last executing test programs: 8.475658625s ago: executing program 3 (id=450): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, &(0x7f00000001c0)={{0x1, 0x0, 0x0, 0x0, 0xff6e}, 0x0, 0x80}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}]}, 0x4c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x40) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000094) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2}}}]}, 0x3c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00038008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x4d0d) 7.809661211s ago: executing program 4 (id=452): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a30, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r4, 0x6f6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) 7.633469815s ago: executing program 4 (id=453): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x1a, 0x0, 0x0) 7.398233269s ago: executing program 4 (id=454): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000002c0)}], 0x1}}], 0x1, 0x40080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.153507599s ago: executing program 4 (id=457): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000b00)={0x34, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 7.049777078s ago: executing program 5 (id=458): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.806477668s ago: executing program 5 (id=459): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r0, 0x0, 0x0) 6.33939537s ago: executing program 5 (id=462): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.360065449s ago: executing program 5 (id=468): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.072994599s ago: executing program 3 (id=469): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) 3.65517942s ago: executing program 4 (id=473): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = epoll_create1(0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000004140)={0x28, 0x0, r2, {{0x6, 0xfee, 0x7}}}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) futex_waitv(&(0x7f0000001740)=[{0x10, &(0x7f0000001380)=0xffffffeffffffffe, 0x6}], 0x1, 0x0, 0x0, 0x1) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="000013af49488ef5372943291891ea3573b90bd550069d334b21a9ff73160e635d438ed31387d37f4ae9538b960d6e6a702db32e123e82a102885356a7fb139ef81a1241937b337522022bfaa4a181db7dc774ef4fef3e1d5179cb5a583a05d4ecb4e4917dca46132175cec404740e3bc9ef0c651d8fa8229357ea095ef44e5c9ee6b3f5ca2b", 0x86}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6c7831733ca886e99a61c5d196e7b454c74823d5131d1232e0b5eaab8262f6b9ae8ea9a7a27fbe7920311d60976d35446c503d822e08b2e68d782c5e6619193281c856ea3774b58e093858e4be47e9b6d321b97dd5845f5644aa7d2e7cf29bf157251a70a98e479e3ee2a92724582bf20ff56ce8f28bc5409b82d5d84c094770fb39e1dd839a8640670867c1743879be26fa24475e37f7317a9fa83598707c2ee6fb92d21745bdb4c455f43c8fa873ac7f198e47c3d4298862d270413ee35c893d8411d1c80f41171991827374280c1c00a5028fb452e6bccc1d309d0b8eaa", 0xdf}], 0x1, &(0x7f0000000400)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x2b, 0x2, '\x00', [@ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x21}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x30}}], 0x2, 0xc8040) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x12) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000200)={0xc, r7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f00000002c0)={0x10}) keyctl$KEYCTL_WATCH_KEY(0x6, r5, 0xffffffffffffffff, 0x5d) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000305000000000300000000000000", @ANYBLOB="35030200000000002c00128009000100626f6e64000000001c00028008001c000000f0ebdd000008000500ff0100000800030008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x40800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002080)={0x90000000}) syz_usb_connect$midi(0x1, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xfe, 0x10, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xa, 0xb, 0x40, 0xf, 0xd7, 0x2, {0x4}}}, {{0x9, 0x5, 0xe, 0x2, 0x7ff, 0x6d, 0x72, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x241a1, 0x0) 3.52764253s ago: executing program 0 (id=474): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) readv(r0, 0x0, 0x0) 3.431657941s ago: executing program 0 (id=475): ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001c40)=@overlay={0x7, 0x8, 0x4, 0x200, 0xd878, {0x77359400}, {0x4, 0xc, 0x5, 0xc5, 0x5, 0x6, "c112e9cf"}, 0x0, 0x3, {}, 0x6}) 3.411102423s ago: executing program 2 (id=476): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') dup3(r2, r0, 0x0) 3.368519976s ago: executing program 0 (id=477): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000002c0)="a8d81e6d947d922587e5abd7a547dd11ec10b1c149e49cdd3a3acce0e471282c8b594920aca050647626d317dc6c38dc493cb80ae55dbb9e00d8376a96cab883ecd9c634e8f1965a11ae4e9ba062368bf6b8c3424d469dbb24c7919f332e637a015802cb8739f82185ed1bf0c2f1a2a0c59942596f4fd386adeab9b2683beaca798e3ee69e0a6d239098c745305d21b9293483dfdbcd94277f7a08f414e77a78001546e1449a889cbef622f3874183060c884ea7e3abca8d3fed20b5013cdeb7f7dc474909ecfd57a1d4c7fe05129fb45468e681e3bc744e43ef5ffa40e4ac7ee8332cafa8b254079bc94711f6090b3c65d0d79208f463dd3b16242cc1c15249b3e42c624749049179fd397ee1daf5e5b907b6fec63b1aa2be29320af21a37e729c0445b4bfa5d338495804dfab92a2e973104c7bed5a24e0bdfb4846036d623e173269b722c9ccd93b8c9682c3cdf0e1b806b5b00ede878c698663d851dfba23d9abfca0140f167ef1b9cd0e1e49fc0eb6bdc46f4fdf381d55b3d6185361afc9cfebc3f98af4524fec4d5277bf6134a2a473932947f2051b7ca196b8b9931c14b04c34f309efecb1bbdc563497e7e66847057967363411c2f720df3a0ed530abbaa72d4b8d2aeecab950759c47057d7cc26c7d939191908d0426fa7d9abd51fabc26324575bee2848486f3736bbd3714f07ac559a918c06f31c391cba5b6cbd4e7316f68e45e421001b5b002520c769be330de8e7d86bc218d4562f6a86167eb0bf35ed70478200b58d420db3d4f6408ed160c36d6e92a085212394d5507243aff5ba8fc1be49eff3fe050cf4dbf033385b751d3fe87001cf608583d3394e87e73aedffd99312705e726f0b85622fe7b3ef5b08ae9e1e2ca1bcfc804209102a1a358c88e6456169a7a9731acebe1264385509a19d534e45fc352e6cf1347aff24f17c21242ada32ff0565bacec22528790f461195cd5a2293ac5df991acf980be873cded06b84c6094a62cfe5438d19a4fe04e1238c595bd764477094ae3ad1660a0d65e3a63ca9a197879f05fb64fe542ea13ef2ec836ea2513c841fb133d38696e9f1f0222e4afc160fc05d3e6279469c1af9a158d3240e20d15d3d03d8be46067c17d4e42f0d97e0d25b410a3a6be7964119aae495c6ef148882f15f52df74bb810876c2762d69cc331a9de08dd8138787c283249c8406172bc6cd4625a31865bdbc674379e9ff08de675dc91f088f9d38b33bf335d199907d6225bc4958a7f74aa6030cd1a3c1220af6396d37a85c1efc4b5d88936d485c2dd350a4e1f4d75ff07bce3920e1fec69d5ba8d142957f8f4d7c0e0da2a0ca6643ebd8c96562c238d9485287354a3e307d3edd316de5ec9bcd31dbc3ec5a2247ace805ff3f2a18603d9c9169b1571fac8cc267a7f965189f3da1e504f7f373ba03133936bcb003187ed2ddf1b89e2c68b485029d18b744dd2d5d55313f5ebd0909afaeb0481d23b970d3cb50457eb9157a95cd94dba4e50de0b530edec00500688ab06162ae52d4abb9974980dde0e5f4cbf3dc4d0a2e720101b9a02c86a49a2e8ee760a9edb4b2a7d160867459c9f611850e795b0e4d6254da594d30591bd553748ed7447cfc8c58aa9fbbdf3ea5fdb9d30361cfdd82a08bbb71595ac56c4e5b6df47abb0e79e16adbd0aa678876b4e6822af40d81a4f4c7d2f633e3aef4184497194f75929cf6c8f260f217d00123a71c94d07b018511d4188e671b4d6063ab0bf48ee5c871a7824b3763d2c940396627aa61863787f2102daefdfafae8d4e197ef7e1a61d5695c062cbbf36f7f8d975d1d65e5f36bf4a2a149f37144b4b89614632fc1ed73f81bbfdc8d9f849a920d9eff33ccaed1c279a945f25ab1ce301860e44086642aef273c45b6d978d97d8a68da76b157e14cf88ae85f807b0304ae36b7170975738d012003ec94dc4805963462cd883e47766231f6edb8b54bd70bf5554bf53f6ea533d228ac4e19c7290b1795328df2f6609de358e9183e3ffe75d8e9088fb7193ab10327a8cc31523f8ff54c0d583c46e26d931e2a62a7e9e97153668d4e4f17f0d09e472dc2739f81feba73bb4ffe9c60820ca1945f316918f9c9785976058109cc44494b71475f91131ea2c7f96b8a516c4813c0aaa75f03169b31f870c3bd76f9cd01410c0ad742ba9c150397626ada311cf6f6d60015d3cc44e9b3bc0216f99927d9cd581527bc8c83e789fe10a720cb297c0b5331a915508dfee3266e24d59c32cfd117ccbc970c4edb63d6d7fe1ec9359c853610a489aebdfc4631b189793a1669f3d963318e5d0e6098928dc34662d67317d270ace8a0911f775f6a69de83aef6fb35a446a37058cea30633904ca086e0f77c431a3fa3cb88f7d0e0d7922a353ce9c7091424ba79a52612be292a3c7ab3542f60db70ce6755e5eb0cfeeec3ce2982843cae0b7e7fccb19b8bb16ccb39db8786ee58f3068d91b8283c7af51b21c880d2f52f12ec0d2b483708a60cb53dada400ed95bb0f07996dd6734cf53d4ce28b49116c3595318f4f8a25c88559eff0e4fff0231be9d3eb8a96346933dc921f1ec6e733bcf0512554c54123fb02178ee50ab888d2c87112dd426fc8396bf28d5ed4937b1f3d0aef752aae6034f34b30bacbf0919e2eebbce5d5ac314a24e5f18fe4b59e4be6cc13d239adb62c2a8419db389e1bd792c02e32760", 0x77f}], 0x1}}], 0x1, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.282155254s ago: executing program 3 (id=478): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a"], 0x30}, 0x1, 0x11}, 0x0) 3.278095607s ago: executing program 1 (id=479): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 3.217374386s ago: executing program 2 (id=480): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x9, 0x40, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x20000000080, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.200556113s ago: executing program 0 (id=481): r0 = socket(0x2d, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000080)=@proc={0x2d, 0x0, 0x25dfdbfc, 0x40000}, 0xc) 3.083231564s ago: executing program 1 (id=482): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0xa, 0xbfffffe6) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c0001800600060065580000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r0, @ANYRES64=r0], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) 3.071140481s ago: executing program 3 (id=483): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x3, 0x3, 0x1, 0x9, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x2, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x7200, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x7, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x80000000, 0x6, 0x80000001, 0x3, 0x1, 0x9bc, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0xfffffffe, 0x6, 0x8, 0x5, 0x6, 0x40000b, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x8, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0x4bf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x8600, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x40, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x4831, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x3, 0x807, 0x1ff, 0x3, 0x400, 0xffffffff, 0x1040, 0x3, 0xfffffffa, 0x9a6, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x0, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.033150659s ago: executing program 0 (id=484): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 2.925178289s ago: executing program 0 (id=485): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000b00)={0x34, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.806960596s ago: executing program 3 (id=486): userfaultfd(0x80801) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xf3a, 0x9) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000000c0)=0xb, 0x4) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r9}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 2.465606041s ago: executing program 1 (id=487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x240408d0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r4, 0x6f6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) 2.3153052s ago: executing program 1 (id=488): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv2(r0, &(0x7f0000000200), 0x0, 0x40, 0x4, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 2.199536611s ago: executing program 1 (id=489): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000005c0)={0x14, 0x0, 0x0}, &(0x7f0000000840)={0x34, &(0x7f0000000600)={0x20, 0xf, 0xf, "1df212243e9d7de5a7e4d5537664fc"}, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0xa3}, &(0x7f0000000800)={0x20, 0x0, 0x1, 0x16}}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) syz_usb_control_io$uac3(r0, 0x0, 0x0) 1.995873949s ago: executing program 2 (id=490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408f5}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.991977508s ago: executing program 5 (id=491): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) 1.83770916s ago: executing program 3 (id=492): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000740)={0x20, 0x3, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 513.417147ms ago: executing program 4 (id=493): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32], 0x30}], 0x1}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 306.805214ms ago: executing program 2 (id=494): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 199.451331ms ago: executing program 2 (id=495): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a0010000000fd000000"], 0x30}, 0x1, 0x11}, 0x0) 130.347456ms ago: executing program 2 (id=496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 56.024974ms ago: executing program 1 (id=497): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)='D', 0x1, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 0s ago: executing program 5 (id=498): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 77.439702][ T5593] cgroup: Unknown subsys name 'net' [ 77.526187][ T5593] cgroup: Unknown subsys name 'cpuset' [ 77.535414][ T5593] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.037257][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.584549][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.598266][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.606418][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.616243][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.625592][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.670472][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.679579][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.688108][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.699140][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.706895][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.770224][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.782452][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.792025][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.805306][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.813246][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.884401][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.893082][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.902073][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.910903][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.928343][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.936353][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.944117][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.953100][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.960301][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.974800][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.985694][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.996250][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.005177][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.015382][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.023132][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.692021][ T5629] Bluetooth: hci0: command tx timeout [ 83.771718][ T5629] Bluetooth: hci1: command tx timeout [ 83.852910][ T5629] Bluetooth: hci2: command tx timeout [ 83.964876][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.973023][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.980328][ T5612] bridge_slave_0: entered allmulticast mode [ 83.988938][ T5612] bridge_slave_0: entered promiscuous mode [ 83.999743][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.006982][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.014229][ T5629] Bluetooth: hci3: command tx timeout [ 84.014806][ T5612] bridge_slave_1: entered allmulticast mode [ 84.027558][ T5612] bridge_slave_1: entered promiscuous mode [ 84.078423][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.085642][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.092176][ T5626] Bluetooth: hci4: command tx timeout [ 84.093475][ T5605] bridge_slave_0: entered allmulticast mode [ 84.098850][ T5629] Bluetooth: hci5: command tx timeout [ 84.106470][ T5605] bridge_slave_0: entered promiscuous mode [ 84.212176][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.219379][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.226667][ T5605] bridge_slave_1: entered allmulticast mode [ 84.234112][ T5605] bridge_slave_1: entered promiscuous mode [ 84.280589][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.293376][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.359800][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.368249][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.376768][ T5628] bridge_slave_0: entered allmulticast mode [ 84.384510][ T5628] bridge_slave_0: entered promiscuous mode [ 84.443660][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.450904][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.458248][ T5610] bridge_slave_0: entered allmulticast mode [ 84.465725][ T5610] bridge_slave_0: entered promiscuous mode [ 84.480678][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.487887][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.498050][ T5628] bridge_slave_1: entered allmulticast mode [ 84.506021][ T5628] bridge_slave_1: entered promiscuous mode [ 84.528482][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.556187][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.563476][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.570599][ T5610] bridge_slave_1: entered allmulticast mode [ 84.578350][ T5610] bridge_slave_1: entered promiscuous mode [ 84.610117][ T5612] team0: Port device team_slave_0 added [ 84.618856][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.683647][ T5612] team0: Port device team_slave_1 added [ 84.729496][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.752685][ T5605] team0: Port device team_slave_0 added [ 84.772759][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.790722][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.826935][ T5605] team0: Port device team_slave_1 added [ 84.859629][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.888227][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.895728][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.922248][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.946047][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.953261][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.960403][ T5621] bridge_slave_0: entered allmulticast mode [ 84.968004][ T5621] bridge_slave_0: entered promiscuous mode [ 85.001454][ T5628] team0: Port device team_slave_0 added [ 85.007913][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.014980][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.041097][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.060785][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.067744][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.093852][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.105186][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.112571][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.119698][ T5621] bridge_slave_1: entered allmulticast mode [ 85.127406][ T5621] bridge_slave_1: entered promiscuous mode [ 85.160770][ T5628] team0: Port device team_slave_1 added [ 85.192319][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.199269][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.225325][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.236975][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.244084][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.269979][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.294530][ T5610] team0: Port device team_slave_0 added [ 85.300299][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.307495][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.314813][ T5622] bridge_slave_0: entered allmulticast mode [ 85.322503][ T5622] bridge_slave_0: entered promiscuous mode [ 85.331056][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.338198][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.345410][ T5622] bridge_slave_1: entered allmulticast mode [ 85.353029][ T5622] bridge_slave_1: entered promiscuous mode [ 85.360968][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.367965][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.394148][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.428207][ T5610] team0: Port device team_slave_1 added [ 85.510793][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.521028][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.529680][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.556797][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.582062][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.594643][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.624937][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.640274][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.647247][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.673178][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.691009][ T5612] hsr_slave_0: entered promiscuous mode [ 85.698843][ T5612] hsr_slave_1: entered promiscuous mode [ 85.781923][ T5629] Bluetooth: hci0: command tx timeout [ 85.793778][ T5605] hsr_slave_0: entered promiscuous mode [ 85.800189][ T5605] hsr_slave_1: entered promiscuous mode [ 85.806944][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 85.812791][ T5605] Cannot create hsr debugfs directory [ 85.833786][ T5621] team0: Port device team_slave_0 added [ 85.842794][ T5621] team0: Port device team_slave_1 added [ 85.853269][ T5629] Bluetooth: hci1: command tx timeout [ 85.856208][ T5628] hsr_slave_0: entered promiscuous mode [ 85.865542][ T5628] hsr_slave_1: entered promiscuous mode [ 85.871772][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 85.877493][ T5628] Cannot create hsr debugfs directory [ 85.886203][ T5622] team0: Port device team_slave_0 added [ 85.895460][ T5622] team0: Port device team_slave_1 added [ 85.931710][ T5629] Bluetooth: hci2: command tx timeout [ 85.959228][ T5610] hsr_slave_0: entered promiscuous mode [ 85.966203][ T5610] hsr_slave_1: entered promiscuous mode [ 85.972796][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 85.978515][ T5610] Cannot create hsr debugfs directory [ 86.090897][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.099257][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.125350][ T5629] Bluetooth: hci3: command tx timeout [ 86.131227][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.144574][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.151544][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.177781][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.188773][ T5629] Bluetooth: hci5: command tx timeout [ 86.194305][ T5629] Bluetooth: hci4: command tx timeout [ 86.254990][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.262702][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.288667][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.369898][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.377690][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.404406][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.595308][ T5621] hsr_slave_0: entered promiscuous mode [ 86.601827][ T5621] hsr_slave_1: entered promiscuous mode [ 86.607980][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 86.614035][ T5621] Cannot create hsr debugfs directory [ 86.654753][ T5622] hsr_slave_0: entered promiscuous mode [ 86.661215][ T5622] hsr_slave_1: entered promiscuous mode [ 86.667720][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 86.673490][ T5622] Cannot create hsr debugfs directory [ 87.155043][ T5605] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.168109][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.176226][ T5605] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.186457][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.194683][ T5605] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.205419][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.224579][ T5605] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.234999][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.299706][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.309914][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.319137][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.331059][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.339208][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.348727][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.357081][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.366742][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.474573][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.487666][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.495955][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.506346][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.527212][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.537247][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.545804][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.557088][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.644612][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.679493][ T5612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.690034][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.699532][ T5612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.710421][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.719594][ T5612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.729119][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.737654][ T5612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.747460][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.811470][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.852110][ T5629] Bluetooth: hci0: command tx timeout [ 87.870334][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.880522][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.890913][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.907385][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.917401][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.926452][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.933857][ T5629] Bluetooth: hci1: command tx timeout [ 87.946262][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.955991][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.965769][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.975489][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.982839][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.011765][ T5629] Bluetooth: hci2: command tx timeout [ 88.020747][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.027863][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.135844][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.170347][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.171789][ T5629] Bluetooth: hci3: command tx timeout [ 88.187848][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.207162][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.214310][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.228364][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.238501][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.247445][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.255397][ T5629] Bluetooth: hci4: command tx timeout [ 88.262064][ T5629] Bluetooth: hci5: command tx timeout [ 88.269546][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.279187][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.290450][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.315466][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.322805][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.346990][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.428711][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.519027][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.526233][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.545122][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.586258][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.593770][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.665197][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.728038][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.756341][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.763501][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.806543][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.813713][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.844540][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.878878][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.886051][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.917568][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.924721][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.080599][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.189539][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.228524][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.235699][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.298578][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.305751][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.436290][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.790983][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.932931][ T5629] Bluetooth: hci0: command tx timeout [ 90.012103][ T5629] Bluetooth: hci1: command tx timeout [ 90.083919][ T5621] veth0_vlan: entered promiscuous mode [ 90.102662][ T5629] Bluetooth: hci2: command tx timeout [ 90.141621][ T5621] veth1_vlan: entered promiscuous mode [ 90.245965][ T5621] veth0_macvtap: entered promiscuous mode [ 90.255214][ T5629] Bluetooth: hci3: command tx timeout [ 90.332167][ T5629] Bluetooth: hci4: command tx timeout [ 90.332322][ T5626] Bluetooth: hci5: command tx timeout [ 90.348974][ T5621] veth1_macvtap: entered promiscuous mode [ 90.454817][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.493655][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.577955][ T1161] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.630360][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.648406][ T5605] veth0_vlan: entered promiscuous mode [ 90.674150][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.682218][ T1111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.698746][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.730335][ T5605] veth1_vlan: entered promiscuous mode [ 90.992248][ T5628] veth0_vlan: entered promiscuous mode [ 91.003844][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.018295][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.029009][ T5610] veth0_vlan: entered promiscuous mode [ 91.049704][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.069378][ T5628] veth1_vlan: entered promiscuous mode [ 91.104523][ T1111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.113397][ T1111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.139476][ T185] cfg80211: failed to load regulatory.db [ 91.150409][ T5605] veth0_macvtap: entered promiscuous mode [ 91.176409][ T5605] veth1_macvtap: entered promiscuous mode [ 91.188054][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.196356][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.221891][ T5610] veth1_vlan: entered promiscuous mode [ 91.265937][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.279876][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.306225][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.310926][ T5628] veth0_macvtap: entered promiscuous mode [ 91.353248][ T5628] veth1_macvtap: entered promiscuous mode [ 91.378043][ T5622] veth0_vlan: entered promiscuous mode [ 91.421359][ T5610] veth0_macvtap: entered promiscuous mode [ 91.470902][ T5612] veth0_vlan: entered promiscuous mode [ 91.478550][ T5622] veth1_vlan: entered promiscuous mode [ 91.514162][ T5610] veth1_macvtap: entered promiscuous mode [ 91.564038][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.607672][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.636554][ T5612] veth1_vlan: entered promiscuous mode [ 91.663144][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.727729][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.758393][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.769392][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.779262][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.788801][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.890644][ T5622] veth0_macvtap: entered promiscuous mode [ 91.901536][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.914679][ T5622] veth1_macvtap: entered promiscuous mode [ 91.920712][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.944833][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.000573][ T5612] veth0_macvtap: entered promiscuous mode [ 92.047598][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.133129][ T5612] veth1_macvtap: entered promiscuous mode [ 92.163239][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.186098][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.199982][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.306189][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.321386][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.342077][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.376756][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.422984][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.434968][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.459284][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.523441][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.556655][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.564895][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.591173][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.665730][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.731157][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.739698][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.760966][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.768797][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.833796][ T1111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.922401][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.971047][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.984361][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.001994][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.111259][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.122812][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.158982][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.191384][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.287559][ T1111] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.327234][ T1111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.471928][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.481859][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.509565][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.525526][ T5749] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 93.574243][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.652928][ T1111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.732394][ T1111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.771454][ T5749] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 93.831501][ T5749] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 93.870883][ T5749] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 93.929295][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.527818][ T5749] pegasus 2-1:1.0: can't reset MAC [ 95.557586][ T5749] pegasus 2-1:1.0: probe with driver pegasus failed with error -5 [ 95.635861][ T5749] usb 2-1: USB disconnect, device number 2 [ 96.033428][ T5902] syzkaller0: entered promiscuous mode [ 96.051337][ T5902] syzkaller0: entered allmulticast mode [ 96.082317][ T5902] tipc: Started in network mode [ 96.106332][ T5902] tipc: Node identity 4273823626be, cluster identity 4711 [ 96.129681][ T5902] tipc: Enabled bearer , priority 0 [ 96.162231][ T5901] tipc: Resetting bearer [ 96.233125][ T5901] tipc: Disabling bearer [ 98.189905][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27'. [ 98.482035][ T5931] fuse: Bad value for 'fd' [ 98.600150][ T5821] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.785517][ T5821] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 98.797930][ T5821] usb 1-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 98.808310][ T5821] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 98.831202][ T5821] usb 1-1: config 220 interface 0 has no altsetting 0 [ 98.869207][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.902954][ T5821] usb 1-1: Product: syz [ 98.926268][ T5821] usb 1-1: Manufacturer: syz [ 98.946351][ T5821] usb 1-1: SerialNumber: syz [ 99.074358][ T5938] syz.5.34 uses obsolete (PF_INET,SOCK_PACKET) [ 99.126386][ T5938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.439086][ T5928] nvme nvme0: failed to connect socket: -111 [ 99.569034][ T5821] uvcvideo 1-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 99.591094][ T5821] uvcvideo 1-1:220.0: No valid video chain found. [ 99.621780][ T5821] usb 1-1: USB disconnect, device number 2 [ 99.966658][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.41'. [ 100.191717][ T5821] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 100.255673][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 100.363497][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 100.387246][ T5821] usb 6-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 100.417787][ T5821] usb 6-1: config 0 has no interfaces? [ 100.437303][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.493401][ T5821] usb 6-1: config 0 descriptor?? [ 100.699538][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 100.717811][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.740584][ T5821] usb 6-1: USB disconnect, device number 2 [ 100.828798][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.49'. [ 100.851373][ T5973] netlink: 32 bytes leftover after parsing attributes in process `syz.3.49'. [ 100.920610][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.968387][ T5976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.977370][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.977412][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.977439][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.977485][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.982003][ T10] usb 1-1: config 0 descriptor?? [ 101.257633][ T30] audit: type=1326 audit(1787069438.691:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.54" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdda59e0d9 code=0x0 [ 101.515424][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 101.552445][ T185] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.693258][ T5731] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 101.712181][ T185] usb 4-1: Using ep0 maxpacket: 16 [ 101.719758][ T185] usb 4-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 101.735994][ T185] usb 4-1: config index 0 descriptor too short (expected 28271, got 18) [ 101.746979][ T185] usb 4-1: config 114 has too many interfaces: 116, using maximum allowed: 32 [ 101.768413][ T185] usb 4-1: config 114 has an invalid descriptor of length 0, skipping remainder of the config [ 101.790378][ T185] usb 4-1: config 114 has 0 interfaces, different from the descriptor's value: 116 [ 101.804116][ T185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.814552][ T185] usb 4-1: Product: syz [ 101.826133][ T185] usb 4-1: Manufacturer: syz [ 101.838554][ T185] usb 4-1: SerialNumber: syz [ 101.852627][ T5731] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 101.868094][ T5731] usb 6-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 101.893084][ T5731] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 101.913954][ T5731] usb 6-1: config 220 interface 0 has no altsetting 0 [ 101.926399][ T5731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.937565][ T5731] usb 6-1: Product: syz [ 101.947418][ T5731] usb 6-1: Manufacturer: syz [ 101.957247][ T5731] usb 6-1: SerialNumber: syz [ 102.265162][ T185] usb 4-1: USB disconnect, device number 2 [ 102.308196][ T5986] nvme nvme0: failed to connect socket: -111 [ 102.388863][ T5731] uvcvideo 6-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 102.418195][ T5731] uvcvideo 6-1:220.0: No valid video chain found. [ 102.456723][ T5731] usb 6-1: USB disconnect, device number 3 [ 102.788481][ T5876] Set syz1 is full, maxelem 65536 reached [ 102.985725][ T6024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.017798][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 103.191743][ T5821] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.342771][ T6039] Zero length message leads to an empty skb [ 103.349824][ T6039] syzkaller0: entered promiscuous mode [ 103.357281][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 103.362764][ T6039] syzkaller0: entered allmulticast mode [ 103.369517][ T5821] usb 2-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 103.384158][ T6039] tipc: Started in network mode [ 103.396430][ T5821] usb 2-1: config 0 has no interfaces? [ 103.402720][ T6039] tipc: Node identity 8665a26286d9, cluster identity 4711 [ 103.410487][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.419129][ T6039] tipc: Enabled bearer , priority 0 [ 103.446932][ T5821] usb 2-1: config 0 descriptor?? [ 103.452895][ T6038] tipc: Resetting bearer [ 103.506664][ T6038] tipc: Disabling bearer [ 103.516689][ T5821] usb 1-1: USB disconnect, device number 3 [ 103.676976][ T24] usb 2-1: USB disconnect, device number 3 [ 104.072190][ T5821] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 104.082155][ T3096] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.161806][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.234810][ T5821] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 104.244904][ T3096] usb 4-1: Using ep0 maxpacket: 16 [ 104.257219][ T3096] usb 4-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 104.268588][ T5821] usb 6-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 104.284038][ T5821] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 104.294450][ T5821] usb 6-1: config 220 interface 0 has no altsetting 0 [ 104.294684][ T3096] usb 4-1: config index 0 descriptor too short (expected 28271, got 18) [ 104.316561][ T3096] usb 4-1: config 114 has too many interfaces: 116, using maximum allowed: 32 [ 104.325693][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 104.336515][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.347226][ T3096] usb 4-1: config 114 has an invalid descriptor of length 0, skipping remainder of the config [ 104.357857][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 104.367969][ T5821] usb 6-1: Product: syz [ 104.372374][ T5821] usb 6-1: Manufacturer: syz [ 104.377182][ T3096] usb 4-1: config 114 has 0 interfaces, different from the descriptor's value: 116 [ 104.389266][ T5821] usb 6-1: SerialNumber: syz [ 104.394601][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.409452][ T3096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.424409][ T24] usb 1-1: config 0 descriptor?? [ 104.430141][ T3096] usb 4-1: Product: syz [ 104.434765][ T3096] usb 4-1: Manufacturer: syz [ 104.443763][ T3096] usb 4-1: SerialNumber: syz [ 104.478478][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 104.581943][ T5761] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.763430][ T5761] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 104.808794][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.830993][ T5761] usb 5-1: Product: syz [ 104.860777][ T5761] usb 5-1: Manufacturer: syz [ 104.885300][ T6056] nvme nvme0: failed to connect socket: -111 [ 104.892920][ T5761] usb 5-1: SerialNumber: syz [ 104.914053][ T5761] usb 5-1: config 0 descriptor?? [ 104.935318][ T3096] usb 4-1: USB disconnect, device number 3 [ 104.995891][ T5821] uvcvideo 6-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 105.007698][ T24] gspca_sunplus: reg_w_riv err -71 [ 105.020706][ T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 105.028856][ T5821] uvcvideo 6-1:220.0: No valid video chain found. [ 105.050576][ T24] usb 1-1: USB disconnect, device number 4 [ 105.078652][ T5821] usb 6-1: USB disconnect, device number 4 [ 105.202357][ T185] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.373461][ T185] usb 3-1: Using ep0 maxpacket: 16 [ 105.388356][ T185] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.409048][ T185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.423218][ T185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.425151][ T6061] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.444524][ T185] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.472597][ T185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.528841][ T185] usb 3-1: config 0 descriptor?? [ 105.545652][ T6061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.628166][ T5761] usb 5-1: Firmware version (0.0) predates our first public release. [ 105.668962][ T5761] usb 5-1: Please update to version 0.2 or newer [ 105.865996][ T5761] usb 5-1: USB disconnect, device number 2 [ 106.034569][ T185] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 106.066696][ T185] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 106.105534][ T185] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 106.155790][ T185] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 106.200867][ T185] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 106.239057][ T185] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 106.293325][ T185] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 106.344226][ T185] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 106.420630][ T185] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 106.503116][ T185] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 106.705192][ T6115] tipc: Enabled bearer , priority 0 [ 106.710773][ T185] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input6 [ 106.808764][ T185] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 106.907108][ T185] usb 3-1: USB disconnect, device number 2 [ 107.019950][ T6111] syzkaller0: entered promiscuous mode [ 107.036073][ T6111] syzkaller0: entered allmulticast mode [ 107.086768][ T6120] fido_id[6120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 107.130306][ T6095] tipc: Resetting bearer [ 107.228347][ T6095] tipc: Disabling bearer [ 107.459855][ T185] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.565272][ T30] audit: type=1326 audit(1787069445.001:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6135 comm="syz.0.104" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3bdf9e0d9 code=0x0 [ 107.642445][ T185] usb 3-1: Using ep0 maxpacket: 32 [ 107.659551][ T185] usb 3-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 107.670552][ T185] usb 3-1: config 0 has no interfaces? [ 107.677483][ T185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.698073][ T185] usb 3-1: config 0 descriptor?? [ 107.911820][ T5761] usb 3-1: USB disconnect, device number 3 [ 107.962670][ T5731] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.963052][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.121827][ T5731] usb 2-1: Using ep0 maxpacket: 16 [ 108.127852][ T5731] usb 2-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 108.140153][ T5731] usb 2-1: config index 0 descriptor too short (expected 28271, got 18) [ 108.143099][ T29] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 108.148656][ T5731] usb 2-1: config 114 has too many interfaces: 116, using maximum allowed: 32 [ 108.177812][ T5731] usb 2-1: config 114 has an invalid descriptor of length 0, skipping remainder of the config [ 108.181951][ T29] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 108.190542][ T5731] usb 2-1: config 114 has 0 interfaces, different from the descriptor's value: 116 [ 108.214138][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.222994][ T5731] usb 2-1: Product: syz [ 108.227593][ T5731] usb 2-1: Manufacturer: syz [ 108.233341][ T29] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 108.234565][ T5731] usb 2-1: SerialNumber: syz [ 108.254650][ T29] usb 4-1: config 220 interface 0 has no altsetting 0 [ 108.279457][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.300712][ T29] usb 4-1: Product: syz [ 108.314490][ T29] usb 4-1: Manufacturer: syz [ 108.326457][ T29] usb 4-1: SerialNumber: syz [ 108.439033][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.108'. [ 108.559007][ T5269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.729225][ T6141] nvme nvme0: failed to connect socket: -111 [ 108.737804][ T5731] usb 2-1: USB disconnect, device number 4 [ 108.941954][ T29] uvcvideo 4-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 108.961109][ T29] uvcvideo 4-1:220.0: No valid video chain found. [ 109.010038][ T29] usb 4-1: USB disconnect, device number 4 [ 109.101980][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.121172][ T6183] syzkaller0: entered promiscuous mode [ 109.144069][ T6183] syzkaller0: entered allmulticast mode [ 109.173760][ T6183] tipc: Enabled bearer , priority 0 [ 109.194800][ T6181] tipc: Resetting bearer [ 109.217033][ T6181] tipc: Disabling bearer [ 109.272087][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 109.281171][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 109.310131][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 109.325802][ T6191] netlink: 'syz.4.120': attribute type 8 has an invalid length. [ 109.330141][ T10] usb 1-1: config 0 has no interface number 0 [ 109.350647][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 109.364565][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.387825][ T10] usb 1-1: Product: syz [ 109.399762][ T10] usb 1-1: Manufacturer: syz [ 109.410645][ T10] usb 1-1: SerialNumber: syz [ 109.433172][ T10] usb 1-1: config 0 descriptor?? [ 109.464570][ T6189] [U]  [ 109.974058][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 110.378704][ T6226] syzkaller0: entered promiscuous mode [ 110.398561][ T6226] syzkaller0: entered allmulticast mode [ 110.429512][ T6226] tipc: Started in network mode [ 110.440596][ T6226] tipc: Node identity 226f8d39f5e4, cluster identity 4711 [ 110.455957][ T6226] tipc: Enabled bearer , priority 0 [ 110.464948][ T6225] tipc: Resetting bearer [ 110.483576][ T6225] tipc: Disabling bearer [ 110.692012][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.863225][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 110.875700][ T24] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 110.888052][ T24] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 110.897408][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 110.907568][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.916375][ T24] usb 2-1: Product: syz [ 110.932815][ T24] usb 2-1: Manufacturer: syz [ 110.942300][ T24] usb 2-1: SerialNumber: syz [ 110.970814][ T6245] syzkaller0: entered promiscuous mode [ 110.976431][ T6245] syzkaller0: entered allmulticast mode [ 110.988016][ T6245] tipc: Enabled bearer , priority 0 [ 110.999194][ T6245] tipc: Resetting bearer [ 111.007584][ T6244] tipc: Resetting bearer [ 111.020296][ T6244] tipc: Disabling bearer [ 111.092715][ T5761] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 111.230759][ T6228] nvme nvme0: failed to connect socket: -111 [ 111.245249][ T5761] usb 6-1: device descriptor read/64, error -71 [ 111.283833][ T24] uvcvideo 2-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 111.300274][ T24] uvcvideo 2-1:220.0: No valid video chain found. [ 111.310045][ T10] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 111.315950][ T24] usb 2-1: USB disconnect, device number 5 [ 111.332521][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 111.340022][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 111.355712][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 111.373288][ T10] usb 1-1: USB disconnect, device number 5 [ 111.501782][ T5761] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 111.581705][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.651712][ T5761] usb 6-1: device descriptor read/64, error -71 [ 111.711794][ T29] usb 5-1: device descriptor read/64, error -71 [ 111.774347][ T5761] usb usb6-port1: attempt power cycle [ 111.951734][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.978979][ T6261] syzkaller0: entered promiscuous mode [ 111.984656][ T6261] syzkaller0: entered allmulticast mode [ 111.997348][ T6261] tipc: Enabled bearer , priority 0 [ 112.005056][ T6260] tipc: Resetting bearer [ 112.019074][ T6260] tipc: Disabling bearer [ 112.093360][ T29] usb 5-1: device descriptor read/64, error -71 [ 112.123559][ T5761] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 112.154739][ T5761] usb 6-1: device descriptor read/8, error -71 [ 112.172797][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.213183][ T29] usb usb5-port1: attempt power cycle [ 112.240648][ T6267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.321694][ T24] usb 2-1: device descriptor read/64, error -71 [ 112.411735][ T5761] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 112.443360][ T5761] usb 6-1: device descriptor read/8, error -71 [ 112.571841][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 112.573364][ T5761] usb usb6-port1: unable to enumerate USB device [ 112.579878][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.613529][ T29] usb 5-1: device descriptor read/8, error -71 [ 112.724747][ T24] usb 2-1: device descriptor read/64, error -71 [ 112.852799][ T24] usb usb2-port1: attempt power cycle [ 112.871686][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.903194][ T29] usb 5-1: device descriptor read/8, error -71 [ 113.021948][ T29] usb usb5-port1: unable to enumerate USB device [ 113.221706][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 113.242458][ T24] usb 2-1: device descriptor read/8, error -71 [ 113.361699][ T5761] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.482454][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.501708][ T5761] usb 1-1: device descriptor read/64, error -71 [ 113.502371][ T24] usb 2-1: device descriptor read/8, error -71 [ 113.622751][ T24] usb usb2-port1: unable to enumerate USB device [ 113.762574][ T5761] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.845092][ T6292] syzkaller0: entered promiscuous mode [ 113.850690][ T6292] syzkaller0: entered allmulticast mode [ 113.867850][ T6292] tipc: Started in network mode [ 113.882729][ T6292] tipc: Node identity 6a45f6d73119, cluster identity 4711 [ 113.893594][ T5761] usb 1-1: device descriptor read/64, error -71 [ 113.899154][ T6292] tipc: Enabled bearer , priority 0 [ 113.914601][ T6291] tipc: Resetting bearer [ 113.929744][ T6291] tipc: Disabling bearer [ 114.012032][ T5761] usb usb1-port1: attempt power cycle [ 114.373170][ T5761] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.424617][ T5761] usb 1-1: device descriptor read/8, error -71 [ 114.691977][ T5761] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 114.712383][ T5761] usb 1-1: device descriptor read/8, error -71 [ 114.831992][ T5761] usb usb1-port1: unable to enumerate USB device [ 114.931708][ T5731] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.054118][ T6325] syzkaller0: entered promiscuous mode [ 115.059645][ T6325] syzkaller0: entered allmulticast mode [ 115.070062][ T6325] tipc: Started in network mode [ 115.075059][ T6325] tipc: Node identity 96302ac36b0f, cluster identity 4711 [ 115.083485][ T6325] tipc: Enabled bearer , priority 0 [ 115.091378][ T6324] tipc: Resetting bearer [ 115.105071][ T6324] tipc: Disabling bearer [ 115.122052][ T5731] usb 5-1: Using ep0 maxpacket: 32 [ 115.128236][ T5731] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 115.141983][ T5731] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.154464][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.162683][ T5731] usb 5-1: Product: syz [ 115.166912][ T5731] usb 5-1: Manufacturer: syz [ 115.171523][ T5731] usb 5-1: SerialNumber: syz [ 115.179731][ T5731] usb 5-1: config 0 descriptor?? [ 115.245608][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 115.489831][ T6336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.182'. [ 115.520322][ T6336] ip6gre1: entered promiscuous mode [ 115.529170][ T6336] ip6gre1: entered allmulticast mode [ 115.551833][ T1111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.571049][ T1111] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.580606][ T5731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.212326][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 116.220343][ T6359] syzkaller0: entered promiscuous mode [ 116.226724][ T6359] syzkaller0: entered allmulticast mode [ 116.236753][ T6359] tipc: Enabled bearer , priority 0 [ 116.245773][ T6357] tipc: Resetting bearer [ 116.272773][ T6357] tipc: Disabling bearer [ 116.291691][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 116.331844][ T5731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.452540][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 116.470937][ T29] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 116.496327][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.508001][ T29] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 116.519466][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.527542][ T29] usb 6-1: Product: syz [ 116.531839][ T29] usb 6-1: Manufacturer: syz [ 116.536442][ T29] usb 6-1: SerialNumber: syz [ 116.543834][ T29] usb 6-1: config 0 descriptor?? [ 116.571933][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 116.733541][ T5731] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 116.755773][ T5749] usb 6-1: USB disconnect, device number 9 [ 116.881827][ T5731] usb 1-1: device descriptor read/64, error -71 [ 117.014570][ T6377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.197'. [ 117.132294][ T5731] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 117.201714][ T29] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 117.282238][ T5731] usb 1-1: device descriptor read/64, error -71 [ 117.352593][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 117.363879][ T29] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 117.390647][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.403239][ T5731] usb usb1-port1: attempt power cycle [ 117.412659][ T29] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 117.424386][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.432703][ T29] usb 6-1: Product: syz [ 117.444423][ T29] usb 6-1: Manufacturer: syz [ 117.457470][ T29] usb 6-1: SerialNumber: syz [ 117.476994][ T29] usb 6-1: config 0 descriptor?? [ 117.721765][ T10] usb 5-1: USB disconnect, device number 7 [ 117.764194][ T5731] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 117.800007][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 117.810899][ T5731] usb 1-1: device descriptor read/8, error -71 [ 117.841694][ T29] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.851730][ T5821] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 117.991740][ T5821] usb 2-1: device descriptor read/64, error -71 [ 118.013523][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 118.020486][ T29] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 118.044786][ T29] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 118.057384][ T30] audit: type=1326 audit(1787069455.481:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz.4.208" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecde59e0d9 code=0x0 [ 118.081701][ T29] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 118.084768][ T5731] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 118.095048][ T29] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.116078][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.122767][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.132628][ T5731] usb 1-1: device descriptor read/8, error -71 [ 118.140902][ T29] usb 3-1: config 0 descriptor?? [ 118.159776][ T6405] fuse: Bad value for 'fd' [ 118.241690][ T5821] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 118.243721][ T5731] usb usb1-port1: unable to enumerate USB device [ 118.371856][ T5821] usb 2-1: device descriptor read/64, error -71 [ 118.478534][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 118.485742][ T5821] usb usb2-port1: attempt power cycle [ 118.491226][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 118.504794][ T29] usb 3-1: USB disconnect, device number 4 [ 118.831721][ T5821] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 118.853454][ T5821] usb 2-1: device descriptor read/8, error -71 [ 119.046968][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 119.088808][ T5731] usb 6-1: USB disconnect, device number 10 [ 119.092022][ T5821] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 119.132528][ T5821] usb 2-1: device descriptor read/8, error -71 [ 119.252166][ T5821] usb usb2-port1: unable to enumerate USB device [ 119.371826][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.122333][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 120.146135][ T30] audit: type=1326 audit(1787069457.571:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6435 comm="syz.4.221" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecde59e0d9 code=0x0 [ 120.265973][ T6441] fuse: Bad value for 'fd' [ 120.347286][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 120.362070][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 120.368804][ T10] usb 1-1: New USB device found, idVendor=056a, idProduct=06c5, bcdDevice= 0.00 [ 120.388535][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 120.404341][ T5821] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 120.421765][ T10] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.441860][ T10] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 120.459349][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.467668][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.507985][ T10] usb 1-1: config 0 descriptor?? [ 120.562629][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 120.575978][ T5821] usb 6-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 120.587722][ T5821] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 120.599352][ T5821] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 120.611140][ T5821] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.625785][ T5821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 120.633229][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.646919][ T5821] usb 6-1: config 0 descriptor?? [ 120.788351][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'. [ 120.819460][ T6454] ip6gre2: entered promiscuous mode [ 120.834672][ T6454] ip6gre2: entered allmulticast mode [ 120.848314][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 120.878640][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 120.887215][ T12] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 120.980469][ T10] wacom 0003:056A:06C5.0003: ignoring exceeding usage max [ 121.038519][ T10] hid_parser_main: 5 callbacks suppressed [ 121.038541][ T10] wacom 0003:056A:06C5.0003: unknown main item tag 0x0 [ 121.040359][ T5821] usbhid 6-1:0.0: can't add hid device: -71 [ 121.058056][ T10] wacom 0003:056A:06C5.0003: unknown main item tag 0x0 [ 121.071876][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 121.100571][ T5821] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 121.105902][ T10] wacom 0003:056A:06C5.0003: unknown main item tag 0x0 [ 121.131043][ T5821] usb 6-1: USB disconnect, device number 11 [ 121.137607][ T10] wacom 0003:056A:06C5.0003: unknown main item tag 0x0 [ 121.168159][ T10] wacom 0003:056A:06C5.0003: unknown main item tag 0x0 [ 121.196053][ T10] wacom 0003:056A:06C5.0003: unknown main item tag 0x0 [ 121.218240][ T10] wacom 0003:056A:06C5.0003: unknown main item tag 0x0 [ 121.239465][ T10] wacom 0003:056A:06C5.0003: unknown main item tag 0x0 [ 121.246461][ T5749] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.263633][ T10] wacom 0003:056A:06C5.0003: unknown main item tag 0x0 [ 121.276338][ T10] wacom 0003:056A:06C5.0003: unknown main item tag 0x0 [ 121.287264][ T10] wacom 0003:056A:06C5.0003: Unknown device_type for 'HID 056a:06c5'. Ignoring. [ 121.304407][ T10] usb 1-1: USB disconnect, device number 14 [ 121.351870][ T5821] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 121.428359][ T5749] usb 3-1: Using ep0 maxpacket: 8 [ 121.442494][ T5749] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 121.460499][ T5749] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.481153][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.490178][ T5749] usb 3-1: Product: syz [ 121.495917][ T5749] usb 3-1: Manufacturer: syz [ 121.500671][ T5749] usb 3-1: SerialNumber: syz [ 121.510144][ T5749] usb 3-1: config 0 descriptor?? [ 121.651696][ T5821] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 121.822494][ T5821] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 121.842962][ T5821] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 121.860512][ T5821] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 121.880895][ T5821] usb 2-1: config 220 has no interface number 2 [ 121.899544][ T5821] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 121.932975][ T5821] usb 2-1: config 220 interface 0 has no altsetting 0 [ 121.945677][ T5821] usb 2-1: config 220 interface 76 has no altsetting 0 [ 121.953126][ T5821] usb 2-1: config 220 interface 1 has no altsetting 0 [ 121.974132][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.994323][ T5821] usb 2-1: Product: syz [ 122.003631][ T5821] usb 2-1: Manufacturer: syz [ 122.014378][ T5821] usb 2-1: SerialNumber: syz [ 122.051965][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 122.212659][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 122.219521][ T24] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 122.242770][ T24] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 122.259437][ T24] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 122.271111][ T24] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 122.283273][ T24] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 122.296378][ T24] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 122.311051][ T24] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 122.321008][ T5821] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 122.336280][ T5821] uvcvideo 2-1:220.0: No valid video chain found. [ 122.338928][ T30] audit: type=1326 audit(1787069459.771:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.5.246" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd6a19e0d9 code=0x0 [ 122.349985][ T24] usb 1-1: string descriptor 0 read error: -22 [ 122.373023][ T5821] usb 2-1: selecting invalid altsetting 0 [ 122.386886][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.397004][ T5821] usb 2-1: selecting invalid altsetting 0 [ 122.406928][ T5821] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 122.417034][ T24] usb 1-1: rejected 3 configurations due to insufficient available bus power [ 122.427337][ T24] usb 1-1: no configuration chosen from 3 choices [ 122.435837][ T5821] usb 2-1: USB disconnect, device number 14 [ 122.446401][ T6500] fuse: Bad value for 'fd' [ 123.451738][ T5821] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.601729][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 123.607604][ T5821] usb 5-1: New USB device found, idVendor=056a, idProduct=06c5, bcdDevice= 0.00 [ 123.618205][ T5821] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 123.632961][ T5821] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.644161][ T5821] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 123.657346][ T5821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.664041][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.674891][ T5821] usb 5-1: config 0 descriptor?? [ 123.997971][ T5731] usb 3-1: USB disconnect, device number 5 [ 124.102388][ T5821] wacom 0003:056A:06C5.0004: ignoring exceeding usage max [ 124.133527][ T5821] wacom 0003:056A:06C5.0004: Unknown device_type for 'HID 056a:06c5'. Ignoring. [ 124.260001][ T6537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.261'. [ 124.275161][ T6537] ip6gre1: entered promiscuous mode [ 124.280420][ T6537] ip6gre1: entered allmulticast mode [ 124.298594][ T5731] usb 5-1: USB disconnect, device number 8 [ 124.491728][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 124.553776][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.576998][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.645031][ T5749] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 124.665883][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.688710][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.703119][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.721272][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.751920][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.768997][ T30] audit: type=1326 audit(1787069462.201:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6547 comm="syz.2.266" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14a5d9e0d9 code=0x0 [ 124.809846][ T29] usb 6-1: config 0 descriptor?? [ 124.829689][ T5749] usb 1-1: USB disconnect, device number 15 [ 124.911901][ T5731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.009504][ T6551] syzkaller1: entered allmulticast mode [ 125.122005][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.285056][ T29] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 125.285431][ T5731] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 125.491710][ T5731] usb 5-1: Using ep0 maxpacket: 8 [ 125.498479][ T5731] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 125.524822][ T5731] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.547524][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.569557][ T5731] usb 5-1: Product: syz [ 125.576282][ T5731] usb 5-1: Manufacturer: syz [ 125.581300][ T5731] usb 5-1: SerialNumber: syz [ 125.593438][ T5731] usb 5-1: config 0 descriptor?? [ 126.383860][ T6601] syzkaller0: entered promiscuous mode [ 126.389381][ T6601] syzkaller0: entered allmulticast mode [ 126.403890][ T6601] tipc: Started in network mode [ 126.408820][ T6601] tipc: Node identity ca851990a1fa, cluster identity 4711 [ 126.416688][ T6601] tipc: Enabled bearer , priority 0 [ 126.429342][ T6601] tipc: Resetting bearer [ 126.437546][ T6600] tipc: Resetting bearer [ 126.451050][ T6600] tipc: Disabling bearer [ 126.840654][ T30] audit: type=1326 audit(1787069464.271:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6613 comm="syz.2.292" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14a5d9e0d9 code=0x0 [ 126.971779][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 126.971799][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.221736][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.262414][ T29] usb 6-1: USB disconnect, device number 12 [ 127.382442][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 127.394502][ T10] usb 4-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 127.406347][ T10] usb 4-1: config index 0 descriptor too short (expected 28271, got 18) [ 127.415942][ T10] usb 4-1: config 114 has too many interfaces: 116, using maximum allowed: 32 [ 127.427737][ T10] usb 4-1: config 114 has an invalid descriptor of length 0, skipping remainder of the config [ 127.441341][ T10] usb 4-1: config 114 has 0 interfaces, different from the descriptor's value: 116 [ 127.454440][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.465513][ T10] usb 4-1: Product: syz [ 127.469782][ T10] usb 4-1: Manufacturer: syz [ 127.475408][ T10] usb 4-1: SerialNumber: syz [ 127.891313][ T6646] syzkaller0: entered promiscuous mode [ 127.917525][ T10] usb 4-1: USB disconnect, device number 5 [ 127.925402][ T6646] syzkaller0: entered allmulticast mode [ 127.959620][ T6646] tipc: Enabled bearer , priority 0 [ 128.003286][ T6646] tipc: Resetting bearer [ 128.026505][ T6645] tipc: Resetting bearer [ 128.084508][ T6645] tipc: Disabling bearer [ 128.098124][ T5749] usb 5-1: USB disconnect, device number 9 [ 128.711681][ T29] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 128.754137][ T30] audit: type=1326 audit(1787069466.191:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.5.311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd6a19e0d9 code=0x0 [ 128.811866][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 128.881725][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 128.898033][ T29] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 128.940075][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.967420][ T29] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 128.987835][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.996961][ T29] usb 5-1: Product: syz [ 129.001201][ T29] usb 5-1: Manufacturer: syz [ 129.011817][ T29] usb 5-1: SerialNumber: syz [ 129.041008][ T29] usb 5-1: config 0 descriptor?? [ 129.501785][ T29] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 129.521892][ T5731] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.662727][ T29] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 129.688021][ T29] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 129.707929][ T29] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 129.708337][ T5731] usb 3-1: Using ep0 maxpacket: 8 [ 129.741505][ T29] usb 1-1: config 220 has no interface number 2 [ 129.742332][ T5731] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 129.764512][ T29] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 129.767215][ T5731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.789591][ T5731] usb 3-1: Product: syz [ 129.821404][ T5731] usb 3-1: Manufacturer: syz [ 129.827171][ T29] usb 1-1: config 220 interface 0 has no altsetting 0 [ 129.834176][ T5731] usb 3-1: SerialNumber: syz [ 129.852049][ T29] usb 1-1: config 220 interface 76 has no altsetting 0 [ 129.873997][ T29] usb 1-1: config 220 interface 1 has no altsetting 0 [ 129.896721][ T5731] usb 3-1: config 0 descriptor?? [ 129.914701][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.920440][ T5731] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 129.955890][ T29] usb 1-1: Product: syz [ 129.969857][ T29] usb 1-1: Manufacturer: syz [ 129.986434][ T29] usb 1-1: SerialNumber: syz [ 130.244316][ T29] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 130.275120][ T29] uvcvideo 1-1:220.0: No valid video chain found. [ 130.293657][ T29] usb 1-1: selecting invalid altsetting 0 [ 130.325011][ T29] usb 1-1: selecting invalid altsetting 0 [ 130.325462][ T6704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.320'. [ 130.339668][ T29] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 130.344743][ T29] usb 1-1: USB disconnect, device number 16 [ 130.353167][ T5731] gspca_sonixj: reg_r err -32 [ 130.359998][ T5731] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 130.415001][ T6704] ip6gre1: entered promiscuous mode [ 130.430443][ T6704] ip6gre1: entered allmulticast mode [ 130.440349][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.448968][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.462750][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.491911][ T5784] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.543218][ T5821] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 130.691680][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 130.702004][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 130.707766][ T5821] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 130.718033][ T5821] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.726094][ T5821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.737595][ T5821] usb 6-1: config 0 has no interface number 0 [ 130.743752][ T5821] usb 6-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.756733][ T5821] usb 6-1: config 0 interface 1 has no altsetting 0 [ 130.766467][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.774625][ T5821] usb 6-1: Product: syz [ 130.778809][ T5821] usb 6-1: Manufacturer: syz [ 130.783489][ T5821] usb 6-1: SerialNumber: syz [ 130.793494][ T5821] usb 6-1: config 0 descriptor?? [ 130.853092][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 130.863066][ T10] usb 2-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 130.875847][ T10] usb 2-1: config index 0 descriptor too short (expected 28271, got 18) [ 130.885848][ T10] usb 2-1: config 114 has too many interfaces: 116, using maximum allowed: 32 [ 130.895125][ T10] usb 2-1: config 114 has an invalid descriptor of length 0, skipping remainder of the config [ 130.911316][ T10] usb 2-1: config 114 has 0 interfaces, different from the descriptor's value: 116 [ 130.924432][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.934103][ T10] usb 2-1: Product: syz [ 130.939336][ T10] usb 2-1: Manufacturer: syz [ 130.944634][ T10] usb 2-1: SerialNumber: syz [ 131.000452][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 131.027462][ T5821] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 131.036869][ T5821] cx231xx 6-1:0.1: Not found matching IAD interface [ 131.049666][ T5821] usb 6-1: USB disconnect, device number 13 [ 131.268918][ T10] usb 2-1: USB disconnect, device number 15 [ 131.292056][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.484954][ T185] usb 5-1: USB disconnect, device number 10 [ 131.533940][ T5821] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 131.538709][ T30] audit: type=1326 audit(1787069468.971:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6724 comm="syz.4.327" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecde59e0d9 code=0x0 [ 131.661749][ T5749] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.691827][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 131.698843][ T5821] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 131.709966][ T5821] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 131.719646][ T5821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.729947][ T5821] usb 6-1: config 0 has no interface number 0 [ 131.736100][ T5821] usb 6-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.749142][ T5821] usb 6-1: config 0 interface 1 has no altsetting 0 [ 131.758587][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.766698][ T5821] usb 6-1: Product: syz [ 131.770869][ T5821] usb 6-1: Manufacturer: syz [ 131.775583][ T5821] usb 6-1: SerialNumber: syz [ 131.790641][ T5821] usb 6-1: config 0 descriptor?? [ 131.827636][ T5749] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 131.839083][ T5749] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 131.850744][ T5749] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 131.866381][ T5749] usb 4-1: config 220 interface 0 has no altsetting 0 [ 131.875649][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.884062][ T5749] usb 4-1: Product: syz [ 131.888328][ T5749] usb 4-1: Manufacturer: syz [ 131.893385][ T5749] usb 4-1: SerialNumber: syz [ 132.004825][ T5821] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 132.015001][ T5821] cx231xx 6-1:0.1: Not found matching IAD interface [ 132.097434][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.104759][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.189985][ T6722] nvme nvme0: failed to connect socket: -111 [ 132.235041][ T5749] uvcvideo 4-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 132.243499][ T5749] uvcvideo 4-1:220.0: No valid video chain found. [ 132.258947][ T5749] usb 4-1: USB disconnect, device number 6 [ 132.336249][ T5784] usb 3-1: USB disconnect, device number 6 [ 133.331258][ T24] usb 6-1: USB disconnect, device number 14 [ 133.431907][ T5784] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.591740][ T5784] usb 3-1: Using ep0 maxpacket: 32 [ 133.607478][ T5784] usb 3-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 133.628181][ T5784] usb 3-1: config 0 has no interfaces? [ 133.634380][ T3096] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 133.642424][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.658868][ T5784] usb 3-1: config 0 descriptor?? [ 133.762552][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 133.801704][ T3096] usb 4-1: Using ep0 maxpacket: 16 [ 133.814081][ T3096] usb 4-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 133.832246][ T3096] usb 4-1: config index 0 descriptor too short (expected 28271, got 18) [ 133.851984][ T3096] usb 4-1: config 114 has too many interfaces: 116, using maximum allowed: 32 [ 133.862159][ T3096] usb 4-1: config 114 has an invalid descriptor of length 0, skipping remainder of the config [ 133.880308][ T3096] usb 4-1: config 114 has 0 interfaces, different from the descriptor's value: 116 [ 133.894651][ T5784] usb 3-1: USB disconnect, device number 7 [ 133.910863][ T3096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.929192][ T3096] usb 4-1: Product: syz [ 133.939960][ T3096] usb 4-1: Manufacturer: syz [ 133.946834][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 133.952292][ T3096] usb 4-1: SerialNumber: syz [ 133.957507][ T24] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 133.969131][ T24] usb 6-1: no configurations [ 133.985747][ T24] usb 6-1: can't read configurations, error -22 [ 134.091935][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.104139][ T6776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.122288][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 134.281737][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 134.292137][ T3096] usb 4-1: USB disconnect, device number 7 [ 134.309473][ T24] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 134.323251][ T24] usb 6-1: no configurations [ 134.348634][ T24] usb 6-1: can't read configurations, error -22 [ 134.367603][ T24] usb usb6-port1: attempt power cycle [ 134.651785][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 134.681704][ T5784] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 134.710628][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 134.733073][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 134.766324][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 134.779422][ T24] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 134.794507][ T24] usb 6-1: no configurations [ 134.799130][ T24] usb 6-1: can't read configurations, error -22 [ 134.851720][ T5784] usb 1-1: Using ep0 maxpacket: 32 [ 134.858734][ T5784] usb 1-1: New USB device found, idVendor=056a, idProduct=06c5, bcdDevice= 0.00 [ 134.875670][ T5784] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 134.911678][ T5784] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.930720][ T5784] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 134.962976][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 134.983918][ T5784] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.991500][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.007951][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 135.016238][ T24] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 135.030548][ T24] usb 6-1: no configurations [ 135.036724][ T5784] usb 1-1: config 0 descriptor?? [ 135.054119][ T24] usb 6-1: can't read configurations, error -22 [ 135.081921][ T24] usb usb6-port1: unable to enumerate USB device [ 135.330710][ T30] audit: type=1326 audit(1787069472.761:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.3.359" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f922639e0d9 code=0x0 [ 135.487877][ T5784] usbhid 1-1:0.0: can't add hid device: -71 [ 135.509931][ T5784] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 135.533085][ T30] audit: type=1804 audit(1787069472.961:12): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.359" name="/newroot/52/file1" dev="fuse" ino=1 res=1 errno=0 [ 135.541018][ T5784] usb 1-1: USB disconnect, device number 17 [ 135.596902][ T30] audit: type=1800 audit(1787069473.001:13): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.359" name="/" dev="fuse" ino=1 res=0 errno=0 [ 136.454788][ T5749] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 136.652638][ T5749] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 136.698612][ T5749] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 136.731429][ T5749] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 136.771393][ T5749] usb 1-1: config 220 has no interface number 2 [ 136.800548][ T5749] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 136.842538][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 136.865873][ T5749] usb 1-1: config 220 interface 0 has no altsetting 0 [ 136.889363][ T5749] usb 1-1: config 220 interface 76 has no altsetting 0 [ 136.917047][ T5749] usb 1-1: config 220 interface 1 has no altsetting 0 [ 136.953882][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.013515][ T5749] usb 1-1: Product: syz [ 137.028320][ T5749] usb 1-1: Manufacturer: syz [ 137.061905][ T5749] usb 1-1: SerialNumber: syz [ 137.221808][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.278096][ T6851] netlink: 36 bytes leftover after parsing attributes in process `syz.2.372'. [ 137.348436][ T5749] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 137.379273][ T5749] uvcvideo 1-1:220.0: No valid video chain found. [ 137.400570][ T5749] usb 1-1: selecting invalid altsetting 0 [ 137.449550][ T5749] usb 1-1: selecting invalid altsetting 0 [ 137.469465][ T5749] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 137.529433][ T5749] usb 1-1: USB disconnect, device number 18 [ 137.562084][ T5731] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 137.742988][ T5731] usb 2-1: Using ep0 maxpacket: 32 [ 137.753100][ T5731] usb 2-1: New USB device found, idVendor=056a, idProduct=06c5, bcdDevice= 0.00 [ 137.762275][ T5784] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 137.772685][ T5731] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 137.784334][ T5731] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.795629][ T5731] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 137.820451][ T5731] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.833039][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.858985][ T5731] usb 2-1: config 0 descriptor?? [ 137.917176][ T5784] usb 3-1: Using ep0 maxpacket: 8 [ 137.934929][ T5784] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 137.955468][ T5784] usb 3-1: no configurations [ 137.961816][ T5761] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 137.969333][ T5784] usb 3-1: can't read configurations, error -22 [ 138.093335][ T5784] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 138.133705][ T5761] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.144203][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.155963][ T5761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.175962][ T5761] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.189128][ T5761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.200844][ T5761] usb 4-1: config 0 descriptor?? [ 138.261742][ T5784] usb 3-1: Using ep0 maxpacket: 8 [ 138.274408][ T5784] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 138.291089][ T5731] usbhid 2-1:0.0: can't add hid device: -71 [ 138.296437][ T5784] usb 3-1: no configurations [ 138.307329][ T5784] usb 3-1: can't read configurations, error -22 [ 138.314530][ T5731] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 138.314832][ T5784] usb usb3-port1: attempt power cycle [ 138.340323][ T5731] usb 2-1: USB disconnect, device number 16 [ 138.651164][ T5761] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 138.675077][ T5784] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 138.722711][ T5784] usb 3-1: Using ep0 maxpacket: 8 [ 138.733220][ T5784] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 138.752729][ T5784] usb 3-1: no configurations [ 138.767629][ T5784] usb 3-1: can't read configurations, error -22 [ 138.933817][ T5784] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 138.974206][ T5784] usb 3-1: Using ep0 maxpacket: 8 [ 138.988304][ T5784] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 139.020851][ T5784] usb 3-1: no configurations [ 139.040395][ T5784] usb 3-1: can't read configurations, error -22 [ 139.074698][ T5784] usb usb3-port1: unable to enumerate USB device [ 140.035760][ T6915] netlink: 16 bytes leftover after parsing attributes in process `syz.5.402'. [ 140.053583][ T6915] ip6gre1: entered promiscuous mode [ 140.058878][ T6915] ip6gre1: entered allmulticast mode [ 140.066425][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.088318][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.096214][ T5761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.361672][ T5761] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 140.391868][ T5731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.511715][ T5761] usb 1-1: Using ep0 maxpacket: 32 [ 140.518780][ T5761] usb 1-1: New USB device found, idVendor=056a, idProduct=06c5, bcdDevice= 0.00 [ 140.543504][ T5761] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 140.575835][ T5761] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.588154][ T5761] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 140.601812][ T5761] usb 1-1: config 0 interface 0 has no altsetting 0 [ 140.608470][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.625633][ T5761] usb 1-1: config 0 descriptor?? [ 140.764954][ T5784] usb 4-1: USB disconnect, device number 8 [ 140.973157][ T185] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.051768][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.058970][ T5761] usbhid 1-1:0.0: can't add hid device: -71 [ 141.075451][ T5761] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 141.097592][ T5761] usb 1-1: USB disconnect, device number 19 [ 141.108187][ T6938] netlink: 80 bytes leftover after parsing attributes in process `syz.3.412'. [ 141.741743][ T5784] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 141.821738][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 141.922677][ T5784] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 141.943808][ T5784] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 141.959945][ T5784] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 141.972655][ T5784] usb 6-1: config 220 has no interface number 2 [ 141.974823][ T5761] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 141.979016][ T5784] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 142.004344][ T5784] usb 6-1: config 220 interface 0 has no altsetting 0 [ 142.013788][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.023879][ T5784] usb 6-1: config 220 interface 76 has no altsetting 0 [ 142.031533][ T5784] usb 6-1: config 220 interface 1 has no altsetting 0 [ 142.039054][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.050713][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.067331][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.086522][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.096255][ T5784] usb 6-1: Product: syz [ 142.100510][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.109114][ T5784] usb 6-1: Manufacturer: syz [ 142.114088][ T5784] usb 6-1: SerialNumber: syz [ 142.123760][ T24] usb 5-1: config 0 descriptor?? [ 142.162028][ T5761] usb 3-1: Using ep0 maxpacket: 16 [ 142.175962][ T5761] usb 3-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 142.203115][ T5761] usb 3-1: config index 0 descriptor too short (expected 28271, got 18) [ 142.215573][ T5761] usb 3-1: config 114 has too many interfaces: 116, using maximum allowed: 32 [ 142.235362][ T5761] usb 3-1: config 114 has an invalid descriptor of length 0, skipping remainder of the config [ 142.246027][ T5761] usb 3-1: config 114 has 0 interfaces, different from the descriptor's value: 116 [ 142.270875][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.297149][ T5761] usb 3-1: Product: syz [ 142.307607][ T5761] usb 3-1: Manufacturer: syz [ 142.317557][ T5761] usb 3-1: SerialNumber: syz [ 142.379772][ T5784] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 142.390739][ T5784] uvcvideo 6-1:220.0: No valid video chain found. [ 142.397800][ T5784] usb 6-1: selecting invalid altsetting 0 [ 142.457275][ T5784] usb 6-1: selecting invalid altsetting 0 [ 142.480545][ T5784] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 142.510578][ T5784] usb 6-1: USB disconnect, device number 19 [ 142.641197][ T24] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 142.758065][ T5761] usb 3-1: USB disconnect, device number 12 [ 142.825778][ T30] audit: type=1326 audit(1787069480.261:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.1.435" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdda59e0d9 code=0x0 [ 142.971826][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.998002][ T30] audit: type=1804 audit(1787069480.431:15): pid=6996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.435" name="/newroot/85/file1" dev="fuse" ino=1 res=1 errno=0 [ 143.018550][ T30] audit: type=1800 audit(1787069480.431:16): pid=6996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.435" name="/" dev="fuse" ino=1 res=0 errno=0 [ 143.201737][ T185] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 143.351666][ T185] usb 6-1: Using ep0 maxpacket: 8 [ 143.362618][ T185] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 143.381720][ T185] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 143.399447][ T185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.414249][ T185] usb 6-1: Product: syz [ 143.422950][ T185] usb 6-1: Manufacturer: syz [ 143.432752][ T185] usb 6-1: SerialNumber: syz [ 143.460816][ T185] usb 6-1: config 0 descriptor?? [ 143.704628][ T7019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.719351][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 144.035541][ T5784] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 144.067753][ T30] audit: type=1326 audit(1787069481.501:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7022 comm="syz.3.444" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f922639e0d9 code=0x0 [ 144.091981][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 144.227589][ T5784] usb 3-1: unable to get BOS descriptor or descriptor too short [ 144.237527][ T5784] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 144.241077][ T7030] syzkaller1: entered allmulticast mode [ 144.250971][ T30] audit: type=1804 audit(1787069481.691:18): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.444" name="/newroot/70/file1" dev="fuse" ino=1 res=1 errno=0 [ 144.273851][ T30] audit: type=1800 audit(1787069481.691:19): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.444" name="/" dev="fuse" ino=1 res=0 errno=0 [ 144.294145][ T5784] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 144.306734][ T5784] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 144.324204][ T5784] usb 3-1: string descriptor 0 read error: -22 [ 144.330509][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.348421][ T7020] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 144.355888][ T7020] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 144.379310][ T5784] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.591040][ T185] usb 5-1: USB disconnect, device number 11 [ 145.672566][ T5821] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 145.831681][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 145.844032][ T5821] usb 1-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 145.868297][ T5821] usb 1-1: config index 0 descriptor too short (expected 28271, got 18) [ 145.888139][ T5821] usb 1-1: config 114 has too many interfaces: 116, using maximum allowed: 32 [ 145.917132][ T5821] usb 1-1: config 114 has an invalid descriptor of length 0, skipping remainder of the config [ 145.937416][ T5821] usb 1-1: config 114 has 0 interfaces, different from the descriptor's value: 116 [ 145.975589][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.004262][ T5821] usb 1-1: Product: syz [ 146.023846][ T5821] usb 1-1: Manufacturer: syz [ 146.033885][ T5784] usb 6-1: USB disconnect, device number 20 [ 146.041648][ T5821] usb 1-1: SerialNumber: syz [ 146.444772][ T7057] syzkaller0: entered promiscuous mode [ 146.467304][ T7057] syzkaller0: entered allmulticast mode [ 146.510418][ T5821] usb 1-1: USB disconnect, device number 20 [ 146.612637][ T5784] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 146.719758][ T7065] syzkaller1: entered allmulticast mode [ 146.739675][ T5749] usb 3-1: USB disconnect, device number 13 [ 146.801671][ T5784] usb 5-1: Using ep0 maxpacket: 32 [ 146.821533][ T5784] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 146.853413][ T5784] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.884874][ T5784] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.911721][ T5784] usb 5-1: config 0 has no interface number 0 [ 146.945911][ T5784] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 146.980658][ T5784] usb 5-1: config 0 interface 1 has no altsetting 0 [ 147.010992][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.046996][ T5784] usb 5-1: Product: syz [ 147.069896][ T5784] usb 5-1: Manufacturer: syz [ 147.094763][ T5784] usb 5-1: SerialNumber: syz [ 147.101754][ T5821] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 147.121334][ T5784] usb 5-1: config 0 descriptor?? [ 147.128984][ T30] audit: type=1326 audit(1787069484.551:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.462" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd6a19e0d9 code=0x0 [ 147.281724][ T5749] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 147.306918][ T5821] usb 2-1: Using ep0 maxpacket: 32 [ 147.313369][ T5821] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 147.322825][ T30] audit: type=1804 audit(1787069484.751:21): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.462" name="/newroot/82/file1" dev="fuse" ino=1 res=1 errno=0 [ 147.362408][ T5821] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 147.372170][ T5821] usb 2-1: config 0 has no interface number 0 [ 147.381710][ T30] audit: type=1800 audit(1787069484.751:22): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.462" name="/" dev="fuse" ino=1 res=0 errno=0 [ 147.406345][ T5821] usb 2-1: config 0 interface 12 has no altsetting 0 [ 147.424598][ T5784] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 147.441728][ T5784] cx231xx 5-1:0.1: Not found matching IAD interface [ 147.448529][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.462095][ T5749] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.464702][ T5821] usb 2-1: Product: syz [ 147.498952][ T5784] usb 5-1: USB disconnect, device number 12 [ 147.506662][ T5821] usb 2-1: Manufacturer: syz [ 147.513461][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.548291][ T5821] usb 2-1: SerialNumber: syz [ 147.553882][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.602834][ T5749] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.642682][ T5821] usb 2-1: config 0 descriptor?? [ 147.649276][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.700034][ T5749] usb 3-1: config 0 descriptor?? [ 147.943469][ T5784] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 147.944803][ T7069] misc userio: The device must be registered before sending interrupts [ 148.094778][ T7083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.162107][ T5784] usb 5-1: Using ep0 maxpacket: 32 [ 148.175139][ T5784] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 148.218364][ T5784] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.236174][ T30] audit: type=1326 audit(1787069485.661:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.5.468" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd6a19e0d9 code=0x0 [ 148.244793][ T5749] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 148.264147][ T5784] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.283883][ T5784] usb 5-1: config 0 has no interface number 0 [ 148.290062][ T5784] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 148.366750][ T5784] usb 5-1: config 0 interface 1 has no altsetting 0 [ 148.389032][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.397691][ T5784] usb 5-1: Product: syz [ 148.405000][ T5784] usb 5-1: Manufacturer: syz [ 148.412649][ T5784] usb 5-1: SerialNumber: syz [ 148.426245][ T5784] usb 5-1: config 0 descriptor?? [ 148.436226][ T30] audit: type=1804 audit(1787069485.871:24): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.468" name="/newroot/83/file1" dev="fuse" ino=1 res=1 errno=0 [ 148.484424][ T30] audit: type=1800 audit(1787069485.871:25): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.468" name="/" dev="fuse" ino=1 res=0 errno=0 [ 148.671831][ T29] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 148.688190][ T5784] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 148.698942][ T5784] cx231xx 5-1:0.1: Not found matching IAD interface [ 148.832507][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 148.838918][ T29] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 148.849733][ T29] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 148.860361][ T29] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 148.871748][ T29] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 148.885724][ T29] usb 4-1: config 168 interface 0 has no altsetting 0 [ 148.897314][ T29] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 148.909034][ T29] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 148.924316][ T29] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 148.937894][ T29] usb 4-1: config 168 interface 0 has no altsetting 0 [ 148.947533][ T29] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 148.958310][ T29] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 148.970933][ T29] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 148.984881][ T29] usb 4-1: config 168 interface 0 has no altsetting 0 [ 148.995734][ T29] usb 4-1: string descriptor 0 read error: -22 [ 149.007136][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.027452][ T29] adutux 4-1:168.0: interrupt endpoints not found [ 149.292278][ T29] usb 4-1: USB disconnect, device number 9 [ 149.550569][ T5821] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 149.561341][ T5821] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 149.581658][ T5821] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 149.589292][ T5821] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 149.610860][ T5821] usb 2-1: USB disconnect, device number 17 [ 149.728194][ T29] usb 5-1: USB disconnect, device number 13 [ 149.811365][ T7105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.821437][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 149.964568][ T24] usb 3-1: USB disconnect, device number 14 [ 150.184703][ T7116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.478'. [ 150.212007][ T29] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 150.280209][ T30] audit: type=1326 audit(1787069487.711:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.2.480" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14a5d9e0d9 code=0x0 [ 150.318815][ T7124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.396231][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 150.414628][ T29] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 150.427440][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 150.439330][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 150.459103][ T30] audit: type=1804 audit(1787069487.891:27): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.480" name="/newroot/83/file1" dev="fuse" ino=1 res=1 errno=0 [ 150.492409][ T29] usb 5-1: string descriptor 0 read error: -22 [ 150.498817][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.505221][ T30] audit: type=1804 audit(1787069487.891:28): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.480" name="/newroot/83/file1" dev="fuse" ino=1 res=1 errno=0 [ 150.535512][ T7106] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.545286][ T7106] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.554598][ T30] audit: type=1800 audit(1787069487.891:29): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.480" name="/" dev="fuse" ino=1 res=0 errno=0 [ 150.580063][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.741864][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 150.902115][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 150.914954][ T24] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 150.935347][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.953404][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.979399][ T24] usb 1-1: config 0 has no interface number 0 [ 150.990960][ T24] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 151.002012][ T24] usb 1-1: config 0 interface 1 has no altsetting 0 [ 151.022948][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.035888][ T24] usb 1-1: Product: syz [ 151.051529][ T24] usb 1-1: Manufacturer: syz [ 151.057069][ T24] usb 1-1: SerialNumber: syz [ 151.076071][ T24] usb 1-1: config 0 descriptor?? [ 151.311479][ T24] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 151.321787][ T24] cx231xx 1-1:0.1: Not found matching IAD interface [ 151.335348][ T24] usb 1-1: USB disconnect, device number 21 [ 151.431688][ T29] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 151.565732][ T7146] syzkaller0: entered promiscuous mode [ 151.581891][ T7146] syzkaller0: entered allmulticast mode [ 151.602862][ T29] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 151.623824][ T29] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 151.633675][ T29] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 151.644602][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.666986][ T29] usb 2-1: probing VID:PID(0424:012C) [ 151.683816][ T29] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 151.692114][ T29] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 151.698567][ T29] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 151.705958][ T29] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 151.712450][ T29] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 151.753430][ T185] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 151.832089][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 151.843015][ T5761] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 151.914596][ T185] usb 6-1: Using ep0 maxpacket: 8 [ 151.920403][ T185] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 151.933464][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 151.934183][ T185] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 151.952659][ T185] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 151.964909][ T185] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 151.976582][ T185] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 151.989967][ T185] usb 6-1: config 168 interface 0 has no altsetting 0 [ 151.996968][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 151.998157][ T24] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 152.004631][ T185] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 152.024502][ T185] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 152.036022][ T185] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 152.047736][ T5761] usb 4-1: Using ep0 maxpacket: 32 [ 152.052584][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.054308][ T5761] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 152.070202][ T185] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 152.074038][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.085083][ T185] usb 6-1: config 168 interface 0 has no altsetting 0 [ 152.103671][ T5761] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 152.106688][ T24] usb 1-1: config 0 has no interface number 0 [ 152.111844][ T5761] usb 4-1: config 0 has no interface number 0 [ 152.122642][ T29] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 152.124315][ T5761] usb 4-1: config 0 interface 12 has no altsetting 0 [ 152.136346][ T24] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 152.145426][ T185] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 152.153896][ T24] usb 1-1: config 0 interface 1 has no altsetting 0 [ 152.161267][ T185] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 152.175343][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.179666][ T185] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 152.190441][ T24] usb 1-1: Product: syz [ 152.199344][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.208279][ T24] usb 1-1: Manufacturer: syz [ 152.217792][ T5761] usb 4-1: Product: syz [ 152.218480][ T24] usb 1-1: SerialNumber: syz [ 152.226769][ T5761] usb 4-1: Manufacturer: syz [ 152.231519][ T5761] usb 4-1: SerialNumber: syz [ 152.239831][ T5761] usb 4-1: config 0 descriptor?? [ 152.250207][ T185] usb 6-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 152.254064][ T24] usb 1-1: config 0 descriptor?? [ 152.271283][ T185] usb 6-1: config 168 interface 0 has no altsetting 0 [ 152.283639][ T185] usb 6-1: string descriptor 0 read error: -22 [ 152.290278][ T185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.317585][ T185] adutux 6-1:168.0: interrupt endpoints not found [ 152.328065][ T29] usb 2-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 152.494710][ T24] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 152.503905][ T24] cx231xx 1-1:0.1: Not found matching IAD interface [ 152.542637][ T24] usb 6-1: USB disconnect, device number 21 [ 152.571812][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.862615][ T185] usb 5-1: USB disconnect, device number 14 [ 153.154813][ T29] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 153.191154][ T24] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 153.201208][ T29] usb 2-1: USB disconnect, device number 18 [ 153.209241][ T7157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.495'. [ 153.213277][ T24] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 153.296926][ T29] USB vub300 remote SDIO host controller[0] now disconnected [ 153.311925][ T185] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 153.372161][ C1] [ 153.375543][ C1] ============================= [ 153.380444][ C1] WARNING: suspicious RCU usage [ 153.385339][ C1] syzkaller #0 Tainted: G L [ 153.391315][ C1] ----------------------------- [ 153.396198][ C1] kernel/sched/core.c:9159 Illegal context switch in RCU-sched read-side critical section! [ 153.406197][ C1] [ 153.406197][ C1] other info that might help us debug this: [ 153.406197][ C1] [ 153.416464][ C1] [ 153.416464][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 153.424551][ C1] 9 locks held by syz-executor/5610: [ 153.429839][ C1] #0: ffffffff8ec2ad90 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 153.438622][ C1] #1: ffff888033dbf678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x16e/0x1d90 [ 153.447752][ C1] #2: ffff88807e62a9f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x256/0x1d90 [ 153.457083][ C1] #3: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 153.466652][ C1] #4: ffff8880745ade58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 153.477187][ C1] #5: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 153.486740][ C1] #6: ffff888061b76bb8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x696/0x5880 [ 153.497115][ C1] #7: ffffffff8eb59e20 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x480 [ 153.502525][ T185] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 153.507116][ C1] #8: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 153.526202][ C1] [ 153.526202][ C1] stack backtrace: [ 153.532121][ C1] CPU: 1 UID: 0 PID: 5610 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 153.532163][ C1] Tainted: [L]=SOFTLOCKUP [ 153.532172][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 153.532186][ C1] Call Trace: [ 153.532195][ C1] [ 153.532205][ C1] dump_stack_lvl+0xe8/0x150 [ 153.532243][ C1] lockdep_rcu_suspicious+0x13f/0x1d0 [ 153.532287][ C1] __might_resched+0xbb/0x4d0 [ 153.532320][ C1] ? __cancel_work_sync+0x5c/0x110 [ 153.532356][ C1] __cancel_work_sync+0x6d/0x110 [ 153.532392][ C1] mmc_free_host+0x19/0x30 [ 153.532428][ C1] call_timer_fn+0x192/0x5e0 [ 153.532465][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 153.532495][ C1] ? call_timer_fn+0xd4/0x5e0 [ 153.532532][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 153.532580][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.532607][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 153.532640][ C1] __run_timer_base+0x652/0x8b0 [ 153.532674][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.532719][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 153.532773][ C1] ? ktime_get+0x1f5/0x220 [ 153.532805][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.532833][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.532870][ C1] run_timer_softirq+0xb7/0x170 [ 153.532905][ C1] handle_softirqs+0x225/0x840 [ 153.532937][ C1] ? __irq_exit_rcu+0xca/0x220 [ 153.532973][ C1] __irq_exit_rcu+0xca/0x220 [ 153.533003][ C1] irq_exit_rcu+0x9/0x30 [ 153.533028][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 153.533059][ C1] [ 153.533067][ C1] [ 153.533077][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.533104][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 153.533139][ C1] Code: 8b 3d 84 cd 88 0c 48 89 de 5b e9 23 20 62 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 28 ad a6 11 65 8b 15 49 ad a6 11 81 e2 00 01 ff 00 74 [ 153.533159][ C1] RSP: 0018:ffffc90003c8f288 EFLAGS: 00000202 [ 153.533180][ C1] RAX: ffffffff824074ac RBX: ffffffff8240746a RCX: 0000000080000004 [ 153.533198][ C1] RDX: ffff88807febddc0 RSI: ffffffff8c4bd660 RDI: ffffffff8c4bd620 [ 153.533217][ C1] RBP: 0000000000000001 R08: ffffffff8240746a R09: 0000000000000000 [ 153.533232][ C1] R10: 0000000000000000 R11: ffffffff8eb59e20 R12: dffffc0000000000 [ 153.533250][ C1] R13: 0000000000000010 R14: 000000000005a845 R15: ffff88813fe53160 [ 153.533271][ C1] ? pfn_valid+0xba/0x480 [ 153.533304][ C1] ? pfn_valid+0xba/0x480 [ 153.533333][ C1] ? pfn_valid+0xfc/0x480 [ 153.533371][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.533399][ C1] pfn_valid+0xfc/0x480 [ 153.533435][ C1] page_table_check_set+0x25/0x530 [ 153.533474][ C1] copy_pmd_range+0x477a/0x5880 [ 153.533533][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.533562][ C1] ? kasan_save_track+0x4f/0x80 [ 153.533594][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 153.533631][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 153.533658][ C1] ? do_syscall_64+0x174/0x580 [ 153.533687][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.533719][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.533747][ C1] ? __lock_acquire+0x683/0x2cf0 [ 153.533785][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.533827][ C1] copy_page_range+0xc26/0x1250 [ 153.533887][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 153.533930][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.533959][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.533988][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 153.534028][ C1] dup_mmap+0xf21/0x1d90 [ 153.534078][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 153.534105][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 153.534153][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.534185][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.534222][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.534260][ C1] copy_mm+0x11a/0x480 [ 153.534291][ C1] ? copy_process+0xd3c/0x43e0 [ 153.534318][ C1] copy_process+0x1e75/0x43e0 [ 153.534356][ C1] ? copy_process+0xd3c/0x43e0 [ 153.534405][ C1] ? __pfx_copy_process+0x10/0x10 [ 153.534448][ C1] kernel_clone+0x2d7/0x940 [ 153.534485][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 153.534536][ C1] __x64_sys_clone+0x1b6/0x230 [ 153.534571][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 153.534620][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.534648][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 153.534692][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.534720][ C1] do_syscall_64+0x174/0x580 [ 153.534750][ C1] ? trace_irq_disable+0x3b/0x140 [ 153.534787][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.534812][ C1] RIP: 0033:0x7fbdda5c6b52 [ 153.534834][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 153.534853][ C1] RSP: 002b:00007ffced84ca20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 153.534878][ C1] RAX: ffffffffffffffda RBX: 00007ffced84ca20 RCX: 00007fbdda5c6b52 [ 153.534896][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 153.534910][ C1] RBP: 00007ffced84cbac R08: 0000000000000000 R09: 0000000000000001 [ 153.534925][ C1] R10: 00005555648137d0 R11: 0000000000000246 R12: 0000000000000001 [ 153.534940][ C1] R13: 00000000000927c0 R14: 000000000002569e R15: 00007ffced84cc00 [ 153.534975][ C1] [ 153.534986][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4487 [ 153.565956][ T185] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 153.566494][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5610, name: syz-executor [ 153.566517][ C1] preempt_count: 103, expected: 0 [ 153.577804][ T185] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 153.581095][ C1] RCU nest depth: 2, expected: 0 [ 153.581112][ C1] 9 locks held by syz-executor/5610: [ 153.581136][ C1] #0: ffffffff8ec2ad90 [ 153.607048][ T185] usb 5-1: config 220 has no interface number 2 [ 153.611476][ C1] (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 153.628828][ T5731] usb 1-1: USB disconnect, device number 22 [ 153.633314][ C1] #1: ffff888033dbf678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x16e/0x1d90 [ 153.633398][ C1] #2: ffff88807e62a9f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x256/0x1d90 [ 153.633480][ C1] #3: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 153.633551][ C1] #4: ffff8880745ade58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 153.633631][ C1] #5: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 153.633701][ C1] #6: ffff888061b76bb8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x696/0x5880 [ 153.633791][ C1] #7: ffffffff8eb59e20 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x480 [ 153.633868][ C1] #8: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 153.633952][ C1] Preemption disabled at: [ 153.633960][ C1] [<0000000000000000>] 0x0 [ 153.633991][ C1] CPU: 1 UID: 0 PID: 5610 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 153.634023][ C1] Tainted: [L]=SOFTLOCKUP [ 153.634032][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 153.634046][ C1] Call Trace: [ 153.634054][ C1] [ 153.634064][ C1] dump_stack_lvl+0xe8/0x150 [ 153.634100][ C1] __might_resched+0x378/0x4d0 [ 153.634145][ C1] __cancel_work_sync+0x6d/0x110 [ 153.634179][ C1] mmc_free_host+0x19/0x30 [ 153.634213][ C1] call_timer_fn+0x192/0x5e0 [ 153.634249][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 153.634279][ C1] ? call_timer_fn+0xd4/0x5e0 [ 153.634315][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 153.634363][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.634391][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 153.634424][ C1] __run_timer_base+0x652/0x8b0 [ 153.634458][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.634504][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 153.634543][ C1] ? ktime_get+0x1f5/0x220 [ 153.634575][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.634603][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.634640][ C1] run_timer_softirq+0xb7/0x170 [ 153.634677][ C1] handle_softirqs+0x225/0x840 [ 153.634710][ C1] ? __irq_exit_rcu+0xca/0x220 [ 153.634746][ C1] __irq_exit_rcu+0xca/0x220 [ 153.634775][ C1] irq_exit_rcu+0x9/0x30 [ 153.634801][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 153.634832][ C1] [ 153.634839][ C1] [ 153.634850][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 153.634877][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 153.634905][ C1] Code: 8b 3d 84 cd 88 0c 48 89 de 5b e9 23 20 62 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 28 ad a6 11 65 8b 15 49 ad a6 11 81 e2 00 01 ff 00 74 [ 153.634925][ C1] RSP: 0018:ffffc90003c8f288 EFLAGS: 00000202 [ 153.634945][ C1] RAX: ffffffff824074ac RBX: ffffffff8240746a RCX: 0000000080000004 [ 153.634963][ C1] RDX: ffff88807febddc0 RSI: ffffffff8c4bd660 RDI: ffffffff8c4bd620 [ 153.634982][ C1] RBP: 0000000000000001 R08: ffffffff8240746a R09: 0000000000000000 [ 153.634998][ C1] R10: 0000000000000000 R11: ffffffff8eb59e20 R12: dffffc0000000000 [ 153.635015][ C1] R13: 0000000000000010 R14: 000000000005a845 R15: ffff88813fe53160 [ 153.635037][ C1] ? pfn_valid+0xba/0x480 [ 153.635069][ C1] ? pfn_valid+0xba/0x480 [ 153.635098][ C1] ? pfn_valid+0xfc/0x480 [ 153.635142][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.635170][ C1] pfn_valid+0xfc/0x480 [ 153.635205][ C1] page_table_check_set+0x25/0x530 [ 153.635245][ C1] copy_pmd_range+0x477a/0x5880 [ 153.635304][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.635332][ C1] ? kasan_save_track+0x4f/0x80 [ 153.635363][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 153.635401][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 153.635431][ C1] ? do_syscall_64+0x174/0x580 [ 153.635460][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.635491][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.635520][ C1] ? __lock_acquire+0x683/0x2cf0 [ 153.635558][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.635599][ C1] copy_page_range+0xc26/0x1250 [ 153.635657][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 153.635700][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.635729][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.635757][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 153.635797][ C1] dup_mmap+0xf21/0x1d90 [ 153.635846][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 153.635873][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 153.635914][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.635946][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.635983][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.636021][ C1] copy_mm+0x11a/0x480 [ 153.636051][ C1] ? copy_process+0xd3c/0x43e0 [ 153.636078][ C1] copy_process+0x1e75/0x43e0 [ 153.636117][ C1] ? copy_process+0xd3c/0x43e0 [ 153.636169][ C1] ? __pfx_copy_process+0x10/0x10 [ 153.636211][ C1] kernel_clone+0x2d7/0x940 [ 153.636248][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 153.636300][ C1] __x64_sys_clone+0x1b6/0x230 [ 153.636335][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 153.636385][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 153.636414][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 153.636458][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.636486][ C1] do_syscall_64+0x174/0x580 [ 153.636515][ C1] ? trace_irq_disable+0x3b/0x140 [ 153.636552][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.636577][ C1] RIP: 0033:0x7fbdda5c6b52 [ 153.636598][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 153.636618][ C1] RSP: 002b:00007ffced84ca20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 153.636641][ C1] RAX: ffffffffffffffda RBX: 00007ffced84ca20 RCX: 00007fbdda5c6b52 [ 153.636659][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 153.636674][ C1] RBP: 00007ffced84cbac R08: 0000000000000000 R09: 0000000000000001 [ 153.636689][ C1] R10: 00005555648137d0 R11: 0000000000000246 R12: 0000000000000001 [ 153.636705][ C1] R13: 00000000000927c0 R14: 000000000002569e R15: 00007ffced84cc00 [ 153.636741][ C1] [ 153.636942][ C1] [ 153.646096][ T185] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 153.650016][ C1] ============================= [ 153.650030][ C1] WARNING: suspicious RCU usage [ 153.650046][ C1] syzkaller #0 Tainted: G W L [ 153.650063][ C1] ----------------------------- [ 153.650074][ C1] kernel/rcu/srcutree.c:1487 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 153.650099][ C1] [ 153.650099][ C1] other info that might help us debug this: [ 153.650099][ C1] [ 153.686469][ T185] usb 5-1: config 220 interface 0 has no altsetting 0 [ 153.690115][ C1] [ 153.690115][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 153.690134][ C1] 9 locks held by syz-executor/5610: [ 153.690151][ C1] #0: ffffffff8ec2ad90 [ 153.709412][ T185] usb 5-1: config 220 interface 76 has no altsetting 0 [ 153.727650][ C1] (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 153.727717][ C1] #1: ffff888033dbf678 ( [ 153.763532][ T185] usb 5-1: config 220 interface 1 has no altsetting 0 [ 153.765675][ C1] &mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x16e/0x1d90 [ 153.779134][ T185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.782339][ C1] #2: ffff88807e62a9f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x256/0x1d90 [ 153.782431][ C1] #3: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3} [ 153.787162][ T185] usb 5-1: Product: syz [ 153.792390][ C1] , at: __pte_offset_map+0x29/0x240 [ 153.792421][ C1] #4: ffff8880745ade58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 153.792506][ C1] #5: [ 153.797077][ T185] usb 5-1: Manufacturer: syz [ 153.801736][ C1] ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 153.806720][ T185] usb 5-1: SerialNumber: syz [ 153.812224][ C1] #6: ffff888061b76bb8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x696/0x5880 [ 154.083103][ T185] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 154.089952][ C1] #7: ffffffff8eb59e20 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x480 [ 154.105555][ T185] uvcvideo 5-1:220.0: No valid video chain found. [ 154.110182][ C1] #8: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 154.110277][ C1] [ 154.110277][ C1] stack backtrace: [ 154.116146][ T185] usb 5-1: selecting invalid altsetting 0 [ 154.119689][ C1] CPU: 1 UID: 0 PID: 5610 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 154.119725][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 154.119734][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 154.119749][ C1] Call Trace: [ 154.119758][ C1] [ 154.119768][ C1] dump_stack_lvl+0xe8/0x150 [ 154.119807][ C1] lockdep_rcu_suspicious+0x13f/0x1d0 [ 154.119851][ C1] __synchronize_srcu+0x157/0x2f0 [ 154.119888][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 154.119919][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 154.119949][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.119988][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.120016][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 154.120050][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.120079][ C1] ? synchronize_srcu+0x20a/0x260 [ 154.120120][ C1] wakeup_source_unregister+0x129/0x3f0 [ 154.120155][ C1] mmc_host_classdev_release+0x47/0x100 [ 154.120194][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 154.120229][ C1] device_release+0xc4/0x1f0 [ 154.120267][ C1] kobject_put+0x222/0x550 [ 154.120304][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 154.120332][ C1] call_timer_fn+0x192/0x5e0 [ 154.120368][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 154.120398][ C1] ? call_timer_fn+0xd4/0x5e0 [ 154.120434][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 154.120482][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.120508][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 154.120541][ C1] __run_timer_base+0x652/0x8b0 [ 154.120575][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.120618][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 154.120658][ C1] ? ktime_get+0x1f5/0x220 [ 154.120689][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.120717][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.120754][ C1] run_timer_softirq+0xb7/0x170 [ 154.120788][ C1] handle_softirqs+0x225/0x840 [ 154.120820][ C1] ? __irq_exit_rcu+0xca/0x220 [ 154.120856][ C1] __irq_exit_rcu+0xca/0x220 [ 154.120884][ C1] irq_exit_rcu+0x9/0x30 [ 154.120910][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 154.120939][ C1] [ 154.120947][ C1] [ 154.120957][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 154.120984][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 154.121012][ C1] Code: 8b 3d 84 cd 88 0c 48 89 de 5b e9 23 20 62 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 28 ad a6 11 65 8b 15 49 ad a6 11 81 e2 00 01 ff 00 74 [ 154.121030][ C1] RSP: 0018:ffffc90003c8f288 EFLAGS: 00000202 [ 154.121051][ C1] RAX: ffffffff824074ac RBX: ffffffff8240746a RCX: 0000000080000004 [ 154.121068][ C1] RDX: ffff88807febddc0 RSI: ffffffff8c4bd660 RDI: ffffffff8c4bd620 [ 154.121086][ C1] RBP: 0000000000000001 R08: ffffffff8240746a R09: 0000000000000000 [ 154.121101][ C1] R10: 0000000000000000 R11: ffffffff8eb59e20 R12: dffffc0000000000 [ 154.121123][ C1] R13: 0000000000000010 R14: 000000000005a845 R15: ffff88813fe53160 [ 154.121145][ C1] ? pfn_valid+0xba/0x480 [ 154.121177][ C1] ? pfn_valid+0xba/0x480 [ 154.121206][ C1] ? pfn_valid+0xfc/0x480 [ 154.121243][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.121272][ C1] pfn_valid+0xfc/0x480 [ 154.121307][ C1] page_table_check_set+0x25/0x530 [ 154.121346][ C1] copy_pmd_range+0x477a/0x5880 [ 154.121405][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.121433][ C1] ? kasan_save_track+0x4f/0x80 [ 154.121464][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 154.121501][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 154.121527][ C1] ? do_syscall_64+0x174/0x580 [ 154.121557][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.121592][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.121620][ C1] ? __lock_acquire+0x683/0x2cf0 [ 154.121657][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.121699][ C1] copy_page_range+0xc26/0x1250 [ 154.121757][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 154.121799][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.121828][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.121857][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 154.121896][ C1] dup_mmap+0xf21/0x1d90 [ 154.121946][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 154.121972][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 154.122013][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.122045][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.122082][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.122124][ C1] copy_mm+0x11a/0x480 [ 154.122155][ C1] ? copy_process+0xd3c/0x43e0 [ 154.122181][ C1] copy_process+0x1e75/0x43e0 [ 154.122219][ C1] ? copy_process+0xd3c/0x43e0 [ 154.122268][ C1] ? __pfx_copy_process+0x10/0x10 [ 154.122309][ C1] kernel_clone+0x2d7/0x940 [ 154.122347][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 154.122398][ C1] __x64_sys_clone+0x1b6/0x230 [ 154.122433][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 154.122483][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.122510][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 154.122555][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.122582][ C1] do_syscall_64+0x174/0x580 [ 154.122612][ C1] ? trace_irq_disable+0x3b/0x140 [ 154.122650][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.122675][ C1] RIP: 0033:0x7fbdda5c6b52 [ 154.122696][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 154.122716][ C1] RSP: 002b:00007ffced84ca20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 154.122739][ C1] RAX: ffffffffffffffda RBX: 00007ffced84ca20 RCX: 00007fbdda5c6b52 [ 154.122757][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 154.122772][ C1] RBP: 00007ffced84cbac R08: 0000000000000000 R09: 0000000000000001 [ 154.122788][ C1] R10: 00005555648137d0 R11: 0000000000000246 R12: 0000000000000001 [ 154.122803][ C1] R13: 00000000000927c0 R14: 000000000002569e R15: 00007ffced84cc00 [ 154.122839][ C1] [ 154.122885][ C1] ODEBUG: object ffffc90000a08a80 is NOT on stack ffffc90003c88000, but annotated. [ 154.123777][ C1] [ 154.123784][ C1] ====================================================== [ 154.123793][ C1] WARNING: possible circular locking dependency detected [ 154.123806][ C1] syzkaller #0 Tainted: G W L [ 154.123818][ C1] ------------------------------------------------------ [ 154.123827][ C1] syz-executor/5610 is trying to acquire lock: [ 154.123839][ C1] ffffffff8eb4c040 (console_owner){..-.}-{0:0}, at: vprintk_emit+0x2cf/0x560 [ 154.123905][ C1] [ 154.123905][ C1] but task is already holding lock: [ 154.123913][ C1] ffffffff9aa58ec0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x81/0x3c0 [ 154.123973][ C1] [ 154.123973][ C1] which lock already depends on the new lock. [ 154.123973][ C1] [ 154.123982][ C1] [ 154.123982][ C1] the existing dependency chain (in reverse order) is: [ 154.123991][ C1] [ 154.123991][ C1] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}: [ 154.124024][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 154.124048][ C1] debug_object_assert_init+0xb0/0x380 [ 154.124080][ C1] hrtimer_start_range_ns+0x3d/0x3e0 [ 154.124120][ C1] rpm_suspend+0x1333/0x17b0 [ 154.124146][ C1] __pm_runtime_idle+0x12f/0x1a0 [ 154.124171][ C1] __device_attach+0x355/0x450 [ 154.124197][ C1] device_initial_probe+0xa1/0xd0 [ 154.124224][ C1] bus_probe_device+0x12a/0x220 [ 154.124258][ C1] device_add+0x7d7/0xb80 [ 154.124281][ C1] serdev_controller_add+0x85/0x6d0 [ 154.124315][ C1] serdev_tty_port_register+0x159/0x260 [ 154.124350][ C1] tty_port_register_device_attr_serdev+0x169/0x1f0 [ 154.124379][ C1] serial_core_register_port+0xffa/0x2840 [ 154.124416][ C1] serial8250_register_8250_port+0x16b4/0x2090 [ 154.124451][ C1] serial_pnp_probe+0x56a/0x7f0 [ 154.124484][ C1] pnp_device_probe+0x30b/0x4c0 [ 154.124519][ C1] really_probe+0x254/0xae0 [ 154.124547][ C1] __driver_probe_device+0x1e8/0x360 [ 154.124575][ C1] driver_probe_device+0x4f/0x240 [ 154.124603][ C1] __driver_attach+0x339/0x600 [ 154.124629][ C1] bus_for_each_dev+0x23b/0x2c0 [ 154.124664][ C1] bus_add_driver+0x345/0x670 [ 154.124698][ C1] driver_register+0x23a/0x320 [ 154.124729][ C1] serial8250_init+0x8f/0x160 [ 154.124753][ C1] do_one_initcall+0x250/0x870 [ 154.124785][ C1] do_initcall_level+0x10a/0x1a0 [ 154.124811][ C1] do_initcalls+0x59/0xa0 [ 154.124834][ C1] kernel_init_freeable+0x29d/0x3e0 [ 154.124859][ C1] kernel_init+0x22/0x1d0 [ 154.124892][ C1] ret_from_fork+0x514/0xb70 [ 154.124923][ C1] ret_from_fork_asm+0x1a/0x30 [ 154.124956][ C1] [ 154.124956][ C1] -> #2 (&dev->power.lock){-...}-{3:3}: [ 154.124989][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 154.125013][ C1] __pm_runtime_resume+0x10f/0x180 [ 154.125039][ C1] __uart_start+0x171/0x460 [ 154.125058][ C1] uart_write+0x251/0x9f0 [ 154.125079][ C1] n_tty_write+0xd49/0x11e0 [ 154.125107][ C1] file_tty_write+0x50d/0x9f0 [ 154.125146][ C1] vfs_write+0x612/0xba0 [ 154.125179][ C1] ksys_write+0x150/0x270 [ 154.125213][ C1] do_syscall_64+0x174/0x580 [ 154.125240][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.125263][ C1] [ 154.125263][ C1] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 154.125295][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 154.125317][ C1] serial8250_console_write+0x153/0x1ba0 [ 154.125343][ C1] console_flush_all+0x6ea/0xaf0 [ 154.125365][ C1] console_unlock+0xd1/0x1c0 [ 154.125397][ C1] vprintk_emit+0x485/0x560 [ 154.125431][ C1] _printk+0xdd/0x130 [ 154.125453][ C1] register_console+0xbc3/0xfc0 [ 154.125475][ C1] univ8250_console_init+0x3a/0x70 [ 154.125499][ C1] console_init+0x10b/0x4a0 [ 154.125532][ C1] start_kernel+0x238/0x3e0 [ 154.125554][ C1] x86_64_start_reservations+0x24/0x30 [ 154.125587][ C1] x86_64_start_kernel+0x137/0x1b0 [ 154.125617][ C1] common_startup_64+0x13e/0x157 [ 154.125641][ C1] [ 154.125641][ C1] -> #0 (console_owner){..-.}-{0:0}: [ 154.125674][ C1] __lock_acquire+0x1520/0x2cf0 [ 154.125703][ C1] lock_acquire+0x106/0x350 [ 154.125732][ C1] vprintk_emit+0x2eb/0x560 [ 154.125766][ C1] _printk+0xdd/0x130 [ 154.125786][ C1] __debug_object_init+0x2c3/0x3c0 [ 154.125817][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 154.125845][ C1] wakeup_source_unregister+0x129/0x3f0 [ 154.125871][ C1] mmc_host_classdev_release+0x47/0x100 [ 154.125904][ C1] device_release+0xc4/0x1f0 [ 154.125935][ C1] kobject_put+0x222/0x550 [ 154.125967][ C1] call_timer_fn+0x192/0x5e0 [ 154.126002][ C1] __run_timer_base+0x652/0x8b0 [ 154.126034][ C1] run_timer_softirq+0xb7/0x170 [ 154.126064][ C1] handle_softirqs+0x225/0x840 [ 154.126089][ C1] __irq_exit_rcu+0xca/0x220 [ 154.126121][ C1] irq_exit_rcu+0x9/0x30 [ 154.126146][ T5761] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 154.126144][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 154.126171][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 154.126189][ T5761] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 154.126196][ C1] __sanitizer_cov_trace_pc+0x8/0x70 [ 154.126210][ T5761] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 154.126220][ C1] pfn_valid+0xfc/0x480 [ 154.126248][ C1] page_table_check_set+0x25/0x530 [ 154.126265][ T5761] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 154.126276][ C1] copy_pmd_range+0x477a/0x5880 [ 154.126302][ C1] copy_page_range+0xc26/0x1250 [ 154.126334][ C1] dup_mmap+0xf21/0x1d90 [ 154.126359][ C1] copy_mm+0x11a/0x480 [ 154.126383][ C1] copy_process+0x1e75/0x43e0 [ 154.126407][ C1] kernel_clone+0x2d7/0x940 [ 154.126432][ C1] __x64_sys_clone+0x1b6/0x230 [ 154.126460][ C1] do_syscall_64+0x174/0x580 [ 154.126487][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.126511][ C1] [ 154.126511][ C1] other info that might help us debug this: [ 154.126511][ C1] [ 154.126519][ C1] Chain exists of: [ 154.126519][ C1] console_owner --> &dev->power.lock --> &obj_hash[i].lock [ 154.126519][ C1] [ 154.126558][ C1] Possible unsafe locking scenario: [ 154.126558][ C1] [ 154.126565][ C1] CPU0 CPU1 [ 154.126573][ C1] ---- ---- [ 154.126580][ C1] lock(&obj_hash[i].lock); [ 154.126595][ C1] lock(&dev->power.lock); [ 154.126613][ C1] lock(&obj_hash[i].lock); [ 154.126631][ C1] lock(console_owner); [ 154.126647][ C1] [ 154.126647][ C1] *** DEADLOCK *** [ 154.126647][ C1] [ 154.126654][ C1] 10 locks held by syz-executor/5610: [ 154.126668][ C1] #0: ffffffff8ec2ad90 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 154.126726][ C1] #1: ffff888033dbf678 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x16e/0x1d90 [ 154.126786][ C1] #2: ffff88807e62a9f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x256/0x1d90 [ 154.126852][ C1] #3: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 154.126911][ C1] #4: ffff8880745ade58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 154.126975][ C1] #5: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 154.127031][ C1] #6: ffff888061b76bb8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x696/0x5880 [ 154.127101][ C1] #7: ffffffff8eb59e20 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x480 [ 154.127170][ C1] #8: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 154.127238][ C1] #9: ffffffff9aa58ec0 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x81/0x3c0 [ 154.127303][ C1] [ 154.127303][ C1] stack backtrace: [ 154.127317][ C1] CPU: 1 UID: 0 PID: 5610 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 154.127350][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 154.127359][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 154.127373][ C1] Call Trace: [ 154.127381][ C1] [ 154.127390][ C1] dump_stack_lvl+0xe8/0x150 [ 154.127422][ C1] print_circular_bug+0x2e1/0x300 [ 154.127463][ C1] check_noncircular+0x12e/0x150 [ 154.127504][ C1] __lock_acquire+0x1520/0x2cf0 [ 154.127550][ C1] ? vprintk_emit+0x2cf/0x560 [ 154.127587][ C1] lock_acquire+0x106/0x350 [ 154.127618][ C1] ? vprintk_emit+0x2cf/0x560 [ 154.127657][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.127689][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.127718][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 154.127743][ C1] ? vprintk_emit+0x2cf/0x560 [ 154.127782][ C1] vprintk_emit+0x2eb/0x560 [ 154.127818][ C1] ? vprintk_emit+0x2cf/0x560 [ 154.127857][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 154.127894][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.127924][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.127956][ C1] _printk+0xdd/0x130 [ 154.127979][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.128010][ C1] ? __pfx__printk+0x10/0x10 [ 154.128033][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.128064][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.128096][ C1] __debug_object_init+0x2c3/0x3c0 [ 154.128138][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.128166][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 154.128208][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 154.128241][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 154.128272][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 154.128303][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.128331][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 154.128362][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.128390][ C1] ? synchronize_srcu+0x20a/0x260 [ 154.128422][ C1] wakeup_source_unregister+0x129/0x3f0 [ 154.128453][ C1] mmc_host_classdev_release+0x47/0x100 [ 154.128489][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 154.128521][ C1] device_release+0xc4/0x1f0 [ 154.128557][ C1] kobject_put+0x222/0x550 [ 154.128592][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 154.128616][ C1] call_timer_fn+0x192/0x5e0 [ 154.128652][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 154.128680][ C1] ? call_timer_fn+0xd4/0x5e0 [ 154.128715][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 154.128757][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.128783][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 154.128814][ C1] __run_timer_base+0x652/0x8b0 [ 154.128846][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.128880][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 154.128913][ C1] ? ktime_get+0x1f5/0x220 [ 154.128947][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.128982][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.129013][ C1] run_timer_softirq+0xb7/0x170 [ 154.129046][ C1] handle_softirqs+0x225/0x840 [ 154.129074][ C1] ? __irq_exit_rcu+0xca/0x220 [ 154.129133][ C1] __irq_exit_rcu+0xca/0x220 [ 154.129161][ C1] irq_exit_rcu+0x9/0x30 [ 154.129184][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 154.129211][ C1] [ 154.129218][ C1] [ 154.129227][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 154.129255][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 154.129289][ C1] Code: 8b 3d 84 cd 88 0c 48 89 de 5b e9 23 20 62 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 28 ad a6 11 65 8b 15 49 ad a6 11 81 e2 00 01 ff 00 74 [ 154.129308][ C1] RSP: 0018:ffffc90003c8f288 EFLAGS: 00000202 [ 154.129327][ C1] RAX: ffffffff824074ac RBX: ffffffff8240746a RCX: 0000000080000004 [ 154.129344][ C1] RDX: ffff88807febddc0 RSI: ffffffff8c4bd660 RDI: ffffffff8c4bd620 [ 154.129361][ C1] RBP: 0000000000000001 R08: ffffffff8240746a R09: 0000000000000000 [ 154.129375][ C1] R10: 0000000000000000 R11: ffffffff8eb59e20 R12: dffffc0000000000 [ 154.129394][ C1] R13: 0000000000000010 R14: 000000000005a845 R15: ffff88813fe53160 [ 154.129418][ C1] ? pfn_valid+0xba/0x480 [ 154.129449][ C1] ? pfn_valid+0xba/0x480 [ 154.129479][ C1] ? pfn_valid+0xfc/0x480 [ 154.129512][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.129539][ C1] pfn_valid+0xfc/0x480 [ 154.129571][ C1] page_table_check_set+0x25/0x530 [ 154.129604][ C1] copy_pmd_range+0x477a/0x5880 [ 154.129645][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.129673][ C1] ? kasan_save_track+0x4f/0x80 [ 154.129703][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 154.129737][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 154.129763][ C1] ? do_syscall_64+0x174/0x580 [ 154.129793][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.129821][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.129850][ C1] ? __lock_acquire+0x683/0x2cf0 [ 154.129883][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.129918][ C1] copy_page_range+0xc26/0x1250 [ 154.129964][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 154.130001][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.130030][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.130058][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 154.130094][ C1] dup_mmap+0xf21/0x1d90 [ 154.130141][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 154.130168][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 154.130201][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.130231][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.130264][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.130297][ C1] copy_mm+0x11a/0x480 [ 154.130324][ C1] ? copy_process+0xd3c/0x43e0 [ 154.130349][ C1] copy_process+0x1e75/0x43e0 [ 154.130381][ C1] ? copy_process+0xd3c/0x43e0 [ 154.130417][ C1] ? __pfx_copy_process+0x10/0x10 [ 154.130452][ C1] kernel_clone+0x2d7/0x940 [ 154.130484][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 154.130524][ C1] __x64_sys_clone+0x1b6/0x230 [ 154.130556][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 154.130597][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 154.130625][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 154.130664][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.130689][ C1] do_syscall_64+0x174/0x580 [ 154.130719][ C1] ? trace_irq_disable+0x3b/0x140 [ 154.130752][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.130776][ C1] RIP: 0033:0x7fbdda5c6b52 [ 154.130797][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 154.130817][ C1] RSP: 002b:00007ffced84ca20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 154.130841][ C1] RAX: ffffffffffffffda RBX: 00007ffced84ca20 RCX: 00007fbdda5c6b52 [ 154.130859][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 154.130874][ C1] RBP: 00007ffced84cbac R08: 0000000000000000 R09: 0000000000000001 [ 154.130889][ C1] R10: 00005555648137d0 R11: 0000000000000246 R12: 0000000000000001 [ 154.130903][ C1] R13: 00000000000927c0 R14: 000000000002569e R15: 00007ffced84cc00 [ 154.130929][ C1] [ 154.132877][ T5761] usb 4-1: USB disconnect, device number 10 [ 154.138529][ C1] ------------[ cut here ]------------ [ 154.491779][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.493105][ C1] 1 [ 154.493119][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz-executor/5610 [ 157.051161][ C1] Modules linked in: [ 157.055049][ C1] CPU: 1 UID: 0 PID: 5610 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 157.066062][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 157.071233][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.081269][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 157.087162][ C1] Code: 30 fc cc 41 ff c7 44 89 3d d9 26 ce 15 48 c7 c1 80 df 4b 8c 48 c7 c7 e0 df 4b 8c 84 c0 48 0f 45 f9 48 89 de e8 1d 5d 48 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 31 52 57 0a 3b 05 2f [ 157.106752][ C1] RSP: 0018:ffffc90000a089b8 EFLAGS: 00010046 [ 157.112806][ C1] RAX: 0000000000000050 RBX: ffffc90000a08a80 RCX: ede11d8bc4506000 [ 157.120761][ C1] RDX: 0000000000000100 RSI: 0000000000000104 RDI: 0000000000000000 [ 157.128716][ C1] RBP: ffff88807febdde0 R08: ffffffff8eb4bfe3 R09: 1ffffffff1d697fc [ 157.136674][ C1] R10: dffffc0000000000 R11: fffffbfff1d697fd R12: ffff8880330735c8 [ 157.144629][ C1] R13: ffff88804e107498 R14: dffffc0000000000 R15: 0000000000000001 [ 157.152587][ C1] FS: 0000555564813500(0000) GS:ffff888125045000(0000) knlGS:0000000000000000 [ 157.161500][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.168066][ C1] CR2: 00007efd6a3f0078 CR3: 000000005bc01000 CR4: 0000000000350ef0 [ 157.176024][ C1] Call Trace: [ 157.179285][ C1] [ 157.182112][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.187741][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 157.193285][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 157.198307][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 157.203844][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.208861][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.214509][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 157.220050][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.225676][ C1] ? synchronize_srcu+0x20a/0x260 [ 157.230697][ C1] wakeup_source_unregister+0x129/0x3f0 [ 157.236234][ C1] mmc_host_classdev_release+0x47/0x100 [ 157.241779][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 157.247926][ C1] device_release+0xc4/0x1f0 [ 157.252512][ C1] kobject_put+0x222/0x550 [ 157.256928][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 157.261675][ C1] call_timer_fn+0x192/0x5e0 [ 157.266262][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 157.272927][ C1] ? call_timer_fn+0xd4/0x5e0 [ 157.277600][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 157.282712][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.287897][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 157.294561][ C1] __run_timer_base+0x652/0x8b0 [ 157.299404][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.305031][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 157.310396][ C1] ? ktime_get+0x1f5/0x220 [ 157.314801][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.320422][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.326049][ C1] run_timer_softirq+0xb7/0x170 [ 157.330894][ C1] handle_softirqs+0x225/0x840 [ 157.335648][ C1] ? __irq_exit_rcu+0xca/0x220 [ 157.340403][ C1] __irq_exit_rcu+0xca/0x220 [ 157.344980][ C1] irq_exit_rcu+0x9/0x30 [ 157.349207][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 157.354829][ C1] [ 157.357742][ C1] [ 157.360655][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 157.366621][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 157.372676][ C1] Code: 8b 3d 84 cd 88 0c 48 89 de 5b e9 23 20 62 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 28 ad a6 11 65 8b 15 49 ad a6 11 81 e2 00 01 ff 00 74 [ 157.392267][ C1] RSP: 0018:ffffc90003c8f288 EFLAGS: 00000202 [ 157.398322][ C1] RAX: ffffffff824074ac RBX: ffffffff8240746a RCX: 0000000080000004 [ 157.406278][ C1] RDX: ffff88807febddc0 RSI: ffffffff8c4bd660 RDI: ffffffff8c4bd620 [ 157.414237][ C1] RBP: 0000000000000001 R08: ffffffff8240746a R09: 0000000000000000 [ 157.422192][ C1] R10: 0000000000000000 R11: ffffffff8eb59e20 R12: dffffc0000000000 [ 157.430150][ C1] R13: 0000000000000010 R14: 000000000005a845 R15: ffff88813fe53160 [ 157.438109][ C1] ? pfn_valid+0xba/0x480 [ 157.442440][ C1] ? pfn_valid+0xba/0x480 [ 157.446763][ C1] ? pfn_valid+0xfc/0x480 [ 157.451085][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.456711][ C1] pfn_valid+0xfc/0x480 [ 157.460861][ C1] page_table_check_set+0x25/0x530 [ 157.465969][ C1] copy_pmd_range+0x477a/0x5880 [ 157.470823][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.476442][ C1] ? kasan_save_track+0x4f/0x80 [ 157.481282][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 157.486300][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 157.491486][ C1] ? do_syscall_64+0x174/0x580 [ 157.496238][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.502296][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.507916][ C1] ? __lock_acquire+0x683/0x2cf0 [ 157.512846][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.518472][ C1] copy_page_range+0xc26/0x1250 [ 157.523331][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 157.528621][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.534242][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.539866][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 157.546624][ C1] dup_mmap+0xf21/0x1d90 [ 157.550865][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 157.555530][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 157.560548][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.566169][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.571795][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.577419][ C1] copy_mm+0x11a/0x480 [ 157.581477][ C1] ? copy_process+0xd3c/0x43e0 [ 157.586226][ C1] copy_process+0x1e75/0x43e0 [ 157.590894][ C1] ? copy_process+0xd3c/0x43e0 [ 157.595653][ C1] ? __pfx_copy_process+0x10/0x10 [ 157.600672][ C1] kernel_clone+0x2d7/0x940 [ 157.605171][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 157.610194][ C1] __x64_sys_clone+0x1b6/0x230 [ 157.614950][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 157.620234][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.625856][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 157.631146][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.637197][ C1] do_syscall_64+0x174/0x580 [ 157.641783][ C1] ? trace_irq_disable+0x3b/0x140 [ 157.646808][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.652684][ C1] RIP: 0033:0x7fbdda5c6b52 [ 157.657083][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 157.676673][ C1] RSP: 002b:00007ffced84ca20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 157.685076][ C1] RAX: ffffffffffffffda RBX: 00007ffced84ca20 RCX: 00007fbdda5c6b52 [ 157.693032][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 157.700996][ C1] RBP: 00007ffced84cbac R08: 0000000000000000 R09: 0000000000000001 [ 157.708952][ C1] R10: 00005555648137d0 R11: 0000000000000246 R12: 0000000000000001 [ 157.716911][ C1] R13: 00000000000927c0 R14: 000000000002569e R15: 00007ffced84cc00 [ 157.724874][ C1] [ 157.727880][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 157.735157][ C1] CPU: 1 UID: 0 PID: 5610 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 157.746167][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 157.751343][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 157.761379][ C1] Call Trace: [ 157.764640][ C1] [ 157.767468][ C1] vpanic+0x56c/0xa60 [ 157.771448][ C1] ? __pfx__printk+0x10/0x10 [ 157.776025][ C1] ? __pfx_vpanic+0x10/0x10 [ 157.780520][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 157.785798][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 157.790994][ C1] panic+0xc5/0xd0 [ 157.794708][ C1] ? __pfx_panic+0x10/0x10 [ 157.799132][ C1] __warn+0x315/0x4c0 [ 157.803110][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 157.808395][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 157.813671][ C1] __report_bug+0x276/0x570 [ 157.818165][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.823787][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 157.829067][ C1] ? __pfx___report_bug+0x10/0x10 [ 157.834082][ C1] ? vprintk_emit+0x2cf/0x560 [ 157.838765][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.844385][ C1] ? __wake_up_klogd+0xe6/0x120 [ 157.849253][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.854872][ C1] ? vprintk_emit+0x4eb/0x560 [ 157.859548][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 157.864568][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.870192][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.875814][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 157.881096][ C1] report_bug+0x16a/0x220 [ 157.885421][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 157.890697][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 157.895974][ C1] handle_bug+0x9c/0x200 [ 157.900213][ C1] exc_invalid_op+0x1a/0x50 [ 157.904707][ C1] asm_exc_invalid_op+0x1a/0x20 [ 157.909548][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 157.915434][ C1] Code: 30 fc cc 41 ff c7 44 89 3d d9 26 ce 15 48 c7 c1 80 df 4b 8c 48 c7 c7 e0 df 4b 8c 84 c0 48 0f 45 f9 48 89 de e8 1d 5d 48 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 31 52 57 0a 3b 05 2f [ 157.935026][ C1] RSP: 0018:ffffc90000a089b8 EFLAGS: 00010046 [ 157.941089][ C1] RAX: 0000000000000050 RBX: ffffc90000a08a80 RCX: ede11d8bc4506000 [ 157.949055][ C1] RDX: 0000000000000100 RSI: 0000000000000104 RDI: 0000000000000000 [ 157.957014][ C1] RBP: ffff88807febdde0 R08: ffffffff8eb4bfe3 R09: 1ffffffff1d697fc [ 157.964972][ C1] R10: dffffc0000000000 R11: fffffbfff1d697fd R12: ffff8880330735c8 [ 157.972930][ C1] R13: ffff88804e107498 R14: dffffc0000000000 R15: 0000000000000001 [ 157.980897][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 157.986182][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 157.991808][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 157.997354][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 158.002374][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 158.007916][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 158.012935][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.018559][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 158.024096][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.029719][ C1] ? synchronize_srcu+0x20a/0x260 [ 158.034736][ C1] wakeup_source_unregister+0x129/0x3f0 [ 158.040276][ C1] mmc_host_classdev_release+0x47/0x100 [ 158.045821][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 158.051973][ C1] device_release+0xc4/0x1f0 [ 158.056561][ C1] kobject_put+0x222/0x550 [ 158.060973][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 158.065721][ C1] call_timer_fn+0x192/0x5e0 [ 158.070311][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 158.076975][ C1] ? call_timer_fn+0xd4/0x5e0 [ 158.081653][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 158.086764][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.091952][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 158.098617][ C1] __run_timer_base+0x652/0x8b0 [ 158.103464][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.109091][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 158.114456][ C1] ? ktime_get+0x1f5/0x220 [ 158.118862][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.124482][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.130108][ C1] run_timer_softirq+0xb7/0x170 [ 158.134951][ C1] handle_softirqs+0x225/0x840 [ 158.139707][ C1] ? __irq_exit_rcu+0xca/0x220 [ 158.144466][ C1] __irq_exit_rcu+0xca/0x220 [ 158.149046][ C1] irq_exit_rcu+0x9/0x30 [ 158.153278][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 158.158902][ C1] [ 158.161812][ C1] [ 158.164726][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 158.170691][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 158.176748][ C1] Code: 8b 3d 84 cd 88 0c 48 89 de 5b e9 23 20 62 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 28 ad a6 11 65 8b 15 49 ad a6 11 81 e2 00 01 ff 00 74 [ 158.196364][ C1] RSP: 0018:ffffc90003c8f288 EFLAGS: 00000202 [ 158.202426][ C1] RAX: ffffffff824074ac RBX: ffffffff8240746a RCX: 0000000080000004 [ 158.210385][ C1] RDX: ffff88807febddc0 RSI: ffffffff8c4bd660 RDI: ffffffff8c4bd620 [ 158.218343][ C1] RBP: 0000000000000001 R08: ffffffff8240746a R09: 0000000000000000 [ 158.226298][ C1] R10: 0000000000000000 R11: ffffffff8eb59e20 R12: dffffc0000000000 [ 158.234254][ C1] R13: 0000000000000010 R14: 000000000005a845 R15: ffff88813fe53160 [ 158.242219][ C1] ? pfn_valid+0xba/0x480 [ 158.246549][ C1] ? pfn_valid+0xba/0x480 [ 158.250870][ C1] ? pfn_valid+0xfc/0x480 [ 158.255204][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.260828][ C1] pfn_valid+0xfc/0x480 [ 158.264976][ C1] page_table_check_set+0x25/0x530 [ 158.270083][ C1] copy_pmd_range+0x477a/0x5880 [ 158.274937][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.280558][ C1] ? kasan_save_track+0x4f/0x80 [ 158.285398][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 158.290425][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 158.295651][ C1] ? do_syscall_64+0x174/0x580 [ 158.300407][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.306463][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.312085][ C1] ? __lock_acquire+0x683/0x2cf0 [ 158.317019][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.322645][ C1] copy_page_range+0xc26/0x1250 [ 158.327501][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 158.332785][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.338420][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.344045][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 158.350807][ C1] dup_mmap+0xf21/0x1d90 [ 158.355054][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 158.359720][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 158.364742][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.370370][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.375996][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.381628][ C1] copy_mm+0x11a/0x480 [ 158.385687][ C1] ? copy_process+0xd3c/0x43e0 [ 158.390436][ C1] copy_process+0x1e75/0x43e0 [ 158.395104][ C1] ? copy_process+0xd3c/0x43e0 [ 158.399868][ C1] ? __pfx_copy_process+0x10/0x10 [ 158.404883][ C1] kernel_clone+0x2d7/0x940 [ 158.409379][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 158.414403][ C1] __x64_sys_clone+0x1b6/0x230 [ 158.419162][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 158.424448][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.430071][ C1] ? do_user_addr_fault+0xc4a/0x1340 [ 158.435354][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.441406][ C1] do_syscall_64+0x174/0x580 [ 158.445991][ C1] ? trace_irq_disable+0x3b/0x140 [ 158.451012][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.456893][ C1] RIP: 0033:0x7fbdda5c6b52 [ 158.461295][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 158.480887][ C1] RSP: 002b:00007ffced84ca20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 158.489312][ C1] RAX: ffffffffffffffda RBX: 00007ffced84ca20 RCX: 00007fbdda5c6b52 [ 158.497270][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 158.505225][ C1] RBP: 00007ffced84cbac R08: 0000000000000000 R09: 0000000000000001 [ 158.513180][ C1] R10: 00005555648137d0 R11: 0000000000000246 R12: 0000000000000001 [ 158.521136][ C1] R13: 00000000000927c0 R14: 000000000002569e R15: 00007ffced84cc00 [ 158.529100][ C1] [ 158.532348][ C1] Kernel Offset: disabled [ 158.536661][ C1] Rebooting in 86400 seconds..