last executing test programs: 55.37481785s ago: executing program 2 (id=4816): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000200)={&(0x7f000049b000/0x3000)=nil, &(0x7f000059e000/0x2000)=nil, 0x3000, 0x7}) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x40025b0c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) setxattr$trusted_overlay_origin(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0x1263, 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 32) r6 = syz_open_procfs(r4, &(0x7f0000000100)='pagemap\x00') pread64(r6, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRESDEC=r3]) (async, rerun: 32) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x10040610, 0x0, 0x0, 0x2}}, 0x50) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) (async) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0xb, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') 52.260097844s ago: executing program 2 (id=4823): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000500)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000540)="921304533ea0b13d2f", 0x9}, 0x1, 0xfeffff}, 0xee) 49.197823674s ago: executing program 2 (id=4834): mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000580)='gfs2\x00', 0x3010003, &(0x7f0000000080)='norecovery') 49.05406465s ago: executing program 2 (id=4835): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@loopback={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffff}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0xfe}, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x810) 48.86404937s ago: executing program 2 (id=4836): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x24) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = dup(r0) fallocate(r1, 0x11, 0x0, 0x72a00) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x452980) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x2a39}) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 48.741856349s ago: executing program 2 (id=4837): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xa}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xdd, 0x64, 0x82, 0x10, 0xfe9, 0xdb78, 0x522e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3a, 0x0, 0x0, 0x4, 0x74, 0x97}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, &(0x7f0000004380)) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0xffff, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x81, 0x0, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r2, r3, 0xa, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0x0, r4}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000300), 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f0000000140)={0x7, 'veth0_vlan\x00', {0x3}, 0x4}) r8 = syz_open_procfs(r6, &(0x7f00000000c0)='cgroup\x00') fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000240)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80, 0x0}, 0xa0c4055) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x82, 0x0, 0x1, 0x10, 0x0, 0x0, 0x44, [0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x1]}}) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f000701fefffffffcdbdf25017c00dd3a7200040042800c00019008001080040025000400028004000880"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$SNDCTL_SEQ_NRSYNTHS(r10, 0x4004510d, &(0x7f0000001b80)) r12 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r12, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000580)="000000070020ac", 0x7}], 0x2}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r12, 0x80049363, &(0x7f00000021c0)) 33.592121107s ago: executing program 32 (id=4837): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xa}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xdd, 0x64, 0x82, 0x10, 0xfe9, 0xdb78, 0x522e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3a, 0x0, 0x0, 0x4, 0x74, 0x97}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, &(0x7f0000004380)) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0xfffffffffffffffe, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0xffff, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x81, 0x0, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r2, r3, 0xa, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0x0, r4}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000300), 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f0000000140)={0x7, 'veth0_vlan\x00', {0x3}, 0x4}) r8 = syz_open_procfs(r6, &(0x7f00000000c0)='cgroup\x00') fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000240)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80, 0x0}, 0xa0c4055) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x82, 0x0, 0x1, 0x10, 0x0, 0x0, 0x44, [0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x1]}}) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f000701fefffffffcdbdf25017c00dd3a7200040042800c00019008001080040025000400028004000880"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$SNDCTL_SEQ_NRSYNTHS(r10, 0x4004510d, &(0x7f0000001b80)) r12 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r12, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000580)="000000070020ac", 0x7}], 0x2}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r12, 0x80049363, &(0x7f00000021c0)) 7.067918756s ago: executing program 4 (id=4995): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x14) 5.737211399s ago: executing program 1 (id=4999): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40000020, r0, &(0x7f0000000100)='./file0\x00') 5.566731401s ago: executing program 4 (id=5001): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\b\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf250a0000002800018008000300e0000001060001000200000014000400ff010000000000000000000000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x52, @remote, 0x80000000}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000050601080000000000000000030000090900030073797a32000000000900020073797a3000000000050001"], 0x34}, 0x1, 0x0, 0x0, 0x4040041}, 0x800) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r8, 0x40044103, &(0x7f0000001000)=0x6) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0x0, 0x5c952399, 0x4, 0x3ff, 0x802, 0x1600, 0x8, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) ioctl$COMEDI_CHANINFO(r9, 0x80306403, &(0x7f00000003c0)={0x2, &(0x7f00000004c0), 0x0, 0x0}) splice(r6, 0x0, r8, 0x0, 0x80, 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) 5.46249501s ago: executing program 1 (id=5002): mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/163, 0xa3}, {&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f00000002c0)=""/125, 0x7d}, {&(0x7f0000000600)=""/225, 0xe1}], 0x8}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}], 0x4000104, 0x40002100, 0x0) (async) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x81) 5.275394467s ago: executing program 1 (id=5003): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000d00)={0x0, 0x9}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7fffffff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x4050) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x10000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000980)={0x0, 0xa5, "07ebbd2c4b2b428f703d6db9bfdaeff11f01ae16fe123f514195d87018087732345619c7388c733b615670e92b0ca4ab1ebfd25747be64892be55cb0764a2e6450a9f2d15de1a65c72abf0a23b6a608676497af0c175db5ae26c513d3419596998788638443932581c66db92a58cc81f326825c2c10f62ba24a4aee22ee7f7c35b94091a21f2ccfe9523db4961d63b6b55e6a2f63bb51fda8b5e4c3e86074dc200a4e6fdcc"}, &(0x7f0000000740)=0xad) r5 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xff, 0x3, 0x100000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000240)={0x28, 0x0, r7, r8, 0x0, 0x0, 0x0, 0xa6, &(0x7f0000000180)="d7af487e6408eb7af333708dac62ea003afe7bb53e455e5e17cb30ab4f7b6b4b31d2997bf6d0777be5e33a0fb46b09fa810f99ca9c52a333a0fcbbd9394ed281ae48c2ff34f2f294272474f43ba535fa3a87dfb5fe58b236f2c84bef1132cebf58657cfca0c48d99cc54d94a28f90e6615664afeba6410b1dc87725d785fbdfb1a247ecd7289c2cf55a66d982a01cc0e10978b2d3f09076bd85b551d27aa8a7095bde07315fd"}) syz_usb_connect$cdc_ncm(0x5, 0x75, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x7, 0x10, 0xa8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "667f"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0xc7a5, 0x5}, {0x6, 0x24, 0x1a, 0x5}, [@obex={0x5, 0x24, 0x15, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5d, 0x3, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x28, 0xfe, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb, 0x6, 0x3}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0xf3, 0xc, 0x1, 0xff, 0x3a}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x8, [{0x85, &(0x7f0000000440)=@string={0x85, 0x3, "155ec7e7bb6db4ddd380005117b0dc927351a2d65e182316c1093583b0a64c240e45b1e10094aa88b629a8e9e9d5dc7260587faf002c1381b31445d7b23c7eb394368d5f7d5678659e641af1e2af252c002c3cfe4e9c4e8e79959b6bdd65ea559b0e823bdc1a9a37ffa8f54c4bad65a50e1a084773b1ac8eaca1811ab63db8c4050c77"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44e}}, {0xcc, &(0x7f0000000600)=@string={0xcc, 0x3, "27761829a29a25a37b99bdcc06631714679fdd971294752ff520e6c3fd9e36b2f6e0fe990401ad9760a9a6c4510ed36298e37aa6424ae71a50177545cb899e822fc8e631670f6ad4dd57e3493b2d3d3fcec7288e6b30080a1d8fd4a9813b58e7dc08f9a4ad4847619cd02b7c86d3f1d54e07f2ee0b2f61ef83087b3bd8f766dbeb2588959faa07344890c98de82ca2ece89cde7e36d9ded381c58fbe4f34d497d7710a5b37728a8be1711060fc310af13d5606e306eaefa2676b732b886ddc64350797155aa3b9753904"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x44a}}, {0x62, &(0x7f0000000840)=ANY=[@ANYBLOB="6200100000000000000f4bccf3ac938f4429eb06ab95173ee283fa81c785dfd4ea1c73d1b4ed85508530ecc60b5075edc508e16f967138ceb9d57dbc383b28ad11f4b3811435eb01ae4b24b0ce55e219a2444cc342d85fe8c0ff62f69ae8464ed77b93dae080a1467c8c2f0c"]}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f00000008c0)={0x3, "d589241be1d06205c16754240bf3cd60f95d50312af2999224d4788d8c65ada937314b9abe385dda2297c95fc08735b0af21529c8d1f4f043dc150bbc8c22367", {0x2, 0x270}}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000280)) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[], 0x0) 2.941762886s ago: executing program 0 (id=5011): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000440)=0x2402a, 0x4) 2.933595745s ago: executing program 3 (id=5012): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan0\x00'}) fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 2.785957065s ago: executing program 3 (id=5013): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, 0x50) 2.738028675s ago: executing program 3 (id=5014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 2.439955552s ago: executing program 4 (id=5015): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)=ANY=[]) 1.684267095s ago: executing program 3 (id=5016): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) semctl$IPC_RMID(0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x41595556, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) 1.672094025s ago: executing program 0 (id=5017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x58}}, 0x0) 1.655938248s ago: executing program 1 (id=5018): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) unshare(0x480) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host, 0x3}) 1.012148419s ago: executing program 0 (id=5019): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1d11, 0x5e) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f0000000380)="25d7fe75fa3496bb8e75411fe8ffffffffffffff00000000008c2c54df4cf9dba5d6f74035c5137fe77324ee1d93eef463eda4300be8d693d6ad67f7b579c94087b3ca17c36f7428bc0740a3e0b77004ca5a95e6524eea2380203181361010d704d6d834babc38aaa30f4347f5017afaa5582e4a585b8309a2a35d2f6c3baefca2488f33fe8d24ec6e51fe2de73ef27a1c07002202eef84d9511e8511235e89d5ec54c", 0xa3, 0x4000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.011889787s ago: executing program 3 (id=5020): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x44020, &(0x7f0000000180)) 936.169032ms ago: executing program 1 (id=5021): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 482.935601ms ago: executing program 0 (id=5022): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="390000fa461ad7e48489bffa56020013f811186809fc071200000f0000ff3f21396963d43e89b0ee000000170a001700e0da8979d2fc6ca957beec11251d35", 0x3f}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 400.08915ms ago: executing program 4 (id=5023): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x8010) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 381.99577ms ago: executing program 3 (id=5024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 277.866566ms ago: executing program 0 (id=5025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x14, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x0) 228.141772ms ago: executing program 4 (id=5026): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x118, 0x0, 0x4, 0xa1, 0x46}, 0x10) 161.577791ms ago: executing program 1 (id=5027): syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 113.763068ms ago: executing program 0 (id=5028): sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)='O', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x20000040) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 0s ago: executing program 4 (id=5029): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$I2C(0x0, 0x10001, 0x240000) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffe, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="000039302ce8", 0xfffffffffffffffd, 0x80000800, 0x16, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x136) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x183001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7, 0x0, 0x2], [0x0, 0x4, 0x2, 0x100000], [0x0, 0x0, 0x1, 0x1]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) r8 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.796960][T19234] RSP: 002b:00007f2a70527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.796983][T19234] RAX: ffffffffffffffda RBX: 00007f2a6f9c5fa0 RCX: 00007f2a6f78ebe9 [ 1093.796998][T19234] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1093.797010][T19234] RBP: 00007f2a70527090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.797021][T19234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.797033][T19234] R13: 00007f2a6f9c6038 R14: 00007f2a6f9c5fa0 R15: 00007fffa1f264e8 [ 1093.797069][T19234] [ 1093.797824][T19234] Mem-Info: [ 1093.802705][ T10] usb 4-1: USB disconnect, device number 89 [ 1093.829619][ T10] usblp0: removed [ 1093.831572][T19234] active_anon:22417 inactive_anon:0 isolated_anon:0 [ 1093.831572][T19234] active_file:6556 inactive_file:52754 isolated_file:0 [ 1093.831572][T19234] unevictable:768 dirty:101 writeback:23 [ 1093.831572][T19234] slab_reclaimable:11808 slab_unreclaimable:100327 [ 1093.831572][T19234] mapped:25940 shmem:17739 pagetables:1504 [ 1093.831572][T19234] sec_pagetables:0 bounce:0 [ 1093.831572][T19234] kernel_misc_reclaimable:0 [ 1093.831572][T19234] free:1292838 free_pcp:17710 free_cma:0 [ 1094.233254][T19234] Node 0 active_anon:89680kB inactive_anon:0kB active_file:26224kB inactive_file:210788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107928kB dirty:400kB writeback:92kB shmem:69412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12328kB pagetables:5896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1094.269050][T19213] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.273699][T19234] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1094.309697][ T10] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1094.319392][T19234] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1094.349892][T19234] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 1094.356463][T19234] Node 0 DMA32 free:1263020kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:89540kB inactive_anon:0kB active_file:26224kB inactive_file:209704kB unevictable:1536kB writepending:408kB zspages:0kB present:3129332kB managed:2555400kB mlocked:0kB bounce:0kB free_pcp:53560kB local_pcp:32396kB free_cma:0kB [ 1094.395550][T19234] lowmem_reserve[]: 0 0 1 1 1 [ 1094.403987][T19234] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1094.405742][T19213] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.453313][T19234] lowmem_reserve[]: 0 0 0 0 0 [ 1094.459653][T19234] Node 1 Normal free:3897316kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12608kB local_pcp:7808kB free_cma:0kB [ 1094.497394][T19234] lowmem_reserve[]: 0 0 0 0 0 [ 1094.502429][T19234] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1094.515554][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1094.519100][T19234] Node 0 DMA32: 3783*4kB (UME) 1663*8kB (UM) 1204*16kB (UME) 373*32kB (UME) 149*64kB (UME) 82*128kB (UME) 41*256kB (UME) 15*512kB (UM) 6*1024kB (M) 12*2048kB (UM) 277*4096kB (UM) = 1263156kB [ 1094.540928][T19234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1094.542514][ T10] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1094.553955][T19234] Node 1 Normal: 213*4kB (UME) 50*8kB (UME) 46*16kB (UE) 257*32kB (UME) 90*64kB (UME) 21*128kB (UME) 7*256kB (UM) 4*512kB (ME) 4*1024kB (UM) 2*2048kB (ME) 944*4096kB (M) = 3897316kB [ 1094.567793][ T10] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1094.592727][T19234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.595803][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1094.604438][T19234] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1094.615587][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1094.621334][T19234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.634603][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1094.640736][T19234] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1094.654874][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1094.660346][T19234] 77036 total pagecache pages [ 1094.677905][T19234] 0 pages in swap cache [ 1094.678265][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1094.682516][T19234] Free swap = 124996kB [ 1094.695034][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.695820][T19234] Total swap = 124996kB [ 1094.708060][T19234] 2097051 pages RAM [ 1094.712295][T19234] 0 pages HighMem/MovableOnly [ 1094.714710][ T10] usb 4-1: config 0 descriptor?? [ 1094.717072][T19234] 426303 pages reserved [ 1094.727229][T19234] 0 pages cma reserved [ 1094.881360][ T24] usb 3-1: USB disconnect, device number 101 [ 1094.944190][T19218] openvswitch: netlink: EtherType 50a is less than min 600 [ 1094.952777][ T10] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 90 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1095.048882][T19245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1095.113539][T19249] netlink: 'syz.0.4542': attribute type 46 has an invalid length. [ 1095.123279][T19250] netlink: 'syz.0.4542': attribute type 46 has an invalid length. [ 1095.241985][T19259] can0: slcan on ttyprintk. [ 1095.260713][T19259] syzkaller1: entered promiscuous mode [ 1095.266366][T19259] syzkaller1: entered allmulticast mode [ 1095.275686][T19259] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1095.430677][ T10] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1095.521541][ T849] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1095.590086][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1095.597376][ T10] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1095.607312][ T10] usb 3-1: config 0 has no interface number 0 [ 1095.613942][ T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1095.630571][ T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1095.644390][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1095.654199][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.664854][ T10] usb 3-1: Product: syz [ 1095.669156][ T10] usb 3-1: Manufacturer: syz [ 1095.674196][ T10] usb 3-1: SerialNumber: syz [ 1095.689374][ T849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.701904][ T10] usb 3-1: config 0 descriptor?? [ 1095.707779][T19257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1095.720362][ T849] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1095.726570][T19257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1095.733704][ T849] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1095.746540][ T849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1095.758184][ T849] usb 1-1: SerialNumber: syz [ 1095.960971][T19257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1095.968392][T19257] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1095.985939][ T849] usb 1-1: 0:2 : does not exist [ 1095.991261][ T849] usb 1-1: unit 5 not found! [ 1096.020714][ T849] usb 1-1: USB disconnect, device number 33 [ 1096.056670][T15383] udevd[15383]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1096.170763][T19258] can0 (unregistered): slcan off ttyprintk. [ 1096.356543][ T5919] usb 4-1: USB disconnect, device number 90 [ 1096.402790][ T5919] usblp0: removed [ 1096.603481][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1096.617361][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1096.633699][ T10] asix 3-1:0.251: probe with driver asix failed with error -71 [ 1096.673769][ T10] usb 3-1: USB disconnect, device number 102 [ 1096.716077][ T1143] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.771328][ T5919] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1096.784612][ T1099] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.810260][ T1099] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.878959][ T1143] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.944021][ T5919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1096.961324][ T5919] usb 4-1: config 174 has an invalid interface number: 223 but max is 0 [ 1096.981655][ T5919] usb 4-1: config 174 has no interface number 0 [ 1096.990485][ T5919] usb 4-1: config 174 interface 223 altsetting 11 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1097.016195][T19301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.029153][T19301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.031771][ T5919] usb 4-1: config 174 interface 223 altsetting 11 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1097.068716][ T5919] usb 4-1: config 174 interface 223 altsetting 11 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1097.080549][ T5919] usb 4-1: config 174 interface 223 altsetting 11 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1097.097019][ T5919] usb 4-1: config 174 interface 223 altsetting 11 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1097.118820][ T5919] usb 4-1: config 174 interface 223 altsetting 11 has a duplicate endpoint with address 0xD, skipping [ 1097.130965][ T5919] usb 4-1: config 174 interface 223 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 1097.163291][ T5919] usb 4-1: config 174 interface 223 altsetting 11 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1097.175174][T19303] syzkaller0: entered promiscuous mode [ 1097.181729][ T5919] usb 4-1: config 174 interface 223 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 1097.193221][ T5919] usb 4-1: config 174 interface 223 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 1097.203518][T19304] syzkaller0: entered allmulticast mode [ 1097.215513][ T5919] usb 4-1: config 174 interface 223 altsetting 11 has an endpoint descriptor with address 0x6A, changing to 0xA [ 1097.240068][ T5919] usb 4-1: config 174 interface 223 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 1097.264373][T19304] syzkaller0 (unregistering): left promiscuous mode [ 1097.271087][ T5919] usb 4-1: config 174 interface 223 altsetting 11 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1097.271126][ T5919] usb 4-1: config 174 interface 223 has no altsetting 0 [ 1097.273554][ T5919] usb 4-1: New USB device found, idVendor=12d1, idProduct=7f73, bcdDevice=2f.b3 [ 1097.288673][T19304] syzkaller0 (unregistering): left allmulticast mode [ 1097.299871][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.475571][ T5919] usb 4-1: Product: syz [ 1097.479903][ T5919] usb 4-1: Manufacturer: syz [ 1097.504302][ T5919] usb 4-1: SerialNumber: syz [ 1097.804195][T19316] 9pnet: p9_errstr2errno: server reported unknown error 0000000 [ 1097.819111][T19316] sd 0:0:1:0: device reset [ 1098.163222][ T5919] option 4-1:174.223: GSM modem (1-port) converter detected [ 1098.318436][ T5919] usb 4-1: USB disconnect, device number 91 [ 1098.434091][T19326] FAULT_INJECTION: forcing a failure. [ 1098.434091][T19326] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.449903][T19326] CPU: 1 UID: 0 PID: 19326 Comm: syz.0.4555 Not tainted syzkaller #0 PREEMPT(full) [ 1098.449932][T19326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1098.449944][T19326] Call Trace: [ 1098.449953][T19326] [ 1098.449963][T19326] dump_stack_lvl+0x189/0x250 [ 1098.450003][T19326] ? __pfx____ratelimit+0x10/0x10 [ 1098.450029][T19326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1098.450057][T19326] ? __pfx__printk+0x10/0x10 [ 1098.450093][T19326] ? __pfx___might_resched+0x10/0x10 [ 1098.450114][T19326] ? fs_reclaim_acquire+0x7d/0x100 [ 1098.450141][T19326] should_fail_ex+0x414/0x560 [ 1098.450170][T19326] should_failslab+0xa8/0x100 [ 1098.450195][T19326] __kmalloc_noprof+0xcb/0x7f0 [ 1098.450215][T19326] ? tomoyo_encode+0x28b/0x550 [ 1098.450249][T19326] tomoyo_encode+0x28b/0x550 [ 1098.450284][T19326] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1098.450326][T19326] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1098.450350][T19326] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1098.450378][T19326] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1098.450449][T19326] ? __fget_files+0x2a/0x420 [ 1098.450489][T19326] ? __fget_files+0x3a0/0x420 [ 1098.450512][T19326] ? __fget_files+0x2a/0x420 [ 1098.450542][T19326] security_file_ioctl+0xcb/0x2d0 [ 1098.450567][T19326] __se_sys_ioctl+0x47/0x170 [ 1098.450592][T19326] do_syscall_64+0xfa/0xfa0 [ 1098.450616][T19326] ? lockdep_hardirqs_on+0x9c/0x150 [ 1098.450642][T19326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.450662][T19326] ? clear_bhb_loop+0x60/0xb0 [ 1098.450686][T19326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.450705][T19326] RIP: 0033:0x7f2a6f78ebe9 [ 1098.450723][T19326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.450739][T19326] RSP: 002b:00007f2a70527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1098.450761][T19326] RAX: ffffffffffffffda RBX: 00007f2a6f9c5fa0 RCX: 00007f2a6f78ebe9 [ 1098.450776][T19326] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 1098.450789][T19326] RBP: 00007f2a70527090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.450802][T19326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.450814][T19326] R13: 00007f2a6f9c6038 R14: 00007f2a6f9c5fa0 R15: 00007fffa1f264e8 [ 1098.450851][T19326] [ 1098.679111][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.698117][ T5919] option 4-1:174.223: device disconnected [ 1098.719331][T19328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.728336][T19328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.814970][T19326] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1099.074343][T19339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.101817][T19337] 9pnet_fd: Insufficient options for proto=fd [ 1099.118255][T19339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.350355][ T5954] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 1099.526039][ T5954] usb 1-1: config 2 has an invalid interface number: 42 but max is 0 [ 1099.537306][ T5954] usb 1-1: config 2 has an invalid descriptor of length 215, skipping remainder of the config [ 1099.553162][ T5954] usb 1-1: config 2 has no interface number 0 [ 1099.562835][ T5954] usb 1-1: config 2 interface 42 altsetting 245 endpoint 0xF has invalid maxpacket 120, setting to 8 [ 1099.577941][ T5954] usb 1-1: config 2 interface 42 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1099.599835][ T5954] usb 1-1: config 2 interface 42 has no altsetting 0 [ 1100.560350][ T7038] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 1100.712226][ T7038] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1100.721568][ T7038] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1100.731609][ T7038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.750185][ T7038] usb 3-1: config 0 descriptor?? [ 1100.916374][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a668000: rx timeout, send abort [ 1101.424679][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a668000: abort rx timeout. Force session deactivation [ 1102.006223][T19358] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1102.023604][T19357] tty tty22: ldisc open failed (-12), clearing slot 21 [ 1102.136266][ T5954] usb 1-1: New USB device found, idVendor=2040, idProduct=b767, bcdDevice=a8.6d [ 1102.167158][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.204417][ T5954] usb 1-1: can't set config #2, error -71 [ 1102.227117][ T5919] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1102.235029][ T5954] usb 1-1: USB disconnect, device number 34 [ 1102.286235][T19371] FAULT_INJECTION: forcing a failure. [ 1102.286235][T19371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.306363][T19371] CPU: 0 UID: 0 PID: 19371 Comm: syz.1.4568 Not tainted syzkaller #0 PREEMPT(full) [ 1102.306394][T19371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1102.306406][T19371] Call Trace: [ 1102.306415][T19371] [ 1102.306424][T19371] dump_stack_lvl+0x189/0x250 [ 1102.306468][T19371] ? __pfx____ratelimit+0x10/0x10 [ 1102.306494][T19371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1102.306522][T19371] ? __pfx__printk+0x10/0x10 [ 1102.306550][T19371] ? __might_fault+0xb0/0x130 [ 1102.306581][T19371] should_fail_ex+0x414/0x560 [ 1102.306607][T19371] _copy_from_user+0x2d/0xb0 [ 1102.306635][T19371] do_fb_ioctl+0x329/0x750 [ 1102.306666][T19371] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1102.306733][T19371] ? __fget_files+0x2a/0x420 [ 1102.306762][T19371] ? __fget_files+0x3a0/0x420 [ 1102.306784][T19371] ? __fget_files+0x2a/0x420 [ 1102.306811][T19371] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1102.306839][T19371] ? __pfx_fb_ioctl+0x10/0x10 [ 1102.306865][T19371] __se_sys_ioctl+0xfc/0x170 [ 1102.306886][T19371] do_syscall_64+0xfa/0xfa0 [ 1102.306909][T19371] ? lockdep_hardirqs_on+0x9c/0x150 [ 1102.306931][T19371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.306948][T19371] ? clear_bhb_loop+0x60/0xb0 [ 1102.306970][T19371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.306987][T19371] RIP: 0033:0x7fe181b8ebe9 [ 1102.307005][T19371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.307031][T19371] RSP: 002b:00007fe182aef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.307051][T19371] RAX: ffffffffffffffda RBX: 00007fe181dc5fa0 RCX: 00007fe181b8ebe9 [ 1102.307065][T19371] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 1102.307077][T19371] RBP: 00007fe182aef090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.307089][T19371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.307100][T19371] R13: 00007fe181dc6038 R14: 00007fe181dc5fa0 R15: 00007ffe30a66c78 [ 1102.307133][T19371] [ 1102.549174][T19374] syzkaller1: entered promiscuous mode [ 1102.559192][T19374] syzkaller1: entered allmulticast mode [ 1102.847116][ T5919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1102.904883][ T5919] usb 4-1: config 160 has an invalid interface number: 19 but max is 0 [ 1102.933821][ T5919] usb 4-1: config 160 has no interface number 0 [ 1102.968444][ T5919] usb 4-1: config 160 interface 19 has no altsetting 0 [ 1103.076636][ T5919] usb 4-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=31.f3 [ 1103.090147][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.098181][ T5919] usb 4-1: Product: 棻ꚴ錶愵阪铚ꙴ萞⾆㊽띻鷩ई቞峀樗醿〤떵୿ნ [ 1103.133116][ T5919] usb 4-1: Manufacturer: ъ [ 1103.137752][ T5919] usb 4-1: SerialNumber: 鸦揳府䎸튇ℽ텭ﮢ咽듘ꔐ籔罵ล쬭﹒勞떉쥻鎠便顢ę쁲巹ￃ䞦賆ꣿ㈮ᒻꂟ賊죅⚕࿑럟⅑狋陮䠇뾹뗠甾ᵻ쬗섇℟㺗畖餉㤳螫硩吨뤹ﯸ䷷퐆洚뇝䃗촶㺈젺牎賐ᑸ싺ꪷ毤欉⪁ၞᠡ롗욯㧒 [ 1103.140178][ T5954] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1103.165599][ C1] vkms_vblank_simulate: vblank timer overrun [ 1103.340681][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 1103.355873][ T5954] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1103.377512][ T24] usb 3-1: USB disconnect, device number 103 [ 1103.388191][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.456675][ T5954] usb 1-1: config 0 descriptor?? [ 1103.537315][ T5919] usb 4-1: USB disconnect, device number 92 [ 1103.704640][ T5954] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1103.724204][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1103.754546][ T5954] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1103.776829][ T5954] usb 1-1: media controller created [ 1103.823032][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1103.909953][T19380] netlink: 'syz.0.4572': attribute type 16 has an invalid length. [ 1103.934535][T19380] netlink: 'syz.0.4572': attribute type 2 has an invalid length. [ 1103.954938][T19380] netlink: 'syz.0.4572': attribute type 2 has an invalid length. [ 1103.977345][T19380] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.4572'. [ 1104.184293][T19390] binder: 19389:19390 ioctl c0306201 200000000080 returned -14 [ 1104.240173][ T24] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1104.336603][ T5954] az6027: usb out operation failed. (-71) [ 1104.364037][ T5954] az6027: usb out operation failed. (-71) [ 1104.383874][ T5954] stb0899_attach: Driver disabled by Kconfig [ 1104.400628][ T5954] az6027: no front-end attached [ 1104.400628][ T5954] [ 1104.420180][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 1104.427376][ T5954] az6027: usb out operation failed. (-71) [ 1104.447130][ T24] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1104.468569][ T5954] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1104.485287][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.504994][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input95 [ 1104.532108][ T24] usb 3-1: Product: syz [ 1104.536341][ T24] usb 3-1: Manufacturer: syz [ 1104.565896][ T5954] dvb-usb: schedule remote query interval to 400 msecs. [ 1104.580374][ T24] usb 3-1: SerialNumber: syz [ 1104.596583][ T5954] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1104.608421][ T24] usb 3-1: config 0 descriptor?? [ 1104.626088][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 1104.655585][ T5954] usb 1-1: USB disconnect, device number 35 [ 1104.752722][ T5954] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1105.030172][ T981] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1105.140152][ T5954] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1105.185791][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 1105.192666][ T981] usb 4-1: config 1 has an invalid interface number: 255 but max is 6 [ 1105.201092][ T981] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1105.210107][ T981] usb 4-1: config 1 has no interface number 0 [ 1105.216303][ T981] usb 4-1: config 1 interface 255 has no altsetting 0 [ 1105.226205][ T981] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1105.235559][ T981] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1105.245891][ T24] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input96 [ 1105.254242][ T981] usb 4-1: Product: syz [ 1105.258423][ T981] usb 4-1: Manufacturer: syz [ 1105.263754][ T981] usb 4-1: SerialNumber: syz [ 1105.305248][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.325554][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807eabe800: rx timeout, send abort [ 1105.330289][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.334030][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807eabd000: rx timeout, send abort [ 1105.351492][ T5954] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1105.352264][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807eabe800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1105.361534][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.375355][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807eabd000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1105.431613][ T5954] usb 1-1: config 0 descriptor?? [ 1105.486520][ T981] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1105.495491][ T24] usb 3-1: USB disconnect, device number 104 [ 1105.514893][ T981] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1105.535628][ T981] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1105.560859][ T981] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1105.706612][ T981] visor 4-1:1.255: Handspring Visor / Palm OS converter detected [ 1105.722302][ T981] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB2 [ 1105.736869][ T981] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB3 [ 1105.869779][ T5954] pyra 0003:1E7D:2CF6.0064: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 1105.914822][ T10] usb 4-1: USB disconnect, device number 93 [ 1105.944530][ T10] visor ttyUSB2: Handspring Visor / Palm OS converter now disconnected from ttyUSB2 [ 1105.990464][ T10] visor ttyUSB3: Handspring Visor / Palm OS converter now disconnected from ttyUSB3 [ 1106.002029][T19412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.021499][ T10] visor 4-1:1.255: device disconnected [ 1106.031483][T19412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.136729][T19414] FAULT_INJECTION: forcing a failure. [ 1106.136729][T19414] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.136808][T19414] CPU: 0 UID: 0 PID: 19414 Comm: syz.2.4582 Not tainted syzkaller #0 PREEMPT(full) [ 1106.136829][T19414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1106.136841][T19414] Call Trace: [ 1106.136848][T19414] [ 1106.136853][T19414] dump_stack_lvl+0x189/0x250 [ 1106.136879][T19414] ? __pfx____ratelimit+0x10/0x10 [ 1106.136904][T19414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1106.136932][T19414] ? __pfx__printk+0x10/0x10 [ 1106.136965][T19414] ? __pfx___might_resched+0x10/0x10 [ 1106.136986][T19414] ? fs_reclaim_acquire+0x7d/0x100 [ 1106.137015][T19414] should_fail_ex+0x414/0x560 [ 1106.137043][T19414] should_failslab+0xa8/0x100 [ 1106.137067][T19414] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1106.137088][T19414] ? drm_atomic_state_alloc+0xa9/0x100 [ 1106.137122][T19414] drm_atomic_state_alloc+0xa9/0x100 [ 1106.137149][T19414] drm_client_modeset_commit_atomic+0xe2/0x760 [ 1106.137168][T19414] ? trace_contention_end+0x39/0x120 [ 1106.137185][T19414] ? trace_contention_end+0x39/0x120 [ 1106.137201][T19414] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1106.137250][T19414] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1106.137291][T19414] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 1106.137318][T19414] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 1106.137342][T19414] fb_pan_display+0x39b/0x680 [ 1106.137358][T19414] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 1106.137383][T19414] bit_update_start+0x4d/0x1e0 [ 1106.137412][T19414] fbcon_modechanged+0xbf3/0x1330 [ 1106.137458][T19414] do_fb_ioctl+0x6fd/0x750 [ 1106.137481][T19414] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1106.137528][T19414] ? __fget_files+0x2a/0x420 [ 1106.137559][T19414] ? __fget_files+0x3a0/0x420 [ 1106.137580][T19414] ? __fget_files+0x2a/0x420 [ 1106.137608][T19414] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1106.137631][T19414] ? __pfx_fb_ioctl+0x10/0x10 [ 1106.137647][T19414] __se_sys_ioctl+0xfc/0x170 [ 1106.137661][T19414] do_syscall_64+0xfa/0xfa0 [ 1106.137677][T19414] ? lockdep_hardirqs_on+0x9c/0x150 [ 1106.137700][T19414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.137718][T19414] ? clear_bhb_loop+0x60/0xb0 [ 1106.137742][T19414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.137759][T19414] RIP: 0033:0x7f7e7bf8ebe9 [ 1106.137777][T19414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1106.137789][T19414] RSP: 002b:00007f7e7cd49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1106.137804][T19414] RAX: ffffffffffffffda RBX: 00007f7e7c1c5fa0 RCX: 00007f7e7bf8ebe9 [ 1106.137812][T19414] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 1106.137820][T19414] RBP: 00007f7e7cd49090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.137827][T19414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.137834][T19414] R13: 00007f7e7c1c6038 R14: 00007f7e7c1c5fa0 R15: 00007ffc7ea54478 [ 1106.137870][T19414] [ 1106.260855][ T5954] pyra 0003:1E7D:2CF6.0064: couldn't init struct pyra_device [ 1106.466956][ T5954] pyra 0003:1E7D:2CF6.0064: couldn't install mouse [ 1106.477478][ T5954] pyra 0003:1E7D:2CF6.0064: probe with driver pyra failed with error -71 [ 1106.492430][ T5954] usb 1-1: USB disconnect, device number 36 [ 1106.800189][ T981] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1106.960545][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 1106.970605][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.000315][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.030362][ T981] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1107.073108][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.114930][ T981] usb 4-1: config 0 descriptor?? [ 1107.478040][T19441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.516730][T19441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.598148][ T981] usbhid 4-1:0.0: can't add hid device: -71 [ 1107.613635][ T981] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1107.640290][ T981] usb 4-1: USB disconnect, device number 94 [ 1108.188921][T19446] FAULT_INJECTION: forcing a failure. [ 1108.188921][T19446] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.188959][T19446] CPU: 1 UID: 0 PID: 19446 Comm: syz.3.4593 Not tainted syzkaller #0 PREEMPT(full) [ 1108.188981][T19446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1108.188994][T19446] Call Trace: [ 1108.189002][T19446] [ 1108.189012][T19446] dump_stack_lvl+0x189/0x250 [ 1108.189046][T19446] ? __pfx____ratelimit+0x10/0x10 [ 1108.189073][T19446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1108.189103][T19446] ? __pfx__printk+0x10/0x10 [ 1108.189140][T19446] ? __pfx___might_resched+0x10/0x10 [ 1108.189170][T19446] should_fail_ex+0x414/0x560 [ 1108.189200][T19446] should_failslab+0xa8/0x100 [ 1108.189226][T19446] __kmalloc_noprof+0xcb/0x7f0 [ 1108.189245][T19446] ? __kasan_kmalloc+0x93/0xb0 [ 1108.189263][T19446] ? drm_atomic_state_init+0x9c/0x310 [ 1108.189298][T19446] drm_atomic_state_init+0x9c/0x310 [ 1108.189330][T19446] drm_atomic_state_alloc+0xbc/0x100 [ 1108.189360][T19446] drm_client_modeset_commit_atomic+0xe2/0x760 [ 1108.189430][T19446] ? trace_contention_end+0x39/0x120 [ 1108.189462][T19446] ? trace_contention_end+0x39/0x120 [ 1108.189492][T19446] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1108.189548][T19446] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1108.189593][T19446] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 1108.189629][T19446] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 1108.189671][T19446] fb_pan_display+0x39b/0x680 [ 1108.189698][T19446] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 1108.189728][T19446] bit_update_start+0x4d/0x1e0 [ 1108.189759][T19446] fbcon_modechanged+0xbf3/0x1330 [ 1108.189800][T19446] do_fb_ioctl+0x6fd/0x750 [ 1108.189834][T19446] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1108.189919][T19446] ? __fget_files+0x2a/0x420 [ 1108.189951][T19446] ? __fget_files+0x3a0/0x420 [ 1108.189980][T19446] ? __fget_files+0x2a/0x420 [ 1108.190009][T19446] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1108.190037][T19446] ? __pfx_fb_ioctl+0x10/0x10 [ 1108.190066][T19446] __se_sys_ioctl+0xfc/0x170 [ 1108.190091][T19446] do_syscall_64+0xfa/0xfa0 [ 1108.190116][T19446] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.190142][T19446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.190162][T19446] ? clear_bhb_loop+0x60/0xb0 [ 1108.190188][T19446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.190207][T19446] RIP: 0033:0x7fa09898ebe9 [ 1108.190226][T19446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.190243][T19446] RSP: 002b:00007fa099803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1108.190265][T19446] RAX: ffffffffffffffda RBX: 00007fa098bc5fa0 RCX: 00007fa09898ebe9 [ 1108.190280][T19446] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 1108.190293][T19446] RBP: 00007fa099803090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.190306][T19446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.190317][T19446] R13: 00007fa098bc6038 R14: 00007fa098bc5fa0 R15: 00007ffe8277df38 [ 1108.190358][T19446] [ 1108.409885][T19448] input: syz1 as /devices/virtual/input/input97 [ 1108.920981][ T981] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 1109.073944][ T981] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1109.096683][ T981] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1109.117262][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.127577][ T981] usb 1-1: config 0 descriptor?? [ 1109.389452][T19460] Invalid/unusable pipe [ 1109.715751][T19474] FAULT_INJECTION: forcing a failure. [ 1109.715751][T19474] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.715788][T19474] CPU: 0 UID: 0 PID: 19474 Comm: syz.2.4604 Not tainted syzkaller #0 PREEMPT(full) [ 1109.715810][T19474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1109.715822][T19474] Call Trace: [ 1109.715830][T19474] [ 1109.715840][T19474] dump_stack_lvl+0x189/0x250 [ 1109.715874][T19474] ? __pfx____ratelimit+0x10/0x10 [ 1109.715900][T19474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1109.715930][T19474] ? __pfx__printk+0x10/0x10 [ 1109.715967][T19474] ? __pfx___might_resched+0x10/0x10 [ 1109.715996][T19474] should_fail_ex+0x414/0x560 [ 1109.716026][T19474] should_failslab+0xa8/0x100 [ 1109.716053][T19474] __kmalloc_noprof+0xcb/0x7f0 [ 1109.716071][T19474] ? __kasan_kmalloc+0x93/0xb0 [ 1109.716090][T19474] ? drm_atomic_state_init+0x106/0x310 [ 1109.716126][T19474] drm_atomic_state_init+0x106/0x310 [ 1109.716157][T19474] drm_atomic_state_alloc+0xbc/0x100 [ 1109.716185][T19474] drm_client_modeset_commit_atomic+0xe2/0x760 [ 1109.716215][T19474] ? trace_contention_end+0x39/0x120 [ 1109.716244][T19474] ? trace_contention_end+0x39/0x120 [ 1109.716272][T19474] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1109.716326][T19474] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1109.716367][T19474] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 1109.716399][T19474] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 1109.716442][T19474] fb_pan_display+0x39b/0x680 [ 1109.716469][T19474] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 1109.716500][T19474] bit_update_start+0x4d/0x1e0 [ 1109.716529][T19474] fbcon_modechanged+0xbf3/0x1330 [ 1109.716569][T19474] do_fb_ioctl+0x6fd/0x750 [ 1109.716601][T19474] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1109.716698][T19474] ? __fget_files+0x2a/0x420 [ 1109.716731][T19474] ? __fget_files+0x3a0/0x420 [ 1109.716754][T19474] ? __fget_files+0x2a/0x420 [ 1109.716784][T19474] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1109.716812][T19474] ? __pfx_fb_ioctl+0x10/0x10 [ 1109.716841][T19474] __se_sys_ioctl+0xfc/0x170 [ 1109.716865][T19474] do_syscall_64+0xfa/0xfa0 [ 1109.716889][T19474] ? lockdep_hardirqs_on+0x9c/0x150 [ 1109.716913][T19474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.716931][T19474] ? clear_bhb_loop+0x60/0xb0 [ 1109.716956][T19474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.716974][T19474] RIP: 0033:0x7f7e7bf8ebe9 [ 1109.716992][T19474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1109.717007][T19474] RSP: 002b:00007f7e7cd49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.717030][T19474] RAX: ffffffffffffffda RBX: 00007f7e7c1c5fa0 RCX: 00007f7e7bf8ebe9 [ 1109.717045][T19474] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 1109.717058][T19474] RBP: 00007f7e7cd49090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.717071][T19474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.717082][T19474] R13: 00007f7e7c1c6038 R14: 00007f7e7c1c5fa0 R15: 00007ffc7ea54478 [ 1109.717117][T19474] [ 1110.242916][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068dfd800: rx timeout, send abort [ 1110.756791][ C0] vcan0: j1939_tp_rxtimer: 0xffff888068dfd800: abort rx timeout. Force session deactivation [ 1111.180732][ T981] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1111.360191][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 1111.373937][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.385507][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.395423][ T981] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1111.404622][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.415950][ T981] usb 3-1: config 0 descriptor?? [ 1111.728961][ T5954] usb 1-1: USB disconnect, device number 37 [ 1111.895516][ T981] usbhid 3-1:0.0: can't add hid device: -71 [ 1111.915311][ T981] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1111.938563][ T981] usb 3-1: USB disconnect, device number 105 [ 1112.194200][ T5919] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1112.356403][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 1112.364081][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.374678][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1112.385763][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1112.395640][ T5919] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1112.405424][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1112.430590][ T5919] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1112.439699][ T5919] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1112.465785][ T5919] usb 1-1: Manufacturer: syz [ 1112.492299][ T5919] usb 1-1: config 0 descriptor?? [ 1112.793563][ T5919] rc_core: IR keymap rc-hauppauge not found [ 1112.799552][ T5919] Registered IR keymap rc-empty [ 1112.810278][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1112.835563][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1112.863809][ T5919] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1112.878345][ T5919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input99 [ 1112.894608][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1112.913106][T19496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.924519][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1112.937611][T19496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.961570][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1112.982173][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1113.007208][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1113.043449][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1113.070389][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1113.091286][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1113.123144][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1113.160682][ T5919] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1113.242889][ T5919] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1113.305797][ T5919] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1113.502520][ T5919] usb 1-1: USB disconnect, device number 38 [ 1113.751415][T19517] FAULT_INJECTION: forcing a failure. [ 1113.751415][T19517] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.751453][T19517] CPU: 1 UID: 0 PID: 19517 Comm: syz.1.4615 Not tainted syzkaller #0 PREEMPT(full) [ 1113.751476][T19517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1113.751488][T19517] Call Trace: [ 1113.751496][T19517] [ 1113.751506][T19517] dump_stack_lvl+0x189/0x250 [ 1113.751542][T19517] ? __pfx____ratelimit+0x10/0x10 [ 1113.751568][T19517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1113.751598][T19517] ? __pfx__printk+0x10/0x10 [ 1113.751629][T19517] ? __pfx___might_resched+0x10/0x10 [ 1113.751653][T19517] ? fs_reclaim_acquire+0x7d/0x100 [ 1113.751682][T19517] should_fail_ex+0x414/0x560 [ 1113.751713][T19517] should_failslab+0xa8/0x100 [ 1113.751739][T19517] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1113.751761][T19517] ? vkms_plane_duplicate_state+0x51/0x110 [ 1113.751797][T19517] vkms_plane_duplicate_state+0x51/0x110 [ 1113.751825][T19517] drm_atomic_get_plane_state+0x25a/0x5a0 [ 1113.751864][T19517] drm_client_modeset_commit_atomic+0x1e7/0x760 [ 1113.751912][T19517] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1113.751969][T19517] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1113.752014][T19517] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 1113.752050][T19517] drm_fb_helper_pan_display+0x3e7/0xbd0 [ 1113.752094][T19517] fb_pan_display+0x39b/0x680 [ 1113.752120][T19517] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 1113.752151][T19517] bit_update_start+0x4d/0x1e0 [ 1113.752183][T19517] fbcon_modechanged+0xbf3/0x1330 [ 1113.752224][T19517] do_fb_ioctl+0x6fd/0x750 [ 1113.752258][T19517] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1113.752344][T19517] ? __fget_files+0x2a/0x420 [ 1113.752376][T19517] ? __fget_files+0x3a0/0x420 [ 1113.752408][T19517] ? __fget_files+0x2a/0x420 [ 1113.752439][T19517] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1113.752468][T19517] ? __pfx_fb_ioctl+0x10/0x10 [ 1113.752497][T19517] __se_sys_ioctl+0xfc/0x170 [ 1113.752523][T19517] do_syscall_64+0xfa/0xfa0 [ 1113.752548][T19517] ? lockdep_hardirqs_on+0x9c/0x150 [ 1113.752574][T19517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.752593][T19517] ? clear_bhb_loop+0x60/0xb0 [ 1113.752620][T19517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.752638][T19517] RIP: 0033:0x7fe181b8ebe9 [ 1113.752657][T19517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1113.752673][T19517] RSP: 002b:00007fe182aef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1113.752696][T19517] RAX: ffffffffffffffda RBX: 00007fe181dc5fa0 RCX: 00007fe181b8ebe9 [ 1113.752710][T19517] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 1113.752723][T19517] RBP: 00007fe182aef090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.752736][T19517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.752748][T19517] R13: 00007fe181dc6038 R14: 00007fe181dc5fa0 R15: 00007ffe30a66c78 [ 1113.752788][T19517] [ 1113.860174][ T5954] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1114.071861][ T5954] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1114.071897][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.075212][ T5954] usb 4-1: config 0 descriptor?? [ 1114.386311][ T5954] usb 4-1: string descriptor 0 read error: -71 [ 1114.418726][ T5954] usb 4-1: USB disconnect, device number 95 [ 1114.891130][ T5954] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 1115.062480][ T5954] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1115.085374][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.126906][ T5954] usb 4-1: config 0 descriptor?? [ 1115.369127][ T5954] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1115.395577][ T5954] asix 4-1:0.0: probe with driver asix failed with error -32 [ 1115.689391][T19550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.718912][T19550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.779943][T19553] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4626'. [ 1115.796532][T19553] xt_socket: unknown flags 0xd0 [ 1116.145344][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.152491][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.453103][ T5954] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1116.598503][T19586] netlink: 'syz.1.4635': attribute type 8 has an invalid length. [ 1116.617810][ T5954] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1116.641134][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.650619][ T5954] usb 3-1: Product: syz [ 1116.654903][ T5954] usb 3-1: Manufacturer: syz [ 1116.659605][ T5954] usb 3-1: SerialNumber: syz [ 1116.692834][ T5954] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1116.714358][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1116.883053][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027c2d400: rx timeout, send abort [ 1117.344076][ T5954] usb 3-1: USB disconnect, device number 106 [ 1117.399666][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027c2d400: abort rx timeout. Force session deactivation [ 1117.677241][ T7038] usb 4-1: USB disconnect, device number 96 [ 1117.829722][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1117.882102][ T24] ath9k_htc: Failed to initialize the device [ 1117.909769][ T5954] usb 3-1: ath9k_htc: USB layer deinitialized [ 1118.110300][ T7038] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1118.207075][T19617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1118.280220][ T7038] usb 4-1: Using ep0 maxpacket: 8 [ 1118.297083][ T7038] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1118.321759][ T7038] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1118.345844][ T7038] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1118.376755][ T7038] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.414418][ T7038] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1118.461004][ T7038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.703921][ T7038] usb 4-1: GET_CAPABILITIES returned 0 [ 1118.718315][ T7038] usbtmc 4-1:16.0: can't read capabilities [ 1118.905171][T19609] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 1118.980910][T19609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.036798][T19609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.097713][ T7038] usb 4-1: USB disconnect, device number 97 [ 1119.356457][T19633] syzkaller1: entered promiscuous mode [ 1119.363080][T19633] syzkaller1: entered allmulticast mode [ 1119.377777][T19633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4649'. [ 1119.570185][ T24] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 1119.599245][T19638] dvmrp1: entered allmulticast mode [ 1119.695405][T19640] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 1119.735396][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1119.747939][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.773262][ T24] usb 3-1: config 0 descriptor?? [ 1119.843330][T19646] netlink: 'syz.1.4654': attribute type 1 has an invalid length. [ 1119.850180][ T7038] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1119.856399][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4654'. [ 1119.878727][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032bd1000: rx timeout, send abort [ 1119.973461][ T30] audit: type=1326 audit(1119.924:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19647 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe181b8ebe9 code=0x7ffc0000 [ 1120.022391][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1120.032674][ T30] audit: type=1326 audit(1119.924:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19647 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe181b8ebe9 code=0x7ffc0000 [ 1120.032736][ T30] audit: type=1326 audit(1119.924:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19647 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe181b8ebe9 code=0x7ffc0000 [ 1120.032785][ T30] audit: type=1326 audit(1119.924:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19647 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe181b8ebe9 code=0x7ffc0000 [ 1120.032833][ T30] audit: type=1326 audit(1119.924:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19647 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe181b8ebe9 code=0x7ffc0000 [ 1120.032881][ T30] audit: type=1326 audit(1119.924:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19647 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe181b8ebe9 code=0x7ffc0000 [ 1120.032931][ T30] audit: type=1326 audit(1119.924:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19647 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe181b8ebe9 code=0x7ffc0000 [ 1120.032977][ T30] audit: type=1326 audit(1119.924:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19647 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe181b8ebe9 code=0x7ffc0000 [ 1120.055012][ T7038] usb 1-1: Using ep0 maxpacket: 8 [ 1120.062353][ T7038] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1120.099044][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.165593][ C1] vkms_vblank_simulate: vblank timer overrun [ 1120.213826][ T24] asix 3-1:0.0: probe with driver asix failed with error -32 [ 1120.238109][ T30] audit: type=1326 audit(1119.924:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19647 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe181b8ebe9 code=0x7ffc0000 [ 1120.266727][ T30] audit: type=1326 audit(1119.924:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19647 comm="syz.1.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe181b8ebe9 code=0x7ffc0000 [ 1120.289438][ T7038] usb 1-1: config 17 has an invalid interface number: 8 but max is -1 [ 1120.297836][ T7038] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 0 [ 1120.307172][ T7038] usb 1-1: config 17 has no interface number 0 [ 1120.314073][ T7038] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 95, setting to 64 [ 1120.326062][ T7038] usb 1-1: config 17 interface 8 has no altsetting 0 [ 1120.347707][ T7038] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1120.357021][ T7038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.366371][ T7038] usb 1-1: Product: syz [ 1120.386735][ T7038] usb 1-1: Manufacturer: syz [ 1120.387092][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032bd1000: abort rx timeout. Force session deactivation [ 1120.392055][ T7038] usb 1-1: SerialNumber: syz [ 1120.665371][T19658] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4658'. [ 1120.717432][ T7038] usb 1-1: selecting invalid altsetting 0 [ 1120.787369][ T7038] usb 1-1: USB disconnect, device number 39 [ 1121.150091][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1121.322065][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1121.330244][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1121.348788][ T10] usb 4-1: config 0 has no interface number 0 [ 1121.363556][ T10] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1121.392906][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1121.409524][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.439352][ T10] usb 4-1: Product: syz [ 1121.456054][ T10] usb 4-1: Manufacturer: syz [ 1121.470425][ T10] usb 4-1: SerialNumber: syz [ 1121.506508][ T10] usb 4-1: config 0 descriptor?? [ 1121.537533][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1121.566942][ T10] em28xx 4-1:0.132: Video interface 132 found: [ 1121.930284][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1122.351267][T19666] netlink: 'syz.3.4660': attribute type 2 has an invalid length. [ 1122.466160][ T5919] usb 3-1: USB disconnect, device number 107 [ 1122.509728][ T10] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1122.585435][ T10] em28xx 4-1:0.132: board has no eeprom [ 1123.592185][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1123.730226][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1123.738293][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 1123.746153][ T5919] em28xx 4-1:0.132: Registering V4L2 extension [ 1123.752941][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1123.775972][ T24] usb 1-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=79.ba [ 1123.805925][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.828920][ T24] usb 1-1: Product: syz [ 1123.841267][ T24] usb 1-1: Manufacturer: syz [ 1123.846477][ T24] usb 1-1: SerialNumber: syz [ 1123.871609][ T24] usb 1-1: config 0 descriptor?? [ 1123.878375][ T5919] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1123.896000][ T5919] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1123.918948][ T981] usb 4-1: USB disconnect, device number 98 [ 1123.925757][ T5919] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1123.951099][ T981] em28xx 4-1:0.132: Disconnecting em28xx [ 1124.026478][T19701] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1124.036826][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805950ec00: rx timeout, send abort [ 1124.112813][T19697] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1124.123391][ T24] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 1124.138350][ T5919] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1124.171754][ T5919] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1124.189179][ T5919] em28xx 4-1:0.132: No AC97 audio processor [ 1124.204784][ T5919] usb 4-1: Decoder not found [ 1124.206663][T19710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.209525][ T5919] em28xx 4-1:0.132: failed to create media graph [ 1124.228793][ T5919] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1124.236874][T19710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.254582][ T5919] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1124.267171][ T981] em28xx 4-1:0.132: Closing input extension [ 1124.278873][T19710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.308574][ T981] em28xx 4-1:0.132: Freeing device [ 1124.312555][T19710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.337461][ T5919] usb 1-1: USB disconnect, device number 40 [ 1124.357712][T19710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.373852][T19710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.422221][T19716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.431063][T19717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.433769][T19716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.441740][T19717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.460617][ T24] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 1124.545247][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805950ec00: abort rx timeout. Force session deactivation [ 1124.611796][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1124.622851][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.634668][ T24] usb 3-1: config 0 descriptor?? [ 1124.640491][ T981] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1124.790195][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 1124.797052][ T981] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1124.805539][ T981] usb 4-1: config 0 has no interface number 0 [ 1124.811900][ T981] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 1124.824835][ T981] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1124.834025][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.842272][ T981] usb 4-1: Product: syz [ 1124.846508][ T981] usb 4-1: Manufacturer: syz [ 1124.851244][ T981] usb 4-1: SerialNumber: syz [ 1124.865349][ T981] usb 4-1: config 0 descriptor?? [ 1124.871590][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1124.882900][ T24] asix 3-1:0.0: probe with driver asix failed with error -32 [ 1124.892731][ T981] smsc95xx v2.0.0 [ 1124.896443][ T981] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1124.911823][ T981] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 1125.146101][T19728] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1125.191535][ T5919] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1125.211331][ T981] usb 4-1: USB disconnect, device number 99 [ 1125.259291][T19733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4680'. [ 1125.271052][T19733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4680'. [ 1125.285533][T19734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4680'. [ 1125.294748][T19734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4680'. [ 1125.363036][ T5919] usb 1-1: config index 0 descriptor too short (expected 52, got 45) [ 1125.371352][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.381979][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1125.393077][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1125.406124][ T5919] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1125.415318][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.425700][ T5919] usb 1-1: config 0 descriptor?? [ 1125.431680][T19719] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1125.933069][ T5919] hkems 0003:2006:0118.0065: unknown global tag 0xe [ 1125.939848][ T5919] hkems 0003:2006:0118.0065: item 0 1 1 14 parsing failed [ 1125.974310][ T5919] hkems 0003:2006:0118.0065: parse failed [ 1125.995045][ T5919] hkems 0003:2006:0118.0065: probe with driver hkems failed with error -22 [ 1126.253527][ T981] usb 1-1: USB disconnect, device number 41 [ 1126.770956][T19751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.809758][T19751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.283679][ T981] usb 3-1: USB disconnect, device number 108 [ 1127.933064][ T4448] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 1127.933529][T19787] overlayfs: missing 'lowerdir' [ 1128.028790][T19791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.038408][T19791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.052153][T19791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.061578][T19791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.073968][T19791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.083567][T19791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.130248][ T10] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 1128.292410][ T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1128.295491][T19791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.303687][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.325689][ T10] usb 1-1: config 0 descriptor?? [ 1128.335794][T19791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.405205][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e4bf400: rx timeout, send abort [ 1128.413902][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e4bf400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1128.428388][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e4bdc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1128.540275][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1128.558771][ T10] asix 1-1:0.0: probe with driver asix failed with error -32 [ 1128.970254][ T24] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1128.981934][T19811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.991460][T19811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.122033][ T24] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1129.130456][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1129.142192][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1129.150127][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1129.153495][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1129.172705][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1129.185887][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1129.195019][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.205453][ T24] usb 3-1: config 0 descriptor?? [ 1129.211597][T19800] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1129.310320][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1129.318279][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.328675][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1129.342668][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1129.352239][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.360544][ T10] usb 4-1: Product: syz [ 1129.364873][ T10] usb 4-1: Manufacturer: syz [ 1129.369519][ T10] usb 4-1: SerialNumber: syz [ 1129.588404][T19813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.588888][T19814] netlink: 'syz.3.4705': attribute type 16 has an invalid length. [ 1129.604141][T19813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.615300][T19814] netlink: 61874 bytes leftover after parsing attributes in process `syz.3.4705'. [ 1129.632534][ T24] plantronics 0003:047F:FFFF.0066: reserved main item tag 0xd [ 1129.658531][ T10] usb 4-1: cannot find UAC_HEADER [ 1129.677542][ T24] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1129.706596][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1129.743840][ T10] usb 4-1: USB disconnect, device number 100 [ 1129.799728][T15219] udevd[15219]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1129.903381][ T5919] usb 3-1: USB disconnect, device number 109 [ 1130.210174][ T10] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1130.364327][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1130.373703][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.381768][ T10] usb 4-1: Product: syz [ 1130.385970][ T10] usb 4-1: Manufacturer: syz [ 1130.390712][ T10] usb 4-1: SerialNumber: syz [ 1130.398764][ T10] usb 4-1: config 0 descriptor?? [ 1130.638607][ T10] usb 4-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1130.668734][ T10] f81604 4-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 1130.713560][ T10] f81604 4-1:0.0: probe with driver f81604 failed with error -121 [ 1130.846229][ T981] usb 4-1: USB disconnect, device number 101 [ 1130.978701][ T24] usb 1-1: USB disconnect, device number 42 [ 1131.530687][ T981] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1131.712478][ T981] usb 1-1: Using ep0 maxpacket: 8 [ 1131.729809][ T981] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1131.753432][ T981] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 1131.767291][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.793673][ T981] usb 1-1: Product: syz [ 1131.805041][ T981] usb 1-1: Manufacturer: syz [ 1131.817468][ T981] usb 1-1: SerialNumber: syz [ 1132.207726][ T981] usb 1-1: USB disconnect, device number 43 [ 1132.658934][T19844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.682170][T19844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.709766][T19844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.741051][T19844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.918573][T19852] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1132.927849][T19852] overlayfs: missing 'lowerdir' [ 1133.121535][ T981] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 1133.284699][ T981] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1133.302583][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.321480][ T981] usb 4-1: config 0 descriptor?? [ 1133.550122][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1133.550812][ T981] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1133.574543][ T981] asix 4-1:0.0: probe with driver asix failed with error -32 [ 1133.674682][T19879] tmpfs: Bad value for 'mpol' [ 1133.690751][ T10] usb 1-1: device descriptor read/64, error -71 [ 1133.696922][T19879] syzkaller1: entered promiscuous mode [ 1133.704392][T19879] syzkaller1: entered allmulticast mode [ 1133.871950][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806dd39c00: rx timeout, send abort [ 1133.923739][T19889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.934032][T19889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.950253][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1134.090087][ T10] usb 1-1: device descriptor read/64, error -71 [ 1134.200439][ T10] usb usb1-port1: attempt power cycle [ 1134.380372][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806dd39c00: abort rx timeout. Force session deactivation [ 1134.560355][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1134.603520][ T10] usb 1-1: device descriptor read/8, error -71 [ 1134.846486][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1134.880873][ T10] usb 1-1: device descriptor read/8, error -71 [ 1134.971777][T19899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.989094][T19899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.007032][ T10] usb usb1-port1: unable to enumerate USB device [ 1135.039908][T19898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.057126][T19898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.659353][T19904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.677991][T19904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.948507][ T10] usb 4-1: USB disconnect, device number 102 [ 1136.398635][T19913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.420831][T19913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.472363][T19913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.509829][T19913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.928773][T19922] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1136.938367][T19922] overlayfs: failed to set xattr on upper [ 1136.944398][T19922] overlayfs: ...falling back to index=off. [ 1136.953078][T19922] overlayfs: ...falling back to uuid=null. [ 1137.341340][T19935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.355193][T19935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.579686][T19941] batadv_slave_0: entered promiscuous mode [ 1137.611856][T19943] batadv_slave_0: left promiscuous mode [ 1137.647023][T19945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1137.647990][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803195bc00: rx timeout, send abort [ 1137.662418][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880782cac00: rx timeout, send abort [ 1137.671065][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803195bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1137.685555][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880782cac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1137.789713][T19953] netlink: 'syz.3.4755': attribute type 10 has an invalid length. [ 1137.846959][T19955] pimreg3: entered allmulticast mode [ 1138.030083][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1138.130093][ T849] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1138.143113][T19963] vivid-000: ================= START STATUS ================= [ 1138.153749][T19963] vivid-000: Enable Output Cropping: true [ 1138.161268][T19963] vivid-000: Enable Output Composing: true [ 1138.167393][T19963] vivid-000: Enable Output Scaler: true [ 1138.174123][T19963] vivid-000: Tx RGB Quantization Range: Automatic [ 1138.181062][T19963] vivid-000: Transmit Mode: HDMI [ 1138.186056][T19963] vivid-000: Hotplug Present: 0x00000000 [ 1138.191910][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1138.198467][T19963] vivid-000: RxSense Present: 0x00000000 [ 1138.206330][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1138.216006][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1138.232274][T19963] vivid-000: EDID Present: 0x00000000 [ 1138.238188][T19963] vivid-000: ================== END STATUS ================== [ 1138.246321][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1138.257955][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1138.280171][ T5919] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1138.288778][ T849] usb 3-1: Using ep0 maxpacket: 32 [ 1138.295626][ T10] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1138.305541][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.316605][ T849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.328175][ T10] usb 1-1: Product: syz [ 1138.333687][ T849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.344706][ T10] usb 1-1: Manufacturer: syz [ 1138.349354][ T10] usb 1-1: SerialNumber: syz [ 1138.354490][ T849] usb 3-1: New USB device found, idVendor=046d, idProduct=c26e, bcdDevice= 0.00 [ 1138.377955][ T10] usb 1-1: config 0 descriptor?? [ 1138.397053][ T849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.408940][T19950] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1138.418527][ T849] usb 3-1: config 0 descriptor?? [ 1138.452882][ T5919] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1138.478366][ T5919] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1138.495962][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1138.505399][ T5919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1138.516904][ T5919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1138.535286][ T5919] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1138.545809][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1138.554151][ T5919] usb 4-1: Product: syz [ 1138.558702][ T5919] usb 4-1: Manufacturer: syz [ 1138.585156][ T5919] cdc_wdm 4-1:1.0: skipping garbage [ 1138.597664][ T5919] cdc_wdm 4-1:1.0: skipping garbage [ 1138.610798][ T5919] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1138.624769][ T5919] cdc_wdm 4-1:1.0: Unknown control protocol [ 1138.716272][T19967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.737180][T19967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.874653][ T849] logitech-hidpp-device 0003:046D:C26E.0067: collection stack underflow [ 1138.893729][ T849] logitech-hidpp-device 0003:046D:C26E.0067: item 0 0 0 12 parsing failed [ 1138.911419][ T849] logitech-hidpp-device 0003:046D:C26E.0067: hidpp_probe:parse failed [ 1138.920654][ T849] logitech-hidpp-device 0003:046D:C26E.0067: probe with driver logitech-hidpp-device failed with error -22 [ 1139.488919][ T849] usb 4-1: USB disconnect, device number 103 [ 1139.950432][ T849] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1140.115881][ T849] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1140.125272][ T849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.133772][ T849] usb 4-1: Product: syz [ 1140.138040][ T849] usb 4-1: Manufacturer: syz [ 1140.142975][ T849] usb 4-1: SerialNumber: syz [ 1140.150124][ T849] usb 4-1: config 0 descriptor?? [ 1140.161722][ T849] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1140.564116][ T849] sonixb 4-1:0.0: Error writing register 01: -71 [ 1140.571222][ T849] sonixb 4-1:0.0: probe with driver sonixb failed with error -71 [ 1140.582683][ T849] usb 4-1: USB disconnect, device number 104 [ 1140.641874][ T10] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1140.657284][ T10] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input102 [ 1140.691297][ C0] powermate: config urb returned -71 [ 1140.697016][ C0] powermate: config urb returned -71 [ 1140.702752][ C0] powermate: config urb returned -71 [ 1140.708906][ C0] powermate: config urb returned -71 [ 1140.722892][ T10] usb 1-1: USB disconnect, device number 48 [ 1140.728941][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1140.909512][ T849] usb 3-1: USB disconnect, device number 110 [ 1141.207971][T19978] netlink: 'syz.3.4764': attribute type 62 has an invalid length. [ 1141.596909][ T849] usb 3-1: new low-speed USB device number 111 using dummy_hcd [ 1141.792370][ T849] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1141.808040][ T849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.860186][ T849] usb 3-1: config 0 descriptor?? [ 1142.090419][ T849] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1142.291119][ T849] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1142.330520][ T849] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1142.346054][ T849] asix 3-1:0.0: probe with driver asix failed with error -32 [ 1142.534264][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1142.534284][ T30] audit: type=1326 audit(1142.484:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.3.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09898ebe9 code=0x7ffc0000 [ 1142.609372][ T30] audit: type=1326 audit(1142.524:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.3.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa09898ebe9 code=0x7ffc0000 [ 1142.636381][ T30] audit: type=1326 audit(1142.534:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.3.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09898ebe9 code=0x7ffc0000 [ 1142.674683][ T30] audit: type=1326 audit(1142.534:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20009 comm="syz.3.4777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09898ebe9 code=0x7ffc0000 [ 1142.706893][T20015] 9pnet_fd: Insufficient options for proto=fd [ 1142.709909][T20016] 9pnet_fd: Insufficient options for proto=fd [ 1143.140340][T20027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.167630][T20027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.875675][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e020000: rx timeout, send abort [ 1144.384006][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e020000: abort rx timeout. Force session deactivation [ 1144.391467][ T10] usb 3-1: USB disconnect, device number 111 [ 1144.873142][ T10] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1145.066782][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.092854][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.103118][ T10] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1145.127601][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.156804][ T10] usb 3-1: config 0 descriptor?? [ 1147.583987][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1147.596528][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1147.642806][ T10] usb 3-1: USB disconnect, device number 112 [ 1148.045046][T20075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.055181][T20075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.130263][ T10] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1148.154090][T20079] netlink: 'syz.3.4798': attribute type 3 has an invalid length. [ 1148.260382][ T10] usb 3-1: device descriptor read/64, error -71 [ 1148.400139][ T5954] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1148.502768][ T10] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1148.562375][ T5954] usb 4-1: config 3 has an invalid interface number: 179 but max is 0 [ 1148.570993][ T5954] usb 4-1: config 3 has no interface number 0 [ 1148.577396][ T5954] usb 4-1: config 3 interface 179 has no altsetting 0 [ 1148.587755][ T5954] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1148.597669][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.606120][ T5954] usb 4-1: Product: syz [ 1148.614151][ T5954] usb 4-1: Manufacturer: syz [ 1148.618907][ T5954] usb 4-1: SerialNumber: syz [ 1148.624973][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880570c9400: rx timeout, send abort [ 1148.642180][ T10] usb 3-1: device descriptor read/64, error -71 [ 1148.750817][ T10] usb usb3-port1: attempt power cycle [ 1148.806081][T20089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.822282][T20089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.849773][ T5954] go7007 4-1:3.179: probe with driver go7007 failed with error -12 [ 1148.861648][ T5954] usb 4-1: USB disconnect, device number 105 [ 1149.100107][ T10] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1149.130769][ T10] usb 3-1: device descriptor read/8, error -71 [ 1149.133353][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880570c9400: abort rx timeout. Force session deactivation [ 1149.373828][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1149.429164][ T10] usb 3-1: device descriptor read/8, error -71 [ 1149.550542][ T10] usb usb3-port1: unable to enumerate USB device [ 1149.574394][T20099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.583732][T20099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.630301][ T5954] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1149.760139][ T5954] usb 1-1: device descriptor read/64, error -71 [ 1149.800129][ T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1149.930278][ T10] usb 4-1: device descriptor read/64, error -71 [ 1150.010205][ T5954] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1150.024554][T20101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.033675][T20101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.037258][T20102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.055527][T20102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.153231][ T5954] usb 1-1: device descriptor read/64, error -71 [ 1150.180275][ T10] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1150.271884][ T5954] usb usb1-port1: attempt power cycle [ 1150.310419][ T10] usb 4-1: device descriptor read/64, error -71 [ 1150.420718][ T10] usb usb4-port1: attempt power cycle [ 1150.611204][ T5954] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1150.643713][ T5954] usb 1-1: device descriptor read/8, error -71 [ 1150.890622][ T5954] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1150.911912][ T5954] usb 1-1: device descriptor read/8, error -71 [ 1151.020566][ T5954] usb usb1-port1: unable to enumerate USB device [ 1151.130225][ T981] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 1151.304054][ T981] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1151.309506][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1151.316923][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.322842][ T981] usb 3-1: config 0 descriptor?? [ 1151.616505][ T981] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1151.843038][ T981] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1151.857710][ T981] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1151.873288][ T981] asix 3-1:0.0: probe with driver asix failed with error -32 [ 1151.891832][ T10] usb 4-1: device descriptor read/8, error -71 [ 1152.427581][ T10] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1152.470732][ T10] usb 4-1: device descriptor read/8, error -71 [ 1152.590549][ T10] usb usb4-port1: unable to enumerate USB device [ 1152.717071][ T30] audit: type=1326 audit(1152.664:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.0.4812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a6f78ebe9 code=0x0 [ 1152.940740][ T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1153.060146][ T981] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1153.102654][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1153.112712][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1153.129801][ T10] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1153.139045][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.147136][ T10] usb 4-1: Product: syz [ 1153.151362][ T10] usb 4-1: Manufacturer: syz [ 1153.155961][ T10] usb 4-1: SerialNumber: syz [ 1153.164765][ T10] usb 4-1: config 0 descriptor?? [ 1153.170645][T20115] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1153.178134][T20115] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1153.201192][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c452400: rx timeout, send abort [ 1153.209615][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807c453c00: rx timeout, send abort [ 1153.212369][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 1153.218209][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c452400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1153.227657][ T981] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1153.237449][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c453c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1153.285570][ T981] usb 1-1: too many endpoints for config 0 interface 0 altsetting 231: 229, using maximum allowed: 30 [ 1153.296959][ T981] usb 1-1: config 0 interface 0 altsetting 231 has 0 endpoint descriptors, different from the interface descriptor's value: 229 [ 1153.316472][ T981] usb 1-1: config 0 interface 0 has no altsetting 1 [ 1153.335117][ T981] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=97.0d [ 1153.346250][ T981] usb 1-1: New USB device strings: Mfr=99, Product=242, SerialNumber=132 [ 1153.356481][ T981] usb 1-1: Product: syz [ 1153.363183][ T981] usb 1-1: Manufacturer: syz [ 1153.367827][ T981] usb 1-1: SerialNumber: syz [ 1153.377503][ T981] usb 1-1: config 0 descriptor?? [ 1153.396554][T20115] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1153.407668][T20115] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1153.415660][ T981] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1153.468813][ T981] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1153.475692][ T981] gspca_stv06xx: st6422 sensor detected [ 1153.486450][T20128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.495645][T20128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.518570][T20128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.527929][T20128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.608647][T20118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.617928][T20118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.800649][ T24] usb 3-1: USB disconnect, device number 117 [ 1153.836020][T20115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.857158][T20115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.220318][ T24] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1154.289726][ T10] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1154.311707][ T10] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, d4:cc:08:02:93:c0 [ 1154.330466][ T10] usb 4-1: USB disconnect, device number 110 [ 1154.339381][ T10] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 1154.360095][ T24] usb 3-1: device descriptor read/64, error -71 [ 1154.610297][ T24] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1154.740194][ T24] usb 3-1: device descriptor read/64, error -71 [ 1154.850942][ T24] usb usb3-port1: attempt power cycle [ 1155.050181][ T5954] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1155.064015][T20142] netlink: 'syz.1.4820': attribute type 7 has an invalid length. [ 1155.072944][T20142] netlink: 'syz.1.4820': attribute type 5 has an invalid length. [ 1155.081555][T20142] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4820'. [ 1155.093903][T20142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.104678][T20142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.190222][ T24] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1155.210093][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 1155.216191][ T24] usb 3-1: device descriptor read/8, error -71 [ 1155.225221][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.236619][ T5954] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1155.245906][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.256893][ T5954] usb 4-1: config 0 descriptor?? [ 1155.460166][ T24] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1155.481137][ T24] usb 3-1: device descriptor read/8, error -71 [ 1155.591568][ T24] usb usb3-port1: unable to enumerate USB device [ 1155.679240][ T5954] mcp2221 0003:04D8:00DD.0068: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1155.714257][ T981] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 1155.735123][ T981] usb 1-1: USB disconnect, device number 53 [ 1155.870346][T20140] delete_channel: no stack [ 1155.875137][T20140] delete_channel: no stack [ 1156.260304][ T5919] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1156.424620][ T5919] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1156.433999][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.442089][ T5919] usb 1-1: Product: syz [ 1156.446279][ T5919] usb 1-1: Manufacturer: syz [ 1156.450970][ T5919] usb 1-1: SerialNumber: syz [ 1156.462567][ T5919] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1156.483195][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1156.894366][T20148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.903722][T20148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.969619][ T5954] usb 1-1: USB disconnect, device number 54 [ 1157.586722][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1157.629104][ T10] ath9k_htc: Failed to initialize the device [ 1157.644128][ T5954] usb 1-1: ath9k_htc: USB layer deinitialized [ 1157.860756][ T5954] usb 4-1: USB disconnect, device number 111 [ 1158.363781][T20163] overlayfs: conflicting lowerdir path [ 1158.423972][ T10] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 1158.690822][T20168] sctp: [Deprecated]: syz.3.4830 (pid 20168) Use of int in max_burst socket option. [ 1158.690822][T20168] Use struct sctp_assoc_value instead [ 1158.813991][T20168] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4830'. [ 1158.825912][T20168] netlink: 'syz.3.4830': attribute type 21 has an invalid length. [ 1158.834540][T20168] netlink: 'syz.3.4830': attribute type 1 has an invalid length. [ 1158.848423][T20168] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4830'. [ 1158.862744][ T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1158.880190][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.997510][ T10] usb 1-1: config 0 descriptor?? [ 1159.235274][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1159.353629][ T5954] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1159.482868][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1159.505584][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1159.528004][ T5954] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.559825][ T5954] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.587339][ T5954] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1159.591756][ T10] asix 1-1:0.0: probe with driver asix failed with error -32 [ 1159.604574][ T5954] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 1159.604607][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.615957][ T5954] usb 4-1: config 0 descriptor?? [ 1159.880550][T20171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.900540][T20171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.035922][ T10] usb 2-1: USB disconnect, device number 17 [ 1160.043743][ T10] option 2-1:2.102: device disconnected [ 1160.062717][ T10] option 2-1:2.0: device disconnected [ 1160.164755][ T5954] itetech 0003:06CB:73F6.0069: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.3-1/input0 [ 1160.351748][T20171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.372305][T20171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.397426][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a40f800: rx timeout, send abort [ 1160.412871][ T10] usb 4-1: USB disconnect, device number 112 [ 1160.516481][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1160.527334][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1160.545271][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1160.553767][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1160.573122][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1160.905714][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a40f800: abort rx timeout. Force session deactivation [ 1161.017941][T20185] chnl_net:caif_netlink_parms(): no params data found [ 1161.051032][ T5919] usb 1-1: USB disconnect, device number 55 [ 1161.163610][T20196] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1161.374204][T20185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.383926][T20185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.391598][T20185] bridge_slave_0: entered allmulticast mode [ 1161.400994][T20185] bridge_slave_0: entered promiscuous mode [ 1161.420198][ T5954] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1161.422438][T20185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.427514][T20185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.427746][T20185] bridge_slave_1: entered allmulticast mode [ 1161.430636][T20185] bridge_slave_1: entered promiscuous mode [ 1161.555872][T20185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.574628][ T5954] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1161.575385][T20185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.600174][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.618566][ T5954] usb 4-1: Product: syz [ 1161.633210][ T5954] usb 4-1: Manufacturer: syz [ 1161.637917][ T5954] usb 4-1: SerialNumber: syz [ 1161.660486][ T5954] usb 4-1: config 0 descriptor?? [ 1161.778727][T20185] team0: Port device team_slave_0 added [ 1161.817000][T20185] team0: Port device team_slave_1 added [ 1161.993945][T20185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.020767][T20185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.080344][T20185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.112720][T20185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.119727][T20185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.137711][ T5954] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1162.188861][T20185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.223357][ T5954] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1162.288739][ T5954] usb 4-1: USB disconnect, device number 113 [ 1162.633392][ T5870] Bluetooth: hci4: command tx timeout [ 1162.645256][T20185] hsr_slave_0: entered promiscuous mode [ 1162.646570][T20185] hsr_slave_1: entered promiscuous mode [ 1162.647865][T20185] debugfs: 'hsr0' already exists in 'hsr' [ 1162.720363][T20185] Cannot create hsr debugfs directory [ 1163.130290][ T5919] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1163.292560][ T5919] usb 4-1: config 9 has an invalid interface number: 88 but max is 1 [ 1163.312207][ T5919] usb 4-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 1163.365795][ T5919] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.401335][ T5919] usb 4-1: config 9 has no interface number 1 [ 1163.417983][T20185] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.429829][ T5919] usb 4-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1163.461100][ T5919] usb 4-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1163.480275][ T5919] usb 4-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1163.517239][ T5919] usb 4-1: config 9 interface 88 has no altsetting 0 [ 1163.542334][ T5919] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 1163.562283][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.580310][ T5919] usb 4-1: Product: syz [ 1163.590115][ T5919] usb 4-1: Manufacturer: syz [ 1163.615209][ T5919] usb 4-1: SerialNumber: syz [ 1163.658244][T20185] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.782984][T20185] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.863154][T20212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.882293][T20212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.909311][ T5919] qmi_wwan 4-1:9.88: skipping garbage [ 1163.928431][ T5919] qmi_wwan 4-1:9.88: probe with driver qmi_wwan failed with error -22 [ 1163.964520][T20185] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.988476][ T5919] usb 4-1: USB disconnect, device number 114 [ 1164.284567][T20185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1164.304582][T20185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1164.324896][T20185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1164.345106][T20185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1164.555236][T20185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.603360][T20185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.624753][T13185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.632092][T13185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.658441][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.665681][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.700394][ T5870] Bluetooth: hci4: command tx timeout [ 1164.705876][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a5d0000: rx timeout, send abort [ 1165.205933][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a5d0000: abort rx timeout. Force session deactivation [ 1165.260260][T17970] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 1165.285558][T20185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.388761][T20185] veth0_vlan: entered promiscuous mode [ 1165.412257][T20185] veth1_vlan: entered promiscuous mode [ 1165.424596][T17970] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1165.434877][T17970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.453303][T17970] usb 1-1: config 0 descriptor?? [ 1165.478926][T20185] veth0_macvtap: entered promiscuous mode [ 1165.499283][T20185] veth1_macvtap: entered promiscuous mode [ 1165.539344][T20185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.567643][T20185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.593095][ T4448] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.615905][ T4448] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.629524][ T4448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.645976][ T4448] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.689693][T17970] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1165.797308][ T4448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.818065][ T4448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.889890][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.890881][T17970] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1165.899189][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.920138][T17970] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1165.940490][T17970] asix 1-1:0.0: probe with driver asix failed with error -32 [ 1166.780351][ T5870] Bluetooth: hci4: command tx timeout [ 1168.155620][ T849] usb 1-1: USB disconnect, device number 56 [ 1168.780820][ T849] libceph: connect (1)[c::]:6789 error -101 [ 1168.860389][ T5870] Bluetooth: hci4: command tx timeout [ 1168.870534][ T849] libceph: mon0 (1)[c::]:6789 connect error [ 1169.111134][T20273] ceph: No mds server is up or the cluster is laggy [ 1171.730380][T20300] binder: 20299:20300 ioctl 4018620d 0 returned -22 [ 1171.761342][T20300] binder: 20299:20300 ioctl c0306201 0 returned -14 [ 1173.913983][ T5954] hid-generic 0003:0004:0000.006A: unknown main item tag 0x0 [ 1173.924134][ T5954] hid-generic 0003:0004:0000.006A: unknown main item tag 0x0 [ 1173.942531][ T5954] hid-generic 0003:0004:0000.006A: unknown main item tag 0x0 [ 1173.954033][ T5954] hid-generic 0003:0004:0000.006A: unknown main item tag 0x0 [ 1173.979215][ T5954] hid-generic 0003:0004:0000.006A: unknown main item tag 0x0 [ 1173.989013][ T5954] hid-generic 0003:0004:0000.006A: unknown main item tag 0x0 [ 1173.990205][T20317] block nbd3: shutting down sockets [ 1174.001500][ T5954] hid-generic 0003:0004:0000.006A: unknown main item tag 0x0 [ 1174.019411][ T5954] hid-generic 0003:0004:0000.006A: unknown main item tag 0x0 [ 1174.039037][ T5954] hid-generic 0003:0004:0000.006A: unknown main item tag 0x0 [ 1174.048360][ T5954] hid-generic 0003:0004:0000.006A: unknown main item tag 0x0 [ 1174.062909][ T5954] hid-generic 0003:0004:0000.006A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1174.356011][ T5919] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1174.521295][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 1174.546920][ T5919] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1174.573442][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1174.605536][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1174.637839][ T5919] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1174.658398][ T5919] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1174.667687][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.055502][T20339] random: crng reseeded on system resumption [ 1175.135399][ T5919] usb 1-1: GET_CAPABILITIES returned 0 [ 1175.167405][ T5919] usbtmc 1-1:16.0: can't read capabilities [ 1175.359528][ T5919] usb 1-1: USB disconnect, device number 57 [ 1177.680414][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.041098][T18761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1178.053101][T18761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1178.061741][T18761] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1178.069857][T18761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1178.080360][T18761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1179.569757][T20366] chnl_net:caif_netlink_parms(): no params data found [ 1179.960258][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1180.144330][ T5870] Bluetooth: hci2: command tx timeout [ 1180.162026][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1180.217107][ T24] usb 2-1: config 3 has an invalid interface number: 8 but max is 3 [ 1180.227104][ T24] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.251269][ T24] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 1180.291430][ T24] usb 2-1: config 3 has no interface number 0 [ 1180.298516][ T24] usb 2-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1180.323265][ T24] usb 2-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1180.339829][ T24] usb 2-1: config 3 interface 8 has no altsetting 0 [ 1180.434906][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 1180.480233][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.510422][ T24] usb 2-1: Product: syz [ 1180.514657][ T24] usb 2-1: Manufacturer: syz [ 1180.536248][ T24] usb 2-1: SerialNumber: syz [ 1180.542018][T18761] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1180.548548][T20366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.617653][T20366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.641873][T20366] bridge_slave_0: entered allmulticast mode [ 1180.651724][T20366] bridge_slave_0: entered promiscuous mode [ 1180.675740][T20366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.685625][T20366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.694394][T20366] bridge_slave_1: entered allmulticast mode [ 1180.704893][T20366] bridge_slave_1: entered promiscuous mode [ 1181.543015][ T24] appledisplay 2-1:3.8: Error while getting initial brightness: -71 [ 1181.582934][ T24] appledisplay 2-1:3.8: probe with driver appledisplay failed with error -71 [ 1181.626324][ T24] usb 2-1: USB disconnect, device number 18 [ 1181.780013][ T30] audit: type=1326 audit(1181.684:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20401 comm="syz.1.4902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d7558ebe9 code=0x0 [ 1181.871563][T20366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.895032][T20366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.979462][T20366] team0: Port device team_slave_0 added [ 1182.002207][T20366] team0: Port device team_slave_1 added [ 1182.074188][T20366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.082212][T20366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.118105][T20366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.150481][T20366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.157790][T20366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.197174][T20366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.220288][T18761] Bluetooth: hci2: command tx timeout [ 1182.358289][T20366] hsr_slave_0: entered promiscuous mode [ 1182.380515][T20366] hsr_slave_1: entered promiscuous mode [ 1182.387106][T20366] debugfs: 'hsr0' already exists in 'hsr' [ 1182.410005][T20366] Cannot create hsr debugfs directory [ 1182.534833][ T4448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.782671][ T4448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.997224][ T4448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.868025][ T4448] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.300864][T18761] Bluetooth: hci2: command tx timeout [ 1185.053345][ T4448] bridge_slave_1: left allmulticast mode [ 1185.069297][ T4448] bridge_slave_1: left promiscuous mode [ 1185.079034][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.104593][ T4448] : left allmulticast mode [ 1185.122172][ T4448] : left promiscuous mode [ 1185.134350][ T4448] bridge0: port 1() entered disabled state [ 1185.468779][ T24] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1185.640217][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1185.662928][ T24] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1185.726373][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.743952][ T24] usb 1-1: config 0 has no interface number 0 [ 1186.385675][T18761] Bluetooth: hci2: command tx timeout [ 1186.518525][ T24] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1186.532175][ T24] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 1186.553161][ T24] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1186.580175][ T24] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1186.602991][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1186.627079][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.655990][ T24] usb 1-1: Product: syz [ 1186.665875][ T24] usb 1-1: Manufacturer: syz [ 1186.680031][ T24] usb 1-1: SerialNumber: syz [ 1186.710214][ T24] usb 1-1: config 0 descriptor?? [ 1186.960429][ T24] ipheth 1-1:0.196: Unable to find endpoints [ 1186.991371][ T24] usb 1-1: USB disconnect, device number 58 [ 1187.042652][ T30] audit: type=1326 audit(1186.994:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7558ebe9 code=0x7ffc0000 [ 1187.103973][T20366] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1187.127218][ T30] audit: type=1326 audit(1186.994:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7558ebe9 code=0x7ffc0000 [ 1187.157628][ T30] audit: type=1326 audit(1187.014:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f7d7558ebe9 code=0x7ffc0000 [ 1187.188548][ T30] audit: type=1326 audit(1187.014:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7558ebe9 code=0x7ffc0000 [ 1187.203736][T20366] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1187.260935][ T30] audit: type=1326 audit(1187.014:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20466 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d7558ebe9 code=0x7ffc0000 [ 1187.367092][T20366] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1187.389135][T20366] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1187.703017][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1187.893609][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1187.917876][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1187.937546][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.970241][ T24] usb 2-1: Product: syz [ 1187.974620][ T24] usb 2-1: Manufacturer: syz [ 1187.979247][ T24] usb 2-1: SerialNumber: syz [ 1187.996793][ T4448] hsr_slave_0: left promiscuous mode [ 1188.016932][ T24] usb 2-1: config 0 descriptor?? [ 1188.036433][ T4448] hsr_slave_1: left promiscuous mode [ 1188.063295][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.100371][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.141307][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.158839][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.258007][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1188.271535][ T4448] veth1_macvtap: left promiscuous mode [ 1188.277144][ T4448] veth0_macvtap: left promiscuous mode [ 1188.289666][ T4448] veth1_vlan: left promiscuous mode [ 1188.296082][ T4448] veth0_vlan: left promiscuous mode [ 1188.493145][T18761] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1 [ 1188.502326][T18761] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 1188.754770][ T4448] pimreg3 (unregistering): left allmulticast mode [ 1189.720661][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1189.797384][ T24] usb 2-1: USB disconnect, device number 19 [ 1191.245684][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 1191.310434][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 1191.370308][ T5919] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1191.537903][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 1191.547939][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1191.560164][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1191.578667][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1191.591278][ T5919] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1191.600723][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.613083][ T5919] usb 1-1: config 0 descriptor?? [ 1191.619144][T20523] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1191.633677][ T5919] hub 1-1:0.0: USB hub found [ 1191.840638][ T5919] hub 1-1:0.0: 2 ports detected [ 1192.046280][ T5919] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1192.088700][ T5919] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1192.104800][ T5919] usbhid 1-1:0.0: can't add hid device: -71 [ 1192.114223][ T5919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1192.151235][ T5919] usb 1-1: USB disconnect, device number 59 [ 1192.195131][ T4448] vcan0 (unregistering): left allmulticast mode [ 1192.547045][T18761] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1192.558501][T18761] Bluetooth: hci3: Injecting HCI hardware error event [ 1192.574305][T18761] Bluetooth: hci3: hardware error 0x00 [ 1192.892042][T20529] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1192.930020][T20529] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1192.971061][T20366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.993954][T20529] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1193.023016][T20366] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.036214][T20529] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1193.092546][T20529] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1193.102899][T20499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.110153][T20499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.196217][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.203491][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.634543][T18761] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1194.681474][T20366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1194.944107][T18761] Bluetooth: hci4: command 0x0c1a tx timeout [ 1195.020100][T18761] Bluetooth: hci2: command 0x0c1a tx timeout [ 1195.171240][T13633] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1195.392340][T13633] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.428287][T13633] usb 2-1: config 0 has no interfaces? [ 1195.512737][T13633] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1195.556907][T13633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.575889][T13633] usb 2-1: Product: syz [ 1195.594267][T13633] usb 2-1: Manufacturer: syz [ 1195.620446][T13633] usb 2-1: SerialNumber: syz [ 1195.661414][T13633] usb 2-1: config 0 descriptor?? [ 1195.735147][T20366] veth0_vlan: entered promiscuous mode [ 1195.767127][T20366] veth1_vlan: entered promiscuous mode [ 1195.905339][T20366] veth0_macvtap: entered promiscuous mode [ 1195.953303][T20366] veth1_macvtap: entered promiscuous mode [ 1196.008680][T20366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.053270][T20366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.086734][T20422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.109181][T20422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.158888][T20422] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.189300][T20422] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.232236][ T30] audit: type=1326 audit(1196.174:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20571 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa09892adb9 code=0x7ffc0000 [ 1196.281197][ T30] audit: type=1326 audit(1196.174:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20571 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09898ebe9 code=0x7ffc0000 [ 1196.325923][ T30] audit: type=1326 audit(1196.174:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20571 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa09892adb9 code=0x7ffc0000 [ 1196.365566][ T30] audit: type=1326 audit(1196.174:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20571 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa09892adb9 code=0x7ffc0000 [ 1196.457369][ T30] audit: type=1326 audit(1196.174:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20571 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa09892adb9 code=0x7ffc0000 [ 1196.523685][ T30] audit: type=1326 audit(1196.174:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20571 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa09892adb9 code=0x7ffc0000 [ 1196.568115][T13185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.580952][T13185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.613322][ T30] audit: type=1326 audit(1196.204:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20571 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa09892adb9 code=0x7ffc0000 [ 1196.688381][ T30] audit: type=1326 audit(1196.204:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20571 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa09892adb9 code=0x7ffc0000 [ 1196.743505][T13185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1196.770951][T13185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1196.779286][ T30] audit: type=1326 audit(1196.204:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20571 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa09892adb9 code=0x7ffc0000 [ 1196.858496][ T30] audit: type=1326 audit(1196.204:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20571 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa09892adb9 code=0x7ffc0000 [ 1197.030958][T18761] Bluetooth: hci4: command 0x0c1a tx timeout [ 1197.112362][T18761] Bluetooth: hci2: command 0x0c1a tx timeout [ 1197.761437][ T5919] usb 2-1: USB disconnect, device number 20 [ 1199.184022][T18761] Bluetooth: hci2: command 0x0c1a tx timeout [ 1199.287615][T20642] loop7: detected capacity change from 0 to 8 [ 1200.085144][T20661] program syz.4.4972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1203.930162][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1204.141102][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1204.158174][ T10] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1204.173232][ T10] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1204.195674][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1204.217275][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1204.234160][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1204.244106][ T5919] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1204.254588][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1204.270419][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1204.279656][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.319474][ T10] usb 5-1: config 0 descriptor?? [ 1204.411107][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1204.683035][ T10] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1204.896371][ T5919] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1204.917515][T20729] netlink: 763 bytes leftover after parsing attributes in process `syz.4.5001'. [ 1204.930433][ T10] usb 5-1: USB disconnect, device number 2 [ 1204.984503][ T10] usblp0: removed [ 1205.080775][ T5919] usb 2-1: device descriptor read/64, error -71 [ 1205.210608][ T5919] usb usb2-port1: attempt power cycle [ 1205.460136][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1206.300294][ T5919] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1206.328512][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1206.391271][ T10] usb 5-1: device descriptor read/64, error -71 [ 1206.750046][ T5919] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1207.479044][ T5919] usb 2-1: device descriptor read/8, error -71 [ 1207.684766][ T5919] usb usb2-port1: unable to enumerate USB device [ 1208.803462][T20796] program syz.0.5022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1209.227152][T20811] @: renamed from vlan0 (while UP) [ 1209.657677][T20818] ================================================================== [ 1209.665836][T20818] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 1209.674288][T20818] Read of size 8 at addr ffff8880272b4408 by task syz.4.5029/20818 [ 1209.682193][T20818] [ 1209.684535][T20818] CPU: 0 UID: 0 PID: 20818 Comm: syz.4.5029 Not tainted syzkaller #0 PREEMPT(full) [ 1209.684561][T20818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1209.684574][T20818] Call Trace: [ 1209.684583][T20818] [ 1209.684592][T20818] dump_stack_lvl+0x189/0x250 [ 1209.684638][T20818] ? __kasan_check_byte+0x12/0x40 [ 1209.684664][T20818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1209.684694][T20818] ? lock_release+0x4b/0x3e0 [ 1209.684719][T20818] ? __virt_addr_valid+0x4a5/0x5c0 [ 1209.684749][T20818] print_report+0xca/0x240 [ 1209.684770][T20818] ? change_page_attr_set_clr+0x625/0xfc0 [ 1209.684792][T20818] kasan_report+0x118/0x150 [ 1209.684815][T20818] ? change_page_attr_set_clr+0x625/0xfc0 [ 1209.684843][T20818] change_page_attr_set_clr+0x625/0xfc0 [ 1209.684869][T20818] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1209.684890][T20818] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1209.684921][T20818] ? memtype_reserve+0x874/0xb30 [ 1209.684958][T20818] _set_pages_array+0x145/0x270 [ 1209.684986][T20818] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1209.685018][T20818] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1209.685052][T20818] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1209.685082][T20818] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1209.685113][T20818] ? ww_mutex_lock+0x3f/0x1c0 [ 1209.685144][T20818] drm_gem_map_attach+0x199/0x1f0 [ 1209.685176][T20818] dma_buf_dynamic_attach+0x1e7/0x3d0 [ 1209.685203][T20818] ? __fget_files+0x3a0/0x420 [ 1209.685230][T20818] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1209.685260][T20818] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1209.685290][T20818] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 1209.685319][T20818] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1209.685348][T20818] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1209.685377][T20818] drm_ioctl_kernel+0x2cf/0x390 [ 1209.685402][T20818] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1209.685431][T20818] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1209.685459][T20818] drm_ioctl+0x67f/0xb10 [ 1209.685485][T20818] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1209.685516][T20818] ? __pfx_drm_ioctl+0x10/0x10 [ 1209.685545][T20818] ? __fget_files+0x3a0/0x420 [ 1209.685570][T20818] ? __fget_files+0x2a/0x420 [ 1209.685598][T20818] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1209.685637][T20818] ? __pfx_drm_ioctl+0x10/0x10 [ 1209.685660][T20818] __se_sys_ioctl+0xfc/0x170 [ 1209.685681][T20818] do_syscall_64+0xfa/0xfa0 [ 1209.685709][T20818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.685728][T20818] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1209.685748][T20818] ? clear_bhb_loop+0x60/0xb0 [ 1209.685771][T20818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.685792][T20818] RIP: 0033:0x7f66a678ebe9 [ 1209.685812][T20818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1209.685830][T20818] RSP: 002b:00007f66a75b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1209.685853][T20818] RAX: ffffffffffffffda RBX: 00007f66a69c6090 RCX: 00007f66a678ebe9 [ 1209.685869][T20818] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000006 [ 1209.685882][T20818] RBP: 00007f66a6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1209.685895][T20818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.685909][T20818] R13: 00007f66a69c6128 R14: 00007f66a69c6090 R15: 00007ffe9925e518 [ 1209.685933][T20818] [ 1209.685940][T20818] [ 1210.020933][T20818] Allocated by task 20818: [ 1210.025406][T20818] kasan_save_track+0x3e/0x80 [ 1210.030109][T20818] __kasan_kmalloc+0x93/0xb0 [ 1210.034724][T20818] __kvmalloc_node_noprof+0x5cd/0x910 [ 1210.040118][T20818] drm_gem_get_pages+0x166/0xa20 [ 1210.045075][T20818] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 1210.051168][T20818] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1210.056828][T20818] drm_gem_map_attach+0x199/0x1f0 [ 1210.061892][T20818] dma_buf_dynamic_attach+0x1e7/0x3d0 [ 1210.067374][T20818] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1210.073726][T20818] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1210.079471][T20818] drm_ioctl_kernel+0x2cf/0x390 [ 1210.084352][T20818] drm_ioctl+0x67f/0xb10 [ 1210.088637][T20818] __se_sys_ioctl+0xfc/0x170 [ 1210.093257][T20818] do_syscall_64+0xfa/0xfa0 [ 1210.097790][T20818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.103703][T20818] [ 1210.106042][T20818] The buggy address belongs to the object at ffff8880272b4000 [ 1210.106042][T20818] which belongs to the cache kmalloc-2k of size 2048 [ 1210.120113][T20818] The buggy address is located 0 bytes to the right of [ 1210.120113][T20818] allocated 1032-byte region [ffff8880272b4000, ffff8880272b4408) [ 1210.134709][T20818] [ 1210.137046][T20818] The buggy address belongs to the physical page: [ 1210.143474][T20818] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x272b0 [ 1210.152257][T20818] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1210.160862][T20818] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1210.168422][T20818] page_type: f5(slab) [ 1210.172422][T20818] raw: 00fff00000000040 ffff88801a842000 ffffea000195e600 dead000000000002 [ 1210.181036][T20818] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1210.189636][T20818] head: 00fff00000000040 ffff88801a842000 ffffea000195e600 dead000000000002 [ 1210.198327][T20818] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1210.207017][T20818] head: 00fff00000000003 ffffea00009cac01 00000000ffffffff 00000000ffffffff [ 1210.215705][T20818] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1210.224387][T20818] page dumped because: kasan: bad access detected [ 1210.230815][T20818] page_owner tracks the page as allocated [ 1210.236547][T20818] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12349, tgid 12349 (syz-executor), ts 597975238697, free_ts 594124589255 [ 1210.258278][T20818] post_alloc_hook+0x240/0x2a0 [ 1210.263067][T20818] get_page_from_freelist+0x21e4/0x22c0 [ 1210.268641][T20818] __alloc_frozen_pages_noprof+0x181/0x370 [ 1210.274474][T20818] alloc_pages_mpol+0x232/0x4a0 [ 1210.279343][T20818] allocate_slab+0x8a/0x330 [ 1210.283869][T20818] ___slab_alloc+0xbd1/0x13f0 [ 1210.288574][T20818] __slab_alloc+0x55/0xa0 [ 1210.293098][T20818] __kmalloc_cache_noprof+0x411/0x6f0 [ 1210.298486][T20818] rtnl_newlink+0xed/0x1c70 [ 1210.303013][T20818] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1210.307970][T20818] netlink_rcv_skb+0x205/0x470 [ 1210.312755][T20818] netlink_unicast+0x82c/0x9e0 [ 1210.317544][T20818] netlink_sendmsg+0x805/0xb30 [ 1210.322337][T20818] __sock_sendmsg+0x21c/0x270 [ 1210.327033][T20818] __sys_sendto+0x3bd/0x520 [ 1210.331564][T20818] __x64_sys_sendto+0xde/0x100 [ 1210.336361][T20818] page last free pid 12386 tgid 12386 stack trace: [ 1210.342883][T20818] __free_frozen_pages+0xbc4/0xd30 [ 1210.348126][T20818] __put_partials+0x146/0x170 [ 1210.352841][T20818] put_cpu_partial+0x17c/0x250 [ 1210.357637][T20818] __slab_free+0x2b9/0x390 [ 1210.362077][T20818] qlist_free_all+0x97/0x140 [ 1210.366697][T20818] kasan_quarantine_reduce+0x148/0x160 [ 1210.372172][T20818] __kasan_slab_alloc+0x22/0x80 [ 1210.377126][T20818] __kmalloc_noprof+0x3c3/0x7f0 [ 1210.381996][T20818] load_elf_binary+0x326/0x2740 [ 1210.386873][T20818] bprm_execve+0x999/0x1450 [ 1210.391392][T20818] do_execveat_common+0x510/0x6a0 [ 1210.396436][T20818] __x64_sys_execve+0x94/0xb0 [ 1210.401137][T20818] do_syscall_64+0xfa/0xfa0 [ 1210.405666][T20818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.411583][T20818] [ 1210.413938][T20818] Memory state around the buggy address: [ 1210.419585][T20818] ffff8880272b4300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.427688][T20818] ffff8880272b4380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1210.435768][T20818] >ffff8880272b4400: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1210.443850][T20818] ^ [ 1210.448275][T20818] ffff8880272b4480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1210.456347][T20818] ffff8880272b4500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1210.464507][T20818] ================================================================== [ 1210.605832][T20818] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1210.613104][T20818] CPU: 1 UID: 0 PID: 20818 Comm: syz.4.5029 Not tainted syzkaller #0 PREEMPT(full) [ 1210.622511][T20818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1210.632578][T20818] Call Trace: [ 1210.635849][T20818] [ 1210.638860][T20818] dump_stack_lvl+0x99/0x250 [ 1210.643458][T20818] ? __asan_memcpy+0x40/0x70 [ 1210.648042][T20818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1210.653325][T20818] ? __pfx__printk+0x10/0x10 [ 1210.657927][T20818] vpanic+0x237/0x6d0 [ 1210.661935][T20818] ? __pfx_vpanic+0x10/0x10 [ 1210.666482][T20818] ? preempt_schedule+0xae/0xc0 [ 1210.671368][T20818] ? __pfx_preempt_schedule+0x10/0x10 [ 1210.677033][T20818] panic+0xb9/0xc0 [ 1210.680817][T20818] ? __pfx_panic+0x10/0x10 [ 1210.685267][T20818] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1210.691185][T20818] ? change_page_attr_set_clr+0x625/0xfc0 [ 1210.697367][T20818] check_panic_on_warn+0x89/0xb0 [ 1210.702323][T20818] ? change_page_attr_set_clr+0x625/0xfc0 [ 1210.708134][T20818] end_report+0x78/0x160 [ 1210.712393][T20818] kasan_report+0x129/0x150 [ 1210.716917][T20818] ? change_page_attr_set_clr+0x625/0xfc0 [ 1210.722660][T20818] change_page_attr_set_clr+0x625/0xfc0 [ 1210.728295][T20818] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1210.734446][T20818] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 1210.740603][T20818] ? memtype_reserve+0x874/0xb30 [ 1210.745549][T20818] _set_pages_array+0x145/0x270 [ 1210.750413][T20818] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 1210.756486][T20818] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1210.763078][T20818] drm_gem_shmem_pin_locked+0x22c/0x460 [ 1210.768632][T20818] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1210.774714][T20818] ? ww_mutex_lock+0x3f/0x1c0 [ 1210.779397][T20818] drm_gem_map_attach+0x199/0x1f0 [ 1210.784430][T20818] dma_buf_dynamic_attach+0x1e7/0x3d0 [ 1210.789824][T20818] ? __fget_files+0x3a0/0x420 [ 1210.794534][T20818] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1210.801406][T20818] drm_gem_shmem_prime_import_no_map+0xc1/0x2f0 [ 1210.807675][T20818] ? drm_gem_prime_fd_to_handle+0x185/0x4d0 [ 1210.813751][T20818] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1210.820608][T20818] drm_gem_prime_fd_to_handle+0x196/0x4d0 [ 1210.826360][T20818] drm_ioctl_kernel+0x2cf/0x390 [ 1210.831295][T20818] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1210.837743][T20818] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1210.843127][T20818] drm_ioctl+0x67f/0xb10 [ 1210.847383][T20818] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1210.853910][T20818] ? __pfx_drm_ioctl+0x10/0x10 [ 1210.858688][T20818] ? __fget_files+0x3a0/0x420 [ 1210.863395][T20818] ? __fget_files+0x2a/0x420 [ 1210.868023][T20818] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1210.872977][T20818] ? __pfx_drm_ioctl+0x10/0x10 [ 1210.877750][T20818] __se_sys_ioctl+0xfc/0x170 [ 1210.882346][T20818] do_syscall_64+0xfa/0xfa0 [ 1210.886888][T20818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.892962][T20818] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1210.898596][T20818] ? clear_bhb_loop+0x60/0xb0 [ 1210.903274][T20818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.909255][T20818] RIP: 0033:0x7f66a678ebe9 [ 1210.913681][T20818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1210.933292][T20818] RSP: 002b:00007f66a75b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1210.941714][T20818] RAX: ffffffffffffffda RBX: 00007f66a69c6090 RCX: 00007f66a678ebe9 [ 1210.949709][T20818] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000006 [ 1210.957688][T20818] RBP: 00007f66a6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1210.965680][T20818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1210.973650][T20818] R13: 00007f66a69c6128 R14: 00007f66a69c6090 R15: 00007ffe9925e518 [ 1210.981631][T20818] [ 1210.984947][T20818] Kernel Offset: disabled [ 1210.989263][T20818] Rebooting in 86400 seconds..