last executing test programs: 5.61908137s ago: executing program 2 (id=8404): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 4.925630645s ago: executing program 2 (id=8411): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, 0x0, &(0x7f0000000080)) 4.851053084s ago: executing program 0 (id=8412): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 4.654810705s ago: executing program 2 (id=8415): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 4.448735562s ago: executing program 2 (id=8417): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2, 0x0, r0}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 3.879947204s ago: executing program 4 (id=8424): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a310000000014000380100000800800034000000002"], 0x40}, 0x1, 0x0, 0x0, 0x4044040}, 0x8000) 3.789802944s ago: executing program 0 (id=8425): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) 3.318346687s ago: executing program 4 (id=8426): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 2.966403306s ago: executing program 2 (id=8429): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.622545464s ago: executing program 4 (id=8432): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000180)) 2.448930052s ago: executing program 4 (id=8433): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1e0000610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 1.675416719s ago: executing program 3 (id=8437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd30, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000810) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.440220624s ago: executing program 1 (id=8439): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 1.440040693s ago: executing program 3 (id=8440): socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000140)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 1.412419462s ago: executing program 3 (id=8441): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x1}) 1.049037606s ago: executing program 1 (id=8442): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.04888393s ago: executing program 3 (id=8443): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x1000400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) 1.004575108s ago: executing program 3 (id=8444): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="6d6ff16901dc11fffe880000000000000000000000000001fc0100000000000000000000000000004e254e2101dc9078ee373935ef0f8da10b47000507b0025a9001e6cc070855848340507e8bd26f3ca1d633ec36"], 0x204) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x12, 0x60d, 0xf0, 0x202, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff, 0xff000000, 0x0, 0xfe], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xd0, 0xf0}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xae328689605bc686) 877.883646ms ago: executing program 3 (id=8445): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x39, 0xc8, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x20, 0x22, 0x28, {0x28, 0xa, "c2631385269c2c3cbdeacc918d0fb74237cc6e442a52973661d6090055443800000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0}) 751.703845ms ago: executing program 2 (id=8446): unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000880)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x5, 0xff7fb5b2, 0x1ff, 0x40000, 0x2000000208]}, &(0x7f0000000000)=0x78) 629.889743ms ago: executing program 0 (id=8447): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x174}, 0x1, 0x0, 0x0, 0x20040008}, 0x8001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x8}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) 588.814496ms ago: executing program 1 (id=8448): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 509.383871ms ago: executing program 1 (id=8449): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 396.109724ms ago: executing program 4 (id=8450): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0x68, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 395.738216ms ago: executing program 0 (id=8451): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0xe, 0x28, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001, {[@generic={0x94, 0x2}]}}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xba, 0x100}}}}}}}, 0x0) 395.323004ms ago: executing program 1 (id=8452): sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x400000000000000) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x4905, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0xa) 181.272456ms ago: executing program 0 (id=8453): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x5) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) 122.509537ms ago: executing program 1 (id=8454): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2, 0x5}, 0x8) 13.72965ms ago: executing program 4 (id=8455): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x10000000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 0s ago: executing program 0 (id=8456): r0 = syz_io_uring_setup(0x29d8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x1, 0x61, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T9465] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.800623][ T9465] usb 4-1: config 0 descriptor?? [ 583.830259][ T9465] gspca_main: sq930x-2.14.0 probing 041e:403c [ 583.902288][T21494] fido_id[21494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 584.637890][T21529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 584.666683][ T9465] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 584.737540][ T9465] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 584.774087][ T9465] usb 4-1: USB disconnect, device number 86 [ 584.945870][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 585.005629][ T9455] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 585.156439][ T9455] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 585.180892][ T9455] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.189766][ T9455] usb 5-1: Product: syz [ 585.202122][ T9455] usb 5-1: Manufacturer: syz [ 585.207765][ T9455] usb 5-1: SerialNumber: syz [ 585.244968][ T5700] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 585.706190][ T9455] usb 5-1: USB disconnect, device number 95 [ 585.755276][T21559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 586.307902][ T5700] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 586.344257][ T5700] ath9k_htc: Failed to initialize the device [ 586.372695][ T9455] usb 5-1: ath9k_htc: USB layer deinitialized [ 587.026539][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 587.099556][T21609] netlink: 'syz.2.7084': attribute type 1 has an invalid length. [ 587.110969][T21609] netlink: 'syz.2.7084': attribute type 2 has an invalid length. [ 587.275002][T21619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7088'. [ 587.770191][T21645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7101'. [ 587.886422][T21648] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7103'. [ 587.965779][ T9455] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 588.156152][ T9455] usb 4-1: unable to get BOS descriptor or descriptor too short [ 588.188062][ T9455] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 588.215526][ T9455] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 588.234461][ T9455] usb 4-1: can't read configurations, error -71 [ 588.936539][ T30] audit: type=1326 audit(1787074152.873:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.0.7125" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe510b9e0d9 code=0x7ffc0000 [ 589.001583][ T30] audit: type=1326 audit(1787074152.893:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.0.7125" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe510b9e0d9 code=0x7ffc0000 [ 589.064247][ T30] audit: type=1326 audit(1787074152.903:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.0.7125" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fe510b9e0d9 code=0x7ffc0000 [ 589.125366][ T30] audit: type=1326 audit(1787074152.903:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.0.7125" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe510b9e0d9 code=0x7ffc0000 [ 589.198573][ T30] audit: type=1326 audit(1787074152.903:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.0.7125" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe510b9e0d9 code=0x7ffc0000 [ 589.315590][ T30] audit: type=1326 audit(1787074152.903:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.0.7125" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe510b9e0d9 code=0x7ffc0000 [ 589.349597][ T30] audit: type=1326 audit(1787074152.903:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.0.7125" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe510b9e0d9 code=0x7ffc0000 [ 589.413543][ T30] audit: type=1326 audit(1787074152.903:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.0.7125" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe510b9e0d9 code=0x7ffc0000 [ 589.463116][ T30] audit: type=1326 audit(1787074152.903:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.0.7125" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fe510b9e0d9 code=0x7ffc0000 [ 589.487964][ T30] audit: type=1326 audit(1787074152.903:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21698 comm="syz.0.7125" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe510b9e0d9 code=0x7ffc0000 [ 589.916522][ T9455] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 590.068160][ T9455] usb 3-1: Using ep0 maxpacket: 32 [ 590.088740][ T9455] usb 3-1: unable to get BOS descriptor or descriptor too short [ 590.100745][ T9455] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 590.126639][ T9455] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 590.139844][ T9455] usb 3-1: config 7 has no interface number 0 [ 590.146651][ T9455] usb 3-1: config 7 interface 187 altsetting 6 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 590.158529][ T9455] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x8F has invalid maxpacket 32 [ 590.175146][ T9455] usb 3-1: config 7 interface 187 has no altsetting 0 [ 590.204975][ T9455] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.227771][ T9455] usb 3-1: Product: syz [ 590.243636][ T9455] usb 3-1: Manufacturer: syz [ 590.251538][ T9455] usb 3-1: SerialNumber: syz [ 590.270449][T21726] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 590.507342][ T9455] usb 3-1: Unknown endpoint type found, address 0x07 [ 590.533351][ T9455] usb 3-1: Not enough endpoints found in device, aborting! [ 590.691449][T21772] input: syz1 as /devices/virtual/input/input75 [ 590.743064][ T9455] usb 3-1: USB disconnect, device number 85 [ 592.118980][T21834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 592.525586][ T9465] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 592.702864][ T9465] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 592.739815][ T9465] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.762654][ T9465] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 592.781610][T21851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7196'. [ 592.793323][T21851] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 592.801265][ T9465] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 592.815568][ T9465] usb 4-1: SerialNumber: syz [ 593.060554][ T9465] usb 4-1: 0:2 : does not exist [ 593.140470][ T9465] usb 4-1: USB disconnect, device number 89 [ 593.226719][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.424689][T21870] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 593.457287][T21870] block device autoloading is deprecated and will be removed. [ 593.787767][ T9465] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 593.966818][ T9465] usb 3-1: Using ep0 maxpacket: 8 [ 593.989773][ T9465] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 594.010416][T21896] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.017959][T21896] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.035019][ T9465] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.070301][T21896] bridge0: entered promiscuous mode [ 594.072664][ T9465] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 594.113053][ T9465] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 594.120267][T21896] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 594.141282][ T9465] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 594.180050][ T9465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.213038][ T9465] hub 3-1:1.0: bad descriptor, ignoring hub [ 594.239862][ T9465] hub 3-1:1.0: probe with driver hub failed with error -5 [ 594.262251][ T9465] cdc_wdm 3-1:1.0: skipping garbage [ 594.284170][ T9465] cdc_wdm 3-1:1.0: skipping garbage [ 594.305309][ T9465] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 594.329088][ T9465] cdc_wdm 3-1:1.0: Unknown control protocol [ 594.337458][T21898] team0: Cannot enslave team device to itself [ 594.526710][T21906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7221'. [ 594.932896][ T5700] usb 3-1: USB disconnect, device number 86 [ 595.120844][T21927] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 595.127452][T21927] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 595.135528][ T24] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 595.154689][T21927] vhci_hcd vhci_hcd.0: Device attached [ 595.305548][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 595.319651][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 595.342514][ T24] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.370261][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 595.384102][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.395803][ T9465] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 595.404498][ T5672] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 595.417928][ T24] usb 4-1: config 0 descriptor?? [ 595.430490][T21938] : renamed from vlan0 [ 595.565935][ T9465] usb 5-1: Using ep0 maxpacket: 32 [ 595.578433][ T9465] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 595.606492][ T9465] usb 5-1: config 0 has no interfaces? [ 595.621061][ T9465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.639569][ T9465] usb 5-1: Product: syz [ 595.651466][ T9465] usb 5-1: Manufacturer: syz [ 595.665504][ T9465] usb 5-1: SerialNumber: syz [ 595.676568][ T9465] usb 5-1: config 0 descriptor?? [ 595.864458][ T24] mcp2221 0003:04D8:00DD.0074: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 595.909437][T21929] vhci_hcd: unknown pdu 2 [ 595.918152][ T9465] usb 5-1: USB disconnect, device number 96 [ 595.931411][ T57] vhci_hcd vhci_hcd.4: stop threads [ 595.947888][ T57] vhci_hcd vhci_hcd.4: release socket [ 595.964079][ T57] vhci_hcd vhci_hcd.4: disconnect device [ 596.277818][ T24] usb 4-1: USB disconnect, device number 90 [ 596.581930][T21954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7239'. [ 596.646068][T21956] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7240'. [ 597.826516][ T9465] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 597.895518][ T24] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 597.987115][ T9465] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 597.997997][ T9465] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 598.009517][ T9465] usb 2-1: config 0 interface 0 has no altsetting 0 [ 598.016509][ T9465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.027994][ T9465] usb 2-1: config 0 descriptor?? [ 598.033854][T21997] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 598.065586][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 598.071721][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 598.082498][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 598.093556][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 598.115548][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.128118][ T24] usb 3-1: config 0 descriptor?? [ 598.498565][ T9465] hid_parser_main: 34 callbacks suppressed [ 598.498594][ T9465] razer 0003:1532:010D.0075: unknown main item tag 0x0 [ 598.536245][ T9465] razer 0003:1532:010D.0075: unknown main item tag 0x0 [ 598.544787][ T9465] razer 0003:1532:010D.0075: unknown main item tag 0x0 [ 598.565234][ T9465] razer 0003:1532:010D.0075: unknown main item tag 0x0 [ 598.583452][ T24] lenovo 0003:17EF:60B5.0076: ignoring exceeding usage max [ 598.586455][ T9465] razer 0003:1532:010D.0075: unknown main item tag 0x0 [ 598.600577][ T9465] razer 0003:1532:010D.0075: unknown main item tag 0x0 [ 598.608631][ T9465] razer 0003:1532:010D.0075: unknown main item tag 0x0 [ 598.632551][ T24] lenovo 0003:17EF:60B5.0076: hidraw0: USB HID v0.01 Device [HID 17ef:60b5] on usb-dummy_hcd.2-1/input0 [ 598.645579][ T9465] razer 0003:1532:010D.0075: unknown main item tag 0x0 [ 598.665132][ T9465] razer 0003:1532:010D.0075: unknown main item tag 0x0 [ 598.684731][ T9465] razer 0003:1532:010D.0075: unknown main item tag 0x0 [ 598.754233][ T9465] razer 0003:1532:010D.0075: hidraw1: USB HID v7f.fd Device [HID 1532:010d] on usb-dummy_hcd.1-1/input0 [ 598.849636][ T24] usb 3-1: USB disconnect, device number 87 [ 599.039217][ T9465] usb 2-1: USB disconnect, device number 74 [ 600.012470][T22064] kvm: kvm [22062]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb3 [ 600.536204][ T5672] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 601.275260][T22110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7310'. [ 601.434665][T22118] netlink: 'syz.2.7313': attribute type 361 has an invalid length. [ 602.175756][ T5672] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 602.339718][ T5672] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 602.360603][ T5672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.383974][ T5672] usb 3-1: config 0 descriptor?? [ 602.401767][ T5672] cp210x 3-1:0.0: cp210x converter detected [ 603.011458][ T5672] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 603.037126][ T5672] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 603.064291][ T5672] usb 3-1: cp210x converter now attached to ttyUSB0 [ 603.089755][ T5672] usb 3-1: USB disconnect, device number 88 [ 603.111038][ T5672] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 603.139582][ T5672] cp210x 3-1:0.0: device disconnected [ 603.714958][T22191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7346'. [ 603.734358][T22191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7346'. [ 604.055589][ T24] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 604.227574][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 604.246893][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 604.256073][ T24] usb 3-1: config 0 has no interface number 0 [ 604.275567][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 604.303068][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 604.325998][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.350487][ T24] usb 3-1: config 0 descriptor?? [ 604.356818][T22198] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 604.395063][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 604.647886][T20755] usb 3-1: USB disconnect, device number 89 [ 604.725886][ T5672] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 604.895588][ T5672] usb 5-1: Using ep0 maxpacket: 8 [ 604.904718][ T5672] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 604.925720][ T5672] usb 5-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.937261][ T5672] usb 5-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 604.951374][ T5672] usb 5-1: config 0 interface 0 has no altsetting 0 [ 604.958860][ T5672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.969301][ T5672] usb 5-1: config 0 descriptor?? [ 605.119149][T22238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 605.388694][ T5672] hid_parser_main: 852 callbacks suppressed [ 605.388718][ T5672] kye 0003:0458:0138.0077: unknown main item tag 0x3 [ 605.420271][ T5672] kye 0003:0458:0138.0077: unknown main item tag 0x1 [ 605.435694][ T5672] kye 0003:0458:0138.0077: reserved main item tag 0xd [ 605.444681][ T5672] kye 0003:0458:0138.0077: ignoring exceeding usage max [ 605.458417][ T5672] kye 0003:0458:0138.0077: ignoring exceeding usage max [ 605.475506][ T5672] kye 0003:0458:0138.0077: usage index exceeded [ 605.482047][ T5672] kye 0003:0458:0138.0077: item 0 0 2 2 parsing failed [ 605.503207][ T5672] kye 0003:0458:0138.0077: parse failed [ 605.510504][ T5672] kye 0003:0458:0138.0077: probe with driver kye failed with error -22 [ 605.632409][ T5700] usb 5-1: USB disconnect, device number 97 [ 606.108657][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 606.108678][ T30] audit: type=1326 audit(1787074170.023:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.7372" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 606.190548][ T30] audit: type=1326 audit(1787074170.033:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.7372" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 606.284611][ T30] audit: type=1326 audit(1787074170.033:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.7372" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 606.395798][ T30] audit: type=1326 audit(1787074170.033:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.7372" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 606.498031][ T30] audit: type=1326 audit(1787074170.033:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.7372" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 606.559474][ T30] audit: type=1326 audit(1787074170.033:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.7372" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 606.679343][ T30] audit: type=1326 audit(1787074170.033:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.7372" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 606.822524][ T30] audit: type=1326 audit(1787074170.033:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.7372" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 606.890737][ T30] audit: type=1326 audit(1787074170.033:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.7372" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 606.961072][ T30] audit: type=1326 audit(1787074170.033:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.7372" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 607.009681][T22279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7380'. [ 607.275673][T22289] xt_hashlimit: size too large, truncated to 1048576 [ 607.444954][T22299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7389'. [ 607.462412][T22294] xt_CT: You must specify a L4 protocol and not use inversions on it [ 607.692829][T22311] ip_tables: iptables: counters copy to user failed while replacing table [ 607.817583][T22315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7396'. [ 609.255988][ T5672] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 609.381960][T22374] bridge0: port 3(syz_tun) entered disabled state [ 609.404703][T22374] bridge0: port 4(batadv0) entered disabled state [ 609.416940][ T5672] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 609.433968][T22375] netlink: 'syz.0.7422': attribute type 16 has an invalid length. [ 609.436483][ T5672] usb 2-1: config 0 has no interfaces? [ 609.449420][T22374] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.454470][T22375] netlink: 'syz.0.7422': attribute type 17 has an invalid length. [ 609.461081][ T5672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.478456][T22374] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.488090][ T5672] usb 2-1: config 0 descriptor?? [ 609.614736][T22375] bridge0: port 3(syz_tun) entered blocking state [ 609.623276][T22375] bridge0: port 3(syz_tun) entered forwarding state [ 609.672752][T22375] bridge0: port 4(batadv0) entered blocking state [ 609.679417][T22375] bridge0: port 4(batadv0) entered forwarding state [ 609.703444][T22375] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.710762][T22375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.723127][T22375] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.730459][T22375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.738813][T22361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.751959][T22361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.767880][ T9465] usb 2-1: USB disconnect, device number 75 [ 609.924807][T22383] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7426'. [ 609.955590][T17634] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.972904][T17634] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.003814][T17634] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.030522][T17634] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.068193][T22387] C: renamed from veth1_to_team (while UP) [ 610.084920][T22387] netlink: 'syz.3.7428': attribute type 2 has an invalid length. [ 610.092294][T22389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7429'. [ 610.102548][T22387] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7428'. [ 610.122099][T22387] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 610.147820][ T5701] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 610.229299][T22395] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7432'. [ 610.275520][ T9465] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 610.327561][ T5701] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.339491][ T5701] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 610.354992][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 610.364655][ T5701] usb 3-1: SerialNumber: syz [ 610.380400][ T5701] hub 3-1:1.0: bad descriptor, ignoring hub [ 610.387806][ T5701] hub 3-1:1.0: probe with driver hub failed with error -5 [ 610.425922][ T9465] usb 2-1: Using ep0 maxpacket: 8 [ 610.438157][ T9465] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 610.456850][ T9465] usb 2-1: config index 0 descriptor too short (expected 72, got 36) [ 610.465060][ T9465] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 610.481765][ T9465] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.490040][ T9465] usb 2-1: Product: syz [ 610.494262][ T9465] usb 2-1: Manufacturer: syz [ 610.499336][ T9465] usb 2-1: SerialNumber: syz [ 610.784451][ T9465] usb 2-1: USB disconnect, device number 76 [ 611.031862][ T5701] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 611.351169][T20755] usb 3-1: USB disconnect, device number 90 [ 611.400616][T20755] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 611.845579][ T24] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 612.015800][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 612.030786][ T24] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 612.058122][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 612.080987][ T24] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 612.103226][ T24] usb 4-1: Product: syz [ 612.123163][ T24] usb 4-1: Manufacturer: syz [ 612.136539][ T24] usb 4-1: SerialNumber: syz [ 612.154559][ T24] usb 4-1: config 0 descriptor?? [ 612.169832][T22421] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 612.187924][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 612.206317][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 612.640036][T22468] loop5: detected capacity change from 0 to 7 [ 612.659948][T22468] buffer_io_error: 5 callbacks suppressed [ 612.659969][T22468] Buffer I/O error on dev loop5, logical block 0, async page read [ 612.702594][T22468] Buffer I/O error on dev loop5, logical block 0, async page read [ 612.722674][T22468] Buffer I/O error on dev loop5, logical block 0, async page read [ 612.735593][T22468] Buffer I/O error on dev loop5, logical block 0, async page read [ 612.765073][T22468] Buffer I/O error on dev loop5, logical block 0, async page read [ 612.801525][T22468] Buffer I/O error on dev loop5, logical block 0, async page read [ 612.813548][T22468] Buffer I/O error on dev loop5, logical block 0, async page read [ 612.827245][T22468] ldm_validate_partition_table(): Disk read failed. [ 612.835308][T22468] Buffer I/O error on dev loop5, logical block 0, async page read [ 612.843886][T22468] Buffer I/O error on dev loop5, logical block 0, async page read [ 612.852317][T22468] Buffer I/O error on dev loop5, logical block 0, async page read [ 612.860524][T22468] Dev loop5: unable to read RDB block 0 [ 612.870278][T22468] loop5: unable to read partition table [ 612.877420][T22468] loop5: partition table beyond EOD, truncated [ 612.899154][T22468] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 612.993824][ T4981] ldm_validate_partition_table(): Disk read failed. [ 613.011677][ T4981] Dev loop5: unable to read RDB block 0 [ 613.027293][ T4981] loop5: unable to read partition table [ 613.042540][ T4981] loop5: partition table beyond EOD, truncated [ 613.417786][ T1147] raw-gadget.0 gadget.3: failed to queue suspend event [ 613.518476][T22421] raw-gadget.0 gadget.3: failed to queue resume event [ 613.610801][T17634] raw-gadget.0 gadget.3: failed to queue suspend event [ 613.695877][T22421] raw-gadget.0 gadget.3: failed to queue resume event [ 613.746674][ T3332] raw-gadget.0 gadget.3: failed to queue suspend event [ 613.835883][T22421] raw-gadget.0 gadget.3: failed to queue resume event [ 613.866987][ T1147] raw-gadget.0 gadget.3: failed to queue suspend event [ 613.948423][T22421] raw-gadget.0 gadget.3: failed to queue resume event [ 613.978276][ T1147] raw-gadget.0 gadget.3: failed to queue suspend event [ 614.065621][T22421] raw-gadget.0 gadget.3: failed to queue resume event [ 614.096789][ T3332] raw-gadget.0 gadget.3: failed to queue suspend event [ 614.188129][T22421] raw-gadget.0 gadget.3: failed to queue resume event [ 614.219107][ T3332] raw-gadget.0 gadget.3: failed to queue suspend event [ 614.305637][T22421] raw-gadget.0 gadget.3: failed to queue resume event [ 614.333648][ T57] raw-gadget.0 gadget.3: failed to queue suspend event [ 614.361061][T22517] block device autoloading is deprecated and will be removed. [ 614.415832][T22421] raw-gadget.0 gadget.3: failed to queue resume event [ 614.479794][ T1147] raw-gadget.0 gadget.3: failed to queue suspend event [ 614.555608][T22421] raw-gadget.0 gadget.3: failed to queue resume event [ 614.576890][ T9465] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 614.598463][ T3332] raw-gadget.0 gadget.3: failed to queue suspend event [ 614.635632][T22421] raw-gadget.0 gadget.3: failed to queue disconnect event [ 614.735874][ T24] usb 4-1: USB disconnect, device number 91 [ 614.736506][ T9465] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 614.791364][ T9465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.823543][ T9465] usb 3-1: Product: syz [ 614.840246][ T9465] usb 3-1: Manufacturer: syz [ 614.851695][ T9465] usb 3-1: SerialNumber: syz [ 614.873392][ T9465] usb 3-1: config 0 descriptor?? [ 615.147686][T22553] binder: 22551:22553 ioctl c018620c 200000000900 returned -1 [ 615.306279][ T9465] usb 3-1: Firmware version (0.0) predates our first public release. [ 615.324657][ T9465] usb 3-1: Please update to version 0.2 or newer [ 615.495606][T20755] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 615.561023][ T9465] usb 3-1: USB disconnect, device number 91 [ 615.666044][T20755] usb 5-1: Using ep0 maxpacket: 16 [ 615.705164][T20755] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 615.741050][T20755] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 615.752566][T20755] usb 5-1: config 0 has no interface number 0 [ 615.759153][T20755] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.770888][T20755] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.781910][T20755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.795307][T20755] usb 5-1: config 0 descriptor?? [ 616.413628][T20755] uclogic 0003:28BD:0071.0078: pen parameters not found [ 616.434201][T20755] uclogic 0003:28BD:0071.0078: interface is invalid, ignoring [ 616.458401][T20755] usb 5-1: USB disconnect, device number 98 [ 618.116628][T22652] netlink: 'syz.2.7529': attribute type 6 has an invalid length. [ 619.049000][T22691] netlink: 'syz.4.7547': attribute type 16 has an invalid length. [ 619.081370][T22689] tipc: Resetting bearer [ 619.099801][T22689] tipc: Resetting bearer [ 619.115237][T22691] netlink: 'syz.4.7547': attribute type 17 has an invalid length. [ 619.340051][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 619.340073][ T30] audit: type=1326 audit(1787074183.273:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22697 comm="syz.3.7551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d7b9e0d9 code=0x7ffc0000 [ 619.388978][ T30] audit: type=1326 audit(1787074183.303:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22697 comm="syz.3.7551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd6d7b9e0d9 code=0x7ffc0000 [ 619.423507][ T30] audit: type=1326 audit(1787074183.303:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22697 comm="syz.3.7551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d7b9e0d9 code=0x7ffc0000 [ 619.500465][ T30] audit: type=1326 audit(1787074183.313:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22697 comm="syz.3.7551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd6d7b9e0d9 code=0x7ffc0000 [ 619.552271][T22698] IPVS: Scheduler module ip_vs_ not found [ 619.584855][ T30] audit: type=1326 audit(1787074183.493:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22697 comm="syz.3.7551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d7b9e0d9 code=0x7ffc0000 [ 619.642812][ T30] audit: type=1326 audit(1787074183.493:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22697 comm="syz.3.7551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d7b9e0d9 code=0x7ffc0000 [ 619.682224][T22691] tipc: Resetting bearer [ 619.713132][T22691] bridge0: left promiscuous mode [ 619.804844][T22691] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.812193][T22691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.825255][T22691] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.832594][T22691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.929574][T22691] vlan4: left allmulticast mode [ 619.934565][T22691] bond0: left allmulticast mode [ 619.940473][T22691] bond_slave_0: left allmulticast mode [ 619.949191][T22691] bond_slave_1: left allmulticast mode [ 619.954832][T22691] bond1: left allmulticast mode [ 619.962568][T22691] erspan0: entered promiscuous mode [ 619.978951][T22691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 620.935308][T22752] IPVS: sh: FWM 3 0x00000003 - no destination available [ 622.166741][T22793] loop4: detected capacity change from 0 to 7 [ 622.177045][T22793] Dev loop4: unable to read RDB block 7 [ 622.183291][T22793] loop4: unable to read partition table [ 622.189754][T22793] loop4: partition table beyond EOD, truncated [ 622.197077][T22793] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 622.526381][ T5701] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 622.578460][T22803] input: syz1 as /devices/virtual/input/input80 [ 622.696460][ T5701] usb 3-1: Using ep0 maxpacket: 8 [ 622.712190][ T5701] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 622.741630][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.819806][ T5701] pvrusb2: Hardware description: Terratec Grabster AV400 [ 622.838663][ T5701] pvrusb2: ********** [ 622.854251][ T5701] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 622.885086][ T5701] pvrusb2: Important functionality might not be entirely working. [ 622.914420][ T5701] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 622.926522][T22807] netlink: 'syz.1.7597': attribute type 16 has an invalid length. [ 622.939049][ T5701] pvrusb2: ********** [ 622.945731][T22807] netlink: 'syz.1.7597': attribute type 17 has an invalid length. [ 622.970443][T22807] erspan0: entered promiscuous mode [ 623.010131][ T2356] pvrusb2: Invalid write control endpoint [ 623.067144][T22807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.111774][T22807] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.169218][T22807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.204774][ T2356] pvrusb2: Invalid write control endpoint [ 623.235672][ T2356] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 623.258388][ T2356] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 623.267258][ T2356] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 623.279633][ T2356] pvrusb2: Device being rendered inoperable [ 623.311202][T22799] pvrusb2: Attempted to execute control transfer when device not ok [ 623.339208][ T2356] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 623.349405][ T5700] usb 3-1: USB disconnect, device number 92 [ 623.368425][ T2356] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 623.412369][ T2356] pvrusb2: Attached sub-driver cx25840 [ 623.422786][ T2356] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 623.423774][T22807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 623.441522][ T2356] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 623.475507][T22807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 623.531987][T22807] veth1_vlan: left promiscuous mode [ 623.552900][T22807] veth0_vlan: left promiscuous mode [ 623.572632][T22807] veth0_vlan: entered promiscuous mode [ 623.618869][T22807] veth1_vlan: entered promiscuous mode [ 623.651352][T22807] veth1_macvtap: left promiscuous mode [ 623.669170][T22807] veth0_macvtap: left promiscuous mode [ 623.681895][T22807] veth0_macvtap: entered promiscuous mode [ 623.690424][T22807] veth1_macvtap: entered promiscuous mode [ 623.701865][T22807] geneve1: entered promiscuous mode [ 623.720563][T22807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 623.733715][T22807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 623.744266][T22807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 623.781420][T22807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 623.822347][T22807] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 624.106069][T17634] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.115176][T17634] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.155310][ T30] audit: type=1326 audit(1787074188.083:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22825 comm="syz.3.7605" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6d7b9e0d9 code=0x0 [ 624.172603][T22826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.202860][T22826] bridge0: port 1(bond2) entered blocking state [ 624.236775][T22826] bridge0: port 1(bond2) entered disabled state [ 624.250345][T22826] bond2: entered allmulticast mode [ 624.269897][T22826] bond2: entered promiscuous mode [ 624.280866][T22826] bridge0: port 1(bond2) entered blocking state [ 624.289163][T22826] bridge0: port 1(bond2) entered forwarding state [ 624.321655][T17634] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.333609][T17634] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.350000][ T1147] bond0: (slave bond2): link status definitely down, disabling slave [ 624.398255][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.404315][ T1147] bond0: now running without any active interface! [ 624.404777][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.425877][ T9465] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 624.456413][ T57] bridge0: port 1(bond2) entered disabled state [ 624.606457][ T9465] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 624.621257][ T9465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.630347][ T9465] usb 5-1: Product: syz [ 624.634603][ T9465] usb 5-1: Manufacturer: syz [ 624.641816][ T9465] usb 5-1: SerialNumber: syz [ 624.652162][ T9465] usb 5-1: config 0 descriptor?? [ 624.792749][T22850] bridge0: port 3(dummy0) entered disabled state [ 624.815598][T20754] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 624.839517][T22850] netlink: 'syz.2.7614': attribute type 16 has an invalid length. [ 624.848486][T22850] netlink: 'syz.2.7614': attribute type 17 has an invalid length. [ 624.872128][T22850] bridge0: port 3(dummy0) entered blocking state [ 624.878874][T22850] bridge0: port 3(dummy0) entered forwarding state [ 624.887396][ T5693] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 624.911226][T22850] veth0_to_bond: left allmulticast mode [ 624.929515][T22850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.935769][ T5693] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 624.937739][T22850] veth1_to_batadv: entered promiscuous mode [ 624.957778][T22850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.970888][T22850] veth1_to_hsr: left allmulticast mode [ 624.976418][T20754] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 624.979584][T20754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.988443][T22850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 625.010823][T20754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.023199][T22850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.043032][T20754] usb 2-1: config 0 descriptor?? [ 625.067380][T20754] pwc: Askey VC010 type 2 USB webcam detected. [ 625.074947][ T9465] usb 5-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 625.075964][T22850] veth1_vlan: left promiscuous mode [ 625.098062][T22850] veth0_vlan: left promiscuous mode [ 625.111693][T22850] veth0_vlan: entered promiscuous mode [ 625.123032][T22850] veth1_vlan: entered promiscuous mode [ 625.134800][T22850] veth1_macvtap: left promiscuous mode [ 625.142407][T22850] veth0_macvtap: left promiscuous mode [ 625.149791][T22850] veth0_macvtap: entered promiscuous mode [ 625.157861][T22850] veth1_macvtap: entered promiscuous mode [ 625.171303][T22850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 625.179355][T22850] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 625.194714][T22850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 625.205036][T22850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 625.217114][T22850] batman_adv: batadv0: Interface activated: wlan1 [ 625.228389][T22850] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 625.237547][T22850] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 625.245225][T22850] macsec1: left promiscuous mode [ 625.250755][T22850] macsec1: left allmulticast mode [ 625.256205][T22850] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 625.263945][T22850] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 625.278251][T22850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 625.287104][ T9465] usb 5-1: Firmware: build [ 625.297564][T22850] geneve2: left promiscuous mode [ 625.302919][T22850] geneve2: left allmulticast mode [ 625.310316][T22850] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 625.326551][ T9455] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 625.340441][T17634] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.347704][T17634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.419103][ T33] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 625.431643][ T33] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 625.445132][ T33] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 625.454468][ T5701] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 625.470320][ T33] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 625.478397][ T24] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 625.487881][T20754] pwc: recv_control_msg error -32 req 02 val 2b00 [ 625.497268][ T33] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.507572][ T9455] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 625.510304][ T9465] usb 5-1: failed to fetch extended address, random address set [ 625.520140][ T33] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 625.536624][ T9455] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 625.548588][ T9465] usb 5-1: atusb_probe: initialization failed, error = -524 [ 625.550896][ T9455] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 625.565095][ T9465] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 625.567180][ T33] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.583930][ T9455] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.598157][ T33] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 625.604319][ T9465] usb 5-1: USB disconnect, device number 99 [ 625.611860][ T9455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.622510][ T9455] usb 4-1: Product: syz [ 625.636129][ T9455] usb 4-1: Manufacturer: syz [ 625.651988][ T9455] usb 4-1: SerialNumber: syz [ 625.686214][T17634] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.707230][T17634] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 625.749396][T20754] pwc: recv_control_msg error -71 req 02 val 2c00 [ 625.759748][T20754] pwc: recv_control_msg error -71 req 04 val 1000 [ 625.770315][T20754] pwc: recv_control_msg error -71 req 04 val 1300 [ 625.778832][T20754] pwc: recv_control_msg error -71 req 04 val 1400 [ 625.779969][ T142] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.786423][T20754] pwc: recv_control_msg error -71 req 02 val 2000 [ 625.803470][T20754] pwc: recv_control_msg error -71 req 02 val 2100 [ 625.804212][ T142] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 625.821794][T20754] pwc: recv_control_msg error -71 req 04 val 1500 [ 625.831905][T20754] pwc: recv_control_msg error -71 req 02 val 2500 [ 625.841040][T20754] pwc: recv_control_msg error -71 req 02 val 2400 [ 625.848961][T20754] pwc: recv_control_msg error -71 req 02 val 2600 [ 625.856251][ T5701] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 625.860030][T20754] pwc: recv_control_msg error -71 req 02 val 2900 [ 625.871921][T20754] pwc: recv_control_msg error -71 req 02 val 2800 [ 625.880056][T20754] pwc: recv_control_msg error -71 req 04 val 1100 [ 625.887801][T20754] pwc: recv_control_msg error -71 req 04 val 1200 [ 625.915890][ T9455] usb 4-1: 0:2 : does not exist [ 625.927826][T20754] pwc: Registered as video103. [ 625.943819][T20754] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input81 [ 625.965027][T20754] usb 2-1: USB disconnect, device number 77 [ 625.975831][ T5701] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 626.028297][ T9455] usb 4-1: USB disconnect, device number 92 [ 627.746969][T22906] netlink: 'syz.0.7638': attribute type 1 has an invalid length. [ 628.827466][T20754] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 628.997720][T20754] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 629.022220][T20754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 629.055569][T20754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.078725][T20754] usb 4-1: config 0 descriptor?? [ 629.090340][T22928] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 629.534883][T20754] logitech-djreceiver 0003:046D:C71F.0079: unknown main item tag 0x0 [ 629.555827][T20754] logitech-djreceiver 0003:046D:C71F.0079: unknown main item tag 0x0 [ 629.576110][T20754] logitech-djreceiver 0003:046D:C71F.0079: unknown main item tag 0x0 [ 629.595218][T20754] logitech-djreceiver 0003:046D:C71F.0079: unknown main item tag 0x0 [ 629.618466][T20754] logitech-djreceiver 0003:046D:C71F.0079: unknown main item tag 0x0 [ 629.635952][T20754] logitech-djreceiver 0003:046D:C71F.0079: unknown main item tag 0x0 [ 629.656002][T20754] logitech-djreceiver 0003:046D:C71F.0079: unknown main item tag 0x0 [ 629.675846][T20754] logitech-djreceiver 0003:046D:C71F.0079: unknown main item tag 0x0 [ 629.685518][T20754] logitech-djreceiver 0003:046D:C71F.0079: unknown main item tag 0x0 [ 629.701814][T20754] logitech-djreceiver 0003:046D:C71F.0079: unknown main item tag 0x0 [ 629.724910][T20754] logitech-djreceiver 0003:046D:C71F.0079: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 629.818347][T20754] usb 4-1: USB disconnect, device number 93 [ 630.298042][T22970] loop4: detected capacity change from 0 to 7 [ 630.308238][T22970] Dev loop4: unable to read RDB block 7 [ 630.332767][T22970] loop4: AHDI p1 p2 p3 p4 [ 630.338540][T22970] loop4: partition table partially beyond EOD, truncated [ 630.347191][T22970] loop4: p1 start 1601398130 is beyond EOD, truncated [ 630.354045][T22970] loop4: p2 start 1702059890 is beyond EOD, truncated [ 630.370971][T22970] loop4: p3 size 150995200 extends beyond EOD, truncated [ 630.472078][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 630.529581][T22977] sctp: [Deprecated]: syz.3.7667 (pid 22977) Use of int in max_burst socket option deprecated. [ 630.529581][T22977] Use struct sctp_assoc_value instead [ 630.787140][T20754] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 630.811189][ T9465] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 630.811209][ T9465] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 630.946204][T20754] usb 2-1: Using ep0 maxpacket: 8 [ 630.955344][ T9465] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 630.966114][T20754] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 630.990798][ T9465] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 631.006494][T20754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.022315][T20754] usb 2-1: Product: syz [ 631.037670][T20754] usb 2-1: Manufacturer: syz [ 631.049927][T20754] usb 2-1: SerialNumber: syz [ 631.066524][T20754] usb 2-1: config 0 descriptor?? [ 631.082275][T20754] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 631.152295][T22996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7676'. [ 631.217258][ T9465] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 631.721734][T20754] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 631.747869][ T9465] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 631.756275][T20754] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 631.771369][T20754] usb 2-1: USB disconnect, device number 78 [ 632.070128][T20754] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 632.371884][T23045] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7683'. [ 632.495318][T23049] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 633.095028][T23078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7696'. [ 633.316148][ T30] audit: type=1326 audit(1787074197.223:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23079 comm="syz.1.7698" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 633.378706][ T30] audit: type=1326 audit(1787074197.223:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23079 comm="syz.1.7698" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 633.461605][ T30] audit: type=1326 audit(1787074197.233:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23079 comm="syz.1.7698" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 633.514639][ T30] audit: type=1326 audit(1787074197.233:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23079 comm="syz.1.7698" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 633.552505][T23091] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7704'. [ 633.563491][ T30] audit: type=1326 audit(1787074197.233:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23079 comm="syz.1.7698" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 633.609220][ T30] audit: type=1326 audit(1787074197.243:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23079 comm="syz.1.7698" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 633.634416][ T30] audit: type=1326 audit(1787074197.243:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23079 comm="syz.1.7698" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 633.706998][ T30] audit: type=1326 audit(1787074197.243:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23079 comm="syz.1.7698" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 633.738148][ T30] audit: type=1326 audit(1787074197.243:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23079 comm="syz.1.7698" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 633.784835][ T30] audit: type=1326 audit(1787074197.243:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23079 comm="syz.1.7698" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8059e0d9 code=0x7ffc0000 [ 634.326600][ T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 634.486901][ T24] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 634.523823][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.553288][ T24] usb 4-1: Product: syz [ 634.566361][ T24] usb 4-1: Manufacturer: syz [ 634.597104][ T24] usb 4-1: SerialNumber: syz [ 634.647685][ T24] usb 4-1: config 0 descriptor?? [ 634.866048][ T9465] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 634.895289][ T5672] usb 4-1: USB disconnect, device number 94 [ 635.027232][ T9465] usb 5-1: Using ep0 maxpacket: 32 [ 635.034760][ T9465] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 635.046894][ T9465] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 635.055874][ T9465] usb 5-1: config 0 has no interface number 0 [ 635.062511][ T9465] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 635.082236][ T9465] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 635.098512][ T9465] usb 5-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 216 [ 635.110012][ T9465] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 635.131418][ T9465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.141344][ T9465] usb 5-1: Product: syz [ 635.146878][ T9465] usb 5-1: Manufacturer: syz [ 635.151915][ T9465] usb 5-1: SerialNumber: syz [ 635.164960][ T9465] usb 5-1: config 0 descriptor?? [ 635.178865][T23135] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 635.224565][ T9465] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input82 [ 635.258739][ T4966] usb 5-1: BOGUS urb xfer, pipe 1 != type 3 [ 635.384855][T23157] kAFS: unable to lookup cell '(G' [ 635.541566][ T24] usb 5-1: USB disconnect, device number 100 [ 635.673867][T23167] syzkaller1: entered promiscuous mode [ 635.696228][T23167] syzkaller1: entered allmulticast mode [ 635.719391][T23167] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 635.768832][T23172] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7741'. [ 635.991953][T23177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7744'. [ 636.546173][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 637.600556][T23235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7768'. [ 638.825845][ T5672] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 638.999021][ T5672] usb 3-1: Using ep0 maxpacket: 8 [ 639.010605][ T5672] usb 3-1: unable to get BOS descriptor or descriptor too short [ 639.023773][ T5672] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 639.039381][ T5672] usb 3-1: config 117 has an invalid interface number: 163 but max is 0 [ 639.056458][ T5672] usb 3-1: config 117 has no interface number 0 [ 639.059884][T23292] input: syz1 as /devices/virtual/input/input83 [ 639.071384][ T5672] usb 3-1: config 117 interface 163 has no altsetting 0 [ 639.100081][ T5672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.116683][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 639.133031][ T5672] usb 3-1: Product: syz [ 639.146650][ T5672] usb 3-1: Manufacturer: syz [ 639.157024][ T5672] usb 3-1: SerialNumber: syz [ 639.535490][ T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 639.686250][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 639.696747][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.707922][ T24] usb 2-1: config 0 descriptor?? [ 639.716307][ T24] cp210x 2-1:0.0: cp210x converter detected [ 640.056144][T23303] loop3: detected capacity change from 0 to 4 [ 640.125053][ T24] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 640.205039][ T9465] usb 3-1: USB disconnect, device number 93 [ 640.217225][ T9465] f81534a_ctrl 3-1:117.163: failed to enable ports: -19 [ 640.357956][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 640.549705][ T24] usb 2-1: USB disconnect, device number 79 [ 640.570155][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 640.581943][ T24] cp210x 2-1:0.0: device disconnected [ 641.127688][ T9465] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 641.288350][ T9465] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 641.305229][ T9465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.325775][ T9465] usb 5-1: Product: syz [ 641.330101][ T9465] usb 5-1: Manufacturer: syz [ 641.336164][ T9465] usb 5-1: SerialNumber: syz [ 641.351873][ T9465] usb 5-1: config 0 descriptor?? [ 641.645505][ T24] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 641.791245][ T9465] usb 5-1: Firmware version (0.0) predates our first public release. [ 641.800641][ T9465] usb 5-1: Please update to version 0.2 or newer [ 641.809667][ T9465] usb 5-1: Firmware: build [ 641.816507][ T24] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 641.837278][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 641.847605][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 641.858425][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 641.871431][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.044370][ T9465] usb 5-1: USB disconnect, device number 101 [ 642.533974][ T24] cxacru_cm: 5 callbacks suppressed [ 642.534064][ T24] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 642.568809][ T24] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 642.583314][ T24] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 642.593387][ T24] ATM dev 0: poll status: error -71 [ 642.598833][ T24] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 642.638696][ T24] ATM dev 0: usbatm_submit_urb: urb 0xffff88807bc8ea00 submission failed (-8)! [ 642.659876][ T24] ATM dev 0: usbatm_submit_urb: urb 0xffff888035073200 submission failed (-8)! [ 642.686941][ T24] ATM dev 0: usbatm_submit_urb: urb 0xffff888035073c00 submission failed (-8)! [ 642.725855][ T24] ATM dev 0: usbatm_submit_urb: urb 0xffff88802b7f6e00 submission failed (-8)! [ 642.767888][T23372] loop4: detected capacity change from 0 to 7 [ 642.787139][ T24] usb 2-1: USB disconnect, device number 80 [ 642.806986][T23372] Dev loop4: unable to read RDB block 7 [ 642.831263][T23372] loop4: unable to read partition table [ 642.843452][T23372] loop4: partition table beyond EOD, truncated [ 642.853142][T23372] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 643.489121][ T24] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 643.569991][T23412] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7850'. [ 643.585913][T23412] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7850'. [ 643.679271][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 643.697844][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.710598][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.720701][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 643.761401][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.774763][ T24] usb 4-1: config 0 descriptor?? [ 644.169133][T23422] syz.0.7853 (23422) used greatest stack depth: 18952 bytes left [ 644.243596][ T24] plantronics 0003:047F:FFFF.007A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 644.385609][ T5701] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 644.533731][ T24] usb 4-1: USB disconnect, device number 95 [ 644.548405][ T5701] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 644.576649][ T5701] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 644.600935][ T5701] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 644.619271][ T5701] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 644.633572][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.642959][ T5701] usb 2-1: Product: syz [ 644.647645][ T5701] usb 2-1: Manufacturer: syz [ 644.652352][ T5701] usb 2-1: SerialNumber: syz [ 644.666943][ T5701] cdc_mbim 2-1:1.0: skipping garbage [ 644.872899][T23428] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 644.880727][T23428] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 645.256034][T23463] netlink: Unknown NAT attribute (type=256, max=9) [ 645.262761][T23463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.501717][T23428] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 645.535704][T23428] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 645.569736][ T5701] cdc_mbim 2-1:1.0: dwNtbInMaxSize=11 is too small. Using 2048 [ 645.593158][ T5701] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 645.786424][ T5701] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 645.842812][ T5701] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 645.863786][ T5701] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 645.884877][ T5701] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 645.934357][ T5701] usb 2-1: USB disconnect, device number 81 [ 646.474859][T23508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7887'. [ 646.820028][T23503] ip6gre2: left promiscuous mode [ 646.825285][T23503] ip6gre2: left allmulticast mode [ 646.842158][T23503] macsec2: left promiscuous mode [ 646.850280][T23503] macsec2: left allmulticast mode [ 646.862727][T23503] veth3: left promiscuous mode [ 646.961524][T23508] erspan0: left promiscuous mode [ 647.164048][T23508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.185019][T23508] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.239328][T23508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.456730][T23508] veth1_vlan: left promiscuous mode [ 647.474079][T23508] veth0_vlan: left promiscuous mode [ 647.504351][T23508] veth0_vlan: entered promiscuous mode [ 647.558652][T23508] veth1_vlan: entered promiscuous mode [ 647.595854][T23508] veth1_macvtap: left promiscuous mode [ 647.610400][T23508] veth0_macvtap: left promiscuous mode [ 647.635396][T23508] veth0_macvtap: entered promiscuous mode [ 647.648973][T23508] veth1_macvtap: entered promiscuous mode [ 647.668548][T23508] geneve1: left promiscuous mode [ 647.683523][T23508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 647.711021][T23508] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 647.740331][T23508] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 647.760713][T23508] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 647.788890][T23508] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 647.893856][T23540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7903'. [ 647.925602][ T48] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.940050][ T48] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.986777][T17634] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.056385][ T48] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.375505][ T5701] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 648.556549][ T5701] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 648.560341][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.579072][ T5701] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 648.604028][ T5701] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.620169][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 40467 - 0 [ 648.625946][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.664643][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 648.673626][ T5701] hub 5-1:4.0: USB hub found [ 648.862282][T23564] sctp: [Deprecated]: syz.0.7914 (pid 23564) Use of int in max_burst socket option deprecated. [ 648.862282][T23564] Use struct sctp_assoc_value instead [ 648.910747][ T5701] hub 5-1:4.0: 2 ports detected [ 648.921767][ T5701] usb 5-1: selecting invalid altsetting 1 [ 648.933332][ T5701] hub 5-1:4.0: Using single TT (err -22) [ 648.988834][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.012747][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 40467 - 0 [ 649.038259][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 649.162389][ T48] bond0: (slave netdevsim1): Releasing backup interface [ 649.183344][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.198760][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 40467 - 0 [ 649.209964][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 649.331580][ T5701] usb 5-1: USB disconnect, device number 102 [ 649.372592][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.385031][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 40467 - 0 [ 649.399210][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 649.849894][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 649.861760][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 649.875034][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 649.887330][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 649.899142][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 649.905798][ T9465] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 649.977998][ T48] bond2: left allmulticast mode [ 649.986572][T20754] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 650.000546][ T48] bond2: left promiscuous mode [ 650.021398][ T48] bridge0: port 1(bond2) entered disabled state [ 650.039035][ T48] dummy0: left allmulticast mode [ 650.046960][ T48] dummy0: left promiscuous mode [ 650.056517][ T48] bridge0: port 3(dummy0) entered disabled state [ 650.070316][ T48] bridge_slave_1: left allmulticast mode [ 650.078069][ T48] bridge_slave_1: left promiscuous mode [ 650.086735][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.100390][ T48] pim6reg: left allmulticast mode [ 650.106048][ T9465] usb 4-1: Using ep0 maxpacket: 32 [ 650.112849][ T9465] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 650.137360][ T9465] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 650.149815][ T9465] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 650.169071][T20754] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 650.186583][ T9465] usb 4-1: config 0 interface 0 has no altsetting 0 [ 650.199402][T20754] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 650.209597][T20754] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 650.228503][ T9465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.239976][ T9465] usb 4-1: Product: syz [ 650.250633][T20754] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 650.262603][ T9465] usb 4-1: Manufacturer: syz [ 650.273105][ T9465] usb 4-1: SerialNumber: syz [ 650.288686][T20754] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 650.304187][ T9465] usb 4-1: config 0 descriptor?? [ 650.326059][T20754] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 650.341161][T20754] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 650.351074][T20754] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 650.363120][T20754] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 650.397324][T20754] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 650.409315][T20754] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 650.424654][T20754] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 650.434312][T20754] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 650.446313][T20754] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 650.466732][T20754] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 650.497280][T20754] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 650.523484][T20754] usb 2-1: string descriptor 0 read error: -22 [ 650.533777][T20754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.584238][T20754] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 650.749982][ T9465] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 650.792272][T20754] usb 2-1: USB disconnect, device number 82 [ 650.933798][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.951714][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.967656][ T48] bond0 (unregistering): Released all slaves [ 650.994939][ T48] bond1 (unregistering): Released all slaves [ 651.047065][ T48] bond2 (unregistering): Released all slaves [ 651.095940][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 651.377316][ T9465] usb 4-1: USB disconnect, device number 96 [ 651.418534][ T48] : left promiscuous mode [ 651.678370][ T48] tipc: Left network mode [ 651.985518][ T5620] Bluetooth: hci2: command tx timeout [ 652.643461][ T48] batman_adv: batadv0: Interface deactivated: wlan1 [ 652.671434][T23637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.702547][ T48] batman_adv: batadv0: Removing interface: wlan1 [ 653.029845][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 653.107957][T23577] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.115256][T23577] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.124143][T23577] bridge_slave_0: entered allmulticast mode [ 653.133437][T23577] bridge_slave_0: entered promiscuous mode [ 653.143620][T23577] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.150951][ T5701] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 653.160339][T23577] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.167738][T23577] bridge_slave_1: entered allmulticast mode [ 653.176223][T23577] bridge_slave_1: entered promiscuous mode [ 653.232865][T23577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.249132][T23577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.299983][T23577] team0: Port device team_slave_0 added [ 653.307282][ T5701] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 653.315552][T20754] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 653.320639][T23577] team0: Port device team_slave_1 added [ 653.331099][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 653.350992][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 653.371823][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 653.383848][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 653.408977][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.430831][T23577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.438048][ T5701] usb 5-1: Product: syz [ 653.446060][ T5701] usb 5-1: Manufacturer: syz [ 653.457119][ T5701] usb 5-1: SerialNumber: syz [ 653.461950][T23577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.500647][ T5701] usb 5-1: config 0 descriptor?? [ 653.514660][T20754] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 653.530456][T20754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.540216][T23577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.580990][T23577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.605916][T23577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.643002][T23577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.732446][ T5701] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 653.777296][T23577] hsr_slave_0: entered promiscuous mode [ 653.792848][T23577] hsr_slave_1: entered promiscuous mode [ 653.811084][T23577] debugfs: 'hsr0' already exists in 'hsr' [ 653.822045][T23577] Cannot create hsr debugfs directory [ 653.961791][ T5701] usb 5-1: USB disconnect, device number 103 [ 654.042675][T23665] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 654.065576][ T5620] Bluetooth: hci2: command tx timeout [ 654.195199][T20754] cxacru 4-1:1.0: send of cm 0x84 failed (-71) [ 654.215267][T20754] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 654.245296][T20754] cxacru 4-1:1.0: send of cm 0x88 failed (-71) [ 654.269965][T20754] ATM dev 0: poll status: error -71 [ 654.284335][T20754] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 654.305161][ C0] ATM dev 0: usbatm_complete: urb 0xffff88805a359f00 failed (-71)! [ 654.313476][ C0] ATM dev 0: usbatm_complete: urb 0xffff88805a359e00 failed (-71)! [ 654.321488][ C0] ATM dev 0: usbatm_complete: urb 0xffff88805a359d00 failed (-71)! [ 654.329491][ C0] ATM dev 0: usbatm_complete: urb 0xffff88805a359c00 failed (-71)! [ 654.360499][T20754] usb 4-1: USB disconnect, device number 97 [ 654.384420][T23673] Invalid argument reading file caps for ./file0 [ 654.405522][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88805a359f00 submission failed (-19)! [ 654.528922][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 654.821837][ T48] hsr_slave_0: left promiscuous mode [ 654.842245][ T48] hsr_slave_1: left promiscuous mode [ 654.858236][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.875783][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.895080][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.913463][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.945098][ T48] veth1_to_batadv: left promiscuous mode [ 654.952462][ T48] veth1_macvtap: left promiscuous mode [ 654.959136][ T48] veth0_macvtap: left promiscuous mode [ 654.964801][ T48] veth1_vlan: left promiscuous mode [ 654.971949][ T48] veth0_vlan: left promiscuous mode [ 655.227524][T23681] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7944'. [ 655.543256][ T48] team0 (unregistering): Port device team_slave_1 removed [ 655.575895][ T48] team0 (unregistering): Port device team_slave_0 removed [ 655.805271][T23699] Invalid argument reading file caps for ./file0 [ 655.934910][T23701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7953'. [ 656.146050][ T5620] Bluetooth: hci2: command tx timeout [ 656.921486][ T48] IPVS: stop unused estimator thread 0... [ 657.419611][T23577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 657.460869][T23577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 657.492220][T23577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 657.571167][T23577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 657.603415][T23577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 657.630204][T23577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 657.649633][T23577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 657.717209][T23577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 658.057475][T23577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.138641][T23577] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.177239][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.184518][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.225646][ T5620] Bluetooth: hci2: command tx timeout [ 658.244167][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.251420][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.381514][T23769] syzkaller1: entered promiscuous mode [ 658.402459][T23769] syzkaller1: entered allmulticast mode [ 658.747597][T23577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.923069][T23577] veth0_vlan: entered promiscuous mode [ 658.940442][T23577] veth1_vlan: entered promiscuous mode [ 658.987321][T23577] veth0_macvtap: entered promiscuous mode [ 659.006854][T23577] veth1_macvtap: entered promiscuous mode [ 659.084816][T23577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.164547][T23577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.219119][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.239341][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.240171][T23795] Invalid argument reading file caps for ./file0 [ 659.256335][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.256379][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.623815][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.662360][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.860297][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.887777][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.094384][T23815] input: syz0 as /devices/virtual/input/input85 [ 660.380109][ T5701] IPVS: starting estimator thread 0... [ 660.381930][T23821] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 660.485959][T23825] IPVS: using max 25 ests per chain, 60000 per kthread [ 661.164337][T23854] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7991'. [ 661.340052][T23854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.386880][T23854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.454690][T23854] bond0 (unregistering): Released all slaves [ 662.356333][ T5672] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 662.463178][T23893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8003'. [ 662.474038][T23893] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8003'. [ 662.517822][ T5672] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.559890][ T5672] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 662.583560][ T5672] usb 5-1: config 1 has no interface number 0 [ 662.598641][ T5672] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 662.624540][ T5672] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 662.641357][ T5672] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 662.662180][ T5672] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 662.700873][ T5672] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 662.729964][ T5672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.744250][ T5672] usb 5-1: Product: syz [ 662.754398][ T5672] usb 5-1: Manufacturer: syz [ 662.767353][ T5672] usb 5-1: SerialNumber: syz [ 662.801277][T23884] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 662.988555][T23906] loop4: detected capacity change from 0 to 2007 [ 663.003022][T23905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.038558][T23884] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 663.270871][T23884] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 663.578014][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 663.690922][T23884] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 663.717344][ T5672] cdc_ncm 5-1:1.1: bind() failure [ 663.972315][ T9455] usb 5-1: USB disconnect, device number 104 [ 664.120235][T23931] macsec0: entered promiscuous mode [ 664.129217][T23931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8019'. [ 664.140467][T23931] veth1_macvtap: left promiscuous mode [ 664.158142][T23931] macsec0 (unregistering): left promiscuous mode [ 664.325553][ T5672] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 664.478421][ T5672] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 664.512584][ T5672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.542970][ T5672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.567809][ T5672] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 664.609570][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.654518][ T5672] usb 4-1: config 0 descriptor?? [ 665.146758][ T5672] plantronics 0003:047F:FFFF.007B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 665.429629][ T24] usb 4-1: USB disconnect, device number 98 [ 666.345624][T20754] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 666.515771][T20754] usb 2-1: Using ep0 maxpacket: 32 [ 666.547087][T20754] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 666.583562][T20754] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 666.612645][T20754] usb 2-1: config 0 has no interface number 0 [ 666.648538][T20754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.699229][T20754] usb 2-1: Product: syz [ 666.727517][T20754] usb 2-1: Manufacturer: syz [ 666.733833][T20754] usb 2-1: SerialNumber: syz [ 666.746963][T20754] usb 2-1: config 0 descriptor?? [ 666.757297][T20754] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 666.815507][ T24] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 666.969732][T20754] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 666.985793][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 666.994948][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 667.022421][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 667.040264][T20754] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 667.047908][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 667.074311][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.085704][ T24] usb 3-1: Product: syz [ 667.095164][ T24] usb 3-1: Manufacturer: syz [ 667.109922][ T24] usb 3-1: SerialNumber: syz [ 667.137823][ T24] usb 3-1: config 0 descriptor?? [ 667.178125][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 667.194250][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 105 [ 667.205222][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 667.397157][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 667.398102][ T5701] usb 2-1: USB disconnect, device number 83 [ 667.451911][ T5701] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 667.491102][ T5701] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 667.518353][ T5701] quatech2 2-1:0.51: device disconnected [ 667.769533][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 667.778276][T24041] input: syz0 as /devices/virtual/input/input87 [ 667.785976][ T24] em28xx 3-1:0.0: Config register raw data: 0x5e [ 667.987961][ T24] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 668.012326][ T24] em28xx 3-1:0.0: No AC97 audio processor [ 668.042625][ T24] usb 3-1: USB disconnect, device number 94 [ 668.058315][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 668.083880][ T24] em28xx 3-1:0.0: Freeing device [ 668.113848][ T5612] udevd[5612]: setting mode of /dev/bus/usb/003/094 to 020664 failed: No such file or directory [ 668.136686][ T5612] udevd[5612]: setting owner of /dev/bus/usb/003/094 to uid=0, gid=0 failed: No such file or directory [ 668.149128][T24048] sg_write: data in/out 397276/136 bytes for SCSI command 0x0-- guessing data in; [ 668.149128][T24048] program syz.1.8067 not setting count and/or reply_len properly [ 668.435243][ T5672] hid-generic 0003:046D:DFB8.007C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 668.856376][T24073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8077'. [ 668.918710][T24074] sctp: [Deprecated]: syz.2.8078 (pid 24074) Use of int in max_burst socket option. [ 668.918710][T24074] Use struct sctp_assoc_value instead [ 669.143475][T24069] tipc: Resetting bearer [ 669.194299][T24069] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.202066][T24069] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.753882][T24069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.796213][T24069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.462891][T24073] erspan0: left promiscuous mode [ 670.532230][T24101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.568402][T24073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.578332][T24073] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.615082][T24073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.647561][T24073] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.654789][T24073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.666506][T24073] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.673625][T24073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.692684][T24073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.702554][T24073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.721187][T24073] veth1_vlan: left promiscuous mode [ 670.728075][T24073] veth0_vlan: left promiscuous mode [ 670.734845][T24073] veth0_vlan: entered promiscuous mode [ 670.744163][T24073] veth1_vlan: entered promiscuous mode [ 670.754091][T24073] veth1_macvtap: left promiscuous mode [ 670.760801][T24073] veth0_macvtap: left promiscuous mode [ 670.769236][T24073] veth0_macvtap: entered promiscuous mode [ 670.776868][T24073] veth1_macvtap: entered promiscuous mode [ 670.789302][T24073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 670.797802][T24073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 670.806084][T24073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 670.814147][T24073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 670.828386][T24073] erspan0: entered promiscuous mode [ 670.834829][T24073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 670.866309][T24073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 670.902847][T24089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8083'. [ 670.954562][T24106] tap0: tun_chr_ioctl cmd 1074025675 [ 670.969444][T24106] tap0: persist disabled [ 671.226195][T20755] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 671.386268][T20755] usb 3-1: Using ep0 maxpacket: 32 [ 671.393127][T20755] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 671.404320][T20755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.417581][T20755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.428243][T20755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.443038][T20755] usb 3-1: config 0 descriptor?? [ 671.446274][T24080] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 671.626308][T24080] usb 4-1: Using ep0 maxpacket: 32 [ 671.640221][T24080] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 671.658576][T24080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.675218][T24080] usb 4-1: Product: syz [ 671.680722][T24080] usb 4-1: Manufacturer: syz [ 671.692001][T24080] usb 4-1: SerialNumber: syz [ 671.720944][T24080] usb 4-1: config 0 descriptor?? [ 671.743475][T24080] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 671.882952][T20755] hid_parser_main: 469 callbacks suppressed [ 671.884670][T20755] ft260 0003:0403:6030.007D: unknown main item tag 0x0 [ 671.925703][T20755] ft260 0003:0403:6030.007D: unknown main item tag 0x0 [ 672.077207][T20755] ft260 0003:0403:6030.007D: chip code: 0000 0000 [ 672.144016][T24136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8103'. [ 672.284858][T20755] ft260 0003:0403:6030.007D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 672.345258][T24080] gspca_ov534_9: reg_w failed -71 [ 672.421469][T24143] xt_hashlimit: size too large, truncated to 1048576 [ 672.493107][T20755] ft260 0003:0403:6030.007D: failed to retrieve status: -71, no wakeup [ 672.504723][T20755] ft260 0003:0403:6030.007D: failed to retrieve status: -71 [ 672.516672][T20755] ft260 0003:0403:6030.007D: failed to reset I2C controller: -71 [ 672.550257][T20755] usb 3-1: USB disconnect, device number 95 [ 672.665883][T24080] gspca_ov534_9: Unknown sensor 0000 [ 672.665960][T24080] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 672.690021][T24080] usb 4-1: USB disconnect, device number 99 [ 673.539892][ T30] audit: type=1800 audit(1787074237.473:633): pid=24177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8120" name="file1" dev="tmpfs" ino=8175 res=0 errno=0 [ 673.657741][ T30] audit: type=1800 audit(1787074237.593:634): pid=24177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8120" name="file1" dev="tmpfs" ino=8175 res=0 errno=0 [ 673.727236][ T30] audit: type=1800 audit(1787074237.663:635): pid=24177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8120" name="file1" dev="tmpfs" ino=8175 res=0 errno=0 [ 673.805088][ T30] audit: type=1800 audit(1787074237.733:636): pid=24177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8120" name="file1" dev="tmpfs" ino=8175 res=0 errno=0 [ 674.594064][T24206] loop5: detected capacity change from 0 to 7 [ 674.626790][T24206] Dev loop5: unable to read RDB block 7 [ 674.643413][T24206] loop5: unable to read partition table [ 674.663883][T24206] loop5: partition table beyond EOD, truncated [ 674.683214][T24206] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 675.056323][T24225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8139'. [ 675.182839][T24222] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.192731][T24222] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.480962][T24222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.512048][T24222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.131450][T24225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.147665][T24225] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.168120][T24225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.219929][T24225] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.227210][T24225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.279692][T24225] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.286994][T24225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.320851][T24225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.332278][T24225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.427784][T24225] veth1_vlan: left promiscuous mode [ 676.442010][T24225] veth0_vlan: left promiscuous mode [ 676.462629][T24225] veth0_vlan: entered promiscuous mode [ 676.491740][T24225] veth1_vlan: entered promiscuous mode [ 676.544787][T24225] veth1_macvtap: left promiscuous mode [ 676.562698][T24225] veth0_macvtap: left promiscuous mode [ 676.582104][T24225] veth0_macvtap: entered promiscuous mode [ 676.599958][T24225] veth1_macvtap: entered promiscuous mode [ 676.638859][T24225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 676.657004][T24225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 676.677492][T24225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 676.688011][T24225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 677.593184][T24281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.965759][T20755] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 678.139311][T20755] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 678.186210][T20755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 678.220655][T20755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.258042][T20755] usb 2-1: config 0 descriptor?? [ 678.275157][T24286] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 678.535557][T24296] syzkaller1: entered promiscuous mode [ 678.560544][T24296] syzkaller1: entered allmulticast mode [ 678.736362][T20755] koneplus 0003:1E7D:2E22.007E: unknown main item tag 0x0 [ 678.757602][T20755] koneplus 0003:1E7D:2E22.007E: unknown main item tag 0x0 [ 678.787458][T20755] koneplus 0003:1E7D:2E22.007E: unknown main item tag 0x0 [ 678.795600][T24080] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 678.804702][T20755] koneplus 0003:1E7D:2E22.007E: unknown main item tag 0x0 [ 678.818743][T20755] koneplus 0003:1E7D:2E22.007E: unknown main item tag 0x0 [ 678.830252][T20755] koneplus 0003:1E7D:2E22.007E: unknown main item tag 0x0 [ 678.838557][T20755] koneplus 0003:1E7D:2E22.007E: unknown main item tag 0x0 [ 678.846364][T20755] koneplus 0003:1E7D:2E22.007E: unknown main item tag 0x0 [ 678.853697][T20755] koneplus 0003:1E7D:2E22.007E: unknown main item tag 0x0 [ 678.862785][T20755] koneplus 0003:1E7D:2E22.007E: unknown main item tag 0x0 [ 678.876691][T20755] koneplus 0003:1E7D:2E22.007E: item fetching failed at offset 314/483 [ 678.893553][T20755] koneplus 0003:1E7D:2E22.007E: parse failed [ 678.904961][T20755] koneplus 0003:1E7D:2E22.007E: probe with driver koneplus failed with error -22 [ 678.988080][T24080] usb 5-1: Using ep0 maxpacket: 8 [ 678.988159][T20755] usb 2-1: USB disconnect, device number 84 [ 679.004972][T24080] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 679.041082][T24080] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 679.069911][T24080] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 679.101840][T24080] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 679.130978][T24080] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 679.143367][T24310] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.163171][T24080] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.163246][T24310] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 679.188669][T24080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.462325][T24080] usb 5-1: usb_control_msg returned -32 [ 679.472629][T24080] usbtmc 5-1:16.0: can't read capabilities [ 679.559830][T24317] kvm: kvm [24316]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 679.783210][T24327] syzkaller1: entered promiscuous mode [ 679.789409][T24327] syzkaller1: entered allmulticast mode [ 679.851552][T24328] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 679.861651][ T5672] usb 5-1: USB disconnect, device number 105 [ 680.899957][ T30] audit: type=1326 audit(1787074244.833:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24348 comm="syz.2.8190" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedeb59e0d9 code=0x0 [ 681.694175][T24359] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8193'. [ 681.995572][ T30] audit: type=1800 audit(1787074245.923:638): pid=24373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8198" name="file1" dev="tmpfs" ino=8380 res=0 errno=0 [ 682.059270][ T30] audit: type=1800 audit(1787074245.993:639): pid=24373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8198" name="file1" dev="tmpfs" ino=8380 res=0 errno=0 [ 682.099521][T24359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.122249][T24359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.134553][ T30] audit: type=1800 audit(1787074246.063:640): pid=24373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8198" name="file1" dev="tmpfs" ino=8380 res=0 errno=0 [ 682.164231][T24359] bond0 (unregistering): (slave bond1): Releasing backup interface [ 682.176658][T24359] bond0 (unregistering): Released all slaves [ 682.189310][ T30] audit: type=1800 audit(1787074246.123:641): pid=24373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8198" name="file1" dev="tmpfs" ino=8380 res=0 errno=0 [ 683.022779][T24367] tipc: Started in network mode [ 683.035871][T24367] tipc: Node identity ac14142f, cluster identity 4711 [ 683.055766][T24367] tipc: New replicast peer: 172.20.20.170 [ 683.067152][T24367] tipc: Enabled bearer , priority 10 [ 683.129273][T24370] tipc: New replicast peer: 0.0.0.0 [ 683.154715][ T57] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.173621][ T57] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.199431][ T57] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.213455][ T57] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.260517][T24384] vivid-006: disconnect [ 683.271332][T24383] vivid-006: reconnect [ 683.368899][T24388] netlink: 116 bytes leftover after parsing attributes in process `syz.1.8205'. [ 684.120838][T24409] input: syz0 as /devices/virtual/input/input88 [ 684.186292][ T9465] tipc: Node number set to 2886997039 [ 684.386278][T24078] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 684.548408][T24078] usb 2-1: Using ep0 maxpacket: 16 [ 684.562434][T24078] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 684.574786][T24078] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 684.594998][T24078] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 684.618973][T24078] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 684.649971][T24078] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 684.669959][T24078] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 684.703486][T24078] usb 2-1: config 0 has no interface number 0 [ 684.722517][T24078] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 684.758178][T24078] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 684.774702][T24078] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 684.787338][T24078] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 684.819283][T24078] usb 2-1: config 0 interface 125 has no altsetting 0 [ 684.834596][T24078] usb 2-1: config 0 interface 125 has no altsetting 2 [ 684.855924][T24078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.874392][T24078] usb 2-1: Product: syz [ 684.883862][T24078] usb 2-1: Manufacturer: syz [ 684.896781][T24078] usb 2-1: SerialNumber: syz [ 684.920065][T24078] usb 2-1: config 0 descriptor?? [ 684.946856][T24078] usb 2-1: selecting invalid altsetting 2 [ 685.832455][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.839107][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.008961][T24080] usb 2-1: USB disconnect, device number 85 [ 686.345781][ T5672] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 686.365622][ T9465] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 686.496298][ T5672] usb 3-1: Using ep0 maxpacket: 32 [ 686.505969][T24457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8232'. [ 686.521225][ T5672] usb 3-1: unable to get BOS descriptor or descriptor too short [ 686.534383][ T5672] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 686.544761][ T9465] usb 4-1: Using ep0 maxpacket: 8 [ 686.551535][ T9465] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 686.564315][ T5672] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 686.583093][ T5672] usb 3-1: can't read configurations, error -71 [ 686.594680][ T9465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.610820][ T9465] usb 4-1: Product: syz [ 686.621312][ T9465] usb 4-1: Manufacturer: syz [ 686.635502][ T9465] usb 4-1: SerialNumber: syz [ 686.656204][ T9465] usb 4-1: config 0 descriptor?? [ 686.882433][ T9465] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 687.702196][ T9465] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 687.752073][ T9465] usb 4-1: USB disconnect, device number 100 [ 688.385041][T24498] input: syz0 as /devices/virtual/input/input89 [ 688.625737][ T9465] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 688.798514][ T9465] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 688.836359][ T9465] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 688.876734][ T9465] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 688.914628][ T9465] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.334284][ T9465] pegasus 2-1:1.0: probe with driver pegasus failed with error -71 [ 689.366627][ T9465] usb 2-1: USB disconnect, device number 86 [ 689.390855][T24525] sctp: [Deprecated]: syz.2.8259 (pid 24525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 689.390855][T24525] Use struct sctp_sack_info instead [ 690.043375][T24544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8268'. [ 690.740624][T24570] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 691.629313][T24596] kernel read not supported for file /)} (pid: 24596 comm: syz.2.8288) [ 691.670145][ T30] audit: type=1800 audit(1787074255.603:642): pid=24596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8288" name=")}" dev="mqueue" ino=100176 res=0 errno=0 [ 692.275568][T24615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8297'. [ 692.566974][ T9465] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 692.730396][ T9465] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 692.745529][ T9465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 692.761407][ T9465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 692.775457][ T9465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 692.796125][ T9465] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 692.820575][ T9465] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.836514][ T9465] usb 2-1: Product: syz [ 692.840898][ T9465] usb 2-1: Manufacturer: syz [ 692.846184][ T9465] usb 2-1: SerialNumber: syz [ 692.858145][ T9465] usb 2-1: config 0 descriptor?? [ 693.091610][ T9465] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 693.294686][ T9465] usb 2-1: USB disconnect, device number 87 [ 693.504145][T24618] adutux: No device or device unplugged -19 [ 693.570351][T24647] input: syz1 as /devices/virtual/input/input90 [ 693.577304][T24078] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 693.747525][T24078] usb 5-1: Using ep0 maxpacket: 32 [ 693.755267][T24078] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 693.776750][T24078] usb 5-1: config 0 interface 0 altsetting 246 endpoint 0x81 has an invalid bInterval 213, changing to 11 [ 693.797744][T24078] usb 5-1: config 0 interface 0 has no altsetting 0 [ 693.809211][T24078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.829604][T24078] usb 5-1: config 0 descriptor?? [ 693.965606][T24080] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 694.060013][T24078] usbhid 5-1:0.0: can't add hid device: -71 [ 694.090396][T24078] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 694.110587][T24078] usb 5-1: USB disconnect, device number 106 [ 694.152661][T24080] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 694.172931][T24080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.183161][T24080] usb 4-1: Product: syz [ 694.195468][T24080] usb 4-1: Manufacturer: syz [ 694.216741][T24080] usb 4-1: SerialNumber: syz [ 694.232032][T24080] usb 4-1: config 0 descriptor?? [ 694.252698][T24080] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 694.665553][T24078] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 694.738738][T24673] input: syz0 as /devices/virtual/input/input91 [ 694.845971][T24078] usb 5-1: Using ep0 maxpacket: 32 [ 694.863072][T24078] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 694.892701][T24078] usb 5-1: config 0 interface 0 altsetting 246 endpoint 0x81 has an invalid bInterval 213, changing to 11 [ 694.914734][T24078] usb 5-1: config 0 interface 0 has no altsetting 0 [ 694.929407][T24078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.958509][T24078] usb 5-1: config 0 descriptor?? [ 695.178651][ T5672] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 695.292551][T24080] gspca_stk1135: reg_w 0x7 err -71 [ 695.307479][T24080] gspca_stk1135: serial bus timeout: status=0x00 [ 695.317450][T24080] gspca_stk1135: Sensor write failed [ 695.323951][T24080] gspca_stk1135: serial bus timeout: status=0x00 [ 695.333781][T24080] gspca_stk1135: Sensor write failed [ 695.335857][ T5672] usb 3-1: Using ep0 maxpacket: 16 [ 695.339250][T24080] gspca_stk1135: serial bus timeout: status=0x00 [ 695.353312][T24080] gspca_stk1135: Sensor read failed [ 695.358730][T24080] gspca_stk1135: serial bus timeout: status=0x00 [ 695.359879][ T5672] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 695.365495][T24080] gspca_stk1135: Sensor read failed [ 695.380609][T24080] gspca_stk1135: Detected sensor type unknown (0x0) [ 695.393304][T24078] hid_parser_main: 301 callbacks suppressed [ 695.393357][T24078] elecom 0003:056E:00FD.007F: unknown main item tag 0x0 [ 695.394107][ T5672] usb 3-1: config 0 interface 0 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 695.417930][T24080] gspca_stk1135: serial bus timeout: status=0x00 [ 695.417961][T24080] gspca_stk1135: Sensor read failed [ 695.417987][T24080] gspca_stk1135: serial bus timeout: status=0x00 [ 695.417998][T24080] gspca_stk1135: Sensor read failed [ 695.445700][T24078] elecom 0003:056E:00FD.007F: unknown main item tag 0x0 [ 695.456579][T24078] elecom 0003:056E:00FD.007F: unknown main item tag 0x0 [ 695.463651][ T5672] usb 3-1: config 0 interface 0 has no altsetting 0 [ 695.463701][T24078] elecom 0003:056E:00FD.007F: unknown main item tag 0x0 [ 695.480667][T24080] gspca_stk1135: serial bus timeout: status=0x00 [ 695.485612][ T5672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.487392][T24080] gspca_stk1135: Sensor write failed [ 695.502209][T24078] elecom 0003:056E:00FD.007F: unknown main item tag 0x0 [ 695.510668][T24078] elecom 0003:056E:00FD.007F: unknown main item tag 0x0 [ 695.512667][ T5672] usb 3-1: config 0 descriptor?? [ 695.524356][T24080] gspca_stk1135: serial bus timeout: status=0x00 [ 695.531151][ T5672] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 695.535028][T24078] elecom 0003:056E:00FD.007F: unknown main item tag 0x0 [ 695.546391][T24080] gspca_stk1135: Sensor write failed [ 695.554275][T24080] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 695.562552][T24078] elecom 0003:056E:00FD.007F: unknown main item tag 0x0 [ 695.578221][T24080] usb 4-1: USB disconnect, device number 101 [ 695.584484][T24078] elecom 0003:056E:00FD.007F: unknown main item tag 0x0 [ 695.595427][T24078] elecom 0003:056E:00FD.007F: unknown main item tag 0x0 [ 695.618395][T24078] elecom 0003:056E:00FD.007F: hidraw0: USB HID v0.18 Device [HID 056e:00fd] on usb-dummy_hcd.4-1/input0 [ 695.641268][T24078] usb 5-1: USB disconnect, device number 107 [ 695.717459][T24697] fido_id[24697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 696.321326][T24710] loop5: detected capacity change from 0 to 6 [ 696.329889][T24710] Dev loop5: unable to read RDB block 6 [ 696.336421][T24710] loop5: unable to read partition table [ 696.342820][T24710] loop5: partition table beyond EOD, truncated [ 696.349494][T24710] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 697.135470][ T5672] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 697.296459][ T5672] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 697.308566][ T5672] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.319324][ T5672] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 697.330270][ T5672] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 697.340791][ T5672] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.354743][ T5672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.694251][T24738] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 697.961269][T24080] usb 3-1: USB disconnect, device number 98 [ 698.067203][T24745] *A^m: entered allmulticast mode [ 698.078723][T24744] syzkaller1: entered promiscuous mode [ 698.095791][T24744] syzkaller1: entered allmulticast mode [ 698.104949][T24743] *A^m: left allmulticast mode [ 698.390344][ T5672] gud 5-1:1.0: USB-1: Failed to add properties (ret=-71) [ 698.416033][ T5672] gud 5-1:1.0: Failed to get connectors (error=-71) [ 698.430753][ T5672] gud 5-1:1.0: probe with driver gud failed with error -71 [ 698.476085][ T5672] usb 5-1: USB disconnect, device number 108 [ 698.749716][T24770] pim6reg1: entered promiscuous mode [ 698.762996][T24770] pim6reg1: entered allmulticast mode [ 699.305500][ T5672] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 699.475495][ T5672] usb 3-1: Using ep0 maxpacket: 16 [ 699.491920][ T5672] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 699.494417][T24791] bridge4: entered promiscuous mode [ 699.519051][ T5672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 699.528769][T24791] bridge4: entered allmulticast mode [ 699.547076][ T5672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.565482][ T5672] usb 3-1: Product: syz [ 699.570372][T24791] team0: Port device bridge4 added [ 699.576209][ T5672] usb 3-1: Manufacturer: syz [ 699.587754][ T5672] usb 3-1: SerialNumber: syz [ 699.589338][T24794] bridge0: port 1(team0) entered blocking state [ 699.611990][ T5672] usb 3-1: config 0 descriptor?? [ 699.617145][T24794] bridge0: port 1(team0) entered disabled state [ 699.656014][T24794] team0: entered allmulticast mode [ 699.656946][ T5672] hub 3-1:0.0: bad descriptor, ignoring hub [ 699.684071][ T5672] hub 3-1:0.0: probe with driver hub failed with error -5 [ 699.700874][T24794] team_slave_0: entered allmulticast mode [ 699.712900][ T5672] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 699.739297][T24794] team_slave_1: entered allmulticast mode [ 699.771921][T24794] team0: entered promiscuous mode [ 699.781603][T24794] team_slave_0: entered promiscuous mode [ 699.799026][T24794] team_slave_1: entered promiscuous mode [ 699.909483][ T5672] usb 3-1: USB disconnect, device number 99 [ 700.036099][T24078] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 700.239536][T24078] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 700.284549][T24078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.322058][T24078] usb 5-1: Product: syz [ 700.340082][T24078] usb 5-1: Manufacturer: syz [ 700.364444][T24078] usb 5-1: SerialNumber: syz [ 700.409040][T24078] usb 5-1: config 0 descriptor?? [ 700.463294][T24078] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 701.215886][ T5703] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 701.269268][T24818] Invalid argument reading file caps for ./file0 [ 701.445637][ T5703] usb 2-1: Using ep0 maxpacket: 8 [ 701.465525][ T5703] usb 2-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 701.522926][ T5703] usb 2-1: config 0 interface 0 has no altsetting 0 [ 701.547736][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.583137][T24078] gspca_sunplus: reg_w_riv err -71 [ 701.598112][ T5703] usb 2-1: config 0 descriptor?? [ 701.611236][T24078] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 701.671314][T24078] usb 5-1: USB disconnect, device number 109 [ 702.057918][ T5703] hid_parser_main: 28 callbacks suppressed [ 702.057956][ T5703] ntrig 0003:1B96:0005.0080: unknown main item tag 0x0 [ 702.110125][ T5703] ntrig 0003:1B96:0005.0080: unknown main item tag 0x0 [ 702.134788][ T5703] ntrig 0003:1B96:0005.0080: unknown main item tag 0x0 [ 702.152169][ T5703] ntrig 0003:1B96:0005.0080: unknown main item tag 0x0 [ 702.179348][ T5703] ntrig 0003:1B96:0005.0080: unknown main item tag 0x0 [ 702.231811][ T5703] ntrig 0003:1B96:0005.0080: unknown main item tag 0x0 [ 702.298739][ T5703] ntrig 0003:1B96:0005.0080: unknown main item tag 0x0 [ 702.350782][ T5703] ntrig 0003:1B96:0005.0080: unknown main item tag 0x0 [ 702.385569][ T5703] ntrig 0003:1B96:0005.0080: unknown main item tag 0x0 [ 702.406926][ T5703] ntrig 0003:1B96:0005.0080: unknown main item tag 0x0 [ 702.430782][ T5703] ntrig 0003:1B96:0005.0080: hidraw0: USB HID v0.01 Device [HID 1b96:0005] on usb-dummy_hcd.1-1/input0 [ 702.498758][ T5703] usb 2-1: USB disconnect, device number 88 [ 702.692850][T24847] fido_id[24847]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 702.827259][T24855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8387'. [ 702.907407][T24857] batadv_slave_1: entered promiscuous mode [ 702.949575][T24856] batadv_slave_1: left promiscuous mode [ 703.787074][T24886] netlink: 'syz.4.8400': attribute type 11 has an invalid length. [ 704.305068][T24900] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8406'. [ 705.641369][ T30] audit: type=1326 audit(1787074269.573:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24937 comm="syz.3.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd6d7b9e0d9 code=0x0 [ 705.722279][ T30] audit: type=1326 audit(1787074269.633:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24937 comm="syz.3.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d7b9e0d9 code=0x7ffc0000 [ 705.809266][ T30] audit: type=1326 audit(1787074269.633:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24937 comm="syz.3.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d7b9e0d9 code=0x7ffc0000 [ 705.874598][ T30] audit: type=1326 audit(1787074269.643:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24937 comm="syz.3.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6d7b5e90e code=0x7ffc0000 [ 705.900471][T24945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8424'. [ 705.947264][ T30] audit: type=1326 audit(1787074269.653:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24937 comm="syz.3.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6d7b5e90e code=0x7ffc0000 [ 705.982493][T24945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8424'. [ 706.009258][ T30] audit: type=1326 audit(1787074269.653:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24937 comm="syz.3.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6d7b5e90e code=0x7ffc0000 [ 706.098689][ T30] audit: type=1326 audit(1787074269.653:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24937 comm="syz.3.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6d7b5e90e code=0x7ffc0000 [ 706.172849][ T30] audit: type=1326 audit(1787074269.653:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24937 comm="syz.3.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6d7b5e90e code=0x7ffc0000 [ 706.240168][ T30] audit: type=1326 audit(1787074269.663:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24937 comm="syz.3.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6d7b5e90e code=0x7ffc0000 [ 706.281321][ T30] audit: type=1326 audit(1787074269.663:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24937 comm="syz.3.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd6d7b5e90e code=0x7ffc0000 [ 706.427704][T24947] bridge1: entered promiscuous mode [ 706.436887][T24947] bridge1: entered allmulticast mode [ 706.447146][T24947] team0: Port device bridge1 added [ 706.537512][T24951] bridge0: port 3(team0) entered blocking state [ 706.650812][T24951] bridge0: port 3(team0) entered disabled state [ 706.670840][T24951] team0: entered allmulticast mode [ 706.685955][T24951] team_slave_0: entered allmulticast mode [ 706.703999][T24951] team_slave_1: entered allmulticast mode [ 706.733305][T24951] team0: entered promiscuous mode [ 706.758806][T24951] team_slave_0: entered promiscuous mode [ 706.785956][T24951] team_slave_1: entered promiscuous mode [ 706.875458][ T5703] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 707.047550][ T5703] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 707.068238][ T5703] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 707.087371][ T5703] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 707.116479][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.183153][ T5703] usb 3-1: probing VID:PID(0424:012C) [ 707.207334][ T5703] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 707.234756][ T5703] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 707.242202][ T5703] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 707.250641][ T5703] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 707.265516][ T5703] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 707.396490][ T5672] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 707.565588][ T5672] usb 5-1: Using ep0 maxpacket: 8 [ 707.569550][ T5703] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 707.576472][ T5672] usb 5-1: New USB device found, idVendor=ee8d, idProduct=001e, bcdDevice=61.00 [ 707.637137][ T5672] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 707.657142][ T5672] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 707.679362][ T5672] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 707.706148][ T5672] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 707.725999][ T5672] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 707.749498][ T5672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.776554][ T5703] usb 3-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 708.021116][T24991] input: syz1 as /devices/virtual/input/input92 [ 708.564837][T25005] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 708.579692][T24078] usb 5-1: USB disconnect, device number 110 [ 708.602926][ T5703] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 708.711841][ T5703] usb 3-1: USB disconnect, device number 100 [ 708.720712][ T985] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 708.788337][T25004] bridge1: entered promiscuous mode [ 708.811676][T25004] bridge1: entered allmulticast mode [ 708.828496][T25004] team0: Port device bridge1 added [ 708.833917][T25008] bridge0: port 1(team0) entered blocking state [ 708.849994][T25008] bridge0: port 1(team0) entered disabled state [ 708.863654][T25008] team0: entered allmulticast mode [ 708.880883][T25008] team0: entered promiscuous mode [ 708.902596][ T5703] USB vub300 remote SDIO host controller[0] now disconnected [ 708.996949][ T5693] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 709.173027][ T5693] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 709.202083][ T5693] usb 4-1: config 0 interface 0 has no altsetting 0 [ 709.218062][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.257217][ T5693] usb 4-1: config 0 descriptor?? [ 709.667049][ C1] [ 709.670042][ C1] ============================= [ 709.677084][ C1] WARNING: suspicious RCU usage [ 709.682122][ C1] syzkaller #0 Tainted: G L [ 709.688201][ C1] ----------------------------- [ 709.692051][ T5693] hid_parser_main: 30 callbacks suppressed [ 709.692101][ T5693] hid-led 0003:0FC5:B080.0081: unknown main item tag 0x1 [ 709.693131][ C1] kernel/sched/core.c:9159 Illegal context switch in RCU-sched read-side critical section! [ 709.704431][ T5693] hid-led 0003:0FC5:B080.0081: unknown main item tag 0x5 [ 709.706096][ C1] [ 709.706096][ C1] other info that might help us debug this: [ 709.706096][ C1] [ 709.706111][ C1] [ 709.706111][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 709.722243][ T5693] hid-led 0003:0FC5:B080.0081: unknown main item tag 0x6 [ 709.723439][ C1] 7 locks held by syz.0.8456/25039: [ 709.740490][ T5693] hid-led 0003:0FC5:B080.0081: unknown main item tag 0x0 [ 709.741992][ C1] #0: [ 709.759747][ T5693] hid-led 0003:0FC5:B080.0081: unknown main item tag 0x0 [ 709.761406][ C1] ffff88802a4f4bc8 [ 709.765920][ T5693] hid-led 0003:0FC5:B080.0081: unknown main item tag 0x0 [ 709.771262][ C1] (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 709.781413][ T5693] hid-led 0003:0FC5:B080.0081: unknown main item tag 0x0 [ 709.782084][ C1] #1: [ 709.794636][ T5693] hid-led 0003:0FC5:B080.0081: unknown main item tag 0x0 [ 709.796533][ C1] ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 709.796603][ C1] #2: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d8/0x2090 [ 709.796663][ C1] #3: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 709.796714][ C1] #4: ffff8880216baa98 (ptlock_ptr(ptdesc)#2 [ 709.808129][ T5693] hid-led 0003:0FC5:B080.0081: unknown main item tag 0x0 [ 709.815932][ C1] ){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 709.815988][ C1] #5: ffffffff8eb59e20 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x480 [ 709.816050][ C1] #6: ffffc90000a08cc0 ((&vub300->inactivity_timer) [ 709.846875][ T5693] hid-led 0003:0FC5:B080.0081: unknown main item tag 0x0 [ 709.848458][ C1] ){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 709.884451][ C1] [ 709.884451][ C1] stack backtrace: [ 709.890421][ C1] CPU: 1 UID: 0 PID: 25039 Comm: syz.0.8456 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.890454][ C1] Tainted: [L]=SOFTLOCKUP [ 709.890461][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 709.890472][ C1] Call Trace: [ 709.890537][ C1] [ 709.890572][ C1] dump_stack_lvl+0xe8/0x150 [ 709.890644][ C1] lockdep_rcu_suspicious+0x13f/0x1d0 [ 709.890685][ C1] __might_resched+0xbb/0x4d0 [ 709.890710][ C1] ? __cancel_work_sync+0x5c/0x110 [ 709.890764][ C1] __cancel_work_sync+0x6d/0x110 [ 709.890783][ C1] mmc_free_host+0x19/0x30 [ 709.890832][ C1] call_timer_fn+0x192/0x5e0 [ 709.890852][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 709.890900][ C1] ? call_timer_fn+0xd4/0x5e0 [ 709.890920][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 709.890952][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 709.891002][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 709.891025][ C1] __run_timer_base+0x652/0x8b0 [ 709.891046][ C1] ? ktime_get+0x45/0x220 [ 709.891075][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 709.891100][ C1] ? ktime_get+0x1f5/0x220 [ 709.891120][ C1] ? lapic_next_event+0x11/0x20 [ 709.891149][ C1] run_timer_softirq+0xb7/0x170 [ 709.891170][ C1] handle_softirqs+0x225/0x840 [ 709.891191][ C1] ? __irq_exit_rcu+0xca/0x220 [ 709.891215][ C1] __irq_exit_rcu+0xca/0x220 [ 709.891232][ C1] irq_exit_rcu+0x9/0x30 [ 709.891248][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 709.891302][ C1] [ 709.891315][ C1] [ 709.891345][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 709.891385][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 709.891408][ C1] Code: e8 ab 80 28 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 d7 4f 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 9c ca 88 00 48 c7 c3 d8 48 6f 93 49 03 1e 48 89 [ 709.891422][ C1] RSP: 0000:ffffc9000525f808 EFLAGS: 00000246 [ 709.891460][ C1] RAX: 1ffffffff1c9fafb RBX: 0000000000000001 RCX: 0000000080000003 [ 709.891473][ C1] RDX: ffff888027fe0000 RSI: ffffffff8c4bdc60 RDI: ffffffff8c4bdc20 [ 709.891484][ C1] RBP: 0000000000000001 R08: ffffffff8240747a R09: 0000000000000000 [ 709.891494][ C1] R10: 0000000000000000 R11: ffffffff8eb59e20 R12: dffffc0000000000 [ 709.891504][ C1] R13: 0000000000000008 R14: ffffffff8e4fd7d8 R15: dffffc0000000000 [ 709.891521][ C1] ? pfn_valid+0xba/0x480 [ 709.891547][ C1] ? rcu_is_watching+0x15/0xb0 [ 709.891567][ C1] ? pfn_valid+0xba/0x480 [ 709.891584][ C1] pfn_valid+0x340/0x480 [ 709.891606][ C1] page_table_check_set+0x25/0x530 [ 709.891631][ C1] set_pte_range+0x7ef/0x840 [ 709.891657][ C1] filemap_map_pages+0xf35/0x2090 [ 709.891693][ C1] ? __lock_acquire+0x683/0x2cf0 [ 709.891713][ C1] ? filemap_map_pages+0x1d8/0x2090 [ 709.891734][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 709.891757][ C1] ? __pte_offset_map+0x29/0x240 [ 709.891775][ C1] ? __pte_offset_map+0x29/0x240 [ 709.891790][ C1] ? do_pte_missing+0x140c/0x34b0 [ 709.891807][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 709.891824][ C1] ? do_pte_missing+0x140c/0x34b0 [ 709.891842][ C1] do_pte_missing+0x20ae/0x34b0 [ 709.891870][ C1] ? handle_mm_fault+0xec/0x3080 [ 709.891890][ C1] handle_mm_fault+0x1b36/0x3080 [ 709.891918][ C1] ? handle_mm_fault+0xec/0x3080 [ 709.891942][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 709.891956][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 709.892006][ C1] do_user_addr_fault+0xa4d/0x1340 [ 709.892036][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 709.892059][ C1] exc_page_fault+0x6a/0xc0 [ 709.892081][ C1] asm_exc_page_fault+0x26/0x30 [ 709.892096][ C1] RIP: 0033:0x7fe510a72900 [ 709.892112][ C1] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44 [ 709.892124][ C1] RSP: 002b:00007fe510f4fa90 EFLAGS: 00010246 [ 709.892138][ C1] RAX: 000000110c264000 RBX: ffffffff821bf5c6 RCX: 0000000000000000 [ 709.892150][ C1] RDX: 00000000000015c6 RSI: 0000000000002fd7 RDI: 0000000000000001 [ 709.892159][ C1] RBP: 0000000000000000 R08: 00007fe510e10000 R09: 00007fe510e12000 [ 709.892170][ C1] R10: 00000000821bf5ca R11: 0000000000000000 R12: 00007fe510e26038 [ 709.892180][ C1] R13: 0000000000000010 R14: ffffffff821bf0c2 R15: 00007fe511955720 [ 709.892193][ C1] ? __might_fault+0x22/0x130 [ 709.892210][ C1] ? folio_zero_user+0x3e6/0x8e0 [ 709.892235][ C1] [ 709.892244][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4487 [ 710.340559][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 25039, name: syz.0.8456 [ 710.349854][ C1] preempt_count: 103, expected: 0 [ 710.354909][ C1] RCU nest depth: 3, expected: 0 [ 710.359919][ C1] 7 locks held by syz.0.8456/25039: [ 710.365150][ C1] #0: ffff88802a4f4bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 710.374511][ C1] #1: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 710.384204][ C1] #2: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d8/0x2090 [ 710.394055][ C1] #3: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 710.403666][ C1] #4: ffff8880216baa98 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 710.409246][ T5693] usb 4-1: USB disconnect, device number 102 [ 710.414225][ C1] #5: ffffffff8eb59e20 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x480 [ 710.429735][ C1] #6: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 710.440308][ C1] Preemption disabled at: [ 710.440325][ C1] [<0000000000000000>] 0x0 [ 710.449168][ C1] CPU: 1 UID: 0 PID: 25039 Comm: syz.0.8456 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.449202][ C1] Tainted: [L]=SOFTLOCKUP [ 710.449210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 710.449221][ C1] Call Trace: [ 710.449230][ C1] [ 710.449239][ C1] dump_stack_lvl+0xe8/0x150 [ 710.449272][ C1] __might_resched+0x378/0x4d0 [ 710.449304][ C1] __cancel_work_sync+0x6d/0x110 [ 710.449331][ C1] mmc_free_host+0x19/0x30 [ 710.449352][ C1] call_timer_fn+0x192/0x5e0 [ 710.449377][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 710.449403][ C1] ? call_timer_fn+0xd4/0x5e0 [ 710.449427][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 710.449462][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 710.449488][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 710.449518][ C1] __run_timer_base+0x652/0x8b0 [ 710.449553][ C1] ? ktime_get+0x45/0x220 [ 710.449589][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 710.449620][ C1] ? ktime_get+0x1f5/0x220 [ 710.449645][ C1] ? lapic_next_event+0x11/0x20 [ 710.449678][ C1] run_timer_softirq+0xb7/0x170 [ 710.449705][ C1] handle_softirqs+0x225/0x840 [ 710.449730][ C1] ? __irq_exit_rcu+0xca/0x220 [ 710.449760][ C1] __irq_exit_rcu+0xca/0x220 [ 710.449782][ C1] irq_exit_rcu+0x9/0x30 [ 710.449802][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 710.449828][ C1] [ 710.449835][ C1] [ 710.449843][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 710.449864][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 710.449892][ C1] Code: e8 ab 80 28 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 d7 4f 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 9c ca 88 00 48 c7 c3 d8 48 6f 93 49 03 1e 48 89 [ 710.449909][ C1] RSP: 0000:ffffc9000525f808 EFLAGS: 00000246 [ 710.449927][ C1] RAX: 1ffffffff1c9fafb RBX: 0000000000000001 RCX: 0000000080000003 [ 710.449942][ C1] RDX: ffff888027fe0000 RSI: ffffffff8c4bdc60 RDI: ffffffff8c4bdc20 [ 710.449957][ C1] RBP: 0000000000000001 R08: ffffffff8240747a R09: 0000000000000000 [ 710.449970][ C1] R10: 0000000000000000 R11: ffffffff8eb59e20 R12: dffffc0000000000 [ 710.449983][ C1] R13: 0000000000000008 R14: ffffffff8e4fd7d8 R15: dffffc0000000000 [ 710.450004][ C1] ? pfn_valid+0xba/0x480 [ 710.450037][ C1] ? rcu_is_watching+0x15/0xb0 [ 710.450057][ C1] ? pfn_valid+0xba/0x480 [ 710.450076][ C1] pfn_valid+0x340/0x480 [ 710.450103][ C1] page_table_check_set+0x25/0x530 [ 710.450134][ C1] set_pte_range+0x7ef/0x840 [ 710.450166][ C1] filemap_map_pages+0xf35/0x2090 [ 710.450209][ C1] ? __lock_acquire+0x683/0x2cf0 [ 710.450235][ C1] ? filemap_map_pages+0x1d8/0x2090 [ 710.450261][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 710.450291][ C1] ? __pte_offset_map+0x29/0x240 [ 710.450314][ C1] ? __pte_offset_map+0x29/0x240 [ 710.450333][ C1] ? do_pte_missing+0x140c/0x34b0 [ 710.450356][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 710.450377][ C1] ? do_pte_missing+0x140c/0x34b0 [ 710.450399][ C1] do_pte_missing+0x20ae/0x34b0 [ 710.450436][ C1] ? handle_mm_fault+0xec/0x3080 [ 710.450460][ C1] handle_mm_fault+0x1b36/0x3080 [ 710.450493][ C1] ? handle_mm_fault+0xec/0x3080 [ 710.450523][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 710.450550][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 710.450601][ C1] do_user_addr_fault+0xa4d/0x1340 [ 710.450639][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 710.450669][ C1] exc_page_fault+0x6a/0xc0 [ 710.450699][ C1] asm_exc_page_fault+0x26/0x30 [ 710.450718][ C1] RIP: 0033:0x7fe510a72900 [ 710.450738][ C1] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44 [ 710.450753][ C1] RSP: 002b:00007fe510f4fa90 EFLAGS: 00010246 [ 710.450769][ C1] RAX: 000000110c264000 RBX: ffffffff821bf5c6 RCX: 0000000000000000 [ 710.450782][ C1] RDX: 00000000000015c6 RSI: 0000000000002fd7 RDI: 0000000000000001 [ 710.450794][ C1] RBP: 0000000000000000 R08: 00007fe510e10000 R09: 00007fe510e12000 [ 710.450806][ C1] R10: 00000000821bf5ca R11: 0000000000000000 R12: 00007fe510e26038 [ 710.450820][ C1] R13: 0000000000000010 R14: ffffffff821bf0c2 R15: 00007fe511955720 [ 710.450834][ C1] ? __might_fault+0x22/0x130 [ 710.450853][ C1] ? folio_zero_user+0x3e6/0x8e0 [ 710.450885][ C1] [ 710.451101][ C1] [ 710.878668][ C1] ================================ [ 710.883782][ C1] WARNING: inconsistent lock state [ 710.888893][ C1] syzkaller #0 Tainted: G W L [ 710.894868][ C1] -------------------------------- [ 710.899975][ C1] inconsistent {SOFTIRQ-ON-R} -> {IN-SOFTIRQ-W} usage. [ 710.906864][ C1] syz.0.8456/25039 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 710.913396][ C1] ffffffff8f5f43d8 (wakeup_srcu){.+-+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 710.922484][ C1] {SOFTIRQ-ON-R} state was registered at: [ 710.928265][ C1] lock_acquire+0x106/0x350 [ 710.932883][ C1] pm_print_active_wakeup_sources+0x60/0x370 [ 710.939108][ C1] wakeup_count_store+0xcc/0x120 [ 710.944163][ C1] kernfs_fop_write_iter+0x3a4/0x540 [ 710.949574][ C1] aio_write+0x5cd/0x870 [ 710.953938][ C1] io_submit_one+0x798/0x13d0 [ 710.958732][ C1] __se_sys_io_submit+0x195/0x340 [ 710.963856][ C1] do_syscall_64+0x174/0x580 [ 710.968564][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.974583][ C1] irq event stamp: 2022 [ 710.978822][ C1] hardirqs last enabled at (2022): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 710.989169][ C1] hardirqs last disabled at (2021): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 710.999070][ C1] softirqs last enabled at (634): [] fpu_clone+0x340/0xaf0 [ 711.007932][ C1] softirqs last disabled at (901): [] __irq_exit_rcu+0xca/0x220 [ 711.017198][ C1] [ 711.017198][ C1] other info that might help us debug this: [ 711.025300][ C1] Possible unsafe locking scenario: [ 711.025300][ C1] [ 711.032830][ C1] CPU0 [ 711.036144][ C1] ---- [ 711.039436][ C1] lock(wakeup_srcu); [ 711.043597][ C1] [ 711.047067][ C1] lock(wakeup_srcu); [ 711.051373][ C1] [ 711.051373][ C1] *** DEADLOCK *** [ 711.051373][ C1] [ 711.059547][ C1] 7 locks held by syz.0.8456/25039: [ 711.064751][ C1] #0: ffff88802a4f4bc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 711.074015][ C1] #1: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 711.083611][ C1] #2: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d8/0x2090 [ 711.093466][ C1] #3: ffffffff8eb59d60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 711.102989][ C1] #4: ffff8880216baa98 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 711.113448][ C1] #5: ffffffff8eb59e20 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x480 [ 711.122872][ C1] #6: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 711.133324][ C1] [ 711.133324][ C1] stack backtrace: [ 711.139214][ C1] CPU: 1 UID: 0 PID: 25039 Comm: syz.0.8456 Tainted: G W L syzkaller #0 PREEMPT(full) [ 711.139238][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 711.139244][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 711.139253][ C1] Call Trace: [ 711.139260][ C1] [ 711.139267][ C1] dump_stack_lvl+0xe8/0x150 [ 711.139289][ C1] print_usage_bug+0x28b/0x2e0 [ 711.139310][ C1] mark_lock_irq+0x410/0x420 [ 711.139332][ C1] mark_lock+0x115/0x190 [ 711.139351][ C1] __lock_acquire+0x65c/0x2cf0 [ 711.139369][ C1] ? check_noncircular+0xda/0x150 [ 711.139390][ C1] ? add_lock_to_list+0xc7/0x100 [ 711.139410][ C1] ? lockdep_unlock+0x5d/0xd0 [ 711.139425][ C1] ? __lock_acquire+0x13e8/0x2cf0 [ 711.139444][ C1] ? __synchronize_srcu+0xb5/0x2f0 [ 711.139461][ C1] lock_sync+0x9d/0x120 [ 711.139479][ C1] ? __synchronize_srcu+0xb5/0x2f0 [ 711.139504][ C1] __synchronize_srcu+0xc9/0x2f0 [ 711.139522][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 711.139538][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 711.139556][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 711.139575][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 711.139593][ C1] ? synchronize_srcu+0x20a/0x260 [ 711.139610][ C1] wakeup_source_unregister+0x129/0x3f0 [ 711.139631][ C1] mmc_host_classdev_release+0x47/0x100 [ 711.139648][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 711.139662][ C1] device_release+0xc4/0x1f0 [ 711.139748][ C1] kobject_put+0x222/0x550 [ 711.139811][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 711.139829][ C1] call_timer_fn+0x192/0x5e0 [ 711.139848][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 711.139867][ C1] ? call_timer_fn+0xd4/0x5e0 [ 711.139886][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 711.139908][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.139925][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 711.139945][ C1] __run_timer_base+0x652/0x8b0 [ 711.139963][ C1] ? ktime_get+0x45/0x220 [ 711.139981][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 711.140001][ C1] ? ktime_get+0x1f5/0x220 [ 711.140017][ C1] ? lapic_next_event+0x11/0x20 [ 711.140038][ C1] run_timer_softirq+0xb7/0x170 [ 711.140056][ C1] handle_softirqs+0x225/0x840 [ 711.140073][ C1] ? __irq_exit_rcu+0xca/0x220 [ 711.140090][ C1] __irq_exit_rcu+0xca/0x220 [ 711.140105][ C1] irq_exit_rcu+0x9/0x30 [ 711.140119][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 711.140139][ C1] [ 711.140145][ C1] [ 711.140150][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 711.140166][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 711.140186][ C1] Code: e8 ab 80 28 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 d7 4f 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 9c ca 88 00 48 c7 c3 d8 48 6f 93 49 03 1e 48 89 [ 711.140199][ C1] RSP: 0000:ffffc9000525f808 EFLAGS: 00000246 [ 711.140213][ C1] RAX: 1ffffffff1c9fafb RBX: 0000000000000001 RCX: 0000000080000003 [ 711.140225][ C1] RDX: ffff888027fe0000 RSI: ffffffff8c4bdc60 RDI: ffffffff8c4bdc20 [ 711.140235][ C1] RBP: 0000000000000001 R08: ffffffff8240747a R09: 0000000000000000 [ 711.140245][ C1] R10: 0000000000000000 R11: ffffffff8eb59e20 R12: dffffc0000000000 [ 711.140255][ C1] R13: 0000000000000008 R14: ffffffff8e4fd7d8 R15: dffffc0000000000 [ 711.140267][ C1] ? pfn_valid+0xba/0x480 [ 711.140287][ C1] ? rcu_is_watching+0x15/0xb0 [ 711.140305][ C1] ? pfn_valid+0xba/0x480 [ 711.140321][ C1] pfn_valid+0x340/0x480 [ 711.140339][ C1] page_table_check_set+0x25/0x530 [ 711.140358][ C1] set_pte_range+0x7ef/0x840 [ 711.140375][ C1] filemap_map_pages+0xf35/0x2090 [ 711.140397][ C1] ? __lock_acquire+0x683/0x2cf0 [ 711.140414][ C1] ? filemap_map_pages+0x1d8/0x2090 [ 711.140430][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 711.140446][ C1] ? __pte_offset_map+0x29/0x240 [ 711.140462][ C1] ? __pte_offset_map+0x29/0x240 [ 711.140475][ C1] ? do_pte_missing+0x140c/0x34b0 [ 711.140498][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 711.140513][ C1] ? do_pte_missing+0x140c/0x34b0 [ 711.140529][ C1] do_pte_missing+0x20ae/0x34b0 [ 711.140550][ C1] ? handle_mm_fault+0xec/0x3080 [ 711.140566][ C1] handle_mm_fault+0x1b36/0x3080 [ 711.140583][ C1] ? handle_mm_fault+0xec/0x3080 [ 711.140600][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 711.140613][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 711.140637][ C1] do_user_addr_fault+0xa4d/0x1340 [ 711.140660][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 711.140679][ C1] exc_page_fault+0x6a/0xc0 [ 711.140699][ C1] asm_exc_page_fault+0x26/0x30 [ 711.140712][ C1] RIP: 0033:0x7fe510a72900 [ 711.140726][ C1] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44 [ 711.140738][ C1] RSP: 002b:00007fe510f4fa90 EFLAGS: 00010246 [ 711.140750][ C1] RAX: 000000110c264000 RBX: ffffffff821bf5c6 RCX: 0000000000000000 [ 711.140761][ C1] RDX: 00000000000015c6 RSI: 0000000000002fd7 RDI: 0000000000000001 [ 711.140770][ C1] RBP: 0000000000000000 R08: 00007fe510e10000 R09: 00007fe510e12000 [ 711.140780][ C1] R10: 00000000821bf5ca R11: 0000000000000000 R12: 00007fe510e26038 [ 711.140790][ C1] R13: 0000000000000010 R14: ffffffff821bf0c2 R15: 00007fe511955720 [ 711.140802][ C1] ? __might_fault+0x22/0x130 [ 711.140817][ C1] ? folio_zero_user+0x3e6/0x8e0 [ 711.140835][ C1] [ 711.667501][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1491 [ 711.676796][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 25039, name: syz.0.8456 [ 711.685930][ C1] preempt_count: 103, expected: 0 [ 711.690968][ C1] RCU nest depth: 3, expected: 0 [ 711.695954][ C1] INFO: lockdep is turned off. [ 711.700770][ C1] Preemption disabled at: [ 711.700781][ C1] [<0000000000000000>] 0x0 [ 711.709557][ C1] CPU: 1 UID: 0 PID: 25039 Comm: syz.0.8456 Tainted: G W L syzkaller #0 PREEMPT(full) [ 711.709590][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 711.709596][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 711.709606][ C1] Call Trace: [ 711.709613][ C1] [ 711.709621][ C1] dump_stack_lvl+0xe8/0x150 [ 711.709652][ C1] __might_resched+0x378/0x4d0 [ 711.709678][ C1] __synchronize_srcu+0x1a1/0x2f0 [ 711.709701][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 711.709720][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 711.709743][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 711.709768][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 711.709791][ C1] ? synchronize_srcu+0x20a/0x260 [ 711.709814][ C1] wakeup_source_unregister+0x129/0x3f0 [ 711.709841][ C1] mmc_host_classdev_release+0x47/0x100 [ 711.709863][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 711.709884][ C1] device_release+0xc4/0x1f0 [ 711.709904][ C1] kobject_put+0x222/0x550 [ 711.709926][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 711.709950][ C1] call_timer_fn+0x192/0x5e0 [ 711.709976][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 711.710000][ C1] ? call_timer_fn+0xd4/0x5e0 [ 711.710022][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 711.710050][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.710073][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 711.710097][ C1] __run_timer_base+0x652/0x8b0 [ 711.710117][ C1] ? ktime_get+0x45/0x220 [ 711.710142][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 711.710166][ C1] ? ktime_get+0x1f5/0x220 [ 711.710187][ C1] ? lapic_next_event+0x11/0x20 [ 711.710214][ C1] run_timer_softirq+0xb7/0x170 [ 711.710238][ C1] handle_softirqs+0x225/0x840 [ 711.710260][ C1] ? __irq_exit_rcu+0xca/0x220 [ 711.710281][ C1] __irq_exit_rcu+0xca/0x220 [ 711.710306][ C1] irq_exit_rcu+0x9/0x30 [ 711.710325][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 711.710351][ C1] [ 711.710358][ C1] [ 711.710375][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 711.710397][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 711.710432][ C1] Code: e8 ab 80 28 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 d7 4f 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 9c ca 88 00 48 c7 c3 d8 48 6f 93 49 03 1e 48 89 [ 711.710448][ C1] RSP: 0000:ffffc9000525f808 EFLAGS: 00000246 [ 711.710468][ C1] RAX: 1ffffffff1c9fafb RBX: 0000000000000001 RCX: 0000000080000003 [ 711.710483][ C1] RDX: ffff888027fe0000 RSI: ffffffff8c4bdc60 RDI: ffffffff8c4bdc20 [ 711.710497][ C1] RBP: 0000000000000001 R08: ffffffff8240747a R09: 0000000000000000 [ 711.710510][ C1] R10: 0000000000000000 R11: ffffffff8eb59e20 R12: dffffc0000000000 [ 711.710523][ C1] R13: 0000000000000008 R14: ffffffff8e4fd7d8 R15: dffffc0000000000 [ 711.710539][ C1] ? pfn_valid+0xba/0x480 [ 711.710566][ C1] ? rcu_is_watching+0x15/0xb0 [ 711.710590][ C1] ? pfn_valid+0xba/0x480 [ 711.710610][ C1] pfn_valid+0x340/0x480 [ 711.710632][ C1] page_table_check_set+0x25/0x530 [ 711.710657][ C1] set_pte_range+0x7ef/0x840 [ 711.710678][ C1] filemap_map_pages+0xf35/0x2090 [ 711.710705][ C1] ? __lock_acquire+0x683/0x2cf0 [ 711.710729][ C1] ? filemap_map_pages+0x1d8/0x2090 [ 711.710750][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 711.710771][ C1] ? __pte_offset_map+0x29/0x240 [ 711.710790][ C1] ? __pte_offset_map+0x29/0x240 [ 711.710808][ C1] ? do_pte_missing+0x140c/0x34b0 [ 711.710828][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 711.710847][ C1] ? do_pte_missing+0x140c/0x34b0 [ 711.710867][ C1] do_pte_missing+0x20ae/0x34b0 [ 711.710893][ C1] ? handle_mm_fault+0xec/0x3080 [ 711.710913][ C1] handle_mm_fault+0x1b36/0x3080 [ 711.710936][ C1] ? handle_mm_fault+0xec/0x3080 [ 711.710967][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 711.710984][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 711.711013][ C1] do_user_addr_fault+0xa4d/0x1340 [ 711.711041][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 711.711067][ C1] exc_page_fault+0x6a/0xc0 [ 711.711091][ C1] asm_exc_page_fault+0x26/0x30 [ 711.711109][ C1] RIP: 0033:0x7fe510a72900 [ 711.711126][ C1] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44 [ 711.711142][ C1] RSP: 002b:00007fe510f4fa90 EFLAGS: 00010246 [ 711.711159][ C1] RAX: 000000110c264000 RBX: ffffffff821bf5c6 RCX: 0000000000000000 [ 711.711173][ C1] RDX: 00000000000015c6 RSI: 0000000000002fd7 RDI: 0000000000000001 [ 711.711185][ C1] RBP: 0000000000000000 R08: 00007fe510e10000 R09: 00007fe510e12000 [ 711.711198][ C1] R10: 00000000821bf5ca R11: 0000000000000000 R12: 00007fe510e26038 [ 711.711211][ C1] R13: 0000000000000010 R14: ffffffff821bf0c2 R15: 00007fe511955720 [ 711.711236][ C1] ? __might_fault+0x22/0x130 [ 711.711256][ C1] ? folio_zero_user+0x3e6/0x8e0 [ 711.711280][ C1] [ 711.711291][ C1] ODEBUG: object ffffc90000a08a80 is NOT on stack ffffc90005258000, but annotated. [ 712.199839][ C1] ------------[ cut here ]------------ [ 712.205312][ C1] 1 [ 712.205325][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz.0.8456/25039 [ 712.218017][ C1] Modules linked in: [ 712.221946][ C1] CPU: 1 UID: 0 PID: 25039 Comm: syz.0.8456 Tainted: G W L syzkaller #0 PREEMPT(full) [ 712.232911][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 712.238106][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 712.248162][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 712.254062][ C1] Code: cc cc cc 41 ff c7 44 89 3d 99 72 cd 15 48 c7 c1 80 e5 4b 8c 48 c7 c7 e0 e5 4b 8c 84 c0 48 0f 45 f9 48 89 de e8 fd 48 47 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 51 54 56 0a 3b 05 4f [ 712.273677][ C1] RSP: 0000:ffffc90000a089b8 EFLAGS: 00010046 [ 712.279761][ C1] RAX: 0000000000000050 RBX: ffffc90000a08a80 RCX: 53ecee51ca935200 [ 712.287763][ C1] RDX: 0000000000000100 RSI: 0000000000000104 RDI: 0000000000000000 [ 712.295757][ C1] RBP: ffff888027fe0020 R08: ffff8880b8724713 R09: 1ffff110170e48e2 [ 712.303768][ C1] R10: dffffc0000000000 R11: ffffed10170e48e3 R12: 1ffff9200014114c [ 712.311784][ C1] R13: ffff8880568cece8 R14: dffffc0000000000 R15: 0000000000000001 [ 712.319755][ C1] FS: 00005555854af500(0000) GS:ffff88812503f000(0000) knlGS:0000000000000000 [ 712.328714][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.335298][ C1] CR2: 000000110c26b017 CR3: 000000007b992000 CR4: 00000000003526f0 [ 712.343277][ C1] Call Trace: [ 712.346580][ C1] [ 712.349435][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 712.354997][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 712.360029][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 712.365606][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 712.370640][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 712.376646][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 712.382196][ C1] ? synchronize_srcu+0x20a/0x260 [ 712.387251][ C1] wakeup_source_unregister+0x129/0x3f0 [ 712.392805][ C1] mmc_host_classdev_release+0x47/0x100 [ 712.398352][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 712.404519][ C1] device_release+0xc4/0x1f0 [ 712.409126][ C1] kobject_put+0x222/0x550 [ 712.413563][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 712.418514][ C1] call_timer_fn+0x192/0x5e0 [ 712.423105][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 712.429779][ C1] ? call_timer_fn+0xd4/0x5e0 [ 712.434474][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 712.439622][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 712.444820][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 712.451526][ C1] __run_timer_base+0x652/0x8b0 [ 712.456399][ C1] ? ktime_get+0x45/0x220 [ 712.460748][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 712.466126][ C1] ? ktime_get+0x1f5/0x220 [ 712.470576][ C1] ? lapic_next_event+0x11/0x20 [ 712.475497][ C1] run_timer_softirq+0xb7/0x170 [ 712.480363][ C1] handle_softirqs+0x225/0x840 [ 712.485126][ C1] ? __irq_exit_rcu+0xca/0x220 [ 712.489891][ C1] __irq_exit_rcu+0xca/0x220 [ 712.494478][ C1] irq_exit_rcu+0x9/0x30 [ 712.498714][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 712.504348][ C1] [ 712.507278][ C1] [ 712.510201][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 712.516190][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 712.521590][ C1] Code: e8 ab 80 28 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 d7 4f 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 9c ca 88 00 48 c7 c3 d8 48 6f 93 49 03 1e 48 89 [ 712.541201][ C1] RSP: 0000:ffffc9000525f808 EFLAGS: 00000246 [ 712.547269][ C1] RAX: 1ffffffff1c9fafb RBX: 0000000000000001 RCX: 0000000080000003 [ 712.555251][ C1] RDX: ffff888027fe0000 RSI: ffffffff8c4bdc60 RDI: ffffffff8c4bdc20 [ 712.563235][ C1] RBP: 0000000000000001 R08: ffffffff8240747a R09: 0000000000000000 [ 712.571210][ C1] R10: 0000000000000000 R11: ffffffff8eb59e20 R12: dffffc0000000000 [ 712.579200][ C1] R13: 0000000000000008 R14: ffffffff8e4fd7d8 R15: dffffc0000000000 [ 712.587172][ C1] ? pfn_valid+0xba/0x480 [ 712.591522][ C1] ? rcu_is_watching+0x15/0xb0 [ 712.596336][ C1] ? pfn_valid+0xba/0x480 [ 712.600665][ C1] pfn_valid+0x340/0x480 [ 712.604911][ C1] page_table_check_set+0x25/0x530 [ 712.610051][ C1] set_pte_range+0x7ef/0x840 [ 712.614678][ C1] filemap_map_pages+0xf35/0x2090 [ 712.619745][ C1] ? __lock_acquire+0x683/0x2cf0 [ 712.624722][ C1] ? filemap_map_pages+0x1d8/0x2090 [ 712.629961][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 712.635458][ C1] ? __pte_offset_map+0x29/0x240 [ 712.640450][ C1] ? __pte_offset_map+0x29/0x240 [ 712.645434][ C1] ? do_pte_missing+0x140c/0x34b0 [ 712.650485][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 712.655952][ C1] ? do_pte_missing+0x140c/0x34b0 [ 712.660984][ C1] do_pte_missing+0x20ae/0x34b0 [ 712.665929][ C1] ? handle_mm_fault+0xec/0x3080 [ 712.670868][ C1] handle_mm_fault+0x1b36/0x3080 [ 712.675810][ C1] ? handle_mm_fault+0xec/0x3080 [ 712.680752][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 712.686042][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 712.691257][ C1] do_user_addr_fault+0xa4d/0x1340 [ 712.696376][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 712.701760][ C1] exc_page_fault+0x6a/0xc0 [ 712.706270][ C1] asm_exc_page_fault+0x26/0x30 [ 712.711207][ C1] RIP: 0033:0x7fe510a72900 [ 712.715625][ C1] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44 [ 712.735231][ C1] RSP: 002b:00007fe510f4fa90 EFLAGS: 00010246 [ 712.741302][ C1] RAX: 000000110c264000 RBX: ffffffff821bf5c6 RCX: 0000000000000000 [ 712.749276][ C1] RDX: 00000000000015c6 RSI: 0000000000002fd7 RDI: 0000000000000001 [ 712.757249][ C1] RBP: 0000000000000000 R08: 00007fe510e10000 R09: 00007fe510e12000 [ 712.765224][ C1] R10: 00000000821bf5ca R11: 0000000000000000 R12: 00007fe510e26038 [ 712.773196][ C1] R13: 0000000000000010 R14: ffffffff821bf0c2 R15: 00007fe511955720 [ 712.781441][ C1] ? __might_fault+0x22/0x130 [ 712.786135][ C1] ? folio_zero_user+0x3e6/0x8e0 [ 712.791078][ C1] [ 712.794118][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 712.801401][ C1] CPU: 1 UID: 0 PID: 25039 Comm: syz.0.8456 Tainted: G W L syzkaller #0 PREEMPT(full) [ 712.812345][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 712.817573][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 712.827634][ C1] Call Trace: [ 712.830956][ C1] [ 712.833803][ C1] vpanic+0x56c/0xa60 [ 712.837910][ C1] ? __pfx__printk+0x10/0x10 [ 712.842501][ C1] ? __pfx_vpanic+0x10/0x10 [ 712.847013][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 712.852328][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 712.857540][ C1] panic+0xc5/0xd0 [ 712.861288][ C1] ? __pfx_panic+0x10/0x10 [ 712.865746][ C1] __warn+0x315/0x4c0 [ 712.869752][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 712.875135][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 712.880428][ C1] __report_bug+0x276/0x570 [ 712.885040][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 712.890164][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 712.895472][ C1] ? __pfx___report_bug+0x10/0x10 [ 712.900562][ C1] ? __wake_up_klogd+0xe6/0x120 [ 712.905440][ C1] ? vprintk_emit+0x4eb/0x560 [ 712.910135][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 712.915175][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 712.920908][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 712.926217][ C1] report_bug+0x16a/0x220 [ 712.930652][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 712.935941][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 712.941237][ C1] handle_bug+0x9c/0x200 [ 712.945487][ C1] exc_invalid_op+0x1a/0x50 [ 712.950049][ C1] asm_exc_invalid_op+0x1a/0x20 [ 712.954905][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 712.960816][ C1] Code: cc cc cc 41 ff c7 44 89 3d 99 72 cd 15 48 c7 c1 80 e5 4b 8c 48 c7 c7 e0 e5 4b 8c 84 c0 48 0f 45 f9 48 89 de e8 fd 48 47 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 51 54 56 0a 3b 05 4f [ 712.980428][ C1] RSP: 0000:ffffc90000a089b8 EFLAGS: 00010046 [ 712.986515][ C1] RAX: 0000000000000050 RBX: ffffc90000a08a80 RCX: 53ecee51ca935200 [ 712.994498][ C1] RDX: 0000000000000100 RSI: 0000000000000104 RDI: 0000000000000000 [ 713.002478][ C1] RBP: ffff888027fe0020 R08: ffff8880b8724713 R09: 1ffff110170e48e2 [ 713.010470][ C1] R10: dffffc0000000000 R11: ffffed10170e48e3 R12: 1ffff9200014114c [ 713.018451][ C1] R13: ffff8880568cece8 R14: dffffc0000000000 R15: 0000000000000001 [ 713.026437][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 713.031736][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 713.037380][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 713.042420][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 713.047972][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 713.053008][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 713.058821][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 713.064374][ C1] ? synchronize_srcu+0x20a/0x260 [ 713.069408][ C1] wakeup_source_unregister+0x129/0x3f0 [ 713.074968][ C1] mmc_host_classdev_release+0x47/0x100 [ 713.080527][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 713.086687][ C1] device_release+0xc4/0x1f0 [ 713.091283][ C1] kobject_put+0x222/0x550 [ 713.095705][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 713.100485][ C1] call_timer_fn+0x192/0x5e0 [ 713.105090][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 713.111772][ C1] ? call_timer_fn+0xd4/0x5e0 [ 713.116458][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 713.121579][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 713.126787][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 713.133474][ C1] __run_timer_base+0x652/0x8b0 [ 713.138340][ C1] ? ktime_get+0x45/0x220 [ 713.142680][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 713.148062][ C1] ? ktime_get+0x1f5/0x220 [ 713.152487][ C1] ? lapic_next_event+0x11/0x20 [ 713.157360][ C1] run_timer_softirq+0xb7/0x170 [ 713.162220][ C1] handle_softirqs+0x225/0x840 [ 713.166998][ C1] ? __irq_exit_rcu+0xca/0x220 [ 713.171789][ C1] __irq_exit_rcu+0xca/0x220 [ 713.176391][ C1] irq_exit_rcu+0x9/0x30 [ 713.180638][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 713.186279][ C1] [ 713.189217][ C1] [ 713.192152][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 713.198227][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 713.203650][ C1] Code: e8 ab 80 28 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 d7 4f 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 9c ca 88 00 48 c7 c3 d8 48 6f 93 49 03 1e 48 89 [ 713.223275][ C1] RSP: 0000:ffffc9000525f808 EFLAGS: 00000246 [ 713.229408][ C1] RAX: 1ffffffff1c9fafb RBX: 0000000000000001 RCX: 0000000080000003 [ 713.237393][ C1] RDX: ffff888027fe0000 RSI: ffffffff8c4bdc60 RDI: ffffffff8c4bdc20 [ 713.245394][ C1] RBP: 0000000000000001 R08: ffffffff8240747a R09: 0000000000000000 [ 713.253372][ C1] R10: 0000000000000000 R11: ffffffff8eb59e20 R12: dffffc0000000000 [ 713.261350][ C1] R13: 0000000000000008 R14: ffffffff8e4fd7d8 R15: dffffc0000000000 [ 713.269338][ C1] ? pfn_valid+0xba/0x480 [ 713.273687][ C1] ? rcu_is_watching+0x15/0xb0 [ 713.278465][ C1] ? pfn_valid+0xba/0x480 [ 713.282821][ C1] pfn_valid+0x340/0x480 [ 713.287070][ C1] page_table_check_set+0x25/0x530 [ 713.292189][ C1] set_pte_range+0x7ef/0x840 [ 713.296878][ C1] filemap_map_pages+0xf35/0x2090 [ 713.301922][ C1] ? __lock_acquire+0x683/0x2cf0 [ 713.306864][ C1] ? filemap_map_pages+0x1d8/0x2090 [ 713.312081][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 713.317584][ C1] ? __pte_offset_map+0x29/0x240 [ 713.322534][ C1] ? __pte_offset_map+0x29/0x240 [ 713.327563][ C1] ? do_pte_missing+0x140c/0x34b0 [ 713.332592][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 713.338056][ C1] ? do_pte_missing+0x140c/0x34b0 [ 713.343086][ C1] do_pte_missing+0x20ae/0x34b0 [ 713.347946][ C1] ? handle_mm_fault+0xec/0x3080 [ 713.352892][ C1] handle_mm_fault+0x1b36/0x3080 [ 713.357833][ C1] ? handle_mm_fault+0xec/0x3080 [ 713.362779][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 713.368239][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 713.373471][ C1] do_user_addr_fault+0xa4d/0x1340 [ 713.378613][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 713.384011][ C1] exc_page_fault+0x6a/0xc0 [ 713.388577][ C1] asm_exc_page_fault+0x26/0x30 [ 713.393443][ C1] RIP: 0033:0x7fe510a72900 [ 713.397860][ C1] Code: ff 48 83 e8 01 48 89 de bf 01 00 00 00 48 c1 e0 0e 48 c1 ee 06 48 01 c8 48 89 d9 81 e6 ff 3f 00 00 48 c1 e9 03 83 e1 07 d3 e7 <40> 84 bc 06 40 40 00 00 0f 85 1f fe ff ff e9 d3 fd ff ff 0f 1f 44 [ 713.417570][ C1] RSP: 002b:00007fe510f4fa90 EFLAGS: 00010246 [ 713.423650][ C1] RAX: 000000110c264000 RBX: ffffffff821bf5c6 RCX: 0000000000000000 [ 713.431623][ C1] RDX: 00000000000015c6 RSI: 0000000000002fd7 RDI: 0000000000000001 [ 713.439686][ C1] RBP: 0000000000000000 R08: 00007fe510e10000 R09: 00007fe510e12000 [ 713.447660][ C1] R10: 00000000821bf5ca R11: 0000000000000000 R12: 00007fe510e26038 [ 713.455640][ C1] R13: 0000000000000010 R14: ffffffff821bf0c2 R15: 00007fe511955720 [ 713.463612][ C1] ? __might_fault+0x22/0x130 [ 713.468294][ C1] ? folio_zero_user+0x3e6/0x8e0 [ 713.473242][ C1] [ 713.476557][ C1] Kernel Offset: disabled [ 713.480884][ C1] Rebooting in 86400 seconds..