last executing test programs: 7.906254913s ago: executing program 0 (id=971): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) 7.727335918s ago: executing program 0 (id=972): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000300)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)="a6", 0x1}, {&(0x7f0000000440)="846c3f1b", 0x4}], 0x47) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 6.241205832s ago: executing program 4 (id=980): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/85, 0x55, 0x0, 0x32}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 6.12619578s ago: executing program 4 (id=981): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000a40)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 5.949294768s ago: executing program 3 (id=982): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.185520804s ago: executing program 3 (id=983): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x264e33, 0x0) getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 4.989615479s ago: executing program 0 (id=984): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$kcm(0x2, 0xa, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca", 0xe) 4.835101317s ago: executing program 3 (id=986): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x5, 0x10}, {}, {0xd, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x40, 0x8, 0x30000000, 0x8}, 0x1, r6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.687126101s ago: executing program 0 (id=987): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000600), 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x350, 0x206, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0xff84, 0x0, 0x53}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x10001, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'caif0\x00', {0xff}, 'vxcan1\x00', {0xff}, 0x9}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x6, 0x1, 0x3, 0xe, 0x4}) 4.620591402s ago: executing program 3 (id=988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.051857686s ago: executing program 4 (id=990): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 3.049884723s ago: executing program 2 (id=991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x85c}, 0x0) 3.049711283s ago: executing program 3 (id=992): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc53a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x70, 0x6, "", [{{0x9, 0x4, 0x0, 0x5, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffc, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x15, 0xb4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x5, 0x80}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000004) move_pages(0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(0x0, 0xa, 0x62080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) 2.956159076s ago: executing program 0 (id=993): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x60, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0x11, 0x8, "0c5bfbd8c79b3161"}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x81, 0x2, "07bb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 2.395393353s ago: executing program 2 (id=994): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.899565986s ago: executing program 1 (id=996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x24, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.69773817s ago: executing program 4 (id=997): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffe8f, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x2000) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 1.505888988s ago: executing program 2 (id=998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000003080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000d4}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.351562539s ago: executing program 4 (id=999): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) 1.350637388s ago: executing program 1 (id=1011): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x129240, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000640)={0x48, 0xa, r4, 0x0, r5}) 1.290269072s ago: executing program 2 (id=1001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000001000)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000002000/0x10000)=nil, 0x10000, 0x3, 0x11, r2, 0x40000) r3 = openat(0xffffffffffffff9c, &(0x7f0000003000)='./file0\x00', 0x42, 0x1ff) write(r3, &(0x7f0000004000)="02000000000000000000000000000000020000000000000001", 0x19) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) pread64(r3, &(0x7f0000002000)=""/32, 0x20, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 1.185923846s ago: executing program 3 (id=1002): socket(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 992.07173ms ago: executing program 1 (id=1003): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0xa4, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0xfffffea7, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x101, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0x1}, @flat=@binder={0x73622a85, 0x10a, 0x1}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000700)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 939.231003ms ago: executing program 1 (id=1004): socket$netlink(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) socket$tipc(0x1e, 0x5, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 935.935308ms ago: executing program 2 (id=1006): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="74000000c72196bced56789cd814313b40cd14fa4a47b84cb264aabce0ff30728451da44676958ca0ab8cab16344fe6749f3b014c9b02da17aaad509cedabe3e5ca24b84f35e9cc7c16c107c6f860d6c482f18cc31e1a8d4f6010037cfa415b7599ae2f6e92bc3e5fe370e7b1134b3985537e76144e4eeab6100d546b990e3bea0a1b0a68988df9c0de1864a73738b046a016e0cb6c1a39fda01cc22a01b4d888af970bbf78f", @ANYRES16, @ANYBLOB="00012bbd7000fbdbdf250400000060000180080003000300000008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="080003000100000008000300020000001400020070696d726567310000000000000000000800030000000000080003000200000008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x8000002) 654.61531ms ago: executing program 2 (id=1007): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 277.244093ms ago: executing program 4 (id=1008): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0x1, 0xa}, {0x7, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x2, 0x9, 0x4, 0xfffffe01, 0x204}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x441) 152.469612ms ago: executing program 0 (id=1009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000380)="47c30f01cf48b83f1c5e09000000000f23d80f21f835000000700f23f866ba610066ed2e3e0fc72a440f060f01c52e65440f794450000ff1d148b800000000008000000f23d00f21f835200000090f23f8", 0x51}], 0x1, 0xe4, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="e7736a", 0x3c}], 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008801}, 0x41) ioctl$KVM_RUN(r2, 0xae80, 0x0) 139.172517ms ago: executing program 1 (id=1010): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x5}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 0s ago: executing program 1 (id=1012): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f00001c7000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) kernel console output (not intermixed with test programs): 0:50:50 [ 91.035427][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 91.058012][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.131601][ T5716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.146212][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.146272][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.146324][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.146363][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.146402][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.146442][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.146481][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.146518][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.146557][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.241642][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.241695][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.257938][ T5716] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 91.291103][ T5716] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 91.605078][ T5723] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.792555][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.802177][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.914900][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.914944][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.045510][ T44] cfg80211: failed to load regulatory.db [ 92.657813][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.777269][ T5621] Bluetooth: hci1: command tx timeout [ 92.777327][ T5621] Bluetooth: hci0: command tx timeout [ 92.819785][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 92.829131][ T25] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 92.854582][ T25] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 92.854774][ T25] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 92.854860][ T25] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.854952][ T25] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 92.866486][ T5620] Bluetooth: hci2: command tx timeout [ 92.986879][ T5620] Bluetooth: hci4: command tx timeout [ 92.988917][ T5620] Bluetooth: hci3: command tx timeout [ 93.007168][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.007221][ T25] usb 2-1: Product: syz [ 93.007239][ T25] usb 2-1: Manufacturer: syz [ 93.007254][ T25] usb 2-1: SerialNumber: syz [ 93.032869][ T1070] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.124362][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 93.142914][ T25] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input5 [ 93.186942][ T1070] usb 5-1: Using ep0 maxpacket: 32 [ 93.194917][ T1070] usb 5-1: unable to get BOS descriptor or descriptor too short [ 93.195015][ T1070] usb 5-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=d7.a6 [ 93.214327][ T1070] usb 5-1: config 16 has an invalid interface number: 102 but max is 0 [ 93.228908][ T1070] usb 5-1: config 16 has no interface number 0 [ 93.236243][ T1070] usb 5-1: config 16 interface 102 has no altsetting 0 [ 93.246795][ T1070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.254928][ T1070] usb 5-1: Product: syz [ 93.259549][ T1070] usb 5-1: Manufacturer: syz [ 93.264303][ T1070] usb 5-1: SerialNumber: syz [ 93.411315][ T25] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 93.411372][ T25] (id 0x00) [ 93.697331][ T1070] mct_u232 5-1:16.102: MCT U232 converter detected [ 93.697392][ T25] rc_core: IR keymap rc-imon-pad not found [ 93.697413][ T25] Registered IR keymap rc-empty [ 93.697519][ T25] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 93.697543][ T25] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 93.749059][ T1070] mct_u232 ttyUSB0: expected endpoint missing [ 93.780202][ T1070] usb 5-1: USB disconnect, device number 2 [ 93.785341][ T25] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 93.804321][ T1070] mct_u232 5-1:16.102: device disconnected [ 93.831823][ T25] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input6 [ 93.963561][ T25] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:2> initialized [ 94.043775][ T25] usb 2-1: USB disconnect, device number 2 [ 94.603425][ T5763] block device autoloading is deprecated and will be removed. [ 94.666937][ T5710] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.826700][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 94.827444][ T5710] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 94.833104][ T5710] usb 3-1: config 6 has an invalid interface number: 213 but max is 1 [ 94.833186][ T5710] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 94.833335][ T5710] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 94.833407][ T5710] usb 3-1: config 6 has no interface number 0 [ 94.833513][ T5710] usb 3-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.849976][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 94.850051][ T5710] usb 3-1: Manufacturer: syz [ 94.850112][ T5710] usb 3-1: SerialNumber: syz [ 95.350192][ T5782] faux_driver vgem: [drm] Unknown color mode 1024; guessing buffer size. [ 95.904566][ T5789] bridge0: port 3(veth0) entered blocking state [ 95.912431][ T5789] bridge0: port 3(veth0) entered disabled state [ 95.912662][ T5789] veth0: entered allmulticast mode [ 95.931910][ T5789] veth0: entered promiscuous mode [ 95.943838][ T5789] bridge0: port 3(veth0) entered blocking state [ 95.943997][ T5789] bridge0: port 3(veth0) entered forwarding state [ 95.973492][ T5791] bridge0: port 4(veth1) entered blocking state [ 95.975459][ T5791] bridge0: port 4(veth1) entered disabled state [ 96.025407][ T5791] veth1: entered allmulticast mode [ 96.039190][ T5791] veth1: entered promiscuous mode [ 96.050681][ T5791] bridge0: port 4(veth1) entered blocking state [ 96.050848][ T5791] bridge0: port 4(veth1) entered forwarding state [ 96.218122][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 96.218925][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 96.219612][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 96.220132][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 96.220634][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 96.221124][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 96.221671][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 96.222163][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 96.223007][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 96.224351][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 96.774081][ T5796] process 'syz.3.31' launched './file1' with NULL argv: empty string added [ 96.956737][ T5796] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.971910][ T5710] usb 3-1: USB disconnect, device number 2 [ 97.436670][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.677826][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 97.719730][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 97.768375][ T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 97.768426][ T9] usb 2-1: config 0 has no interface number 0 [ 97.768495][ T9] usb 2-1: config 0 interface 12 has no altsetting 0 [ 97.794346][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.794394][ T9] usb 2-1: Product: syz [ 97.794428][ T9] usb 2-1: Manufacturer: syz [ 97.794448][ T9] usb 2-1: SerialNumber: syz [ 97.836665][ T9] usb 2-1: config 0 descriptor?? [ 99.612133][ T5682] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.766527][ T5682] usb 4-1: Using ep0 maxpacket: 32 [ 99.768752][ T5682] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 99.786681][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.786731][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.786815][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.791000][ T5682] usb 4-1: config 0 descriptor?? [ 100.189497][ T9] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 100.189598][ T9] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 100.189662][ T9] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 100.189751][ T9] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 100.261246][ T9] usb 2-1: USB disconnect, device number 3 [ 100.419359][ T5682] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 100.634650][ T9] usb 4-1: USB disconnect, device number 2 [ 101.043127][ T5822] fido_id[5822]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 101.227157][ C1] net_ratelimit: 3990 callbacks suppressed [ 101.227227][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 101.232382][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 101.233354][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.234834][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.239542][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 101.244267][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 101.245016][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.246556][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.251131][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 101.255857][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 102.662269][ T30] audit: type=1326 audit(1788402346.077:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="syz.3.45" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f448019e159 code=0x0 [ 103.553071][ T5847] input: syz1 as /devices/virtual/input/input7 [ 103.866316][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.027794][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.038583][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.038637][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.038703][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.099765][ T5851] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.182709][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 104.713817][ T9] usb 1-1: USB disconnect, device number 2 [ 105.379263][ T5866] netlink: 56 bytes leftover after parsing attributes in process `syz.4.54'. [ 105.901716][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.085151][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 106.109293][ T9] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 106.109339][ T9] usb 1-1: Product: syz [ 106.109372][ T9] usb 1-1: SerialNumber: syz [ 106.154132][ T9] usb 1-1: config 0 descriptor?? [ 106.237150][ C1] net_ratelimit: 3612 callbacks suppressed [ 106.237202][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 106.237798][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 106.238403][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.239154][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.251505][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 106.253105][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.254778][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.256168][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 106.259359][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 106.261076][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 106.427676][ T9] hso 1-1:0.0: Failed to find BULK eps [ 106.743476][ T5682] usb 1-1: USB disconnect, device number 3 [ 108.909071][ T5922] input: syz0 as /devices/virtual/input/input8 [ 109.261906][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.333035][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 109.388998][ T5931] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4013772623 (16055090492 ns) > initial count (2788997612 ns). Using initial count to start timer. [ 109.438079][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.438655][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 109.466758][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.466805][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.499082][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.507713][ T9] usb 3-1: Product: syz [ 109.507736][ T9] usb 3-1: Manufacturer: syz [ 109.507752][ T9] usb 3-1: SerialNumber: syz [ 109.580106][ T9] usb 3-1: selecting invalid altsetting 1 [ 109.603702][ T9] usb 3-1: unit 6 not found! [ 110.663692][ T9] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 111.058903][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 111.093692][ T9] usb 3-1: USB disconnect, device number 3 [ 111.180769][ T5718] udevd[5718]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.246955][ C1] net_ratelimit: 4074 callbacks suppressed [ 111.247043][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 111.248460][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.249895][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.251415][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 111.254690][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 111.256306][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 111.259526][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.261226][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.272476][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 111.274034][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.119996][ T1070] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.134090][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 112.167964][ T1384] IPVS: starting estimator thread 0... [ 112.276186][ T5972] IPVS: using max 25 ests per chain, 60000 per kthread [ 112.317583][ T1070] usb 4-1: Using ep0 maxpacket: 8 [ 112.363680][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 112.380135][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 112.380191][ T9] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 112.403637][ T9] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 112.403711][ T9] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 112.403751][ T9] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 112.403776][ T9] usb 3-1: config 14 has no interface number 0 [ 112.403797][ T9] usb 3-1: config 14 has no interface number 1 [ 112.403901][ T9] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 112.403933][ T9] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 112.403965][ T9] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.404024][ T9] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 112.404056][ T9] usb 3-1: config 14 interface 57 has no altsetting 0 [ 112.404080][ T9] usb 3-1: config 14 interface 228 has no altsetting 0 [ 112.535430][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.535500][ T9] usb 3-1: Product: syz [ 112.535572][ T9] usb 3-1: Manufacturer: syz [ 112.535593][ T9] usb 3-1: SerialNumber: syz [ 112.809328][ T1070] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.809434][ T1070] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 112.831098][ T1070] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 112.839061][ T1070] usb 4-1: can't read configurations, error -71 [ 113.071202][ T9] legousbtower 3-1:14.57: interrupt endpoints not found [ 113.467911][ T9] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 113.499362][ T9] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 114.410704][ T1070] usb 3-1: USB disconnect, device number 4 [ 114.454930][ T1070] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 114.608604][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 115.156064][ T1070] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.337870][ T1070] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.361987][ T1070] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.362058][ T1070] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.387669][ T1070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 115.387700][ T1070] usb 5-1: SerialNumber: syz [ 115.475465][ T1070] cdc_ether 5-1:1.0: missing cdc ether descriptor [ 115.696425][ T5997] loop4: detected capacity change from 0 to 1 [ 115.801181][ T5997] Dev loop4: unable to read RDB block 1 [ 115.829839][ T5997] loop4: AHDI p1 p2 p3 [ 115.829897][ T5997] loop4: partition table partially beyond EOD, truncated [ 115.852680][ T5997] loop4: p1 size 825635125 extends beyond EOD, truncated [ 115.885523][ T5997] loop4: p3 start 335544320 is beyond EOD, truncated [ 116.023067][ T1070] usb 5-1: USB disconnect, device number 3 [ 116.217840][ T5718] udevd[5718]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 116.256962][ C1] net_ratelimit: 3962 callbacks suppressed [ 116.257012][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 116.257541][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 116.258114][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.259337][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.266274][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 116.266804][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.267334][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.268259][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 116.272722][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 116.274266][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 117.655428][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.108'. [ 117.655472][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.108'. [ 118.046213][ T5696] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.267872][ T5696] usb 3-1: Using ep0 maxpacket: 8 [ 118.792097][ T5696] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.792176][ T5696] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 118.822253][ T5696] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 118.822312][ T5696] usb 3-1: can't read configurations, error -71 [ 119.771240][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 119.906354][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 119.972272][ T6046] lo: entered promiscuous mode [ 120.162976][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 120.204878][ T6042] Zero length message leads to an empty skb [ 120.212107][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.212157][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.212194][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.212231][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.056132][ T5696] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.219578][ T5696] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.232710][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.232753][ T5696] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.256775][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.265115][ T5696] usb 1-1: SerialNumber: syz [ 121.266631][ C1] net_ratelimit: 3770 callbacks suppressed [ 121.266652][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 121.267134][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 121.267906][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 121.269331][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.270740][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.286705][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 121.288337][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.289749][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.290778][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 121.294901][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 121.899238][ T5696] usb 1-1: 0:2 : does not exist [ 122.166180][ T5696] usb 1-1: USB disconnect, device number 4 [ 122.491341][ T5718] udevd[5718]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.526184][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.712076][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 122.718121][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 122.738761][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.738806][ T9] usb 2-1: Product: syz [ 122.738838][ T9] usb 2-1: Manufacturer: syz [ 122.738858][ T9] usb 2-1: SerialNumber: syz [ 122.771053][ T9] usb 2-1: config 0 descriptor?? [ 122.791922][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 124.661090][ T9] gspca_ov534_9: reg_w failed -71 [ 124.917511][ T9] gspca_ov534_9: Unknown sensor 0000 [ 124.917623][ T9] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 124.943054][ T9] usb 2-1: USB disconnect, device number 4 [ 125.845412][ T6136] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.956165][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.116180][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 126.125352][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 126.155337][ T9] usb 2-1: config 0 has no interfaces? [ 126.224980][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.225028][ T9] usb 2-1: Product: syz [ 126.225061][ T9] usb 2-1: Manufacturer: syz [ 126.225081][ T9] usb 2-1: SerialNumber: syz [ 126.261395][ T9] usb 2-1: config 0 descriptor?? [ 126.279434][ C1] net_ratelimit: 3439 callbacks suppressed [ 126.279491][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.280074][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.286668][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 126.287252][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.288600][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.290070][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 126.294696][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 126.296392][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 126.298000][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 126.298813][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 126.630873][ T6134] netlink: 'syz.1.143': attribute type 1 has an invalid length. [ 127.338040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #30a!!! [ 127.786069][ T1070] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.969320][ T1070] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 127.995253][ T5696] usb 2-1: USB disconnect, device number 5 [ 128.004289][ T1070] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.004362][ T1070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.105673][ T1070] as10x_usb: device has been detected [ 128.106755][ T1070] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 128.167364][ T1070] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 128.272044][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.283033][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.297498][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.314501][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.331232][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.340737][ T1070] as10x_usb: error during firmware upload part1 [ 128.355869][ T1070] Registered device Abilis Systems DVB-Titan [ 128.457042][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 128.470948][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 128.489929][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 128.489979][ T9] usb 4-1: config 179 has no interface number 0 [ 128.490039][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 128.490079][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 128.490112][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 128.490144][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 128.490175][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 128.490221][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.587202][ T6168] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 129.109787][ T9] usb 4-1: USB disconnect, device number 5 [ 129.109851][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 129.109904][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 130.049013][ T6186] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.184374][ T9] usb 5-1: USB disconnect, device number 4 [ 130.375533][ T9] Unregistered device Abilis Systems DVB-Titan [ 130.390450][ T9] as10x_usb: device has been disconnected [ 130.586101][ T6193] syz.1.158 uses obsolete (PF_INET,SOCK_PACKET) [ 131.286601][ C1] net_ratelimit: 4198 callbacks suppressed [ 131.286667][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 131.287279][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 131.287845][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.288437][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.292842][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.293445][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.296513][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 131.297140][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.297719][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.298320][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 131.516831][ T1070] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.686883][ T1070] usb 5-1: Using ep0 maxpacket: 32 [ 131.693195][ T1070] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 131.708691][ T1070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.708735][ T1070] usb 5-1: Product: syz [ 131.708767][ T1070] usb 5-1: Manufacturer: syz [ 131.708787][ T1070] usb 5-1: SerialNumber: syz [ 131.791732][ T1070] usb 5-1: config 0 descriptor?? [ 131.853497][ T1070] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 131.916108][ T5696] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.068355][ T5696] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.084735][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.084834][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.154455][ T5696] usb 4-1: config 0 descriptor?? [ 132.427037][ T5696] usbhid 4-1:0.0: can't add hid device: -71 [ 132.427209][ T5696] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 132.468387][ T5696] usb 4-1: USB disconnect, device number 6 [ 132.953744][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.963022][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.057245][ T5696] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 133.091258][ T1070] gspca_topro: reg_w err -71 [ 133.116313][ T1070] gspca_topro: Sensor soi763a [ 133.150863][ T1070] usb 5-1: USB disconnect, device number 5 [ 133.218868][ T5696] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 133.231330][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.231401][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.262101][ T5696] usb 4-1: config 0 descriptor?? [ 134.165204][ T5696] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 134.182939][ T5696] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 134.605187][ T9] usb 4-1: USB disconnect, device number 7 [ 134.605305][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 135.969664][ T6267] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 136.300897][ C1] net_ratelimit: 4002 callbacks suppressed [ 136.300970][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.303004][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.313140][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 136.315085][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.318077][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.320078][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 136.328126][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 136.329955][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 136.330997][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 136.333491][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 138.458472][ T6297] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.279934][ T6324] netlink: 64 bytes leftover after parsing attributes in process `syz.1.201'. [ 140.319641][ T6324] syzkaller1: entered promiscuous mode [ 140.326491][ T6324] syzkaller1: entered allmulticast mode [ 141.306095][ C1] net_ratelimit: 4014 callbacks suppressed [ 141.306146][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.306729][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 141.310413][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 141.311891][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 141.313385][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 141.313973][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 141.315346][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.316953][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.327919][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.329571][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.316781][ T5696] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 142.488394][ T5696] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 142.510663][ T5696] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 142.510747][ T5696] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.510794][ T5696] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.510827][ T5696] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.510858][ T5696] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 142.872045][ T5696] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 142.872119][ T5696] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.872165][ T5696] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.872197][ T5696] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.872229][ T5696] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 142.883768][ T5696] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 142.883831][ T5696] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.883861][ T5696] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.883888][ T5696] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.883916][ T5696] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 143.008801][ T5696] usb 5-1: string descriptor 0 read error: -22 [ 143.008960][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.040374][ T5696] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 143.140085][ T6344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.255308][ T6347] bond1: (slave ip6erspan0): making interface the new active one [ 143.297369][ T6347] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 145.099475][ T6385] bridge_slave_0: left allmulticast mode [ 145.110206][ T6385] bridge_slave_0: left promiscuous mode [ 145.126452][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.181155][ T6385] bridge_slave_1: left allmulticast mode [ 145.188545][ T6385] bridge_slave_1: left promiscuous mode [ 145.188811][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.443163][ T6385] bond0: (slave bond_slave_0): Releasing backup interface [ 145.505479][ T6385] bond0: (slave bond_slave_1): Releasing backup interface [ 145.574880][ T6385] team0: Port device team_slave_0 removed [ 145.642460][ T6385] team0: Port device team_slave_1 removed [ 145.654422][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.654477][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.703413][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.711226][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.297610][ T6407] hsr0: entered allmulticast mode [ 146.305498][ T6407] hsr_slave_0: entered allmulticast mode [ 146.305552][ T6407] hsr_slave_1: entered allmulticast mode [ 146.317853][ C1] net_ratelimit: 4055 callbacks suppressed [ 146.317905][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.319152][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.323433][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 146.324709][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.326195][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.327448][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 146.331557][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 146.332828][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 146.334087][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 146.335310][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 146.522922][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'. [ 146.548661][ T6407] hsr_slave_0: left promiscuous mode [ 146.564424][ T6407] hsr_slave_1: left promiscuous mode [ 146.802053][ T6409] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 146.843607][ T6411] kvm: pic: non byte read [ 146.849506][ T6411] kvm: pic: non byte read [ 146.849688][ T6411] kvm: pic: non byte read [ 146.849705][ T6411] kvm: pic: non byte read [ 146.849718][ T6411] kvm: pic: non byte read [ 146.849730][ T6411] kvm: pic: non byte read [ 146.849742][ T6411] kvm: pic: non byte read [ 146.849754][ T6411] kvm: pic: non byte read [ 146.849766][ T6411] kvm: pic: non byte read [ 146.849778][ T6411] kvm: pic: non byte read [ 146.995665][ T6407] hsr0 (unregistering): left allmulticast mode [ 147.105758][ T6416] netlink: 64 bytes leftover after parsing attributes in process `syz.2.229'. [ 147.213866][ T6415] syzkaller1: entered promiscuous mode [ 147.213910][ T6415] syzkaller1: entered allmulticast mode [ 147.509996][ T9] usb 5-1: USB disconnect, device number 6 [ 148.978675][ T6451] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.783460][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 149.783511][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 151.329677][ C1] net_ratelimit: 3566 callbacks suppressed [ 151.329742][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.336079][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.340819][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 151.341421][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.342066][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.344080][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 151.346173][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 151.347897][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 151.349447][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 151.351099][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 153.878549][ T5696] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.079448][ T5696] usb 3-1: Using ep0 maxpacket: 8 [ 154.086078][ T5696] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 154.097176][ T5696] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.097223][ T5696] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.097253][ T5696] usb 3-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 154.097283][ T5696] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 154.097315][ T5696] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 154.097344][ T5696] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.097392][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.405078][ T5696] usb 3-1: GET_CAPABILITIES returned 0 [ 154.411126][ T5696] usbtmc 3-1:16.0: can't read capabilities [ 154.619776][ T5696] usb 3-1: USB disconnect, device number 7 [ 156.339237][ C1] net_ratelimit: 3912 callbacks suppressed [ 156.339325][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 156.340667][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.341953][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 156.343450][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.346233][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 156.349467][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 156.350736][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 156.352040][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 156.353299][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 156.354561][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 157.343643][ T6508] veth0: left allmulticast mode [ 157.349533][ T6508] veth0: left promiscuous mode [ 157.355037][ T6508] bridge0: port 3(veth0) entered disabled state [ 157.371792][ T6508] veth1: left allmulticast mode [ 157.371852][ T6508] veth1: left promiscuous mode [ 157.372422][ T6508] bridge0: port 4(veth1) entered disabled state [ 157.393236][ T6508] bridge_slave_0: left allmulticast mode [ 157.393295][ T6508] bridge_slave_0: left promiscuous mode [ 157.393917][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.419367][ T6508] bridge_slave_1: left allmulticast mode [ 157.419429][ T6508] bridge_slave_1: left promiscuous mode [ 157.420051][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.452440][ T6508] bond0: (slave bond_slave_0): Releasing backup interface [ 157.480741][ T6508] bond0: (slave bond_slave_1): Releasing backup interface [ 157.512948][ T6508] team0: Port device team_slave_0 removed [ 157.524751][ T6508] team0: Port device team_slave_1 removed [ 157.532581][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.532633][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.552583][ T6508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.552646][ T6508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.611408][ T6509] team0: Port device xfrm0 added [ 157.613618][ T6510] tipc: Started in network mode [ 157.613719][ T6510] tipc: Node identity 5e466ded63fb, cluster identity 4711 [ 157.642790][ T6510] tipc: Enabled bearer , priority 0 [ 157.884624][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.888913][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.145902][ T6517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.174880][ T6517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.588184][ T37] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.588267][ T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.588354][ T37] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.588445][ T37] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.588600][ T37] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.588687][ T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.588799][ T37] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.588862][ T37] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.774519][ T923] tipc: Node number set to 1035824621 [ 158.819858][ T6547] loop7: detected capacity change from 0 to 16384 [ 158.853510][ T6548] loop7: detected capacity change from 16384 to 0 [ 159.310182][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 159.378175][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 159.406172][ T1121] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.409354][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.409480][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.426980][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.656128][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 161.806036][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 161.807803][ T25] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 161.811643][ T25] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 161.811713][ T25] usb 3-1: config 0 has no interface number 0 [ 161.811822][ T25] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 161.812833][ T25] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 161.831567][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.831662][ T25] usb 3-1: Product: syz [ 161.831712][ T25] usb 3-1: Manufacturer: syz [ 161.831760][ T25] usb 3-1: SerialNumber: syz [ 161.893932][ T25] usb 3-1: config 0 descriptor?? [ 161.899302][ T6621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.899489][ T6621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.121628][ T6621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.122327][ T6621] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.333659][ T25] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 163.549374][ T25] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 163.549427][ T25] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 163.549910][ T25] asix 3-1:0.34: probe with driver asix failed with error -71 [ 163.585401][ T25] usb 3-1: USB disconnect, device number 8 [ 165.232187][ T6678] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.254545][ T6676] syzkaller0: entered promiscuous mode [ 165.260892][ T6676] syzkaller0: entered allmulticast mode [ 170.430367][ T6758] picdev_read: 504 callbacks suppressed [ 170.451080][ T6758] kvm: pic: non byte read [ 170.451620][ T6758] kvm: pic: level sensitive irq not supported [ 170.451730][ T6758] kvm: pic: non byte read [ 170.451967][ T6758] kvm: pic: level sensitive irq not supported [ 170.452032][ T6758] kvm: pic: non byte read [ 170.452320][ T6758] kvm: pic: level sensitive irq not supported [ 170.452386][ T6758] kvm: pic: non byte read [ 170.502455][ T6758] kvm: pic: level sensitive irq not supported [ 170.502531][ T6758] kvm: pic: non byte read [ 170.502764][ T6758] kvm: pic: level sensitive irq not supported [ 170.502812][ T6758] kvm: pic: non byte read [ 170.525135][ T6758] kvm: pic: level sensitive irq not supported [ 170.525260][ T6758] kvm: pic: non byte read [ 170.690924][ T44] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 170.836451][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 170.847509][ T44] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 170.861797][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.861859][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.861930][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.912075][ T44] usb 3-1: config 0 descriptor?? [ 171.438129][ T44] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 171.689869][ T44] usb 3-1: USB disconnect, device number 9 [ 172.157295][ T6807] tipc: Started in network mode [ 172.162337][ T6807] tipc: Node identity 0e34d601abae, cluster identity 4711 [ 172.166911][ T6807] tipc: Enabled bearer , priority 0 [ 172.174542][ T6807] syzkaller0: MTU too low for tipc bearer [ 172.174595][ T6807] tipc: Disabling bearer [ 172.322533][ T6809] kvm: pic: level sensitive irq not supported [ 172.322755][ T6809] kvm: pic: non byte read [ 172.322954][ T6809] kvm: pic: level sensitive irq not supported [ 172.323015][ T6809] kvm: pic: non byte read [ 172.863238][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 173.027008][ T44] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.187531][ T44] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 173.197383][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.197435][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.203371][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 173.203444][ T44] usb 5-1: SerialNumber: syz [ 173.391812][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 173.398032][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 173.460232][ T44] usb 5-1: 0:2 : does not exist [ 173.460401][ T44] usb 5-1: unit 5: unexpected type 0x09 [ 173.496683][ T6847] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.546711][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 173.558816][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.558866][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.582444][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 173.582491][ T25] usb 1-1: SerialNumber: syz [ 173.607844][ T44] usb 5-1: USB disconnect, device number 7 [ 173.636305][ T6849] vlan3: entered allmulticast mode [ 173.636359][ T6849] bond1: entered allmulticast mode [ 173.782187][ T5718] udevd[5718]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.822901][ T25] usb 1-1: 0:2 : does not exist [ 173.913116][ T25] usb 1-1: USB disconnect, device number 5 [ 174.027678][ T5718] udevd[5718]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.839407][ T30] audit: type=1326 audit(1788402418.267:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.0.387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34cf9e159 code=0x7ffc0000 [ 174.839483][ T30] audit: type=1326 audit(1788402418.267:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.0.387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34cf9e159 code=0x7ffc0000 [ 174.915332][ T30] audit: type=1326 audit(1788402418.337:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.0.387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34cf9e159 code=0x7ffc0000 [ 174.915411][ T30] audit: type=1326 audit(1788402418.337:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.0.387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34cf9e159 code=0x7ffc0000 [ 174.940469][ T30] audit: type=1326 audit(1788402418.337:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.0.387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe34cf9e159 code=0x7ffc0000 [ 174.969342][ T30] audit: type=1326 audit(1788402418.397:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.0.387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe34cf9e159 code=0x7ffc0000 [ 174.969413][ T30] audit: type=1326 audit(1788402418.397:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.0.387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe34cf9dec2 code=0x7ffc0000 [ 174.969457][ T30] audit: type=1326 audit(1788402418.397:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.0.387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe34cf9df57 code=0x7ffc0000 [ 174.969505][ T30] audit: type=1326 audit(1788402418.397:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.0.387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe34cf5ae51 code=0x7ffc0000 [ 174.969547][ T30] audit: type=1326 audit(1788402418.397:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.0.387" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe34cf9ef49 code=0x7ffc0000 [ 176.072334][ T6917] netlink: 60 bytes leftover after parsing attributes in process `syz.0.397'. [ 176.072377][ T6917] netlink: 60 bytes leftover after parsing attributes in process `syz.0.397'. [ 176.359284][ T6924] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.606535][ T6930] kvm: emulating exchange as write [ 176.846048][ T5682] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 177.017712][ T5682] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 177.030918][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.030954][ T5682] usb 1-1: Product: syz [ 177.032199][ T5682] usb 1-1: Manufacturer: syz [ 177.032251][ T5682] usb 1-1: SerialNumber: syz [ 177.055775][ T5682] usb 1-1: config 0 descriptor?? [ 177.310704][ T5682] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 178.003840][ T6950] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 178.045175][ T6950] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.116781][ T6950] bond2: (slave veth3): Enslaving as an active interface with a down link [ 178.154042][ T6953] bond2: (slave dummy0): making interface the new active one [ 178.166585][ T6953] dummy0: entered promiscuous mode [ 178.182887][ T6953] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 178.204601][ T6950] bond2 (unregistering): (slave veth3): Releasing active interface [ 178.223039][ T6950] bond2 (unregistering): (slave dummy0): Releasing active interface [ 178.249192][ T6950] bond2 (unregistering): Released all slaves [ 178.460223][ T6960] kvm: pic: level sensitive irq not supported [ 178.528865][ T6961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 178.765706][ T5682] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 178.778896][ T5682] usb 1-1: USB disconnect, device number 6 [ 178.889840][ T6975] net_ratelimit: 843 callbacks suppressed [ 178.895878][ T6975] IPVS: nq: FWM 3 0x00000003 - no destination available [ 179.273589][ T5621] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 180.708011][ T44] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 180.747662][ T25] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 180.867553][ T44] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 180.879351][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.879450][ T44] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 180.879497][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.926761][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.939860][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.939910][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.939969][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.193828][ T25] usb 4-1: usb_control_msg returned -32 [ 181.193928][ T25] usbtmc 4-1:16.0: can't read capabilities [ 181.326414][ T44] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 181.338362][ T44] dvb_ttusb_budget: ttusb_init_controller: error [ 181.350701][ T44] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 181.448214][ T44] DVB: Unable to find symbol stv0299_attach() [ 181.572721][ T44] DVB: Unable to find symbol tda8083_attach() [ 181.579326][ T44] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 181.894462][ T7062] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 182.094599][ T25] usb 2-1: USB disconnect, device number 6 [ 182.797855][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 182.946245][ T5710] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 182.956570][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 182.962330][ T25] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 182.967490][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.968088][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.968222][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.973348][ T25] usb 3-1: config 0 descriptor?? [ 183.066104][ T44] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 183.106760][ T5710] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 183.111951][ T5710] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 183.112080][ T5710] usb 2-1: config 1 has no interface number 0 [ 183.132112][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.132155][ T5710] usb 2-1: Product: syz [ 183.132171][ T5710] usb 2-1: Manufacturer: syz [ 183.132203][ T5710] usb 2-1: SerialNumber: syz [ 183.164270][ T5710] usb 2-1: 3:1 : does not exist [ 183.164345][ T5710] usb 2-1: 3:2 : does not exist [ 183.226677][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 183.228767][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.232270][ T44] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 183.232327][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 183.232384][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 183.232411][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 183.232440][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 183.232465][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.232683][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.396947][ T25] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 183.397018][ T25] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 183.416654][ T5621] Bluetooth: hci2: command 0x2016 tx timeout [ 183.496367][ T5682] usb 4-1: USB disconnect, device number 8 [ 183.526473][ T44] usb 5-1: GET_CAPABILITIES returned 0 [ 183.526569][ T44] usbtmc 5-1:16.0: can't read capabilities [ 183.593320][ T25] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 183.760702][ T5710] usb 5-1: USB disconnect, device number 8 [ 183.794832][ T25] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 183.959650][ T44] usb 2-1: USB disconnect, device number 7 [ 184.001800][ T25] ft260 0003:0403:6030.0003: failed to retrieve status: -32, no wakeup [ 184.214820][ T7088] ft260 0003:0403:6030.0003: ft260_i2c_read: failed with -38 [ 184.222364][ T25] usb 3-1: USB disconnect, device number 10 [ 185.485559][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 185.884996][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 185.887764][ T30] audit: type=1326 audit(1788402429.307:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7150 comm="syz.3.477" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f448019e159 code=0x0 [ 186.106056][ T5682] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 186.276263][ T5682] usb 5-1: Using ep0 maxpacket: 32 [ 186.288467][ T5682] usb 5-1: unable to get BOS descriptor or descriptor too short [ 186.288535][ T5682] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 186.309380][ T5682] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 186.309426][ T5682] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 186.309465][ T5682] usb 5-1: config 14 has no interface number 0 [ 186.309487][ T5682] usb 5-1: config 14 has no interface number 1 [ 186.309557][ T5682] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 186.309586][ T5682] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 186.309616][ T5682] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 186.309664][ T5682] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 186.309696][ T5682] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 186.309728][ T5682] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.309760][ T5682] usb 5-1: config 14 interface 57 has no altsetting 0 [ 186.309784][ T5682] usb 5-1: config 14 interface 228 has no altsetting 0 [ 186.437015][ T7171] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.448115][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.448157][ T5682] usb 5-1: Product: syz [ 186.448177][ T5682] usb 5-1: Manufacturer: syz [ 186.448196][ T5682] usb 5-1: SerialNumber: syz [ 186.883880][ T7183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.486'. [ 186.895435][ T5682] legousbtower 5-1:14.57: interrupt endpoints not found [ 186.904371][ T7183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.486'. [ 187.120938][ T7191] syzkaller1: entered promiscuous mode [ 187.128439][ T7191] syzkaller1: entered allmulticast mode [ 187.298830][ T5682] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 187.321942][ T5696] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 187.359051][ T5682] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 187.487038][ T5696] usb 1-1: Using ep0 maxpacket: 32 [ 187.492899][ T5696] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 187.506106][ T5696] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.506152][ T5696] usb 1-1: config 0 has no interface number 0 [ 187.506211][ T5696] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 187.506240][ T5696] usb 1-1: config 0 interface 1 has no altsetting 0 [ 187.543965][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.544012][ T5696] usb 1-1: Product: syz [ 187.544053][ T5696] usb 1-1: Manufacturer: syz [ 187.544073][ T5696] usb 1-1: SerialNumber: syz [ 187.571426][ T5696] usb 1-1: config 0 descriptor?? [ 187.807945][ T5696] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 187.821229][ T5696] cx231xx 1-1:0.1: Failed to read PCB config [ 187.827954][ T5696] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 187.839777][ T5696] usb 1-1: USB disconnect, device number 7 [ 187.926966][ T5682] usb 5-1: USB disconnect, device number 9 [ 187.927088][ C0] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 187.963993][ T5682] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 188.117881][ T7215] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.130544][ T7220] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.252555][ T7223] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.499'. [ 188.336647][ T5696] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 188.486304][ T5696] usb 1-1: Using ep0 maxpacket: 32 [ 188.492553][ T5696] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 188.508031][ T5696] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.508076][ T5696] usb 1-1: config 0 has no interface number 0 [ 188.508135][ T5696] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 188.508162][ T5696] usb 1-1: config 0 interface 1 has no altsetting 0 [ 188.555069][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.555116][ T5696] usb 1-1: Product: syz [ 188.555151][ T5696] usb 1-1: Manufacturer: syz [ 188.555172][ T5696] usb 1-1: SerialNumber: syz [ 188.584533][ T5696] usb 1-1: config 0 descriptor?? [ 188.818837][ T5696] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 188.835320][ T5696] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 188.956309][ T5696] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 188.966340][ T5696] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 188.975305][ T5696] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 188.983593][ T5696] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 188.991815][ T5696] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 188.991854][ T5696] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32 [ 189.051795][ T5696] i2c i2c-2: Added multiplexed i2c bus 4 [ 189.066373][ T5696] i2c i2c-2: Added multiplexed i2c bus 5 [ 189.073846][ T5696] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 189.073903][ T5696] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 189.178227][ T5696] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 189.190836][ T5696] usb 1-1: USB disconnect, device number 8 [ 190.316035][ T5710] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 190.467331][ T5710] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 190.471147][ T5710] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.471200][ T5710] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.476674][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 190.476706][ T5710] usb 5-1: Product: syz [ 190.476739][ T5710] usb 5-1: Manufacturer: syz [ 190.562878][ T5710] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 190.697451][ T44] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 190.747558][ T7250] cgroup: fork rejected by pids controller in /syz0 [ 190.856979][ T44] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 190.868034][ T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.883354][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.883438][ T44] usb 3-1: Product: syz [ 190.883456][ T44] usb 3-1: Manufacturer: syz [ 190.883518][ T44] usb 3-1: SerialNumber: syz [ 190.947855][ T44] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 191.767445][ T44] gspca_mr97310a: reg write [19] error -71 [ 191.767608][ T44] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 191.816717][ T44] usb 3-1: USB disconnect, device number 11 [ 192.314897][ T7297] netlink: 'syz.1.516': attribute type 3 has an invalid length. [ 192.314944][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.516'. [ 192.315083][ T7297] netlink: 2 bytes leftover after parsing attributes in process `syz.1.516'. [ 192.466328][ T7299] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4232229815 (16928919260 ns) > initial count (6530613556 ns). Using initial count to start timer. [ 192.595860][ T5710] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 192.623799][ T5710] usb 5-1: USB disconnect, device number 10 [ 192.683073][ T5710] mos7840 5-1:1.0: device disconnected [ 193.160579][ T7317] kvm [7316]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 193.981767][ T7231] Set syz0 is full, maxelem 65536 reached [ 194.390336][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.390426][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.842973][ T7370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'. [ 194.984953][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 195.074043][ T7341] cgroup: fork rejected by pids controller in /syz4 [ 195.657571][ T5696] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 195.716143][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 195.848209][ T5696] usb 1-1: Using ep0 maxpacket: 32 [ 195.852928][ T5696] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 195.860682][ T5696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.860818][ T5696] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 195.860889][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 195.860949][ T5696] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 195.874615][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 195.874859][ T5696] usb 1-1: Product: syz [ 195.874896][ T5696] usb 1-1: Manufacturer: syz [ 195.874937][ T5696] usb 1-1: SerialNumber: syz [ 195.923090][ T5696] usb 1-1: config 0 descriptor?? [ 195.927940][ T25] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 195.956960][ T25] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 195.957006][ T25] usb 3-1: Product: syz [ 195.957039][ T25] usb 3-1: SerialNumber: syz [ 195.984453][ T5696] usb 1-1: no audio or video endpoints found [ 195.994640][ T25] usb 3-1: config 0 descriptor?? [ 196.166454][ T5696] usb 1-1: USB disconnect, device number 9 [ 196.227020][ T25] hso 3-1:0.0: Failed to find BULK eps [ 196.455690][ T5696] usb 3-1: USB disconnect, device number 12 [ 196.649460][ T7419] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4013772623 (16055090492 ns) > initial count (2788997612 ns). Using initial count to start timer. [ 196.816113][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 196.976156][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 196.986504][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 196.994551][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 196.994629][ T9] usb 4-1: config 0 has no interface number 0 [ 196.994742][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 197.023049][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.023100][ T9] usb 4-1: Product: syz [ 197.023133][ T9] usb 4-1: Manufacturer: syz [ 197.023155][ T9] usb 4-1: SerialNumber: syz [ 197.051363][ T9] usb 4-1: config 0 descriptor?? [ 197.620411][ T7442] input: syz0 as /devices/virtual/input/input10 [ 198.015681][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 198.106085][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 198.269063][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 198.269136][ T25] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 198.288084][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.300271][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.312589][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.320767][ T25] usb 5-1: Product: syz [ 198.320789][ T25] usb 5-1: Manufacturer: syz [ 198.320805][ T25] usb 5-1: SerialNumber: syz [ 198.358432][ T25] usb 5-1: selecting invalid altsetting 1 [ 198.369693][ T25] usb 5-1: unit 6 not found! [ 198.674461][ T7464] netlink: 'syz.0.573': attribute type 1 has an invalid length. [ 198.977936][ T9] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 50 failed: -71 [ 198.978013][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 198.978048][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 198.978159][ T9] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 199.026904][ T9] usb 4-1: USB disconnect, device number 9 [ 199.276834][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 199.359747][ T7481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.374769][ T25] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 199.468892][ T7481] macvlan2: entered promiscuous mode [ 199.468943][ T7481] macvlan2: entered allmulticast mode [ 199.475307][ T7481] bond2: entered promiscuous mode [ 199.478740][ T7481] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 199.541895][ T7481] bond2: left promiscuous mode [ 199.722124][ T25] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 199.755846][ T25] usb 5-1: USB disconnect, device number 11 [ 199.900216][ T5718] udevd[5718]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.366224][ T44] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 200.518507][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.535679][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.535748][ T44] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.570216][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 200.570265][ T44] usb 4-1: SerialNumber: syz [ 200.602436][ T44] cdc_ether 4-1:1.0: missing cdc ether descriptor [ 200.805270][ T7491] loop4: detected capacity change from 0 to 1 [ 200.821664][ T7491] Dev loop4: unable to read RDB block 1 [ 200.821719][ T7491] loop4: AHDI p1 p2 p3 [ 200.821760][ T7491] loop4: partition table partially beyond EOD, truncated [ 200.821959][ T7491] loop4: p1 size 825635125 extends beyond EOD, truncated [ 200.849934][ T7491] loop4: p3 start 335544320 is beyond EOD, truncated [ 200.865218][ T25] usb 4-1: USB disconnect, device number 10 [ 201.015120][ T5718] udevd[5718]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 201.140439][ T7408] IPVS: starting estimator thread 0... [ 201.236955][ T7508] IPVS: using max 30 ests per chain, 72000 per kthread [ 201.856951][ T7545] ip_tables: iptables: counters copy to user failed while replacing table [ 201.991164][ T7516] cgroup: fork rejected by pids controller in /syz3 [ 203.103490][ T7573] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.423026][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 203.442993][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 203.445047][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 203.460970][ T7415] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.461020][ T7415] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.461056][ T7415] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.461092][ T7415] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.497960][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 203.654941][ T7603] lo: entered promiscuous mode [ 203.655449][ T7603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.661033][ T25] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 203.687838][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.698087][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.710495][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 203.710545][ T25] usb 3-1: SerialNumber: syz [ 203.837416][ T1070] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 203.856005][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.943570][ T25] usb 3-1: 0:2 : does not exist [ 203.979489][ T25] usb 3-1: USB disconnect, device number 13 [ 203.996217][ T1070] usb 4-1: Using ep0 maxpacket: 32 [ 203.999397][ T1070] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 204.011031][ T5710] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 204.019710][ T1070] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.019760][ T1070] usb 4-1: Product: syz [ 204.019795][ T1070] usb 4-1: Manufacturer: syz [ 204.019812][ T1070] usb 4-1: SerialNumber: syz [ 204.034654][ T9] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 204.043015][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.043191][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.064231][ T1070] usb 4-1: config 0 descriptor?? [ 204.093258][ T1070] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 204.109269][ T5718] udevd[5718]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.126553][ T9] as10x_usb: device has been detected [ 204.127673][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 204.171151][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 204.204955][ T9] as10x_usb: error during firmware upload part1 [ 204.211186][ T9] Registered device Abilis Systems DVB-Titan [ 204.226569][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 204.239720][ T5710] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 204.257270][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.257317][ T5710] usb 5-1: Product: syz [ 204.257351][ T5710] usb 5-1: Manufacturer: syz [ 204.257371][ T5710] usb 5-1: SerialNumber: syz [ 204.285137][ T5710] usb 5-1: config 0 descriptor?? [ 204.298339][ T5710] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 204.319898][ T7601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.324970][ T7601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.344509][ T7601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.353238][ T7601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.314060][ T1070] gspca_topro: reg_w err -71 [ 205.336064][ T1070] gspca_topro: Sensor soi763a [ 205.352482][ T1070] usb 4-1: USB disconnect, device number 11 [ 206.007479][ T1070] usb 1-1: USB disconnect, device number 10 [ 206.054853][ T1070] Unregistered device Abilis Systems DVB-Titan [ 206.062505][ T1070] as10x_usb: device has been disconnected [ 206.111179][ T5710] gspca_ov534_9: reg_w failed -71 [ 206.366059][ T5710] gspca_ov534_9: Unknown sensor 0000 [ 206.366172][ T5710] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 206.381810][ T5710] usb 5-1: USB disconnect, device number 12 [ 206.706406][ T4936] Bluetooth: hci1: command 0x0406 tx timeout [ 206.706746][ T4936] Bluetooth: hci0: command 0x0406 tx timeout [ 206.706792][ T4936] Bluetooth: hci2: command 0x2016 tx timeout [ 207.572803][ T7646] cgroup: fork rejected by pids controller in /syz2 [ 208.598574][ T30] audit: type=1326 audit(1788402452.027:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7699 comm="syz.0.622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe34cf9e159 code=0x0 [ 209.342771][ T7726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.378824][ T7726] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 209.411181][ T7726] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 209.510919][ T7728] kvm: pic: non byte read [ 209.510968][ T7728] kvm: pic: non byte read [ 209.525822][ T7728] kvm: pic: non byte read [ 209.530537][ T7728] kvm: pic: non byte read [ 209.530612][ T7728] kvm: pic: non byte read [ 209.530623][ T7728] kvm: pic: non byte read [ 209.530649][ T7728] kvm: pic: non byte read [ 209.530674][ T7728] kvm: pic: non byte read [ 209.530704][ T7728] kvm: pic: non byte read [ 209.530733][ T7728] kvm: pic: non byte read [ 209.793792][ T7731] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.055956][ T5696] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.206384][ T5696] usb 2-1: Using ep0 maxpacket: 8 [ 211.209883][ T5696] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 211.212605][ T5696] usb 2-1: config 6 has an invalid interface number: 213 but max is 1 [ 211.212668][ T5696] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 211.212731][ T5696] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 211.212785][ T5696] usb 2-1: config 6 has no interface number 0 [ 211.212889][ T5696] usb 2-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.218678][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 211.218759][ T5696] usb 2-1: Manufacturer: syz [ 211.218808][ T5696] usb 2-1: SerialNumber: syz [ 211.823447][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 211.823463][ T7639] Bluetooth: hci4: command 0x0406 tx timeout [ 211.846262][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 211.996949][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 211.998668][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.998845][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.029420][ T9] usb 1-1: config 0 descriptor?? [ 212.271638][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 212.271830][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 212.306571][ T9] usb 1-1: USB disconnect, device number 11 [ 212.774631][ T5696] usb 2-1: USB disconnect, device number 8 [ 212.787138][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 212.957928][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 212.962584][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.962724][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.991851][ T9] usb 1-1: config 0 descriptor?? [ 213.833529][ T9] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 213.867188][ T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 214.340386][ T923] usb 1-1: USB disconnect, device number 12 [ 214.351132][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 214.971547][ T7734] Set syz0 is full, maxelem 65536 reached [ 215.104813][ T7838] netlink: 64 bytes leftover after parsing attributes in process `syz.4.657'. [ 215.172082][ T7838] syzkaller1: entered promiscuous mode [ 215.172131][ T7838] syzkaller1: entered allmulticast mode [ 215.466235][ T7853] netlink: 64 bytes leftover after parsing attributes in process `syz.3.662'. [ 215.488616][ T7853] syzkaller1: entered promiscuous mode [ 215.488663][ T7853] syzkaller1: entered allmulticast mode [ 216.550353][ T7878] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 218.675569][ T7929] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 220.986408][ T923] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 221.136886][ T923] usb 4-1: Using ep0 maxpacket: 32 [ 221.140769][ T923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 221.140832][ T923] usb 4-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=d7.a6 [ 221.142515][ T923] usb 4-1: config 16 has an invalid interface number: 102 but max is 0 [ 221.142546][ T923] usb 4-1: config 16 has no interface number 0 [ 221.143349][ T923] usb 4-1: config 16 interface 102 has no altsetting 0 [ 221.169794][ T923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.169832][ T923] usb 4-1: Product: syz [ 221.169848][ T923] usb 4-1: Manufacturer: syz [ 221.169864][ T923] usb 4-1: SerialNumber: syz [ 221.455863][ T7893] Set syz0 is full, maxelem 65536 reached [ 221.472388][ T923] mct_u232 4-1:16.102: MCT U232 converter detected [ 221.482821][ T923] mct_u232 ttyUSB0: expected endpoint missing [ 221.500740][ T923] usb 4-1: USB disconnect, device number 12 [ 221.522738][ T923] mct_u232 4-1:16.102: device disconnected [ 223.156560][ T8023] syzkaller1: entered promiscuous mode [ 223.163429][ T8023] syzkaller1: entered allmulticast mode [ 223.934220][ T8042] netlink: 'syz.3.729': attribute type 1 has an invalid length. [ 224.044215][ T8042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.103559][ T8047] bond2: (slave veth3): Enslaving as an active interface with a down link [ 224.160026][ T8048] bond2: (slave dummy0): making interface the new active one [ 224.173248][ T8048] dummy0: entered promiscuous mode [ 224.179527][ T8048] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 224.203242][ T8042] bond2 (unregistering): (slave veth3): Releasing active interface [ 224.218157][ T8042] bond2 (unregistering): (slave dummy0): Releasing active interface [ 224.232554][ T8042] bond2 (unregistering): Released all slaves [ 224.377129][ T8053] netlink: 64 bytes leftover after parsing attributes in process `syz.0.741'. [ 224.422832][ T8053] syzkaller1: entered promiscuous mode [ 224.422879][ T8053] syzkaller1: entered allmulticast mode [ 224.657204][ T8060] kvm: pic: level sensitive irq not supported [ 224.660148][ T8060] picdev_read: 1018 callbacks suppressed [ 224.666679][ T8060] kvm: pic: non byte read [ 224.680498][ T8060] kvm: pic: level sensitive irq not supported [ 224.680590][ T8060] kvm: pic: non byte read [ 226.652426][ T8095] netlink: 'syz.4.747': attribute type 1 has an invalid length. [ 226.776975][ T8095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.878908][ T8097] bond1: (slave veth3): Enslaving as an active interface with a down link [ 226.891843][ T8102] netlink: 64 bytes leftover after parsing attributes in process `syz.3.746'. [ 226.918231][ T8099] bond1: (slave dummy0): making interface the new active one [ 226.933986][ T8099] dummy0: entered promiscuous mode [ 226.942801][ T8099] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 226.989083][ T8095] bond1 (unregistering): (slave veth3): Releasing active interface [ 227.001285][ T8095] bond1 (unregistering): (slave dummy0): Releasing active interface [ 227.015479][ T8095] bond1 (unregistering): Released all slaves [ 227.063562][ T8103] syzkaller1: entered promiscuous mode [ 227.063611][ T8103] syzkaller1: entered allmulticast mode [ 228.028327][ T8122] syzkaller1: entered promiscuous mode [ 228.028373][ T8122] syzkaller1: entered allmulticast mode [ 228.337162][ T5696] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 228.496220][ T5696] usb 4-1: Using ep0 maxpacket: 32 [ 228.505587][ T5696] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 228.519724][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.519774][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.519837][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.556269][ T5696] usb 4-1: config 0 descriptor?? [ 229.005754][ T5696] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 229.016943][ T5696] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 229.184352][ T5696] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 229.385686][ T5696] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 229.597179][ T5696] ft260 0003:0403:6030.0004: failed to retrieve status: -32, no wakeup [ 229.855157][ T8124] ft260 0003:0403:6030.0004: ft260_i2c_read: failed with -38 [ 229.878127][ T923] usb 4-1: USB disconnect, device number 13 [ 229.918568][ T8154] kvm: pic: level sensitive irq not supported [ 229.918672][ T8154] kvm: pic: non byte read [ 229.923013][ T8154] kvm: pic: level sensitive irq not supported [ 229.923179][ T8154] kvm: pic: non byte read [ 230.343163][ T8165] netlink: 'syz.0.765': attribute type 1 has an invalid length. [ 230.391035][ T8165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.445327][ T8165] bond1: (slave veth3): Enslaving as an active interface with a down link [ 230.504670][ T8165] bond1: (slave dummy0): making interface the new active one [ 230.512501][ T8165] dummy0: entered promiscuous mode [ 230.512928][ T8165] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 230.560301][ T8165] bond1 (unregistering): (slave veth3): Releasing active interface [ 230.580358][ T8165] bond1 (unregistering): (slave dummy0): Releasing active interface [ 230.592960][ T8165] bond1 (unregistering): Released all slaves [ 230.944217][ T8170] syzkaller1: entered promiscuous mode [ 230.944264][ T8170] syzkaller1: entered allmulticast mode [ 231.150458][ T8177] loop0: detected capacity change from 0 to 3904 [ 231.218023][ T8177] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 231.218572][ T8177] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 231.218607][ T8177] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 231.218673][ T8177] loop0: [ 235.001290][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 235.099247][ T8243] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 235.221003][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.797'. [ 235.278477][ T8243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.309761][ T8251] netlink: 'syz.0.807': attribute type 10 has an invalid length. [ 235.309801][ T8251] netlink: 40 bytes leftover after parsing attributes in process `syz.0.807'. [ 235.344818][ T8246] bond1: (slave veth5): Enslaving as an active interface with a down link [ 235.406383][ T8247] bond1: (slave dummy0): making interface the new active one [ 235.418532][ T8247] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 235.450986][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 235.529050][ T8251] bond1: (slave dummy0): Releasing active interface [ 236.085371][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 236.229497][ T30] audit: type=1326 audit(1788402479.657:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773499e159 code=0x7ffc0000 [ 236.255549][ T30] audit: type=1326 audit(1788402479.677:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773499e159 code=0x7ffc0000 [ 236.285820][ T30] audit: type=1326 audit(1788402479.707:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f773499e159 code=0x7ffc0000 [ 236.306768][ T30] audit: type=1326 audit(1788402479.707:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773499e159 code=0x7ffc0000 [ 236.306938][ T30] audit: type=1326 audit(1788402479.707:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773499e159 code=0x7ffc0000 [ 236.355440][ T30] audit: type=1326 audit(1788402479.777:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f773499e159 code=0x7ffc0000 [ 236.355593][ T30] audit: type=1326 audit(1788402479.777:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773499e159 code=0x7ffc0000 [ 236.355661][ T30] audit: type=1326 audit(1788402479.777:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773499e159 code=0x7ffc0000 [ 236.383995][ T30] audit: type=1326 audit(1788402479.807:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f773499e159 code=0x7ffc0000 [ 236.384046][ T30] audit: type=1326 audit(1788402479.807:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.4.808" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773499e159 code=0x7ffc0000 [ 237.206949][ T8311] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 237.338423][ T8315] loop5: detected capacity change from 0 to 7 [ 237.350400][ T8315] loop5: [ 237.350446][ T8315] loop5: partition table partially beyond EOD, truncated [ 237.559044][ T923] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 237.663521][ T8329] netlink: 'syz.0.827': attribute type 10 has an invalid length. [ 237.693487][ T8329] team0: Port device dummy0 added [ 237.715995][ T923] usb 5-1: Using ep0 maxpacket: 8 [ 237.724194][ T923] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 237.734668][ T923] usb 5-1: config 0 has no interfaces? [ 237.744108][ T923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.744154][ T923] usb 5-1: Product: syz [ 237.744189][ T923] usb 5-1: Manufacturer: syz [ 237.744224][ T923] usb 5-1: SerialNumber: syz [ 237.771773][ T923] usb 5-1: config 0 descriptor?? [ 237.989519][ T5710] usb 5-1: USB disconnect, device number 13 [ 238.126872][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 238.286749][ T25] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.40 [ 238.302547][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 238.313146][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.321993][ T25] usb 3-1: Product: syz [ 238.327065][ T25] usb 3-1: Manufacturer: syz [ 238.333212][ T25] usb 3-1: SerialNumber: syz [ 238.618190][ T25] usbhid 3-1:1.0: can't add hid device: -71 [ 238.618339][ T25] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 238.648221][ T25] usb 3-1: USB disconnect, device number 14 [ 238.800569][ T8357] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.327019][ T8370] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.896514][ T5696] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 240.056310][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 240.064772][ T5696] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.076425][ T5696] usb 4-1: config 0 has no interfaces? [ 240.094403][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.094460][ T5696] usb 4-1: Product: syz [ 240.094496][ T5696] usb 4-1: Manufacturer: syz [ 240.094518][ T5696] usb 4-1: SerialNumber: syz [ 240.127649][ T5696] usb 4-1: config 0 descriptor?? [ 240.360239][ T8383] netlink: 'syz.3.845': attribute type 28 has an invalid length. [ 240.378628][ T5682] usb 4-1: USB disconnect, device number 14 [ 240.936079][ T5682] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 241.097235][ T5682] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.118450][ T5682] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.118500][ T5682] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 241.118559][ T5682] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 241.118636][ T5682] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 241.118669][ T5682] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 241.172962][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.173013][ T5682] usb 5-1: Product: syz [ 241.173050][ T5682] usb 5-1: Manufacturer: syz [ 241.204667][ T5682] cdc_wdm 5-1:1.0: skipping garbage [ 241.212795][ T5682] cdc_wdm 5-1:1.0: skipping garbage [ 241.223504][ T5682] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 241.229734][ T5682] cdc_wdm 5-1:1.0: Unknown control protocol [ 241.305637][ T8401] binder: 8399:8401 ioctl c0306201 200000000080 returned -14 [ 241.315656][ T8401] binder: 8399:8401 ioctl c0306201 2000000003c0 returned -14 [ 241.568579][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 241.568718][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 241.568928][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 241.568951][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 241.569178][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 241.569199][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 241.569399][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 241.569420][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 241.569629][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 241.569635][ T5682] usb 5-1: USB disconnect, device number 14 [ 241.569652][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 241.569670][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 241.707474][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.857'. [ 242.224985][ T8427] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.569152][ T923] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 243.644242][ T923] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 244.736091][ T923] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 244.904473][ T923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 244.905353][ T923] usb 5-1: not running at top speed; connect to a high speed hub [ 244.905406][ T923] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 244.908776][ T923] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.908817][ T923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.919603][ T923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.919637][ T923] usb 5-1: Product: syz [ 244.919669][ T923] usb 5-1: Manufacturer: syz [ 244.919690][ T923] usb 5-1: SerialNumber: syz [ 245.356466][ T8500] netlink: 'syz.4.883': attribute type 8 has an invalid length. [ 245.546903][ T923] usb 5-1: 3:0: failed to get current value for ch 1 (-71) [ 245.564049][ T923] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 245.564105][ T923] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 245.564127][ T923] usb 5-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 245.579637][ T923] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 245.815033][ T923] usb 5-1: USB disconnect, device number 15 [ 246.366013][ T8519] syzkaller0: entered promiscuous mode [ 246.366054][ T8519] syzkaller0: entered allmulticast mode [ 246.505758][ T8521] tipc: Started in network mode [ 246.511370][ T8521] tipc: Node identity e2ee9eedb61d, cluster identity 4711 [ 246.519052][ T8521] tipc: Enabled bearer , priority 0 [ 246.528617][ T8521] syzkaller0: mtu less than device minimum [ 247.637180][ T5696] tipc: Node number set to 1425252077 [ 247.766458][ T8545] kvm: pic: non byte read [ 247.766913][ T8545] kvm: pic: non byte read [ 247.768919][ T8545] kvm: pic: non byte read [ 247.773345][ T8545] kvm: pic: non byte read [ 247.773771][ T8545] kvm: pic: non byte read [ 247.774189][ T8545] kvm: pic: non byte read [ 247.791373][ T8545] kvm: pic: non byte read [ 247.791838][ T8545] kvm: pic: non byte read [ 247.795766][ T8545] kvm: pic: non byte read [ 247.808519][ T8545] kvm: pic: non byte read [ 248.315988][ T5710] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 248.392340][ T8563] input: syz1 as /devices/virtual/input/input12 [ 248.467721][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 248.474532][ T5710] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 248.485328][ T5710] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 248.485382][ T5710] usb 5-1: config 0 has no interface number 0 [ 248.485484][ T5710] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.485573][ T5710] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 248.485669][ T5710] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 248.485771][ T5710] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 248.493652][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.563829][ T5710] usb 5-1: config 0 descriptor?? [ 248.611160][ T5710] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 248.923447][ T1070] usb 5-1: USB disconnect, device number 16 [ 248.955771][ T1070] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 249.777819][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 249.779251][ T30] audit: type=1326 audit(1788402493.197:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.4.915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f773499e159 code=0x0 [ 251.886512][ T1070] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 252.047016][ T1070] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 252.059099][ T1070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.059150][ T1070] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.059207][ T1070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.098861][ T1070] usb 5-1: config 0 descriptor?? [ 252.529003][ T1070] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 252.538535][ T1070] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 252.538599][ T1070] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 252.538632][ T1070] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 252.538664][ T1070] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 252.538695][ T1070] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 252.538726][ T1070] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 252.616252][ T1070] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 253.938524][ T1070] pyra 0003:1E7D:2CF6.0006: couldn't init struct pyra_device [ 253.938599][ T1070] pyra 0003:1E7D:2CF6.0006: couldn't install mouse [ 253.992066][ T1070] pyra 0003:1E7D:2CF6.0006: probe with driver pyra failed with error -71 [ 254.005607][ T1070] usb 5-1: USB disconnect, device number 17 [ 255.407551][ T8674] syzkaller0: left promiscuous mode [ 255.407592][ T8674] syzkaller0: left allmulticast mode [ 255.823090][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.829671][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.840737][ T8685] use of bytesused == 0 is deprecated and will be removed in the future, [ 255.860354][ T8685] use the actual size instead. [ 256.347764][ T8697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.955'. [ 256.434268][ T8697] ip6gre1: entered promiscuous mode [ 256.434359][ T8697] ip6gre1: entered allmulticast mode [ 256.498200][ T8697] netlink: 'syz.0.955': attribute type 6 has an invalid length. [ 256.498256][ T8697] netlink: 72 bytes leftover after parsing attributes in process `syz.0.955'. [ 257.264229][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.266321][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.456767][ T5689] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 257.516670][ T8715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.563256][ T8715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.606753][ T5689] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.619559][ T5689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.619637][ T5689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 257.619684][ T5689] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 257.619728][ T5689] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.675373][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.675420][ T5689] usb 4-1: Product: syz [ 257.675454][ T5689] usb 4-1: Manufacturer: syz [ 257.675474][ T5689] usb 4-1: SerialNumber: syz [ 257.711964][ T8724] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 258.096171][ T1177] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.096239][ T1177] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.096332][ T1177] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.096373][ T1177] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.568135][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 258.726087][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 258.732135][ T9] usb 5-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 258.744018][ T5682] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 258.744495][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.744537][ T9] usb 5-1: config 0 has no interfaces? [ 258.772485][ T9] usb 5-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 258.781111][ T9] usb 5-1: Product: syz [ 258.781152][ T9] usb 5-1: Manufacturer: syz [ 258.803166][ T9] usb 5-1: config 0 descriptor?? [ 258.917905][ T5682] usb 2-1: Using ep0 maxpacket: 32 [ 258.923918][ T5682] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 258.934641][ T5682] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.934674][ T5682] usb 2-1: config 0 has no interfaces? [ 258.954380][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.954427][ T5682] usb 2-1: Product: syz [ 258.954496][ T5682] usb 2-1: Manufacturer: syz [ 258.954518][ T5682] usb 2-1: SerialNumber: syz [ 258.982146][ T5682] usb 2-1: config 0 descriptor?? [ 259.062032][ T5710] usb 5-1: USB disconnect, device number 18 [ 259.138227][ T923] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 259.181214][ T5689] cdc_ncm 4-1:1.0: bind() failure [ 259.195174][ T5689] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 259.202327][ T5689] cdc_ncm 4-1:1.1: bind() failure [ 259.297980][ T923] usb 1-1: Using ep0 maxpacket: 32 [ 259.304091][ T923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 259.304170][ T923] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 259.309469][ T923] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 259.309559][ T923] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 259.309623][ T923] usb 1-1: config 14 has no interface number 0 [ 259.309673][ T923] usb 1-1: config 14 has no interface number 1 [ 259.309852][ T923] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 259.309937][ T923] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 259.310024][ T923] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 259.310100][ T923] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 259.310180][ T923] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 259.310253][ T923] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.310326][ T923] usb 1-1: config 14 interface 57 has no altsetting 0 [ 259.310378][ T923] usb 1-1: config 14 interface 228 has no altsetting 0 [ 259.315052][ T923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.315079][ T923] usb 1-1: Product: syz [ 259.315095][ T923] usb 1-1: Manufacturer: syz [ 259.315110][ T923] usb 1-1: SerialNumber: syz [ 259.558640][ T5710] usb 4-1: USB disconnect, device number 15 [ 259.724195][ T5682] logitech-hidpp-device 0003:046D:C082.0007: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 259.774788][ T923] legousbtower 1-1:14.57: interrupt endpoints not found [ 259.812367][ T8760] fido_id[8760]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.870622][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 260.025995][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 260.033698][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 260.044655][ T9] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 260.056413][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.065258][ T9] usb 3-1: Product: syz [ 260.065311][ T9] usb 3-1: Manufacturer: syz [ 260.065335][ T9] usb 3-1: SerialNumber: syz [ 260.088305][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 260.094696][ T9] r8152-cfgselector 3-1: config 0 descriptor?? [ 260.180737][ T923] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 260.196406][ T923] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 260.333121][ T9] r8152-cfgselector 3-1: Needed 1 retries to read version [ 260.541206][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.975'. [ 260.550483][ T8757] hsr_slave_0: left promiscuous mode [ 260.557961][ T8757] hsr_slave_1: left promiscuous mode [ 260.656005][ T5689] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 260.810698][ T5689] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 260.833561][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.833609][ T5689] usb 5-1: Product: syz [ 260.833643][ T5689] usb 5-1: Manufacturer: syz [ 260.833744][ T5689] usb 5-1: SerialNumber: syz [ 260.863535][ T5689] usb 5-1: config 0 descriptor?? [ 260.951464][ T9] usb 1-1: USB disconnect, device number 13 [ 260.980518][ T9] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 261.085436][ T5689] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 261.460610][ T8786] ip_tables: iptables: counters copy to user failed while replacing table [ 261.628635][ T923] usb 2-1: USB disconnect, device number 9 [ 261.674273][ T8788] tipc: Enabled bearer , priority 10 [ 261.691262][ T8787] tipc: Resetting bearer [ 261.751585][ T8787] tipc: Disabling bearer [ 262.127419][ T5682] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 262.286083][ T5682] usb 1-1: Using ep0 maxpacket: 16 [ 262.296467][ T5682] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 262.312289][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.320843][ T5682] usb 1-1: Product: syz [ 262.320931][ T5682] usb 1-1: Manufacturer: syz [ 262.320954][ T5682] usb 1-1: SerialNumber: syz [ 262.339262][ T5682] usb 1-1: config 0 descriptor?? [ 262.652258][ T923] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 262.757959][ T5682] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 262.773927][ T5682] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 262.784519][ T5682] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 262.784661][ T5682] usb 1-1: media controller created [ 262.826506][ T5682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.903011][ T5689] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 262.918384][ T5689] usb 5-1: USB disconnect, device number 19 [ 262.963023][ T8795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.965683][ T5682] zl10353_read_register: readreg error (reg=127, ret==0) [ 262.965774][ T5682] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 262.965803][ T5682] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 263.009797][ T5682] usb 1-1: USB disconnect, device number 14 [ 263.052720][ T5682] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 263.675840][ T8815] netlink: 'syz.1.1000': attribute type 1 has an invalid length. [ 263.787310][ T5689] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 263.886217][ T5682] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 263.937025][ T5689] usb 4-1: Using ep0 maxpacket: 16 [ 263.939573][ T5689] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 263.944108][ T5689] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.944216][ T5689] usb 4-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 263.944290][ T5689] usb 4-1: config 0 interface 0 has no altsetting 0 [ 263.944383][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.955720][ T5689] usb 4-1: config 0 descriptor?? [ 264.048413][ T5682] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 264.052097][ T5682] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 264.052248][ T5682] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 264.052420][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.110982][ T5682] usb 1-1: probing VID:PID(0424:012C) [ 264.131155][ T5682] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 264.131212][ T5682] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 264.131234][ T5682] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 264.131371][ T5682] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 264.131444][ T5682] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 264.522577][ T5689] logitech-djreceiver 0003:046D:C53A.0008: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 264.539285][ T5682] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 264.718335][ T5689] usb 4-1: USB disconnect, device number 16 [ 264.743777][ T5682] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 264.879862][ T8824] fido_id[8824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 265.243200][ T8836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.322106][ T8839] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 265.347299][ T8836] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 265.666531][ T5696] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 265.784317][ T44] usb 1-1: USB disconnect, device number 15 [ 265.811247][ T5689] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 265.827531][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 265.835272][ T5696] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.853376][ T5696] usb 4-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 265.853425][ T5696] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.879072][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.879128][ T5696] usb 4-1: Product: syz [ 265.879161][ T5696] usb 4-1: Manufacturer: syz [ 265.879179][ T5696] usb 4-1: SerialNumber: syz [ 265.925784][ T44] USB vub300 remote SDIO host controller[0] now disconnected [ 265.955777][ T5696] usb 4-1: 0:2 : does not exist [ 265.987552][ T30] audit: type=1326 audit(1788402509.417:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.2.1007" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2693f9e159 code=0x0 [ 266.122337][ T5696] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 266.221667][ T5696] usb 4-1: USB disconnect, device number 17 [ 266.301810][ T5718] udevd[5718]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.351067][ T8856] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 266.616608][ C0] [ 266.620349][ C0] ============================= [ 266.625264][ C0] WARNING: suspicious RCU usage [ 266.630208][ C0] syzkaller #0 Tainted: G L [ 266.636251][ C0] ----------------------------- [ 266.641127][ C0] kernel/sched/core.c:9196 Illegal context switch in RCU-sched read-side critical section! [ 266.651167][ C0] [ 266.651167][ C0] other info that might help us debug this: [ 266.651167][ C0] [ 266.661471][ C0] [ 266.661471][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 266.669731][ C0] locks held by syz.0.1009/8860: 5, last CPU#0: [ 266.676488][ C0] #0: ffff88802fe6dcf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 266.685642][ C0] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 266.695246][ C0] #2: ffff8880670aa978 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 266.705823][ C0] #3: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 266.715350][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 266.725905][ C0] [ 266.725905][ C0] stack backtrace: [ 266.731867][ C0] CPU: 0 UID: 0 PID: 8860 Comm: syz.0.1009 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.742774][ C0] Tainted: [L]=SOFTLOCKUP [ 266.747134][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.757243][ C0] Call Trace: [ 266.760596][ C0] [ 266.763612][ C0] dump_stack_lvl+0xe8/0x150 [ 266.768259][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 266.773691][ C0] __might_resched+0xbb/0x4c0 [ 266.778439][ C0] ? __cancel_work_sync+0x5c/0x110 [ 266.783612][ C0] __cancel_work_sync+0x6d/0x110 [ 266.788627][ C0] mmc_free_host+0x19/0x30 [ 266.793099][ C0] call_timer_fn+0x18d/0x5f0 [ 266.797742][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 266.804471][ C0] ? call_timer_fn+0xd5/0x5f0 [ 266.809201][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 266.814380][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 266.819638][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 266.826368][ C0] __run_timer_base+0x652/0x8b0 [ 266.831288][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 266.836717][ C0] ? ktime_get+0x1f5/0x220 [ 266.841179][ C0] ? lapic_next_event+0x11/0x20 [ 266.846082][ C0] run_timer_softirq+0xb7/0x170 [ 266.850976][ C0] handle_softirqs+0x226/0x860 [ 266.855828][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 266.860646][ C0] __irq_exit_rcu+0xcb/0x220 [ 266.865288][ C0] irq_exit_rcu+0x9/0x30 [ 266.869579][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 266.875266][ C0] [ 266.878250][ C0] [ 266.881222][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.887246][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 266.892580][ C0] Code: ff ff ff e8 20 c9 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 44 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf cc 43 0a cc 48 8d 3d f7 30 da [ 266.912233][ C0] RSP: 0000:ffffc900044772d8 EFLAGS: 00000286 [ 266.918354][ C0] RAX: dc32e53c4ff6b800 RBX: 0000000000000000 RCX: 8000000000000002 [ 266.926372][ C0] RDX: 0000000047b0c1d1 RSI: ffffffff8e6fc468 RDI: ffffffff8c6d9480 [ 266.934398][ C0] RBP: ffff888027721f40 R08: c300000000000000 R09: 0000000000000000 [ 266.942423][ C0] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 266.950470][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 266.958496][ C0] ? pfn_valid+0xba/0x490 [ 266.962867][ C0] pfn_valid+0xd6/0x490 [ 266.967065][ C0] ? pfn_valid+0xba/0x490 [ 266.971440][ C0] page_table_check_clear+0x21/0x500 [ 266.976763][ C0] ? vm_normal_page+0x13c/0x2b0 [ 266.981689][ C0] __zap_vma_range+0x3a12/0x4f80 [ 266.986814][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 266.992172][ C0] ? mas_find+0x6d6/0xcb0 [ 266.996565][ C0] unmap_vmas+0x390/0x550 [ 267.000942][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 267.005872][ C0] ? mas_next_slot+0xc91/0xd70 [ 267.010719][ C0] exit_mmap+0x293/0x9f0 [ 267.015032][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 267.019879][ C0] ? __pfx_exit_aio+0x10/0x10 [ 267.024622][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 267.029872][ C0] __mmput+0x118/0x420 [ 267.033994][ C0] exit_mm+0x221/0x2d0 [ 267.038112][ C0] do_exit+0x6cd/0x2360 [ 267.042327][ C0] ? __pfx_do_exit+0x10/0x10 [ 267.046970][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 267.052064][ C0] do_group_exit+0x22d/0x2f0 [ 267.056738][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.062022][ C0] get_signal+0x121b/0x12c0 [ 267.066616][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 267.072211][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 267.078467][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 267.083891][ C0] ? rcu_is_watching+0x16/0xb0 [ 267.088709][ C0] do_syscall_64+0x328/0x520 [ 267.093350][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.099555][ C0] ? clear_bhb_loop+0x70/0xc0 [ 267.104276][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.110219][ C0] RIP: 0033:0x7fe34cf9e159 [ 267.114691][ C0] Code: Unable to access opcode bytes at 0x7fe34cf9e12f. [ 267.121738][ C0] RSP: 002b:00007fe34de210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 267.130198][ C0] RAX: fffffffffffffe00 RBX: 00007fe34d225fa8 RCX: 00007fe34cf9e159 [ 267.138205][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe34d225fa8 [ 267.146217][ C0] RBP: 00007fe34d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 267.154230][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.162240][ C0] R13: 00007fe34d226038 R14: 00007fe34d34f960 R15: 00007fe34d34fa48 [ 267.170274][ C0] [ 267.174927][ C0] BUG: sleeping function called from invalid context at ker ** replaying previous printk message ** [ 267.174927][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 267.174953][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8860, name: syz.0.1009 [ 267.174973][ C0] preempt_count: 102, expected: 0 [ 267.174988][ C0] RCU nest depth: 1, expected: 0 [ 267.175003][ C0] locks held by syz.0.1009/8860: 5, last CPU#0: [ 267.175025][ C0] #0: ffff88802fe6dcf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 267.175124][ C0] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 267.175212][ C0] #2: ffff8880670aa978 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 267.175312][ C0] #3: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 267.175404][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 267.175492][ C0] Preemption disabled at: [ 267.175502][ C0] [<0000000000000000>] 0x0 [ 267.175537][ C0] CPU: 0 UID: 0 PID: 8860 Comm: syz.0.1009 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.175570][ C0] Tainted: [L]=SOFTLOCKUP [ 267.175579][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.175594][ C0] Call Trace: [ 267.175604][ C0] [ 267.175613][ C0] dump_stack_lvl+0xe8/0x150 [ 267.175651][ C0] __might_resched+0x36a/0x4c0 [ 267.175694][ C0] __cancel_work_sync+0x6d/0x110 [ 267.175734][ C0] mmc_free_host+0x19/0x30 [ 267.175770][ C0] call_timer_fn+0x18d/0x5f0 [ 267.175799][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 267.175832][ C0] ? call_timer_fn+0xd5/0x5f0 [ 267.175861][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 267.175903][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.175933][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 267.175967][ C0] __run_timer_base+0x652/0x8b0 [ 267.176008][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 267.176039][ C0] ? ktime_get+0x1f5/0x220 [ 267.176063][ C0] ? lapic_next_event+0x11/0x20 [ 267.176095][ C0] run_timer_softirq+0xb7/0x170 [ 267.176122][ C0] handle_softirqs+0x226/0x860 [ 267.176223][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 267.176344][ C0] __irq_exit_rcu+0xcb/0x220 [ 267.176437][ C0] irq_exit_rcu+0x9/0x30 [ 267.176510][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 267.176593][ C0] [ 267.176613][ C0] [ 267.176636][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.176699][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 267.176778][ C0] Code: ff ff ff e8 20 c9 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 44 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf cc 43 0a cc 48 8d 3d f7 30 da [ 267.176830][ C0] RSP: 0000:ffffc900044772d8 EFLAGS: 00000286 [ 267.176910][ C0] RAX: dc32e53c4ff6b800 RBX: 0000000000000000 RCX: 8000000000000002 [ 267.176960][ C0] RDX: 0000000047b0c1d1 RSI: ffffffff8e6fc468 RDI: ffffffff8c6d9480 [ 267.177002][ C0] RBP: ffff888027721f40 R08: c300000000000000 R09: 0000000000000000 [ 267.177044][ C0] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 267.177087][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 267.177168][ C0] ? pfn_valid+0xba/0x490 [ 267.177232][ C0] pfn_valid+0xd6/0x490 [ 267.177292][ C0] ? pfn_valid+0xba/0x490 [ 267.177362][ C0] page_table_check_clear+0x21/0x500 [ 267.177433][ C0] ? vm_normal_page+0x13c/0x2b0 [ 267.177497][ C0] __zap_vma_range+0x3a12/0x4f80 [ 267.177711][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 267.177819][ C0] ? mas_find+0x6d6/0xcb0 [ 267.177909][ C0] unmap_vmas+0x390/0x550 [ 267.177991][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 267.178044][ C0] ? mas_next_slot+0xc91/0xd70 [ 267.178191][ C0] exit_mmap+0x293/0x9f0 [ 267.178282][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 267.178448][ C0] ? __pfx_exit_aio+0x10/0x10 [ 267.178574][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 267.178681][ C0] __mmput+0x118/0x420 [ 267.178758][ C0] exit_mm+0x221/0x2d0 [ 267.178829][ C0] do_exit+0x6cd/0x2360 [ 267.178919][ C0] ? __pfx_do_exit+0x10/0x10 [ 267.178982][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 267.179107][ C0] do_group_exit+0x22d/0x2f0 [ 267.179162][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.179246][ C0] get_signal+0x121b/0x12c0 [ 267.179390][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 267.179502][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 267.179637][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 267.179699][ C0] ? rcu_is_watching+0x16/0xb0 [ 267.179780][ C0] do_syscall_64+0x328/0x520 [ 267.179870][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.179940][ C0] ? clear_bhb_loop+0x70/0xc0 [ 267.180016][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.180072][ C0] RIP: 0033:0x7fe34cf9e159 [ 267.180124][ C0] Code: Unable to access opcode bytes at 0x7fe34cf9e12f. [ 267.180161][ C0] RSP: 002b:00007fe34de210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 267.180216][ C0] RAX: fffffffffffffe00 RBX: 00007fe34d225fa8 RCX: 00007fe34cf9e159 [ 267.180257][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe34d225fa8 [ 267.180297][ C0] RBP: 00007fe34d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 267.180330][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.180369][ C0] R13: 00007fe34d226038 R14: 00007fe34d34f960 R15: 00007fe34d34fa48 [ 267.180487][ C0] [ 267.182177][ C0] [ 267.708867][ C0] ================================ [ 267.714022][ C0] WARNING: inconsistent lock state [ 267.719142][ C0] syzkaller #0 Tainted: G W L [ 267.725215][ C0] -------------------------------- [ 267.730339][ C0] inconsistent {SOFTIRQ-ON-R} -> {IN-SOFTIRQ-W} usage. [ 267.737195][ C0] syz.0.1009/8860 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 267.743621][ C0] ffffffff8f814758 (wakeup_srcu){.+-+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 267.752692][ C0] {SOFTIRQ-ON-R} state was registered at: [ 267.758417][ C0] lock_acquire+0x115/0x350 [ 267.763029][ C0] pm_print_active_wakeup_sources+0x60/0x370 [ 267.769128][ C0] wakeup_count_store+0xcc/0x120 [ 267.774187][ C0] kernfs_fop_write_iter+0x3a4/0x540 [ 267.779575][ C0] aio_write+0x5d0/0x870 [ 267.783928][ C0] io_submit_one+0x798/0x13d0 [ 267.788703][ C0] __se_sys_io_submit+0x195/0x340 [ 267.793834][ C0] do_syscall_64+0x166/0x520 [ 267.798636][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.804631][ C0] irq event stamp: 4336 [ 267.808934][ C0] hardirqs last enabled at (4336): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 267.819326][ C0] hardirqs last disabled at (4335): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 267.829245][ C0] softirqs last enabled at (3742): [] fpu_swap_kvm_fpstate+0xcb/0x510 [ 267.839082][ C0] softirqs last disabled at (3883): [] __irq_exit_rcu+0xcb/0x220 [ 267.848390][ C0] [ 267.848390][ C0] other info that might help us debug this: [ 267.856472][ C0] Possible unsafe locking scenario: [ 267.856472][ C0] [ 267.863932][ C0] CPU0 [ 267.867228][ C0] ---- [ 267.870520][ C0] lock(wakeup_srcu); [ 267.874603][ C0] [ 267.878065][ C0] lock(wakeup_srcu); [ 267.882324][ C0] [ 267.882324][ C0] *** DEADLOCK *** [ 267.882324][ C0] [ 267.890570][ C0] locks held by syz.0.1009/8860: 5, last CPU#0: [ 267.896835][ C0] #0: ffff88802fe6dcf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 267.905925][ C0] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 267.915445][ C0] #2: ffff8880670aa978 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 267.925924][ C0] #3: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 267.935388][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 267.945852][ C0] [ 267.945852][ C0] stack backtrace: [ 267.951759][ C0] CPU: 0 UID: 0 PID: 8860 Comm: syz.0.1009 Tainted: G W L syzkaller #0 PREEMPT(full) [ 267.962649][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 267.967943][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.978025][ C0] Call Trace: [ 267.981318][ C0] [ 267.984197][ C0] dump_stack_lvl+0xe8/0x150 [ 267.988817][ C0] print_usage_bug+0x28c/0x2e0 [ 267.993603][ C0] valid_state+0xbe/0xf0 [ 267.997874][ C0] mark_lock_irq+0x58/0x380 [ 268.002392][ C0] ? arch_stack_walk+0xfb/0x150 [ 268.007270][ C0] mark_lock+0x117/0x190 [ 268.011528][ C0] __lock_acquire+0x6b7/0x2e50 [ 268.016310][ C0] ? check_path+0x21/0x40 [ 268.020658][ C0] ? check_noncircular+0xdb/0x150 [ 268.025720][ C0] ? add_lock_to_list+0xc7/0x100 [ 268.030682][ C0] ? lockdep_unlock+0x5c/0xd0 [ 268.035406][ C0] ? __lock_acquire+0x14b9/0x2e50 [ 268.040453][ C0] lock_sync+0xb3/0x130 [ 268.044628][ C0] ? __synchronize_srcu+0xb5/0x2f0 [ 268.049754][ C0] ? __synchronize_srcu+0xb5/0x2f0 [ 268.054899][ C0] __synchronize_srcu+0xc9/0x2f0 [ 268.059852][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 268.065503][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.070554][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 268.076389][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 268.081970][ C0] ? synchronize_srcu+0x20a/0x260 [ 268.087022][ C0] wakeup_source_unregister+0x129/0x3f0 [ 268.092594][ C0] mmc_host_classdev_release+0x47/0x100 [ 268.098171][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 268.104346][ C0] device_release+0xc4/0x1f0 [ 268.108965][ C0] kobject_put+0x222/0x550 [ 268.113403][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 268.118204][ C0] call_timer_fn+0x18d/0x5f0 [ 268.122822][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 268.129519][ C0] ? call_timer_fn+0xd5/0x5f0 [ 268.134233][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 268.139375][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.144611][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 268.151407][ C0] __run_timer_base+0x652/0x8b0 [ 268.156313][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 268.161713][ C0] ? ktime_get+0x1f5/0x220 [ 268.166148][ C0] ? lapic_next_event+0x11/0x20 [ 268.171023][ C0] run_timer_softirq+0xb7/0x170 [ 268.175898][ C0] handle_softirqs+0x226/0x860 [ 268.180693][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 268.185483][ C0] __irq_exit_rcu+0xcb/0x220 [ 268.190099][ C0] irq_exit_rcu+0x9/0x30 [ 268.194365][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 268.200193][ C0] [ 268.203141][ C0] [ 268.206087][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.212092][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 268.217397][ C0] Code: ff ff ff e8 20 c9 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 44 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf cc 43 0a cc 48 8d 3d f7 30 da [ 268.237114][ C0] RSP: 0000:ffffc900044772d8 EFLAGS: 00000286 [ 268.243206][ C0] RAX: dc32e53c4ff6b800 RBX: 0000000000000000 RCX: 8000000000000002 [ 268.251196][ C0] RDX: 0000000047b0c1d1 RSI: ffffffff8e6fc468 RDI: ffffffff8c6d9480 [ 268.259185][ C0] RBP: ffff888027721f40 R08: c300000000000000 R09: 0000000000000000 [ 268.267171][ C0] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 268.275188][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 268.283182][ C0] ? pfn_valid+0xba/0x490 [ 268.287536][ C0] pfn_valid+0xd6/0x490 [ 268.291709][ C0] ? pfn_valid+0xba/0x490 [ 268.296055][ C0] page_table_check_clear+0x21/0x500 [ 268.301361][ C0] ? vm_normal_page+0x13c/0x2b0 [ 268.306227][ C0] __zap_vma_range+0x3a12/0x4f80 [ 268.311202][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 268.316506][ C0] ? mas_find+0x6d6/0xcb0 [ 268.320889][ C0] unmap_vmas+0x390/0x550 [ 268.325240][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 268.330103][ C0] ? mas_next_slot+0xc91/0xd70 [ 268.334904][ C0] exit_mmap+0x293/0x9f0 [ 268.339184][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 268.343982][ C0] ? __pfx_exit_aio+0x10/0x10 [ 268.348689][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 268.353915][ C0] __mmput+0x118/0x420 [ 268.358003][ C0] exit_mm+0x221/0x2d0 [ 268.362120][ C0] do_exit+0x6cd/0x2360 [ 268.366295][ C0] ? __pfx_do_exit+0x10/0x10 [ 268.370903][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.375958][ C0] do_group_exit+0x22d/0x2f0 [ 268.380657][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.385880][ C0] get_signal+0x121b/0x12c0 [ 268.390426][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 268.396002][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 268.402199][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 268.407591][ C0] ? rcu_is_watching+0x16/0xb0 [ 268.412375][ C0] do_syscall_64+0x328/0x520 [ 268.416991][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.423089][ C0] ? clear_bhb_loop+0x70/0xc0 [ 268.427792][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.433702][ C0] RIP: 0033:0x7fe34cf9e159 [ 268.438137][ C0] Code: Unable to access opcode bytes at 0x7fe34cf9e12f. [ 268.445168][ C0] RSP: 002b:00007fe34de210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 268.453773][ C0] RAX: fffffffffffffe00 RBX: 00007fe34d225fa8 RCX: 00007fe34cf9e159 [ 268.461798][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe34d225fa8 [ 268.469801][ C0] RBP: 00007fe34d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 268.477800][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.485788][ C0] R13: 00007fe34d226038 R14: 00007fe34d34f960 R15: 00007fe34d34fa48 [ 268.493799][ C0] [ 268.496935][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 268.496956][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8860, name: syz.0.1009 [ 268.496979][ C0] preempt_count: 102, expected: 0 [ 268.496993][ C0] RCU nest depth: 1, expected: 0 [ 268.497007][ C0] INFO: lockdep is turned off. [ 268.497016][ C0] Preemption disabled at: [ 268.497025][ C0] [<0000000000000000>] 0x0 [ 268.497057][ C0] CPU: 0 UID: 0 PID: 8860 Comm: syz.0.1009 Tainted: G W L syzkaller #0 PREEMPT(full) [ 268.497090][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 268.497099][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.497113][ C0] Call Trace: [ 268.497122][ C0] [ 268.497131][ C0] dump_stack_lvl+0xe8/0x150 [ 268.497167][ C0] __might_resched+0x36a/0x4c0 [ 268.497207][ C0] __synchronize_srcu+0x1a1/0x2f0 [ 268.497232][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 268.497255][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.497291][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 268.497323][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 268.497362][ C0] ? synchronize_srcu+0x20a/0x260 [ 268.497386][ C0] wakeup_source_unregister+0x129/0x3f0 [ 268.497423][ C0] mmc_host_classdev_release+0x47/0x100 [ 268.497461][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 268.497497][ C0] device_release+0xc4/0x1f0 [ 268.497524][ C0] kobject_put+0x222/0x550 [ 268.497548][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 268.497574][ C0] call_timer_fn+0x18d/0x5f0 [ 268.497601][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 268.497627][ C0] ? call_timer_fn+0xd5/0x5f0 [ 268.497652][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 268.497684][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.497712][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 268.497744][ C0] __run_timer_base+0x652/0x8b0 [ 268.497775][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 268.497811][ C0] ? ktime_get+0x1f5/0x220 [ 268.497832][ C0] ? lapic_next_event+0x11/0x20 [ 268.497859][ C0] run_timer_softirq+0xb7/0x170 [ 268.497885][ C0] handle_softirqs+0x226/0x860 [ 268.497916][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 268.497949][ C0] __irq_exit_rcu+0xcb/0x220 [ 268.497980][ C0] irq_exit_rcu+0x9/0x30 [ 268.498008][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 268.498040][ C0] [ 268.498049][ C0] [ 268.498058][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 268.498084][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 268.498109][ C0] Code: ff ff ff e8 20 c9 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 44 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf cc 43 0a cc 48 8d 3d f7 30 da [ 268.498129][ C0] RSP: 0000:ffffc900044772d8 EFLAGS: 00000286 [ 268.498152][ C0] RAX: dc32e53c4ff6b800 RBX: 0000000000000000 RCX: 8000000000000002 [ 268.498169][ C0] RDX: 0000000047b0c1d1 RSI: ffffffff8e6fc468 RDI: ffffffff8c6d9480 [ 268.498187][ C0] RBP: ffff888027721f40 R08: c300000000000000 R09: 0000000000000000 [ 268.498203][ C0] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 268.498220][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 268.498243][ C0] ? pfn_valid+0xba/0x490 [ 268.498269][ C0] pfn_valid+0xd6/0x490 [ 268.498291][ C0] ? pfn_valid+0xba/0x490 [ 268.498315][ C0] page_table_check_clear+0x21/0x500 [ 268.498339][ C0] ? vm_normal_page+0x13c/0x2b0 [ 268.498362][ C0] __zap_vma_range+0x3a12/0x4f80 [ 268.498407][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 268.498436][ C0] ? mas_find+0x6d6/0xcb0 [ 268.498470][ C0] unmap_vmas+0x390/0x550 [ 268.498494][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 268.498513][ C0] ? mas_next_slot+0xc91/0xd70 [ 268.498556][ C0] exit_mmap+0x293/0x9f0 [ 268.498588][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 268.498631][ C0] ? __pfx_exit_aio+0x10/0x10 [ 268.498669][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 268.498701][ C0] __mmput+0x118/0x420 [ 268.498729][ C0] exit_mm+0x221/0x2d0 [ 268.498751][ C0] do_exit+0x6cd/0x2360 [ 268.498777][ C0] ? __pfx_do_exit+0x10/0x10 [ 268.498808][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.498844][ C0] do_group_exit+0x22d/0x2f0 [ 268.498865][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.498897][ C0] get_signal+0x121b/0x12c0 [ 268.498936][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 268.498972][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 268.499015][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 268.499038][ C0] ? rcu_is_watching+0x16/0xb0 [ 268.499066][ C0] do_syscall_64+0x328/0x520 [ 268.499100][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.499124][ C0] ? clear_bhb_loop+0x70/0xc0 [ 268.499150][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.499173][ C0] RIP: 0033:0x7fe34cf9e159 [ 268.499191][ C0] Code: Unable to access opcode bytes at 0x7fe34cf9e12f. [ 268.499203][ C0] RSP: 002b:00007fe34de210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 268.499227][ C0] RAX: fffffffffffffe00 RBX: 00007fe34d225fa8 RCX: 00007fe34cf9e159 [ 268.499251][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe34d225fa8 [ 268.499267][ C0] RBP: 00007fe34d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 268.499281][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.499296][ C0] R13: 00007fe34d226038 R14: 00007fe34d34f960 R15: 00007fe34d34fa48 [ 268.499322][ C0] [ 268.499337][ C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffc90004470000, but annotated. [ 268.500203][ C0] ------------[ cut here ]------------ [ 268.500214][ C0] 1 [ 268.500226][ C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: syz.0.1009/8860 [ 269.051829][ C0] Modules linked in: [ 269.055774][ C0] CPU: 0 UID: 0 PID: 8860 Comm: syz.0.1009 Tainted: G W L syzkaller #0 PREEMPT(full) [ 269.066651][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 269.071861][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.082021][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 269.088041][ C0] Code: cc cc cc 41 ff c7 44 89 3d c9 65 e8 15 48 c7 c1 80 9d 6d 8c 48 c7 c7 e0 9d 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 4d fa 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 cd 6e 0a 3b 05 9f [ 269.107704][ C0] RSP: 0000:ffffc900000079b8 EFLAGS: 00010046 [ 269.113800][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: dc32e53c4ff6b800 [ 269.121795][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 269.129819][ C0] RBP: ffff888027721f60 R08: 0000000000000100 R09: 1ffff92000000ee4 [ 269.137808][ C0] R10: dffffc0000000000 R11: fffff52000000ee5 R12: ffff888021797328 [ 269.145800][ C0] R13: ffff888054c3b770 R14: dffffc0000000000 R15: 0000000000000001 [ 269.153787][ C0] FS: 0000000000000000(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 269.162761][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.169369][ C0] CR2: 00007fd182bd0980 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 269.177465][ C0] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000000 [ 269.185474][ C0] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 269.193566][ C0] Call Trace: [ 269.196871][ C0] [ 269.199737][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 269.205313][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 269.210482][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 269.216044][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 269.221099][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 269.226972][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 269.232550][ C0] ? synchronize_srcu+0x20a/0x260 [ 269.237593][ C0] wakeup_source_unregister+0x129/0x3f0 [ 269.243179][ C0] mmc_host_classdev_release+0x47/0x100 [ 269.248750][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 269.254928][ C0] device_release+0xc4/0x1f0 [ 269.259551][ C0] kobject_put+0x222/0x550 [ 269.263984][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 269.268799][ C0] call_timer_fn+0x18d/0x5f0 [ 269.273501][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 269.280228][ C0] ? call_timer_fn+0xd5/0x5f0 [ 269.284970][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 269.290108][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.295334][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 269.302033][ C0] __run_timer_base+0x652/0x8b0 [ 269.306913][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 269.312340][ C0] ? ktime_get+0x1f5/0x220 [ 269.316773][ C0] ? lapic_next_event+0x11/0x20 [ 269.321646][ C0] run_timer_softirq+0xb7/0x170 [ 269.326519][ C0] handle_softirqs+0x226/0x860 [ 269.331307][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 269.336096][ C0] __irq_exit_rcu+0xcb/0x220 [ 269.340805][ C0] irq_exit_rcu+0x9/0x30 [ 269.345072][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 269.350738][ C0] [ 269.353695][ C0] [ 269.356640][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 269.362655][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 269.367973][ C0] Code: ff ff ff e8 20 c9 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 44 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf cc 43 0a cc 48 8d 3d f7 30 da [ 269.387602][ C0] RSP: 0000:ffffc900044772d8 EFLAGS: 00000286 [ 269.393695][ C0] RAX: dc32e53c4ff6b800 RBX: 0000000000000000 RCX: 8000000000000002 [ 269.401707][ C0] RDX: 0000000047b0c1d1 RSI: ffffffff8e6fc468 RDI: ffffffff8c6d9480 [ 269.409735][ C0] RBP: ffff888027721f40 R08: c300000000000000 R09: 0000000000000000 [ 269.417729][ C0] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 269.425716][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 269.433718][ C0] ? pfn_valid+0xba/0x490 [ 269.438097][ C0] pfn_valid+0xd6/0x490 [ 269.442274][ C0] ? pfn_valid+0xba/0x490 [ 269.446618][ C0] page_table_check_clear+0x21/0x500 [ 269.451921][ C0] ? vm_normal_page+0x13c/0x2b0 [ 269.456789][ C0] __zap_vma_range+0x3a12/0x4f80 [ 269.461763][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 269.467102][ C0] ? mas_find+0x6d6/0xcb0 [ 269.471465][ C0] unmap_vmas+0x390/0x550 [ 269.475814][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 269.480674][ C0] ? mas_next_slot+0xc91/0xd70 [ 269.485488][ C0] exit_mmap+0x293/0x9f0 [ 269.489752][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 269.494547][ C0] ? __pfx_exit_aio+0x10/0x10 [ 269.499255][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 269.504476][ C0] __mmput+0x118/0x420 [ 269.508569][ C0] exit_mm+0x221/0x2d0 [ 269.512659][ C0] do_exit+0x6cd/0x2360 [ 269.516846][ C0] ? __pfx_do_exit+0x10/0x10 [ 269.521452][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 269.526545][ C0] do_group_exit+0x22d/0x2f0 [ 269.531155][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.536388][ C0] get_signal+0x121b/0x12c0 [ 269.541016][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 269.546593][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 269.552781][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 269.558174][ C0] ? rcu_is_watching+0x16/0xb0 [ 269.562962][ C0] do_syscall_64+0x328/0x520 [ 269.567590][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.573684][ C0] ? clear_bhb_loop+0x70/0xc0 [ 269.578379][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.584465][ C0] RIP: 0033:0x7fe34cf9e159 [ 269.588895][ C0] Code: Unable to access opcode bytes at 0x7fe34cf9e12f. [ 269.595929][ C0] RSP: 002b:00007fe34de210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 269.604361][ C0] RAX: fffffffffffffe00 RBX: 00007fe34d225fa8 RCX: 00007fe34cf9e159 [ 269.612373][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe34d225fa8 [ 269.620448][ C0] RBP: 00007fe34d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 269.628431][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.636439][ C0] R13: 00007fe34d226038 R14: 00007fe34d34f960 R15: 00007fe34d34fa48 [ 269.644526][ C0] [ 269.647568][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 269.654880][ C0] CPU: 0 UID: 0 PID: 8860 Comm: syz.0.1009 Tainted: G W L syzkaller #0 PREEMPT(full) [ 269.665751][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 269.670962][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.681047][ C0] Call Trace: [ 269.684360][ C0] [ 269.687230][ C0] vpanic+0x56d/0xa60 [ 269.691256][ C0] ? __pfx__printk+0x10/0x10 [ 269.695868][ C0] ? __pfx_vpanic+0x10/0x10 [ 269.700413][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 269.705726][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 269.710952][ C0] panic+0xc5/0xd0 [ 269.714709][ C0] ? __pfx_panic+0x10/0x10 [ 269.719153][ C0] __warn+0x315/0x4c0 [ 269.723160][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 269.728462][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 269.733791][ C0] __report_bug+0x276/0x570 [ 269.738336][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 269.743700][ C0] ? __pfx___report_bug+0x10/0x10 [ 269.748752][ C0] ? __wake_up_klogd+0xf0/0x130 [ 269.753630][ C0] ? vprintk_emit+0x4ee/0x560 [ 269.758332][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 269.763398][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 269.768717][ C0] report_bug+0x16b/0x220 [ 269.773079][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 269.778388][ C0] ? __debug_object_init+0x2c6/0x3c0 [ 269.783702][ C0] handle_bug+0x9c/0x200 [ 269.787960][ C0] exc_invalid_op+0x1a/0x50 [ 269.792480][ C0] asm_exc_invalid_op+0x1a/0x20 [ 269.797355][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 269.803268][ C0] Code: cc cc cc 41 ff c7 44 89 3d c9 65 e8 15 48 c7 c1 80 9d 6d 8c 48 c7 c7 e0 9d 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 4d fa 3d fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 cd 6e 0a 3b 05 9f [ 269.822895][ C0] RSP: 0000:ffffc900000079b8 EFLAGS: 00010046 [ 269.828985][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: dc32e53c4ff6b800 [ 269.836977][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 269.844971][ C0] RBP: ffff888027721f60 R08: 0000000000000100 R09: 1ffff92000000ee4 [ 269.852957][ C0] R10: dffffc0000000000 R11: fffff52000000ee5 R12: ffff888021797328 [ 269.860951][ C0] R13: ffff888054c3b770 R14: dffffc0000000000 R15: 0000000000000001 [ 269.868976][ C0] ? __debug_object_init+0x2c3/0x3c0 [ 269.874315][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 269.879891][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 269.884938][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 269.890499][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 269.895554][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 269.901386][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 269.906957][ C0] ? synchronize_srcu+0x20a/0x260 [ 269.912027][ C0] wakeup_source_unregister+0x129/0x3f0 [ 269.917607][ C0] mmc_host_classdev_release+0x47/0x100 [ 269.923183][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 269.929376][ C0] device_release+0xc4/0x1f0 [ 269.933988][ C0] kobject_put+0x222/0x550 [ 269.938421][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 269.943204][ C0] call_timer_fn+0x18d/0x5f0 [ 269.947810][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 269.954503][ C0] ? call_timer_fn+0xd5/0x5f0 [ 269.959200][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 269.964339][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.969596][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 269.976297][ C0] __run_timer_base+0x652/0x8b0 [ 269.981185][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 269.986582][ C0] ? ktime_get+0x1f5/0x220 [ 269.991041][ C0] ? lapic_next_event+0x11/0x20 [ 269.995915][ C0] run_timer_softirq+0xb7/0x170 [ 270.000793][ C0] handle_softirqs+0x226/0x860 [ 270.005595][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 270.010402][ C0] __irq_exit_rcu+0xcb/0x220 [ 270.015014][ C0] irq_exit_rcu+0x9/0x30 [ 270.019276][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 270.024932][ C0] [ 270.027883][ C0] [ 270.030835][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 270.036851][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 270.042159][ C0] Code: ff ff ff e8 20 c9 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 44 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf cc 43 0a cc 48 8d 3d f7 30 da [ 270.061782][ C0] RSP: 0000:ffffc900044772d8 EFLAGS: 00000286 [ 270.067871][ C0] RAX: dc32e53c4ff6b800 RBX: 0000000000000000 RCX: 8000000000000002 [ 270.075858][ C0] RDX: 0000000047b0c1d1 RSI: ffffffff8e6fc468 RDI: ffffffff8c6d9480 [ 270.083856][ C0] RBP: ffff888027721f40 R08: c300000000000000 R09: 0000000000000000 [ 270.091847][ C0] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 270.099838][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 270.107838][ C0] ? pfn_valid+0xba/0x490 [ 270.112202][ C0] pfn_valid+0xd6/0x490 [ 270.116380][ C0] ? pfn_valid+0xba/0x490 [ 270.120742][ C0] page_table_check_clear+0x21/0x500 [ 270.126042][ C0] ? vm_normal_page+0x13c/0x2b0 [ 270.130909][ C0] __zap_vma_range+0x3a12/0x4f80 [ 270.135903][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 270.141228][ C0] ? mas_find+0x6d6/0xcb0 [ 270.145592][ C0] unmap_vmas+0x390/0x550 [ 270.149967][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 270.154835][ C0] ? mas_next_slot+0xc91/0xd70 [ 270.159631][ C0] exit_mmap+0x293/0x9f0 [ 270.163908][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 270.168702][ C0] ? __pfx_exit_aio+0x10/0x10 [ 270.173404][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 270.178664][ C0] __mmput+0x118/0x420 [ 270.182761][ C0] exit_mm+0x221/0x2d0 [ 270.186864][ C0] do_exit+0x6cd/0x2360 [ 270.191044][ C0] ? __pfx_do_exit+0x10/0x10 [ 270.195656][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 270.200711][ C0] do_group_exit+0x22d/0x2f0 [ 270.205339][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.210573][ C0] get_signal+0x121b/0x12c0 [ 270.215127][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 270.220705][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 270.226898][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 270.232304][ C0] ? rcu_is_watching+0x16/0xb0 [ 270.237090][ C0] do_syscall_64+0x328/0x520 [ 270.241705][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.247791][ C0] ? clear_bhb_loop+0x70/0xc0 [ 270.252506][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.258432][ C0] RIP: 0033:0x7fe34cf9e159 [ 270.262864][ C0] Code: Unable to access opcode bytes at 0x7fe34cf9e12f. [ 270.269896][ C0] RSP: 002b:00007fe34de210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 270.278334][ C0] RAX: fffffffffffffe00 RBX: 00007fe34d225fa8 RCX: 00007fe34cf9e159 [ 270.286331][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe34d225fa8 [ 270.294337][ C0] RBP: 00007fe34d225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 270.302409][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.310400][ C0] R13: 00007fe34d226038 R14: 00007fe34d34f960 R15: 00007fe34d34fa48 [ 270.318418][ C0] [ 270.321613][ C0] Kernel Offset: disabled [ 270.325972][ C0] Rebooting in 86400 seconds..