last executing test programs: 3.702980513s ago: executing program 2 (id=1028): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$vbi(0x0, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) 3.559735636s ago: executing program 2 (id=1029): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.378580852s ago: executing program 4 (id=1031): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) r4 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0xaf0d, 0x100) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x48033, 0xffffffffffffffff, 0x40000000) r5 = accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000002c0)={@empty, 0x0}, &(0x7f0000000300)=0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xffe0, 0x3}, {0x10, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r11 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="35872db213da7b90cf1477dc697bc9889ad8cd18edf9a1adee33a76199af5e9f48fec74915d5a82f4af66d16015d35a41eee1988cf050dac86c298294e6ef86dde83fef46ea9d86ad51eda56c6d1b638a263b5e663964882430825597f344b34df219a0d9c940187afc80b8cdfec6be249ed640388c04bae834056b12d3bba84be482fe3967c5ab5b8b582995020c693dfff083e36ab71534f89f0813d0104c8c037c1ff6d155750abf2322d8728097064d3b0", 0xb3}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r6, @remote, @multicast1}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x10, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r9, @multicast2, @rand_addr=0x64010102}}}, @ip_ttl={{0x10}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @empty, @broadcast}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}], 0xb8}, 0x890) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r12 = socket$unix(0x1, 0x2, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r12, @ANYBLOB="b7eb290a"], 0x20000600}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 3.222990428s ago: executing program 2 (id=1033): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.222501717s ago: executing program 3 (id=1034): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000040)="7d3ed2ea1f2f210c0784b2ce65c9", 0xe}], 0x1}, 0x400c0c8) 3.108716178s ago: executing program 4 (id=1035): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x24, 0x3, 0x46d, 0xc082, 0x0, 0x0, "0600ff0901a10185107508950609018102090191028511750895130901810209019102c0"}}, 0x13c) write$UHID_INPUT2(r0, &(0x7f0000000380), 0x6) 3.002450642s ago: executing program 3 (id=1038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20000400) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf25070fef93", @ANYRESHEX=r4, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}}, 0x20040854) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0xb, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000240)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2.894992245s ago: executing program 1 (id=1039): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$vbi(0x0, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) 2.839708516s ago: executing program 4 (id=1040): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}}, 0xc00) getresuid(&(0x7f0000006500), &(0x7f0000006540), 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@migrate={0x50, 0x21, 0x1, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)) syz_usb_connect$midi(0x2, 0x2b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x6, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0x2, 0x7}]}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 2.60242526s ago: executing program 0 (id=1041): syz_clone3(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r1, &(0x7f0000000400)='PASV\r\n', 0x6) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,13', 0x2a) 2.554064586s ago: executing program 1 (id=1042): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r1, &(0x7f0000000400)='PASV\r\n', 0x6) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000500)='227 Entering Pass', 0x11) 1.960107462s ago: executing program 3 (id=1043): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}}, 0xc00) getresuid(&(0x7f0000006500), &(0x7f0000006540), 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@migrate={0x50, 0x21, 0x1, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)) syz_usb_connect$midi(0x2, 0x2b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x6, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0x2, 0x7}]}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 1.57016581s ago: executing program 0 (id=1044): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.569830422s ago: executing program 1 (id=1045): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) r4 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0xaf0d, 0x100) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x48033, 0xffffffffffffffff, 0x40000000) r5 = accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000002c0)={@empty, 0x0}, &(0x7f0000000300)=0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xffe0, 0x3}, {0x10, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r11 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="35872db213da7b90cf1477dc697bc9889ad8cd18edf9a1adee33a76199af5e9f48fec74915d5a82f4af66d16015d35a41eee1988cf050dac86c298294e6ef86dde83fef46ea9d86ad51eda56c6d1b638a263b5e663964882430825597f344b34df219a0d9c940187afc80b8cdfec6be249ed640388c04bae834056b12d3bba84be482fe3967c5ab5b8b582995020c693dfff083e36ab71534f89f0813d0104c8c037c1ff6d155750abf2322d8728097064d3b0", 0xb3}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r6, @remote, @multicast1}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x10, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r9, @multicast2, @rand_addr=0x64010102}}}, @ip_ttl={{0x10}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @empty, @broadcast}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}], 0xb8}, 0x890) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r12 = socket$unix(0x1, 0x2, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r12, @ANYBLOB="b7eb290a"], 0x20000600}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 1.49243007s ago: executing program 0 (id=1046): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$pppoe(0x18, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c046, 0x0, 0x0) 1.442434595s ago: executing program 1 (id=1047): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000180)="27031c0016", 0x5}, {&(0x7f0000000040)="7d3ed2ea1f2f210c0784b2ce65c9e34b1100301a03df46a4853ed1b3f1dc15569532", 0x22}, {&(0x7f00000007c0)="43f8d35075f3da60f330f94c842e4f5a081a2412f81853dbf7a1e6dfdf3c", 0x1e}], 0x3}, 0x400c0c8) 1.370258325s ago: executing program 0 (id=1048): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000000040)="7d3ed2ea1f2f210c0784b2ce65c9", 0xe}], 0x2}, 0x400c0c8) 1.370016505s ago: executing program 1 (id=1049): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0) 1.262694158s ago: executing program 1 (id=1050): r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}}, 0xc00) getresuid(&(0x7f0000006500), &(0x7f0000006540), 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xffe0}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x58, 0x4855}, 0x24000052) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@migrate={0x50, 0x21, 0x1, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)) syz_usb_connect$midi(0x2, 0x2b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x6, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0x2, 0x7}]}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) 1.251655248s ago: executing program 0 (id=1051): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 1.227436802s ago: executing program 4 (id=1052): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$vbi(0x0, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) 1.087817731s ago: executing program 4 (id=1053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[], 0x34}}, 0x20000400) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf25070fef93", @ANYRESHEX=r4, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}}, 0x20040854) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0xb, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000240)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 869.552666ms ago: executing program 0 (id=1054): syz_clone3(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r1, &(0x7f0000000400)='PASV\r\n', 0x6) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,13', 0x2a) 447.492881ms ago: executing program 2 (id=1055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r1, &(0x7f0000000400)='PASV\r\n', 0x6) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000500)='227 Entering Passive Mode', 0x19) 373.833066ms ago: executing program 3 (id=1056): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 350.309784ms ago: executing program 2 (id=1057): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x80, 0x1e0, 0x81}) r4 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0xaf0d, 0x100) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x48033, 0xffffffffffffffff, 0x40000000) r5 = accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000002c0)={@empty, 0x0}, &(0x7f0000000300)=0x14) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@delqdisc={0x24, 0x25, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xffe0, 0x3}, {0x10, 0xfff1}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r11 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="35872db213da7b90cf1477dc697bc9889ad8cd18edf9a1adee33a76199af5e9f48fec74915d5a82f4af66d16015d35a41eee1988cf050dac86c298294e6ef86dde83fef46ea9d86ad51eda56c6d1b638a263b5e663964882430825597f344b34df219a0d9c940187afc80b8cdfec6be249ed640388c04bae834056b12d3bba84be482fe3967c5ab5b8b582995020c693dfff083e36ab71534f89f0813d0104c8c037c1ff6d155750abf2322d8728097064d3b0", 0xb3}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r6, @remote, @multicast1}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x80000001}}, @ip_ttl={{0x10, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r9, @multicast2, @rand_addr=0x64010102}}}, @ip_ttl={{0x10}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @empty, @broadcast}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_ttl={{0x10, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}], 0xb8}, 0x890) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r12 = socket$unix(0x1, 0x2, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r12, @ANYBLOB="b7eb290a"], 0x20000600}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 202.761362ms ago: executing program 3 (id=1058): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$pppoe(0x18, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x404c046, 0x0, 0x0) 90.279013ms ago: executing program 3 (id=1059): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x62, 0x4) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x8c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 6.295985ms ago: executing program 4 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0) 0s ago: executing program 2 (id=1061): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000000040)="7d3ed2ea1f2f210c0784b2ce65c9", 0xe}], 0x2}, 0x400c0c8) kernel console output (not intermixed with test programs): 122.842411][ T6312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.208'. [ 122.854572][ T6310] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.874682][ T6310] bond1: (slave team0): Enslaving as an active interface with an up link [ 123.267373][ T6329] input: syz0 as /devices/virtual/input/input8 [ 125.017723][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 125.167705][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 125.179151][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 125.195268][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.195322][ T10] usb 3-1: Product: syz [ 125.195339][ T10] usb 3-1: Manufacturer: syz [ 125.195381][ T10] usb 3-1: SerialNumber: syz [ 125.243881][ T10] usb 3-1: config 0 descriptor?? [ 125.561718][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.223'. [ 125.587464][ T6359] bond1: (slave team0): Releasing backup interface [ 125.888947][ T6364] netlink: 'syz.0.225': attribute type 11 has an invalid length. [ 126.138225][ T136] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 126.150056][ T6363] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 127.193280][ T6386] input: syz0 as /devices/virtual/input/input9 [ 127.469302][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 127.469353][ T6393] bond0: option lp_interval: invalid value (18446744072707910257) [ 127.469398][ T6393] bond0: option lp_interval: allowed values 1 - 2147483647 [ 128.008449][ T6411] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 128.031745][ T6411] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.128458][ T1217] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.287610][ T5684] usb 3-1: USB disconnect, device number 4 [ 128.293849][ T1217] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 128.304250][ T1217] usb 1-1: config 0 has no interfaces? [ 128.314518][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.314559][ T1217] usb 1-1: Product: syz [ 128.314592][ T1217] usb 1-1: Manufacturer: syz [ 128.314612][ T1217] usb 1-1: SerialNumber: syz [ 128.358908][ T1217] usb 1-1: config 0 descriptor?? [ 128.519277][ T6417] netlink: 'syz.2.242': attribute type 11 has an invalid length. [ 128.607011][ T5684] usb 1-1: USB disconnect, device number 5 [ 128.748881][ T6420] loop5: detected capacity change from 0 to 7 [ 128.767850][ T6420] Dev loop5: unable to read RDB block 7 [ 128.776850][ T6420] loop5: AHDI p1 p2 p3 [ 128.781171][ T6420] loop5: partition table partially beyond EOD, truncated [ 128.788665][ T6420] loop5: p1 start 1818582900 is beyond EOD, truncated [ 128.788718][ T6420] loop5: p3 start 335544320 is beyond EOD, truncated [ 129.494283][ T6433] blktrace: Concurrent blktraces are not allowed on sg0 [ 129.944403][ T6444] input: syz0 as /devices/virtual/input/input10 [ 130.095366][ T6452] netlink: 'syz.3.257': attribute type 11 has an invalid length. [ 130.259238][ T6455] bond2: Unable to set down delay as MII monitoring is disabled [ 130.273142][ T6455] bond2 (unregistering): Released all slaves [ 130.581787][ T6465] netlink: 'syz.0.261': attribute type 11 has an invalid length. [ 130.826416][ T6471] netlink: 'syz.1.263': attribute type 4 has an invalid length. [ 130.917409][ T5699] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.031944][ T6476] blktrace: Concurrent blktraces are not allowed on sg0 [ 131.088109][ T5699] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 131.106877][ T5699] usb 3-1: config 0 has no interfaces? [ 131.126815][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.126858][ T5699] usb 3-1: Product: syz [ 131.126889][ T5699] usb 3-1: Manufacturer: syz [ 131.126909][ T5699] usb 3-1: SerialNumber: syz [ 131.163182][ T5699] usb 3-1: config 0 descriptor?? [ 131.410420][ T1217] usb 3-1: USB disconnect, device number 5 [ 131.766949][ T1046] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 131.779830][ T6481] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 132.740252][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.747052][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.952090][ T6513] loop5: detected capacity change from 0 to 7 [ 132.965614][ T6513] Dev loop5: unable to read RDB block 7 [ 132.971580][ T6513] loop5: AHDI p1 p2 p3 [ 132.971606][ T6513] loop5: partition table partially beyond EOD, truncated [ 132.971798][ T6513] loop5: p1 start 1818582900 is beyond EOD, truncated [ 132.971820][ T6513] loop5: p3 start 335544320 is beyond EOD, truncated [ 133.000894][ T5699] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.157888][ T5699] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 133.158022][ T6516] netlink: 'syz.4.280': attribute type 11 has an invalid length. [ 133.178343][ T5699] usb 2-1: config 0 has no interfaces? [ 133.186228][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.186283][ T5699] usb 2-1: Product: syz [ 133.186304][ T5699] usb 2-1: Manufacturer: syz [ 133.186324][ T5699] usb 2-1: SerialNumber: syz [ 133.212690][ T5699] usb 2-1: config 0 descriptor?? [ 133.471357][ T5684] usb 2-1: USB disconnect, device number 3 [ 133.532982][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 133.624820][ T6525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.639094][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.660671][ T6527] bond1: (slave team0): Enslaving as an active interface with an up link [ 133.891041][ T6534] netlink: 'syz.3.286': attribute type 11 has an invalid length. [ 134.147407][ T12] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 134.161945][ T6535] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 134.775945][ T6550] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.699007][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 135.748024][ T5701] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.822063][ T6570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.842701][ T6574] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.854238][ T6574] bond2: (slave team0): Enslaving as an active interface with an up link [ 135.917951][ T5701] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 135.921467][ T5701] usb 5-1: config 0 has no interfaces? [ 135.936491][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.936516][ T5701] usb 5-1: Product: syz [ 135.936533][ T5701] usb 5-1: Manufacturer: syz [ 135.936548][ T5701] usb 5-1: SerialNumber: syz [ 135.965596][ T5701] usb 5-1: config 0 descriptor?? [ 136.014578][ T6576] netlink: 'syz.0.298': attribute type 11 has an invalid length. [ 136.039039][ T5699] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.186922][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 136.194884][ T5699] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 136.208241][ T5699] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 136.208301][ T5699] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 136.208402][ T5699] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.208476][ T5699] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.208569][ T5699] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.208634][ T5699] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.208744][ T5699] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 136.208819][ T5699] usb 2-1: config 168 interface 0 has no altsetting 0 [ 136.242262][ T5701] usb 5-1: USB disconnect, device number 7 [ 136.277289][ T5699] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 136.277326][ T5699] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 136.277365][ T5699] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.277392][ T5699] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.277417][ T5699] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.277473][ T5699] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.277546][ T5699] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 136.277617][ T5699] usb 2-1: config 168 interface 0 has no altsetting 0 [ 136.329776][ T5699] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 136.329883][ T5699] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 136.330026][ T5699] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 136.330092][ T5699] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.330151][ T5699] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.330215][ T5699] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.330280][ T5699] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 136.330340][ T5699] usb 2-1: config 168 interface 0 has no altsetting 0 [ 136.401092][ T5699] usb 2-1: string descriptor 0 read error: -22 [ 136.401436][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.557617][ T5699] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 136.622363][ T6581] netlink: 56 bytes leftover after parsing attributes in process `syz.2.299'. [ 136.903498][ T5684] usb 2-1: USB disconnect, device number 4 [ 137.031261][ T136] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 137.045228][ T6587] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 137.165538][ T6573] fuse: Bad value for 'fd' [ 137.301413][ T6595] netlink: 'syz.0.303': attribute type 21 has an invalid length. [ 137.301486][ T6595] netlink: 128 bytes leftover after parsing attributes in process `syz.0.303'. [ 137.302516][ T6595] netlink: 'syz.0.303': attribute type 5 has an invalid length. [ 137.302559][ T6595] netlink: 'syz.0.303': attribute type 6 has an invalid length. [ 137.302598][ T6595] netlink: 3 bytes leftover after parsing attributes in process `syz.0.303'. [ 137.344779][ T31] audit: type=1326 audit(1788764478.397:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.0.303" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 137.353249][ T31] audit: type=1326 audit(1788764478.417:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.0.303" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 137.384642][ T31] audit: type=1326 audit(1788764478.427:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.0.303" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 137.384802][ T31] audit: type=1326 audit(1788764478.447:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.0.303" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 137.418854][ T31] audit: type=1326 audit(1788764478.447:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.0.303" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 137.419024][ T31] audit: type=1326 audit(1788764478.487:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.0.303" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 137.430348][ T31] audit: type=1326 audit(1788764478.487:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.0.303" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 137.430500][ T31] audit: type=1326 audit(1788764478.497:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz.0.303" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 137.576886][ T5684] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 137.733196][ T5684] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 137.747214][ T5684] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.747258][ T5684] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.771899][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.771952][ T5684] usb 2-1: Product: syz [ 137.771991][ T5684] usb 2-1: Manufacturer: syz [ 137.772013][ T5684] usb 2-1: SerialNumber: syz [ 137.797538][ T5684] usb 2-1: config 0 descriptor?? [ 138.033268][ T5684] usb 2-1: USB disconnect, device number 5 [ 138.120209][ T6611] netlink: 'syz.4.310': attribute type 4 has an invalid length. [ 138.242535][ T6614] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 138.331640][ T5701] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.477531][ T5701] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 138.478942][ T5701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.479011][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.524265][ T5701] usb 3-1: config 0 descriptor?? [ 138.548552][ T5701] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 138.950186][ T6606] netlink: 'syz.2.308': attribute type 7 has an invalid length. [ 138.950248][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 138.951232][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 139.008466][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 139.010478][ T1217] usb 3-1: USB disconnect, device number 6 [ 139.254688][ T6630] syz_tun: entered allmulticast mode [ 139.994835][ T6628] syz_tun: left allmulticast mode [ 140.569324][ T50] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 140.572090][ T6637] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 141.911528][ T1217] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.057353][ T1217] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 142.082325][ T1217] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.083115][ T1217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.123605][ T1217] usb 1-1: config 0 descriptor?? [ 142.149447][ T1217] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 142.546230][ T6653] netlink: 'syz.0.322': attribute type 7 has an invalid length. [ 142.546294][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 142.546411][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 142.618546][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.322'. [ 142.634028][ T1217] usb 1-1: USB disconnect, device number 6 [ 142.719208][ T6686] netlink: 'syz.2.333': attribute type 21 has an invalid length. [ 142.719260][ T6686] netlink: 128 bytes leftover after parsing attributes in process `syz.2.333'. [ 142.719438][ T6686] netlink: 'syz.2.333': attribute type 5 has an invalid length. [ 142.719543][ T6686] netlink: 'syz.2.333': attribute type 6 has an invalid length. [ 142.719575][ T6686] netlink: 3 bytes leftover after parsing attributes in process `syz.2.333'. [ 142.787492][ T31] audit: type=1326 audit(1788764483.857:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.333" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 142.814009][ T31] audit: type=1326 audit(1788764483.877:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.333" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 142.829712][ T31] audit: type=1326 audit(1788764483.897:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.333" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 142.829847][ T31] audit: type=1326 audit(1788764483.897:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.333" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 142.829966][ T31] audit: type=1326 audit(1788764483.897:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.333" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 142.843720][ T31] audit: type=1326 audit(1788764483.907:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.333" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 142.843827][ T31] audit: type=1326 audit(1788764483.907:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.333" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 142.843947][ T31] audit: type=1326 audit(1788764483.907:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6685 comm="syz.2.333" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 144.696526][ T6696] syz.0.337: vmalloc error: size 8192, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 144.697072][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: syz.0.337 Not tainted syzkaller #0 PREEMPT(full) [ 144.697098][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.697125][ T6696] Call Trace: [ 144.697138][ T6696] [ 144.697148][ T6696] dump_stack_lvl+0xe8/0x150 [ 144.697199][ T6696] warn_alloc+0x24d/0x270 [ 144.697236][ T6696] ? __pfx_warn_alloc+0x10/0x10 [ 144.697265][ T6696] ? alloc_pages_mpol+0x256/0x390 [ 144.697305][ T6696] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 144.697371][ T6696] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 144.697407][ T6696] ? __kmalloc_cache_noprof+0x321/0x600 [ 144.697430][ T6696] ? __kmalloc_cache_noprof+0x14d/0x600 [ 144.697452][ T6696] ? xskq_create+0x56/0x220 [ 144.697489][ T6696] xskq_create+0x148/0x220 [ 144.697521][ T6696] ? xsk_init_queue+0x8a/0xe0 [ 144.697553][ T6696] xsk_init_queue+0x8a/0xe0 [ 144.697588][ T6696] xsk_setsockopt+0x52a/0x960 [ 144.697621][ T6696] ? __pfx_xsk_setsockopt+0x10/0x10 [ 144.697654][ T6696] ? __pfx_aa_sk_perm+0x10/0x10 [ 144.697688][ T6696] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 144.697715][ T6696] ? __pfx_xsk_setsockopt+0x10/0x10 [ 144.697747][ T6696] do_sock_setsockopt+0x17c/0x1b0 [ 144.697777][ T6696] __ia32_sys_setsockopt+0x13d/0x1b0 [ 144.697809][ T6696] __do_fast_syscall_32+0x27a/0x6a0 [ 144.697836][ T6696] ? do_fast_syscall_32+0x33/0x70 [ 144.697858][ T6696] ? asm_int80_emulation+0x1a/0x20 [ 144.697880][ T6696] ? do_int80_emulation+0x299/0x500 [ 144.697907][ T6696] do_fast_syscall_32+0x33/0x70 [ 144.697930][ T6696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.697956][ T6696] RIP: 0023:0xf7f280ec [ 144.697991][ T6696] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 144.698011][ T6696] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 144.698034][ T6696] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000011b [ 144.698050][ T6696] RDX: 0000000000000005 RSI: 0000000080000300 RDI: 0000000000000004 [ 144.698064][ T6696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.698077][ T6696] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 144.698089][ T6696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.698121][ T6696] [ 144.925792][ T6696] Mem-Info: [ 144.925839][ T6696] active_anon:8555 inactive_anon:0 isolated_anon:0 [ 144.925839][ T6696] active_file:0 inactive_file:43330 isolated_file:0 [ 144.925839][ T6696] unevictable:0 dirty:317 writeback:0 [ 144.925839][ T6696] slab_reclaimable:10837 slab_unreclaimable:98082 [ 144.925839][ T6696] mapped:32139 shmem:2556 pagetables:1253 [ 144.925839][ T6696] sec_pagetables:0 bounce:0 [ 144.925839][ T6696] kernel_misc_reclaimable:0 [ 144.925839][ T6696] free:1320314 free_pcp:11551 free_cma:0 [ 144.925982][ T6696] Node 0 active_anon:34220kB inactive_anon:0kB active_file:0kB inactive_file:173120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128556kB dirty:1268kB writeback:0kB shmem:10224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12256kB pagetables:4896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 144.926116][ T6696] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 144.926177][ T6696] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.926242][ T6696] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 144.926284][ T6696] Node 0 DMA32 free:1328128kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34220kB inactive_anon:0kB active_file:0kB inactive_file:173120kB unevictable:0kB writepending:1268kB zspages:52kB present:3129332kB managed:2546668kB mlocked:0kB bounce:0kB free_pcp:46204kB local_pcp:20452kB free_cma:0kB [ 144.926419][ T6696] lowmem_reserve[]: 0 0 0 0 0 [ 144.926539][ T6696] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.926853][ T6696] lowmem_reserve[]: 0 0 0 0 0 [ 144.926956][ T6696] Node 1 Normal free:3937768kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.927110][ T6696] lowmem_reserve[]: 0 0 0 0 0 [ 144.927214][ T6696] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 144.939979][ T6696] Node 0 DMA32: 632*4kB (UE) 360*8kB (UME) 86*16kB (UE) 6*32kB (UE) 1*64kB (E) 1*128kB (M) 0*256kB 2*512kB (UM) 7*1024kB (UM) 7*2048kB (UM) 317*4096kB (M) = 1328128kB [ 144.940457][ T6696] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 144.940780][ T6696] Node 1 Normal: 10*4kB (UM) 12*8kB (UM) 6*16kB (UM) 10*32kB (UM) 5*64kB (UM) 5*128kB (UM) 4*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3937768kB [ 144.952704][ T6696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.952724][ T6696] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.952747][ T6696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.952765][ T6696] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.952783][ T6696] 45882 total pagecache pages [ 144.952796][ T6696] 0 pages in swap cache [ 144.952804][ T6696] Free swap = 116652kB [ 144.952813][ T6696] Total swap = 124996kB [ 144.952822][ T6696] 2097051 pages RAM [ 144.952830][ T6696] 0 pages HighMem/MovableOnly [ 144.952838][ T6696] 428768 pages reserved [ 144.952845][ T6696] 0 pages cma reserved [ 145.465242][ T6706] netlink: 'syz.3.340': attribute type 11 has an invalid length. [ 145.826847][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.977655][ T9] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 145.979796][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.979947][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.003010][ T9] usb 5-1: config 0 descriptor?? [ 146.042447][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 146.152317][ T6720] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 146.837207][ T6692] netlink: 'syz.4.335': attribute type 7 has an invalid length. [ 146.837252][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.335'. [ 146.837300][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 146.916309][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.335'. [ 146.932411][ T9] usb 5-1: USB disconnect, device number 8 [ 146.952744][ T6730] netlink: 'syz.3.347': attribute type 11 has an invalid length. [ 147.361602][ T6741] netlink: 'syz.1.351': attribute type 11 has an invalid length. [ 147.506786][ T1217] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.662062][ T1217] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 147.673738][ T1217] usb 3-1: config 0 has no interfaces? [ 147.683570][ T1217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.683617][ T1217] usb 3-1: Product: syz [ 147.685568][ T1217] usb 3-1: Manufacturer: syz [ 147.685616][ T1217] usb 3-1: SerialNumber: syz [ 147.714578][ T1217] usb 3-1: config 0 descriptor?? [ 147.948450][ T5676] usb 3-1: USB disconnect, device number 7 [ 148.029344][ T6752] bond2: Unable to set up delay as MII monitoring is disabled [ 148.039616][ T6752] bond2 (unregistering): Released all slaves [ 148.069943][ T6754] bond1: (slave team0): Releasing backup interface [ 148.127989][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 148.216841][ T6756] netlink: 'syz.0.356': attribute type 11 has an invalid length. [ 148.281125][ T9] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 148.297591][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.297637][ T9] usb 5-1: Product: syz [ 148.297669][ T9] usb 5-1: Manufacturer: syz [ 148.297726][ T9] usb 5-1: SerialNumber: syz [ 148.334724][ T9] usb 5-1: config 0 descriptor?? [ 148.351864][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 148.351917][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 148.576436][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 148.731366][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 148.731981][ T9] dib0700: firmware download failed at 7 with -22 [ 148.754175][ T9] usb 5-1: USB disconnect, device number 9 [ 149.033254][ T6773] netlink: 'syz.1.361': attribute type 11 has an invalid length. [ 149.743726][ T6785] netlink: 48 bytes leftover after parsing attributes in process `syz.3.365'. [ 150.729344][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 151.137997][ T6813] netlink: 48 bytes leftover after parsing attributes in process `syz.2.376'. [ 151.662586][ T6822] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 152.212250][ T6835] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 152.287963][ T6835] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.574677][ T6846] netlink: 48 bytes leftover after parsing attributes in process `syz.0.387'. [ 152.606873][ T5676] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 152.760878][ T5676] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 152.790899][ T5676] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.803460][ T5676] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.813645][ T5676] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.813681][ T5676] usb 4-1: config 0 interface 0 has no altsetting 0 [ 152.813708][ T5676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.848225][ T5676] usb 4-1: config 0 descriptor?? [ 153.305371][ T5676] hid-rmi 0003:1532:011D.0004: unbalanced collection at end of report description [ 153.310983][ T6859] syzkaller0: entered promiscuous mode [ 153.311034][ T6859] syzkaller0: entered allmulticast mode [ 153.331530][ T5676] hid-rmi 0003:1532:011D.0004: parse failed [ 153.331669][ T5676] hid-rmi 0003:1532:011D.0004: probe with driver hid-rmi failed with error -22 [ 153.662992][ T6841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.680345][ T6841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.699277][ T6866] syz_tun: entered allmulticast mode [ 153.705597][ T5676] usb 4-1: USB disconnect, device number 7 [ 154.115242][ T1046] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 154.139505][ T6870] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 154.408475][ T6864] syz_tun: left allmulticast mode [ 154.687827][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 154.707527][ T6879] netlink: 'syz.0.398': attribute type 11 has an invalid length. [ 155.216985][ T6892] blktrace: Concurrent blktraces are not allowed on sg0 [ 155.826944][ T5739] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.868067][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'. [ 155.927667][ T6906] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 155.977218][ T5739] usb 4-1: Using ep0 maxpacket: 8 [ 155.992559][ T5739] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 156.013331][ T5739] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 156.013397][ T5739] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 156.013500][ T5739] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 156.013588][ T5739] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.013667][ T5739] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.013737][ T5739] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 156.013806][ T5739] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 156.013879][ T5739] usb 4-1: config 168 interface 0 has no altsetting 0 [ 156.020814][ T5739] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 156.020851][ T5739] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 156.020889][ T5739] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 156.022784][ T5739] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.022864][ T5739] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.028611][ T5739] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 156.028719][ T5739] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 156.028866][ T5739] usb 4-1: config 168 interface 0 has no altsetting 0 [ 156.063478][ T5739] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 156.063582][ T5739] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 156.063688][ T5739] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 156.063775][ T5739] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.063855][ T5739] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.063926][ T5739] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 156.063992][ T5739] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 156.064056][ T5739] usb 4-1: config 168 interface 0 has no altsetting 0 [ 156.247486][ T5739] usb 4-1: string descriptor 0 read error: -22 [ 156.247863][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.378137][ T5739] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 156.537935][ T6915] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 156.585518][ T6915] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.782148][ T1217] usb 4-1: USB disconnect, device number 8 [ 157.110536][ T1356] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 157.126598][ T6922] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 157.159622][ T6901] fuse: Bad value for 'fd' [ 157.526851][ T5739] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 157.677826][ T5739] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 157.692797][ T5739] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.692842][ T5739] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.723776][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.723825][ T5739] usb 4-1: Product: syz [ 157.723873][ T5739] usb 4-1: Manufacturer: syz [ 157.723937][ T5739] usb 4-1: SerialNumber: syz [ 157.760272][ T5739] usb 4-1: config 0 descriptor?? [ 158.024755][ T5739] usb 4-1: USB disconnect, device number 9 [ 158.052670][ T6191] udevd[6191]: setting mode of /dev/bus/usb/004/009 to 020664 failed: No such file or directory [ 158.060423][ T6191] udevd[6191]: setting owner of /dev/bus/usb/004/009 to uid=0, gid=0 failed: No such file or directory [ 158.238351][ T6942] blktrace: Concurrent blktraces are not allowed on sg0 [ 158.602838][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 158.627086][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 158.726397][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 158.808493][ T5701] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 158.881563][ T6953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.422'. [ 158.977297][ T5701] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 158.987454][ T5701] usb 5-1: config 0 has no interfaces? [ 159.006301][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.006358][ T5701] usb 5-1: Product: syz [ 159.006395][ T5701] usb 5-1: Manufacturer: syz [ 159.006416][ T5701] usb 5-1: SerialNumber: syz [ 159.044616][ T5701] usb 5-1: config 0 descriptor?? [ 159.273027][ T1046] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 159.292249][ T5701] usb 5-1: USB disconnect, device number 10 [ 159.300290][ T6959] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 159.685257][ T6971] blktrace: Concurrent blktraces are not allowed on sg0 [ 159.697190][ T5676] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.857066][ T5676] usb 3-1: Using ep0 maxpacket: 8 [ 159.863010][ T5676] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 159.878166][ T5676] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 159.878217][ T5676] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 159.878277][ T5676] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 159.878313][ T5676] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.878344][ T5676] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.878372][ T5676] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.878403][ T5676] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 159.878434][ T5676] usb 3-1: config 168 interface 0 has no altsetting 0 [ 159.936475][ T5676] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 159.936519][ T5676] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 159.936593][ T5676] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 159.936622][ T5676] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.936649][ T5676] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.989683][ T5676] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.989725][ T5676] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 159.989755][ T5676] usb 3-1: config 168 interface 0 has no altsetting 0 [ 160.039844][ T5676] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 160.039887][ T5676] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 160.039959][ T5676] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.039989][ T5676] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.040015][ T5676] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.040041][ T5676] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.040068][ T5676] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 160.040096][ T5676] usb 3-1: config 168 interface 0 has no altsetting 0 [ 160.152957][ T5676] usb 3-1: string descriptor 0 read error: -22 [ 160.153115][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.184797][ T5676] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 160.240178][ T6977] netlink: 'syz.4.431': attribute type 11 has an invalid length. [ 160.543133][ T1217] usb 3-1: USB disconnect, device number 8 [ 160.823422][ T6997] syzkaller0: entered promiscuous mode [ 160.823487][ T6997] syzkaller0: entered allmulticast mode [ 160.840952][ T6968] fuse: Bad value for 'fd' [ 161.148741][ T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 161.194091][ T7009] netlink: 'syz.3.441': attribute type 11 has an invalid length. [ 161.307620][ T10] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 161.315929][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.315986][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.353856][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.353905][ T10] usb 3-1: Product: syz [ 161.353922][ T10] usb 3-1: Manufacturer: syz [ 161.353952][ T10] usb 3-1: SerialNumber: syz [ 161.383055][ T10] usb 3-1: config 0 descriptor?? [ 161.643035][ T10] usb 3-1: USB disconnect, device number 9 [ 161.728626][ T7022] netlink: 'syz.1.446': attribute type 11 has an invalid length. [ 161.765577][ T13] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 161.784014][ T7016] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 162.890352][ T7046] netlink: 'syz.4.451': attribute type 11 has an invalid length. [ 163.126045][ T7054] netlink: 'syz.1.454': attribute type 11 has an invalid length. [ 164.140491][ T7067] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 164.176445][ T7067] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.356419][ T50] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 164.366409][ T7070] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 164.691471][ T7086] netlink: 'syz.1.463': attribute type 21 has an invalid length. [ 164.691777][ T7086] netlink: 128 bytes leftover after parsing attributes in process `syz.1.463'. [ 164.691989][ T7086] netlink: 'syz.1.463': attribute type 5 has an invalid length. [ 164.692029][ T7086] netlink: 'syz.1.463': attribute type 6 has an invalid length. [ 164.692060][ T7086] netlink: 3 bytes leftover after parsing attributes in process `syz.1.463'. [ 164.796525][ T31] audit: type=1326 audit(1788764505.857:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 164.822938][ T31] audit: type=1326 audit(1788764505.857:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 164.822991][ T31] audit: type=1326 audit(1788764505.877:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 164.823036][ T31] audit: type=1326 audit(1788764505.877:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 164.823090][ T31] audit: type=1326 audit(1788764505.877:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 164.847362][ T31] audit: type=1326 audit(1788764505.907:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 164.847501][ T31] audit: type=1326 audit(1788764505.907:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 164.847607][ T31] audit: type=1326 audit(1788764505.907:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7085 comm="syz.1.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 165.154396][ T7053] netlink: 'syz.2.453': attribute type 7 has an invalid length. [ 165.168484][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 165.168569][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 165.211305][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 165.494327][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 165.526150][ T7097] bond2: (slave team0): Releasing backup interface [ 166.437035][ T7125] blktrace: Concurrent blktraces are not allowed on sg0 [ 166.591944][ T50] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 166.605504][ T7119] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 167.409776][ T7145] netlink: 'syz.2.486': attribute type 11 has an invalid length. [ 167.955495][ T7153] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 167.976926][ T7155] netlink: 'syz.3.490': attribute type 21 has an invalid length. [ 167.976963][ T7155] netlink: 128 bytes leftover after parsing attributes in process `syz.3.490'. [ 167.977071][ T7155] netlink: 'syz.3.490': attribute type 5 has an invalid length. [ 167.977111][ T7155] netlink: 'syz.3.490': attribute type 6 has an invalid length. [ 167.977128][ T7155] netlink: 3 bytes leftover after parsing attributes in process `syz.3.490'. [ 168.052208][ T7153] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.089072][ T31] audit: type=1326 audit(1788764509.157:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.3.490" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 168.089150][ T31] audit: type=1326 audit(1788764509.157:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.3.490" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 168.534737][ T7164] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 168.638150][ T7164] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.717491][ T7167] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 168.741354][ T7170] blktrace: Concurrent blktraces are not allowed on sg0 [ 170.113207][ T7195] blktrace: Concurrent blktraces are not allowed on sg0 [ 171.254100][ T7226] netlink: 'syz.4.515': attribute type 11 has an invalid length. [ 172.154051][ T7234] blktrace: Concurrent blktraces are not allowed on sg0 [ 172.556909][ T7242] tipc: Started in network mode [ 172.562014][ T7242] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 172.571037][ T5676] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 172.580442][ T7242] tipc: Enabled bearer , priority 0 [ 172.731173][ T5676] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 172.748306][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.756572][ T5676] usb 3-1: Product: syz [ 172.756586][ T5676] usb 3-1: Manufacturer: syz [ 172.756596][ T5676] usb 3-1: SerialNumber: syz [ 172.794678][ T5676] usb 3-1: config 0 descriptor?? [ 172.804760][ T5676] hub 3-1:0.0: bad descriptor, ignoring hub [ 172.810917][ T5676] hub 3-1:0.0: probe with driver hub failed with error -5 [ 172.961349][ T7245] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 173.018097][ T5676] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 173.029002][ T7245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.049387][ T5676] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 173.058572][ T5676] dib0700: firmware download failed at 7 with -22 [ 173.352614][ T9] usb 3-1: USB disconnect, device number 10 [ 173.689814][ T5676] tipc: Node number set to 43690 [ 174.256748][ T5701] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 174.315176][ T7275] syzkaller0: entered promiscuous mode [ 174.315233][ T7275] syzkaller0: entered allmulticast mode [ 174.417948][ T5701] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 174.429851][ T5701] usb 3-1: config 0 has no interfaces? [ 174.444353][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.444384][ T5701] usb 3-1: Product: syz [ 174.444431][ T5701] usb 3-1: Manufacturer: syz [ 174.444451][ T5701] usb 3-1: SerialNumber: syz [ 174.484786][ T5701] usb 3-1: config 0 descriptor?? [ 174.796530][ T9] usb 3-1: USB disconnect, device number 11 [ 176.639395][ T7310] tipc: Enabling of bearer rejected, already enabled [ 177.489504][ T7322] netlink: 'syz.4.551': attribute type 11 has an invalid length. [ 177.806925][ T7330] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 177.852154][ T7330] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.646637][ T7339] netlink: 'syz.2.557': attribute type 11 has an invalid length. [ 179.021970][ T7348] blktrace: Concurrent blktraces are not allowed on sg0 [ 179.260233][ T7353] netlink: 'syz.0.561': attribute type 11 has an invalid length. [ 179.588326][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 179.612859][ T7363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.565'. [ 179.740930][ T9] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 179.755018][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.755078][ T9] usb 5-1: Product: syz [ 179.755112][ T9] usb 5-1: Manufacturer: syz [ 179.755162][ T9] usb 5-1: SerialNumber: syz [ 179.789815][ T9] usb 5-1: config 0 descriptor?? [ 179.804483][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 179.804741][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 180.014023][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 180.025364][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 180.025435][ T9] dib0700: firmware download failed at 7 with -22 [ 180.337356][ T5739] usb 5-1: USB disconnect, device number 11 [ 180.515762][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 180.544422][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.479554][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.578'. [ 181.694529][ T1046] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 181.712827][ T7403] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 182.255590][ T7411] netlink: 'syz.1.579': attribute type 11 has an invalid length. [ 183.814419][ T7442] netlink: 'syz.2.588': attribute type 21 has an invalid length. [ 183.814472][ T7442] netlink: 128 bytes leftover after parsing attributes in process `syz.2.588'. [ 183.814661][ T7442] netlink: 'syz.2.588': attribute type 5 has an invalid length. [ 183.814697][ T7442] netlink: 'syz.2.588': attribute type 6 has an invalid length. [ 183.814736][ T7442] netlink: 3 bytes leftover after parsing attributes in process `syz.2.588'. [ 183.866851][ T5676] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.881529][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 183.888452][ T31] audit: type=1326 audit(1788764524.947:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz.2.588" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 183.912720][ T31] audit: type=1326 audit(1788764524.947:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz.2.588" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 183.912769][ T31] audit: type=1326 audit(1788764524.947:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz.2.588" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 183.912830][ T31] audit: type=1326 audit(1788764524.947:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz.2.588" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 183.912875][ T31] audit: type=1326 audit(1788764524.957:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz.2.588" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 183.912925][ T31] audit: type=1326 audit(1788764524.967:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz.2.588" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 183.912969][ T31] audit: type=1326 audit(1788764524.967:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz.2.588" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff50ec code=0x7ffc0000 [ 184.031755][ T5676] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 184.090646][ T5676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.090699][ T5676] usb 1-1: Product: syz [ 184.090716][ T5676] usb 1-1: Manufacturer: syz [ 184.090731][ T5676] usb 1-1: SerialNumber: syz [ 184.124080][ T5676] usb 1-1: config 0 descriptor?? [ 184.133693][ T5676] hub 1-1:0.0: bad descriptor, ignoring hub [ 184.133736][ T5676] hub 1-1:0.0: probe with driver hub failed with error -5 [ 184.297295][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.591'. [ 184.344326][ T5676] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 184.350548][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 184.370493][ T5676] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 184.370563][ T5676] dib0700: firmware download failed at 7 with -22 [ 184.398404][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.522267][ T59] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 184.526054][ T7446] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 184.678375][ T5701] usb 1-1: USB disconnect, device number 7 [ 184.881906][ T7462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.595'. [ 185.052962][ T7466] netlink: 'syz.3.597': attribute type 21 has an invalid length. [ 185.053001][ T7466] netlink: 128 bytes leftover after parsing attributes in process `syz.3.597'. [ 185.053070][ T7466] netlink: 'syz.3.597': attribute type 5 has an invalid length. [ 185.053089][ T7466] netlink: 'syz.3.597': attribute type 6 has an invalid length. [ 185.053102][ T7466] netlink: 3 bytes leftover after parsing attributes in process `syz.3.597'. [ 185.109112][ T31] audit: type=1326 audit(1788764526.177:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.3.597" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 185.109183][ T31] audit: type=1326 audit(1788764526.177:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.3.597" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 185.159935][ T31] audit: type=1326 audit(1788764526.227:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7465 comm="syz.3.597" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 186.266236][ T7486] netlink: 'syz.2.606': attribute type 11 has an invalid length. [ 187.408988][ T5699] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 187.525728][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.610'. [ 187.571666][ T5699] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 187.587338][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.587393][ T5699] usb 5-1: Product: syz [ 187.588746][ T5699] usb 5-1: Manufacturer: syz [ 187.588796][ T5699] usb 5-1: SerialNumber: syz [ 187.623490][ T5699] usb 5-1: config 0 descriptor?? [ 187.642267][ T5699] hub 5-1:0.0: bad descriptor, ignoring hub [ 187.642324][ T5699] hub 5-1:0.0: probe with driver hub failed with error -5 [ 187.757208][ T13] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 187.760737][ T7498] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 187.858497][ T5699] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 187.874745][ T5699] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 187.874831][ T5699] dib0700: firmware download failed at 7 with -22 [ 188.187002][ T5739] usb 5-1: USB disconnect, device number 12 [ 188.839072][ T7526] xt_hashlimit: size too large, truncated to 1048576 [ 188.845977][ T7526] xt_hashlimit: max too large, truncated to 1048576 [ 188.852775][ T7526] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 188.945517][ T7532] netlink: 'syz.2.623': attribute type 11 has an invalid length. [ 189.018053][ T7534] netlink: 'syz.0.622': attribute type 21 has an invalid length. [ 189.026059][ T7534] netlink: 128 bytes leftover after parsing attributes in process `syz.0.622'. [ 189.026158][ T7534] netlink: 'syz.0.622': attribute type 5 has an invalid length. [ 189.026177][ T7534] netlink: 'syz.0.622': attribute type 6 has an invalid length. [ 189.026194][ T7534] netlink: 3 bytes leftover after parsing attributes in process `syz.0.622'. [ 189.106830][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 189.124629][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 189.124677][ T31] audit: type=1326 audit(1788764530.187:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 189.126208][ T31] audit: type=1326 audit(1788764530.187:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 189.149583][ T31] audit: type=1326 audit(1788764530.217:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 189.150184][ T31] audit: type=1326 audit(1788764530.217:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 189.186146][ T31] audit: type=1326 audit(1788764530.217:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 189.187041][ T31] audit: type=1326 audit(1788764530.247:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 189.187817][ T31] audit: type=1326 audit(1788764530.257:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 189.223606][ T31] audit: type=1326 audit(1788764530.287:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7533 comm="syz.0.622" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 189.346777][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.354586][ T9] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 189.407657][ T9] usb 5-1: config 189 has an invalid interface number: 127 but max is 0 [ 189.416303][ T9] usb 5-1: config 189 has no interface number 0 [ 189.422792][ T9] usb 5-1: config 189 interface 127 has no altsetting 0 [ 189.437124][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.437168][ T9] usb 5-1: Product: syz [ 189.437202][ T9] usb 5-1: Manufacturer: syz [ 189.437222][ T9] usb 5-1: SerialNumber: syz [ 189.566829][ T5699] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 189.709548][ T5699] usb 4-1: device descriptor read/64, error -71 [ 189.881469][ T7544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.626'. [ 189.908629][ T9] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 189.921838][ T9] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 189.933425][ T9] usbserial_generic 5-1:189.127: device has no bulk endpoints [ 189.934341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 189.952938][ T9] safe_serial 5-1:189.127: safe_serial converter detected [ 189.970277][ T9] safe_serial 5-1:189.127: probe with driver safe_serial failed with error -22 [ 190.019485][ T9] usb 5-1: USB disconnect, device number 13 [ 190.054167][ T5699] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 190.187872][ T5699] usb 4-1: device descriptor read/64, error -71 [ 190.266494][ T13] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 190.275512][ T7544] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 190.299028][ T5699] usb usb4-port1: attempt power cycle [ 190.666799][ T5699] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 190.688212][ T5699] usb 4-1: device descriptor read/8, error -71 [ 190.927028][ T5699] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 190.947505][ T5699] usb 4-1: device descriptor read/8, error -71 [ 191.058014][ T5699] usb usb4-port1: unable to enumerate USB device [ 191.090458][ T7567] fuse: Bad value for 'fd' [ 191.314106][ T7572] netlink: 'syz.2.635': attribute type 11 has an invalid length. [ 191.593091][ T7577] blktrace: Concurrent blktraces are not allowed on sg0 [ 192.386057][ T7591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.640'. [ 192.666179][ T13] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 192.675835][ T7591] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 193.722369][ T7616] blktrace: Concurrent blktraces are not allowed on sg0 [ 194.116789][ T5739] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 194.169252][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.170105][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.267497][ T5739] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 194.279150][ T5739] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.279211][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.310680][ T5739] usb 1-1: config 0 descriptor?? [ 194.335051][ T5739] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 194.444271][ T7628] netlink: 'syz.1.650': attribute type 11 has an invalid length. [ 194.933333][ T7586] netlink: 'syz.0.639': attribute type 7 has an invalid length. [ 194.933388][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 194.941905][ T7586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 194.988270][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.639'. [ 195.007589][ T5699] usb 1-1: USB disconnect, device number 8 [ 196.141223][ T7657] blktrace: Concurrent blktraces are not allowed on sg0 [ 196.156868][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 196.320148][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 196.330466][ T9] usb 1-1: config 0 has no interfaces? [ 196.340223][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.340265][ T9] usb 1-1: Product: syz [ 196.340329][ T9] usb 1-1: Manufacturer: syz [ 196.340350][ T9] usb 1-1: SerialNumber: syz [ 196.371916][ T9] usb 1-1: config 0 descriptor?? [ 196.411834][ T7660] netlink: 'syz.1.660': attribute type 11 has an invalid length. [ 196.635382][ T5739] usb 1-1: USB disconnect, device number 9 [ 196.788954][ T5676] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 196.968950][ T5676] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 196.971207][ T5676] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.971356][ T5676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.978928][ T5676] usb 3-1: config 0 descriptor?? [ 197.033739][ T5676] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 197.561112][ T7642] netlink: 'syz.2.655': attribute type 7 has an invalid length. [ 197.561152][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 197.561201][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 197.624272][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 197.643346][ T5701] usb 3-1: USB disconnect, device number 12 [ 197.706977][ T5699] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 197.874623][ T7674] netlink: 48 bytes leftover after parsing attributes in process `syz.1.663'. [ 197.891226][ T5699] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 197.907205][ T5699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.907279][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.935015][ T5699] usb 5-1: config 0 descriptor?? [ 197.953700][ T5699] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 198.068243][ T7680] netlink: 'syz.0.665': attribute type 11 has an invalid length. [ 198.593845][ T7665] netlink: 'syz.4.661': attribute type 7 has an invalid length. [ 198.593901][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 198.593934][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.661'. [ 198.613091][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 198.621979][ T9] usb 5-1: USB disconnect, device number 14 [ 198.774544][ T7694] socket: no more sockets [ 198.825329][ T7698] netlink: 'syz.3.673': attribute type 11 has an invalid length. [ 198.993449][ T7694] socket: no more sockets [ 199.046984][ T7694] socket: no more sockets [ 199.639858][ T7712] syz_tun: entered allmulticast mode [ 200.276490][ T7728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.681'. [ 201.601502][ T7755] netlink: 'syz.2.691': attribute type 11 has an invalid length. [ 201.939946][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.694'. [ 202.013955][ T7764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.693'. [ 202.303017][ T173] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 202.314075][ T7761] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 203.330966][ T7788] socket: no more sockets [ 203.438187][ T7795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.705'. [ 203.480685][ T7788] socket: no more sockets [ 203.521809][ T7788] socket: no more sockets [ 203.596388][ T7788] socket: no more sockets [ 203.627110][ T7788] socket: no more sockets [ 203.667101][ T7799] netlink: 'syz.4.707': attribute type 11 has an invalid length. [ 203.862736][ T7806] socket: no more sockets [ 204.042914][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.711'. [ 204.154584][ T7806] socket: no more sockets [ 205.453233][ T7823] netlink: 'syz.0.714': attribute type 1 has an invalid length. [ 205.557431][ T7823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.936461][ T7835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.719'. [ 206.172916][ T7842] netlink: 'syz.4.721': attribute type 11 has an invalid length. [ 206.496252][ T7817] Bluetooth: hci1: command 0x0406 tx timeout [ 206.496398][ T7817] Bluetooth: hci0: command 0x0406 tx timeout [ 206.496521][ T7817] Bluetooth: hci4: command 0x0406 tx timeout [ 206.496601][ T7817] Bluetooth: hci2: command 0x0406 tx timeout [ 206.497318][ T7817] Bluetooth: hci3: command 0x0406 tx timeout [ 206.623018][ T7850] netlink: 'syz.1.723': attribute type 11 has an invalid length. [ 207.055280][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 207.763548][ T7870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.730'. [ 207.937637][ T5739] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 208.094191][ T5739] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 208.111028][ T5739] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.111108][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.138117][ T5739] usb 4-1: config 0 descriptor?? [ 208.166041][ T5739] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 208.202377][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.734'. [ 208.675615][ T7845] netlink: 'syz.3.722': attribute type 7 has an invalid length. [ 208.686687][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 208.686788][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 208.716924][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 208.733486][ T5739] usb 4-1: USB disconnect, device number 14 [ 210.336806][ T7915] netlink: 'syz.0.747': attribute type 11 has an invalid length. [ 211.476896][ T5701] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 211.627598][ T5701] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 211.639057][ T5701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.650615][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.662752][ T5701] usb 4-1: config 0 descriptor?? [ 211.676581][ T5701] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 212.211551][ T7900] netlink: 'syz.3.743': attribute type 7 has an invalid length. [ 212.211599][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 212.211631][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'. [ 212.254369][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'. [ 212.271554][ T9] usb 4-1: USB disconnect, device number 15 [ 213.096771][ T5676] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 213.210889][ T7957] syzkaller0: entered promiscuous mode [ 213.210926][ T7957] syzkaller0: entered allmulticast mode [ 213.277522][ T5676] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 213.294059][ T5676] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.326100][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.326164][ T5676] usb 5-1: Product: syz [ 213.326200][ T5676] usb 5-1: Manufacturer: syz [ 213.326219][ T5676] usb 5-1: SerialNumber: syz [ 213.358509][ T5676] usb 5-1: config 0 descriptor?? [ 213.926814][ T5676] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 213.998153][ T5701] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 214.088246][ T5676] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 214.100406][ T5676] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.110788][ T5676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.125209][ T5676] usb 3-1: config 0 descriptor?? [ 214.152015][ T5676] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 214.170198][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 214.176303][ T5701] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 214.195841][ T5701] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 214.195898][ T5701] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 214.196011][ T5701] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 214.196041][ T5701] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.196068][ T5701] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.196095][ T5701] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.196122][ T5701] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 214.196150][ T5701] usb 4-1: config 168 interface 0 has no altsetting 0 [ 214.240632][ T5701] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 214.240674][ T5701] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 214.240710][ T5701] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 214.240739][ T5701] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.240765][ T5701] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.252370][ T5701] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.252408][ T5701] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 214.252438][ T5701] usb 4-1: config 168 interface 0 has no altsetting 0 [ 214.287325][ T5701] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 214.287367][ T5701] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 214.287412][ T5701] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 214.287441][ T5701] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.287468][ T5701] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.287495][ T5701] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.287523][ T5701] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 214.287551][ T5701] usb 4-1: config 168 interface 0 has no altsetting 0 [ 214.466146][ T5701] usb 4-1: string descriptor 0 read error: -22 [ 214.466313][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.502480][ T5701] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 214.772422][ T7946] netlink: 'syz.2.757': attribute type 7 has an invalid length. [ 214.783466][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 214.792638][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 214.811891][ T5676] usb 4-1: USB disconnect, device number 16 [ 214.837071][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 214.856479][ T5739] usb 3-1: USB disconnect, device number 13 [ 215.051239][ T7962] fuse: Bad value for 'fd' [ 216.254968][ T5676] usb 5-1: USB disconnect, device number 15 [ 217.937063][ T5739] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 218.088505][ T5739] usb 5-1: Using ep0 maxpacket: 8 [ 218.090256][ T5739] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 218.100374][ T5739] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 218.100469][ T5739] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 218.100588][ T5739] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 218.100671][ T5739] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.100738][ T5739] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.100821][ T5739] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.100904][ T5739] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 218.100971][ T5739] usb 5-1: config 168 interface 0 has no altsetting 0 [ 218.142252][ T5739] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 218.142365][ T5739] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 218.142472][ T5739] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 218.142550][ T5739] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.142621][ T5739] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.142685][ T5739] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.142757][ T5739] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 218.142835][ T5739] usb 5-1: config 168 interface 0 has no altsetting 0 [ 218.158185][ T5739] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 218.158294][ T5739] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 218.158395][ T5739] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 218.158457][ T5739] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.158505][ T5739] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.158585][ T5739] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.159657][ T5739] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 218.159739][ T5739] usb 5-1: config 168 interface 0 has no altsetting 0 [ 218.256339][ T5739] usb 5-1: string descriptor 0 read error: -22 [ 218.257374][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.436554][ T5739] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 218.708386][ T8026] netlink: 'syz.3.785': attribute type 1 has an invalid length. [ 218.729889][ T5739] usb 5-1: USB disconnect, device number 16 [ 218.896081][ T8026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.961923][ T8017] fuse: Bad value for 'fd' [ 219.096793][ T5676] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 219.227748][ T5739] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 219.247669][ T5676] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 219.258360][ T5676] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.271738][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.280022][ T5676] usb 2-1: Product: syz [ 219.280072][ T5676] usb 2-1: Manufacturer: syz [ 219.280093][ T5676] usb 2-1: SerialNumber: syz [ 219.304557][ T5676] usb 2-1: config 0 descriptor?? [ 219.355758][ T8044] netlink: 'syz.0.792': attribute type 11 has an invalid length. [ 219.378854][ T5739] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 219.394083][ T5739] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.394140][ T5739] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.420701][ T5739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.420758][ T5739] usb 5-1: Product: syz [ 219.420794][ T5739] usb 5-1: Manufacturer: syz [ 219.420840][ T5739] usb 5-1: SerialNumber: syz [ 219.458790][ T5739] usb 5-1: config 0 descriptor?? [ 219.693356][ T5739] usb 5-1: USB disconnect, device number 17 [ 219.826538][ T8053] syz_tun: entered allmulticast mode [ 220.357461][ T8065] netlink: 'syz.3.798': attribute type 1 has an invalid length. [ 220.578140][ T8065] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.606877][ T8069] syz_tun: entered allmulticast mode [ 220.865926][ T8075] netlink: 'syz.3.801': attribute type 21 has an invalid length. [ 220.876575][ T8075] netlink: 128 bytes leftover after parsing attributes in process `syz.3.801'. [ 220.876703][ T8075] netlink: 'syz.3.801': attribute type 5 has an invalid length. [ 220.876725][ T8075] netlink: 'syz.3.801': attribute type 6 has an invalid length. [ 220.876771][ T8075] netlink: 3 bytes leftover after parsing attributes in process `syz.3.801'. [ 220.919120][ T31] audit: type=1326 audit(1788764561.987:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.3.801" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 220.923125][ T31] audit: type=1326 audit(1788764561.987:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.3.801" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 220.943372][ T31] audit: type=1326 audit(1788764561.987:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.3.801" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 220.945605][ T31] audit: type=1326 audit(1788764562.017:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.3.801" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 220.945835][ T31] audit: type=1326 audit(1788764562.017:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.3.801" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 220.948146][ T31] audit: type=1326 audit(1788764562.017:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.3.801" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 220.951496][ T31] audit: type=1326 audit(1788764562.017:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.3.801" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 220.952740][ T31] audit: type=1326 audit(1788764562.017:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8074 comm="syz.3.801" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 221.243285][ T8082] netlink: 'syz.3.803': attribute type 11 has an invalid length. [ 222.382246][ T10] usb 2-1: USB disconnect, device number 6 [ 222.650782][ T8106] netlink: 'syz.3.811': attribute type 1 has an invalid length. [ 222.795921][ T8106] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.666928][ T5676] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 223.830418][ T5676] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 223.837522][ T5676] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.839692][ T5739] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 223.850988][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.851068][ T5676] usb 3-1: Product: syz [ 223.851103][ T5676] usb 3-1: Manufacturer: syz [ 223.851217][ T5676] usb 3-1: SerialNumber: syz [ 223.883068][ T5676] usb 3-1: config 0 descriptor?? [ 224.027199][ T5739] usb 4-1: Using ep0 maxpacket: 16 [ 224.033626][ T5739] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 224.046404][ T5739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 224.063318][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.072518][ T5739] usb 4-1: Product: syz [ 224.072570][ T5739] usb 4-1: Manufacturer: syz [ 224.072591][ T5739] usb 4-1: SerialNumber: syz [ 224.095363][ T5739] usb 4-1: config 0 descriptor?? [ 224.105851][ T5739] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 224.115451][ T5739] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 224.742430][ T5739] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 224.901603][ T8147] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 225.016250][ T8147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.202397][ T5739] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 225.211382][ T5684] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 225.220909][ T8154] netlink: 'syz.1.827': attribute type 11 has an invalid length. [ 225.231407][ T5739] em28xx 4-1:0.0: board has no eeprom [ 225.368657][ T5684] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 225.380012][ T5684] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 225.387888][ T5684] usb 5-1: can't read configurations, error -61 [ 225.516761][ T5684] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 225.536937][ T5739] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 225.544969][ T5739] em28xx 4-1:0.0: dvb set to bulk mode. [ 225.552300][ T9] em28xx 4-1:0.0: Binding DVB extension [ 225.585590][ T5739] usb 4-1: USB disconnect, device number 17 [ 225.597888][ T5739] em28xx 4-1:0.0: Disconnecting em28xx [ 225.687644][ T5684] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 225.700959][ T5684] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 225.708982][ T5684] usb 5-1: can't read configurations, error -61 [ 225.716997][ T5684] usb usb5-port1: attempt power cycle [ 225.759780][ T9] em28xx 4-1:0.0: Registering input extension [ 225.789828][ T5739] em28xx 4-1:0.0: Closing input extension [ 225.894113][ T5739] em28xx: Freeing device [ 225.904389][ T6191] udevd[6191]: setting owner of /dev/bus/usb/004/017 to uid=0, gid=0 failed: No such file or directory [ 226.081293][ T5684] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 226.117387][ T5684] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 226.135796][ T5684] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 226.135851][ T5684] usb 5-1: can't read configurations, error -61 [ 226.276842][ T5684] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 226.299019][ T5684] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 226.313483][ T5684] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 226.313548][ T5684] usb 5-1: can't read configurations, error -61 [ 226.321729][ T5684] usb usb5-port1: unable to enumerate USB device [ 226.762973][ T5699] usb 3-1: USB disconnect, device number 14 [ 226.995198][ T8181] netlink: 'syz.2.837': attribute type 1 has an invalid length. [ 227.091876][ T8181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.434535][ T8191] netlink: 'syz.2.839': attribute type 11 has an invalid length. [ 228.866792][ T5684] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 229.028120][ T5684] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 229.039026][ T5684] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 229.050771][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.050817][ T5684] usb 1-1: Product: syz [ 229.050864][ T5684] usb 1-1: Manufacturer: syz [ 229.050886][ T5684] usb 1-1: SerialNumber: syz [ 229.082635][ T5684] usb 1-1: config 0 descriptor?? [ 229.263253][ T8222] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 229.374780][ T8222] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.048193][ T5701] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 231.106220][ T8263] netlink: 'syz.1.862': attribute type 21 has an invalid length. [ 231.106487][ T8263] netlink: 128 bytes leftover after parsing attributes in process `syz.1.862'. [ 231.111205][ T8263] netlink: 'syz.1.862': attribute type 5 has an invalid length. [ 231.111257][ T8263] netlink: 'syz.1.862': attribute type 6 has an invalid length. [ 231.111295][ T8263] netlink: 3 bytes leftover after parsing attributes in process `syz.1.862'. [ 231.155136][ T31] audit: type=1326 audit(1788764572.217:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 231.171105][ T31] audit: type=1326 audit(1788764572.237:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 231.211475][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 231.213156][ T31] audit: type=1326 audit(1788764572.277:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 231.225727][ T31] audit: type=1326 audit(1788764572.287:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 231.247184][ T5701] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 231.279229][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 231.298712][ T31] audit: type=1326 audit(1788764572.307:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 231.299423][ T31] audit: type=1326 audit(1788764572.367:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 231.302600][ T31] audit: type=1326 audit(1788764572.367:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 231.302904][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.302972][ T5701] usb 5-1: Product: syz [ 231.303020][ T5701] usb 5-1: Manufacturer: syz [ 231.303613][ T5701] usb 5-1: SerialNumber: syz [ 231.335905][ T31] audit: type=1326 audit(1788764572.367:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8262 comm="syz.1.862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 231.437361][ T5701] usb 5-1: config 0 descriptor?? [ 231.470018][ T5701] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 231.470086][ T5701] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 231.962932][ T8267] syz_tun: entered allmulticast mode [ 232.070218][ T5676] usb 1-1: USB disconnect, device number 10 [ 232.084058][ T5701] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 232.416412][ T8271] netlink: 'syz.1.866': attribute type 11 has an invalid length. [ 232.558931][ T5701] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 232.558995][ T5701] em28xx 5-1:0.0: board has no eeprom [ 232.676818][ T5701] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 232.676871][ T5701] em28xx 5-1:0.0: dvb set to bulk mode. [ 232.702975][ T5676] em28xx 5-1:0.0: Binding DVB extension [ 232.730048][ T5701] usb 5-1: USB disconnect, device number 22 [ 232.745266][ T5701] em28xx 5-1:0.0: Disconnecting em28xx [ 232.862292][ T5676] em28xx 5-1:0.0: Registering input extension [ 232.872787][ T5701] em28xx 5-1:0.0: Closing input extension [ 232.885459][ T8280] syzkaller0: entered promiscuous mode [ 232.893725][ T8280] syzkaller0: entered allmulticast mode [ 232.996268][ T5701] em28xx: Freeing device [ 233.728670][ T8294] blktrace: Concurrent blktraces are not allowed on sg0 [ 234.488759][ T5676] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 234.639369][ T5676] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 234.661648][ T5676] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.681589][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.681647][ T5676] usb 3-1: Product: syz [ 234.681682][ T5676] usb 3-1: Manufacturer: syz [ 234.681714][ T5676] usb 3-1: SerialNumber: syz [ 234.714381][ T5676] usb 3-1: config 0 descriptor?? [ 234.797016][ T8306] netlink: 'syz.0.877': attribute type 21 has an invalid length. [ 234.797071][ T8306] netlink: 128 bytes leftover after parsing attributes in process `syz.0.877'. [ 234.797188][ T8306] netlink: 'syz.0.877': attribute type 5 has an invalid length. [ 234.797243][ T8306] netlink: 'syz.0.877': attribute type 6 has an invalid length. [ 234.797270][ T8306] netlink: 3 bytes leftover after parsing attributes in process `syz.0.877'. [ 234.893255][ T31] audit: type=1326 audit(1788764575.957:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.0.877" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 234.894056][ T31] audit: type=1326 audit(1788764575.957:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.0.877" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 236.366343][ T8316] netlink: 'syz.3.880': attribute type 11 has an invalid length. [ 236.467343][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 236.617396][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 236.623640][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 236.641425][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 236.657359][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.657414][ T10] usb 2-1: Product: syz [ 236.657480][ T10] usb 2-1: Manufacturer: syz [ 236.657532][ T10] usb 2-1: SerialNumber: syz [ 236.686247][ T10] usb 2-1: config 0 descriptor?? [ 236.713620][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 236.716058][ T10] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 237.325760][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 237.472633][ T8337] netlink: 'syz.4.888': attribute type 11 has an invalid length. [ 237.606864][ T5739] usb 3-1: USB disconnect, device number 15 [ 237.770088][ T10] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 237.770146][ T10] em28xx 2-1:0.0: board has no eeprom [ 237.887000][ T10] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 237.887059][ T10] em28xx 2-1:0.0: dvb set to bulk mode. [ 237.925474][ T10] usb 2-1: USB disconnect, device number 7 [ 237.925594][ T5739] em28xx 2-1:0.0: Binding DVB extension [ 237.959990][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 238.061764][ T5739] em28xx 2-1:0.0: Registering input extension [ 238.068156][ T10] em28xx 2-1:0.0: Closing input extension [ 238.180983][ T10] em28xx: Freeing device [ 238.507988][ T8351] netlink: 'syz.3.893': attribute type 11 has an invalid length. [ 238.869282][ T8358] netlink: 'syz.1.895': attribute type 11 has an invalid length. [ 239.863771][ T8373] netlink: 'syz.0.899': attribute type 21 has an invalid length. [ 239.863814][ T8373] netlink: 128 bytes leftover after parsing attributes in process `syz.0.899'. [ 239.863891][ T8373] netlink: 'syz.0.899': attribute type 5 has an invalid length. [ 239.863911][ T8373] netlink: 'syz.0.899': attribute type 6 has an invalid length. [ 239.863930][ T8373] netlink: 3 bytes leftover after parsing attributes in process `syz.0.899'. [ 239.913956][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 239.914016][ T31] audit: type=1326 audit(1788764580.977:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.0.899" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 239.935731][ T31] audit: type=1326 audit(1788764580.997:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.0.899" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 239.936349][ T31] audit: type=1326 audit(1788764580.997:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.0.899" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 239.941179][ T31] audit: type=1326 audit(1788764581.007:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.0.899" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 239.941946][ T31] audit: type=1326 audit(1788764581.007:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.0.899" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 239.944078][ T31] audit: type=1326 audit(1788764581.007:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.0.899" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 239.952104][ T31] audit: type=1326 audit(1788764581.017:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.0.899" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f280ec code=0x7ffc0000 [ 240.031707][ T10] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 240.189823][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 240.204527][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 240.223943][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.224008][ T10] usb 4-1: Product: syz [ 240.224043][ T10] usb 4-1: Manufacturer: syz [ 240.224085][ T10] usb 4-1: SerialNumber: syz [ 240.272341][ T10] usb 4-1: config 0 descriptor?? [ 240.487031][ T5684] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 240.639596][ T5684] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 240.639671][ T5684] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 240.662613][ T5684] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.663157][ T5684] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.663248][ T5684] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.695579][ T5684] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.695754][ T5684] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.695851][ T5684] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.725595][ T5684] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.725663][ T5684] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.725742][ T5684] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.738841][ T5684] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.738980][ T5684] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.739061][ T5684] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.759535][ T5684] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.759688][ T5684] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.759770][ T5684] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.780755][ T5684] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.780927][ T5684] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.781001][ T5684] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.792379][ T5684] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.792524][ T5684] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.792606][ T5684] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.818349][ T5684] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 240.818503][ T5684] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 240.818588][ T5684] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.887584][ T5684] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 240.887682][ T5684] usb 2-1: Product: syz [ 240.887727][ T5684] usb 2-1: Manufacturer: syz [ 240.887777][ T5684] usb 2-1: SerialNumber: syz [ 240.919966][ T5684] usb 2-1: config 0 descriptor?? [ 240.956202][ T5684] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 241.334212][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 241.334639][ T5676] usb 2-1: USB disconnect, device number 8 [ 241.356178][ T5676] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 241.979330][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880564fac00: rx timeout, send abort [ 242.225754][ T8405] netlink: 'syz.1.910': attribute type 11 has an invalid length. [ 242.480130][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880564fb400: rx timeout, send abort [ 242.480808][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880564fac00: abort rx timeout. Force session deactivation [ 242.980203][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880564fb400: abort rx timeout. Force session deactivation [ 243.142917][ T8413] netlink: 'syz.4.912': attribute type 11 has an invalid length. [ 243.211675][ T5739] usb 4-1: USB disconnect, device number 18 [ 243.960717][ T8432] netlink: 'syz.4.920': attribute type 11 has an invalid length. [ 244.995393][ T8451] netlink: 'syz.3.925': attribute type 21 has an invalid length. [ 244.995444][ T8451] netlink: 128 bytes leftover after parsing attributes in process `syz.3.925'. [ 244.995573][ T8451] netlink: 'syz.3.925': attribute type 5 has an invalid length. [ 244.995621][ T8451] netlink: 'syz.3.925': attribute type 6 has an invalid length. [ 244.995702][ T8451] netlink: 3 bytes leftover after parsing attributes in process `syz.3.925'. [ 245.109312][ T31] audit: type=1326 audit(1788764586.177:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.3.925" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 245.133946][ T31] audit: type=1326 audit(1788764586.177:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.3.925" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 245.164937][ T31] audit: type=1326 audit(1788764586.227:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.3.925" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 245.193543][ T31] audit: type=1326 audit(1788764586.227:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.3.925" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 245.193630][ T31] audit: type=1326 audit(1788764586.227:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.3.925" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 245.220719][ T31] audit: type=1326 audit(1788764586.257:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.3.925" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 245.220758][ T31] audit: type=1326 audit(1788764586.257:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.3.925" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 245.220792][ T31] audit: type=1326 audit(1788764586.257:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.3.925" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 245.775272][ T8460] netlink: 'syz.4.928': attribute type 11 has an invalid length. [ 246.579318][ T8479] netlink: 'syz.4.933': attribute type 11 has an invalid length. [ 248.217526][ T5699] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 248.397812][ T5699] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 248.409617][ T5699] usb 2-1: config 0 has no interfaces? [ 248.434560][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.442813][ T5699] usb 2-1: Product: syz [ 248.447520][ T5699] usb 2-1: Manufacturer: syz [ 248.452272][ T5699] usb 2-1: SerialNumber: syz [ 248.463725][ T5699] usb 2-1: config 0 descriptor?? [ 248.734743][ T5699] usb 2-1: USB disconnect, device number 9 [ 248.810474][ T8512] netlink: 'syz.4.944': attribute type 11 has an invalid length. [ 248.848232][ T5739] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 249.007751][ T5739] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 249.009162][ T5739] usb 4-1: config 0 has no interfaces? [ 249.024491][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.024546][ T5739] usb 4-1: Product: syz [ 249.024563][ T5739] usb 4-1: Manufacturer: syz [ 249.024594][ T5739] usb 4-1: SerialNumber: syz [ 249.052533][ T5739] usb 4-1: config 0 descriptor?? [ 249.106938][ T5701] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 249.257710][ T5701] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 249.271064][ T5701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.271152][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.317840][ T5701] usb 3-1: config 0 descriptor?? [ 249.338623][ T5701] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 249.357365][ T5739] usb 4-1: USB disconnect, device number 19 [ 249.476099][ T8525] netlink: 'syz.0.948': attribute type 11 has an invalid length. [ 249.756308][ T8494] netlink: 'syz.2.938': attribute type 7 has an invalid length. [ 249.756355][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 249.764580][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 249.785174][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 249.795322][ T5739] usb 3-1: USB disconnect, device number 16 [ 250.002812][ T8532] netlink: 'syz.3.950': attribute type 11 has an invalid length. [ 250.584741][ T8544] netlink: 'syz.0.954': attribute type 11 has an invalid length. [ 254.007873][ T8603] netlink: 'syz.2.972': attribute type 11 has an invalid length. [ 255.609443][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.609534][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.536811][ T5701] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 256.687701][ T5701] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 256.699380][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.699458][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.726829][ T5701] usb 5-1: config 0 descriptor?? [ 256.744961][ T5701] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 257.345209][ T8612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.974'. [ 257.345271][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 257.392267][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.974'. [ 257.408332][ T5684] usb 5-1: USB disconnect, device number 23 [ 257.569869][ T5701] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 257.727474][ T5701] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 257.740235][ T5701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.740289][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.764706][ T5701] usb 4-1: config 0 descriptor?? [ 257.790456][ T5701] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 258.495274][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.981'. [ 258.495909][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 258.534236][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 258.550544][ T5684] usb 4-1: USB disconnect, device number 20 [ 259.026762][ T25] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 259.206300][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 259.215915][ T25] usb 2-1: not running at top speed; connect to a high speed hub [ 259.215969][ T25] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 259.255193][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.263594][ T25] usb 2-1: Product: syz [ 259.263612][ T25] usb 2-1: Manufacturer: syz [ 259.263623][ T25] usb 2-1: SerialNumber: syz [ 259.670479][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.062608][ T25] usb 2-1: USB disconnect, device number 10 [ 260.468849][ T8688] netlink: 'syz.1.999': attribute type 11 has an invalid length. [ 260.548707][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.762550][ T8724] syz.4.1014: vmalloc error: size 8192, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 262.762689][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.4.1014 Not tainted syzkaller #0 PREEMPT(full) [ 262.762717][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.762732][ T8724] Call Trace: [ 262.762741][ T8724] [ 262.762751][ T8724] dump_stack_lvl+0xe8/0x150 [ 262.762799][ T8724] warn_alloc+0x24d/0x270 [ 262.762830][ T8724] ? __pfx_warn_alloc+0x10/0x10 [ 262.762860][ T8724] ? alloc_pages_mpol+0x256/0x390 [ 262.762901][ T8724] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 262.762968][ T8724] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 262.763010][ T8724] ? __kmalloc_cache_noprof+0x321/0x600 [ 262.763034][ T8724] ? __kmalloc_cache_noprof+0x14d/0x600 [ 262.763060][ T8724] ? xskq_create+0x56/0x220 [ 262.763099][ T8724] xskq_create+0x148/0x220 [ 262.763133][ T8724] ? xsk_init_queue+0x8a/0xe0 [ 262.763168][ T8724] xsk_init_queue+0x8a/0xe0 [ 262.763205][ T8724] xsk_setsockopt+0x52a/0x960 [ 262.763239][ T8724] ? __pfx_xsk_setsockopt+0x10/0x10 [ 262.763275][ T8724] ? __pfx_aa_sk_perm+0x10/0x10 [ 262.763309][ T8724] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 262.763338][ T8724] ? __pfx_xsk_setsockopt+0x10/0x10 [ 262.763371][ T8724] do_sock_setsockopt+0x17c/0x1b0 [ 262.763404][ T8724] __ia32_sys_setsockopt+0x13d/0x1b0 [ 262.763437][ T8724] __do_fast_syscall_32+0x27a/0x6a0 [ 262.763463][ T8724] ? do_fast_syscall_32+0x33/0x70 [ 262.763487][ T8724] ? asm_int80_emulation+0x1a/0x20 [ 262.763510][ T8724] ? do_int80_emulation+0x299/0x500 [ 262.763538][ T8724] do_fast_syscall_32+0x33/0x70 [ 262.763563][ T8724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.763591][ T8724] RIP: 0023:0xf7f850ec [ 262.763622][ T8724] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 262.763643][ T8724] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 262.763667][ T8724] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 000000000000011b [ 262.763682][ T8724] RDX: 0000000000000005 RSI: 0000000080000300 RDI: 0000000000000004 [ 262.763698][ T8724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.763711][ T8724] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 262.763726][ T8724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.763760][ T8724] [ 262.774560][ T8724] Mem-Info: [ 262.774602][ T8724] active_anon:8694 inactive_anon:2 isolated_anon:0 [ 262.774602][ T8724] active_file:0 inactive_file:43388 isolated_file:0 [ 262.774602][ T8724] unevictable:0 dirty:258 writeback:0 [ 262.774602][ T8724] slab_reclaimable:12371 slab_unreclaimable:109882 [ 262.774602][ T8724] mapped:33023 shmem:3392 pagetables:1238 [ 262.774602][ T8724] sec_pagetables:0 bounce:0 [ 262.774602][ T8724] kernel_misc_reclaimable:0 [ 262.774602][ T8724] free:1307112 free_pcp:10180 free_cma:0 [ 262.774758][ T8724] Node 0 active_anon:34776kB inactive_anon:8kB active_file:0kB inactive_file:173352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132092kB dirty:1032kB writeback:0kB shmem:13568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12692kB pagetables:4836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 262.774926][ T8724] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 262.775104][ T8724] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 262.775273][ T8724] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 262.775387][ T8724] Node 0 DMA32 free:1275884kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:34776kB inactive_anon:8kB active_file:0kB inactive_file:173352kB unevictable:0kB writepending:1000kB zspages:0kB present:3129332kB managed:2546668kB mlocked:0kB bounce:0kB free_pcp:40228kB local_pcp:22620kB free_cma:0kB [ 262.775623][ T8724] lowmem_reserve[]: 0 0 0 0 0 [ 262.775738][ T8724] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 262.775909][ T8724] lowmem_reserve[]: 0 0 0 0 0 [ 262.781114][ T8724] Node 1 Normal free:3937204kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:492kB local_pcp:0kB free_cma:0kB [ 262.781362][ T8724] lowmem_reserve[]: 0 0 0 0 0 [ 262.781470][ T8724] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 262.781776][ T8724] Node 0 DMA32: 865*4kB (UME) 585*8kB (UME) 200*16kB (UME) 133*32kB (UME) 71*64kB (UME) 12*128kB (M) 3*256kB (UME) 4*512kB (UME) 0*1024kB 5*2048kB (UME) 303*4096kB (UM) = 1275820kB [ 262.781948][ T8724] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 262.782249][ T8724] Node 1 Normal: 9*4kB (UM) 12*8kB (UM) 3*16kB (M) 4*32kB (UM) 2*64kB (M) 4*128kB (UM) 4*256kB (UM) 2*512kB (UM) 2*1024kB [ 262.791372][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 262.794306][ T8724] (UM) 2*2048kB (U) 959*4096kB (M) = 3937204kB [ 262.794476][ T8724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.794529][ T8724] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.794581][ T8724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 262.794632][ T8724] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 262.794676][ T8724] 46779 total pagecache pages [ 262.794769][ T8724] 3 pages in swap cache [ 262.794791][ T8724] Free swap = 113508kB [ 262.794820][ T8724] Total swap = 124996kB [ 262.794843][ T8724] 2097051 pages RAM [ 262.794863][ T8724] 0 pages HighMem/MovableOnly [ 262.794885][ T8724] 428768 pages reserved [ 262.794905][ T8724] 0 pages cma reserved [ 263.078423][ T5739] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 263.136434][ T25] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 263.242309][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.242370][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.300490][ T5739] usb 4-1: unable to get BOS descriptor or descriptor too short [ 263.332119][ T5739] usb 4-1: not running at top speed; connect to a high speed hub [ 263.332222][ T5739] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 263.386232][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.386313][ T5739] usb 4-1: Product: syz [ 263.386356][ T5739] usb 4-1: Manufacturer: syz [ 263.386398][ T5739] usb 4-1: SerialNumber: syz [ 263.496977][ T25] usb 1-1: config 0 descriptor?? [ 263.520568][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 263.619082][ T8737] blktrace: Concurrent blktraces are not allowed on sg0 [ 263.763391][ T5739] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.942546][ T8698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1003'. [ 263.953227][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1003'. [ 263.972214][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 263.989459][ T25] usb 1-1: USB disconnect, device number 11 [ 264.009628][ T5739] usb 4-1: USB disconnect, device number 21 [ 264.133752][ T5619] udevd[5619]: setting mode of /dev/bus/usb/004/021 to 020664 failed: No such file or directory [ 264.141609][ T5619] udevd[5619]: setting owner of /dev/bus/usb/004/021 to uid=0, gid=0 failed: No such file or directory [ 264.218676][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.773835][ T8766] blktrace: Concurrent blktraces are not allowed on sg0 [ 264.792580][ T8761] syz_tun: entered allmulticast mode [ 265.153059][ T5739] logitech-hidpp-device 0003:046D:C082.0005: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 265.256868][ T5684] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 265.341899][ T8785] fido_id[8785]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 265.407840][ T5684] usb 3-1: Using ep0 maxpacket: 8 [ 265.412628][ T5684] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 265.425632][ T5684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.444251][ T5684] usb 3-1: config 0 descriptor?? [ 265.460959][ T5684] usb 3-1: probing VID:PID(0424:012C) [ 265.533076][ T5684] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 265.533138][ T5684] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 265.533160][ T5684] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 265.533216][ T5684] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 265.533290][ T5684] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 265.766897][ T10] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 265.863473][ T5684] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 265.918902][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 265.921450][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 265.921590][ T10] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 265.945332][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.945386][ T10] usb 5-1: Product: syz [ 265.945404][ T10] usb 5-1: Manufacturer: syz [ 265.945569][ T10] usb 5-1: SerialNumber: syz [ 266.066596][ T5684] usb 3-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 266.203528][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 266.302367][ T10] usb 5-1: USB disconnect, device number 24 [ 266.382235][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.575241][ T8805] blktrace: Concurrent blktraces are not allowed on sg0 [ 266.617436][ T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 266.777495][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 266.782615][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 266.782711][ T9] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 266.812351][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.812410][ T9] usb 4-1: Product: syz [ 266.812446][ T9] usb 4-1: Manufacturer: syz [ 266.812502][ T9] usb 4-1: SerialNumber: syz [ 267.121705][ T5701] usb 3-1: USB disconnect, device number 17 [ 267.123423][ T10] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 267.168706][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.239468][ T5701] USB vub300 remote SDIO host controller[0] now disconnected [ 267.295271][ T9] usb 4-1: USB disconnect, device number 22 [ 267.357156][ T5676] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 267.386105][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.519149][ T5676] usb 2-1: unable to get BOS descriptor or descriptor too short [ 267.520828][ T5676] usb 2-1: not running at top speed; connect to a high speed hub [ 267.520914][ T5676] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 267.543021][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.543132][ T5676] usb 2-1: Product: syz [ 267.543180][ T5676] usb 2-1: Manufacturer: syz [ 267.544105][ T5676] usb 2-1: SerialNumber: syz [ 267.817880][ T5676] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.886286][ T8834] blktrace: Concurrent blktraces are not allowed on sg0 [ 268.003994][ T5676] usb 2-1: USB disconnect, device number 11 [ 268.143498][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.167002][ C0] [ 268.170716][ C0] ============================= [ 268.175644][ C0] WARNING: suspicious RCU usage [ 268.180580][ C0] syzkaller #0 Not tainted [ 268.185041][ C0] ----------------------------- [ 268.189948][ C0] kernel/sched/core.c:9218 Illegal context switch in RCU-sched read-side critical section! [ 268.200018][ C0] [ 268.200018][ C0] other info that might help us debug this: [ 268.200018][ C0] [ 268.210342][ C0] [ 268.210342][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 268.218472][ C0] locks held by syz-executor/5621: 9, last CPU#0: [ 268.224919][ C0] #0: ffffffff8ee36170 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 268.233738][ C0] #1: ffff8880352a83b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 268.242902][ C0] #2: ffff8880352ac378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 268.252296][ C0] #3: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 268.261887][ C0] #4: ffff8880772c2138 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 268.272482][ C0] #5: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 268.282071][ C0] #6: ffff8880605d4eb8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 268.292497][ C0] #7: ffffffff8ed5c820 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 268.301992][ C0] #8: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 268.312608][ C0] [ 268.312608][ C0] stack backtrace: [ 268.318559][ C0] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 268.328055][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.338135][ C0] Call Trace: [ 268.341445][ C0] [ 268.344323][ C0] dump_stack_lvl+0xe8/0x150 [ 268.348973][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 268.354396][ C0] __might_resched+0xbb/0x4c0 [ 268.359126][ C0] ? __cancel_work_sync+0x5c/0x110 [ 268.364284][ C0] __cancel_work_sync+0x6d/0x110 [ 268.369284][ C0] mmc_free_host+0x19/0x30 [ 268.373738][ C0] call_timer_fn+0x18d/0x5f0 [ 268.378380][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 268.385101][ C0] ? call_timer_fn+0xd5/0x5f0 [ 268.389816][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 268.394982][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.400244][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 268.406976][ C0] __run_timer_base+0x652/0x8b0 [ 268.411878][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 268.417321][ C0] ? ktime_get+0x1f5/0x220 [ 268.421778][ C0] ? lapic_next_event+0x11/0x20 [ 268.426674][ C0] run_timer_softirq+0xb7/0x170 [ 268.431577][ C0] handle_softirqs+0x226/0x860 [ 268.436388][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 268.441200][ C0] __irq_exit_rcu+0xcb/0x220 [ 268.445833][ C0] irq_exit_rcu+0x9/0x30 [ 268.450119][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 268.455883][ C0] [ 268.458831][ C0] [ 268.461793][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.467814][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 268.473137][ C0] Code: ff ff ff e8 70 7e 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c2 79 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 31 da [ 268.492788][ C0] RSP: 0018:ffffc90004437210 EFLAGS: 00000292 [ 268.498886][ C0] RAX: 5139375b90e24400 RBX: 0000000000000000 RCX: 8000000000000003 [ 268.506890][ C0] RDX: 00000000c77e9826 RSI: ffffffff8e6fd6d4 RDI: ffffffff8c6d9480 [ 268.514904][ C0] RBP: ffff88807fbabe80 R08: ffffffff8243bd8a R09: 0000000000000000 [ 268.522915][ C0] R10: dffffc0000000000 R11: ffffed100b778c55 R12: ffffffff8ed5c820 [ 268.530926][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 268.538977][ C0] ? pfn_valid+0xba/0x490 [ 268.543364][ C0] ? pfn_valid+0xba/0x490 [ 268.547760][ C0] pfn_valid+0xd6/0x490 [ 268.552068][ C0] ? pfn_valid+0xba/0x490 [ 268.556456][ C0] page_table_check_set+0x25/0x530 [ 268.561618][ C0] copy_pmd_range+0x4adc/0x5c10 [ 268.566583][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 268.572093][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 268.577345][ C0] ? __lock_acquire+0x747/0x2de0 [ 268.582333][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 268.587586][ C0] copy_page_range+0xc82/0x1290 [ 268.592524][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 268.597849][ C0] ? __rb_insert_augmented+0x2ad/0x6d0 [ 268.603357][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 268.610353][ C0] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 268.616992][ C0] dup_mmap+0xf17/0x1dc0 [ 268.621298][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 268.626018][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.631148][ C0] ? lock_acquire+0x115/0x350 [ 268.635882][ C0] copy_mm+0x11a/0x480 [ 268.640006][ C0] ? copy_process+0xd3c/0x43e0 [ 268.644813][ C0] copy_process+0x1e75/0x43e0 [ 268.649580][ C0] ? __lock_acquire+0x747/0x2de0 [ 268.654559][ C0] ? copy_process+0xd3c/0x43e0 [ 268.659393][ C0] ? __pfx_copy_process+0x10/0x10 [ 268.664463][ C0] kernel_clone+0x2d7/0x940 [ 268.669012][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 268.674110][ C0] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 268.680055][ C0] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 268.686633][ C0] ? exc_page_fault+0x6a/0xc0 [ 268.691367][ C0] __do_fast_syscall_32+0x27a/0x6a0 [ 268.696591][ C0] ? do_fast_syscall_32+0x33/0x70 [ 268.701653][ C0] ? irqentry_exit+0x10f/0x910 [ 268.706552][ C0] ? trace_irq_disable+0x3b/0x140 [ 268.711647][ C0] do_fast_syscall_32+0x33/0x70 [ 268.716549][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.722928][ C0] RIP: 0023:0xf7ff50ec [ 268.727017][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 268.746669][ C0] RSP: 002b:00000000f75dfc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 268.755129][ C0] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 268.763137][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005786e4e8 [ 268.771139][ C0] RBP: 00000000f75dfcb4 R08: 0000000000000000 R09: 0000000000000000 [ 268.779318][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 268.787323][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.795351][ C0] [ 268.798593][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 268.798617][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5621, name: syz-executor [ 268.798643][ C0] preempt_count: 103, expected: 0 [ 268.798659][ C0] RCU nest depth: 2, expected: 0 [ 268.798675][ C0] locks held by syz-executor/5621: 9, last CPU#0: [ 268.798696][ C0] #0: ffffffff8ee36170 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 268.798792][ C0] #1: ffff8880352a83b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 268.798882][ C0] #2: ffff8880352ac378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 268.798987][ C0] #3: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 268.799073][ C0] #4: ffff8880772c2138 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 268.799170][ C0] #5: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 268.799255][ C0] #6: ffff8880605d4eb8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 268.799383][ C0] #7: ffffffff8ed5c820 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 268.799467][ C0] #8: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 268.799556][ C0] Preemption disabled at: [ 268.799566][ C0] [<0000000000000000>] 0x0 [ 268.799597][ C0] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 268.799625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.799639][ C0] Call Trace: [ 268.799649][ C0] [ 268.799658][ C0] dump_stack_lvl+0xe8/0x150 [ 268.799695][ C0] __might_resched+0x36a/0x4c0 [ 268.799739][ C0] __cancel_work_sync+0x6d/0x110 [ 268.799778][ C0] mmc_free_host+0x19/0x30 [ 268.799801][ C0] call_timer_fn+0x18d/0x5f0 [ 268.799831][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 268.799867][ C0] ? call_timer_fn+0xd5/0x5f0 [ 268.799897][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 268.799947][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.799983][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 268.800021][ C0] __run_timer_base+0x652/0x8b0 [ 268.800060][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 268.800091][ C0] ? ktime_get+0x1f5/0x220 [ 268.800115][ C0] ? lapic_next_event+0x11/0x20 [ 268.800148][ C0] run_timer_softirq+0xb7/0x170 [ 268.800176][ C0] handle_softirqs+0x226/0x860 [ 268.800214][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 268.800253][ C0] __irq_exit_rcu+0xcb/0x220 [ 268.800287][ C0] irq_exit_rcu+0x9/0x30 [ 268.800317][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 268.800354][ C0] [ 268.800363][ C0] [ 268.800374][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.800401][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 268.800426][ C0] Code: ff ff ff e8 70 7e 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c2 79 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 31 da [ 268.800448][ C0] RSP: 0018:ffffc90004437210 EFLAGS: 00000292 [ 268.800470][ C0] RAX: 5139375b90e24400 RBX: 0000000000000000 RCX: 8000000000000003 [ 268.800488][ C0] RDX: 00000000c77e9826 RSI: ffffffff8e6fd6d4 RDI: ffffffff8c6d9480 [ 268.800507][ C0] RBP: ffff88807fbabe80 R08: ffffffff8243bd8a R09: 0000000000000000 [ 268.800524][ C0] R10: dffffc0000000000 R11: ffffed100b778c55 R12: ffffffff8ed5c820 [ 268.800543][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 268.800564][ C0] ? pfn_valid+0xba/0x490 [ 268.800598][ C0] ? pfn_valid+0xba/0x490 [ 268.800624][ C0] pfn_valid+0xd6/0x490 [ 268.800650][ C0] ? pfn_valid+0xba/0x490 [ 268.800680][ C0] page_table_check_set+0x25/0x530 [ 268.800715][ C0] copy_pmd_range+0x4adc/0x5c10 [ 268.800771][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 268.800811][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 268.800854][ C0] ? __lock_acquire+0x747/0x2de0 [ 268.800886][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 268.800940][ C0] copy_page_range+0xc82/0x1290 [ 268.800989][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 268.801026][ C0] ? __rb_insert_augmented+0x2ad/0x6d0 [ 268.801062][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 268.801101][ C0] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 268.801145][ C0] dup_mmap+0xf17/0x1dc0 [ 268.801200][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 268.801237][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.801285][ C0] ? lock_acquire+0x115/0x350 [ 268.801328][ C0] copy_mm+0x11a/0x480 [ 268.801362][ C0] ? copy_process+0xd3c/0x43e0 [ 268.801392][ C0] copy_process+0x1e75/0x43e0 [ 268.801421][ C0] ? __lock_acquire+0x747/0x2de0 [ 268.801454][ C0] ? copy_process+0xd3c/0x43e0 [ 268.801501][ C0] ? __pfx_copy_process+0x10/0x10 [ 268.801546][ C0] kernel_clone+0x2d7/0x940 [ 268.801587][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 268.801642][ C0] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 268.801673][ C0] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 268.801713][ C0] ? exc_page_fault+0x6a/0xc0 [ 268.801763][ C0] __do_fast_syscall_32+0x27a/0x6a0 [ 268.801791][ C0] ? do_fast_syscall_32+0x33/0x70 [ 268.801816][ C0] ? irqentry_exit+0x10f/0x910 [ 268.801837][ C0] ? trace_irq_disable+0x3b/0x140 [ 268.801865][ C0] do_fast_syscall_32+0x33/0x70 [ 268.801891][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 268.801930][ C0] RIP: 0023:0xf7ff50ec [ 268.801952][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 268.801974][ C0] RSP: 002b:00000000f75dfc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 268.801999][ C0] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 268.802017][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005786e4e8 [ 268.802032][ C0] RBP: 00000000f75dfcb4 R08: 0000000000000000 R09: 0000000000000000 [ 268.802047][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 268.802062][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.802096][ C0] [ 268.802666][ C0] [ 269.405388][ C0] ============================= [ 269.410305][ C0] WARNING: suspicious RCU usage [ 269.415183][ C0] syzkaller #0 Tainted: G W [ 269.421268][ C0] ----------------------------- [ 269.426135][ C0] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 269.438184][ C0] [ 269.438184][ C0] other info that might help us debug this: [ 269.438184][ C0] [ 269.448462][ C0] [ 269.448462][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 269.456558][ C0] locks held by syz-executor/5621: 9, last CPU#0: [ 269.463039][ C0] #0: ffffffff8ee36170 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 269.471845][ C0] #1: ffff8880352a83b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 269.481007][ C0] #2: ffff8880352ac378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 269.490346][ C0] #3: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 269.499942][ C0] #4: ffff8880772c2138 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 269.510743][ C0] #5: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 269.520335][ C0] #6: ffff8880605d4eb8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 269.530747][ C0] #7: ffffffff8ed5c820 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 269.540287][ C0] #8: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 269.550881][ C0] [ 269.550881][ C0] stack backtrace: [ 269.556845][ C0] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 269.567919][ C0] Tainted: [W]=WARN [ 269.571749][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.581871][ C0] Call Trace: [ 269.585189][ C0] [ 269.588062][ C0] dump_stack_lvl+0xe8/0x150 [ 269.592709][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 269.598130][ C0] __synchronize_srcu+0x157/0x2f0 [ 269.603206][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 269.608883][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 269.613977][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 269.619849][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 269.625458][ C0] ? synchronize_srcu+0x20a/0x260 [ 269.630522][ C0] wakeup_source_unregister+0x129/0x3f0 [ 269.636246][ C0] mmc_host_classdev_release+0x47/0x100 [ 269.641838][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 269.648027][ C0] device_release+0xc4/0x1f0 [ 269.652660][ C0] kobject_put+0x222/0x550 [ 269.657120][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 269.661966][ C0] call_timer_fn+0x18d/0x5f0 [ 269.666703][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 269.673426][ C0] ? call_timer_fn+0xd5/0x5f0 [ 269.678151][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 269.683411][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.688837][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 269.695561][ C0] __run_timer_base+0x652/0x8b0 [ 269.700480][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 269.705901][ C0] ? ktime_get+0x1f5/0x220 [ 269.710364][ C0] ? lapic_next_event+0x11/0x20 [ 269.715296][ C0] run_timer_softirq+0xb7/0x170 [ 269.720190][ C0] handle_softirqs+0x226/0x860 [ 269.725013][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 269.729833][ C0] __irq_exit_rcu+0xcb/0x220 [ 269.734479][ C0] irq_exit_rcu+0x9/0x30 [ 269.738771][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 269.744460][ C0] [ 269.747423][ C0] [ 269.750399][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 269.756419][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 269.761746][ C0] Code: ff ff ff e8 70 7e 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c2 79 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 31 da [ 269.781388][ C0] RSP: 0018:ffffc90004437210 EFLAGS: 00000292 [ 269.787501][ C0] RAX: 5139375b90e24400 RBX: 0000000000000000 RCX: 8000000000000003 [ 269.795522][ C0] RDX: 00000000c77e9826 RSI: ffffffff8e6fd6d4 RDI: ffffffff8c6d9480 [ 269.803528][ C0] RBP: ffff88807fbabe80 R08: ffffffff8243bd8a R09: 0000000000000000 [ 269.811557][ C0] R10: dffffc0000000000 R11: ffffed100b778c55 R12: ffffffff8ed5c820 [ 269.819568][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 269.827580][ C0] ? pfn_valid+0xba/0x490 [ 269.831979][ C0] ? pfn_valid+0xba/0x490 [ 269.836357][ C0] pfn_valid+0xd6/0x490 [ 269.840584][ C0] ? pfn_valid+0xba/0x490 [ 269.844972][ C0] page_table_check_set+0x25/0x530 [ 269.850132][ C0] copy_pmd_range+0x4adc/0x5c10 [ 269.855072][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 269.860614][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 269.865892][ C0] ? __lock_acquire+0x747/0x2de0 [ 269.870916][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 269.876192][ C0] copy_page_range+0xc82/0x1290 [ 269.881111][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 269.886447][ C0] ? __rb_insert_augmented+0x2ad/0x6d0 [ 269.891970][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 269.898965][ C0] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 269.905609][ C0] dup_mmap+0xf17/0x1dc0 [ 269.909935][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 269.914674][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 269.919771][ C0] ? lock_acquire+0x115/0x350 [ 269.924505][ C0] copy_mm+0x11a/0x480 [ 269.928615][ C0] ? copy_process+0xd3c/0x43e0 [ 269.933422][ C0] copy_process+0x1e75/0x43e0 [ 269.938167][ C0] ? __lock_acquire+0x747/0x2de0 [ 269.943152][ C0] ? copy_process+0xd3c/0x43e0 [ 269.947985][ C0] ? __pfx_copy_process+0x10/0x10 [ 269.953067][ C0] kernel_clone+0x2d7/0x940 [ 269.957629][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 269.962725][ C0] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 269.968666][ C0] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 269.975137][ C0] ? exc_page_fault+0x6a/0xc0 [ 269.979877][ C0] __do_fast_syscall_32+0x27a/0x6a0 [ 269.985126][ C0] ? do_fast_syscall_32+0x33/0x70 [ 269.990215][ C0] ? irqentry_exit+0x10f/0x910 [ 269.995014][ C0] ? trace_irq_disable+0x3b/0x140 [ 270.000081][ C0] do_fast_syscall_32+0x33/0x70 [ 270.004993][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 270.011362][ C0] RIP: 0023:0xf7ff50ec [ 270.015461][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 270.035113][ C0] RSP: 002b:00000000f75dfc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 270.043576][ C0] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 270.048772][ T5676] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 270.059137][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005786e4e8 [ 270.067146][ C0] RBP: 00000000f75dfcb4 R08: 0000000000000000 R09: 0000000000000000 [ 270.075148][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 270.083149][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.091172][ C0] [ 270.094293][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 270.094335][ ** replaying previous printk message ** [ 270.094335][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5621, name: syz-executor [ 270.094359][ C0] preempt_count: 103, expected: 0 [ 270.094394][ C0] RCU nest depth: 2, expected: 0 [ 270.094428][ C0] locks held by syz-executor/5621: 9, last CPU#0: [ 270.094472][ C0] #0: ffffffff8ee36170 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 270.094669][ C0] #1: ffff8880352a83b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 270.094847][ C0] #2: ffff8880352ac378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 270.095043][ C0] #3: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 270.095210][ C0] #4: ffff8880772c2138 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 270.095397][ C0] #5: ffffffff8ed5c760 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 270.095560][ C0] #6: ffff8880605d4eb8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 270.095767][ C0] #7: ffffffff8ed5c820 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 270.095957][ C0] #8: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 270.096125][ C0] Preemption disabled at: [ 270.096145][ C0] [<0000000000000000>] 0x0 [ 270.096218][ C0] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 270.096301][ C0] Tainted: [W]=WARN [ 270.096328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.096361][ C0] Call Trace: [ 270.096384][ C0] [ 270.096411][ C0] dump_stack_lvl+0xe8/0x150 [ 270.096497][ C0] __might_resched+0x36a/0x4c0 [ 270.096614][ C0] __synchronize_srcu+0x1a1/0x2f0 [ 270.096684][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 270.096742][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 270.096845][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 270.096954][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 270.097071][ C0] ? synchronize_srcu+0x20a/0x260 [ 270.097136][ C0] wakeup_source_unregister+0x129/0x3f0 [ 270.097255][ C0] mmc_host_classdev_release+0x47/0x100 [ 270.097333][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 270.097400][ C0] device_release+0xc4/0x1f0 [ 270.097468][ C0] kobject_put+0x222/0x550 [ 270.097553][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 270.097624][ C0] call_timer_fn+0x18d/0x5f0 [ 270.097694][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 270.097774][ C0] ? call_timer_fn+0xd5/0x5f0 [ 270.097836][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 270.097922][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.098011][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 270.098114][ C0] __run_timer_base+0x652/0x8b0 [ 270.098220][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 270.098301][ C0] ? ktime_get+0x1f5/0x220 [ 270.098362][ C0] ? lapic_next_event+0x11/0x20 [ 270.098430][ C0] run_timer_softirq+0xb7/0x170 [ 270.098506][ C0] handle_softirqs+0x226/0x860 [ 270.098589][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 270.098706][ C0] __irq_exit_rcu+0xcb/0x220 [ 270.098796][ C0] irq_exit_rcu+0x9/0x30 [ 270.098868][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 270.098978][ C0] [ 270.098998][ C0] [ 270.099021][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 270.099091][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 270.099153][ C0] Code: ff ff ff e8 70 7e 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c2 79 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 31 da [ 270.099208][ C0] RSP: 0018:ffffc90004437210 EFLAGS: 00000292 [ 270.099260][ C0] RAX: 5139375b90e24400 RBX: 0000000000000000 RCX: 8000000000000003 [ 270.099310][ C0] RDX: 00000000c77e9826 RSI: ffffffff8e6fd6d4 RDI: ffffffff8c6d9480 [ 270.099352][ C0] RBP: ffff88807fbabe80 R08: ffffffff8243bd8a R09: 0000000000000000 [ 270.099393][ C0] R10: dffffc0000000000 R11: ffffed100b778c55 R12: ffffffff8ed5c820 [ 270.099437][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 270.099484][ C0] ? pfn_valid+0xba/0x490 [ 270.099568][ C0] ? pfn_valid+0xba/0x490 [ 270.099641][ C0] pfn_valid+0xd6/0x490 [ 270.099703][ C0] ? pfn_valid+0xba/0x490 [ 270.099775][ C0] page_table_check_set+0x25/0x530 [ 270.099860][ C0] copy_pmd_range+0x4adc/0x5c10 [ 270.100001][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 270.100126][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 270.100245][ C0] ? __lock_acquire+0x747/0x2de0 [ 270.100319][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 270.100432][ C0] copy_page_range+0xc82/0x1290 [ 270.100542][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 270.100626][ C0] ? __rb_insert_augmented+0x2ad/0x6d0 [ 270.100717][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 270.100809][ C0] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 270.100908][ C0] dup_mmap+0xf17/0x1dc0 [ 270.101043][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 270.101159][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 270.101265][ C0] ? lock_acquire+0x115/0x350 [ 270.101371][ C0] copy_mm+0x11a/0x480 [ 270.101471][ C0] ? copy_process+0xd3c/0x43e0 [ 270.101558][ C0] copy_process+0x1e75/0x43e0 [ 270.101631][ C0] ? __lock_acquire+0x747/0x2de0 [ 270.101706][ C0] ? copy_process+0xd3c/0x43e0 [ 270.101831][ C0] ? __pfx_copy_process+0x10/0x10 [ 270.101943][ C0] kernel_clone+0x2d7/0x940 [ 270.102046][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 270.102181][ C0] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 270.102255][ C0] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 270.102364][ C0] ? exc_page_fault+0x6a/0xc0 [ 270.102474][ C0] __do_fast_syscall_32+0x27a/0x6a0 [ 270.102554][ C0] ? do_fast_syscall_32+0x33/0x70 [ 270.102617][ C0] ? irqentry_exit+0x10f/0x910 [ 270.102669][ C0] ? trace_irq_disable+0x3b/0x140 [ 270.102741][ C0] do_fast_syscall_32+0x33/0x70 [ 270.102812][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 270.102894][ C0] RIP: 0023:0xf7ff50ec [ 270.102966][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 270.103035][ C0] RSP: 002b:00000000f75dfc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 270.103076][ C0] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 270.103118][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005786e4e8 [ 270.103158][ C0] RBP: 00000000f75dfcb4 R08: 0000000000000000 R09: 0000000000000000 [ 270.103191][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 270.103229][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.103305][ C0] [ 270.103417][ C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffc90004430000, but annotated. [ 270.105067][ C0] ------------[ cut here ]------------ [ 270.105097][ C0] 1 [ 270.105126][ C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: syz-executor/5621 [ 270.360011][ T5676] usb 4-1: unable to get BOS descriptor or descriptor too short [ 270.364969][ T5676] usb 4-1: not running at top speed; connect to a high speed hub [ 270.365121][ T5676] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 270.390173][ T5676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.390641][ T5676] usb 4-1: Product: syz [ 270.391304][ T5676] usb 4-1: Manufacturer: syz [ 270.391533][ T5676] usb 4-1: SerialNumber: syz [ 270.828723][ C0] Modules linked in: [ 270.832658][ C0] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 270.843727][ C0] Tainted: [W]=WARN [ 270.847580][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.857772][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 270.863738][ C0] Code: cc cc cc 41 ff c7 44 89 3d c9 51 e8 15 48 c7 c1 80 9d 6d 8c 48 c7 c7 e0 9d 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 4d a6 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 21 80 6e 0a 3b 05 1f [ 270.883375][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 270.889487][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 5139375b90e24400 [ 270.897509][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 270.905528][ C0] RBP: ffff88807fbabea0 R08: 0000000000000100 R09: 0000000000000001 [ 270.913537][ C0] R10: dffffc0000000000 R11: fffff52000000eb9 R12: 1ffff92000000f4c [ 270.921546][ C0] R13: ffff888033bec5e8 R14: dffffc0000000000 R15: 0000000000000001 [ 270.929560][ C0] FS: 0000000000000000(0000) GS:ffff888124cd6000(0063) knlGS:000000005786e480 [ 270.938546][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 270.945167][ C0] CR2: 00000000f7f755c0 CR3: 000000002a2c0000 CR4: 00000000003526f0 [ 270.953173][ C0] Call Trace: [ 270.956493][ C0] [ 270.959394][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 270.964996][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 270.970079][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 270.975667][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 270.980765][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 270.986620][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 270.992225][ C0] ? synchronize_srcu+0x20a/0x260 [ 270.997300][ C0] wakeup_source_unregister+0x129/0x3f0 [ 271.002893][ C0] mmc_host_classdev_release+0x47/0x100 [ 271.008475][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 271.014671][ C0] device_release+0xc4/0x1f0 [ 271.019311][ C0] kobject_put+0x222/0x550 [ 271.023768][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 271.028578][ C0] call_timer_fn+0x18d/0x5f0 [ 271.033212][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 271.039934][ C0] ? call_timer_fn+0xd5/0x5f0 [ 271.044654][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 271.049823][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.055067][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 271.061804][ C0] __run_timer_base+0x652/0x8b0 [ 271.066732][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 271.072152][ C0] ? ktime_get+0x1f5/0x220 [ 271.076608][ C0] ? lapic_next_event+0x11/0x20 [ 271.081512][ C0] run_timer_softirq+0xb7/0x170 [ 271.086417][ C0] handle_softirqs+0x226/0x860 [ 271.091222][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 271.096031][ C0] __irq_exit_rcu+0xcb/0x220 [ 271.100658][ C0] irq_exit_rcu+0x9/0x30 [ 271.104949][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 271.110680][ C0] [ 271.113640][ C0] [ 271.116607][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.122673][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 271.127998][ C0] Code: ff ff ff e8 70 7e 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c2 79 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 31 da [ 271.148101][ C0] RSP: 0018:ffffc90004437210 EFLAGS: 00000292 [ 271.154203][ C0] RAX: 5139375b90e24400 RBX: 0000000000000000 RCX: 8000000000000003 [ 271.162207][ C0] RDX: 00000000c77e9826 RSI: ffffffff8e6fd6d4 RDI: ffffffff8c6d9480 [ 271.170208][ C0] RBP: ffff88807fbabe80 R08: ffffffff8243bd8a R09: 0000000000000000 [ 271.178213][ C0] R10: dffffc0000000000 R11: ffffed100b778c55 R12: ffffffff8ed5c820 [ 271.186215][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 271.194228][ C0] ? pfn_valid+0xba/0x490 [ 271.198619][ C0] ? pfn_valid+0xba/0x490 [ 271.203009][ C0] pfn_valid+0xd6/0x490 [ 271.207201][ C0] ? pfn_valid+0xba/0x490 [ 271.211621][ C0] page_table_check_set+0x25/0x530 [ 271.216839][ C0] copy_pmd_range+0x4adc/0x5c10 [ 271.221775][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 271.227305][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 271.232581][ C0] ? __lock_acquire+0x747/0x2de0 [ 271.237582][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 271.242957][ C0] copy_page_range+0xc82/0x1290 [ 271.247888][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 271.253238][ C0] ? __rb_insert_augmented+0x2ad/0x6d0 [ 271.258846][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 271.265840][ C0] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 271.272498][ C0] dup_mmap+0xf17/0x1dc0 [ 271.276824][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 271.281561][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 271.286665][ C0] ? lock_acquire+0x115/0x350 [ 271.291424][ C0] copy_mm+0x11a/0x480 [ 271.295547][ C0] ? copy_process+0xd3c/0x43e0 [ 271.300362][ C0] copy_process+0x1e75/0x43e0 [ 271.305104][ C0] ? __lock_acquire+0x747/0x2de0 [ 271.310096][ C0] ? copy_process+0xd3c/0x43e0 [ 271.314944][ C0] ? __pfx_copy_process+0x10/0x10 [ 271.320077][ C0] kernel_clone+0x2d7/0x940 [ 271.324761][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 271.329987][ C0] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 271.335933][ C0] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 271.340491][ T5676] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.349378][ C0] ? exc_page_fault+0x6a/0xc0 [ 271.354146][ C0] __do_fast_syscall_32+0x27a/0x6a0 [ 271.359399][ C0] ? do_fast_syscall_32+0x33/0x70 [ 271.364481][ C0] ? irqentry_exit+0x10f/0x910 [ 271.369283][ C0] ? trace_irq_disable+0x3b/0x140 [ 271.374355][ C0] do_fast_syscall_32+0x33/0x70 [ 271.379248][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.385626][ C0] RIP: 0023:0xf7ff50ec [ 271.389736][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 271.409385][ C0] RSP: 002b:00000000f75dfc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 271.417844][ C0] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 271.425852][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005786e4e8 [ 271.433866][ C0] RBP: 00000000f75dfcb4 R08: 0000000000000000 R09: 0000000000000000 [ 271.441873][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 271.449902][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.457938][ C0] [ 271.461014][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 271.468334][ C0] CPU: 0 UID: 0 PID: 5621 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 271.479419][ C0] Tainted: [W]=WARN [ 271.483258][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.493350][ C0] Call Trace: [ 271.496729][ C0] [ 271.499616][ C0] vpanic+0x56d/0xa60 [ 271.503653][ C0] ? __pfx__printk+0x10/0x10 [ 271.508298][ C0] ? __pfx_vpanic+0x10/0x10 [ 271.512871][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 271.518210][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 271.523475][ C0] panic+0xc5/0xd0 [ 271.527259][ C0] ? __pfx_panic+0x10/0x10 [ 271.531768][ C0] __warn+0x315/0x4c0 [ 271.535812][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 271.541146][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 271.546482][ C0] __report_bug+0x276/0x570 [ 271.551053][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 271.556392][ C0] ? __pfx___report_bug+0x10/0x10 [ 271.561475][ C0] ? __wake_up_klogd+0xf0/0x130 [ 271.566391][ C0] ? vprintk_emit+0x4ee/0x560 [ 271.571129][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 271.576214][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 271.581590][ C0] report_bug+0x16b/0x220 [ 271.585972][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 271.591322][ C0] ? __debug_object_init+0x2c6/0x3c0 [ 271.596656][ C0] handle_bug+0x9c/0x200 [ 271.600960][ C0] exc_invalid_op+0x1a/0x50 [ 271.605532][ C0] asm_exc_invalid_op+0x1a/0x20 [ 271.610433][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 271.616379][ C0] Code: cc cc cc 41 ff c7 44 89 3d c9 51 e8 15 48 c7 c1 80 9d 6d 8c 48 c7 c7 e0 9d 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 4d a6 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 21 80 6e 0a 3b 05 1f [ 271.636130][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 271.642244][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 5139375b90e24400 [ 271.650257][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 271.658276][ C0] RBP: ffff88807fbabea0 R08: 0000000000000100 R09: 0000000000000001 [ 271.666304][ C0] R10: dffffc0000000000 R11: fffff52000000eb9 R12: 1ffff92000000f4c [ 271.674321][ C0] R13: ffff888033bec5e8 R14: dffffc0000000000 R15: 0000000000000001 [ 271.682372][ C0] ? __debug_object_init+0x2c3/0x3c0 [ 271.687811][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 271.693428][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 271.698516][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 271.704121][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 271.709236][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 271.715103][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 271.720810][ C0] ? synchronize_srcu+0x20a/0x260 [ 271.725882][ C0] wakeup_source_unregister+0x129/0x3f0 [ 271.731489][ C0] mmc_host_classdev_release+0x47/0x100 [ 271.737087][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 271.743285][ C0] device_release+0xc4/0x1f0 [ 271.747938][ C0] kobject_put+0x222/0x550 [ 271.752409][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 271.757231][ C0] call_timer_fn+0x18d/0x5f0 [ 271.761884][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 271.768613][ C0] ? call_timer_fn+0xd5/0x5f0 [ 271.773381][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 271.778554][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.783818][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 271.790557][ C0] __run_timer_base+0x652/0x8b0 [ 271.795740][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 271.801175][ C0] ? ktime_get+0x1f5/0x220 [ 271.805661][ C0] ? lapic_next_event+0x11/0x20 [ 271.810569][ C0] run_timer_softirq+0xb7/0x170 [ 271.815502][ C0] handle_softirqs+0x226/0x860 [ 271.820429][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 271.825251][ C0] __irq_exit_rcu+0xcb/0x220 [ 271.829895][ C0] irq_exit_rcu+0x9/0x30 [ 271.834194][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 271.839878][ C0] [ 271.842855][ C0] [ 271.845828][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.851863][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 271.857203][ C0] Code: ff ff ff e8 70 7e 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c2 79 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 31 da [ 271.876850][ C0] RSP: 0018:ffffc90004437210 EFLAGS: 00000292 [ 271.882968][ C0] RAX: 5139375b90e24400 RBX: 0000000000000000 RCX: 8000000000000003 [ 271.890993][ C0] RDX: 00000000c77e9826 RSI: ffffffff8e6fd6d4 RDI: ffffffff8c6d9480 [ 271.899003][ C0] RBP: ffff88807fbabe80 R08: ffffffff8243bd8a R09: 0000000000000000 [ 271.907017][ C0] R10: dffffc0000000000 R11: ffffed100b778c55 R12: ffffffff8ed5c820 [ 271.915028][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 271.923047][ C0] ? pfn_valid+0xba/0x490 [ 271.927435][ C0] ? pfn_valid+0xba/0x490 [ 271.931839][ C0] pfn_valid+0xd6/0x490 [ 271.936039][ C0] ? pfn_valid+0xba/0x490 [ 271.940420][ C0] page_table_check_set+0x25/0x530 [ 271.945589][ C0] copy_pmd_range+0x4adc/0x5c10 [ 271.950513][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 271.956037][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 271.961298][ C0] ? __lock_acquire+0x747/0x2de0 [ 271.966296][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 271.971579][ C0] copy_page_range+0xc82/0x1290 [ 271.976511][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 271.981857][ C0] ? __rb_insert_augmented+0x2ad/0x6d0 [ 271.987383][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 271.994391][ C0] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 272.001050][ C0] dup_mmap+0xf17/0x1dc0 [ 272.005366][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 272.010111][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 272.015192][ C0] ? lock_acquire+0x115/0x350 [ 272.019982][ C0] copy_mm+0x11a/0x480 [ 272.024106][ C0] ? copy_process+0xd3c/0x43e0 [ 272.028942][ C0] copy_process+0x1e75/0x43e0 [ 272.033676][ C0] ? __lock_acquire+0x747/0x2de0 [ 272.038695][ C0] ? copy_process+0xd3c/0x43e0 [ 272.043615][ C0] ? __pfx_copy_process+0x10/0x10 [ 272.048789][ C0] kernel_clone+0x2d7/0x940 [ 272.053356][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 272.058458][ C0] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 272.064491][ C0] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 272.071050][ C0] ? exc_page_fault+0x6a/0xc0 [ 272.075793][ C0] __do_fast_syscall_32+0x27a/0x6a0 [ 272.081045][ C0] ? do_fast_syscall_32+0x33/0x70 [ 272.086142][ C0] ? irqentry_exit+0x10f/0x910 [ 272.090946][ C0] ? trace_irq_disable+0x3b/0x140 [ 272.096016][ C0] do_fast_syscall_32+0x33/0x70 [ 272.100918][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.107305][ C0] RIP: 0023:0xf7ff50ec [ 272.111415][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 272.131106][ C0] RSP: 002b:00000000f75dfc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 272.139598][ C0] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 272.147622][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000005786e4e8 [ 272.155623][ C0] RBP: 00000000f75dfcb4 R08: 0000000000000000 R09: 0000000000000000 [ 272.163723][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 272.171800][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.179875][ C0] [ 272.183573][ C0] Kernel Offset: disabled [ 272.187962][ C0] Rebooting in 86400 seconds..