: 00007f4101225fa0 RCX: 00007f4100f9e1d9 [ 479.503121][T16011] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 479.503131][T16011] RBP: 00007f4101035888 R08: 0000000000000000 R09: 0000000000000000 [ 479.503141][T16011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.503151][T16011] R13: 00007f4101226038 R14: 00007f4101225fa0 R15: 00007fff00939ab8 [ 479.503170][T16011] [ 479.536325][T14745] usb 4-1: New USB device found: idVendor=06cd, idProduct=0107, bcdDevice=1.00 [ 479.708128][T14745] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.708165][T14745] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 479.708184][T14745] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 479.708221][T14745] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 479.708239][T14745] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 250 [ 479.708256][T14745] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 479.795053][T14745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.795075][T14745] usb 4-1: Product: syz [ 479.795086][T14745] usb 4-1: Manufacturer: syz [ 479.795097][T14745] usb 4-1: SerialNumber: syz [ 479.796967][T15999] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 479.797072][T15999] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 479.797132][T15999] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 479.797219][T15999] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 479.801459][T14745] keyspan 4-1:1.0: Keyspan 1 port adapter converter detected [ 479.866379][T14745] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 479.868065][T14745] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 82 [ 479.868137][T14745] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 479.895419][T14745] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 480.115180][ T5725] usb 4-1: USB disconnect, device number 73 [ 480.127905][ T5725] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 480.145178][ T5725] keyspan 4-1:1.0: device disconnected [ 480.199937][ T5757] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 480.350869][ T5757] usb 7-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 480.351753][ T5757] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.656180][T16015] device-mapper: ioctl: Unable to rename non-existent device, to .2\.jDH [ 481.314052][ C0] usb 7-1: NFC: Received an invalid frame [ 481.314175][ T5757] usb 7-1: NFC: Unable to get FW version [ 481.314388][ T5757] pn533_usb 7-1:1.0: probe with driver pn533_usb failed with error -5 [ 481.518777][ T5757] usb 7-1: USB disconnect, device number 13 [ 482.079312][T16034] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input93 [ 482.539991][ T5757] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 482.619932][ T5725] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 482.690328][ T5757] usb 4-1: Using ep0 maxpacket: 32 [ 482.692461][ T5757] usb 4-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 482.693372][ T5757] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 482.693391][ T5757] usb 4-1: config 0 has no interface number 0 [ 482.695194][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.695212][ T5757] usb 4-1: Product: syz [ 482.695223][ T5757] usb 4-1: Manufacturer: syz [ 482.695253][ T5757] usb 4-1: SerialNumber: syz [ 482.698320][ T5757] usb 4-1: config 0 descriptor?? [ 482.731577][ T5757] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 482.789959][ T5725] usb 7-1: Using ep0 maxpacket: 16 [ 482.791062][ T5725] usb 7-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 482.791944][ T5725] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.791966][ T5725] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.791983][ T5725] usb 7-1: config 0 interface 0 has no altsetting 0 [ 482.792006][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.795307][ T5725] usb 7-1: config 0 descriptor?? [ 482.928359][ T5757] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 482.940745][ T5757] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 483.130160][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 483.130365][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 483.131768][ T5757] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 483.135504][ T5757] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 483.135647][ T5757] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 483.184005][ T5709] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 483.184236][ T5709] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 483.185773][ T9] usb 2-1: USB disconnect, device number 77 [ 483.195794][ T5757] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 483.210509][ T5757] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 483.210668][ T5757] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 483.243833][ T5709] usb 6-1: USB disconnect, device number 38 [ 483.305007][ T5725] hid_parser_main: 6 callbacks suppressed [ 483.305027][ T5725] mcp2221 0003:04D8:00DD.004D: unknown main item tag 0x0 [ 483.305064][ T5725] mcp2221 0003:04D8:00DD.004D: unknown main item tag 0x0 [ 483.305084][ T5725] mcp2221 0003:04D8:00DD.004D: unknown main item tag 0x0 [ 483.305102][ T5725] mcp2221 0003:04D8:00DD.004D: unknown main item tag 0x0 [ 483.305121][ T5725] mcp2221 0003:04D8:00DD.004D: unknown main item tag 0x0 [ 483.305529][ T5725] mcp2221 0003:04D8:00DD.004D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 483.398568][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 483.413415][ T195] usb 4-1: USB disconnect, device number 74 [ 483.449047][ T195] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 483.473010][ T195] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 483.473337][ T195] quatech2 4-1:0.51: device disconnected [ 483.516441][ T5709] usb 7-1: USB disconnect, device number 14 [ 483.714128][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4437'. [ 483.714147][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4437'. [ 483.714525][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4437'. [ 483.714541][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4437'. [ 483.839967][ T9] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 483.993805][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 483.997548][ T9] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 483.998319][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 483.998339][ T9] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 483.998356][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 484.000196][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.000215][ T9] usb 2-1: Product: syz [ 484.000226][ T9] usb 2-1: Manufacturer: syz [ 484.000236][ T9] usb 2-1: SerialNumber: syz [ 484.029055][ T9] usb 2-1: config 0 descriptor?? [ 484.188045][ T13] IPVS: stopping estimator thread 0... [ 484.302725][T16080] svc: failed to register nfsdv3 RPC service (errno 97). [ 484.302745][T16080] svc: failed to register nfsaclv3 RPC service (errno 97). [ 484.449062][T16087] FAULT_INJECTION: forcing a failure. [ 484.449062][T16087] name failslab, interval 1, probability 0, space 0, times 0 [ 484.449094][T16087] CPU: 0 UID: 0 PID: 16087 Comm: syz.6.4449 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 484.449123][T16087] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 484.449130][T16087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 484.449140][T16087] Call Trace: [ 484.449146][T16087] [ 484.449154][T16087] dump_stack_lvl+0xe8/0x150 [ 484.449175][T16087] should_fail_ex+0x3eb/0x540 [ 484.449192][T16087] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 484.449208][T16087] should_failslab+0xa8/0x100 [ 484.449224][T16087] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 484.449238][T16087] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 484.449253][T16087] ? kmem_cache_alloc_noprof+0x2b4/0x600 [ 484.449269][T16087] ? mmap_region+0x190b/0x2cd0 [ 484.449283][T16087] ? shmem_alloc_inode+0x28/0x40 [ 484.449297][T16087] ? shmem_alloc_inode+0x28/0x40 [ 484.449313][T16087] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 484.449328][T16087] shmem_alloc_inode+0x28/0x40 [ 484.449342][T16087] alloc_inode+0x6a/0x1b0 [ 484.449358][T16087] new_inode+0x1f/0x170 [ 484.449372][T16087] ? shmem_get_inode+0x29a/0x1030 [ 484.449387][T16087] shmem_get_inode+0x3a4/0x1030 [ 484.449412][T16087] ? __pfx_shmem_get_inode+0x10/0x10 [ 484.449429][T16087] ? __vm_enough_memory+0x11a/0x380 [ 484.449445][T16087] __shmem_file_setup+0x20b/0x370 [ 484.449462][T16087] ? __pfx___shmem_file_setup+0x10/0x10 [ 484.449479][T16087] ? vma_set_pgoff+0x163/0x290 [ 484.449495][T16087] shmem_zero_setup+0x90/0x130 [ 484.449515][T16087] mmap_region+0x1fb7/0x2cd0 [ 484.449536][T16087] ? lock_release+0x4b/0x3c0 [ 484.449551][T16087] ? __pfx_mmap_region+0x10/0x10 [ 484.449566][T16087] ? do_raw_spin_lock+0x12b/0x2f0 [ 484.449581][T16087] ? rcu_is_watching+0x16/0xb0 [ 484.449597][T16087] ? rcu_is_watching+0x16/0xb0 [ 484.449611][T16087] ? trace_hrtimer_start+0x82/0x200 [ 484.449628][T16087] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 484.449648][T16087] ? rcu_is_watching+0x16/0xb0 [ 484.449664][T16087] ? trace_irq_enable+0x3b/0x140 [ 484.449683][T16087] ? __schedule+0x1b5d/0x5b40 [ 484.449714][T16087] ? arch_get_unmapped_area_topdown+0x269/0xc30 [ 484.449742][T16087] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 484.449758][T16087] ? cap_mmap_addr+0xaa/0xf0 [ 484.449773][T16087] ? bpf_lsm_mmap_addr+0x9/0x50 [ 484.449787][T16087] ? security_mmap_addr+0x71/0x240 [ 484.449805][T16087] do_mmap+0xe0a/0x1300 [ 484.449823][T16087] ? __pfx_do_mmap+0x10/0x10 [ 484.449837][T16087] ? lock_acquire+0x58/0x350 [ 484.449851][T16087] ? rcu_is_watching+0x16/0xb0 [ 484.449871][T16087] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 484.449887][T16087] ? down_write_killable+0x179/0x230 [ 484.449904][T16087] ? __pfx_down_write_killable+0x10/0x10 [ 484.449919][T16087] ? apparmor_mmap_file+0x1cc/0x390 [ 484.449933][T16087] ? security_mmap_file+0x4df/0xa20 [ 484.449949][T16087] vm_mmap_pgoff+0x272/0x4e0 [ 484.449966][T16087] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 484.449982][T16087] ? rcu_is_watching+0x16/0xb0 [ 484.450004][T16087] ? ksys_mmap_pgoff+0xf3/0x760 [ 484.450025][T16087] ? rcu_is_watching+0x16/0xb0 [ 484.450038][T16087] ? __x64_sys_mmap+0x7f/0x140 [ 484.450055][T16087] do_syscall_64+0x166/0x520 [ 484.450069][T16087] ? trace_irq_disable+0x3b/0x140 [ 484.450083][T16087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.450100][T16087] ? clear_bhb_loop+0x70/0xc0 [ 484.450116][T16087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.450133][T16087] RIP: 0033:0x7f4100f9e1d9 [ 484.450147][T16087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.450161][T16087] RSP: 002b:00007f4101df8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 484.450179][T16087] RAX: ffffffffffffffda RBX: 00007f4101225fa0 RCX: 00007f4100f9e1d9 [ 484.450191][T16087] RDX: 0000000000000006 RSI: 0000000000b36000 RDI: 0000200000000000 [ 484.450201][T16087] RBP: 00007f4101035888 R08: ffffffffffffffff R09: 000000006a855000 [ 484.450213][T16087] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 484.450223][T16087] R13: 00007f4101226038 R14: 00007f4101225fa0 R15: 00007fff00939ab8 [ 484.450241][T16087] [ 484.693725][ T9] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 485.094991][T11627] svc: failed to register nfsdv3 RPC service (errno 5). [ 485.095012][T11627] failed to unregister udp with rpcbind [ 485.337635][ T9] usb 2-1: USB disconnect, device number 78 [ 485.355517][T16073] IPVS: You probably need to specify IP address on multicast interface. [ 485.355542][T16073] IPVS: Error connecting to the multicast addr [ 485.476487][T16105] loop3: detected capacity change from 0 to 7 [ 485.489456][T16105] Dev loop3: unable to read RDB block 7 [ 485.489479][T16105] loop3: AHDI p3 p4 [ 485.489491][T16105] loop3: partition table partially beyond EOD, truncated [ 485.489592][T16105] loop3: p3 start 1702000233 is beyond EOD, truncated [ 485.721670][T16113] syzkaller1: entered promiscuous mode [ 485.721688][T16113] syzkaller1: entered allmulticast mode [ 486.010921][ T5709] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 486.161014][ T5709] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 486.164770][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.165849][ T5709] usb 6-1: config 0 descriptor?? [ 486.240839][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 486.372469][ T5709] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 486.390993][ T9] usb 4-1: New USB device found: idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 486.393366][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.393402][ T9] usb 4-1: Product: syz [ 486.393413][ T9] usb 4-1: Manufacturer: syz [ 486.393424][ T9] usb 4-1: SerialNumber: syz [ 486.394770][ T9] usb 4-1: config 0 descriptor?? [ 486.442214][ T9] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 486.587068][ T5709] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 486.587090][ T5709] [drm] Initialized udl on minor 1 [ 486.654298][ T33] audit: type=1326 audit(1791815658.656:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16154 comm="syz.1.4476" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa018f9e1d9 code=0x0 [ 486.826212][ T9] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input94 [ 486.958389][ T33] audit: type=1400 audit(1791815658.956:62): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=16165 comm="syz.6.4480" name="unknown" offset=28 [ 487.047179][ T9] usb 4-1: USB disconnect, device number 75 [ 487.641819][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 487.792513][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 487.793947][ T9] usb 7-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00 [ 487.806641][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.806668][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.806693][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.848765][ T9] usb 7-1: config 0 descriptor?? [ 488.121354][T14745] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 488.270029][ T9] savu 0003:1E7D:2D5A.004E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 488.275240][T14745] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 488.279174][T14745] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.279209][T14745] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 488.279229][T14745] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 488.279253][T14745] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 488.279272][T14745] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.328836][T14745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.328857][T14745] usb 4-1: Product: syz [ 488.328868][T14745] usb 4-1: Manufacturer: syz [ 488.328881][T14745] usb 4-1: SerialNumber: syz [ 488.394689][T16195] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 488.396254][T14745] cdc_mbim 4-1:1.0: skipping garbage [ 488.525898][ T5725] usb 7-1: USB disconnect, device number 15 [ 488.597395][T16195] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 489.200279][T16195] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 489.365808][T16215] video0: VIDIOC_REQBUFS [ 489.368255][T16215] video0: VIDIOC_STREAMON [ 489.407151][T14745] cdc_mbim 4-1:1.0: bind() failure [ 489.423895][T14745] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 489.425038][T14745] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 489.426558][T14745] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 489.461403][T14745] usb 4-1: USB disconnect, device number 76 [ 489.652290][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4512'. [ 489.979434][T16236] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 490.260534][T14745] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 490.310448][ T5725] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 490.410690][T14745] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 490.411486][T14745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 490.411535][T14745] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.411552][T14745] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 490.411579][T14745] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.413042][T14745] usb 4-1: config 0 descriptor?? [ 490.465985][ T5725] usb 7-1: Using ep0 maxpacket: 16 [ 490.475900][ T5725] usb 7-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 490.499586][ T5725] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.499612][ T5725] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.499648][ T5725] usb 7-1: config 0 interface 0 has no altsetting 0 [ 490.499671][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.543658][ T5725] usb 7-1: config 0 descriptor?? [ 490.829198][T14745] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 490.954916][ T5725] mcp2221 0003:04D8:00DD.0050: unknown main item tag 0x0 [ 490.954960][ T5725] mcp2221 0003:04D8:00DD.0050: unknown main item tag 0x0 [ 490.954979][ T5725] mcp2221 0003:04D8:00DD.0050: unknown main item tag 0x0 [ 490.954998][ T5725] mcp2221 0003:04D8:00DD.0050: unknown main item tag 0x0 [ 490.955016][ T5725] mcp2221 0003:04D8:00DD.0050: unknown main item tag 0x0 [ 490.955390][ T5725] mcp2221 0003:04D8:00DD.0050: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 491.153313][T16242] i2c i2c-1: unsupported multi-msg i2c transaction [ 491.153854][ T5725] usb 7-1: USB disconnect, device number 16 [ 491.613562][ T5709] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 491.614076][ T5709] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 491.637869][ T5709] usb 6-1: USB disconnect, device number 39 [ 491.645944][T14745] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 491.646214][T14745] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 491.805116][T16258] syzkaller1: entered promiscuous mode [ 491.805136][T16258] syzkaller1: entered allmulticast mode [ 491.856534][T16260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4522'. [ 491.856556][T16260] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4522'. [ 491.856567][T16260] netlink: 'syz.1.4522': attribute type 6 has an invalid length. [ 491.856594][T16260] netlink: 'syz.1.4522': attribute type 4 has an invalid length. [ 491.994538][T16263] tipc: Started in network mode [ 491.994573][T16263] tipc: Node identity 10001, cluster identity 4711 [ 491.994584][T16263] tipc: Node number set to 65537 [ 492.101123][ T5709] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 492.251096][ T5709] usb 6-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 492.253343][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.253364][ T5709] usb 6-1: Product: syz [ 492.253375][ T5709] usb 6-1: Manufacturer: syz [ 492.253386][ T5709] usb 6-1: SerialNumber: syz [ 492.315805][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 492.421420][T16278] FAULT_INJECTION: forcing a failure. [ 492.421420][T16278] name failslab, interval 1, probability 0, space 0, times 0 [ 492.421482][T16278] CPU: 0 UID: 0 PID: 16278 Comm: syz.6.4530 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 492.421506][T16278] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 492.421513][T16278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 492.421524][T16278] Call Trace: [ 492.421530][T16278] [ 492.421537][T16278] dump_stack_lvl+0xe8/0x150 [ 492.421558][T16278] should_fail_ex+0x3eb/0x540 [ 492.421577][T16278] should_failslab+0xa8/0x100 [ 492.421613][T16278] __kmalloc_cache_noprof+0x9e/0x600 [ 492.421636][T16278] ? userio_char_open+0x51/0x1a0 [ 492.421721][T16278] ? userio_char_open+0x51/0x1a0 [ 492.421738][T16278] ? __pfx_userio_char_open+0x10/0x10 [ 492.421752][T16278] userio_char_open+0x51/0x1a0 [ 492.421767][T16278] ? __pfx_userio_char_open+0x10/0x10 [ 492.421782][T16278] misc_open+0x2d5/0x350 [ 492.421797][T16278] chrdev_open+0x4d9/0x600 [ 492.421813][T16278] ? __pfx_chrdev_open+0x10/0x10 [ 492.421828][T16278] ? _raw_spin_unlock+0x28/0x50 [ 492.421845][T16278] ? __pfx_chrdev_open+0x10/0x10 [ 492.421858][T16278] do_dentry_open+0x80e/0x1360 [ 492.421877][T16278] vfs_open_consume+0x4a/0x350 [ 492.421891][T16278] ? path_openat+0x148a/0x1da0 [ 492.421907][T16278] path_openat+0x14a6/0x1da0 [ 492.421928][T16278] do_file_open+0x23e/0x4a0 [ 492.421944][T16278] ? __pfx_do_file_open+0x10/0x10 [ 492.421966][T16278] ? _raw_spin_unlock+0x28/0x50 [ 492.421980][T16278] ? alloc_fd+0x6af/0x760 [ 492.421999][T16278] do_sys_openat2+0x115/0x200 [ 492.422013][T16278] ? __se_sys_futex+0x3a8/0x450 [ 492.422028][T16278] ? __pfx_do_sys_openat2+0x10/0x10 [ 492.422045][T16278] ? rcu_is_watching+0x16/0xb0 [ 492.422062][T16278] __x64_sys_openat+0x138/0x170 [ 492.422079][T16278] do_syscall_64+0x166/0x520 [ 492.422093][T16278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.422109][T16278] ? clear_bhb_loop+0x70/0xc0 [ 492.422125][T16278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.422141][T16278] RIP: 0033:0x7f4100f9e1d9 [ 492.422156][T16278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.422171][T16278] RSP: 002b:00007f4101df8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 492.422189][T16278] RAX: ffffffffffffffda RBX: 00007f4101225fa0 RCX: 00007f4100f9e1d9 [ 492.422202][T16278] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 492.422213][T16278] RBP: 00007f4101035888 R08: 0000000000000000 R09: 0000000000000000 [ 492.422224][T16278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.422234][T16278] R13: 00007f4101226038 R14: 00007f4101225fa0 R15: 00007fff00939ab8 [ 492.422252][T16278] [ 492.502191][ T195] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 492.752083][ T195] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 492.769481][ T195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.771652][ T195] usb 2-1: config 0 descriptor?? [ 492.891261][ T5725] usb 4-1: USB disconnect, device number 77 [ 493.003163][ T195] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 493.041001][T14745] usb 6-1: USB disconnect, device number 40 [ 493.215309][ T195] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 493.215330][ T195] [drm] Initialized udl on minor 1 [ 493.256195][ T33] audit: type=1400 audit(1791815665.256:63): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=16289 comm="syz.3.4535" name="unknown" offset=28 [ 493.349012][T16294] aa_policy_admin_capable: cap_mac_admin? 1 [ 493.349044][T16294] aa_policy_admin_capable: policy locked? 0 [ 493.349054][T16294] aa_parse_debug_params: unknown debug type 'syz0' [ 493.372230][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 493.372468][ T9] ath9k_htc: Failed to initialize the device [ 493.372901][T14745] usb 6-1: ath9k_htc: USB layer deinitialized [ 493.574744][ T33] audit: type=1326 audit(1791815665.576:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16297 comm="syz.6.4538" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4100f9e1d9 code=0x0 [ 494.553721][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4554'. [ 494.740961][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 494.891290][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 494.892663][ T9] usb 4-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 494.896790][ T9] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 494.896810][ T9] usb 4-1: config 0 has no interface number 0 [ 494.896832][ T9] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.896852][ T9] usb 4-1: config 0 interface 85 has no altsetting 0 [ 494.898356][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.898374][ T9] usb 4-1: Product: syz [ 494.898384][ T9] usb 4-1: Manufacturer: syz [ 494.898395][ T9] usb 4-1: SerialNumber: syz [ 494.980536][ T9] usb 4-1: config 0 descriptor?? [ 495.348512][T16356] FAULT_INJECTION: forcing a failure. [ 495.348512][T16356] name failslab, interval 1, probability 0, space 0, times 0 [ 495.348542][T16356] CPU: 0 UID: 0 PID: 16356 Comm: syz.6.4563 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 495.348569][T16356] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 495.348576][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 495.348587][T16356] Call Trace: [ 495.348593][T16356] [ 495.348601][T16356] dump_stack_lvl+0xe8/0x150 [ 495.348622][T16356] should_fail_ex+0x3eb/0x540 [ 495.348640][T16356] ? zswap_store+0xb4b/0x2200 [ 495.348655][T16356] should_failslab+0xa8/0x100 [ 495.348670][T16356] ? zswap_store+0xb4b/0x2200 [ 495.348683][T16356] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 495.348700][T16356] ? percpu_ref_put+0x1e/0x230 [ 495.348713][T16356] ? zswap_store+0xb4b/0x2200 [ 495.348729][T16356] zswap_store+0xb4b/0x2200 [ 495.348745][T16356] ? zswap_store+0x53d/0x2200 [ 495.348765][T16356] ? __pfx_zswap_store+0x10/0x10 [ 495.348779][T16356] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 495.348795][T16356] ? rcu_is_watching+0x16/0xb0 [ 495.348812][T16356] ? do_raw_spin_unlock+0xf5/0x200 [ 495.348828][T16356] swap_writeout+0x9bf/0x15d0 [ 495.348845][T16356] ? try_to_unmap_flush_dirty+0x96/0x100 [ 495.348862][T16356] shrink_folio_list+0x3039/0x4d90 [ 495.348888][T16356] ? __pfx_shrink_folio_list+0x10/0x10 [ 495.348924][T16356] ? __pfx___css_rstat_updated+0x10/0x10 [ 495.348942][T16356] reclaim_folio_list+0x100/0x430 [ 495.348962][T16356] ? __pfx_reclaim_folio_list+0x10/0x10 [ 495.348976][T16356] ? rcu_is_watching+0x16/0xb0 [ 495.348992][T16356] ? irqentry_exit+0x218/0x920 [ 495.349006][T16356] ? trace_irq_disable+0x3b/0x140 [ 495.349023][T16356] reclaim_pages+0x452/0x530 [ 495.349037][T16356] ? rcu_is_watching+0x16/0xb0 [ 495.349054][T16356] ? __pfx_reclaim_pages+0x10/0x10 [ 495.349068][T16356] ? lock_release+0x4b/0x3c0 [ 495.349082][T16356] ? do_raw_spin_unlock+0xf5/0x200 [ 495.349098][T16356] madvise_cold_or_pageout_pte_range+0x1b8e/0x2400 [ 495.349116][T16356] ? __x64_sys_openat+0x138/0x170 [ 495.349136][T16356] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 495.349154][T16356] ? lru_gen_update_size+0x719/0xd00 [ 495.349173][T16356] walk_pgd_range+0x102d/0x1dc0 [ 495.349202][T16356] ? __pfx_walk_pgd_range+0x10/0x10 [ 495.349216][T16356] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 495.349231][T16356] ? lock_release+0x4b/0x3c0 [ 495.349246][T16356] __walk_page_range+0x16d/0x720 [ 495.349269][T16356] walk_page_range_vma_unsafe+0x309/0x410 [ 495.349287][T16356] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 495.349303][T16356] ? rcu_is_watching+0x16/0xb0 [ 495.349321][T16356] ? walk_page_range_vma+0x6b/0x90 [ 495.349336][T16356] madvise_vma_behavior+0x2f63/0x5180 [ 495.349354][T16356] ? rcu_is_watching+0x16/0xb0 [ 495.349369][T16356] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 495.349384][T16356] ? lock_release+0x4b/0x3c0 [ 495.349406][T16356] ? do_raw_spin_lock+0x12b/0x2f0 [ 495.349421][T16356] ? rcu_is_watching+0x16/0xb0 [ 495.349436][T16356] ? rcu_is_watching+0x16/0xb0 [ 495.349451][T16356] ? trace_hrtimer_start+0x82/0x200 [ 495.349468][T16356] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 495.349486][T16356] ? rcu_is_watching+0x16/0xb0 [ 495.349501][T16356] ? rcu_is_watching+0x16/0xb0 [ 495.349516][T16356] ? trace_irq_enable+0x3b/0x140 [ 495.349532][T16356] ? rcu_is_watching+0x16/0xb0 [ 495.349546][T16356] ? trace_sched_exit_tp+0x3a/0x130 [ 495.349562][T16356] ? __schedule+0x1b5d/0x5b40 [ 495.349586][T16356] ? mas_prev_slot+0xb76/0xbf0 [ 495.349606][T16356] ? find_vma_prev+0x123/0x1b0 [ 495.349622][T16356] ? __pfx_find_vma_prev+0x10/0x10 [ 495.349641][T16356] ? __pfx___futex_wait+0x10/0x10 [ 495.349657][T16356] madvise_walk_vmas+0x57d/0xb70 [ 495.349676][T16356] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 495.349692][T16356] ? blk_start_plug+0x6e/0x1b0 [ 495.349708][T16356] madvise_do_behavior+0x385/0x540 [ 495.349723][T16356] ? rcu_is_watching+0x16/0xb0 [ 495.349738][T16356] ? __pfx_madvise_do_behavior+0x10/0x10 [ 495.349756][T16356] ? down_read+0x2b9/0x320 [ 495.349773][T16356] do_madvise+0x26f/0x330 [ 495.349791][T16356] ? __pfx_do_madvise+0x10/0x10 [ 495.349810][T16356] ? rcu_is_watching+0x16/0xb0 [ 495.349827][T16356] __x64_sys_madvise+0xa6/0xc0 [ 495.349842][T16356] do_syscall_64+0x166/0x520 [ 495.349856][T16356] ? trace_irq_disable+0x3b/0x140 [ 495.349870][T16356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.349886][T16356] ? clear_bhb_loop+0x70/0xc0 [ 495.349901][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.349917][T16356] RIP: 0033:0x7f4100f9e1d9 [ 495.349931][T16356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.349944][T16356] RSP: 002b:00007f4101df8028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 495.349962][T16356] RAX: ffffffffffffffda RBX: 00007f4101225fa0 RCX: 00007f4100f9e1d9 [ 495.349975][T16356] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 495.349985][T16356] RBP: 00007f4101035888 R08: 0000000000000000 R09: 0000000000000000 [ 495.349995][T16356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.350005][T16356] R13: 00007f4101226038 R14: 00007f4101225fa0 R15: 00007fff00939ab8 [ 495.350023][T16356] [ 495.779152][ T9] appletouch 4-1:0.85: Geyser mode initialized. [ 495.780209][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input95 [ 495.989480][T14745] usb 4-1: USB disconnect, device number 78 [ 495.989596][ C0] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 496.034753][T14745] appletouch 4-1:0.85: input: appletouch disconnected [ 496.580678][T14745] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 496.674703][T16374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.731617][T14745] usb 6-1: Using ep0 maxpacket: 8 [ 496.732351][T14745] usb 6-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 496.732762][T14745] usb 6-1: config 0 has no interfaces? [ 496.732783][T14745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.734034][T14745] usb 6-1: config 0 descriptor?? [ 496.939091][T14745] usb 6-1: USB disconnect, device number 41 [ 496.969444][T16383] FAULT_INJECTION: forcing a failure. [ 496.969444][T16383] name failslab, interval 1, probability 0, space 0, times 0 [ 496.969471][T16383] CPU: 0 UID: 0 PID: 16383 Comm: syz.6.4576 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 496.969494][T16383] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 496.969501][T16383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 496.969512][T16383] Call Trace: [ 496.969518][T16383] [ 496.969525][T16383] dump_stack_lvl+0xe8/0x150 [ 496.969550][T16383] should_fail_ex+0x3eb/0x540 [ 496.969568][T16383] should_failslab+0xa8/0x100 [ 496.969584][T16383] __kmalloc_node_noprof+0xfb/0x720 [ 496.969600][T16383] ? load_msg+0x41/0x3a0 [ 496.969614][T16383] ? load_msg+0x41/0x3a0 [ 496.969630][T16383] load_msg+0x41/0x3a0 [ 496.969647][T16383] do_msgsnd+0x1a9/0x14f0 [ 496.969663][T16383] ? __pfx_do_futex+0x10/0x10 [ 496.969677][T16383] ? __fget_files+0x3a2/0x420 [ 496.969691][T16383] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 496.969710][T16383] ? rcu_is_watching+0x16/0xb0 [ 496.969726][T16383] ? lock_acquire+0x58/0x350 [ 496.969742][T16383] ? __pfx_do_msgsnd+0x10/0x10 [ 496.969757][T16383] ? lock_release+0x4b/0x3c0 [ 496.969771][T16383] ? __might_fault+0xaf/0x130 [ 496.969785][T16383] ? __might_fault+0xcb/0x130 [ 496.969800][T16383] ? __x64_sys_msgsnd+0xee/0x120 [ 496.969816][T16383] do_syscall_64+0x166/0x520 [ 496.969830][T16383] ? trace_irq_disable+0x3b/0x140 [ 496.969844][T16383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.969860][T16383] ? clear_bhb_loop+0x70/0xc0 [ 496.969875][T16383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.969891][T16383] RIP: 0033:0x7f4100f9e1d9 [ 496.969905][T16383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.969919][T16383] RSP: 002b:00007f4101df8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 496.969937][T16383] RAX: ffffffffffffffda RBX: 00007f4101225fa0 RCX: 00007f4100f9e1d9 [ 496.969949][T16383] RDX: 0000000000000008 RSI: 0000200000000580 RDI: 0000000000000000 [ 496.969960][T16383] RBP: 00007f4101035888 R08: 0000000000000000 R09: 0000000000000000 [ 496.969970][T16383] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 496.969980][T16383] R13: 00007f4101226038 R14: 00007f4101225fa0 R15: 00007fff00939ab8 [ 496.969998][T16383] [ 497.587759][T16398] tipc: Started in network mode [ 497.587802][T16398] tipc: Node identity ac14142f, cluster identity 4711 [ 497.587935][T16398] tipc: New replicast peer: 127.0.0.1 [ 497.588039][T16398] tipc: Enabled bearer , priority 10 [ 497.619216][T16398] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4583'. [ 497.800665][T16403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 497.800732][T16403] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 497.801682][T16403] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 498.044038][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4588'. [ 498.251751][ T195] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 498.251938][ T195] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 498.254149][T14745] usb 2-1: USB disconnect, device number 79 [ 498.283129][ T195] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 498.283424][ T195] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 498.403989][T16422] kernel read not supported for file events/kvm/kvm_hv_stimer_cleanup/trigger (pid: 16422 comm: syz.6.4593) [ 498.625090][T16434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 498.700005][T14745] tipc: Node number set to 2886997039 [ 498.900906][T16445] Bluetooth: hci0: Invalid link address type 97 for 61:61:61:00:00:00 [ 498.948305][T16448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.054452][T14745] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 499.069143][T16451] input: syz0 as /devices/virtual/input/input96 [ 499.201248][T14745] usb 7-1: Using ep0 maxpacket: 8 [ 499.201712][T14745] usb 7-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 499.202495][T14745] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 499.202515][T14745] usb 7-1: config 0 has no interface number 0 [ 499.202536][T14745] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 499.202554][T14745] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 499.202572][T14745] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 499.202591][T14745] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 499.202617][T14745] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.204470][T14745] usb 7-1: config 0 descriptor?? [ 499.313650][T14745] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 499.370453][ T5757] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 499.520674][ T5757] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 499.521473][ T5757] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 499.521530][ T5757] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.521565][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.737200][ T5757] usb 4-1: usb_control_msg returned -32 [ 499.737229][ T5757] usbtmc 4-1:16.0: can't read capabilities [ 499.770233][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 500.415284][T16500] input: syz0 as /devices/virtual/input/input97 [ 500.576422][T16507] binder: Failure in copy_transaction_data: EINVAL [ 500.850014][ T5757] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 501.000615][ T5757] usb 6-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 501.001459][ T5757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 501.001484][ T5757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.001501][ T5757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 51, changing to 9 [ 501.003669][ T5757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.003689][ T5757] usb 6-1: Product: syz [ 501.003699][ T5757] usb 6-1: Manufacturer: syz [ 501.003710][ T5757] usb 6-1: SerialNumber: syz [ 501.007152][ T5757] usb 6-1: config 0 descriptor?? [ 501.419932][ T195] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 501.451527][T14745] usb 7-1: USB disconnect, device number 17 [ 501.451610][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 501.452800][ T5757] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux2 [ 501.455639][T16509] ld_usb_open - error, can't find device for minor 0 [ 501.455759][T14745] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 501.516734][ T5757] usb 6-1: USB disconnect, device number 42 [ 501.580687][ T195] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 501.581761][ T195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 501.581785][ T195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.581802][ T195] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.581829][ T195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.583023][ T195] usb 2-1: config 0 descriptor?? [ 501.612418][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.612473][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.849879][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 501.997757][ T195] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 502.299371][T16531] tipc: New replicast peer: 127.0.0.1 [ 502.299625][T16531] tipc: Enabled bearer , priority 10 [ 502.314049][T16531] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4639'. [ 502.549558][ T195] usb 4-1: USB disconnect, device number 79 [ 502.655314][T16545] netlink: 'syz.3.4646': attribute type 10 has an invalid length. [ 502.819488][T16554] tipc: New replicast peer: 127.0.0.1 [ 502.819613][T16554] tipc: Enabled bearer , priority 10 [ 502.837245][T16554] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4651'. [ 503.495351][T16580] serio: Serial port ptm0 [ 503.915106][T16607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 503.930625][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 504.060871][ T5757] usb 2-1: USB disconnect, device number 80 [ 504.330291][ T195] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 504.480364][ T195] usb 6-1: New USB device found: idVendor=13d8, idProduct=0010, bcdDevice=0.00 [ 504.480838][ T195] usb 6-1: config 0 has no interfaces? [ 504.480863][ T195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.483775][ T195] usb 6-1: config 0 descriptor?? [ 504.693469][T16623] sd 0:0:1:0: PR command failed: 1026 [ 504.693499][T16623] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 504.693524][T16623] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 504.727835][ T195] usb 6-1: USB disconnect, device number 43 [ 505.127155][T16634] binder: Failure in copy_transaction_data: EINVAL [ 505.250256][T16640] ================================================================== [ 505.250271][T16640] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 505.250292][T16640] Read of size 1 at addr ffff888028836620 by task syz.6.4688/16640 [ 505.250305][T16640] [ 505.250316][T16640] CPU: 0 UID: 0 PID: 16640 Comm: syz.6.4688 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 505.250341][T16640] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 505.250348][T16640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 505.250358][T16640] Call Trace: [ 505.250364][T16640] [ 505.250371][T16640] dump_stack_lvl+0xe8/0x150 [ 505.250389][T16640] print_address_description+0x55/0x1e0 [ 505.250407][T16640] ? string+0x216/0x2d0 [ 505.250420][T16640] print_report+0x58/0x70 [ 505.250434][T16640] kasan_report+0x117/0x150 [ 505.250451][T16640] ? string+0x216/0x2d0 [ 505.250468][T16640] string+0x216/0x2d0 [ 505.250484][T16640] vsnprintf+0x74a/0xef0 [ 505.250503][T16640] seq_printf+0x188/0x290 [ 505.250530][T16640] ? __pfx_seq_printf+0x10/0x10 [ 505.250546][T16640] ? seq_put_decimal_ull_width+0x290/0x370 [ 505.250566][T16640] irq_seq_show+0x5f3/0x860 [ 505.250584][T16640] seq_read_iter+0x463/0xca0 [ 505.250605][T16640] proc_reg_read_iter+0x1b7/0x280 [ 505.250623][T16640] do_iter_readv_writev+0x612/0x8c0 [ 505.250640][T16640] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 505.250658][T16640] ? bpf_lsm_file_permission+0x9/0x20 [ 505.250674][T16640] ? security_file_permission+0x75/0x260 [ 505.250691][T16640] ? rw_verify_area+0x24a/0x4c0 [ 505.250708][T16640] vfs_readv+0x28d/0x850 [ 505.250726][T16640] ? __pfx_vfs_readv+0x10/0x10 [ 505.250744][T16640] ? lock_release+0x4b/0x3c0 [ 505.250761][T16640] ? __fget_files+0x3a2/0x420 [ 505.250775][T16640] ? __fget_files+0x2a/0x420 [ 505.250791][T16640] ? fdget+0x1ac/0x250 [ 505.250806][T16640] __x64_sys_preadv+0x19c/0x2b0 [ 505.250822][T16640] ? __pfx___x64_sys_preadv+0x10/0x10 [ 505.250839][T16640] ? rcu_is_watching+0x16/0xb0 [ 505.250856][T16640] do_syscall_64+0x166/0x520 [ 505.250870][T16640] ? trace_irq_disable+0x3b/0x140 [ 505.250884][T16640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.250901][T16640] ? clear_bhb_loop+0x70/0xc0 [ 505.250916][T16640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.250932][T16640] RIP: 0033:0x7f4100f9e1d9 [ 505.250946][T16640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.250959][T16640] RSP: 002b:00007f4101df8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 505.250977][T16640] RAX: ffffffffffffffda RBX: 00007f4101225fa0 RCX: 00007f4100f9e1d9 [ 505.250997][T16640] RDX: 0000000000000001 RSI: 0000200000004d00 RDI: 0000000000000003 [ 505.251009][T16640] RBP: 00007f4101035888 R08: 0000000080000002 R09: 0000000000000000 [ 505.251020][T16640] R10: 0000000000000074 R11: 0000000000000246 R12: 0000000000000000 [ 505.251033][T16640] R13: 00007f4101226038 R14: 00007f4101225fa0 R15: 00007fff00939ab8 [ 505.251052][T16640] [ 505.251058][T16640] [ 505.251069][T16640] Allocated by task 14553: [ 505.251081][T16640] kasan_save_track+0x3e/0x80 [ 505.251095][T16640] __kasan_kmalloc+0x93/0xb0 [ 505.251108][T16640] __kmalloc_node_noprof+0x4b4/0x720 [ 505.251122][T16640] __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 505.251137][T16640] vzalloc_noprof+0xb2/0xe0 [ 505.251149][T16640] do_arpt_get_ctl+0x915/0x1270 [ 505.251222][T16640] nf_getsockopt+0x26e/0x290 [ 505.251256][T16640] ip_getsockopt+0x19e/0x230 [ 505.251286][T16640] do_sock_getsockopt+0x4aa/0x640 [ 505.251323][T16640] __x64_sys_getsockopt+0x1a4/0x240 [ 505.251336][T16640] do_syscall_64+0x166/0x520 [ 505.251349][T16640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.251364][T16640] [ 505.251368][T16640] Freed by task 14553: [ 505.251376][T16640] kasan_save_track+0x3e/0x80 [ 505.251395][T16640] kasan_save_free_info+0x40/0x50 [ 505.251409][T16640] __kasan_slab_free+0x5c/0x80 [ 505.251422][T16640] kfree+0x1c5/0x650 [ 505.251433][T16640] vfree+0x426/0x490 [ 505.251445][T16640] do_arpt_get_ctl+0x104e/0x1270 [ 505.251458][T16640] nf_getsockopt+0x26e/0x290 [ 505.251487][T16640] ip_getsockopt+0x19e/0x230 [ 505.251500][T16640] do_sock_getsockopt+0x4aa/0x640 [ 505.251519][T16640] __x64_sys_getsockopt+0x1a4/0x240 [ 505.251532][T16640] do_syscall_64+0x166/0x520 [ 505.251545][T16640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.251560][T16640] [ 505.251564][T16640] The buggy address belongs to the object at ffff888028836620 [ 505.251564][T16640] which belongs to the cache kmalloc-8 of size 8 [ 505.251577][T16640] The buggy address is located 0 bytes inside of [ 505.251577][T16640] freed 8-byte region [ffff888028836620, ffff888028836628) [ 505.251592][T16640] [ 505.251597][T16640] The buggy address belongs to the physical page: [ 505.251609][T16640] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28836 [ 505.251624][T16640] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 505.251637][T16640] page_type: f5(slab) [ 505.251652][T16640] raw: 00fff00000000000 ffff88813ff22500 dead000000000100 dead000000000122 [ 505.251667][T16640] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 505.251676][T16640] page dumped because: kasan: bad access detected [ 505.251688][T16640] page_owner tracks the page as allocated [ 505.251694][T16640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6697005024 [ 505.251718][T16640] post_alloc_hook+0x1f9/0x250 [ 505.251731][T16640] get_page_from_freelist+0x220f/0x2280 [ 505.251745][T16640] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 505.251760][T16640] allocate_slab+0x7d/0x5e0 [ 505.251772][T16640] refill_objects+0x2d5/0x350 [ 505.251785][T16640] __pcs_replace_empty_main+0x2c8/0x6c0 [ 505.251799][T16640] __kmalloc_node_track_caller_noprof+0x543/0x720 [ 505.251815][T16640] kstrdup+0x42/0x100 [ 505.251827][T16640] kobject_set_name_vargs+0x61/0x110 [ 505.251841][T16640] dev_set_name+0xe2/0x140 [ 505.251879][T16640] tty_register_device_attr+0x3b6/0x9b0 [ 505.251894][T16640] tty_register_driver+0x868/0xe50 [ 505.251908][T16640] legacy_pty_init+0x3b2/0x5d0 [ 505.251944][T16640] pty_init+0x9/0x20 [ 505.251955][T16640] do_one_initcall+0x250/0x870 [ 505.251969][T16640] do_initcall_level+0x10a/0x1a0 [ 505.251991][T16640] page_owner free stack trace missing [ 505.251996][T16640] [ 505.252000][T16640] Memory state around the buggy address: [ 505.252009][T16640] ffff888028836500: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 505.252020][T16640] ffff888028836580: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 505.252031][T16640] >ffff888028836600: 05 fc fc fc fa fc fc fc 05 fc fc fc fa fc fc fc [ 505.252040][T16640] ^ [ 505.252049][T16640] ffff888028836680: 00 fc fc fc 05 fc fc fc 00 fc fc fc fa fc fc fc [ 505.252066][T16640] ffff888028836700: fa fc fc fc 04 fc fc fc 00 fc fc fc 00 fc fc fc [ 505.252075][T16640] ================================================================== [ 505.252092][T16640] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 505.940800][T16640] CPU: 0 UID: 0 PID: 16640 Comm: syz.6.4688 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 505.951864][T16640] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 505.957674][T16640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 505.967916][T16640] Call Trace: [ 505.971229][T16640] [ 505.974178][T16640] vpanic+0x26f/0x710 [ 505.978172][T16640] panic+0xc5/0xd0 [ 505.981900][T16640] ? __pfx_panic+0x10/0x10 [ 505.986330][T16640] ? string+0x216/0x2d0 [ 505.990486][T16640] ? rcu_is_watching+0x16/0xb0 [ 505.995296][T16640] ? string+0x216/0x2d0 [ 505.999457][T16640] ? string+0x216/0x2d0 [ 506.003635][T16640] check_panic_on_warn+0x89/0xb0 [ 506.008583][T16640] ? string+0x216/0x2d0 [ 506.012741][T16640] end_report+0x73/0x170 [ 506.016987][T16640] ? string+0x216/0x2d0 [ 506.021355][T16640] kasan_report+0x128/0x150 [ 506.025890][T16640] ? string+0x216/0x2d0 [ 506.030153][T16640] string+0x216/0x2d0 [ 506.034157][T16640] vsnprintf+0x74a/0xef0 [ 506.038436][T16640] seq_printf+0x188/0x290 [ 506.042788][T16640] ? __pfx_seq_printf+0x10/0x10 [ 506.047647][T16640] ? seq_put_decimal_ull_width+0x290/0x370 [ 506.053725][T16640] irq_seq_show+0x5f3/0x860 [ 506.058235][T16640] seq_read_iter+0x463/0xca0 [ 506.062834][T16640] proc_reg_read_iter+0x1b7/0x280 [ 506.067861][T16640] do_iter_readv_writev+0x612/0x8c0 [ 506.073063][T16640] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 506.078787][T16640] ? bpf_lsm_file_permission+0x9/0x20 [ 506.084163][T16640] ? security_file_permission+0x75/0x260 [ 506.089801][T16640] ? rw_verify_area+0x24a/0x4c0 [ 506.094655][T16640] vfs_readv+0x28d/0x850 [ 506.098904][T16640] ? __pfx_vfs_readv+0x10/0x10 [ 506.103675][T16640] ? lock_release+0x4b/0x3c0 [ 506.108271][T16640] ? __fget_files+0x3a2/0x420 [ 506.112954][T16640] ? __fget_files+0x2a/0x420 [ 506.117549][T16640] ? fdget+0x1ac/0x250 [ 506.121712][T16640] __x64_sys_preadv+0x19c/0x2b0 [ 506.126570][T16640] ? __pfx___x64_sys_preadv+0x10/0x10 [ 506.131947][T16640] ? rcu_is_watching+0x16/0xb0 [ 506.136725][T16640] do_syscall_64+0x166/0x520 [ 506.141322][T16640] ? trace_irq_disable+0x3b/0x140 [ 506.146350][T16640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.152444][T16640] ? clear_bhb_loop+0x70/0xc0 [ 506.157131][T16640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.163056][T16640] RIP: 0033:0x7f4100f9e1d9 [ 506.167496][T16640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.187109][T16640] RSP: 002b:00007f4101df8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 506.195532][T16640] RAX: ffffffffffffffda RBX: 00007f4101225fa0 RCX: 00007f4100f9e1d9 [ 506.203622][T16640] RDX: 0000000000000001 RSI: 0000200000004d00 RDI: 0000000000000003 [ 506.211628][T16640] RBP: 00007f4101035888 R08: 0000000080000002 R09: 0000000000000000 [ 506.219635][T16640] R10: 0000000000000074 R11: 0000000000000246 R12: 0000000000000000 [ 506.227738][T16640] R13: 00007f4101226038 R14: 00007f4101225fa0 R15: 00007fff00939ab8 [ 506.235749][T16640] [ 506.238873][T16640] Kernel Offset: disabled [ 506.243244][T16640] Rebooting in 86400 seconds..