last executing test programs: 8.381001279s ago: executing program 2 (id=1769): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10002, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x7, 0x4, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x3ffe, 0x1, 0x4, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x4, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0xaac1, 0x0, 0x71]}) 8.190113816s ago: executing program 2 (id=1772): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) listxattr(0x0, 0x0, 0x0) 8.017295911s ago: executing program 2 (id=1773): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file0\x00', 0xc000, 0x0) unlink(0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x1c1400) 6.126083738s ago: executing program 2 (id=1775): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180900000000000b000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 5.827635944s ago: executing program 1 (id=1778): syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x1, 0x0, 0xf4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xcc}, [@extension_unit={0xb, 0x24, 0x8, 0x4, 0x2, 0x4, "f70c3d2f"}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0x9, "65cca1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0xf801, 0x40, "d73955"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xe, 0x3, 0x7, 0x7b}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x93, 0x7, 0xe, {0x7, 0x25, 0x1, 0x82, 0x8, 0x6d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0xa, 0x6, {0x7, 0x25, 0x1, 0x1, 0x2}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 4.850303731s ago: executing program 0 (id=1782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf251200000008000300", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) 4.556051557s ago: executing program 0 (id=1784): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) memfd_secret(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r0, 0x0, 0x4}, 0x18) rmdir(0x0) 4.310159399s ago: executing program 0 (id=1785): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c", 0x9) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x2000) 3.242523353s ago: executing program 3 (id=1786): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110a10000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x98}}, 0x0) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.176030329s ago: executing program 2 (id=1787): syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000060f94d100d0502002723010203010902484002000000000904"], 0x0) 3.05682748s ago: executing program 1 (id=1788): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) 2.746928777s ago: executing program 0 (id=1789): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) openat$adsp1(0xffffff9c, 0x0, 0x40000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014935d1071040c03e9ba010203010902120001000000000904"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 2.647971616s ago: executing program 1 (id=1790): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001740)={0x2, 0x5, 0xfff, 0x7}, 0x10, 0x293b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 538.225173ms ago: executing program 3 (id=1797): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) 347.964149ms ago: executing program 0 (id=1798): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)}], 0x1}, 0x4000000) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a80)=""/227, 0xe3}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) 181.773254ms ago: executing program 0 (id=1799): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 89.055112ms ago: executing program 2 (id=1800): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000041c0)=""/4100, &(0x7f0000000100)=0x1004) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x8001, 0x5, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x1, 0x1, 0x33b6, 0x9, 0x5, 0x4000a, 0x2, 0x6, 0x6, 0x0, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0xa, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) 0s ago: executing program 1 (id=1801): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1}) r0 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x66ab, 0x4, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T7650] vfs_write+0x43b/0x940 [ 295.819165][ T7650] ? file_end_write+0x250/0x250 [ 295.824074][ T7650] ? __fget_files+0x44a/0x4d0 [ 295.828806][ T7650] ? __fdget_pos+0x1d8/0x330 [ 295.833439][ T7650] ? ksys_write+0x75/0x250 [ 295.837908][ T7650] ksys_write+0x147/0x250 [ 295.842297][ T7650] ? __ia32_sys_read+0x90/0x90 [ 295.847115][ T7650] ? lockdep_hardirqs_on+0x98/0x150 [ 295.852368][ T7650] do_syscall_64+0x55/0xb0 [ 295.856832][ T7650] ? clear_bhb_loop+0x40/0x90 [ 295.861581][ T7650] ? clear_bhb_loop+0x40/0x90 [ 295.866310][ T7650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.872251][ T7650] RIP: 0033:0x7fbfca78f749 [ 295.876712][ T7650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.896367][ T7650] RSP: 002b:00007fbfcb708038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.904831][ T7650] RAX: ffffffffffffffda RBX: 00007fbfca9e5fa0 RCX: 00007fbfca78f749 [ 295.912851][ T7650] RDX: 00000000000000fc RSI: 00002000000002c0 RDI: 0000000000000003 [ 295.920877][ T7650] RBP: 00007fbfcb708090 R08: 0000000000000000 R09: 0000000000000000 [ 295.928926][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.937029][ T7650] R13: 00007fbfca9e6038 R14: 00007fbfca9e5fa0 R15: 00007ffe9c3559f8 [ 295.945073][ T7650] [ 296.521718][ T7658] loop1: detected capacity change from 0 to 1024 [ 296.543265][ T7658] EXT4-fs: Ignoring removed nomblk_io_submit option [ 296.574280][ T7658] EXT4-fs: Ignoring removed bh option [ 296.582784][ T7660] FAULT_INJECTION: forcing a failure. [ 296.582784][ T7660] name failslab, interval 1, probability 0, space 0, times 0 [ 296.610016][ T7658] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 296.626464][ T7660] CPU: 0 PID: 7660 Comm: syz.2.441 Not tainted syzkaller #0 [ 296.633841][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.643960][ T7660] Call Trace: [ 296.647285][ T7660] [ 296.650264][ T7660] dump_stack_lvl+0x16c/0x230 [ 296.655014][ T7660] ? show_regs_print_info+0x20/0x20 [ 296.660276][ T7660] ? load_image+0x3b0/0x3b0 [ 296.664842][ T7660] ? __might_sleep+0xe0/0xe0 [ 296.669495][ T7660] ? __lock_acquire+0x7c80/0x7c80 [ 296.674591][ T7660] should_fail_ex+0x39d/0x4d0 [ 296.679346][ T7660] should_failslab+0x9/0x20 [ 296.683934][ T7660] slab_pre_alloc_hook+0x59/0x310 [ 296.689012][ T7660] ? lock_chain_count+0x20/0x20 [ 296.693923][ T7660] kmem_cache_alloc_node+0x60/0x330 [ 296.699183][ T7660] ? __local_bh_enable_ip+0x12e/0x1c0 [ 296.704611][ T7660] ? __alloc_skb+0x108/0x2c0 [ 296.709277][ T7660] __alloc_skb+0x108/0x2c0 [ 296.713755][ T7660] sock_wmalloc+0xaa/0x120 [ 296.718241][ T7660] l2tp_ip_sendmsg+0x1cc/0x15e0 [ 296.723153][ T7660] ? sock_rps_record_flow+0x19/0x400 [ 296.728502][ T7660] ? inet_sendmsg+0x7c/0x2f0 [ 296.733158][ T7660] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 296.738505][ T7660] __sys_sendto+0x46a/0x620 [ 296.743064][ T7660] ? file_end_write+0x159/0x250 [ 296.747970][ T7660] ? __ia32_sys_getpeername+0x90/0x90 [ 296.753410][ T7660] ? __fget_files+0x44a/0x4d0 [ 296.758156][ T7660] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 296.764200][ T7660] ? lock_chain_count+0x20/0x20 [ 296.769120][ T7660] __x64_sys_sendto+0xde/0xf0 [ 296.773857][ T7660] do_syscall_64+0x55/0xb0 [ 296.778318][ T7660] ? clear_bhb_loop+0x40/0x90 [ 296.783048][ T7660] ? clear_bhb_loop+0x40/0x90 [ 296.787778][ T7660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.793726][ T7660] RIP: 0033:0x7fbfca78f749 [ 296.798276][ T7660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.818111][ T7660] RSP: 002b:00007fbfcb708038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 296.826579][ T7660] RAX: ffffffffffffffda RBX: 00007fbfca9e5fa0 RCX: 00007fbfca78f749 [ 296.834609][ T7660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 296.842647][ T7660] RBP: 00007fbfcb708090 R08: 0000200000000240 R09: 0000000000000010 [ 296.850683][ T7660] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 296.858711][ T7660] R13: 00007fbfca9e6038 R14: 00007fbfca9e5fa0 R15: 00007ffe9c3559f8 [ 296.866764][ T7660] [ 296.876063][ T7658] netlink: 76 bytes leftover after parsing attributes in process `syz.1.439'. [ 297.034402][ T7658] IPVS: Scheduler module ip_vs_sip not found [ 297.080348][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.442'. [ 298.049099][ T7679] FAULT_INJECTION: forcing a failure. [ 298.049099][ T7679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.082818][ T7679] CPU: 1 PID: 7679 Comm: syz.3.446 Not tainted syzkaller #0 [ 298.090186][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 298.100284][ T7679] Call Trace: [ 298.103607][ T7679] [ 298.106570][ T7679] dump_stack_lvl+0x16c/0x230 [ 298.111425][ T7679] ? show_regs_print_info+0x20/0x20 [ 298.116708][ T7679] ? load_image+0x3b0/0x3b0 [ 298.121265][ T7679] ? __lock_acquire+0x7c80/0x7c80 [ 298.125737][ T7675] loop1: detected capacity change from 0 to 32768 [ 298.126316][ T7679] ? snprintf+0xdb/0x120 [ 298.126350][ T7679] should_fail_ex+0x39d/0x4d0 [ 298.126385][ T7679] _copy_to_user+0x2f/0xa0 [ 298.126409][ T7679] simple_read_from_buffer+0xe7/0x150 [ 298.126446][ T7679] proc_fail_nth_read+0x1e3/0x250 [ 298.126475][ T7679] ? proc_fault_inject_write+0x340/0x340 [ 298.126507][ T7679] ? fsnotify_perm+0x271/0x5e0 [ 298.126539][ T7679] ? proc_fault_inject_write+0x340/0x340 [ 298.126565][ T7679] vfs_read+0x27e/0x920 [ 298.126598][ T7679] ? kernel_read+0x1e0/0x1e0 [ 298.126622][ T7679] ? do_raw_spin_lock+0x121/0x2c0 [ 298.126651][ T7679] ? __rwlock_init+0x150/0x150 [ 298.126680][ T7679] ? do_raw_spin_unlock+0x121/0x230 [ 298.126711][ T7679] ? __fdget_pos+0x2ba/0x330 [ 298.126741][ T7679] ksys_read+0x147/0x250 [ 298.126769][ T7679] ? vfs_write+0x940/0x940 [ 298.126807][ T7679] ? lockdep_hardirqs_on+0x98/0x150 [ 298.126835][ T7679] do_syscall_64+0x55/0xb0 [ 298.126853][ T7679] ? clear_bhb_loop+0x40/0x90 [ 298.126878][ T7679] ? clear_bhb_loop+0x40/0x90 [ 298.126904][ T7679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.126928][ T7679] RIP: 0033:0x7fa3e4f8e15c [ 298.126948][ T7679] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 298.126966][ T7679] RSP: 002b:00007fa3e5eff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.126990][ T7679] RAX: ffffffffffffffda RBX: 00007fa3e51e5fa0 RCX: 00007fa3e4f8e15c [ 298.127005][ T7679] RDX: 000000000000000f RSI: 00007fa3e5eff0a0 RDI: 0000000000000003 [ 298.127018][ T7679] RBP: 00007fa3e5eff090 R08: 0000000000000000 R09: 0000000000000000 [ 298.127031][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.127043][ T7679] R13: 00007fa3e51e6038 R14: 00007fa3e51e5fa0 R15: 00007ffcffada478 [ 298.127071][ T7679] [ 298.365856][ T7675] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 298.391060][ T7675] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 298.409162][ T7675] BTRFS info (device loop1): setting nodatacow, compression disabled [ 298.448407][ T7675] BTRFS info (device loop1): force clearing of disk cache [ 298.487170][ T7675] BTRFS info (device loop1): enabling ssd optimizations [ 298.517849][ T7675] BTRFS info (device loop1): using spread ssd allocation scheme [ 298.525593][ T7675] BTRFS info (device loop1): turning off barriers [ 298.567784][ T7675] BTRFS info (device loop1): disabling free space tree [ 298.574755][ T7675] BTRFS info (device loop1): not using ssd optimizations [ 298.611088][ T7675] BTRFS info (device loop1): not using spread ssd allocation scheme [ 298.859218][ T7675] BTRFS info (device loop1): rebuilding free space tree [ 298.929616][ T7675] BTRFS info (device loop1): disabling free space tree [ 298.936626][ T7675] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 299.026365][ T7675] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 299.096394][ T28] audit: type=1800 audit(1767611289.836:12): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.445" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 299.213422][ T7717] FAULT_INJECTION: forcing a failure. [ 299.213422][ T7717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.248508][ T7717] CPU: 0 PID: 7717 Comm: syz.3.454 Not tainted syzkaller #0 [ 299.255883][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.265989][ T7717] Call Trace: [ 299.269315][ T7717] [ 299.272291][ T7717] dump_stack_lvl+0x16c/0x230 [ 299.277030][ T7717] ? show_regs_print_info+0x20/0x20 [ 299.282296][ T7717] ? load_image+0x3b0/0x3b0 [ 299.286867][ T7717] ? __lock_acquire+0x7c80/0x7c80 [ 299.291951][ T7717] ? snprintf+0xdb/0x120 [ 299.296270][ T7717] should_fail_ex+0x39d/0x4d0 [ 299.301023][ T7717] _copy_to_user+0x2f/0xa0 [ 299.305513][ T7717] simple_read_from_buffer+0xe7/0x150 [ 299.310956][ T7717] proc_fail_nth_read+0x1e3/0x250 [ 299.316045][ T7717] ? proc_fault_inject_write+0x340/0x340 [ 299.321748][ T7717] ? fsnotify_perm+0x271/0x5e0 [ 299.326579][ T7717] ? proc_fault_inject_write+0x340/0x340 [ 299.332374][ T7717] vfs_read+0x27e/0x920 [ 299.336601][ T7717] ? kernel_read+0x1e0/0x1e0 [ 299.341550][ T7717] ? __fget_files+0x28/0x4d0 [ 299.346232][ T7717] ? __fget_files+0x44a/0x4d0 [ 299.351080][ T7717] ? __fdget_pos+0x2a3/0x330 [ 299.355739][ T7717] ? ksys_read+0x75/0x250 [ 299.360137][ T7717] ksys_read+0x147/0x250 [ 299.364459][ T7717] ? vfs_write+0x940/0x940 [ 299.368943][ T7717] ? lockdep_hardirqs_on+0x98/0x150 [ 299.374208][ T7717] do_syscall_64+0x55/0xb0 [ 299.378687][ T7717] ? clear_bhb_loop+0x40/0x90 [ 299.383435][ T7717] ? clear_bhb_loop+0x40/0x90 [ 299.388178][ T7717] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.394225][ T7717] RIP: 0033:0x7fa3e4f8e15c [ 299.398696][ T7717] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 299.418373][ T7717] RSP: 002b:00007fa3e5eff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.426970][ T7717] RAX: ffffffffffffffda RBX: 00007fa3e51e5fa0 RCX: 00007fa3e4f8e15c [ 299.435090][ T7717] RDX: 000000000000000f RSI: 00007fa3e5eff0a0 RDI: 0000000000000003 [ 299.443119][ T7717] RBP: 00007fa3e5eff090 R08: 0000000000000000 R09: 0000000000000000 [ 299.451150][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.459177][ T7717] R13: 00007fa3e51e6038 R14: 00007fa3e51e5fa0 R15: 00007ffcffada478 [ 299.467224][ T7717] [ 299.501218][ T7719] netlink: 'syz.2.455': attribute type 2 has an invalid length. [ 299.513623][ T7719] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.455'. [ 299.580833][ T5777] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 301.937981][ T787] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 302.172810][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 302.199783][ T787] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 302.227852][ T787] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 302.236098][ T787] usb 2-1: Product: syz [ 302.247039][ T787] usb 2-1: Manufacturer: syz [ 302.254683][ T7737] FAULT_INJECTION: forcing a failure. [ 302.254683][ T7737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.268160][ T787] usb 2-1: SerialNumber: syz [ 302.276871][ T787] usb 2-1: config 0 descriptor?? [ 302.282580][ T7737] CPU: 0 PID: 7737 Comm: syz.0.463 Not tainted syzkaller #0 [ 302.289919][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.300020][ T7737] Call Trace: [ 302.303347][ T7737] [ 302.306350][ T7737] dump_stack_lvl+0x16c/0x230 [ 302.311107][ T7737] ? show_regs_print_info+0x20/0x20 [ 302.316371][ T7737] ? load_image+0x3b0/0x3b0 [ 302.320942][ T7737] ? __lock_acquire+0x7c80/0x7c80 [ 302.326023][ T7737] ? snprintf+0xdb/0x120 [ 302.330507][ T7737] should_fail_ex+0x39d/0x4d0 [ 302.335263][ T7737] _copy_to_user+0x2f/0xa0 [ 302.339734][ T7737] simple_read_from_buffer+0xe7/0x150 [ 302.345176][ T7737] proc_fail_nth_read+0x1e3/0x250 [ 302.350273][ T7737] ? proc_fault_inject_write+0x340/0x340 [ 302.355961][ T7737] ? fsnotify_perm+0x271/0x5e0 [ 302.360782][ T7737] ? proc_fault_inject_write+0x340/0x340 [ 302.366469][ T7737] vfs_read+0x27e/0x920 [ 302.370684][ T7737] ? kernel_read+0x1e0/0x1e0 [ 302.375330][ T7737] ? __fget_files+0x28/0x4d0 [ 302.379980][ T7737] ? __fget_files+0x44a/0x4d0 [ 302.384725][ T7737] ? __fdget_pos+0x2a3/0x330 [ 302.389412][ T7737] ? ksys_read+0x75/0x250 [ 302.393799][ T7737] ksys_read+0x147/0x250 [ 302.398125][ T7737] ? vfs_write+0x940/0x940 [ 302.402611][ T7737] ? lockdep_hardirqs_on+0x98/0x150 [ 302.407866][ T7737] do_syscall_64+0x55/0xb0 [ 302.412339][ T7737] ? clear_bhb_loop+0x40/0x90 [ 302.417070][ T7737] ? clear_bhb_loop+0x40/0x90 [ 302.421808][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.427747][ T7737] RIP: 0033:0x7fe3c3b8e15c [ 302.432229][ T7737] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 302.451886][ T7737] RSP: 002b:00007fe3c1df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.460355][ T7737] RAX: ffffffffffffffda RBX: 00007fe3c3de5fa0 RCX: 00007fe3c3b8e15c [ 302.468385][ T7737] RDX: 000000000000000f RSI: 00007fe3c1df60a0 RDI: 0000000000000003 [ 302.476404][ T7737] RBP: 00007fe3c1df6090 R08: 0000000000000000 R09: 0000000000000000 [ 302.484417][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.492439][ T7737] R13: 00007fe3c3de6038 R14: 00007fe3c3de5fa0 R15: 00007ffca97b2bd8 [ 302.500486][ T7737] [ 302.506414][ T7727] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 302.656612][ T7739] FAULT_INJECTION: forcing a failure. [ 302.656612][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 302.669865][ T7739] CPU: 0 PID: 7739 Comm: syz.0.464 Not tainted syzkaller #0 [ 302.677225][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.687328][ T7739] Call Trace: [ 302.690652][ T7739] [ 302.693624][ T7739] dump_stack_lvl+0x16c/0x230 [ 302.698361][ T7739] ? show_regs_print_info+0x20/0x20 [ 302.703610][ T7739] ? load_image+0x3b0/0x3b0 [ 302.708167][ T7739] ? __might_sleep+0xe0/0xe0 [ 302.712813][ T7739] ? __lock_acquire+0x7c80/0x7c80 [ 302.717883][ T7739] ? kasan_set_track+0x5f/0x70 [ 302.722695][ T7739] ? __kasan_kmalloc+0x8f/0xa0 [ 302.727505][ T7739] ? __kmalloc+0xb4/0x240 [ 302.731889][ T7739] should_fail_ex+0x39d/0x4d0 [ 302.736630][ T7739] should_failslab+0x9/0x20 [ 302.741194][ T7739] slab_pre_alloc_hook+0x59/0x310 [ 302.746287][ T7739] kmem_cache_alloc_lru+0x4d/0x2e0 [ 302.751455][ T7739] ? shmem_alloc_inode+0x28/0x40 [ 302.756536][ T7739] shmem_alloc_inode+0x28/0x40 [ 302.761350][ T7739] ? shmem_match+0x160/0x160 [ 302.765985][ T7739] new_inode_pseudo+0x63/0x1d0 [ 302.770793][ T7739] new_inode+0x22/0x1b0 [ 302.774991][ T7739] ? __rwlock_init+0x150/0x150 [ 302.779812][ T7739] shmem_get_inode+0x34f/0xcc0 [ 302.784635][ T7739] __shmem_file_setup+0x167/0x2c0 [ 302.789707][ T7739] __se_sys_memfd_create+0x357/0x660 [ 302.794316][ T7428] usb 2-1: USB disconnect, device number 4 [ 302.795021][ T7739] do_syscall_64+0x55/0xb0 [ 302.805299][ T7739] ? clear_bhb_loop+0x40/0x90 [ 302.810030][ T7739] ? clear_bhb_loop+0x40/0x90 [ 302.814769][ T7739] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.820716][ T7739] RIP: 0033:0x7fe3c3b8f749 [ 302.825194][ T7739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.844850][ T7739] RSP: 002b:00007fe3c1df5e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 302.853323][ T7739] RAX: ffffffffffffffda RBX: 00000000000050d4 RCX: 00007fe3c3b8f749 [ 302.861339][ T7739] RDX: 00007fe3c1df5ef0 RSI: 0000000000000000 RDI: 00007fe3c3c14960 [ 302.869392][ T7739] RBP: 00002000000051c0 R08: 00007fe3c1df5bb7 R09: 00007fe3c1df5e40 [ 302.877410][ T7739] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000340 [ 302.885528][ T7739] R13: 00007fe3c1df5ef0 R14: 00007fe3c1df5eb0 R15: 0000200000000000 [ 302.893568][ T7739] [ 303.735455][ T7734] loop3: detected capacity change from 0 to 32768 [ 303.743960][ T7734] XFS: attr2 mount option is deprecated. [ 304.628968][ T7751] FAULT_INJECTION: forcing a failure. [ 304.628968][ T7751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.642799][ T7751] CPU: 1 PID: 7751 Comm: syz.1.466 Not tainted syzkaller #0 [ 304.650154][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.660429][ T7751] Call Trace: [ 304.663752][ T7751] [ 304.666739][ T7751] dump_stack_lvl+0x16c/0x230 [ 304.671482][ T7751] ? show_regs_print_info+0x20/0x20 [ 304.676740][ T7751] ? load_image+0x3b0/0x3b0 [ 304.681299][ T7751] ? __might_fault+0xaa/0x120 [ 304.686025][ T7751] ? __lock_acquire+0x7c80/0x7c80 [ 304.691116][ T7751] should_fail_ex+0x39d/0x4d0 [ 304.695855][ T7751] _copy_from_user+0x2f/0xe0 [ 304.700503][ T7751] ___sys_sendmsg+0x159/0x290 [ 304.705237][ T7751] ? __sys_sendmsg+0x270/0x270 [ 304.710085][ T7751] ? __lock_acquire+0x7c80/0x7c80 [ 304.715195][ T7751] __se_sys_sendmsg+0x1a5/0x270 [ 304.720100][ T7751] ? __x64_sys_sendmsg+0x80/0x80 [ 304.725154][ T7751] ? lockdep_hardirqs_on+0x98/0x150 [ 304.730409][ T7751] do_syscall_64+0x55/0xb0 [ 304.734871][ T7751] ? clear_bhb_loop+0x40/0x90 [ 304.739596][ T7751] ? clear_bhb_loop+0x40/0x90 [ 304.744313][ T7751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.750239][ T7751] RIP: 0033:0x7f5b3958f749 [ 304.754675][ T7751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.774305][ T7751] RSP: 002b:00007f5b377f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.782844][ T7751] RAX: ffffffffffffffda RBX: 00007f5b397e5fa0 RCX: 00007f5b3958f749 [ 304.790857][ T7751] RDX: 00000000000000c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 304.798863][ T7751] RBP: 00007f5b377f6090 R08: 0000000000000000 R09: 0000000000000000 [ 304.806858][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.814861][ T7751] R13: 00007f5b397e6038 R14: 00007f5b397e5fa0 R15: 00007ffc1cc42bb8 [ 304.822874][ T7751] [ 304.865383][ T7734] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 304.973074][ T7734] XFS (loop3): Ending clean mount [ 305.005669][ T7734] XFS (loop3): Quotacheck needed: Please wait. [ 305.120902][ T7734] XFS (loop3): Quotacheck: Done. [ 305.201430][ T5776] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 305.973541][ T7768] FAULT_INJECTION: forcing a failure. [ 305.973541][ T7768] name failslab, interval 1, probability 0, space 0, times 0 [ 306.019041][ T7768] CPU: 0 PID: 7768 Comm: syz.2.473 Not tainted syzkaller #0 [ 306.026494][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.036589][ T7768] Call Trace: [ 306.039922][ T7768] [ 306.042912][ T7768] dump_stack_lvl+0x16c/0x230 [ 306.047657][ T7768] ? show_regs_print_info+0x20/0x20 [ 306.052914][ T7768] ? load_image+0x3b0/0x3b0 [ 306.057483][ T7768] ? __might_sleep+0xe0/0xe0 [ 306.062124][ T7768] ? __lock_acquire+0x7c80/0x7c80 [ 306.067231][ T7768] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 306.072906][ T7768] should_fail_ex+0x39d/0x4d0 [ 306.077648][ T7768] should_failslab+0x9/0x20 [ 306.082216][ T7768] slab_pre_alloc_hook+0x59/0x310 [ 306.087294][ T7768] kmem_cache_alloc+0x5a/0x2e0 [ 306.092109][ T7768] ? getname_flags+0xbb/0x500 [ 306.096842][ T7768] getname_flags+0xbb/0x500 [ 306.101401][ T7768] __x64_sys_unlinkat+0xae/0xe0 [ 306.106304][ T7768] do_syscall_64+0x55/0xb0 [ 306.110755][ T7768] ? clear_bhb_loop+0x40/0x90 [ 306.115480][ T7768] ? clear_bhb_loop+0x40/0x90 [ 306.120206][ T7768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.126143][ T7768] RIP: 0033:0x7fbfca78f749 [ 306.130610][ T7768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.150275][ T7768] RSP: 002b:00007fbfcb708038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 306.158754][ T7768] RAX: ffffffffffffffda RBX: 00007fbfca9e5fa0 RCX: 00007fbfca78f749 [ 306.166776][ T7768] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: ffffffffffffff9c [ 306.174792][ T7768] RBP: 00007fbfcb708090 R08: 0000000000000000 R09: 0000000000000000 [ 306.182809][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.190821][ T7768] R13: 00007fbfca9e6038 R14: 00007fbfca9e5fa0 R15: 00007ffe9c3559f8 [ 306.198852][ T7768] [ 306.933664][ T7776] FAULT_INJECTION: forcing a failure. [ 306.933664][ T7776] name failslab, interval 1, probability 0, space 0, times 0 [ 306.947101][ T7776] CPU: 1 PID: 7776 Comm: syz.3.471 Not tainted syzkaller #0 [ 306.954443][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.964533][ T7776] Call Trace: [ 306.967852][ T7776] [ 306.970830][ T7776] dump_stack_lvl+0x16c/0x230 [ 306.975567][ T7776] ? show_regs_print_info+0x20/0x20 [ 306.980820][ T7776] ? load_image+0x3b0/0x3b0 [ 306.985376][ T7776] ? __lock_acquire+0x7c80/0x7c80 [ 306.990449][ T7776] should_fail_ex+0x39d/0x4d0 [ 306.995179][ T7776] should_failslab+0x9/0x20 [ 306.999735][ T7776] slab_pre_alloc_hook+0x59/0x310 [ 307.004810][ T7776] ? kvmalloc_node+0x70/0x180 [ 307.009539][ T7776] ? kvmalloc_node+0x70/0x180 [ 307.014263][ T7776] __kmem_cache_alloc_node+0x53/0x260 [ 307.019691][ T7776] ? kvmalloc_node+0x70/0x180 [ 307.024416][ T7776] __kmalloc_node+0xa4/0x230 [ 307.029072][ T7776] kvmalloc_node+0x70/0x180 [ 307.033622][ T7776] newary+0x13e/0xaa0 [ 307.037648][ T7776] ? down_read_killable+0x340/0x340 [ 307.042888][ T7776] ? __lock_acquire+0x7c80/0x7c80 [ 307.047965][ T7776] ? file_end_write+0x159/0x250 [ 307.052864][ T7776] ipcget+0x1bf/0xdb0 [ 307.056915][ T7776] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 307.062600][ T7776] ? mutex_unlock+0x10/0x10 [ 307.067135][ T7776] ? __fget_files+0x44a/0x4d0 [ 307.071867][ T7776] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 307.077560][ T7776] __x64_sys_semget+0x1a3/0x200 [ 307.082470][ T7776] ? sem_more_checks+0xa0/0xa0 [ 307.087297][ T7776] ? lockdep_hardirqs_on+0x98/0x150 [ 307.092547][ T7776] do_syscall_64+0x55/0xb0 [ 307.096996][ T7776] ? clear_bhb_loop+0x40/0x90 [ 307.101714][ T7776] ? clear_bhb_loop+0x40/0x90 [ 307.106441][ T7776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.112381][ T7776] RIP: 0033:0x7fa3e4f8f749 [ 307.116835][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.136483][ T7776] RSP: 002b:00007fa3e5ebd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 307.144954][ T7776] RAX: ffffffffffffffda RBX: 00007fa3e51e6180 RCX: 00007fa3e4f8f749 [ 307.152969][ T7776] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000000 [ 307.160981][ T7776] RBP: 00007fa3e5ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 307.169002][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.177012][ T7776] R13: 00007fa3e51e6218 R14: 00007fa3e51e6180 R15: 00007ffcffada478 [ 307.185042][ T7776] [ 307.880443][ T7772] loop1: detected capacity change from 0 to 32768 [ 307.962825][ T7772] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 308.009919][ T7771] loop2: detected capacity change from 0 to 32768 [ 308.101043][ T7771] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 308.142470][ T7772] XFS (loop1): Ending clean mount [ 308.203082][ T7771] XFS (loop2): Ending clean mount [ 308.270550][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 308.397224][ T5915] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.607830][ T5771] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 308.666279][ T5915] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.863968][ T5915] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.086426][ T7778] loop3: detected capacity change from 0 to 32768 [ 309.173029][ T5915] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.224556][ T7778] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 309.241230][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 309.376068][ T7778] XFS (loop3): Ending clean mount [ 309.393227][ T7778] FAULT_INJECTION: forcing a failure. [ 309.393227][ T7778] name failslab, interval 1, probability 0, space 0, times 0 [ 309.467731][ T7778] CPU: 0 PID: 7778 Comm: syz.3.476 Not tainted syzkaller #0 [ 309.475126][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.485243][ T7778] Call Trace: [ 309.488584][ T7778] [ 309.491594][ T7778] dump_stack_lvl+0x16c/0x230 [ 309.496354][ T7778] ? show_regs_print_info+0x20/0x20 [ 309.501729][ T7778] ? load_image+0x3b0/0x3b0 [ 309.506298][ T7778] ? __might_sleep+0xe0/0xe0 [ 309.510948][ T7778] ? __lock_acquire+0x7c80/0x7c80 [ 309.516053][ T7778] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 309.521751][ T7778] should_fail_ex+0x39d/0x4d0 [ 309.526498][ T7778] should_failslab+0x9/0x20 [ 309.531076][ T7778] slab_pre_alloc_hook+0x59/0x310 [ 309.536159][ T7778] kmem_cache_alloc+0x5a/0x2e0 [ 309.541240][ T7778] ? getname_flags+0xbb/0x500 [ 309.545974][ T7778] getname_flags+0xbb/0x500 [ 309.550534][ T7778] __x64_sys_unlinkat+0xae/0xe0 [ 309.555440][ T7778] do_syscall_64+0x55/0xb0 [ 309.559909][ T7778] ? clear_bhb_loop+0x40/0x90 [ 309.564649][ T7778] ? clear_bhb_loop+0x40/0x90 [ 309.569391][ T7778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.575339][ T7778] RIP: 0033:0x7fa3e4f8f749 [ 309.579794][ T7778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.599540][ T7778] RSP: 002b:00007fa3e5eff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 309.608019][ T7778] RAX: ffffffffffffffda RBX: 00007fa3e51e5fa0 RCX: 00007fa3e4f8f749 [ 309.616017][ T7778] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: ffffffffffffff9c [ 309.624027][ T7778] RBP: 00007fa3e5eff090 R08: 0000000000000000 R09: 0000000000000000 [ 309.632030][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.640029][ T7778] R13: 00007fa3e51e6038 R14: 00007fa3e51e5fa0 R15: 00007ffcffada478 [ 309.648047][ T7778] [ 309.964841][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 310.265514][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.277228][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.297835][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.314271][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.330440][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 310.348212][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.427813][ T7818] netlink: 27 bytes leftover after parsing attributes in process `syz.2.481'. [ 310.448763][ T7799] loop1: detected capacity change from 0 to 32768 [ 310.475959][ T7799] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.479 (7799) [ 310.504191][ T7799] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 310.561389][ T7799] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 310.603074][ T7799] BTRFS info (device loop1): using free space tree [ 310.870640][ T7839] loop3: detected capacity change from 0 to 1024 [ 310.888319][ T7799] BTRFS info (device loop1): enabling ssd optimizations [ 310.912582][ T7839] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.924075][ T7799] BTRFS info (device loop1): auto enabling async discard [ 310.992394][ T7799] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 311.003878][ T7839] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 311.423067][ T7849] loop3: detected capacity change from 0 to 1024 [ 311.460262][ T7849] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.551122][ T7849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 311.615774][ T7816] loop2: detected capacity change from 0 to 32768 [ 311.637832][ T7849] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.483: bad orphan inode 11 [ 311.652790][ T7816] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.481 (7816) [ 311.670359][ T7849] ext4_test_bit(bit=10, block=4) = 1 [ 311.675886][ T7849] is_bad_inode(inode)=0 [ 311.680176][ T7849] NEXT_ORPHAN(inode)=3254779904 [ 311.685078][ T7849] max_ino=32 [ 311.689016][ T7849] i_nlink=0 [ 311.742837][ T7816] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 311.816224][ T7816] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 311.876019][ T7816] BTRFS info (device loop2): using free space tree [ 311.887185][ T7849] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.483: lblock 2 mapped to illegal pblock 2 (length 1) [ 311.990800][ T7849] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 312.019301][ T7849] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.483: lblock 0 mapped to illegal pblock 48 (length 1) [ 312.117794][ T7849] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 312.167788][ T7849] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.483: Failed to acquire dquot type 0 [ 312.259734][ T7849] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 312.297906][ T7816] BTRFS info (device loop2): enabling ssd optimizations [ 312.305013][ T7816] BTRFS info (device loop2): auto enabling async discard [ 312.355670][ T7849] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.483: mark_inode_dirty error [ 312.398671][ T7816] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 312.438272][ T5788] Bluetooth: hci1: command tx timeout [ 312.468240][ T7849] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 312.509832][ T7849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.668102][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.698207][ T5776] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 312.775729][ T5776] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 312.810444][ T5776] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 312.818844][ T7861] loop1: detected capacity change from 0 to 32768 [ 312.948075][ T7861] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 313.228562][ T7900] FAULT_INJECTION: forcing a failure. [ 313.228562][ T7900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.263665][ T7900] CPU: 0 PID: 7900 Comm: syz.3.485 Not tainted syzkaller #0 [ 313.271052][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.281159][ T7900] Call Trace: [ 313.284485][ T7900] [ 313.287463][ T7900] dump_stack_lvl+0x16c/0x230 [ 313.292211][ T7900] ? show_regs_print_info+0x20/0x20 [ 313.297486][ T7900] ? load_image+0x3b0/0x3b0 [ 313.302068][ T7900] ? __might_fault+0xaa/0x120 [ 313.306808][ T7900] ? __lock_acquire+0x7c80/0x7c80 [ 313.311897][ T7900] should_fail_ex+0x39d/0x4d0 [ 313.316661][ T7900] _copy_from_user+0x2f/0xe0 [ 313.321322][ T7900] ___sys_sendmsg+0x159/0x290 [ 313.326060][ T7900] ? __sys_sendmsg+0x270/0x270 [ 313.330912][ T7900] ? __lock_acquire+0x7c80/0x7c80 [ 313.336029][ T7900] __se_sys_sendmsg+0x1a5/0x270 [ 313.340959][ T7900] ? __x64_sys_sendmsg+0x80/0x80 [ 313.345983][ T7900] ? lockdep_hardirqs_on+0x98/0x150 [ 313.351427][ T7900] do_syscall_64+0x55/0xb0 [ 313.355898][ T7900] ? clear_bhb_loop+0x40/0x90 [ 313.360647][ T7900] ? clear_bhb_loop+0x40/0x90 [ 313.365394][ T7900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.371360][ T7900] RIP: 0033:0x7fa3e4f8f749 [ 313.375838][ T7900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.395499][ T7900] RSP: 002b:00007fa3e5eff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.403976][ T7900] RAX: ffffffffffffffda RBX: 00007fa3e51e5fa0 RCX: 00007fa3e4f8f749 [ 313.412009][ T7900] RDX: 00000000000000c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 313.420035][ T7900] RBP: 00007fa3e5eff090 R08: 0000000000000000 R09: 0000000000000000 [ 313.428101][ T7900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.436129][ T7900] R13: 00007fa3e51e6038 R14: 00007fa3e51e5fa0 R15: 00007ffcffada478 [ 313.444176][ T7900] [ 313.496759][ T7861] XFS (loop1): Ending clean mount [ 313.817678][ T7819] chnl_net:caif_netlink_parms(): no params data found [ 314.289524][ T7916] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 314.373291][ T7916] overlayfs: overlapping lowerdir path [ 314.489095][ T5915] hsr_slave_0: left promiscuous mode [ 314.519501][ T5788] Bluetooth: hci1: command tx timeout [ 314.531028][ T5915] hsr_slave_1: left promiscuous mode [ 314.539200][ T5777] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 314.563752][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.594783][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.621984][ T7921] loop3: detected capacity change from 0 to 1024 [ 314.655120][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.661506][ T7921] EXT4-fs: Ignoring removed mblk_io_submit option [ 314.693404][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.733932][ T5915] bridge_slave_1: left allmulticast mode [ 314.753633][ T5915] bridge_slave_1: left promiscuous mode [ 314.771960][ T7921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.783414][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.880292][ T5915] bridge_slave_0: left allmulticast mode [ 314.886052][ T5915] bridge_slave_0: left promiscuous mode [ 314.924158][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.951088][ T7921] 9pnet_fd: Insufficient options for proto=fd [ 315.150101][ T5908] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 315.172435][ T7935] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 315.199265][ T5908] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 315.211709][ T5908] EXT4-fs (loop3): This should not happen!! Data will be lost [ 315.211709][ T5908] [ 315.222035][ T5908] EXT4-fs (loop3): Total free blocks count 0 [ 315.231443][ T5915] veth1_macvtap: left promiscuous mode [ 315.398602][ T5915] veth0_macvtap: left promiscuous mode [ 315.419403][ T5915] veth1_vlan: left promiscuous mode [ 315.426614][ T5915] veth0_vlan: left promiscuous mode [ 315.438267][ T5908] EXT4-fs (loop3): Free/Dirty block details [ 315.508889][ T5908] EXT4-fs (loop3): free_blocks=68451041280 [ 315.525872][ T5908] EXT4-fs (loop3): dirty_blocks=0 [ 315.552238][ T5908] EXT4-fs (loop3): Block reservation details [ 315.567553][ T5908] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 315.609252][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.785850][ T7945] i2c i2c-0: Invalid block write size 34 [ 316.598207][ T5788] Bluetooth: hci1: command tx timeout [ 317.322746][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.333813][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.025899][ T5915] team0 (unregistering): Port device team_slave_1 removed [ 318.127100][ T5915] team0 (unregistering): Port device team_slave_0 removed [ 318.357356][ T5915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.462958][ T5915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.677708][ T5788] Bluetooth: hci1: command tx timeout [ 318.846354][ T8013] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 319.187508][ T8021] kvm: pic: single mode not supported [ 319.188221][ T8021] kvm: pic: single mode not supported [ 319.194430][ T8021] kvm: pic: single mode not supported [ 319.202994][ T8021] kvm: pic: single mode not supported [ 319.212441][ T8021] kvm: pic: level sensitive irq not supported [ 319.261348][ T8021] kvm: pic: level sensitive irq not supported [ 319.289508][ T8021] kvm: pic: single mode not supported [ 319.309080][ T8021] kvm: pic: single mode not supported [ 320.037050][ T5915] bond0 (unregistering): Released all slaves [ 320.541747][ T8066] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 320.562992][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.606383][ T7819] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.628322][ T7819] bridge_slave_0: entered allmulticast mode [ 320.678464][ T7819] bridge_slave_0: entered promiscuous mode [ 320.704123][ T8069] kvm: kvm [8068]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 320.716825][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.741076][ T7819] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.759752][ T7819] bridge_slave_1: entered allmulticast mode [ 320.767269][ T7819] bridge_slave_1: entered promiscuous mode [ 320.788041][ T8069] kvm: kvm [8068]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 320.942396][ T7819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.975801][ T7819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.132693][ T7819] team0: Port device team_slave_0 added [ 321.151473][ T7819] team0: Port device team_slave_1 added [ 321.245448][ T8083] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 321.324344][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.368588][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.456843][ T7819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.496087][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.515907][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.560336][ T7819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.891772][ T7819] hsr_slave_0: entered promiscuous mode [ 321.916870][ T7819] hsr_slave_1: entered promiscuous mode [ 321.977905][ T7819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.005987][ T7819] Cannot create hsr debugfs directory [ 322.245354][ T8117] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 322.632749][ T8136] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.219556][ T8149] kvm: MWAIT instruction emulated as NOP! [ 323.246830][ T8149] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.283751][ T8143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.519529][ T7819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.597315][ T7819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.647048][ T7819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.689210][ T7819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.931041][ T8175] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 324.085374][ T7819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.165515][ T7819] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.204594][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.211886][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.269644][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.278127][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.022497][ T8208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.047259][ T8220] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.106568][ T8217] kvm: pic: single mode not supported [ 325.106597][ T8217] kvm: pic: level sensitive irq not supported [ 325.132569][ T8217] kvm: pic: single mode not supported [ 325.139097][ T8217] kvm: pic: level sensitive irq not supported [ 325.180025][ T7819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.332988][ T7819] veth0_vlan: entered promiscuous mode [ 325.406190][ T7819] veth1_vlan: entered promiscuous mode [ 325.787325][ T7819] veth0_macvtap: entered promiscuous mode [ 325.822539][ T7819] veth1_macvtap: entered promiscuous mode [ 326.529258][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.608879][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.674772][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.734164][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.768817][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.794258][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.806098][ T28] audit: type=1326 audit(1767611317.556:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8245 comm="syz.1.571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b3958f749 code=0x0 [ 326.859510][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.925238][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.964289][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.998149][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.027729][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.058046][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.078299][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.102901][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.153737][ T7819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.199220][ T7819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.236499][ T7819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.296386][ T7819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.100798][ T5865] IPVS: starting estimator thread 0... [ 328.198641][ T8263] IPVS: using max 21 ests per chain, 50400 per kthread [ 328.350927][ T5915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.481237][ T5915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.564044][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.564118][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.597016][ T8274] tty tty22: ldisc open failed (-12), clearing slot 21 [ 331.830860][ T8311] netlink: 1536 bytes leftover after parsing attributes in process `syz.0.587'. [ 336.067224][ T8398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.613'. [ 336.664737][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805cba0800: rx timeout, send abort [ 336.677796][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805cba0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 338.468065][ T787] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 338.901099][ T787] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 339.117773][ T787] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 339.167529][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.284756][ T787] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 339.338029][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.366683][ T787] usb 2-1: Product: syz [ 339.377737][ T787] usb 2-1: Manufacturer: syz [ 339.382428][ T787] usb 2-1: SerialNumber: syz [ 339.422111][ T787] usb 2-1: config 0 descriptor?? [ 340.530306][ T968] usb 2-1: USB disconnect, device number 5 [ 340.969765][ T8520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.638'. [ 341.730630][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 341.946256][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.975950][ T27] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 342.006493][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.026751][ T27] usb 2-1: Product: syz [ 342.037162][ T27] usb 2-1: Manufacturer: syz [ 342.052303][ T27] usb 2-1: SerialNumber: syz [ 342.073773][ T27] usb 2-1: config 0 descriptor?? [ 342.091754][ T27] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 342.106030][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 342.114694][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 342.125739][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 342.135776][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 342.155257][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 342.165295][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 342.173583][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 342.207457][ T27] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 342.245772][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 342.267864][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 342.275620][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 342.335457][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 342.351671][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 342.364838][ T27] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 342.386694][ T27] usb 2-1: USB disconnect, device number 6 [ 342.409288][ T27] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 342.440679][ T27] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 342.465212][ T27] keyspan 2-1:0.0: device disconnected [ 342.498284][ T8559] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 342.864028][ T8574] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 342.884025][ T8574] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 343.227875][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 343.429867][ T27] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 343.447912][ T27] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 343.468770][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 343.483850][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.672277][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.661'. [ 344.462913][ T8602] netlink: 'syz.0.661': attribute type 18 has an invalid length. [ 344.594687][ T8580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 344.620571][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 344.702692][ T8602] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.712405][ T8602] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.722544][ T8602] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.731590][ T8602] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.792562][ T8602] vxlan0: entered promiscuous mode [ 344.909696][ T27] usb 2-1: USB disconnect, device number 7 [ 345.548191][ T5865] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 348.896612][ T5865] usb 4-1: device descriptor read/all, error -71 [ 349.069310][ T28] audit: type=1326 audit(1767611339.816:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8653 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfca78f749 code=0x7ffc0000 [ 349.106719][ T5847] kernel write not supported for file /input/mouse0 (pid: 5847 comm: kworker/1:6) [ 349.137754][ T28] audit: type=1326 audit(1767611339.816:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8653 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfca78f749 code=0x7ffc0000 [ 349.198094][ T28] audit: type=1326 audit(1767611339.866:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8653 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fbfca78f749 code=0x7ffc0000 [ 349.269628][ T28] audit: type=1326 audit(1767611339.866:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8653 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfca78f749 code=0x7ffc0000 [ 349.347394][ T28] audit: type=1326 audit(1767611339.866:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8653 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfca78f749 code=0x7ffc0000 [ 352.138039][ T787] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 352.349282][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 352.401135][ T787] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 352.494054][ T787] usb 2-1: config 0 has no interface number 0 [ 352.627970][ T787] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid maxpacket 40448, setting to 1024 [ 352.838841][ T787] usb 2-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 352.936493][ T787] usb 2-1: config 0 interface 12 has no altsetting 0 [ 352.970736][ T787] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 353.008265][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.064066][ T787] usb 2-1: Product: syz [ 353.108762][ T787] usb 2-1: Manufacturer: syz [ 353.143585][ T787] usb 2-1: SerialNumber: syz [ 353.193381][ T787] usb 2-1: config 0 descriptor?? [ 353.228679][ T8684] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.249855][ T787] f81534 2-1:0.12: unsupported endpoint max packet size [ 353.438193][ T8716] netlink: 40 bytes leftover after parsing attributes in process `syz.0.701'. [ 354.495402][ T8730] input: syz1 as /devices/virtual/input/input5 [ 354.787775][ T787] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 354.882421][ T5865] usb 2-1: USB disconnect, device number 8 [ 355.010143][ T787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.646460][ T787] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.701047][ T787] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 356.720620][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 356.757256][ T787] usb 1-1: SerialNumber: syz [ 358.969691][ T787] usb 1-1: 0:2 : does not exist [ 358.974777][ T787] usb 1-1: unit 5: unexpected type 0x0a [ 359.062976][ T787] usb 1-1: USB disconnect, device number 7 [ 359.122284][ T7811] udevd[7811]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.758273][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 361.088191][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 361.220722][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 361.281258][ T27] usb 4-1: config 4 has an invalid interface number: 136 but max is 0 [ 361.458418][ T27] usb 4-1: config 4 has no interface number 0 [ 361.534100][ T27] usb 4-1: config 4 interface 136 has no altsetting 0 [ 361.625992][ T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=ca.92 [ 361.635807][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.651958][ T27] usb 4-1: Product: syz [ 361.656198][ T27] usb 4-1: Manufacturer: syz [ 361.677670][ T27] usb 4-1: SerialNumber: syz [ 361.949899][ T8774] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.959888][ T8774] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.969154][ T8774] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.978287][ T8774] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.013575][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.733'. [ 362.042056][ T27] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.136/input/input6 [ 362.076641][ T5127] bcm5974 4-1:4.136: could not read from device [ 362.101146][ T27] usb 4-1: USB disconnect, device number 12 [ 362.116890][ T5127] bcm5974 4-1:4.136: could not read from device [ 362.206557][ T8800] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 363.448333][ T8823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.088359][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.746'. [ 366.522268][ T8860] netlink: 60 bytes leftover after parsing attributes in process `syz.3.757'. [ 369.849941][ T8911] raw_sendmsg: syz.3.775 forgot to set AF_INET. Fix it! [ 370.108458][ T5865] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 370.247765][ T787] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 370.300199][ T5865] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 370.315263][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.343016][ T5865] usb 2-1: config 0 descriptor?? [ 370.457707][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 370.466466][ T787] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 370.483700][ T787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 370.494852][ T787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.511746][ T787] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.526815][ T787] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 370.546392][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.760566][ T8908] (null): rxe_set_mtu: Set mtu to 256 [ 370.769318][ T8908] vxcan1 speed is unknown, defaulting to 1000 [ 370.779918][ T8908] vxcan1 speed is unknown, defaulting to 1000 [ 370.789963][ T8908] vxcan1 speed is unknown, defaulting to 1000 [ 371.044449][ T8908] infiniband syz2: set active [ 371.049698][ T8908] infiniband syz2: added vxcan1 [ 371.183047][ T8908] RDS/IB: syz2: added [ 371.188723][ T8908] smc: adding ib device syz2 with port count 1 [ 371.195276][ T8908] smc: ib device syz2 port 1 has pnetid [ 371.209514][ T787] usb 1-1: GET_CAPABILITIES returned 0 [ 371.313839][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 371.320748][ T787] usbtmc 1-1:16.0: can't read capabilities [ 371.332455][ T8908] vxcan1 speed is unknown, defaulting to 1000 [ 371.361358][ T8] vxcan1 speed is unknown, defaulting to 1000 [ 371.488162][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 371.615148][ T8908] vxcan1 speed is unknown, defaulting to 1000 [ 371.688257][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 371.704117][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.721515][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.733521][ T27] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 371.747312][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.892043][ T8908] vxcan1 speed is unknown, defaulting to 1000 [ 372.065915][ T8908] vxcan1 speed is unknown, defaulting to 1000 [ 372.311732][ T5865] ath6kl: Failed to read usb control message: -71 [ 372.319702][ T5865] ath6kl: Unable to read the bmi data from the device: -71 [ 372.327116][ T5865] ath6kl: Unable to recv target info: -71 [ 372.334255][ T5865] ath6kl: Failed to init ath6kl core: -71 [ 372.370894][ T5865] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 372.416427][ T5865] usb 2-1: USB disconnect, device number 9 [ 372.423391][ T27] usb 4-1: config 0 descriptor?? [ 372.871643][ T27] razer 0003:1532:011B.0003: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.3-1/input0 [ 373.064182][ T5847] usb 1-1: USB disconnect, device number 8 [ 373.070497][ T27] usb 4-1: USB disconnect, device number 13 [ 373.130946][ T8945] fido_id[8945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 375.612727][ T28] audit: type=1326 audit(1767611366.356:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8966 comm="syz.0.795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x0 [ 375.628993][ T8973] netlink: 10 bytes leftover after parsing attributes in process `syz.3.798'. [ 377.004387][ T8991] cifs: Unknown parameter 'mode' [ 378.304154][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 378.587729][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 378.609112][ T8] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 378.838584][ T9047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.805'. [ 378.903621][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.134852][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.378411][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.607864][ T8] usb 2-1: config 0 has no interface number 0 [ 379.763927][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 379.823442][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.911138][ T8] usb 2-1: Product: syz [ 379.915387][ T8] usb 2-1: Manufacturer: syz [ 379.997364][ T8] usb 2-1: SerialNumber: syz [ 380.036772][ T8] usb 2-1: config 0 descriptor?? [ 380.993658][ T5847] usb 2-1: USB disconnect, device number 10 [ 381.903125][ T9071] syz2: rxe_newlink: already configured on vxcan1 [ 382.339573][ T9065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.391948][ T9072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.317728][ T9084] netlink: 60 bytes leftover after parsing attributes in process `syz.2.818'. [ 384.738238][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 384.957844][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 384.997739][ T27] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 385.006076][ T27] usb 2-1: config 0 has no interface number 0 [ 385.017083][ T27] usb 2-1: config 0 interface 12 has no altsetting 0 [ 385.037024][ T27] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 385.046364][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.054626][ T27] usb 2-1: Product: syz [ 385.059222][ T27] usb 2-1: Manufacturer: syz [ 385.064782][ T27] usb 2-1: SerialNumber: syz [ 385.111919][ T27] usb 2-1: config 0 descriptor?? [ 386.560866][ T27] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 386.758857][ T27] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 386.807207][ T27] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 386.852802][ T27] f81534: probe of 2-1:0.12 failed with error -71 [ 386.928454][ T27] usb 2-1: USB disconnect, device number 11 [ 387.045127][ T9120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.833'. [ 387.175448][ T9120] netlink: 40 bytes leftover after parsing attributes in process `syz.2.833'. [ 389.108613][ T5865] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 389.395528][ T28] audit: type=1326 audit(1767611380.136:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e4f8f749 code=0x7ffc0000 [ 389.430626][ T5865] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x85 has invalid wMaxPacketSize 0 [ 389.462959][ T5865] usb 1-1: config 0 interface 0 has no altsetting 0 [ 389.470705][ T28] audit: type=1326 audit(1767611380.166:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa3e4f8f749 code=0x7ffc0000 [ 389.516214][ T28] audit: type=1326 audit(1767611380.166:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e4f8f749 code=0x7ffc0000 [ 389.538738][ T5865] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 389.538771][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.575236][ T28] audit: type=1326 audit(1767611380.166:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e4f8f749 code=0x7ffc0000 [ 389.607979][ T5865] usb 1-1: Product: syz [ 389.612218][ T5865] usb 1-1: Manufacturer: syz [ 389.616857][ T5865] usb 1-1: SerialNumber: syz [ 389.641514][ T28] audit: type=1326 audit(1767611380.166:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa3e4f8f749 code=0x7ffc0000 [ 389.664899][ T5865] usb 1-1: config 0 descriptor?? [ 389.696140][ T28] audit: type=1326 audit(1767611380.166:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e4f8f749 code=0x7ffc0000 [ 389.697190][ T5865] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 389.728026][ T28] audit: type=1326 audit(1767611380.166:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e4f8f749 code=0x7ffc0000 [ 390.602946][ T28] audit: type=1326 audit(1767611380.166:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fa3e4f8f749 code=0x7ffc0000 [ 390.627944][ T28] audit: type=1326 audit(1767611380.166:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e4f8f749 code=0x7ffc0000 [ 390.653345][ T28] audit: type=1326 audit(1767611380.166:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.3.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e4f8f749 code=0x7ffc0000 [ 390.722588][ T5865] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 390.888161][ T5865] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 390.898533][ T5865] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 390.907134][ T5865] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 390.916585][ T5865] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 390.925939][ T5865] keyspan 1-1:0.0: unsupported endpoint type 0 [ 390.932308][ T5865] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 390.980219][ T5865] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 391.005626][ T5865] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 391.037739][ T5865] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 391.045517][ T5865] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 391.058157][ T5865] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 391.065955][ T5865] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 391.083028][ T5865] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 391.106971][ T5865] usb 1-1: USB disconnect, device number 9 [ 391.120279][ T5865] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 391.157172][ T5865] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 391.204522][ T5865] keyspan 1-1:0.0: device disconnected [ 391.607065][ T9177] netlink: 'syz.1.856': attribute type 9 has an invalid length. [ 397.161942][ T9236] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 400.234945][ T9252] kvm: kvm [9250]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 400.256664][ T9252] kvm: kvm [9250]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 400.295831][ T9252] kvm: kvm [9250]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 400.318586][ T9252] kvm: kvm [9250]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 400.359410][ T9252] kvm: kvm [9250]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 400.380135][ T9252] kvm: kvm [9250]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 400.411837][ T9252] kvm: kvm [9250]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 400.443258][ T9252] kvm: kvm [9250]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 400.475527][ T9252] kvm: kvm [9250]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc1) = 0xffff [ 400.500014][ T9252] kvm: kvm [9250]: vcpu0, guest rIP: 0x29 Unhandled WRMSR(0xc2) = 0xffff [ 403.697765][ T9303] usb usb7: usbfs: process 9303 (syz.0.903) did not claim interface 0 before use [ 403.706962][ T9306] binder: Bad value for 'stats' [ 405.119185][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.914'. [ 411.598331][ T787] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 411.758016][ T7428] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 411.797843][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 411.806693][ T787] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 411.820133][ T787] usb 4-1: config 0 has no interface number 0 [ 411.826324][ T787] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.842534][ T787] usb 4-1: config 0 interface 85 has no altsetting 0 [ 411.852433][ T787] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 411.869022][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.877501][ T787] usb 4-1: Product: syz [ 411.884347][ T787] usb 4-1: Manufacturer: syz [ 411.894946][ T787] usb 4-1: SerialNumber: syz [ 411.904799][ T787] usb 4-1: config 0 descriptor?? [ 411.967743][ T7428] usb 2-1: Using ep0 maxpacket: 16 [ 411.990105][ T7428] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.010375][ T7428] usb 2-1: config 0 interface 0 has no altsetting 0 [ 412.017080][ T7428] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 412.031058][ T7428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.043088][ T7428] usb 2-1: config 0 descriptor?? [ 412.488169][ T7428] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 412.495689][ T7428] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 412.509158][ T7428] nzxt-smart2 0003:1E71:2009.0004: item fetching failed at offset 4/5 [ 412.518837][ T7428] nzxt-smart2: probe of 0003:1E71:2009.0004 failed with error -22 [ 412.716566][ T9] usb 2-1: USB disconnect, device number 12 [ 412.737517][ T787] appletouch 4-1:0.85: Geyser mode initialized. [ 412.754491][ T787] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input7 [ 412.786141][ C0] appletouch 4-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 413.135488][ T9] usb 4-1: USB disconnect, device number 14 [ 413.517492][ T9] appletouch 4-1:0.85: input: appletouch disconnected [ 413.818870][ T9430] netlink: 'syz.3.952': attribute type 10 has an invalid length. [ 413.827222][ T9430] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 413.877103][ T9430] team0: Port device netdevsim0 added [ 419.038254][ T9484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.969'. [ 420.737747][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 420.969462][ T27] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 421.003886][ T27] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 421.161254][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 421.178375][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 421.979925][ T27] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 421.999066][ T27] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 422.007509][ T27] usb 2-1: Product: syz [ 422.011850][ T27] usb 2-1: Manufacturer: syz [ 422.040144][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 422.071280][ T27] cdc_wdm 2-1:1.0: skipping garbage [ 422.082204][ T27] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 422.332470][ T27] usb 2-1: USB disconnect, device number 13 [ 424.320079][ T9535] mmap: syz.3.984 (9535) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 427.039165][ T9553] (unnamed net_device) (uninitialized): option mode: invalid value (9) [ 427.414696][ T9558] tipc: Enabling of bearer rejected, failed to enable media [ 427.537706][ T28] audit: type=1326 audit(1767611418.276:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 427.559810][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.575792][ T28] audit: type=1326 audit(1767611418.286:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 427.601618][ T28] audit: type=1326 audit(1767611418.316:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 427.623815][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.641366][ T28] audit: type=1326 audit(1767611418.316:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 427.671476][ T28] audit: type=1326 audit(1767611418.346:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 427.693675][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.736301][ T28] audit: type=1326 audit(1767611418.346:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 427.758366][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.790702][ T28] audit: type=1326 audit(1767611418.346:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 427.817492][ T28] audit: type=1326 audit(1767611418.346:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9559 comm="syz.0.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 427.842330][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.304741][ T28] audit: type=1326 audit(1767611418.746:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 428.548286][ T28] audit: type=1326 audit(1767611418.746:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 430.447749][ T787] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 430.638172][ T5915] Bluetooth: hci4: Frame reassembly failed (-84) [ 432.681428][ T5087] Bluetooth: hci4: command 0x1003 tx timeout [ 432.688342][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 433.087489][ T787] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.099376][ T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.110005][ T787] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 433.121368][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 433.128727][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.137670][ T787] usb 4-1: SerialNumber: syz [ 433.262670][ T787] usb 4-1: can't set config #1, error -71 [ 433.274894][ T787] usb 4-1: USB disconnect, device number 15 [ 435.117700][ T9660] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 437.420977][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 437.834626][ T9695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1048'. [ 439.760231][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 439.957881][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 439.987497][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.016907][ T27] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC6, skipping [ 440.063017][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.110983][ T27] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 440.129632][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.177589][ T27] usb 1-1: Product: syz [ 440.221790][ T27] usb 1-1: Manufacturer: syz [ 440.261692][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.270574][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.300427][ T27] usb 1-1: SerialNumber: syz [ 440.473006][ T27] usb 1-1: config 0 descriptor?? [ 440.615209][ T27] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 440.817127][ T5846] usb 1-1: USB disconnect, device number 10 [ 441.069656][ T9719] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1056'. [ 441.534700][ T9734] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1061'. [ 441.612260][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 441.612324][ T28] audit: type=1326 audit(1767611432.356:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.2.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfca78f749 code=0x7ffc0000 [ 441.640707][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.252301][ T28] audit: type=1326 audit(1767611432.416:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.2.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfca78f749 code=0x7ffc0000 [ 442.274616][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.430438][ T28] audit: type=1326 audit(1767611432.436:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.2.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfca78f749 code=0x7ffc0000 [ 442.453495][ T28] audit: type=1326 audit(1767611432.446:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.2.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfca78f749 code=0x7ffc0000 [ 442.497745][ T28] audit: type=1326 audit(1767611432.446:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.2.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfca78f749 code=0x7ffc0000 [ 442.569137][ T28] audit: type=1326 audit(1767611432.446:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.2.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbfca78f749 code=0x7ffc0000 [ 442.780299][ T28] audit: type=1326 audit(1767611433.026:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.2.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfca78f749 code=0x7ffc0000 [ 442.843638][ T28] audit: type=1326 audit(1767611433.026:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9736 comm="syz.2.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfca78f749 code=0x7ffc0000 [ 444.225869][ T9748] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.233942][ T9748] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.221572][ T9748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.370795][ T9748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.835905][ T9826] TCP: tcp_parse_options: Illegal window scaling value 163 > 14 received [ 447.216650][ T9748] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.233923][ T9748] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.244452][ T9748] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.259342][ T9748] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.724348][ T9748] veth3: left promiscuous mode [ 449.777693][ T9748] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.786961][ T9748] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.796558][ T9748] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.806343][ T9748] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.866018][ T9825] veth1_to_bond: entered allmulticast mode [ 449.897528][ T9825] veth1_to_bond: left allmulticast mode [ 450.072819][ T28] audit: type=1326 audit(1767611440.816:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 450.144359][ T28] audit: type=1326 audit(1767611440.816:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 450.320323][ T28] audit: type=1326 audit(1767611440.846:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 450.574958][ T28] audit: type=1326 audit(1767611440.846:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 450.794820][ T28] audit: type=1326 audit(1767611440.846:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 450.975957][ T28] audit: type=1326 audit(1767611440.846:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 451.004908][ T28] audit: type=1326 audit(1767611440.846:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 451.027911][ T28] audit: type=1326 audit(1767611440.846:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 451.050294][ T28] audit: type=1326 audit(1767611440.846:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 451.072478][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.079210][ T28] audit: type=1326 audit(1767611440.846:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.0.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 451.308441][ T5781] Bluetooth: hci2: Malformed Event: 0x02 [ 451.425011][ T9874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1110'. [ 451.436438][ T9874] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1110'. [ 451.445719][ T9874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1110'. [ 451.552147][ T5833] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 451.626677][ T9883] 9pnet_fd: p9_fd_create_tcp (9883): problem connecting socket to 127.0.0.1 [ 451.760525][ T5833] usb 4-1: config 0 has no interfaces? [ 451.774313][ T5833] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 451.798323][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 451.806543][ T5833] usb 4-1: Product: syz [ 451.845202][ T5833] usb 4-1: Manufacturer: syz [ 451.861023][ T5833] usb 4-1: SerialNumber: syz [ 451.899615][ T5833] usb 4-1: config 0 descriptor?? [ 453.620643][ T9921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1127'. [ 454.259034][ T968] usb 4-1: USB disconnect, device number 16 [ 454.733487][ T9948] sp0: Synchronizing with TNC [ 456.053500][ T9983] QAT: failed to copy from user cfg_data. [ 457.734110][T10007] sctp: [Deprecated]: syz.3.1161 (pid 10007) Use of int in max_burst socket option. [ 457.734110][T10007] Use struct sctp_assoc_value instead [ 459.037757][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 459.037775][ T28] audit: type=1326 audit(1767611449.776:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 459.103785][T10019] syzkaller1: entered promiscuous mode [ 459.135209][T10019] syzkaller1: entered allmulticast mode [ 459.145475][ T28] audit: type=1326 audit(1767611449.806:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 459.217660][ T28] audit: type=1326 audit(1767611449.816:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 459.306103][ T28] audit: type=1326 audit(1767611449.816:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 459.334433][T10027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1171'. [ 459.353565][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 459.366885][ T28] audit: type=1326 audit(1767611449.816:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 459.389272][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.404111][ T28] audit: type=1326 audit(1767611449.816:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 459.426427][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.465567][ T28] audit: type=1326 audit(1767611449.816:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10018 comm="syz.1.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 459.487905][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.821563][T10041] loop5: detected capacity change from 0 to 7 [ 459.838811][T10041] Dev loop5: unable to read RDB block 7 [ 459.844838][T10041] loop5: unable to read partition table [ 459.850890][T10041] loop5: partition table beyond EOD, truncated [ 459.857145][T10041] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 460.107697][ T9774] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 461.097645][ T9774] usb 2-1: Using ep0 maxpacket: 32 [ 461.106376][ T9774] usb 2-1: unable to get BOS descriptor or descriptor too short [ 461.130028][ T9774] usb 2-1: config 4 has an invalid interface number: 124 but max is 1 [ 461.144967][ T9774] usb 2-1: config 4 has an invalid interface number: 196 but max is 1 [ 461.158483][ T9774] usb 2-1: config 4 has no interface number 0 [ 461.164628][ T9774] usb 2-1: config 4 has no interface number 1 [ 461.171540][ T9774] usb 2-1: config 4 interface 124 has no altsetting 0 [ 461.184190][ T9774] usb 2-1: config 4 interface 196 has no altsetting 0 [ 461.198337][ T9774] usb 2-1: string descriptor 0 read error: -22 [ 461.205226][ T9774] usb 2-1: New USB device found, idVendor=1199, idProduct=683c, bcdDevice=fb.51 [ 461.214824][ T9774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.234992][ T9774] sierra 2-1:4.124: Sierra USB modem converter detected [ 461.447668][ T968] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 461.647898][ T968] usb 4-1: Using ep0 maxpacket: 32 [ 461.667185][ T968] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 461.690460][ T968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.717412][ T968] usb 4-1: config 0 has no interface number 0 [ 461.727077][ T968] usb 4-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.745005][ T968] usb 4-1: config 0 interface 85 has no altsetting 0 [ 461.755071][ T968] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 461.777718][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.795220][ T968] usb 4-1: Product: syz [ 461.799791][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 461.813639][ T968] usb 4-1: Manufacturer: syz [ 461.818655][ T968] usb 4-1: SerialNumber: syz [ 461.830825][ T968] usb 4-1: config 0 descriptor?? [ 461.842371][ T968] appletouch 4-1:0.85: Could not find int-in endpoint [ 461.850269][ T968] appletouch: probe of 4-1:0.85 failed with error -5 [ 461.868360][ T968] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 462.071587][ T9774] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 462.088224][ T9774] sierra 2-1:4.196: Sierra USB modem converter detected [ 462.106266][ T9774] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 462.127192][ T9774] usb 2-1: USB disconnect, device number 14 [ 462.138961][ T9774] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 462.154500][ T9774] sierra 2-1:4.124: device disconnected [ 462.163959][ T9774] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 462.178395][ T9774] sierra 2-1:4.196: device disconnected [ 462.207777][ T968] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 462.402548][ T968] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 462.411806][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.420430][ T968] usb 1-1: Product: syz [ 462.424948][ T968] usb 1-1: Manufacturer: syz [ 462.431046][ T968] usb 1-1: SerialNumber: syz [ 462.438451][ T968] usb 1-1: config 0 descriptor?? [ 462.447976][ T968] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 464.186137][ T7428] usb 4-1: USB disconnect, device number 17 [ 464.507728][ T9756] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 464.928955][ T9756] usb 2-1: config index 0 descriptor too short (expected 43424, got 18) [ 465.306306][ T9756] usb 2-1: config 149 has too many interfaces: 236, using maximum allowed: 32 [ 465.316559][ T9756] usb 2-1: config 149 has 0 interfaces, different from the descriptor's value: 236 [ 465.326763][ T9756] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=fd.14 [ 465.336122][ T9756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.365604][ T968] usb 1-1: USB disconnect, device number 11 [ 465.590777][ T9756] usb 2-1: USB disconnect, device number 15 [ 465.897789][ T968] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 466.843078][ T968] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 466.857650][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.865727][ T968] usb 1-1: Product: syz [ 466.876007][ T968] usb 1-1: Manufacturer: syz [ 466.881022][ T968] usb 1-1: SerialNumber: syz [ 466.897398][ T968] usb 1-1: config 0 descriptor?? [ 466.919410][ T968] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 012 [ 466.985445][T10115] : renamed from wg2 [ 467.010578][ T28] audit: type=1326 audit(1767611457.746:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 467.037868][ T28] audit: type=1326 audit(1767611457.746:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 467.064503][ T28] audit: type=1326 audit(1767611457.756:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 467.089456][ T28] audit: type=1326 audit(1767611457.756:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 467.117479][ T968] (null): failure setting delay to 10us [ 467.123455][ T28] audit: type=1326 audit(1767611457.756:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.1.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3958f749 code=0x7ffc0000 [ 467.161589][ T968] i2c-tiny-usb: probe of 1-1:0.0 failed with error -5 [ 467.164366][T10122] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1207'. [ 467.186130][ T968] usb 1-1: USB disconnect, device number 12 [ 467.269298][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4 [ 467.280778][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2 [ 467.288850][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 467.297001][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 467.304982][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 467.313431][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 467.323091][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 467.331547][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 467.339757][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 467.348026][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 467.355882][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 467.364169][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 467.372579][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 467.380782][ T7428] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x0 [ 467.407631][ T7428] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 467.519244][T10127] fido_id[10127]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 467.604274][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1213'. [ 467.937845][ T5848] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 467.987818][ T7428] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 468.127813][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 468.136003][ T5848] usb 4-1: unable to get BOS descriptor or descriptor too short [ 468.147286][ T5848] usb 4-1: config 4 has an invalid interface number: 136 but max is 0 [ 468.155717][ T5848] usb 4-1: config 4 has no interface number 0 [ 468.162047][ T5848] usb 4-1: config 4 interface 136 has no altsetting 0 [ 468.171421][ T5848] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice=ca.92 [ 468.180765][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.188880][ T5848] usb 4-1: Product: syz [ 468.193091][ T5848] usb 4-1: Manufacturer: syz [ 468.199510][ T5848] usb 4-1: SerialNumber: syz [ 468.214311][ T7428] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 468.223456][ T7428] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.234391][ T7428] usb 1-1: config 0 has no interface number 0 [ 468.240965][ T7428] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 468.252527][ T7428] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.269701][ T7428] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 468.279095][ T7428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.287169][ T7428] usb 1-1: Product: syz [ 468.292281][ T7428] usb 1-1: Manufacturer: syz [ 468.296940][ T7428] usb 1-1: SerialNumber: syz [ 468.305244][ T7428] usb 1-1: config 0 descriptor?? [ 468.439500][ T5848] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.136/input/input9 [ 468.452640][ T5127] bcm5974 4-1:4.136: could not read from device [ 468.462438][ T5127] bcm5974 4-1:4.136: could not read from device [ 468.474812][ T5848] usb 4-1: USB disconnect, device number 18 [ 468.486013][ T5127] bcm5974 4-1:4.136: could not read from device [ 468.735346][ T5848] usb 1-1: USB disconnect, device number 13 [ 468.927885][ T7428] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 469.128051][ T7428] usb 2-1: Using ep0 maxpacket: 32 [ 469.150517][ T7428] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.196646][ T7428] usb 2-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice=a2.ea [ 469.204600][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.216211][ T7428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.216357][ T7428] usb 2-1: Product: syz [ 469.234935][ T7428] usb 2-1: Manufacturer: syz [ 469.242945][ T7428] usb 2-1: SerialNumber: syz [ 469.318268][ T7428] usb 2-1: config 0 descriptor?? [ 469.359190][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.646118][ T7428] usb 2-1: USB disconnect, device number 16 [ 471.123197][T10171] capability: warning: `syz.1.1228' uses 32-bit capabilities (legacy support in use) [ 474.175748][ T7428] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 474.477827][ T7428] usb 4-1: Using ep0 maxpacket: 16 [ 474.499529][ T7428] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.511538][ T7428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.526086][ T7428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 474.614746][ T7428] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 474.672185][ T7428] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.728865][ T7428] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 474.738238][ T7428] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 474.746427][ T7428] usb 4-1: Manufacturer: syz [ 474.781714][ T7428] usb 4-1: config 0 descriptor?? [ 474.897141][T10195] netlink: 'syz.0.1237': attribute type 10 has an invalid length. [ 474.970434][T10195] team0: Port device netdevsim0 added [ 475.097908][ T7428] rc_core: IR keymap rc-hauppauge not found [ 475.103928][ T7428] Registered IR keymap rc-empty [ 475.120821][ T7428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 475.167961][ T7428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 475.224205][ T7428] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 475.266414][ T7428] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10 [ 475.322167][ T7428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 475.808725][ T7428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 476.007756][ T7428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 476.056957][ T7428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 476.117183][ T7428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 476.172392][ T7428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 476.227870][ T7428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 476.267855][ T7428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 476.315909][ T7428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 476.360092][ T7428] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 476.431697][ T7428] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 476.449056][T10210] could not allocate digest TFM handle [ 476.457708][ T7428] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 476.504959][ T7428] usb 4-1: USB disconnect, device number 19 [ 476.597246][T10221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.717828][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 478.122178][T10248] random: crng reseeded on system resumption [ 480.887900][ T7428] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 481.090164][ T7428] usb 2-1: Using ep0 maxpacket: 8 [ 481.097431][ T7428] usb 2-1: config 0 has no interfaces? [ 481.111794][ T7428] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 481.132072][ T7428] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 481.147646][ T7428] usb 2-1: Product: syz [ 481.151953][ T7428] usb 2-1: SerialNumber: syz [ 481.168467][ T7428] usb 2-1: config 0 descriptor?? [ 483.822840][ T9763] usb 2-1: USB disconnect, device number 17 [ 483.856319][T10318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.051528][T10316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.140029][ T27] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 485.440359][ T27] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 485.470264][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.508432][ T27] usb 2-1: config 0 descriptor?? [ 485.819087][T10350] 9pnet_virtio: no channels available for device syz [ 485.929501][T10329] syz2: rxe_newlink: already configured on vxcan1 [ 488.828142][ T27] ath6kl: Failed to read usb control message: -110 [ 488.845276][ T27] ath6kl: Unable to read the bmi data from the device: -110 [ 488.858542][ T27] ath6kl: Unable to recv target info: -110 [ 488.988124][ T27] ath6kl: Failed to init ath6kl core: -110 [ 488.994551][ T27] ath6kl_usb: probe of 2-1:0.0 failed with error -110 [ 489.008798][ T27] usb 2-1: USB disconnect, device number 18 [ 489.156159][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'. [ 489.479883][T10373] genirq: Flags mismatch irq 4. 00000000 (pcl818) vs. 00000000 (ttyS0) [ 494.050408][T10388] bridge1: entered promiscuous mode [ 494.055871][T10388] bridge1: entered allmulticast mode [ 498.412876][T10454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1331'. [ 499.157802][ T7428] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 499.439051][ T7428] usb 4-1: Using ep0 maxpacket: 32 [ 499.532945][ T7428] usb 4-1: config 0 interface 0 has no altsetting 0 [ 499.553303][ T7428] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 499.583491][ T7428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.610283][ T7428] usb 4-1: Product: syz [ 499.631190][ T7428] usb 4-1: Manufacturer: syz [ 499.635872][ T7428] usb 4-1: SerialNumber: syz [ 499.683430][ T7428] usb 4-1: config 0 descriptor?? [ 501.223859][ T7428] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 501.247863][ T7428] gs_usb: probe of 4-1:0.0 failed with error -121 [ 501.474797][ T5848] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 501.648412][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.654803][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.748307][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 501.771513][ T5848] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 501.800383][ T5848] usb 2-1: config 0 has no interface number 0 [ 501.825563][ T5848] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.857942][ T5848] usb 2-1: config 0 interface 85 has no altsetting 0 [ 501.887281][ T5848] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 501.907246][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.926081][ T5848] usb 2-1: Product: syz [ 501.946048][ T5848] usb 2-1: Manufacturer: syz [ 501.966308][ T5848] usb 2-1: SerialNumber: syz [ 501.989672][ T5848] usb 2-1: config 0 descriptor?? [ 502.041005][ T9763] usb 4-1: USB disconnect, device number 20 [ 502.477948][ T9756] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 503.348217][ T5848] appletouch 2-1:0.85: Geyser mode initialized. [ 503.357342][ T5848] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input12 [ 503.382122][ T5848] usb 2-1: USB disconnect, device number 19 [ 503.382217][ C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 503.448220][ T9756] usb 1-1: Using ep0 maxpacket: 16 [ 503.510537][ T9756] usb 1-1: unable to get BOS descriptor or descriptor too short [ 503.551489][ T9756] usb 1-1: config 3 has an invalid interface number: 197 but max is 0 [ 503.615400][ T9756] usb 1-1: config 3 has no interface number 0 [ 503.632096][ T9756] usb 1-1: config 3 interface 197 altsetting 15 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 503.675944][ T9756] usb 1-1: config 3 interface 197 altsetting 15 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 503.703561][T10517] tmpfs: Bad value for 'nr_inodes' [ 503.743983][ T9756] usb 1-1: config 3 interface 197 has no altsetting 0 [ 504.250515][ T9756] usb 1-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=58.ee [ 504.323295][ T9756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.397206][ T9756] usb 1-1: Product: syz [ 504.423269][ T5848] appletouch 2-1:0.85: input: appletouch disconnected [ 504.432601][ T9756] usb 1-1: Manufacturer: syz [ 504.470003][ T9756] usb 1-1: SerialNumber: syz [ 504.728920][ T9756] usb 1-1: USB disconnect, device number 14 [ 504.897940][ T5848] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 505.658970][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.717582][ T5848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.764253][ T5848] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 505.794353][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 505.814654][ T5848] usb 2-1: SerialNumber: syz [ 507.231768][T10553] vivid-000: disconnect [ 507.393160][T10544] vivid-000: reconnect [ 507.622827][ T5848] usb 2-1: 0:2 : does not exist [ 507.647725][ T5848] usb 2-1: unit 5: unexpected type 0x09 [ 507.727074][ T5848] usb 2-1: USB disconnect, device number 20 [ 507.840256][T10358] udevd[10358]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.835583][T10572] bridge1: entered promiscuous mode [ 508.843211][T10572] bridge1: entered allmulticast mode [ 509.641966][ T9763] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 509.837886][ T9763] usb 1-1: Using ep0 maxpacket: 16 [ 509.910788][ T9763] usb 1-1: config 0 has an invalid interface number: 36 but max is 0 [ 509.937842][ T5848] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 509.999106][ T9763] usb 1-1: config 0 has no interface number 0 [ 510.081682][ T9763] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 510.170300][ T9763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.197832][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 510.243772][ T9763] usb 1-1: Product: syz [ 510.244441][ T5848] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 510.257860][ T9763] usb 1-1: Manufacturer: syz [ 510.262506][ T9763] usb 1-1: SerialNumber: syz [ 510.294761][ T9763] usb 1-1: config 0 descriptor?? [ 510.307818][ T5848] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 510.357580][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.372046][ T9763] go7007: probe of 1-1:0.36 failed with error -12 [ 510.406388][ T5848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 510.445547][ T5848] usb 2-1: config 1 has no interface number 0 [ 510.464645][ T5848] usb 2-1: config 1 interface 1 has no altsetting 0 [ 510.509648][ T5848] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 510.529401][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.562615][ T5848] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 510.576397][ T5848] usb 2-1: selecting invalid altsetting 0 [ 510.584133][ T5848] snd_usb_pod 2-1:1.1: set_interface failed [ 510.596122][ T5848] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 510.607971][ T5848] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 510.663992][T10586] kvm_pr_unimpl_wrmsr: 20 callbacks suppressed [ 510.664006][T10586] kvm: kvm [10585]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 510.681241][T10586] kvm: kvm [10585]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 510.764697][ T27] usb 2-1: USB disconnect, device number 21 [ 512.793762][ T5848] usb 1-1: USB disconnect, device number 15 [ 513.216145][T10616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1391'. [ 514.905689][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1407'. [ 518.281379][T10713] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1428'. [ 524.352772][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 525.657123][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 528.298742][T10819] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ0 [ 529.193625][ T28] audit: type=1326 audit(1767611519.936:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 529.243539][ T28] audit: type=1326 audit(1767611519.966:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 529.312322][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1469'. [ 529.320205][ T28] audit: type=1326 audit(1767611519.966:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 529.352278][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1469'. [ 529.379008][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1469'. [ 529.394869][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1469'. [ 529.396938][ T28] audit: type=1326 audit(1767611519.966:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 529.431466][ T28] audit: type=1326 audit(1767611519.966:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10823 comm="syz.0.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 532.608395][T10882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1490'. [ 532.637967][T10882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1490'. [ 532.677076][T10882] gretap0: entered promiscuous mode [ 532.706710][T10882] gretap0: left promiscuous mode [ 534.979807][ T5915] Bluetooth: hci4: Frame reassembly failed (-84) [ 536.997839][ T5087] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 536.997889][ T5781] Bluetooth: hci4: command 0x1003 tx timeout [ 541.017890][ T28] audit: type=1326 audit(1767611531.746:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 541.092379][ T28] audit: type=1326 audit(1767611531.746:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 541.177608][ T28] audit: type=1326 audit(1767611531.756:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 541.224299][ T28] audit: type=1326 audit(1767611531.756:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 541.312358][ T28] audit: type=1326 audit(1767611531.756:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 541.389207][ T28] audit: type=1326 audit(1767611531.756:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 541.444427][ T28] audit: type=1326 audit(1767611531.756:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 541.543235][ T28] audit: type=1326 audit(1767611531.756:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 541.603958][ T28] audit: type=1326 audit(1767611531.756:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb3e838f749 code=0x7ffc0000 [ 542.149192][ T28] audit: type=1326 audit(1767611531.756:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10981 comm="syz.0.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb3e838f783 code=0x7ffc0000 [ 542.470897][T11004] siw: device registration error -23 [ 542.489137][T11004] smc: removing ib device syz2 [ 543.879236][T11030] syz_tun: entered allmulticast mode [ 543.964663][T11030] dvmrp6: entered allmulticast mode [ 545.462365][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1560'. [ 546.654987][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1566'. [ 547.667926][ T7428] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 547.857596][ T7428] usb 2-1: Using ep0 maxpacket: 16 [ 547.872632][ T7428] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 547.889942][ T7428] usb 2-1: config 0 has no interface number 0 [ 547.903707][ T7428] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 547.924355][ T7428] usb 2-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 547.937745][ T7428] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 547.952179][ T7428] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 547.961644][ T7428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.970020][ T7428] usb 2-1: Product: syz [ 547.974606][ T7428] usb 2-1: Manufacturer: syz [ 547.979613][ T7428] usb 2-1: SerialNumber: syz [ 547.989472][ T7428] usb 2-1: config 0 descriptor?? [ 547.996103][T11080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 548.003901][T11080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 548.220612][T11080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 548.232343][T11080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 548.321611][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 548.321628][ T28] audit: type=1326 audit(1767611539.066:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11096 comm="syz.0.1578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x0 [ 548.444404][ T7428] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 548.462462][ T7428] asix: probe of 2-1:0.34 failed with error -71 [ 548.473622][ T7428] usb 2-1: USB disconnect, device number 22 [ 549.408917][ T7428] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 549.620431][ T7428] usb 2-1: config 1 has an invalid interface number: 239 but max is 0 [ 549.641422][ T7428] usb 2-1: config 1 has no interface number 0 [ 549.649829][ T7428] usb 2-1: config 1 interface 239 has no altsetting 0 [ 549.676438][ T7428] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=50.3f [ 549.691653][ T7428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.700111][ T7428] usb 2-1: Product: syz [ 549.704413][ T7428] usb 2-1: Manufacturer: syz [ 549.711581][ T7428] usb 2-1: SerialNumber: syz [ 549.972178][ T7428] usb 2-1: can't set first interface for hiFace device. [ 549.981605][ T7428] snd-usb-hiface: probe of 2-1:1.239 failed with error -5 [ 549.996125][ T7428] usb 2-1: USB disconnect, device number 23 [ 553.659951][T11174] lo speed is unknown, defaulting to 1000 [ 553.667676][T11174] lo speed is unknown, defaulting to 1000 [ 553.699946][T11174] lo speed is unknown, defaulting to 1000 [ 553.724578][T11174] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 553.818317][T11174] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 553.976573][T11174] lo speed is unknown, defaulting to 1000 [ 554.005588][T11174] lo speed is unknown, defaulting to 1000 [ 554.012918][T11174] lo speed is unknown, defaulting to 1000 [ 554.022695][T11174] lo speed is unknown, defaulting to 1000 [ 554.508169][T11184] usb usb7: usbfs: process 11184 (syz.0.1613) did not claim interface 0 before use [ 557.667629][ T28] audit: type=1326 audit(1767611548.396:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11209 comm="syz.0.1623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3e838f749 code=0x0 [ 557.789600][T11213] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1624'. [ 558.810855][T11226] tmpfs: Bad value for 'nr_blocks' [ 558.953462][T11235] netlink: 'syz.2.1631': attribute type 21 has an invalid length. [ 558.964088][T11235] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1631'. [ 559.213532][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'. [ 561.800788][T11280] program syz.1.1647 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.163044][ T5773] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 562.357869][ T5773] usb 2-1: Using ep0 maxpacket: 32 [ 562.398004][ T5773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 562.478171][ T5848] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 562.521700][ T5773] usb 2-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40 [ 562.672820][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.779510][ T5773] usb 2-1: Product: syz [ 562.848269][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 562.864753][ T5773] usb 2-1: Manufacturer: 츸Й섟꽈ꏱ࿴ጰ齴蠤쫩煎웞漾ѭ❺轖Ę즉сᡩ쩔蹆崶⾛䮱舡侵彃ㅿ蘖脤┋ㄌꬦ쓂굄ꏲ턊踲쉌킼ٟ㨇멍픥聐몕ꈅꕕ뱸퓢ꭍꄧⵀ먰돮㮩ျｼ㵢負䇅馔䯴Җ먴쏟갨짛縯࿼僄勽㫶좝謫蹼辘Ⱞ㛺ᥥ镄鰑툳㶚鍴 [ 562.974563][ T5848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.993595][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 563.037722][ T5773] usb 2-1: SerialNumber: syz [ 563.047035][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 563.100777][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.107202][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.125086][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.184939][ T5848] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 563.202460][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.238492][ T5848] usb 1-1: config 0 descriptor?? [ 563.268061][T11305] fuse: Invalid rootmode [ 563.332434][T11288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.346322][T11288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.471032][ T9756] usb 1-1: USB disconnect, device number 16 [ 563.777169][ T5773] usbhid 2-1:1.0: can't add hid device: -71 [ 563.797743][ T5773] usbhid: probe of 2-1:1.0 failed with error -71 [ 563.828196][ T5773] usb 2-1: USB disconnect, device number 24 [ 564.348713][T11326] overlayfs: missing 'lowerdir' [ 564.614601][T11329] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 565.337966][T11333] netlink: 'syz.2.1666': attribute type 9 has an invalid length. [ 566.842222][T11348] syz.0.1672 (11348): drop_caches: 2 [ 573.118805][T11411] syz.2.1696 (11411): drop_caches: 2 [ 574.042648][T11422] program syz.1.1700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.817739][ T968] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 578.289074][ T968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.385015][ T968] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 578.417605][ T968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.456655][ T968] usb 1-1: Product: syz [ 578.471313][ T968] usb 1-1: Manufacturer: syz [ 578.497126][ T968] usb 1-1: SerialNumber: syz [ 578.569158][ T968] usb 1-1: config 0 descriptor?? [ 578.608888][ T968] yurex 1-1:0.0: Could not find endpoints [ 578.830229][ T968] usb 1-1: USB disconnect, device number 17 [ 579.839035][T11504] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 585.457801][ T9763] IPVS: starting estimator thread 0... [ 585.557833][T11538] IPVS: using max 26 ests per chain, 62400 per kthread [ 585.608002][T11541] tipc: Enabling of bearer rejected, media not registered [ 586.438630][T11567] IPv6: NLM_F_CREATE should be specified when creating new route [ 591.249643][T11609] syz.1.1767 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 593.633867][T11618] 9pnet_fd: p9_fd_create_tcp (11618): problem connecting socket to 127.0.0.1 [ 593.998007][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1777'. [ 594.050427][ T5087] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 594.061037][ T5087] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 594.307735][ T9763] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 594.518191][ T9763] usb 2-1: Using ep0 maxpacket: 8 [ 594.560667][ T9763] usb 2-1: unable to get BOS descriptor or descriptor too short [ 594.579719][ T9763] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 594.610715][ T9763] usb 2-1: config 1 has no interface number 1 [ 594.616897][ T9763] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 594.670485][ T9763] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.687995][ T9763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.717928][ T9763] usb 2-1: Product: syz [ 594.722173][ T9763] usb 2-1: Manufacturer: syz [ 594.726809][ T9763] usb 2-1: SerialNumber: syz [ 595.024437][T11646] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1782'. [ 595.034907][ T9763] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 595.094386][ T9763] usb 2-1: USB disconnect, device number 25 [ 595.190636][T11647] udevd[11647]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.339262][ T27] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 597.558247][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 597.569911][ T27] usb 1-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 597.579406][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.590510][ T27] usb 1-1: Product: syz [ 597.594806][ T27] usb 1-1: Manufacturer: syz [ 597.600209][ T27] usb 1-1: SerialNumber: syz [ 597.608684][ T27] usb 1-1: config 0 descriptor?? [ 597.621897][ T27] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 597.828410][ T27] pwc: send_video_command error -71 [ 597.839103][ T27] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 597.856628][ T27] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 597.884383][ T27] usb 1-1: USB disconnect, device number 18 [ 599.828983][T11698] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 599.840870][T11698] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 599.849320][T11698] CPU: 0 PID: 11698 Comm: syz.2.1800 Not tainted syzkaller #0 [ 599.856815][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.866911][T11698] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 599.872515][T11698] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 599.892169][T11698] RSP: 0000:ffffc9000471fa80 EFLAGS: 00010206 [ 599.898273][T11698] RAX: 0000000000000005 RBX: ffff8880192edc00 RCX: 0000000000080000 [ 599.906301][T11698] RDX: ffffc9000e15d000 RSI: 0000000000000822 RDI: 0000000000000823 [ 599.914311][T11698] RBP: 0000000000000001 R08: ffff88814be2512f R09: 1ffff110297c4a25 [ 599.922317][T11698] R10: dffffc0000000000 R11: ffffed10297c4a26 R12: 0000000000000028 [ 599.930338][T11698] R13: dffffc0000000000 R14: ffff88814be25000 R15: dffffc0000000000 [ 599.938356][T11698] FS: 00007fbfcb6e76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 599.947411][T11698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 599.954034][T11698] CR2: 0000200000000100 CR3: 0000000060284000 CR4: 00000000003506f0 [ 599.962048][T11698] Call Trace: [ 599.965364][T11698] [ 599.968332][T11698] pcl818_detach+0x66/0xd0 [ 599.972805][T11698] comedi_device_detach_locked+0x172/0x710 [ 599.978649][T11698] comedi_unlocked_ioctl+0xccc/0xfe0 [ 599.983996][T11698] ? comedi_poll+0x8c0/0x8c0 [ 599.988660][T11698] ? __fget_files+0x28/0x4d0 [ 599.993301][T11698] ? bpf_lsm_file_ioctl+0x9/0x10 [ 599.998297][T11698] ? security_file_ioctl+0x80/0xa0 [ 600.003453][T11698] ? comedi_poll+0x8c0/0x8c0 [ 600.008095][T11698] __se_sys_ioctl+0xfd/0x170 [ 600.012733][T11698] do_syscall_64+0x55/0xb0 [ 600.017184][T11698] ? clear_bhb_loop+0x40/0x90 [ 600.021921][T11698] ? clear_bhb_loop+0x40/0x90 [ 600.026640][T11698] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.032587][T11698] RIP: 0033:0x7fbfca78f749 [ 600.037040][T11698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.056686][T11698] RSP: 002b:00007fbfcb6e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 600.065146][T11698] RAX: ffffffffffffffda RBX: 00007fbfca9e6090 RCX: 00007fbfca78f749 [ 600.073151][T11698] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000008 [ 600.081157][T11698] RBP: 00007fbfca813f91 R08: 0000000000000000 R09: 0000000000000000 [ 600.089165][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.097169][T11698] R13: 00007fbfca9e6128 R14: 00007fbfca9e6090 R15: 00007ffe9c3559f8 [ 600.105202][T11698] [ 600.108272][T11698] Modules linked in: [ 600.113187][T11698] ---[ end trace 0000000000000000 ]--- [ 600.119206][T11698] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 600.124883][T11698] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 19 5f df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f8 5e df f9 4d 8b 24 24 48 83 c3 [ 600.144713][T11698] RSP: 0000:ffffc9000471fa80 EFLAGS: 00010206 [ 600.150905][T11698] RAX: 0000000000000005 RBX: ffff8880192edc00 RCX: 0000000000080000 [ 600.158968][T11698] RDX: ffffc9000e15d000 RSI: 0000000000000822 RDI: 0000000000000823 [ 600.167005][T11698] RBP: 0000000000000001 R08: ffff88814be2512f R09: 1ffff110297c4a25 [ 600.175090][T11698] R10: dffffc0000000000 R11: ffffed10297c4a26 R12: 0000000000000028 [ 600.183176][T11698] R13: dffffc0000000000 R14: ffff88814be25000 R15: dffffc0000000000 [ 600.191250][T11698] FS: 00007fbfcb6e76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 600.200415][T11698] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.207858][T11698] CR2: 0000200000000100 CR3: 0000000060284000 CR4: 00000000003506f0 [ 600.218851][T11698] Kernel panic - not syncing: Fatal exception [ 600.225090][T11698] Kernel Offset: disabled [ 600.229421][T11698] Rebooting in 86400 seconds..