last executing test programs: 22.120006168s ago: executing program 2 (id=986): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) 20.456446011s ago: executing program 2 (id=992): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404e881) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = dup(r1) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x1) dup2(r8, r0) 19.107204981s ago: executing program 2 (id=996): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xd) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r5, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) close(r1) 16.552187424s ago: executing program 4 (id=1007): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r0, &(0x7f0000000300)='x', 0x1) write(r0, &(0x7f0000000300)='/', 0x1) write(r0, &(0x7f0000000300)=':', 0x1) socket(0xa, 0x5, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r2, 0x89, 0x0, 0x9, 0x4}, &(0x7f0000000140)=0x18) r3 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x3, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x2f8d, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a4ac7c"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) socket$xdp(0x2c, 0x3, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 16.422463298s ago: executing program 0 (id=1008): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000280)='L', 0x1) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) io_uring_setup(0x145b, &(0x7f0000001780)={0x0, 0xae2c, 0x800, 0x957, 0x328}) write$char_usb(r1, &(0x7f00000003c0)='0', 0x1) 14.462424846s ago: executing program 2 (id=1011): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x2b, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000190c0)) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4000894) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r5, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0x2], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x2, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x80, 0x100000000, 0x5, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0x6, 0x1}) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80084121, &(0x7f0000000200)) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 12.657088473s ago: executing program 0 (id=1013): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001f00)=""/4093, 0xffd) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000006c0)}], 0x2}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) socket(0xa, 0x3, 0x3a) 12.471602787s ago: executing program 4 (id=1015): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x11e, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000100)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 12.037386212s ago: executing program 4 (id=1017): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001f00)=""/4093, 0xffd) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000006c0)}], 0x2}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) 10.596632008s ago: executing program 1 (id=1024): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0xffffffffffffffff) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000340)={0x3, 0x0, 0x9}) 10.251371374s ago: executing program 2 (id=1025): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x2b, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000190c0)) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4000894) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r5, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0x2], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x2, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x80, 0x100000000, 0x5, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0x6, 0x1}) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80084121, &(0x7f0000000200)) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 9.350014238s ago: executing program 3 (id=1026): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4008094) syz_emit_ethernet(0xa2, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x6c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1b, 0x2, 0xf3d8, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @eol, @timestamp={0x8, 0xa, 0xffb0, 0x9}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "aaa802ba81236a6a3f0291096ebc95e2"}, @md5sig={0x13, 0x12, "ee60fd29eee2d03b098afc604c77aea3"}, @mptcp=@syn={0x1e, 0xc, 0x3, 0x1, 0x2, 0x1, 0xfc}, @sack={0x5, 0x12, [0x2, 0x9, 0xd4, 0x6]}]}}}}}}}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x9, @mcast2, 0x8}, @in6={0xa, 0x4e21, 0x5, @empty, 0x6}], 0x38) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x5c}]}}}], 0x18}}], 0x1, 0x50008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 8.367957865s ago: executing program 0 (id=1027): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a001000"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0xfc, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@empty, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 7.904555576s ago: executing program 5 (id=1028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 7.840438268s ago: executing program 4 (id=1029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7.722853992s ago: executing program 1 (id=1030): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) read(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6.873625776s ago: executing program 1 (id=1031): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) 6.437409464s ago: executing program 1 (id=1032): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404e881) syz_clone3(&(0x7f00000036c0)={0x0, &(0x7f00000000c0), 0x0, 0x0, {0x1b}, &(0x7f0000000400)=""/216, 0xd8, 0x0, 0x0}, 0x58) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0xc041) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x8985, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x1) 6.333171803s ago: executing program 3 (id=1033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 6.005359773s ago: executing program 4 (id=1034): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x2b, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000190c0)) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4000894) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r5, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0x2], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x2, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x80, 0x100000000, 0x5, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0x6, 0x1}) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80084121, &(0x7f0000000200)) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 6.003353332s ago: executing program 5 (id=1035): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000740)='dummy_udc.0', 0xb) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) close(r1) landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 5.990548974s ago: executing program 3 (id=1036): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r1, 0xffffffffffffffff, 0x0) 5.9562011s ago: executing program 0 (id=1037): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) unshare(0x24060400) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="50000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.644803273s ago: executing program 3 (id=1038): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x3d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bc25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff2}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0xd, 0x9, 0xfffdfff9}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050028bd700000000000860000000800", @ANYRES32=r10, @ANYBLOB="0a0018000303030303030000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r13, &(0x7f00000002c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r13, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r13, &(0x7f0000000140)={0x2, 0xfe}, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000fbdbdf000300000000000000000000000000921813c09a132fbfe35a85b3b3b7e15f33cd59c182e1f80eee5e489b34737919d56ca40e738b9c92e5568d7316ab29f069c2742b5ebe3700c2d79de6b5ded10a1cc4534a67c906e335f18b465ccf6373315df1da2a6d026b06c7166735457d1f42840f867aec5b1b1a43324a4a39c130de0735d288e32d995d0071e7e64209c6b7720d5cb056851ebfa716d1e149234bdca061fc9966aa72a254ba64591ca6c2fd567cc480956de82e975414799c3edd38fb3a4f0bc6479acefbd995c078e579b996f3a550653eaa4f4d04251be3cdb87a6a534f", @ANYRES32, @ANYBLOB="18001d801400008006000500b60000000500"], 0x34}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10) 5.49342613s ago: executing program 5 (id=1039): syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) 4.820189503s ago: executing program 5 (id=1040): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000280)='L', 0x1) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) io_uring_setup(0x145b, &(0x7f0000001780)={0x0, 0xae2c, 0x800, 0x957, 0x328}) write$char_usb(r1, &(0x7f00000003c0)='0', 0x1) 4.790146937s ago: executing program 2 (id=1041): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0xd) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r5, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) close(r1) 4.569796396s ago: executing program 1 (id=1042): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x2b, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000190c0)) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4000894) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r5, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0x2], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x2, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x80, 0x100000000, 0x5, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0x6, 0x1}) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80084121, &(0x7f0000000200)) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 3.69570031s ago: executing program 3 (id=1043): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) read(r0, &(0x7f0000000740)=""/4096, 0x1000) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 671.260302ms ago: executing program 0 (id=1044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) 598.60424ms ago: executing program 5 (id=1045): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001ec0)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x20) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) eventfd(0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98) 259.617978ms ago: executing program 0 (id=1046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 154.921549ms ago: executing program 5 (id=1047): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001f00)=""/4093, 0xffd) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000006c0)}], 0x2}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) 148.523829ms ago: executing program 1 (id=1048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5.523162ms ago: executing program 3 (id=1049): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x2b, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000190c0)) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4000894) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r5, &(0x7f00000001c0)=""/116, 0x74, 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0x2], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x2, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x80, 0x100000000, 0x5, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0x6, 0x1}) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r6, 0x80084121, &(0x7f0000000200)) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1050): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4008094) syz_emit_ethernet(0xa2, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x6c, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1b, 0x2, 0xf3d8, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @eol, @timestamp={0x8, 0xa, 0xffb0, 0x9}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "aaa802ba81236a6a3f0291096ebc95e2"}, @md5sig={0x13, 0x12, "ee60fd29eee2d03b098afc604c77aea3"}, @mptcp=@syn={0x1e, 0xc, 0x3, 0x1, 0x2, 0x1, 0xfc}, @sack={0x5, 0x12, [0x2, 0x9, 0xd4, 0x6]}]}}}}}}}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x9, @mcast2, 0x8}, @in6={0xa, 0x4e21, 0x5, @empty, 0x6}], 0x38) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x5c}]}}}], 0x18}}], 0x1, 0x50008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) kernel console output (not intermixed with test programs): audit: type=1326 audit(1791090791.427:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 307.599809][ T31] audit: type=1326 audit(1791090791.427:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 307.670074][ T188] usb 4-1: USB disconnect, device number 15 [ 307.705548][ T188] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 307.720940][ T31] audit: type=1326 audit(1791090791.557:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 307.720983][ T31] audit: type=1326 audit(1791090791.557:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 307.721444][ T31] audit: type=1326 audit(1791090791.557:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 307.841453][ T31] audit: type=1326 audit(1791090791.667:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 307.841497][ T31] audit: type=1326 audit(1791090791.667:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 307.843110][ T31] audit: type=1326 audit(1791090791.677:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 307.948134][ T31] audit: type=1326 audit(1791090791.777:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b65d5e98e code=0x7ffc0000 [ 307.948177][ T31] audit: type=1326 audit(1791090791.777:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.647" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b65d9ddeb code=0x7ffc0000 [ 308.182108][ T5932] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 308.338643][ T5932] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 308.383529][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.383550][ T5932] usb 2-1: Product: syz [ 308.383563][ T5932] usb 2-1: Manufacturer: syz [ 308.383576][ T5932] usb 2-1: SerialNumber: syz [ 308.470930][ T5932] usb 2-1: USB2VGA dongle found at address 16 [ 308.481196][ T5932] usb 2-1: Allocated 8 output buffers [ 308.722495][ T7825] netlink: 132 bytes leftover after parsing attributes in process `syz.5.645'. [ 308.809364][ T5932] usb 2-1: Failed to early initialize device [ 308.849168][ T5932] usb 2-1: USB disconnect, device number 16 [ 311.532100][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 312.150861][ T5882] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 312.303960][ T5882] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.309696][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.309721][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.309740][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.309773][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.385743][ T5882] usb 1-1: config 0 descriptor?? [ 312.487833][ T7884] nbd: must specify at least one socket [ 316.216316][ T7901] 9p: Could not find request transport: 1´“&df [ 316.416573][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.416622][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.573774][ T5882] usbhid 1-1:0.0: can't add hid device: -71 [ 316.573857][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 316.619233][ T5882] usb 1-1: USB disconnect, device number 20 [ 316.738017][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.677'. [ 317.301284][ T7923] nbd: must specify at least one socket [ 317.926783][ T7937] batman_adv: batadv0: Adding interface: dummy0 [ 317.926799][ T7937] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.926825][ T7937] batman_adv: batadv0: Interface activated: dummy0 [ 318.059161][ T7937] batadv0: mtu less than device minimum [ 318.060798][ T7937] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 318.061935][ T7937] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 318.063046][ T7937] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 318.064189][ T7937] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 318.065311][ T7937] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 318.066439][ T7937] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 318.067554][ T7937] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 318.068727][ T7937] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 318.069860][ T7937] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 318.726212][ T7917] loop4: detected capacity change from 0 to 40427 [ 318.814771][ T7917] F2FS-fs (loop4): invalid crc value [ 319.623458][ T7917] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 319.667442][ T7917] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 319.785746][ T7982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.928876][ T7917] syz.4.680: attempt to access beyond end of device [ 319.928876][ T7917] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 319.929020][ T7917] syz.4.680: attempt to access beyond end of device [ 319.929020][ T7917] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 319.968773][ T7917] syz.4.680: attempt to access beyond end of device [ 319.968773][ T7917] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 320.034109][ T7945] tipc: Enabling of bearer rejected, failed to enable media [ 320.036735][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.036825][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.144001][ T5629] syz-executor: attempt to access beyond end of device [ 320.144001][ T5629] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 320.144239][ T5629] CPU: 0 UID: 0 PID: 5629 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 320.144264][ T5629] Tainted: [L]=SOFTLOCKUP [ 320.144271][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 320.144282][ T5629] Call Trace: [ 320.144290][ T5629] [ 320.144298][ T5629] dump_stack_lvl+0xe8/0x150 [ 320.144329][ T5629] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 320.144364][ T5629] f2fs_write_end_bio+0x1211/0x16e0 [ 320.144389][ T5629] ? blkg_put+0x22/0x240 [ 320.144431][ T5629] __submit_merged_bio+0x258/0x6a0 [ 320.144459][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.144482][ T5629] ? rcu_is_watching+0x16/0xb0 [ 320.144511][ T5629] __submit_merged_write_cond+0x3c9/0x4e0 [ 320.144548][ T5629] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 320.144594][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.144624][ T5629] f2fs_write_data_pages+0x2a27/0x36f0 [ 320.144644][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.144665][ T5629] ? __lock_acquire+0x747/0x2de0 [ 320.144716][ T5629] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 320.144735][ T5629] ? is_bpf_text_address+0x26/0x2b0 [ 320.144771][ T5629] ? arch_stack_walk+0xfb/0x150 [ 320.144818][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.144840][ T5629] ? add_lock_to_list+0xc7/0x100 [ 320.144866][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.144888][ T5629] ? __lock_acquire+0x1511/0x2de0 [ 320.144943][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.144965][ T5629] ? do_raw_spin_lock+0x12b/0x2f0 [ 320.144997][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.145022][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.145044][ T5629] ? do_raw_spin_unlock+0xf5/0x200 [ 320.145103][ T5629] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 320.145126][ T5629] do_writepages+0x338/0x560 [ 320.145149][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.145173][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.145198][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.145219][ T5629] ? do_raw_spin_unlock+0xf5/0x200 [ 320.145252][ T5629] filemap_fdatawrite+0x1e9/0x2f0 [ 320.145277][ T5629] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 320.145331][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.145355][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.145381][ T5629] ? do_raw_spin_unlock+0xf5/0x200 [ 320.145413][ T5629] f2fs_sync_dirty_inodes+0x30e/0x830 [ 320.145449][ T5629] f2fs_write_checkpoint+0xa3d/0x2710 [ 320.145471][ T5629] ? __lock_acquire+0x747/0x2de0 [ 320.145519][ T5629] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 320.145540][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.145609][ T5629] kill_f2fs_super+0x2dd/0x700 [ 320.145639][ T5629] ? __pfx_kill_f2fs_super+0x10/0x10 [ 320.145672][ T5629] ? call_rcu+0x64d/0x8b0 [ 320.145695][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.145716][ T5629] ? lockdep_hardirqs_on+0x7b/0x110 [ 320.145744][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.145777][ T5629] deactivate_locked_super+0xbe/0x110 [ 320.145808][ T5629] cleanup_mnt+0x3d3/0x460 [ 320.145833][ T5629] task_work_run+0x1d9/0x270 [ 320.145857][ T5629] ? __pfx_task_work_run+0x10/0x10 [ 320.145887][ T5629] exit_to_user_mode_loop+0x204/0x770 [ 320.145908][ T5629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 320.145930][ T5629] ? rcu_is_watching+0x16/0xb0 [ 320.145957][ T5629] do_syscall_64+0x328/0x520 [ 320.145984][ T5629] ? trace_irq_disable+0x3b/0x140 [ 320.146005][ T5629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.146029][ T5629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.146048][ T5629] RIP: 0033:0x7f4239f9f397 [ 320.146069][ T5629] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 320.146085][ T5629] RSP: 002b:00007ffe3a55b088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 320.146105][ T5629] RAX: 0000000000000000 RBX: 00007f423a0344bb RCX: 00007f4239f9f397 [ 320.146118][ T5629] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3a55b140 [ 320.146131][ T5629] RBP: 00007ffe3a55b140 R08: 00007ffe3a55c140 R09: 00000000ffffffff [ 320.146144][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe3a55c1d0 [ 320.146156][ T5629] R13: 00007f423a0344bb R14: 000000000004e1f9 R15: 00007ffe3a55c210 [ 320.146185][ T5629] [ 320.311524][ T5629] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 320.783386][ T7962] syzkaller0: entered promiscuous mode [ 320.783406][ T7962] syzkaller0: entered allmulticast mode [ 321.462199][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'. [ 321.590505][ T7990] sg_write: data in/out 483340/136 bytes for SCSI command 0x0-- guessing data in; [ 321.590505][ T7990] program syz.1.695 not setting count and/or reply_len properly [ 321.921622][ T7998] nbd: must specify at least one socket [ 323.287912][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.703'. [ 325.881044][ T8010] process 'syz.4.693' launched './file2' with NULL argv: empty string added [ 326.398042][ T8008] loop1: detected capacity change from 0 to 32768 [ 326.398793][ T8008] ======================================================= [ 326.398793][ T8008] WARNING: The mand mount option has been deprecated and [ 326.398793][ T8008] and is ignored by this kernel. Remove the mand [ 326.398793][ T8008] option from the mount to silence this warning. [ 326.398793][ T8008] ======================================================= [ 326.398979][ T8008] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 326.477431][ T8008] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.702 (8008) [ 326.910626][ T8008] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 326.910654][ T8008] BTRFS info (device loop1): using crc32c checksum algorithm [ 327.011302][ T5884] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 327.114899][ T8008] BTRFS info (device loop1): rebuilding free space tree [ 327.160866][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 327.161940][ T5884] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 327.166236][ T8008] BTRFS info (device loop1): disabling free space tree [ 327.166314][ T8008] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 327.166333][ T8008] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 327.215580][ T8008] BTRFS info (device loop1): enabling ssd optimizations [ 327.215599][ T8008] BTRFS info (device loop1): turning on async discard [ 327.215613][ T8008] BTRFS info (device loop1): force clearing of disk cache [ 327.215628][ T8008] BTRFS info (device loop1): use zstd compression, level 3 [ 327.249401][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.276563][ T5884] usb 5-1: config 0 descriptor?? [ 327.308934][ T5884] usb 5-1: probing VID:PID(0424:012C) [ 327.328853][ T5884] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 327.328873][ T5884] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 327.328890][ T5884] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 327.328906][ T5884] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 327.400403][ T5884] vub300 5-1:0.0: probe with driver vub300 failed with error -22 [ 327.612254][ T5884] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 327.669807][ T31] kauditd_printk_skb: 65 callbacks suppressed [ 327.669822][ T31] audit: type=1326 audit(1791090811.497:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.2.708" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 327.669862][ T31] audit: type=1326 audit(1791090811.497:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.2.708" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 327.746790][ T31] audit: type=1326 audit(1791090811.577:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.2.708" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 327.746833][ T31] audit: type=1326 audit(1791090811.577:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.2.708" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 327.746870][ T31] audit: type=1326 audit(1791090811.577:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.2.708" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 327.834449][ T31] audit: type=1326 audit(1791090811.637:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.2.708" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 327.863257][ T5884] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 327.865500][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 327.865525][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 327.865558][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.922593][ T5884] usb 4-1: config 0 descriptor?? [ 327.974384][ T31] audit: type=1326 audit(1791090811.797:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.2.708" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 327.974428][ T31] audit: type=1326 audit(1791090811.807:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.2.708" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 328.056295][ T31] audit: type=1326 audit(1791090811.887:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.2.708" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 328.056338][ T31] audit: type=1326 audit(1791090811.887:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.2.708" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 328.059653][ T5631] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 328.502240][ T8045] 9p: Could not find request transport: 1´“&df [ 328.893785][ T8019] netlink: 132 bytes leftover after parsing attributes in process `syz.0.704'. [ 329.055866][ T5884] ath6kl: Failed to submit usb control message: -110 [ 329.055907][ T5884] ath6kl: unable to send the bmi data to the device: -110 [ 329.055920][ T5884] ath6kl: Unable to send get target info: -110 [ 329.056943][ T5884] ath6kl: Failed to init ath6kl core: -110 [ 329.093702][ T5884] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 330.025722][ T5882] usb 5-1: USB disconnect, device number 19 [ 330.043534][ T9] usb 4-1: USB disconnect, device number 16 [ 330.333407][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 330.381090][ T8051] loop5: detected capacity change from 0 to 40427 [ 330.381661][ T8051] f2fs: Bad value for 'active_logs' [ 330.601322][ T8078] netlink: 'syz.4.717': attribute type 1 has an invalid length. [ 330.750295][ T8078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.964421][ T8086] loop2: detected capacity change from 0 to 32768 [ 330.965236][ T8086] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 330.993971][ T8086] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.720 (8086) [ 331.034824][ T8086] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 331.034849][ T8086] BTRFS info (device loop2): using crc32c checksum algorithm [ 331.065762][ T8081] bond1: (slave veth0_to_bond): making interface the new active one [ 331.098014][ T8081] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 331.143956][ T8087] bond1: entered promiscuous mode [ 331.143974][ T8087] veth0_to_bond: entered promiscuous mode [ 331.144148][ T8087] bond1: entered allmulticast mode [ 331.144160][ T8087] veth0_to_bond: entered allmulticast mode [ 331.261514][ T8086] BTRFS info (device loop2): rebuilding free space tree [ 331.268046][ T8086] BTRFS info (device loop2): disabling free space tree [ 331.268099][ T8086] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 331.268117][ T8086] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 331.309324][ T8086] BTRFS info (device loop2): enabling ssd optimizations [ 331.309343][ T8086] BTRFS info (device loop2): turning on async discard [ 331.309358][ T8086] BTRFS info (device loop2): force clearing of disk cache [ 331.309373][ T8086] BTRFS info (device loop2): use zstd compression, level 3 [ 332.346842][ T5627] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 332.661196][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 332.811767][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 332.828611][ T9] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 332.830128][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 332.830160][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.830182][ T9] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 332.830227][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 332.830254][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.915465][ T9] usb 2-1: config 0 descriptor?? [ 333.005053][ T8120] nbd: must specify at least one socket [ 333.018099][ T8118] syzkaller0: entered promiscuous mode [ 333.018115][ T8118] syzkaller0: entered allmulticast mode [ 333.321416][ T8121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.321856][ T8121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.367451][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.367882][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.637640][ T8113] netlink: 'syz.1.725': attribute type 5 has an invalid length. [ 333.696866][ T9] bigben 0003:146B:0902.0001: unexpected rdesc, please submit for review [ 333.726011][ T8126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.729'. [ 333.762119][ T9] bigben 0003:146B:0902.0001: missing HID_OUTPUT_REPORT 0 [ 333.762138][ T9] bigben 0003:146B:0902.0001: no output report found [ 333.817551][ T9] bigben 0003:146B:0902.0001: hidraw0: USB HID v0.00 Joystick [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 333.924634][ T5932] usb 2-1: USB disconnect, device number 17 [ 334.030728][ T5884] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 334.131883][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 334.156641][ T8130] fido_id[8130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 334.201322][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 334.207766][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 334.215878][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.215902][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.215932][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.262364][ T5884] usb 4-1: config 0 descriptor?? [ 334.280615][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 334.282666][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 334.282864][ T5884] hub 4-1:0.0: USB hub found [ 334.284346][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.317816][ T5882] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 334.339336][ T9] usb 5-1: config 0 descriptor?? [ 334.373609][ T9] usb 5-1: probing VID:PID(0424:012C) [ 334.396438][ T9] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 334.415782][ T9] vub300 5-1:0.0: probe with driver vub300 failed with error -22 [ 334.471053][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 334.471712][ T5882] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 334.472658][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.487260][ T5884] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 334.525521][ T5882] usb 3-1: config 0 descriptor?? [ 334.538508][ T5884] usbhid 4-1:0.0: can't add hid device: -71 [ 334.538598][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 334.569464][ T5882] usb 3-1: probing VID:PID(0424:012C) [ 334.586122][ T5882] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 334.586142][ T5882] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 334.586158][ T5882] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 334.586174][ T5882] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 334.586189][ T5882] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 334.628767][ T5884] usb 4-1: USB disconnect, device number 17 [ 334.757708][ T5882] vub300 3-1:0.0: probe with driver vub300 failed with error -32 [ 335.091192][ T5884] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 335.821422][ T5884] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.222597][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 336.222626][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.222645][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.222679][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.208979][ T5884] usb 2-1: config 0 descriptor?? [ 337.455589][ T5882] usb 5-1: USB disconnect, device number 20 [ 337.698494][ T31] kauditd_printk_skb: 59 callbacks suppressed [ 337.698532][ T31] audit: type=1326 audit(1791090821.527:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 337.747147][ T31] audit: type=1326 audit(1791090821.577:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 337.786458][ T31] audit: type=1326 audit(1791090821.617:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 337.786500][ T31] audit: type=1326 audit(1791090821.617:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 337.786537][ T31] audit: type=1326 audit(1791090821.617:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 337.889696][ T5884] usbhid 2-1:0.0: can't add hid device: -71 [ 337.889774][ T5884] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 337.906135][ T31] audit: type=1326 audit(1791090821.737:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 337.906190][ T31] audit: type=1326 audit(1791090821.737:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 337.906229][ T31] audit: type=1326 audit(1791090821.737:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 337.967302][ T31] audit: type=1326 audit(1791090821.797:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff80dd5e98e code=0x7ffc0000 [ 337.993775][ T31] audit: type=1326 audit(1791090821.827:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8152 comm="syz.3.737" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff80dd9ddeb code=0x7ffc0000 [ 338.099220][ T5884] usb 2-1: USB disconnect, device number 18 [ 338.269651][ T188] usb 3-1: USB disconnect, device number 17 [ 338.311214][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 338.597591][ T9] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 339.590407][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.590432][ T9] usb 4-1: Product: syz [ 339.590445][ T9] usb 4-1: Manufacturer: syz [ 339.590457][ T9] usb 4-1: SerialNumber: syz [ 340.439235][ T5884] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 340.609262][ T9] usb 4-1: USB2VGA dongle found at address 18 [ 340.629786][ T9] usb 4-1: Allocated 8 output buffers [ 340.641202][ T5884] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.644362][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.644409][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.644428][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 340.644470][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.662143][ T5884] usb 1-1: config 0 descriptor?? [ 340.909134][ T9] usb 4-1: Failed to early initialize device [ 340.973644][ T9] usb 4-1: USB disconnect, device number 18 [ 341.839710][ T5884] usbhid 1-1:0.0: can't add hid device: -71 [ 341.839792][ T5884] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 341.881496][ T5884] usb 1-1: USB disconnect, device number 21 [ 343.849141][ T8182] 9p: Could not find request transport: 1´“&df [ 348.650454][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 348.650470][ T31] audit: type=1326 audit(1791090832.477:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.756" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 348.695644][ T31] audit: type=1326 audit(1791090832.527:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.756" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 348.845063][ T31] audit: type=1326 audit(1791090832.677:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.756" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 348.845107][ T31] audit: type=1326 audit(1791090832.677:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.756" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 348.845144][ T31] audit: type=1326 audit(1791090832.677:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.756" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 348.846828][ T31] audit: type=1326 audit(1791090832.677:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.756" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 348.846868][ T31] audit: type=1326 audit(1791090832.677:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.756" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 348.846905][ T31] audit: type=1326 audit(1791090832.677:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.756" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 348.960266][ T31] audit: type=1326 audit(1791090832.737:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.756" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff80dd5e98e code=0x7ffc0000 [ 348.960310][ T31] audit: type=1326 audit(1791090832.737:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.3.756" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff80dd9ddeb code=0x7ffc0000 [ 349.344261][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 349.380647][ T5884] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 349.476598][ T8230] netlink: 60 bytes leftover after parsing attributes in process `syz.1.760'. [ 349.516406][ T9] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 349.532259][ T5884] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 349.536272][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 349.536297][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.536315][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 349.536348][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.598722][ T5884] usb 1-1: config 0 descriptor?? [ 349.606725][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.606744][ T9] usb 4-1: Product: syz [ 349.606757][ T9] usb 4-1: Manufacturer: syz [ 349.606770][ T9] usb 4-1: SerialNumber: syz [ 349.671557][ T9] usb 4-1: USB2VGA dongle found at address 19 [ 349.690093][ T9] usb 4-1: Allocated 8 output buffers [ 349.928981][ T5882] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 349.969317][ T9] usb 4-1: Failed to early initialize device [ 350.959983][ T5884] usbhid 1-1:0.0: can't add hid device: -71 [ 350.960073][ T5884] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 351.810478][ T5884] usb 1-1: USB disconnect, device number 22 [ 351.818156][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 351.828491][ T5882] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 351.840673][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.840698][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.852204][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.886269][ T9] usb 4-1: USB disconnect, device number 19 [ 352.064749][ T5882] usb 2-1: config 0 descriptor?? [ 352.101191][ T5882] hub 2-1:0.0: USB hub found [ 352.296368][ T5882] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 352.325387][ T5882] usbhid 2-1:0.0: can't add hid device: -71 [ 352.325463][ T5882] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 352.371188][ T5882] usb 2-1: USB disconnect, device number 19 [ 352.524589][ T5884] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 352.592658][ T8242] 9p: Could not find request transport: 1´“&df [ 352.691201][ T5884] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.734338][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.734362][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.734381][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.734414][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.114597][ T5884] usb 6-1: config 0 descriptor?? [ 357.977101][ T5884] usbhid 6-1:0.0: can't add hid device: -71 [ 357.977193][ T5884] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 358.032791][ T5884] usb 6-1: USB disconnect, device number 15 [ 360.376645][ T31] kauditd_printk_skb: 65 callbacks suppressed [ 360.376662][ T31] audit: type=1326 audit(1791090844.207:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.3.778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 360.376703][ T31] audit: type=1326 audit(1791090844.207:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.3.778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 360.460653][ T31] audit: type=1326 audit(1791090844.287:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.3.778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 360.460695][ T31] audit: type=1326 audit(1791090844.287:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.3.778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 360.460733][ T31] audit: type=1326 audit(1791090844.287:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.3.778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 360.466690][ T31] audit: type=1326 audit(1791090844.297:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.3.778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 360.583012][ T31] audit: type=1326 audit(1791090844.417:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.3.778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 360.587014][ T31] audit: type=1326 audit(1791090844.417:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.3.778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff80dd5e98e code=0x7ffc0000 [ 360.588707][ T31] audit: type=1326 audit(1791090844.417:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.3.778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff80dd9ddeb code=0x7ffc0000 [ 360.589357][ T31] audit: type=1326 audit(1791090844.417:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.3.778" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff80dd9ddeb code=0x7ffc0000 [ 360.797392][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.780'. [ 360.880930][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 361.019311][ T8299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.782'. [ 361.035674][ T10] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 361.071023][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.071065][ T10] usb 4-1: Product: syz [ 361.071078][ T10] usb 4-1: Manufacturer: syz [ 361.071091][ T10] usb 4-1: SerialNumber: syz [ 361.131599][ T10] usb 4-1: USB2VGA dongle found at address 20 [ 361.137313][ T10] usb 4-1: Allocated 8 output buffers [ 361.228778][ T5344] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 361.311272][ T5884] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 361.687463][ T5344] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.770600][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 362.173173][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 362.173208][ T5344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.173254][ T5344] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.173290][ T5344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.372481][ T5884] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 362.446927][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.446952][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.447004][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.449955][ T5344] usb 3-1: config 0 descriptor?? [ 362.629766][ T5884] usb 2-1: config 0 descriptor?? [ 363.651003][ T5884] hub 2-1:0.0: USB hub found [ 363.657944][ T5884] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 363.708313][ T5884] usbhid 2-1:0.0: can't add hid device: -71 [ 363.708416][ T5884] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 363.852335][ T5884] usb 2-1: USB disconnect, device number 20 [ 363.942430][ T5344] usbhid 3-1:0.0: can't add hid device: -71 [ 363.942532][ T5344] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 363.978547][ T5344] usb 3-1: USB disconnect, device number 18 [ 364.038349][ T10] usb 4-1: Failed to early initialize device [ 364.109497][ T10] usb 4-1: USB disconnect, device number 20 [ 366.589235][ T8315] 9p: Could not find request transport: 1´“&df [ 366.761090][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 366.913816][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.931142][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.931167][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.931186][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 366.931225][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.986666][ T10] usb 2-1: config 0 descriptor?? [ 367.395795][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 367.395813][ T31] audit: type=1326 audit(1791090851.227:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.4.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 367.396105][ T31] audit: type=1326 audit(1791090851.227:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.4.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 367.473104][ T31] audit: type=1326 audit(1791090851.307:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.4.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 367.473148][ T31] audit: type=1326 audit(1791090851.307:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.4.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 367.473202][ T31] audit: type=1326 audit(1791090851.307:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.4.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 367.507589][ T31] audit: type=1326 audit(1791090851.307:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.4.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 367.507654][ T31] audit: type=1326 audit(1791090851.337:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.4.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 367.643922][ T31] audit: type=1326 audit(1791090851.477:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.4.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 367.644075][ T31] audit: type=1326 audit(1791090851.477:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.4.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4239f5e98e code=0x7ffc0000 [ 367.645176][ T31] audit: type=1326 audit(1791090851.477:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.4.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4239f9ddeb code=0x7ffc0000 [ 368.054947][ T5344] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 368.588387][ T5344] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 370.877354][ T5344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.877379][ T5344] usb 5-1: Product: syz [ 371.001449][ T5344] usb 5-1: can't set config #1, error -71 [ 371.095160][ T5344] usb 5-1: USB disconnect, device number 21 [ 371.129158][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 371.129243][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 371.195289][ T10] usb 2-1: USB disconnect, device number 21 [ 372.560582][ T8370] netlink: 60 bytes leftover after parsing attributes in process `syz.5.801'. [ 373.494215][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 373.671971][ T5344] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 373.782912][ T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 373.821174][ T5344] usb 6-1: Using ep0 maxpacket: 32 [ 373.824940][ T5344] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 373.859586][ T5344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.859611][ T5344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.859642][ T5344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.903476][ T5344] usb 6-1: config 0 descriptor?? [ 373.919826][ T5344] hub 6-1:0.0: USB hub found [ 373.944346][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.947238][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 373.947262][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.947303][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.947336][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.020014][ T10] usb 2-1: config 0 descriptor?? [ 374.128543][ T5344] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 374.160417][ T5344] usbhid 6-1:0.0: can't add hid device: -71 [ 374.160510][ T5344] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 374.206732][ T5344] usb 6-1: USB disconnect, device number 16 [ 374.475114][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 374.475141][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 374.475158][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 374.475174][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 374.475191][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 374.475207][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 374.475229][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 374.475244][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 374.475261][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 374.563155][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 374.563182][ T31] audit: type=1326 audit(1791090858.307:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.0.814" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314dd9e159 code=0x7ffc0000 [ 374.563227][ T31] audit: type=1326 audit(1791090858.397:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.0.814" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314dd9e159 code=0x7ffc0000 [ 374.639468][ T31] audit: type=1326 audit(1791090858.467:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.0.814" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f314dd9e159 code=0x7ffc0000 [ 374.639511][ T31] audit: type=1326 audit(1791090858.467:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.0.814" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314dd9e159 code=0x7ffc0000 [ 374.639548][ T31] audit: type=1326 audit(1791090858.467:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.0.814" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314dd9e159 code=0x7ffc0000 [ 374.737580][ T31] audit: type=1326 audit(1791090858.567:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.0.814" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f314dd9e159 code=0x7ffc0000 [ 374.737637][ T31] audit: type=1326 audit(1791090858.567:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.0.814" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314dd9e159 code=0x7ffc0000 [ 374.737675][ T31] audit: type=1326 audit(1791090858.567:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.0.814" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314dd9e159 code=0x7ffc0000 [ 374.838005][ T31] audit: type=1326 audit(1791090858.667:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.0.814" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f314dd5e98e code=0x7ffc0000 [ 374.838049][ T31] audit: type=1326 audit(1791090858.667:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.0.814" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f314dd9ddeb code=0x7ffc0000 [ 374.946078][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 374.998353][ T10] usb 2-1: USB disconnect, device number 22 [ 375.160778][ T5932] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 375.488678][ T5932] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 377.002745][ T8407] fido_id[8407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 377.383311][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.383335][ T5932] usb 1-1: Product: syz [ 377.383348][ T5932] usb 1-1: Manufacturer: syz [ 377.383361][ T5932] usb 1-1: SerialNumber: syz [ 377.770476][ T5932] usb 1-1: can't set config #1, error -71 [ 377.789423][ T5932] usb 1-1: USB disconnect, device number 23 [ 377.855512][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.855556][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.121328][ T5932] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 380.296848][ T5932] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.310268][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.310292][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.310311][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.310344][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.393685][ T5932] usb 1-1: config 0 descriptor?? [ 380.509267][ T8422] 9p: Could not find request transport: 1´“&df [ 381.220309][ T8450] netlink: 60 bytes leftover after parsing attributes in process `syz.1.827'. [ 381.262562][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.826'. [ 381.531661][ T5344] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 381.553004][ T5932] usbhid 1-1:0.0: can't add hid device: -71 [ 381.553082][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 381.580958][ T5932] usb 1-1: USB disconnect, device number 24 [ 381.643193][ T5882] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 381.681631][ T5344] usb 2-1: Using ep0 maxpacket: 32 [ 381.682118][ T5344] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 381.684578][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.684602][ T5344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.684632][ T5344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.690062][ T5344] usb 2-1: config 0 descriptor?? [ 381.754222][ T5344] hub 2-1:0.0: USB hub found [ 381.804576][ T5882] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 381.806237][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.806262][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.806280][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 381.806313][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.884857][ T5882] usb 5-1: config 0 descriptor?? [ 381.960015][ T5344] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 381.991107][ T5344] usbhid 2-1:0.0: can't add hid device: -71 [ 381.991201][ T5344] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 382.044679][ T5344] usb 2-1: USB disconnect, device number 23 [ 382.299998][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 382.300015][ T31] audit: type=1326 audit(1791090866.127:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.831" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 382.300400][ T31] audit: type=1326 audit(1791090866.127:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.831" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 382.376937][ T31] audit: type=1326 audit(1791090866.207:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.831" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 382.376980][ T31] audit: type=1326 audit(1791090866.207:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.831" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 382.377017][ T31] audit: type=1326 audit(1791090866.207:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.831" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 382.468706][ T31] audit: type=1326 audit(1791090866.297:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.831" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 382.468765][ T31] audit: type=1326 audit(1791090866.297:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.831" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 382.468804][ T31] audit: type=1326 audit(1791090866.297:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.831" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f129e79e159 code=0x7ffc0000 [ 382.569028][ T5882] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 382.569055][ T5882] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 382.569072][ T5882] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 382.569088][ T5882] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 382.569105][ T5882] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 382.569121][ T5882] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 382.569137][ T5882] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 382.569154][ T5882] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 382.569170][ T5882] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 382.664489][ T31] audit: type=1326 audit(1791090866.497:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.831" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f129e75e98e code=0x7ffc0000 [ 382.664532][ T31] audit: type=1326 audit(1791090866.497:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.831" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f129e79ddeb code=0x7ffc0000 [ 382.734023][ T5882] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 382.770703][ T5882] usb 5-1: USB disconnect, device number 22 [ 383.021542][ T5344] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 384.310702][ T5344] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 385.335074][ T8465] fido_id[8465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 387.759065][ T5344] usb 3-1: string descriptor 0 read error: -71 [ 387.759193][ T5344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.909417][ T5344] usb 3-1: can't set config #1, error -71 [ 387.948323][ T5344] usb 3-1: USB disconnect, device number 19 [ 388.617115][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'. [ 388.960861][ T5882] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 388.998762][ T8512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.848'. [ 389.188756][ T8503] 9p: Could not find request transport: 1´“&df [ 390.193049][ T5882] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.198529][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.198554][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.198575][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.198608][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.956530][ T5882] usb 1-1: config 0 descriptor?? [ 391.220776][ T5932] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 391.380625][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 391.381145][ T5932] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 391.382707][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.382732][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.382762][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.453272][ T5932] usb 5-1: config 0 descriptor?? [ 391.471821][ T5932] hub 5-1:0.0: USB hub found [ 391.477730][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 391.477745][ T31] audit: type=1326 audit(1791090875.307:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 391.477813][ T31] audit: type=1326 audit(1791090875.307:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 391.587344][ T31] audit: type=1326 audit(1791090875.417:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 391.587388][ T31] audit: type=1326 audit(1791090875.417:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 391.587463][ T31] audit: type=1326 audit(1791090875.417:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 391.618106][ T5884] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 391.618239][ T31] audit: type=1326 audit(1791090875.417:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 391.910308][ T5932] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 391.919458][ T5884] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.930838][ T31] audit: type=1326 audit(1791090875.427:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 391.930882][ T31] audit: type=1326 audit(1791090875.747:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff80dd5e98e code=0x7ffc0000 [ 391.931002][ T31] audit: type=1326 audit(1791090875.757:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff80dd9ddeb code=0x7ffc0000 [ 391.931039][ T31] audit: type=1326 audit(1791090875.757:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.3.851" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff80dd9ddeb code=0x7ffc0000 [ 391.956259][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 391.956284][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.956303][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.956359][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.117407][ T5884] usb 3-1: config 0 descriptor?? [ 392.118448][ T5932] usbhid 5-1:0.0: can't add hid device: -71 [ 392.118572][ T5932] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 392.174283][ T5932] usb 5-1: USB disconnect, device number 23 [ 392.452009][ T188] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 392.584592][ T5882] usbhid 1-1:0.0: can't add hid device: -71 [ 392.584701][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 392.609401][ T188] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 392.627367][ T5882] usb 1-1: USB disconnect, device number 25 [ 392.654008][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.654029][ T188] usb 4-1: Product: syz [ 392.654041][ T188] usb 4-1: Manufacturer: syz [ 392.654054][ T188] usb 4-1: SerialNumber: syz [ 392.659525][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 392.659545][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 392.713730][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 392.713751][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 392.713768][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 392.713784][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 392.714962][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 392.714984][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 392.715001][ T5884] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 392.834439][ T188] usb 4-1: USB2VGA dongle found at address 21 [ 392.877145][ T188] usb 4-1: Allocated 8 output buffers [ 392.887832][ T5884] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 392.963040][ T5932] usb 3-1: USB disconnect, device number 20 [ 395.579440][ T8533] fido_id[8533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 395.619340][ T188] usb 4-1: Failed to early initialize device [ 395.683529][ T188] usb 4-1: USB disconnect, device number 21 [ 398.617483][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 398.806933][ T8584] netlink: 60 bytes leftover after parsing attributes in process `syz.2.868'. [ 398.858179][ T8575] 9p: Could not find request transport: 1´“&df [ 398.892074][ T5932] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 398.956944][ T31] kauditd_printk_skb: 62 callbacks suppressed [ 398.956961][ T31] audit: type=1326 audit(1791090882.787:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.870" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 399.010045][ T31] audit: type=1326 audit(1791090882.837:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.870" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 399.045774][ T31] audit: type=1326 audit(1791090882.877:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.870" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 399.045819][ T31] audit: type=1326 audit(1791090882.877:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.870" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 399.045856][ T31] audit: type=1326 audit(1791090882.877:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.870" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 399.079012][ T31] audit: type=1326 audit(1791090882.877:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.870" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 399.107298][ T31] audit: type=1326 audit(1791090882.937:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.870" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 399.134815][ T5932] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.165246][ T188] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 399.165830][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.165855][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.165874][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 399.165908][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.265529][ T5932] usb 1-1: config 0 descriptor?? [ 399.269133][ T31] audit: type=1326 audit(1791090883.097:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.870" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4239f9e159 code=0x7ffc0000 [ 399.269178][ T31] audit: type=1326 audit(1791090883.097:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.870" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4239f5e98e code=0x7ffc0000 [ 399.269216][ T31] audit: type=1326 audit(1791090883.097:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.870" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4239f9ddeb code=0x7ffc0000 [ 399.270899][ T5884] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 399.413308][ T188] usb 3-1: Using ep0 maxpacket: 32 [ 399.415527][ T188] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 399.419835][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.419860][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.419891][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.470736][ T5884] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.486676][ T188] usb 3-1: config 0 descriptor?? [ 399.497721][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 399.497748][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.497767][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 399.497824][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.513214][ T5882] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 399.559406][ T188] hub 3-1:0.0: USB hub found [ 399.571264][ T5884] usb 4-1: config 0 descriptor?? [ 399.686773][ T5882] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 399.720303][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.720326][ T5882] usb 5-1: Product: syz [ 399.720339][ T5882] usb 5-1: Manufacturer: syz [ 399.720352][ T5882] usb 5-1: SerialNumber: syz [ 399.796387][ T5882] usb 5-1: USB2VGA dongle found at address 24 [ 399.815361][ T5882] usb 5-1: Allocated 8 output buffers [ 400.159586][ T5884] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 400.159651][ T5884] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 400.159687][ T5884] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 400.159705][ T5884] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 400.159721][ T5884] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 400.159738][ T5884] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 400.159754][ T5884] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 400.291051][ T5884] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 400.368356][ T5884] usb 4-1: USB disconnect, device number 22 [ 400.410583][ T188] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 400.436118][ T5882] usb 5-1: Failed to early initialize device [ 400.483893][ T188] usbhid 3-1:0.0: can't add hid device: -71 [ 400.484028][ T188] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 400.542187][ T5882] usb 5-1: USB disconnect, device number 24 [ 400.547048][ T188] usb 3-1: USB disconnect, device number 21 [ 400.729735][ T8594] fido_id[8594]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 400.786109][ T5932] usbhid 1-1:0.0: can't add hid device: -71 [ 400.786186][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 400.823585][ T5932] usb 1-1: USB disconnect, device number 26 [ 401.701463][ T8605] fuse: Bad value for 'fd' [ 406.367415][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 406.603949][ T8650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.887'. [ 406.680697][ T5882] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 406.831186][ T5882] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.833465][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 406.833490][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.833509][ T5882] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 406.833596][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.835899][ T5882] usb 5-1: config 0 descriptor?? [ 406.850111][ T188] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 406.908810][ T5932] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 407.054769][ T5884] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 407.073300][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 407.074070][ T188] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 407.074400][ T5932] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 407.079388][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.079413][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.079450][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.095367][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.095392][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.095411][ T188] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 407.095469][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.197645][ T5932] usb 2-1: config 0 descriptor?? [ 407.210952][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 407.213485][ T5884] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 407.216654][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.248850][ T5932] hub 2-1:0.0: USB hub found [ 407.274636][ T188] usb 3-1: config 0 descriptor?? [ 407.275808][ T5884] usb 1-1: config 0 descriptor?? [ 407.317795][ T5882] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 407.317821][ T5882] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 407.317839][ T5882] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 407.317855][ T5882] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 407.317872][ T5882] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 407.317913][ T5882] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 407.317930][ T5882] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 407.364919][ T5884] usb 1-1: probing VID:PID(0424:012C) [ 407.436360][ T5884] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 407.436410][ T5884] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 407.436427][ T5884] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 407.436442][ T5884] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 407.436458][ T5884] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 407.487317][ T5932] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 407.527939][ T5882] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 407.557292][ T5932] usbhid 2-1:0.0: can't add hid device: -71 [ 407.557373][ T5932] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 407.620022][ T5882] usb 5-1: USB disconnect, device number 25 [ 407.634795][ T5932] usb 2-1: USB disconnect, device number 24 [ 407.664483][ T5884] vub300 1-1:0.0: probe with driver vub300 failed with error -32 [ 410.519660][ T8656] fido_id[8656]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 410.965978][ T5932] usb 1-1: USB disconnect, device number 27 [ 411.087909][ T188] usbhid 3-1:0.0: can't add hid device: -71 [ 411.087992][ T188] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 411.138860][ T188] usb 3-1: USB disconnect, device number 22 [ 413.499655][ T8675] 9p: Could not find request transport: 1´“&df [ 413.751321][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 413.948632][ T8699] netlink: 60 bytes leftover after parsing attributes in process `syz.1.904'. [ 413.961004][ T5884] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 414.111140][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 414.118007][ T5884] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 414.134704][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.155410][ T5884] usb 6-1: config 0 descriptor?? [ 414.372538][ T5884] usb 6-1: probing VID:PID(0424:012C) [ 414.412397][ T188] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 414.613136][ T5932] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 414.789380][ T5884] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 414.987302][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 415.126891][ T5932] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 415.780842][ T188] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.157238][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.157269][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.157301][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.527208][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 416.527238][ T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.527257][ T188] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.527292][ T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.588391][ T5932] usb 2-1: config 0 descriptor?? [ 416.606254][ T5932] hub 2-1:0.0: USB hub found [ 416.608363][ T5884] vub300 6-1:0.0: probe with driver vub300 failed with error -22 [ 416.626399][ T188] usb 5-1: config 0 descriptor?? [ 416.972798][ T5882] usb 6-1: USB disconnect, device number 17 [ 417.150788][ T5932] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 417.160220][ T188] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 417.160244][ T188] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 417.160261][ T188] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 417.160278][ T188] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 417.160294][ T188] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 417.160311][ T188] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 417.160327][ T188] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 417.254394][ T5932] usbhid 2-1:0.0: can't add hid device: -71 [ 417.254480][ T5932] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 417.371852][ T188] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 417.400069][ T5932] usb 2-1: USB disconnect, device number 25 [ 417.465905][ T8717] nbd: must specify at least one socket [ 417.485478][ T188] usb 5-1: USB disconnect, device number 26 [ 417.823290][ T8718] fido_id[8718]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 419.332079][ T8730] netlink: 68 bytes leftover after parsing attributes in process `syz.3.913'. [ 420.068859][ T188] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 420.292577][ T188] usb 2-1: Using ep0 maxpacket: 8 [ 420.295502][ T188] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 420.296476][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.329134][ T188] usb 2-1: config 0 descriptor?? [ 420.353544][ T8736] sctp: [Deprecated]: syz.0.915 (pid 8736) Use of int in max_burst socket option deprecated. [ 420.353544][ T8736] Use struct sctp_assoc_value instead [ 420.354110][ T188] usb 2-1: probing VID:PID(0424:012C) [ 420.412217][ T8654] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 420.433512][ T188] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 420.433534][ T188] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 420.433551][ T188] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 420.433566][ T188] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 420.433582][ T188] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 420.562203][ T8654] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 420.564880][ T8654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.564906][ T8654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.564924][ T8654] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 420.564975][ T8654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.631542][ T8654] usb 5-1: config 0 descriptor?? [ 420.657683][ T188] vub300 2-1:0.0: probe with driver vub300 failed with error -32 [ 420.745550][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 420.786627][ T5882] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 420.950727][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 420.955486][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 420.979913][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.979940][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.979972][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.038620][ T5882] usb 1-1: config 0 descriptor?? [ 421.068801][ T5882] hub 1-1:0.0: USB hub found [ 421.354721][ T5882] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 421.383704][ T5882] usbhid 1-1:0.0: can't add hid device: -71 [ 421.383806][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 421.433979][ T5882] usb 1-1: USB disconnect, device number 28 [ 421.720089][ T8654] usbhid 5-1:0.0: can't add hid device: -71 [ 421.720178][ T8654] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 421.747484][ T8654] usb 5-1: USB disconnect, device number 27 [ 421.819231][ T5882] usb 2-1: USB disconnect, device number 26 [ 422.130366][ T8763] netlink: 60 bytes leftover after parsing attributes in process `syz.1.924'. [ 422.246315][ T8760] 9p: Could not find request transport: 1´“&df [ 422.400677][ T5882] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 422.452076][ T8654] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 422.541525][ T8772] netlink: 68 bytes leftover after parsing attributes in process `syz.4.928'. [ 422.560175][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 422.567406][ T5882] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 422.581856][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.581881][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.581912][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.619182][ T8654] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 422.639794][ T8654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 422.639821][ T8654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.639839][ T8654] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 422.639873][ T8654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.652529][ T5882] usb 2-1: config 0 descriptor?? [ 422.711879][ T8654] usb 3-1: config 0 descriptor?? [ 422.730201][ T5882] hub 2-1:0.0: USB hub found [ 422.948517][ T5882] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 422.978844][ T5882] usbhid 2-1:0.0: can't add hid device: -71 [ 422.978925][ T5882] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 423.027069][ T5882] usb 2-1: USB disconnect, device number 27 [ 423.318081][ T8776] nbd: must specify at least one socket [ 423.318969][ T8654] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 423.318990][ T8654] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 423.319007][ T8654] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 423.319023][ T8654] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 423.319040][ T8654] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 425.221753][ T8654] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 425.259985][ T8654] usb 3-1: USB disconnect, device number 23 [ 425.636845][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 425.702736][ T8782] fido_id[8782]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 426.095555][ T8787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.128233][ T8792] sg_write: data in/out 483340/136 bytes for SCSI command 0x0-- guessing data in; [ 426.128233][ T8792] program syz.5.933 not setting count and/or reply_len properly [ 426.603620][ T8798] sctp: [Deprecated]: syz.2.937 (pid 8798) Use of int in max_burst socket option deprecated. [ 426.603620][ T8798] Use struct sctp_assoc_value instead [ 426.790681][ T188] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 426.941460][ T188] usb 6-1: Using ep0 maxpacket: 8 [ 426.946949][ T188] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 426.966345][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.979311][ T5882] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 426.992184][ T188] usb 6-1: config 0 descriptor?? [ 427.014074][ T188] usb 6-1: probing VID:PID(0424:012C) [ 427.033287][ T188] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 427.033309][ T188] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 427.033325][ T188] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 427.033340][ T188] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 427.033356][ T188] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 427.062039][ T8654] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 427.105662][ T8810] netlink: 68 bytes leftover after parsing attributes in process `syz.3.941'. [ 427.150672][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 427.151338][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 427.158508][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.158532][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.158585][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.217455][ T5882] usb 3-1: config 0 descriptor?? [ 427.244126][ T5882] hub 3-1:0.0: USB hub found [ 427.261599][ T188] vub300 6-1:0.0: probe with driver vub300 failed with error -32 [ 427.283635][ T8654] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 427.285402][ T8654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.285426][ T8654] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.285445][ T8654] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 427.285478][ T8654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.364837][ T8654] usb 1-1: config 0 descriptor?? [ 427.447078][ T5882] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 427.476177][ T5882] usbhid 3-1:0.0: can't add hid device: -71 [ 427.476279][ T5882] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 427.522711][ T5882] usb 3-1: USB disconnect, device number 24 [ 430.497834][ T5882] usb 6-1: USB disconnect, device number 18 [ 430.731069][ T8822] syzkaller0: entered promiscuous mode [ 430.731106][ T8822] syzkaller0: entered allmulticast mode [ 430.763814][ T8826] netlink: 60 bytes leftover after parsing attributes in process `syz.1.944'. [ 430.788589][ T8654] usbhid 1-1:0.0: can't add hid device: -71 [ 430.788671][ T8654] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 430.824916][ T8654] usb 1-1: USB disconnect, device number 29 [ 431.090997][ T5884] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 431.130285][ T8824] 9p: Could not find request transport: 1´“&df [ 431.261947][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 431.264568][ T5884] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 431.267115][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.267144][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.267176][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.322338][ T5884] usb 2-1: config 0 descriptor?? [ 431.326788][ T8832] sg_write: data in/out 483340/136 bytes for SCSI command 0x0-- guessing data in; [ 431.326788][ T8832] program syz.0.948 not setting count and/or reply_len properly [ 431.362700][ T5884] hub 2-1:0.0: USB hub found [ 431.576024][ T5884] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 431.609726][ T5884] usbhid 2-1:0.0: can't add hid device: -71 [ 431.609804][ T5884] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 431.644467][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 431.667004][ T5884] usb 2-1: USB disconnect, device number 28 [ 431.737204][ T8834] syz_tun: entered promiscuous mode [ 431.737884][ T8834] macvtap1: entered promiscuous mode [ 431.738034][ T8834] macvtap1: entered allmulticast mode [ 431.738045][ T8834] syz_tun: entered allmulticast mode [ 432.394375][ T31] kauditd_printk_skb: 66 callbacks suppressed [ 432.394392][ T31] audit: type=1326 audit(1791090916.227:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.1.958" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 432.400207][ T31] audit: type=1326 audit(1791090916.227:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.1.958" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 432.400274][ T31] audit: type=1326 audit(1791090916.227:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.1.958" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 432.400312][ T31] audit: type=1326 audit(1791090916.227:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.1.958" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 432.559676][ T31] audit: type=1326 audit(1791090916.377:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.1.958" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 432.626539][ T31] audit: type=1326 audit(1791090916.457:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.1.958" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 432.626587][ T31] audit: type=1326 audit(1791090916.457:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.1.958" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 432.706773][ T31] audit: type=1326 audit(1791090916.537:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.1.958" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 432.707100][ T31] audit: type=1326 audit(1791090916.537:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.1.958" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 432.707146][ T31] audit: type=1326 audit(1791090916.537:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.1.958" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b65d9e159 code=0x7ffc0000 [ 432.910175][ T8830] loop5: detected capacity change from 0 to 40427 [ 432.920278][ T8830] f2fs: Bad value for 'active_logs' [ 433.061162][ T5882] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 433.212019][ T5882] usb 1-1: Using ep0 maxpacket: 8 [ 433.216658][ T5882] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 433.219306][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.253080][ T5882] usb 1-1: config 0 descriptor?? [ 433.277902][ T5882] usb 1-1: probing VID:PID(0424:012C) [ 433.296509][ T5882] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 433.296531][ T5882] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 433.296547][ T5882] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 433.296563][ T5882] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 433.296578][ T5882] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 433.495391][ T5882] vub300 1-1:0.0: probe with driver vub300 failed with error -32 [ 433.671593][ T8654] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 433.826065][ T8654] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 433.831368][ T8654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.867660][ T8654] usb 4-1: config 0 descriptor?? [ 434.088141][ T8654] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 434.368073][ T8654] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 434.368095][ T8654] [drm] Initialized udl on minor 1 [ 434.467913][ T8874] syzkaller0: entered promiscuous mode [ 434.467933][ T8874] syzkaller0: entered allmulticast mode [ 434.532554][ T8654] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 434.557271][ T8874] tipc: Enabled bearer , priority 0 [ 434.604530][ T8874] tipc: Resetting bearer [ 434.604773][ T8654] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 434.647145][ T8873] tipc: Resetting bearer [ 434.664553][ T8654] usb 4-1: USB disconnect, device number 23 [ 434.702740][ T5884] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 434.703229][ T5884] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 434.769462][ T8873] tipc: Disabling bearer [ 435.340808][ T8654] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 435.491657][ T8654] usb 3-1: Using ep0 maxpacket: 8 [ 435.499464][ T8654] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 435.515088][ T8654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.538148][ T8654] usb 3-1: config 0 descriptor?? [ 435.572671][ T8654] usb 3-1: probing VID:PID(0424:012C) [ 435.588086][ T8654] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 435.588108][ T8654] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 435.588124][ T8654] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 435.588146][ T8654] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 435.588162][ T8654] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 435.942088][ T8894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.988963][ T5884] usb 1-1: USB disconnect, device number 30 [ 436.007430][ T8654] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 436.157350][ T8898] syzkaller0: entered promiscuous mode [ 436.157370][ T8898] syzkaller0: entered allmulticast mode [ 436.273411][ T8654] vub300 3-1:0.0: probe with driver vub300 failed with error -32 [ 436.299721][ T8902] nbd: must specify at least one socket [ 436.685097][ T8906] 9p: Could not find request transport: 1´“&df [ 436.816275][ T8910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.323800][ T8913] batman_adv: batadv0: Adding interface: dummy0 [ 437.323817][ T8913] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.323842][ T8913] batman_adv: batadv0: Interface activated: dummy0 [ 437.415521][ T8913] net_ratelimit: 10 callbacks suppressed [ 437.415539][ T8913] batadv0: mtu less than device minimum [ 437.416746][ T8913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.417875][ T8913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.418985][ T8913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.420093][ T8913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.421257][ T8913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.422385][ T8913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.423495][ T8913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.424606][ T8913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 437.425728][ T8913] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.194330][ T188] usb 3-1: USB disconnect, device number 25 [ 438.275995][ T8921] nbd: must specify at least one socket [ 438.597341][ T8908] loop1: detected capacity change from 0 to 40427 [ 438.613214][ T8908] f2fs: Bad value for 'active_logs' [ 439.291884][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.291934][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.810884][ T5882] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 439.973228][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 439.990814][ T5882] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 440.014032][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.043423][ T5882] usb 3-1: config 0 descriptor?? [ 440.078760][ T5882] usb 3-1: probing VID:PID(0424:012C) [ 440.098559][ T5882] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 440.098581][ T5882] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 440.098597][ T5882] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 440.098613][ T5882] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 440.098629][ T5882] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 440.305979][ T5882] vub300 3-1:0.0: probe with driver vub300 failed with error -32 [ 440.354150][ T5882] usb 3-1: USB disconnect, device number 26 [ 440.498049][ T8935] netlink: 132 bytes leftover after parsing attributes in process `syz.3.984'. [ 440.499411][ T8947] syzkaller0: entered promiscuous mode [ 440.499427][ T8947] syzkaller0: entered allmulticast mode [ 441.098607][ T8961] syzkaller0: entered promiscuous mode [ 441.098627][ T8961] syzkaller0: entered allmulticast mode [ 441.133682][ T8961] tipc: Enabled bearer , priority 0 [ 441.166076][ T8961] tipc: Resetting bearer [ 441.234206][ T8960] tipc: Resetting bearer [ 441.349711][ T8960] tipc: Disabling bearer [ 441.501245][ T5882] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 441.561561][ T8654] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 441.653059][ T5882] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.657594][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 441.657619][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.657638][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.657671][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.723484][ T8654] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 441.739985][ T8654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.749643][ T5882] usb 2-1: config 0 descriptor?? [ 441.783853][ T8654] usb 4-1: config 0 descriptor?? [ 442.036088][ T8654] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 442.136415][ T8972] 9p: Could not find request transport: 1´“&df [ 442.228942][ T5882] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.228967][ T5882] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.228984][ T5882] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.229020][ T5882] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.229037][ T5882] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 442.329628][ T5882] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 442.384546][ T8654] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 442.384568][ T8654] [drm] Initialized udl on minor 1 [ 442.508497][ T5882] usb 2-1: USB disconnect, device number 29 [ 442.542204][ T8654] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 442.542536][ T8654] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 442.591696][ T5884] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 442.595361][ T5884] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 442.597644][ T5884] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 442.638106][ T8654] usb 4-1: USB disconnect, device number 24 [ 442.806887][ T8975] fido_id[8975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 442.891107][ T5884] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 443.045362][ T5884] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 443.064772][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.064799][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.064818][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 443.064852][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.126879][ T5884] usb 3-1: config 0 descriptor?? [ 443.472604][ T8981] batman_adv: batadv0: Adding interface: dummy0 [ 443.472620][ T8981] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.472646][ T8981] batman_adv: batadv0: Interface activated: dummy0 [ 443.562150][ T8981] net_ratelimit: 11 callbacks suppressed [ 443.562193][ T8981] batadv0: mtu less than device minimum [ 443.563314][ T8981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 443.564447][ T8981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 443.565575][ T8981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 443.566689][ T8981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 443.567802][ T8981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 443.568915][ T8981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 443.570082][ T8981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 443.571267][ T8981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 443.572420][ T8981] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.017872][ T8974] loop5: detected capacity change from 0 to 40427 [ 444.034065][ T8974] f2fs: Bad value for 'active_logs' [ 445.470917][ T188] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 445.531343][ T8654] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 445.623500][ T188] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 445.637463][ T188] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 445.637484][ T188] usb 1-1: config 0 has no interface number 0 [ 445.637516][ T188] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.673250][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.673273][ T188] usb 1-1: Product: syz [ 445.673286][ T188] usb 1-1: Manufacturer: syz [ 445.673298][ T188] usb 1-1: SerialNumber: syz [ 445.707042][ T8654] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 445.730246][ T8654] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 445.730303][ T8654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 445.730338][ T8654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.742388][ T5882] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 445.780285][ T188] usb 1-1: config 0 descriptor?? [ 445.809908][ T8654] usb 5-1: config 0 descriptor?? [ 445.824501][ T188] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 445.923683][ T5882] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 445.942117][ T5882] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 445.942139][ T5882] usb 6-1: config 0 has no interface number 0 [ 445.942181][ T5882] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.991622][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.991646][ T5882] usb 6-1: Product: syz [ 445.991659][ T5882] usb 6-1: Manufacturer: syz [ 445.991671][ T5882] usb 6-1: SerialNumber: syz [ 446.030038][ T5882] usb 6-1: config 0 descriptor?? [ 446.140954][ T5882] yurex 6-1:0.50: USB YUREX device now attached to Yurex #1 [ 446.388610][ T188] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 446.558335][ T188] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.560216][ T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 446.560241][ T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.560292][ T188] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.560327][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.629857][ T188] usb 4-1: config 0 descriptor?? [ 446.876964][ T5884] usbhid 3-1:0.0: can't add hid device: -71 [ 446.877101][ T5884] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 446.899560][ T8654] ath6kl: Failed to submit usb control message: -110 [ 446.899636][ T8654] ath6kl: unable to send the bmi data to the device: -110 [ 446.899648][ T8654] ath6kl: Unable to send get target info: -110 [ 446.916798][ T8654] ath6kl: Failed to init ath6kl core: -110 [ 446.953130][ T8654] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 446.984844][ T5884] usb 3-1: USB disconnect, device number 27 [ 447.195568][ T188] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 447.195595][ T188] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 447.195612][ T188] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 447.195628][ T188] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 447.195645][ T188] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 447.259092][ T9026] nbd: must specify at least one socket [ 447.617367][ T8654] usb 5-1: USB disconnect, device number 28 [ 448.110878][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 448.110895][ T31] audit: type=1326 audit(1791090931.947:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.3.1012" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 448.112915][ T31] audit: type=1326 audit(1791090931.947:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.3.1012" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 448.117535][ T31] audit: type=1326 audit(1791090931.947:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.3.1012" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 448.118265][ T31] audit: type=1326 audit(1791090931.947:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.3.1012" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 448.118799][ T31] audit: type=1326 audit(1791090931.947:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.3.1012" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 448.313818][ T8654] usb 6-1: USB disconnect, device number 19 [ 448.343017][ T31] audit: type=1326 audit(1791090932.177:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.3.1012" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 448.345490][ T31] audit: type=1326 audit(1791090932.177:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.3.1012" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 448.405718][ T8654] yurex 6-1:0.50: USB YUREX #1 now disconnected [ 448.448919][ T31] audit: type=1326 audit(1791090932.277:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.3.1012" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 448.448987][ T31] audit: type=1326 audit(1791090932.277:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.3.1012" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 448.449025][ T31] audit: type=1326 audit(1791090932.277:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.3.1012" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 448.550914][ T188] plantronics 0003:047F:FFFF.000A: hiddev2,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 448.599686][ T188] usb 4-1: USB disconnect, device number 25 [ 448.709787][ T5882] usb 1-1: USB disconnect, device number 31 [ 448.729827][ T5882] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 448.974860][ T9032] fido_id[9032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 449.237521][ T9043] net_ratelimit: 11 callbacks suppressed [ 449.237539][ T9043] Set syz0 is full, maxelem 0 reached [ 449.336529][ T9042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.008012][ T9055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.832138][ T5882] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 450.980656][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 450.984010][ T5882] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 450.986923][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.026269][ T5882] usb 4-1: config 0 descriptor?? [ 451.046691][ T5882] usb 4-1: probing VID:PID(0424:012C) [ 451.065842][ T5882] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 451.065865][ T5882] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 451.065881][ T5882] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 451.065897][ T5882] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 451.065913][ T5882] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 451.253562][ T8654] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 451.324571][ T5882] vub300 4-1:0.0: probe with driver vub300 failed with error -71 [ 451.351127][ T9072] nbd: must specify at least one socket [ 451.357472][ T5882] usb 4-1: USB disconnect, device number 26 [ 451.404572][ T8654] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 451.431788][ T8654] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.431815][ T8654] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.431835][ T8654] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 451.431869][ T8654] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.505544][ T8654] usb 6-1: config 0 descriptor?? [ 451.633261][ T5827] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 451.805948][ T5827] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 451.823259][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 451.823285][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.823304][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 451.823338][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.856740][ T5827] usb 2-1: config 0 descriptor?? [ 452.534226][ T5827] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 452.534252][ T5827] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 452.534269][ T5827] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 452.534307][ T5827] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 452.534323][ T5827] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 452.642857][ T5827] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 452.822865][ T8654] usbhid 6-1:0.0: can't add hid device: -71 [ 452.822949][ T8654] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 452.862944][ T5827] usb 2-1: USB disconnect, device number 30 [ 452.866658][ T8654] usb 6-1: USB disconnect, device number 20 [ 453.086317][ T9076] fido_id[9076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 453.157865][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'. [ 453.157888][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'. [ 453.442883][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.443173][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.567735][ T9075] batman_adv: batadv0: Interface deactivated: dummy0 [ 453.942006][ T9075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.976150][ T9075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.123211][ T9086] tipc: Enabling of bearer rejected, failed to enable media [ 455.143579][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.144344][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.144379][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.144410][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.564359][ T9130] nbd: must specify at least one socket [ 455.864294][ T5344] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 455.934465][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 455.934482][ T31] audit: type=1326 audit(1791090939.767:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.3.1038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 455.936372][ T31] audit: type=1326 audit(1791090939.767:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.3.1038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 456.022483][ T31] audit: type=1326 audit(1791090939.847:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.3.1038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 456.022530][ T31] audit: type=1326 audit(1791090939.847:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.3.1038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 456.022569][ T31] audit: type=1326 audit(1791090939.847:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.3.1038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 456.056365][ T5344] usb 1-1: Using ep0 maxpacket: 8 [ 456.056776][ T31] audit: type=1326 audit(1791090939.857:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.3.1038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 456.163498][ T5344] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 456.166377][ T5344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.198066][ T5344] usb 1-1: config 0 descriptor?? [ 456.220744][ T31] audit: type=1326 audit(1791090940.047:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.3.1038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 456.220788][ T31] audit: type=1326 audit(1791090940.057:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.3.1038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 456.293191][ T5344] usb 1-1: probing VID:PID(0424:012C) [ 456.307760][ T31] audit: type=1326 audit(1791090940.137:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.3.1038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 456.307804][ T31] audit: type=1326 audit(1791090940.137:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.3.1038" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80dd9e159 code=0x7ffc0000 [ 456.309480][ T5344] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 456.309500][ T5344] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 456.309516][ T5344] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 456.309532][ T5344] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 456.309547][ T5344] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 456.659741][ T5344] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 456.874142][ T5344] usb 1-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 457.031051][ T188] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 457.052891][ T5827] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 457.191135][ T188] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 457.194866][ T188] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 457.194888][ T188] usb 6-1: config 0 has no interface number 0 [ 457.194921][ T188] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.200344][ T188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.200365][ T188] usb 6-1: Product: syz [ 457.200377][ T188] usb 6-1: Manufacturer: syz [ 457.200390][ T188] usb 6-1: SerialNumber: syz [ 457.222304][ T5827] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.274560][ T188] usb 6-1: config 0 descriptor?? [ 457.276922][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.276947][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.276966][ T5827] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 457.277001][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.364038][ T5827] usb 3-1: config 0 descriptor?? [ 457.381032][ T188] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 457.386739][ T9150] nbd: must specify at least one socket [ 458.830305][ T5344] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-110 [ 459.440684][ T5344] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 459.508797][ T5344] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 460.378682][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 460.708670][ T188] usb 1-1: USB disconnect, device number 32 [ 460.731676][ T5884] usb 6-1: USB disconnect, device number 21 [ 460.783167][ T5884] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 461.135718][ T5827] usbhid 3-1:0.0: can't add hid device: -71 [ 461.135801][ T5827] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 461.166997][ T5827] usb 3-1: USB disconnect, device number 28 [ 461.315568][ T188] USB vub300 remote SDIO host controller[0] now disconnected [ 461.427797][ T9164] syzkaller0: entered promiscuous mode [ 461.427817][ T9164] syzkaller0: entered allmulticast mode [ 461.520067][ T9169] nbd: must specify at least one socket [ 461.690819][ C0] [ 461.693660][ C0] ============================= [ 461.698512][ C0] WARNING: suspicious RCU usage [ 461.703425][ C0] syzkaller #0 Tainted: G L [ 461.709390][ C0] ----------------------------- [ 461.714231][ C0] kernel/sched/core.c:9226 Illegal context switch in RCU-sched read-side critical section! [ 461.724213][ C0] [ 461.724213][ C0] other info that might help us debug this: [ 461.724213][ C0] [ 461.734471][ C0] [ 461.734471][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 461.742542][ C0] locks held by syz.0.1046/9164: 5, last CPU#0: [ 461.748772][ C0] #0: ffff888033424080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 461.757847][ C0] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 461.767367][ C0] #2: ffff8880750df978 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 461.777850][ C0] #3: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 461.787271][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 461.797736][ C0] [ 461.797736][ C0] stack backtrace: [ 461.803624][ C0] CPU: 0 UID: 0 PID: 9164 Comm: syz.0.1046 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.814472][ C0] Tainted: [L]=SOFTLOCKUP [ 461.818767][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 461.828794][ C0] Call Trace: [ 461.832051][ C0] [ 461.834870][ C0] dump_stack_lvl+0xe8/0x150 [ 461.839450][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 461.844808][ C0] __might_resched+0xbb/0x4c0 [ 461.849476][ C0] ? __cancel_work_sync+0x5c/0x110 [ 461.854578][ C0] __cancel_work_sync+0x6d/0x110 [ 461.859505][ C0] mmc_free_host+0x19/0x40 [ 461.863905][ C0] call_timer_fn+0x18d/0x5f0 [ 461.868479][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 461.875131][ C0] ? call_timer_fn+0xd5/0x5f0 [ 461.879790][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 461.884891][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 461.890074][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 461.896729][ C0] __run_timer_base+0x652/0x8b0 [ 461.901572][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.907202][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 461.912560][ C0] ? ktime_get+0x1f5/0x220 [ 461.916956][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.922569][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.928196][ C0] run_timer_softirq+0xb7/0x170 [ 461.933032][ C0] handle_softirqs+0x226/0x860 [ 461.937802][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 461.942557][ C0] __irq_exit_rcu+0xcb/0x220 [ 461.947130][ C0] irq_exit_rcu+0x9/0x30 [ 461.951357][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 461.956976][ C0] [ 461.959879][ C0] [ 461.962786][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 461.968756][ C0] RIP: 0010:pfn_valid+0x11f/0x490 [ 461.973761][ C0] Code: 74 7d e8 44 f4 83 ff 4d 85 ff 75 11 e8 3a f4 83 ff eb 3d e8 33 f4 83 ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 97 05 f4 ff 49 8b 2f 48 89 ee 48 83 e6 02 31 ff [ 461.993346][ C0] RSP: 0018:ffffc90004867318 EFLAGS: 00000246 [ 461.999402][ C0] RAX: ffffffff82441b0c RBX: ffffffff82441aca RCX: ffff88802373be80 [ 462.007350][ C0] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 462.015297][ C0] RBP: 0000000000000001 R08: ffffffff82441aca R09: 0000000000000000 [ 462.023243][ C0] R10: dffffc0000000000 R11: fffff940002f5e71 R12: dffffc0000000000 [ 462.031191][ C0] R13: 1ffff11027fc0e2c R14: 000000000005ebce R15: ffff88813fe07160 [ 462.039141][ C0] ? pfn_valid+0xba/0x490 [ 462.043463][ C0] ? pfn_valid+0xba/0x490 [ 462.047791][ C0] ? pfn_valid+0xfc/0x490 [ 462.052111][ C0] ? pfn_valid+0xfc/0x490 [ 462.056426][ C0] page_table_check_clear+0x21/0x500 [ 462.061710][ C0] ? vm_normal_page+0x13c/0x2b0 [ 462.066550][ C0] __zap_vma_range+0x3a12/0x4f80 [ 462.071507][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.077123][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 462.082397][ C0] ? mas_find+0x6d6/0xcb0 [ 462.086731][ C0] unmap_vmas+0x390/0x550 [ 462.091042][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.096663][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 462.101506][ C0] ? mas_next_slot+0xc91/0xd70 [ 462.106273][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.111890][ C0] exit_mmap+0x293/0x9f0 [ 462.116114][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 462.120875][ C0] ? __pfx_exit_aio+0x10/0x10 [ 462.125539][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.131153][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 462.136343][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.141963][ C0] __mmput+0x118/0x420 [ 462.146020][ C0] exit_mm+0x18e/0x240 [ 462.150068][ C0] do_exit+0x6cd/0x2360 [ 462.154222][ C0] ? __pfx_do_exit+0x10/0x10 [ 462.158792][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 462.163804][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.169425][ C0] do_group_exit+0x22d/0x2f0 [ 462.173992][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.179177][ C0] get_signal+0x121b/0x12c0 [ 462.183685][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 462.189220][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 462.195376][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 462.200746][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.206358][ C0] ? rcu_is_watching+0x16/0xb0 [ 462.211118][ C0] do_syscall_64+0x328/0x520 [ 462.215697][ C0] ? trace_irq_disable+0x3b/0x140 [ 462.220698][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.226763][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.232635][ C0] RIP: 0033:0x7f314dd9e159 [ 462.237027][ C0] Code: Unable to access opcode bytes at 0x7f314dd9e12f. [ 462.244012][ C0] RSP: 002b:00007f314ecf90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 462.252402][ C0] RAX: fffffffffffffe00 RBX: 00007f314e025fa8 RCX: 00007f314dd9e159 [ 462.260355][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f314e025fa8 [ 462.268302][ C0] RBP: 00007f314e025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 462.276248][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.284191][ C0] R13: 00007f314e026038 R14: 00007ffcb7e75760 R15: 00007ffcb7e75848 [ 462.292154][ C0] [ 462.295225][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 462.295238][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9164, name: syz.0.1046 [ 462.295253][ C0] preempt_count: 102, expected: 0 [ 462.295262][ C0] RCU nest depth: 1, expected: 0 [ 462.295272][ C0] locks held by syz.0.1046/9164: 5, last CPU#0: [ 462.295285][ C0] #0: ffff888033424080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 462.295336][ C0] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 462.295393][ C0] #2: ffff8880750df978 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 462.295456][ C0] #3: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 462.295509][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 462.295563][ C0] Preemption disabled at: [ 462.295568][ C0] [<0000000000000000>] 0x0 [ 462.295591][ C0] CPU: 0 UID: 0 PID: 9164 Comm: syz.0.1046 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.295615][ C0] Tainted: [L]=SOFTLOCKUP [ 462.295622][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 462.295634][ C0] Call Trace: [ 462.295643][ C0] [ 462.295651][ C0] dump_stack_lvl+0xe8/0x150 [ 462.295680][ C0] __might_resched+0x36a/0x4c0 [ 462.295715][ C0] __cancel_work_sync+0x6d/0x110 [ 462.295748][ C0] mmc_free_host+0x19/0x40 [ 462.295772][ C0] call_timer_fn+0x18d/0x5f0 [ 462.295797][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 462.295818][ C0] ? call_timer_fn+0xd5/0x5f0 [ 462.295842][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 462.295877][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.295902][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 462.295925][ C0] __run_timer_base+0x652/0x8b0 [ 462.295947][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.295982][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 462.296009][ C0] ? ktime_get+0x1f5/0x220 [ 462.296030][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.296051][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.296080][ C0] run_timer_softirq+0xb7/0x170 [ 462.296103][ C0] handle_softirqs+0x226/0x860 [ 462.296132][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 462.296164][ C0] __irq_exit_rcu+0xcb/0x220 [ 462.296196][ C0] irq_exit_rcu+0x9/0x30 [ 462.296219][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 462.296247][ C0] [ 462.296254][ C0] [ 462.296262][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 462.296283][ C0] RIP: 0010:pfn_valid+0x11f/0x490 [ 462.296308][ C0] Code: 74 7d e8 44 f4 83 ff 4d 85 ff 75 11 e8 3a f4 83 ff eb 3d e8 33 f4 83 ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 97 05 f4 ff 49 8b 2f 48 89 ee 48 83 e6 02 31 ff [ 462.296323][ C0] RSP: 0018:ffffc90004867318 EFLAGS: 00000246 [ 462.296340][ C0] RAX: ffffffff82441b0c RBX: ffffffff82441aca RCX: ffff88802373be80 [ 462.296354][ C0] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 462.296368][ C0] RBP: 0000000000000001 R08: ffffffff82441aca R09: 0000000000000000 [ 462.296380][ C0] R10: dffffc0000000000 R11: fffff940002f5e71 R12: dffffc0000000000 [ 462.296394][ C0] R13: 1ffff11027fc0e2c R14: 000000000005ebce R15: ffff88813fe07160 [ 462.296412][ C0] ? pfn_valid+0xba/0x490 [ 462.296436][ C0] ? pfn_valid+0xba/0x490 [ 462.296457][ C0] ? pfn_valid+0xfc/0x490 [ 462.296486][ C0] ? pfn_valid+0xfc/0x490 [ 462.296511][ C0] page_table_check_clear+0x21/0x500 [ 462.296535][ C0] ? vm_normal_page+0x13c/0x2b0 [ 462.296561][ C0] __zap_vma_range+0x3a12/0x4f80 [ 462.296621][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.296648][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 462.296681][ C0] ? mas_find+0x6d6/0xcb0 [ 462.296714][ C0] unmap_vmas+0x390/0x550 [ 462.296736][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.296765][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 462.296786][ C0] ? mas_next_slot+0xc91/0xd70 [ 462.296830][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.296856][ C0] exit_mmap+0x293/0x9f0 [ 462.296876][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 462.296916][ C0] ? __pfx_exit_aio+0x10/0x10 [ 462.296946][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.296967][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 462.296995][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.297021][ C0] __mmput+0x118/0x420 [ 462.297048][ C0] exit_mm+0x18e/0x240 [ 462.297070][ C0] do_exit+0x6cd/0x2360 [ 462.297097][ C0] ? __pfx_do_exit+0x10/0x10 [ 462.297119][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 462.297148][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.297177][ C0] do_group_exit+0x22d/0x2f0 [ 462.297200][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 462.297228][ C0] get_signal+0x121b/0x12c0 [ 462.297272][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 462.297304][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 462.297349][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 462.297370][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 462.297392][ C0] ? rcu_is_watching+0x16/0xb0 [ 462.297420][ C0] do_syscall_64+0x328/0x520 [ 462.297448][ C0] ? trace_irq_disable+0x3b/0x140 [ 462.297468][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.297493][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.297512][ C0] RIP: 0033:0x7f314dd9e159 [ 462.297528][ C0] Code: Unable to access opcode bytes at 0x7f314dd9e12f. [ 462.297537][ C0] RSP: 002b:00007f314ecf90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 462.297556][ C0] RAX: fffffffffffffe00 RBX: 00007f314e025fa8 RCX: 00007f314dd9e159 [ 462.297569][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f314e025fa8 [ 462.297582][ C0] RBP: 00007f314e025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 462.297594][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.297605][ C0] R13: 00007f314e026038 R14: 00007ffcb7e75760 R15: 00007ffcb7e75848 [ 462.297634][ C0] [ 462.297767][ C0] [ 462.871869][ C0] ============================= [ 462.876688][ C0] WARNING: suspicious RCU usage [ 462.881534][ C0] syzkaller #0 Tainted: G W L [ 462.887506][ C0] ----------------------------- [ 462.892354][ C0] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 462.904325][ C0] [ 462.904325][ C0] other info that might help us debug this: [ 462.904325][ C0] [ 462.914550][ C0] [ 462.914550][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 462.922612][ C0] locks held by syz.0.1046/9164: 5, last CPU#0: [ 462.928824][ C0] #0: ffff888033424080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 462.937895][ C0] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 462.947407][ C0] #2: ffff8880750df978 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 462.957882][ C0] #3: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 462.967307][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 462.977769][ C0] [ 462.977769][ C0] stack backtrace: [ 462.983656][ C0] CPU: 0 UID: 0 PID: 9164 Comm: syz.0.1046 Tainted: G W L syzkaller #0 PREEMPT(full) [ 462.994484][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 462.999649][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 463.009676][ C0] Call Trace: [ 463.012936][ C0] [ 463.015760][ C0] dump_stack_lvl+0xe8/0x150 [ 463.020346][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 463.025703][ C0] __synchronize_srcu+0x157/0x2f0 [ 463.030724][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 463.036250][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 463.041263][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.046885][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.052497][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 463.058023][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.063634][ C0] ? synchronize_srcu+0x20a/0x260 [ 463.068639][ C0] wakeup_source_unregister+0x129/0x3f0 [ 463.074170][ C0] mmc_host_classdev_release+0x47/0x100 [ 463.079704][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 463.085841][ C0] device_release+0xc4/0x1f0 [ 463.090420][ C0] kobject_put+0x222/0x550 [ 463.094814][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 463.099565][ C0] call_timer_fn+0x18d/0x5f0 [ 463.104143][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 463.110799][ C0] ? call_timer_fn+0xd5/0x5f0 [ 463.115461][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 463.120564][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 463.125746][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 463.132403][ C0] __run_timer_base+0x652/0x8b0 [ 463.137235][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.142859][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 463.148217][ C0] ? ktime_get+0x1f5/0x220 [ 463.152610][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.158222][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.163842][ C0] run_timer_softirq+0xb7/0x170 [ 463.168678][ C0] handle_softirqs+0x226/0x860 [ 463.173427][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 463.178183][ C0] __irq_exit_rcu+0xcb/0x220 [ 463.182760][ C0] irq_exit_rcu+0x9/0x30 [ 463.186986][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 463.192602][ C0] [ 463.195507][ C0] [ 463.198414][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 463.204373][ C0] RIP: 0010:pfn_valid+0x11f/0x490 [ 463.209379][ C0] Code: 74 7d e8 44 f4 83 ff 4d 85 ff 75 11 e8 3a f4 83 ff eb 3d e8 33 f4 83 ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 97 05 f4 ff 49 8b 2f 48 89 ee 48 83 e6 02 31 ff [ 463.228966][ C0] RSP: 0018:ffffc90004867318 EFLAGS: 00000246 [ 463.235012][ C0] RAX: ffffffff82441b0c RBX: ffffffff82441aca RCX: ffff88802373be80 [ 463.242971][ C0] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 463.250917][ C0] RBP: 0000000000000001 R08: ffffffff82441aca R09: 0000000000000000 [ 463.258864][ C0] R10: dffffc0000000000 R11: fffff940002f5e71 R12: dffffc0000000000 [ 463.266812][ C0] R13: 1ffff11027fc0e2c R14: 000000000005ebce R15: ffff88813fe07160 [ 463.274786][ C0] ? pfn_valid+0xba/0x490 [ 463.279108][ C0] ? pfn_valid+0xba/0x490 [ 463.283435][ C0] ? pfn_valid+0xfc/0x490 [ 463.287753][ C0] ? pfn_valid+0xfc/0x490 [ 463.292065][ C0] page_table_check_clear+0x21/0x500 [ 463.297331][ C0] ? vm_normal_page+0x13c/0x2b0 [ 463.302166][ C0] __zap_vma_range+0x3a12/0x4f80 [ 463.307132][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.312751][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 463.318025][ C0] ? mas_find+0x6d6/0xcb0 [ 463.322344][ C0] unmap_vmas+0x390/0x550 [ 463.326668][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.332289][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 463.337117][ C0] ? mas_next_slot+0xc91/0xd70 [ 463.341884][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.347500][ C0] exit_mmap+0x293/0x9f0 [ 463.351721][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 463.356489][ C0] ? __pfx_exit_aio+0x10/0x10 [ 463.361159][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.366778][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 463.371961][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.377579][ C0] __mmput+0x118/0x420 [ 463.381634][ C0] exit_mm+0x18e/0x240 [ 463.385684][ C0] do_exit+0x6cd/0x2360 [ 463.389825][ C0] ? __pfx_do_exit+0x10/0x10 [ 463.394396][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 463.399410][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.405046][ C0] do_group_exit+0x22d/0x2f0 [ 463.409615][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 463.414813][ C0] get_signal+0x121b/0x12c0 [ 463.419320][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 463.424855][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 463.431017][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 463.436373][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.441984][ C0] ? rcu_is_watching+0x16/0xb0 [ 463.446734][ C0] do_syscall_64+0x328/0x520 [ 463.451313][ C0] ? trace_irq_disable+0x3b/0x140 [ 463.456315][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.462367][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.468240][ C0] RIP: 0033:0x7f314dd9e159 [ 463.472643][ C0] Code: Unable to access opcode bytes at 0x7f314dd9e12f. [ 463.479643][ C0] RSP: 002b:00007f314ecf90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 463.488034][ C0] RAX: fffffffffffffe00 RBX: 00007f314e025fa8 RCX: 00007f314dd9e159 [ 463.495982][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f314e025fa8 [ 463.503928][ C0] RBP: 00007f314e025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 463.511873][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.519818][ C0] R13: 00007f314e026038 R14: 00007ffcb7e75760 R15: 00007ffcb7e75848 [ 463.527802][ C0] [ 463.530875][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 463.530889][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9164, name: syz.0.1046 [ 463.530904][ C0] preempt_count: 102, expected: 0 [ 463.530914][ C0] RCU nest depth: 1, expected: 0 [ 463.530923][ C0] locks held by syz.0.1046/9164: 5, last CPU#0: [ 463.530937][ C0] #0: ffff888033424080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 463.530990][ C0] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 463.531047][ C0] #2: ffff8880750df978 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 463.531110][ C0] #3: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 463.531163][ C0] #4: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 463.531223][ C0] Preemption disabled at: [ 463.531228][ C0] [<0000000000000000>] 0x0 [ 463.531252][ C0] CPU: 0 UID: 0 PID: 9164 Comm: syz.0.1046 Tainted: G W L syzkaller #0 PREEMPT(full) [ 463.531278][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 463.531286][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 463.531298][ C0] Call Trace: [ 463.531307][ C0] [ 463.531315][ C0] dump_stack_lvl+0xe8/0x150 [ 463.531344][ C0] __might_resched+0x36a/0x4c0 [ 463.531380][ C0] __synchronize_srcu+0x1a1/0x2f0 [ 463.531404][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 463.531424][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 463.531462][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.531485][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 463.531508][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.531530][ C0] ? synchronize_srcu+0x20a/0x260 [ 463.531553][ C0] wakeup_source_unregister+0x129/0x3f0 [ 463.531582][ C0] mmc_host_classdev_release+0x47/0x100 [ 463.531610][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 463.531635][ C0] device_release+0xc4/0x1f0 [ 463.531666][ C0] kobject_put+0x222/0x550 [ 463.531687][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 463.531719][ C0] call_timer_fn+0x18d/0x5f0 [ 463.531744][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 463.531764][ C0] ? call_timer_fn+0xd5/0x5f0 [ 463.531788][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 463.531822][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 463.531847][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 463.531870][ C0] __run_timer_base+0x652/0x8b0 [ 463.531893][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.531928][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 463.531954][ C0] ? ktime_get+0x1f5/0x220 [ 463.531975][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.531997][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.532026][ C0] run_timer_softirq+0xb7/0x170 [ 463.532050][ C0] handle_softirqs+0x226/0x860 [ 463.532079][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 463.532111][ C0] __irq_exit_rcu+0xcb/0x220 [ 463.532138][ C0] irq_exit_rcu+0x9/0x30 [ 463.532161][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 463.532193][ C0] [ 463.532200][ C0] [ 463.532208][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 463.532230][ C0] RIP: 0010:pfn_valid+0x11f/0x490 [ 463.532253][ C0] Code: 74 7d e8 44 f4 83 ff 4d 85 ff 75 11 e8 3a f4 83 ff eb 3d e8 33 f4 83 ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 97 05 f4 ff 49 8b 2f 48 89 ee 48 83 e6 02 31 ff [ 463.532269][ C0] RSP: 0018:ffffc90004867318 EFLAGS: 00000246 [ 463.532285][ C0] RAX: ffffffff82441b0c RBX: ffffffff82441aca RCX: ffff88802373be80 [ 463.532300][ C0] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 463.532314][ C0] RBP: 0000000000000001 R08: ffffffff82441aca R09: 0000000000000000 [ 463.532326][ C0] R10: dffffc0000000000 R11: fffff940002f5e71 R12: dffffc0000000000 [ 463.532340][ C0] R13: 1ffff11027fc0e2c R14: 000000000005ebce R15: ffff88813fe07160 [ 463.532358][ C0] ? pfn_valid+0xba/0x490 [ 463.532381][ C0] ? pfn_valid+0xba/0x490 [ 463.532403][ C0] ? pfn_valid+0xfc/0x490 [ 463.532431][ C0] ? pfn_valid+0xfc/0x490 [ 463.532457][ C0] page_table_check_clear+0x21/0x500 [ 463.532480][ C0] ? vm_normal_page+0x13c/0x2b0 [ 463.532506][ C0] __zap_vma_range+0x3a12/0x4f80 [ 463.532566][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.532593][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 463.532626][ C0] ? mas_find+0x6d6/0xcb0 [ 463.532658][ C0] unmap_vmas+0x390/0x550 [ 463.532680][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.532710][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 463.532730][ C0] ? mas_next_slot+0xc91/0xd70 [ 463.532774][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.532801][ C0] exit_mmap+0x293/0x9f0 [ 463.532821][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 463.532861][ C0] ? __pfx_exit_aio+0x10/0x10 [ 463.532891][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.532913][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 463.532940][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.532967][ C0] __mmput+0x118/0x420 [ 463.532994][ C0] exit_mm+0x18e/0x240 [ 463.533015][ C0] do_exit+0x6cd/0x2360 [ 463.533043][ C0] ? __pfx_do_exit+0x10/0x10 [ 463.533066][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 463.533094][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.533123][ C0] do_group_exit+0x22d/0x2f0 [ 463.533142][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 463.533170][ C0] get_signal+0x121b/0x12c0 [ 463.533218][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 463.533250][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 463.533295][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 463.533316][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 463.533338][ C0] ? rcu_is_watching+0x16/0xb0 [ 463.533366][ C0] do_syscall_64+0x328/0x520 [ 463.533393][ C0] ? trace_irq_disable+0x3b/0x140 [ 463.533414][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.533438][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.533457][ C0] RIP: 0033:0x7f314dd9e159 [ 463.533473][ C0] Code: Unable to access opcode bytes at 0x7f314dd9e12f. [ 463.533483][ C0] RSP: 002b:00007f314ecf90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 463.533501][ C0] RAX: fffffffffffffe00 RBX: 00007f314e025fa8 RCX: 00007f314dd9e159 [ 463.533515][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f314e025fa8 [ 463.533527][ C0] RBP: 00007f314e025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 463.533539][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.533551][ C0] R13: 00007f314e026038 R14: 00007ffcb7e75760 R15: 00007ffcb7e75848 [ 463.533579][ C0] [ 463.533590][ C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffc90004860000, but annotated. [ 463.534197][ C0] ------------[ cut here ]------------ [ 463.534205][ C0] 1 [ 463.534210][ C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: syz.0.1046/9164 [ 464.190901][ C0] Modules linked in: [ 464.194785][ C0] CPU: 0 UID: 0 PID: 9164 Comm: syz.0.1046 Tainted: G W L syzkaller #0 PREEMPT(full) [ 464.205610][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 464.210772][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 464.220802][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 464.226687][ C0] Code: 24 fc cc 41 ff c7 44 89 3d 49 10 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 8d 62 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 e1 6a 6d 0a 3b 05 df [ 464.246266][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 464.252310][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 2f18a0552711cc00 [ 464.260258][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 464.268201][ C0] RBP: ffff88802373bea0 R08: 0000000000000100 R09: 1ffffffff1ed22f4 [ 464.276149][ C0] R10: dffffc0000000000 R11: fffffbfff1ed22f5 R12: 1ffff92000000f4c [ 464.284099][ C0] R13: ffff888074248a10 R14: dffffc0000000000 R15: 0000000000000001 [ 464.292048][ C0] FS: 0000000000000000(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 464.300950][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.307527][ C0] CR2: 00007fb0336d9688 CR3: 00000000588ab000 CR4: 0000000000350ef0 [ 464.315476][ C0] Call Trace: [ 464.318730][ C0] [ 464.321554][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.327185][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 464.332724][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 464.337729][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 464.343251][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 464.348270][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.353883][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 464.359410][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.365020][ C0] ? synchronize_srcu+0x20a/0x260 [ 464.370046][ C0] wakeup_source_unregister+0x129/0x3f0 [ 464.375578][ C0] mmc_host_classdev_release+0x47/0x100 [ 464.381108][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 464.387244][ C0] device_release+0xc4/0x1f0 [ 464.391825][ C0] kobject_put+0x222/0x550 [ 464.396220][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 464.400971][ C0] call_timer_fn+0x18d/0x5f0 [ 464.405543][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 464.412197][ C0] ? call_timer_fn+0xd5/0x5f0 [ 464.416855][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 464.421960][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.427140][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 464.433798][ C0] __run_timer_base+0x652/0x8b0 [ 464.438628][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.444252][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 464.449610][ C0] ? ktime_get+0x1f5/0x220 [ 464.454004][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.459613][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.465232][ C0] run_timer_softirq+0xb7/0x170 [ 464.470066][ C0] handle_softirqs+0x226/0x860 [ 464.474817][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 464.479570][ C0] __irq_exit_rcu+0xcb/0x220 [ 464.484144][ C0] irq_exit_rcu+0x9/0x30 [ 464.488369][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 464.493987][ C0] [ 464.496891][ C0] [ 464.499797][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 464.505755][ C0] RIP: 0010:pfn_valid+0x11f/0x490 [ 464.510761][ C0] Code: 74 7d e8 44 f4 83 ff 4d 85 ff 75 11 e8 3a f4 83 ff eb 3d e8 33 f4 83 ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 97 05 f4 ff 49 8b 2f 48 89 ee 48 83 e6 02 31 ff [ 464.530341][ C0] RSP: 0018:ffffc90004867318 EFLAGS: 00000246 [ 464.536386][ C0] RAX: ffffffff82441b0c RBX: ffffffff82441aca RCX: ffff88802373be80 [ 464.544345][ C0] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 464.552292][ C0] RBP: 0000000000000001 R08: ffffffff82441aca R09: 0000000000000000 [ 464.560238][ C0] R10: dffffc0000000000 R11: fffff940002f5e71 R12: dffffc0000000000 [ 464.568184][ C0] R13: 1ffff11027fc0e2c R14: 000000000005ebce R15: ffff88813fe07160 [ 464.576139][ C0] ? pfn_valid+0xba/0x490 [ 464.580455][ C0] ? pfn_valid+0xba/0x490 [ 464.584764][ C0] ? pfn_valid+0xfc/0x490 [ 464.589079][ C0] ? pfn_valid+0xfc/0x490 [ 464.593391][ C0] page_table_check_clear+0x21/0x500 [ 464.598658][ C0] ? vm_normal_page+0x13c/0x2b0 [ 464.603493][ C0] __zap_vma_range+0x3a12/0x4f80 [ 464.608452][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.614071][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 464.619349][ C0] ? mas_find+0x6d6/0xcb0 [ 464.623668][ C0] unmap_vmas+0x390/0x550 [ 464.627993][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.633627][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 464.638457][ C0] ? mas_next_slot+0xc91/0xd70 [ 464.643227][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.648843][ C0] exit_mmap+0x293/0x9f0 [ 464.653064][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 464.657825][ C0] ? __pfx_exit_aio+0x10/0x10 [ 464.662489][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.668099][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 464.673285][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.678899][ C0] __mmput+0x118/0x420 [ 464.682952][ C0] exit_mm+0x18e/0x240 [ 464.687001][ C0] do_exit+0x6cd/0x2360 [ 464.691140][ C0] ? __pfx_do_exit+0x10/0x10 [ 464.695711][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 464.700725][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.706345][ C0] do_group_exit+0x22d/0x2f0 [ 464.710913][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.716115][ C0] get_signal+0x121b/0x12c0 [ 464.720619][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 464.726155][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 464.732314][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 464.737667][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.743278][ C0] ? rcu_is_watching+0x16/0xb0 [ 464.748029][ C0] do_syscall_64+0x328/0x520 [ 464.752630][ C0] ? trace_irq_disable+0x3b/0x140 [ 464.757633][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.763683][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.769554][ C0] RIP: 0033:0x7f314dd9e159 [ 464.773944][ C0] Code: Unable to access opcode bytes at 0x7f314dd9e12f. [ 464.780933][ C0] RSP: 002b:00007f314ecf90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 464.789323][ C0] RAX: fffffffffffffe00 RBX: 00007f314e025fa8 RCX: 00007f314dd9e159 [ 464.797271][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f314e025fa8 [ 464.805217][ C0] RBP: 00007f314e025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 464.813165][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.821112][ C0] R13: 00007f314e026038 R14: 00007ffcb7e75760 R15: 00007ffcb7e75848 [ 464.829089][ C0] [ 464.832084][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 464.839339][ C0] CPU: 0 UID: 0 PID: 9164 Comm: syz.0.1046 Tainted: G W L syzkaller #0 PREEMPT(full) [ 464.850162][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 464.855327][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 464.865356][ C0] Call Trace: [ 464.868610][ C0] [ 464.871429][ C0] vpanic+0x56d/0xa60 [ 464.875406][ C0] ? __pfx__printk+0x10/0x10 [ 464.880002][ C0] ? __pfx_vpanic+0x10/0x10 [ 464.884489][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 464.889774][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 464.894968][ C0] panic+0xc5/0xd0 [ 464.898701][ C0] ? __pfx_panic+0x10/0x10 [ 464.903120][ C0] __warn+0x315/0x4c0 [ 464.907087][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 464.912361][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 464.917633][ C0] __report_bug+0x276/0x570 [ 464.922129][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 464.927401][ C0] ? __pfx___report_bug+0x10/0x10 [ 464.932414][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.938026][ C0] ? __wake_up_klogd+0xf0/0x130 [ 464.942862][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.948473][ C0] ? vprintk_emit+0x4ee/0x560 [ 464.953139][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 464.958150][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 464.963423][ C0] report_bug+0x16b/0x220 [ 464.967740][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 464.973009][ C0] ? __debug_object_init+0x2c6/0x3c0 [ 464.978277][ C0] handle_bug+0x9c/0x200 [ 464.982516][ C0] exc_invalid_op+0x1a/0x50 [ 464.987014][ C0] asm_exc_invalid_op+0x1a/0x20 [ 464.991842][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 464.997719][ C0] Code: 24 fc cc 41 ff c7 44 89 3d 49 10 e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 8d 62 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 e1 6a 6d 0a 3b 05 df [ 465.017300][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 465.023346][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 2f18a0552711cc00 [ 465.031293][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 465.039242][ C0] RBP: ffff88802373bea0 R08: 0000000000000100 R09: 1ffffffff1ed22f4 [ 465.047193][ C0] R10: dffffc0000000000 R11: fffffbfff1ed22f5 R12: 1ffff92000000f4c [ 465.055140][ C0] R13: ffff888074248a10 R14: dffffc0000000000 R15: 0000000000000001 [ 465.063104][ C0] ? __debug_object_init+0x2c3/0x3c0 [ 465.068392][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.074006][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 465.079538][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 465.084565][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 465.090105][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.095126][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.100739][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 465.106265][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.111877][ C0] ? synchronize_srcu+0x20a/0x260 [ 465.116882][ C0] wakeup_source_unregister+0x129/0x3f0 [ 465.122415][ C0] mmc_host_classdev_release+0x47/0x100 [ 465.127947][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 465.134084][ C0] device_release+0xc4/0x1f0 [ 465.138663][ C0] kobject_put+0x222/0x550 [ 465.143059][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 465.147902][ C0] call_timer_fn+0x18d/0x5f0 [ 465.152476][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 465.159135][ C0] ? call_timer_fn+0xd5/0x5f0 [ 465.163798][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 465.168903][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.174107][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 465.180764][ C0] __run_timer_base+0x652/0x8b0 [ 465.185599][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.191246][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 465.196604][ C0] ? ktime_get+0x1f5/0x220 [ 465.201000][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.206613][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.212232][ C0] run_timer_softirq+0xb7/0x170 [ 465.217066][ C0] handle_softirqs+0x226/0x860 [ 465.221816][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 465.226572][ C0] __irq_exit_rcu+0xcb/0x220 [ 465.231146][ C0] irq_exit_rcu+0x9/0x30 [ 465.235372][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 465.240991][ C0] [ 465.243895][ C0] [ 465.246800][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 465.252865][ C0] RIP: 0010:pfn_valid+0x11f/0x490 [ 465.257874][ C0] Code: 74 7d e8 44 f4 83 ff 4d 85 ff 75 11 e8 3a f4 83 ff eb 3d e8 33 f4 83 ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 97 05 f4 ff 49 8b 2f 48 89 ee 48 83 e6 02 31 ff [ 465.277457][ C0] RSP: 0018:ffffc90004867318 EFLAGS: 00000246 [ 465.283505][ C0] RAX: ffffffff82441b0c RBX: ffffffff82441aca RCX: ffff88802373be80 [ 465.291453][ C0] RDX: 0000000000000000 RSI: ffffffff8c6dad60 RDI: ffffffff8c6dad20 [ 465.299401][ C0] RBP: 0000000000000001 R08: ffffffff82441aca R09: 0000000000000000 [ 465.307348][ C0] R10: dffffc0000000000 R11: fffff940002f5e71 R12: dffffc0000000000 [ 465.315294][ C0] R13: 1ffff11027fc0e2c R14: 000000000005ebce R15: ffff88813fe07160 [ 465.323248][ C0] ? pfn_valid+0xba/0x490 [ 465.327564][ C0] ? pfn_valid+0xba/0x490 [ 465.331873][ C0] ? pfn_valid+0xfc/0x490 [ 465.336192][ C0] ? pfn_valid+0xfc/0x490 [ 465.340504][ C0] page_table_check_clear+0x21/0x500 [ 465.345771][ C0] ? vm_normal_page+0x13c/0x2b0 [ 465.350604][ C0] __zap_vma_range+0x3a12/0x4f80 [ 465.355560][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.361177][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 465.366458][ C0] ? mas_find+0x6d6/0xcb0 [ 465.370778][ C0] unmap_vmas+0x390/0x550 [ 465.375087][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.380706][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 465.385534][ C0] ? mas_next_slot+0xc91/0xd70 [ 465.390303][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.395921][ C0] exit_mmap+0x293/0x9f0 [ 465.400144][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 465.404904][ C0] ? __pfx_exit_aio+0x10/0x10 [ 465.409571][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.415192][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 465.420379][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.425996][ C0] __mmput+0x118/0x420 [ 465.430050][ C0] exit_mm+0x18e/0x240 [ 465.434101][ C0] do_exit+0x6cd/0x2360 [ 465.438242][ C0] ? __pfx_do_exit+0x10/0x10 [ 465.442813][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.447826][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.453464][ C0] do_group_exit+0x22d/0x2f0 [ 465.458033][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.463221][ C0] get_signal+0x121b/0x12c0 [ 465.467727][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 465.473264][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 465.479420][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 465.484792][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.490406][ C0] ? rcu_is_watching+0x16/0xb0 [ 465.495155][ C0] do_syscall_64+0x328/0x520 [ 465.499733][ C0] ? trace_irq_disable+0x3b/0x140 [ 465.504736][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.510785][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.516677][ C0] RIP: 0033:0x7f314dd9e159 [ 465.521067][ C0] Code: Unable to access opcode bytes at 0x7f314dd9e12f. [ 465.528056][ C0] RSP: 002b:00007f314ecf90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 465.536447][ C0] RAX: fffffffffffffe00 RBX: 00007f314e025fa8 RCX: 00007f314dd9e159 [ 465.544413][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f314e025fa8 [ 465.552360][ C0] RBP: 00007f314e025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 465.560306][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.568251][ C0] R13: 00007f314e026038 R14: 00007ffcb7e75760 R15: 00007ffcb7e75848 [ 465.576228][ C0] [ 465.579272][ C0] Kernel Offset: disabled [ 465.583570][ C0] Rebooting in 86400 seconds..