last executing test programs: 5m1.171091046s ago: executing program 2 (id=73): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB='\b\x00'], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320088a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m0.155361629s ago: executing program 2 (id=82): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) socket$kcm(0x2, 0xa, 0x73) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m58.476453871s ago: executing program 2 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) 4m58.166715893s ago: executing program 2 (id=88): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040), 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m57.297573839s ago: executing program 2 (id=93): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) close(0x3) 4m55.921316056s ago: executing program 2 (id=101): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4m55.433798358s ago: executing program 32 (id=101): r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 5.862223634s ago: executing program 3 (id=2583): unshare(0x4020400) acct(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00') unshare(0x2c020400) unshare(0x10000) 5.364393624s ago: executing program 3 (id=2589): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) 5.280610412s ago: executing program 0 (id=2590): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x1}}, 0x24, 0x1) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 5.027264626s ago: executing program 0 (id=2593): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(0x0, 0x88) 4.872796278s ago: executing program 3 (id=2595): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000200)="80000000000000000000") nanosleep(&(0x7f0000000300)={0x1}, 0x0) 4.008692665s ago: executing program 6 (id=2604): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000040)={[{@noload}, {@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@usrjquota, 0x0}, {@bh}, {@journal_dev={'journal_dev', 0x3d, 0x10}}, {@bh}, {@data_writeback}, {@grpjquota}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@data_err_ignore}], [{@pcr={'pcr', 0x3d, 0x34}}, {@mask={'mask', 0x3d, '^MAY_READ'}}], 0x2c}, 0x0, 0x4f9, &(0x7f0000000780)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180)) 3.582252543s ago: executing program 0 (id=2607): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r0, 0x0, 0x0, 0x400) read(r0, &(0x7f0000000d40)=""/4096, 0x1000) 3.473296805s ago: executing program 6 (id=2608): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001c000107000000000000000007000000", @ANYRES32=r2, @ANYBLOB="80000200080001007f0000010a0002"], 0x38}}, 0x0) 3.375121034s ago: executing program 0 (id=2609): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) msgsnd(0x0, 0x0, 0x401, 0x0) 3.352572474s ago: executing program 5 (id=2610): socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x80003, 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/275, 0x113}], 0x1, 0xa3, 0xf9f) 3.023704934s ago: executing program 5 (id=2614): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000180)=ANY=[], 0x3, 0x5d9, &(0x7f00000010c0)="$eJzs3U9rHOcdB/DvrNZrrQuOktiJ2wYqUvqHitqS1m2TgqlaTNEhlIBfgajlWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWWdhV/Pvaz8zx6Zn7zm9/OjHZXAgV4aS3PpfkwRZbn3tsqxzvbne7OdufuoJ/kbJJG9T/NsvvPZOpBMpt+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umWpTnLpBcZ79I3jFcMjLINeHwSfBI+f7z/HuPupY4zNYbT6i+IZz8VMci7JdH0fGJy4jRPM8FhMzAUIAAAAx+iV3exmK+fHnQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJvXf/y/q1hj0Z1MM/v5/q/5a6v6p9nDcCQAAAAAAAADAC/CD3exmK+cH48dF9TP/t6vBherxO/k4m1nNRi5nKyvppZeNLCSZGQnU2lrp9TYWDrHl4r5bLp7M8QIAAAAAAADAt9Rfsrz3838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgERTLVX1TtwqA/k0YzyXSSVrneveQfg/5p9nDcCQAAAMAJeGU3u9nK+cH4cVG953+jet8/nY+znl7W0ks3q7lZfRbQf9ff2NnudHe2O3fL9nTc3/77SGlUEdP/7GH/PV+q1mjn1p1mvc0f82G6uZlGtWXp0iCf/fO6X+ZU/KZ2yMxu1ssiKb5ffxoyGWaqipzJraxVNZqvcyur8erBlTjis/PknhbSGH7yc+EYan6uXpY1n57omi+OnH1vHFyJ5EfX/rt+u7t+5/atzbnJOaSv6clKdEYq8eZLVYn5qhIXh+Pl/D43MpfZvJ+NrOVPWUkvq5nN9aq3Up/P5ePMwZVa+sro/edl0qqfl/5d9Gg5vV1tez5r+UM+zM2s5pdZzNW8k4X8qvp3deQZvniIq75xtKv+hz+tO68lRbu/nBBlXV8dqevoPXemmhv9yl6VXnvx98bm9+rOVFI0hzlNgicrsTBSidcPrsRfH5ePm931Oxu3Vz465P5+Ui/L7xJnn/td4iTr1KrP3v4rla+eHeXc6/vOLVRzF4ZzjafmLg7nnnelturXcE9HWqzm3tx3rlPNXRqZaw/nLg9fbwEw8c797Fyr/a/239uftR+0b7ffm/7d2XfOvtXKmUdnft2cn/px463ib/ksf957/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx9m598emel213d0NHR0Rl2xn1n4iRc6d396MrmJ5/+fO3uygerH6yud+Z/sfhuZ2Hx3atXbq11V+f7j+NOk2Oyd9GPOxMAAAAAAAAAAACO4iR+nXTcxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDpsTyX5sMUWZi/PF+Od7Y73bIN+ntrNpI0y+X/kqkHyWz6LTMj4Ypn7efaF5838+X9G3uxGoP1pw7a7nDu1S1LdZJLLzDeo28crxgeYRn0+iA4jNv/AwAA///YHBzc") setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 2.932708233s ago: executing program 6 (id=2615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x2c, r1, 0x401, 0x70bd24, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) 2.384966928s ago: executing program 6 (id=2618): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f00000021c0)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) close(0x3) 2.374595925s ago: executing program 5 (id=2619): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f00000009c0)="7821af7ce1", 0x5}], 0x1) 2.041043175s ago: executing program 3 (id=2622): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)="2e8214", 0x3) 2.039008449s ago: executing program 5 (id=2623): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0x1000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x44) 1.963789777s ago: executing program 4 (id=2624): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25070000000a0004007770616e3400000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.901120724s ago: executing program 0 (id=2625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_deladdr={0x34, 0x15, 0x1, 0x70bd29, 0x25dfdbec, {0x2, 0x20, 0x4, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x34}}, 0x4008880) 1.894516601s ago: executing program 6 (id=2626): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 1.790433312s ago: executing program 3 (id=2628): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100), 0x4) 1.753288513s ago: executing program 5 (id=2629): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000060000000000000005"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1.666155705s ago: executing program 4 (id=2630): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x96}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 1.597352749s ago: executing program 0 (id=2631): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x44, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) 1.595966623s ago: executing program 5 (id=2632): openat(0xffffffffffffff9c, 0x0, 0x42, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0) 1.485145642s ago: executing program 1 (id=2633): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pwritev(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x4) 1.418698204s ago: executing program 1 (id=2634): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x11}, 0xb00}], 0x1, 0x0) 1.361264411s ago: executing program 3 (id=2635): memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010700c0df000000000000109022404010000e80b09040000010300020009210800040122e30109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.225892366s ago: executing program 4 (id=2636): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4, 0x2000000000000357, 0x0, r0}}, 0x3c) 966.964366ms ago: executing program 1 (id=2637): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 761.194455ms ago: executing program 4 (id=2638): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000005540)={0x0, 0x5, 0x0, 0x3}) 552.469266ms ago: executing program 1 (id=2639): r0 = io_uring_setup(0x178e, &(0x7f0000000300)={0x0, 0x1443, 0x8, 0xfffffffe, 0xc}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 447.233945ms ago: executing program 4 (id=2640): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'gretap0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 425.883766ms ago: executing program 1 (id=2641): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 110.753911ms ago: executing program 4 (id=2642): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x40000000008d, 0x20001) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c9948399d145f90d37d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200)) 41.903634ms ago: executing program 1 (id=2643): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0x4, 0xffff, 0x0, "008ef14ba278887cb0baba08431799317e6324"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 0s ago: executing program 6 (id=2644): socket$nl_netfilter(0x10, 0x3, 0xc) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000000c0)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000300)={0x6, 0x7, 0x6, 0xd8b8, 0x3, 0x8, 0x4, 0xe7, 0x727, 0x80000001, 0x400, 0x1b4, 0x1a, 0xaed8, 0x7, 0x0, 0xfffffffffffffffb, 0x5, 0x1, 0x7ff, 0x8, 0x0, 0x8, 0x9, 0xfffffffffffff800}) kernel console output (not intermixed with test programs): SS volume ',suv>g!)͋ON' [ 334.830156][T10896] ALSA: mixer_oss: invalid OSS volume '' "?t&~#' [ 334.830191][T10896] ALSA: mixer_oss: invalid OSS volume 'w[GvV1}۸' [ 334.830213][T10896] ALSA: mixer_oss: invalid OSS volume 'َg0' [ 334.830244][T10896] ALSA: mixer_oss: invalid OSS volume '\ȌA7_&U~_{g' [ 334.830311][T10896] ALSA: mixer_oss: invalid OSS volume 'NՆ 7u7Á&޽-' [ 334.830356][T10896] ALSA: mixer_oss: invalid OSS volume 'L%n-aw]8*/vVP[M' [ 334.830398][T10896] ALSA: mixer_oss: invalid OSS volume 'o\Txg3bŰ瑶.e9XZ' [ 334.830423][T10896] ALSA: mixer_oss: invalid OSS volume '_[mPt2lA' [ 334.831194][T10896] ALSA: mixer_oss: invalid OSS volume '}' [ 335.172059][T10906] bond0: invalid ARP target specified [ 335.181664][ T1954] block nbd0: Possible stuck request ffff888027a95080: control (read@0,1024B). Runtime 120 seconds [ 335.181726][ T1954] block nbd0: Possible stuck request ffff888027a95240: control (read@1024,1024B). Runtime 120 seconds [ 335.181774][ T1954] block nbd0: Possible stuck request ffff888027a95400: control (read@2048,1024B). Runtime 120 seconds [ 335.181823][ T1954] block nbd0: Possible stuck request ffff888027a955c0: control (read@3072,1024B). Runtime 120 seconds [ 335.386192][ T5850] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 335.535624][ T5850] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 335.536762][ T5850] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 335.536805][ T5850] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.536840][ T5850] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 335.536934][ T5850] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.538618][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 335.538658][ T5850] usb 7-1: Product: syz [ 335.538686][ T5850] usb 7-1: Manufacturer: syz [ 335.616811][ T5850] cdc_wdm 7-1:1.0: skipping garbage [ 335.616842][ T5850] cdc_wdm 7-1:1.0: skipping garbage [ 335.645393][ T5850] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 335.645428][ T5850] cdc_wdm 7-1:1.0: Unknown control protocol [ 335.809053][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 335.809260][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 335.809496][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 335.809528][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 335.809822][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 335.809854][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 335.810099][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 335.810131][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 335.810378][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 335.810409][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 335.810554][ T5850] usb 7-1: USB disconnect, device number 13 [ 335.810634][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 335.810665][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 335.810693][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 335.996742][T10926] i2c i2c-0: new_device: Instantiated device nb7vpq904m at 0x01 [ 336.282108][T10936] bond0: option mode: unable to set because the bond device has slaves [ 336.649193][ T5850] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 336.707162][ T31] audit: type=1326 audit(34413808.713:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.0.1907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 336.708120][ T31] audit: type=1326 audit(34413808.713:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.0.1907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 336.708671][ T31] audit: type=1326 audit(34413808.713:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.0.1907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 336.710257][ T31] audit: type=1326 audit(34413808.713:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.0.1907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 336.710575][ T31] audit: type=1326 audit(34413808.713:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.0.1907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 336.711277][ T31] audit: type=1326 audit(34413808.713:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.0.1907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 336.711708][ T31] audit: type=1326 audit(34413808.713:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.0.1907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 336.712038][ T31] audit: type=1326 audit(34413808.713:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10946 comm="syz.0.1907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 336.945057][ T5850] usb 2-1: Using ep0 maxpacket: 8 [ 336.945714][ T5850] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 336.946814][ T5850] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.946853][ T5850] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 336.946962][ T5850] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 336.949180][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.949224][ T5850] usb 2-1: Product: syz [ 336.949252][ T5850] usb 2-1: Manufacturer: syz [ 336.949280][ T5850] usb 2-1: SerialNumber: syz [ 337.325632][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 337.477171][ T10] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 337.478269][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 337.478317][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 337.480739][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.480784][ T10] usb 4-1: Product: syz [ 337.480811][ T10] usb 4-1: Manufacturer: syz [ 337.480839][ T10] usb 4-1: SerialNumber: syz [ 337.510063][ T10] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 337.560037][ T10] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 337.560037][ T10] Please send a copy of this message to and [ 337.675070][ T5850] usb 2-1: clock source 0 is not valid, cannot use [ 337.736972][ T1001] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 337.876124][ T5850] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 337.876610][ T5850] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 337.989400][T10969] loop5: detected capacity change from 0 to 256 [ 338.030797][ T5850] usb 2-1: USB disconnect, device number 17 [ 338.223615][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.386184][ T10] scsi host1: usb-storage 4-1:1.0 [ 338.462315][ T10] usb 4-1: USB disconnect, device number 18 [ 339.002107][T10990] netlink: 'syz.6.1924': attribute type 12 has an invalid length. [ 339.294017][T11003] jffs2: notice: (11003) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 339.314732][T11001] loop4: detected capacity change from 0 to 1024 [ 339.448827][ T1222] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 339.465461][ T5747] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 339.595042][ T1222] usb 6-1: Using ep0 maxpacket: 16 [ 339.595659][ T1222] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 339.598943][ T1222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.598980][ T1222] usb 6-1: Product: syz [ 339.599007][ T1222] usb 6-1: Manufacturer: syz [ 339.599033][ T1222] usb 6-1: SerialNumber: syz [ 339.616043][ T5747] usb 2-1: Using ep0 maxpacket: 16 [ 339.617401][ T5747] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.620373][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.620428][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.620469][ T5747] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.620531][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.631459][ T1222] usb 6-1: config 0 descriptor?? [ 339.636403][ T5747] usb 2-1: config 0 descriptor?? [ 340.060016][ T1222] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 340.120809][ T1222] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 340.121801][ T1222] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 340.121866][ T1222] usb 6-1: media controller created [ 340.122265][ T5747] hid_parser_main: 14 callbacks suppressed [ 340.122294][ T5747] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.122330][ T5747] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.122365][ T5747] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.122410][ T5747] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.122447][ T5747] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.122482][ T5747] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.122517][ T5747] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.122552][ T5747] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.122588][ T5747] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.122622][ T5747] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 340.193470][ T5747] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0021/input/input48 [ 340.267740][ T1222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.271250][ T5747] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 340.295830][ T5850] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 340.371094][ T1222] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 340.371123][ T1222] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 340.455981][ T5850] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 340.457162][ T5850] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 340.457214][ T5850] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 340.457277][ T5850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.469896][T11021] loop4: detected capacity change from 0 to 512 [ 340.545211][T11021] EXT4-fs (loop4): 1 truncate cleaned up [ 340.571840][T11021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.590162][ T1222] usb 2-1: USB disconnect, device number 18 [ 340.636117][T11021] EXT4-fs error (device loop4): ext4_find_dest_de:2051: inode #2: block 13: comm syz.4.1940: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 340.637575][ T5850] usb 1-1: probing VID:PID(0424:012C) [ 340.643156][T11021] EXT4-fs (loop4): Remounting filesystem read-only [ 340.680880][ T5850] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 340.680953][ T5850] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 340.680988][ T5850] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 340.681020][ T5850] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 340.681053][ T5850] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 340.757530][ T10] usb 6-1: USB disconnect, device number 18 [ 340.770610][T11022] fido_id[11022]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 340.876178][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.931640][ T5850] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 341.004091][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 341.049077][T11017] syz.3.1937 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 341.137652][ T5850] vub300 1-1:1.0: probe with driver vub300 failed with error -22 [ 341.367564][ T188] usb 1-1: USB disconnect, device number 24 [ 341.565106][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 341.570679][T11037] ALSA: mixer_oss: invalid OSS volume '' [ 341.570715][T11037] ALSA: mixer_oss: invalid OSS volume 'VpD}sJZ!l(f_FN' [ 341.572611][T11037] ALSA: mixer_oss: invalid OSS volume 'h(2a.2\.jDH' [ 341.572641][T11037] ALSA: mixer_oss: invalid OSS volume 'QG#9*j624>y' [ 341.572673][T11037] ALSA: mixer_oss: invalid OSS volume '5H75BakTfnI2Pã!G8$]' [ 341.572734][T11037] ALSA: mixer_oss: invalid OSS volume ' 6XTTv'\Buy*y' [ 341.572760][T11037] ALSA: mixer_oss: invalid OSS volume 'Dc 0E"$'N{Ce{\' [ 341.572794][T11037] ALSA: mixer_oss: invalid OSS volume '"s)]Chxa巓x5' [ 341.572825][T11037] ALSA: mixer_oss: invalid OSS volume '1̑xDN;sm6h|uj' [ 341.572856][T11037] ALSA: mixer_oss: invalid OSS volume 'RKRL+p&prc}?&?՗' [ 341.572893][T11037] ALSA: mixer_oss: invalid OSS volume ',suv>g!)͋ON' [ 341.574240][T11037] ALSA: mixer_oss: invalid OSS volume '' "?t&~#' [ 341.574283][T11037] ALSA: mixer_oss: invalid OSS volume 'w[GvV1}۸' [ 341.574307][T11037] ALSA: mixer_oss: invalid OSS volume 'َg0' [ 341.574371][T11037] ALSA: mixer_oss: invalid OSS volume '\ȌA7_&U~_{g' [ 341.574443][T11037] ALSA: mixer_oss: invalid OSS volume 'NՆ 7u7Á&޽-' [ 341.574489][T11037] ALSA: mixer_oss: invalid OSS volume 'L%n-aw]8*/vVP[M' [ 341.574533][T11037] ALSA: mixer_oss: invalid OSS volume 'o\Txg3bŰ瑶.e9XZ' [ 341.574560][T11037] ALSA: mixer_oss: invalid OSS volume '_[mPt2lA' [ 341.667089][T11037] ALSA: mixer_oss: invalid OSS volume '}' [ 341.718442][ T10] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 341.721438][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 341.721530][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 341.724834][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.725061][ T10] usb 5-1: Product: syz [ 341.725089][ T10] usb 5-1: Manufacturer: syz [ 341.725116][ T10] usb 5-1: SerialNumber: syz [ 341.829558][ T10] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 341.858453][ T10] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 341.858453][ T10] Please send a copy of this message to and [ 342.601225][ T10] scsi host1: usb-storage 5-1:1.0 [ 342.647422][ T10] usb 5-1: USB disconnect, device number 17 [ 342.730482][T11065] syz_tun: entered allmulticast mode [ 342.753265][T11066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1958'. [ 343.586290][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 343.699866][T11091] bond0: entered promiscuous mode [ 343.699905][T11091] bond_slave_0: entered promiscuous mode [ 343.700183][T11091] bond_slave_1: entered promiscuous mode [ 343.725468][T11091] batadv0: entered promiscuous mode [ 343.738455][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 343.741752][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 343.741797][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 343.741856][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.779122][T11091] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 343.810047][ T10] usb 2-1: probing VID:PID(0424:012C) [ 343.831374][ T10] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 343.831417][ T10] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 343.831451][ T10] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 343.831485][ T10] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 343.831519][ T10] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 343.893075][T11097] loop3: detected capacity change from 0 to 16 [ 343.902739][T11097] erofs (device loop3): DAX unsupported by block device. Turning off DAX. [ 343.921353][T11097] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 343.921672][T11097] erofs (device loop3): mounted with root inode @ nid 36. [ 343.953756][T11097] erofs (device loop3): readahead error at folio 7 @ nid 36 [ 343.953803][T11097] erofs (device loop3): readahead error at folio 6 @ nid 36 [ 343.953834][T11097] erofs (device loop3): bogus lookback distance 0 @ lcn 47 of nid 36 [ 343.953868][T11097] erofs (device loop3): readahead error at folio 5 @ nid 36 [ 343.989838][T11097] erofs (device loop3): bogus lookback distance 0 @ lcn 38 of nid 36 [ 343.989886][T11097] erofs (device loop3): readahead error at folio 4 @ nid 36 [ 343.990018][T11097] erofs (device loop3): readahead error at folio 3 @ nid 36 [ 343.990051][T11097] erofs (device loop3): readahead error at folio 2 @ nid 36 [ 343.990300][T11097] erofs (device loop3): readahead error at folio 1 @ nid 36 [ 343.990786][T11097] erofs (device loop3): bogus lookback distance 0 @ lcn 4 of nid 36 [ 343.990821][T11097] erofs (device loop3): readahead error at folio 0 @ nid 36 [ 343.991194][T11097] syz.3.1973: attempt to access beyond end of device [ 343.991194][T11097] loop3: rw=524288, sector=89, nr_sectors = 1 limit=16 [ 344.101778][T11097] syz.3.1973: attempt to access beyond end of device [ 344.101778][T11097] loop3: rw=524288, sector=65642, nr_sectors = 1 limit=16 [ 344.102007][T11097] syz.3.1973: attempt to access beyond end of device [ 344.102007][T11097] loop3: rw=524288, sector=98797, nr_sectors = 1 limit=16 [ 344.108780][T11097] syz.3.1973: attempt to access beyond end of device [ 344.108780][T11097] loop3: rw=524288, sector=36, nr_sectors = 1 limit=16 [ 344.123585][T11097] erofs (device loop3): bogus lookback distance 0 @ lcn 4 of nid 36 [ 344.123928][T11097] syz.3.1973: attempt to access beyond end of device [ 344.123928][T11097] loop3: rw=0, sector=89, nr_sectors = 1 limit=16 [ 344.126234][T11097] syz.3.1973: attempt to access beyond end of device [ 344.126234][T11097] loop3: rw=0, sector=65642, nr_sectors = 1 limit=16 [ 344.132361][T11097] erofs (device loop3): read error -5 @ 0 of nid 36 [ 344.132496][T11097] erofs (device loop3): failed to readdir of logical block 0 of nid 36 [ 344.137831][T11098] erofs (device loop3): bogus lookback distance 0 @ lcn 4 of nid 36 [ 344.138020][T11098] syz.3.1973: attempt to access beyond end of device [ 344.138020][T11098] loop3: rw=0, sector=89, nr_sectors = 1 limit=16 [ 344.138262][T11098] syz.3.1973: attempt to access beyond end of device [ 344.138262][T11098] loop3: rw=0, sector=65642, nr_sectors = 1 limit=16 [ 344.139202][T11098] erofs (device loop3): read error -5 @ 0 of nid 36 [ 344.139329][T11098] erofs (device loop3): failed to readdir of logical block 0 of nid 36 [ 344.156605][ T188] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 344.255778][ T10] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 344.305111][ T188] usb 7-1: Using ep0 maxpacket: 32 [ 344.308480][ T188] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 344.314330][ T188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.314384][ T188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.314472][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.366386][ T188] usb 7-1: config 0 descriptor?? [ 344.383496][ T188] hub 7-1:0.0: USB hub found [ 344.397827][T11101] Bluetooth: MGMT ver 1.23 [ 344.397874][T11101] Bluetooth: hci1: too big key_count value 8199 [ 344.482144][ T10] vub300 2-1:1.0: probe with driver vub300 failed with error -22 [ 344.587881][ T188] hub 7-1:0.0: 1 port detected [ 344.710335][ T10] usb 2-1: USB disconnect, device number 19 [ 344.794643][ T188] hub 7-1:0.0: config failed, can't get hub status (err -5) [ 344.997217][ T188] usbhid 7-1:0.0: can't add hid device: -71 [ 344.997351][ T188] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 345.036344][ T188] usb 7-1: USB disconnect, device number 14 [ 345.725300][ T5760] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 345.890156][ T5760] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 345.893215][ T5760] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 345.893286][ T5760] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 345.893328][ T5760] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 345.893378][ T5760] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 345.949730][ T5760] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 345.949816][ T5760] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 345.949856][ T5760] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 345.949899][ T5760] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 345.953177][ T5760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.953213][ T5760] usb 6-1: Product: syz [ 345.953234][ T5760] usb 6-1: Manufacturer: syz [ 345.953255][ T5760] usb 6-1: SerialNumber: syz [ 346.045404][ T5760] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 346.070970][ T5760] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 346.086172][ T5760] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 346.262056][T11154] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 346.262124][T11154] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 346.262236][T11154] vhci_hcd vhci_hcd.0: Device attached [ 346.320352][T11129] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 346.334085][ T1222] usb 6-1: USB disconnect, device number 19 [ 346.379095][ T1222] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 346.402412][ T1222] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 346.403544][ T1222] ti_usb_3410_5052 6-1:2.0: device disconnected [ 346.477433][ T5850] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 346.536056][ T5760] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 346.536271][ T5850] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 346.581235][T11160] loop6: detected capacity change from 0 to 1024 [ 346.584856][T11160] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 346.618836][T11160] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.2002: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 346.618908][T11160] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 346.620865][T11160] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.2002: couldn't read orphan inode 11 (err -117) [ 346.620915][T11160] loop6: lost filesystem error report for type 5 error -117 [ 346.660045][T11160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.699592][ T5760] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 346.700242][ T5760] usb 1-1: config 0 has no interfaces? [ 346.700288][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.716162][ T5760] usb 1-1: config 0 descriptor?? [ 346.804789][T11163] EXT4-fs: Ignoring removed bh option [ 346.806516][T11163] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 346.807550][T11160] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 2: comm syz.6.2002: lblock 2 mapped to illegal pblock 2 (length 1) [ 346.811241][T11160] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 346.811300][T11160] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 48: comm syz.6.2002: lblock 0 mapped to illegal pblock 48 (length 1) [ 346.816620][T11160] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 346.816658][T11160] EXT4-fs error (device loop6): ext4_acquire_dquot:7067: comm syz.6.2002: Failed to acquire dquot type 0 [ 346.959940][T11155] usbip_core: unknown command [ 346.959960][T11155] vhci_hcd: unknown pdu 0 [ 346.959976][T11155] usbip_core: unknown command [ 346.981155][ T1001] vhci_hcd vhci_hcd.0: stop threads [ 346.981189][ T1001] vhci_hcd vhci_hcd.0: release socket [ 347.001929][ T1001] vhci_hcd vhci_hcd.0: disconnect device [ 347.031352][ T5760] usb 1-1: USB disconnect, device number 25 [ 347.046172][ T5850] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 347.103352][ T6127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.138538][ T6127] EXT4-fs error (device loop6): __ext4_get_inode_loc:4915: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 347.138588][ T6127] loop6: lost filesystem error report for type 5 error -117 [ 347.158816][ T6127] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 347.158852][ T6127] loop6: lost filesystem error report for type 5 error -117 [ 347.160572][ T6127] EXT4-fs error (device loop6): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 347.160616][ T6127] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 347.165262][ T6127] EXT4-fs error (device loop6): __ext4_get_inode_loc:4915: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 347.165311][ T6127] loop6: lost filesystem error report for type 5 error -117 [ 347.510733][T11177] ALSA: mixer_oss: invalid OSS volume '' [ 347.511121][T11177] ALSA: mixer_oss: invalid OSS volume 'VpD}sJZ!l(f_FN' [ 347.511288][T11177] ALSA: mixer_oss: invalid OSS volume 'h(2a.2\.jDH' [ 347.511313][T11177] ALSA: mixer_oss: invalid OSS volume 'QG#9*j624>y' [ 347.511343][T11177] ALSA: mixer_oss: invalid OSS volume '5H75BakTfnI2Pã!G8$]' [ 347.511401][T11177] ALSA: mixer_oss: invalid OSS volume ' 6XTTv'\Buy*y' [ 347.511427][T11177] ALSA: mixer_oss: invalid OSS volume 'Dc 0E"$'N{Ce{\' [ 347.511466][T11177] ALSA: mixer_oss: invalid OSS volume '"s)]Chxa巓x5' [ 347.511495][T11177] ALSA: mixer_oss: invalid OSS volume '1̑xDN;sm6h|uj' [ 347.511526][T11177] ALSA: mixer_oss: invalid OSS volume 'RKRL+p&prc}?&?՗' [ 347.511562][T11177] ALSA: mixer_oss: invalid OSS volume ',suv>g!)͋ON' [ 347.511670][T11177] ALSA: mixer_oss: invalid OSS volume '' "?t&~#' [ 347.514725][T11177] ALSA: mixer_oss: invalid OSS volume 'w[GvV1}۸' [ 347.514751][T11177] ALSA: mixer_oss: invalid OSS volume 'َg0' [ 347.514783][T11177] ALSA: mixer_oss: invalid OSS volume '\ȌA7_&U~_{g' [ 347.514854][T11177] ALSA: mixer_oss: invalid OSS volume 'NՆ 7u7Á&޽-' [ 347.659228][T11177] ALSA: mixer_oss: invalid OSS volume 'L%n-aw]8*/vVP[M' [ 347.659266][T11177] ALSA: mixer_oss: invalid OSS volume 'o\Txg3bŰ瑶.e9XZ' [ 347.659286][T11177] ALSA: mixer_oss: invalid OSS volume '_[mPt2lA' [ 347.659857][T11177] ALSA: mixer_oss: invalid OSS volume '}' [ 347.809346][T11187] loop6: detected capacity change from 0 to 256 [ 347.879805][T11187] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 347.992179][T11190] loop4: detected capacity change from 0 to 256 [ 347.993029][T11190] exfat: Deprecated parameter 'utf8' [ 347.993059][T11190] exfat: Deprecated parameter 'utf8' [ 347.993140][T11190] exfat: Deprecated parameter 'namecase' [ 347.993215][T11190] exfat: Deprecated parameter 'namecase' [ 348.024556][ T31] audit: type=1804 audit(34413820.003:39): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2011" name="/newroot/289/file2/file2" dev="loop6" ino=1048700 res=1 errno=0 [ 348.094705][T11190] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf6e788d, utbl_chksum : 0xe619d30d) [ 348.756253][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 348.905958][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 348.907216][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 348.908364][ T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 348.908418][ T10] usb 6-1: config 0 has no interface number 0 [ 348.908471][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 348.908512][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 348.908557][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 348.908605][ T10] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 348.908681][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.015325][ T10] usb 6-1: config 0 descriptor?? [ 349.072088][ T10] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 349.137294][T11218] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 349.277050][ T10] usb 6-1: USB disconnect, device number 20 [ 349.294546][ T10] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 349.388120][T11225] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 349.388210][T11225] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 349.481431][T11227] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 349.495524][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.499526][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.985518][T11243] loop3: detected capacity change from 0 to 128 [ 350.002800][T11243] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 350.033451][T11243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.274287][T11254] loop6: detected capacity change from 0 to 128 [ 350.303221][ T31] audit: type=1800 audit(34413822.303:40): pid=11249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2036" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 350.439262][ T1001] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 350.918039][T11267] macvlan2: entered promiscuous mode [ 350.918075][T11267] dummy0: entered promiscuous mode [ 350.918367][T11267] macvlan2: entered allmulticast mode [ 350.918393][T11267] dummy0: entered allmulticast mode [ 351.360506][ T31] audit: type=1326 audit(34413823.363:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz.1.2041" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86bf9e159 code=0x7fc00000 [ 351.503091][T11286] loop3: detected capacity change from 0 to 1024 [ 351.509513][T11286] ext4: Unknown parameter 'dont_appraise' [ 351.751357][T11294] netlink: 'syz.1.2057': attribute type 4 has an invalid length. [ 351.751394][T11294] netlink: 'syz.1.2057': attribute type 8 has an invalid length. [ 351.751419][T11294] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2057'. [ 351.838186][T11296] loop5: detected capacity change from 0 to 128 [ 352.182530][T11306] jffs2: notice: (11306) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 352.277590][T11296] syz.5.2060: attempt to access beyond end of device [ 352.277590][T11296] loop5: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 352.352268][ T5630] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 352.386162][T11296] syz.5.2060: attempt to access beyond end of device [ 352.386162][T11296] loop5: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 352.386219][T11296] buffer_io_error: 25 callbacks suppressed [ 352.386240][T11296] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 352.386312][T11296] syz.5.2060: attempt to access beyond end of device [ 352.386312][T11296] loop5: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 352.386354][T11296] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 352.387455][T11296] syz.5.2060: attempt to access beyond end of device [ 352.387455][T11296] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 352.438969][T11296] syz.5.2060: attempt to access beyond end of device [ 352.438969][T11296] loop5: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 352.439019][T11296] Buffer I/O error on dev loop5, logical block 91, lost async page write [ 352.439058][T11296] syz.5.2060: attempt to access beyond end of device [ 352.439058][T11296] loop5: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 352.439098][T11296] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 352.484743][T11296] syz.5.2060: attempt to access beyond end of device [ 352.484743][T11296] loop5: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 352.519593][T11296] syz.5.2060: attempt to access beyond end of device [ 352.519593][T11296] loop5: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 352.519646][T11296] Buffer I/O error on dev loop5, logical block 103, lost async page write [ 352.519684][T11296] syz.5.2060: attempt to access beyond end of device [ 352.519684][T11296] loop5: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 352.564591][T11296] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 352.574756][T11296] syz.5.2060: attempt to access beyond end of device [ 352.574756][T11296] loop5: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 352.590281][T11296] Buffer I/O error on dev loop5, logical block 107, lost async page write [ 352.590329][T11296] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 352.591477][T11296] Buffer I/O error on dev loop5, logical block 119, lost async page write [ 352.591519][T11296] Buffer I/O error on dev loop5, logical block 120, lost async page write [ 352.959000][T11321] loop3: detected capacity change from 0 to 512 [ 353.256275][ T5760] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 353.337200][ T5630] Bluetooth: hci0: command 0x0406 tx timeout [ 353.339855][T11329] input: syz0 as /devices/virtual/input/input49 [ 353.418146][ T5760] usb 5-1: Using ep0 maxpacket: 32 [ 353.422179][ T5760] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 353.430491][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.430548][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.430588][ T5760] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 353.430653][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.500357][T11332] loop6: detected capacity change from 0 to 4096 [ 353.501248][T11332] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.530442][T11332] EXT4-fs (loop6): Test dummy encryption mode enabled [ 353.560066][ T5760] usb 5-1: config 0 descriptor?? [ 353.715734][T11332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.777556][T11332] Quota error (device loop6): do_check_range: Getting block 1024 out of range 0-5 [ 353.948401][ T6127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.128948][ T5760] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0022/input/input50 [ 354.364090][ T5760] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0022/input/input51 [ 354.719521][ T5760] kye 0003:0458:5011.0022: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 354.734665][T11356] bonding: no command found in bonding_masters - use +ifname or -ifname [ 355.028316][ T5760] usb 5-1: USB disconnect, device number 18 [ 355.098773][T11358] fido_id[11358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 355.972569][T11378] loop5: detected capacity change from 0 to 64 [ 356.067306][T11377] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 356.276040][ T5760] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 356.389490][ T1222] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 356.435079][ T5760] usb 7-1: Using ep0 maxpacket: 8 [ 356.438427][ T5760] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 356.441097][ T5760] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.441140][ T5760] usb 7-1: config 0 has no interface number 0 [ 356.441197][ T5760] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.441262][ T5760] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.476611][ T5760] usb 7-1: config 0 descriptor?? [ 356.508224][ T5760] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 356.540565][ T1222] usb 6-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 356.545247][ T1222] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.545299][ T1222] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.545356][ T1222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.717163][ T5760] usb 7-1: USB disconnect, device number 15 [ 356.903980][T11405] netlink: 'syz.0.2103': attribute type 8 has an invalid length. [ 356.904044][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2103'. [ 356.904086][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2103'. [ 356.935442][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 357.011809][ T1222] hid_parser_main: 5 callbacks suppressed [ 357.011847][ T1222] hid-sensor-hub 0003:8086:0000.0023: unknown main item tag 0x0 [ 357.011889][ T1222] hid-sensor-hub 0003:8086:0000.0023: unknown main item tag 0x0 [ 357.011965][ T1222] hid-sensor-hub 0003:8086:0000.0023: unknown main item tag 0x0 [ 357.012003][ T1222] hid-sensor-hub 0003:8086:0000.0023: unknown main item tag 0x0 [ 357.012040][ T1222] hid-sensor-hub 0003:8086:0000.0023: unknown main item tag 0x0 [ 357.012077][ T1222] hid-sensor-hub 0003:8086:0000.0023: unknown main item tag 0x0 [ 357.012113][ T1222] hid-sensor-hub 0003:8086:0000.0023: unknown main item tag 0x0 [ 357.012150][ T1222] hid-sensor-hub 0003:8086:0000.0023: unknown main item tag 0x0 [ 357.012187][ T1222] hid-sensor-hub 0003:8086:0000.0023: unknown main item tag 0x0 [ 357.012223][ T1222] hid-sensor-hub 0003:8086:0000.0023: unknown main item tag 0x0 [ 357.012535][ T1222] hid-sensor-hub 0003:8086:0000.0023: unbalanced collection at end of report description [ 357.017656][ T1222] hid-sensor-hub 0003:8086:0000.0023: parse failed [ 357.017788][ T1222] hid-sensor-hub 0003:8086:0000.0023: probe with driver hid-sensor-hub failed with error -22 [ 357.111504][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 357.118710][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 357.144282][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.144341][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.144401][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.179802][ T10] usb 2-1: config 0 descriptor?? [ 357.192011][ T5850] usb 6-1: USB disconnect, device number 21 [ 357.193986][ T10] hub 2-1:0.0: USB hub found [ 357.337143][ T1222] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 357.396150][ T10] hub 2-1:0.0: 1 port detected [ 357.497474][ T1222] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 357.500184][ T1222] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.500238][ T1222] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.500286][ T1222] usb 1-1: config 0 interface 0 has no altsetting 0 [ 357.500336][ T1222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.516227][ T1222] usb 1-1: config 0 descriptor?? [ 357.596746][ T10] hub 2-1:0.0: config failed, can't get hub status (err -5) [ 357.636752][T11415] loop6: detected capacity change from 0 to 512 [ 357.683344][T11416] loop4: detected capacity change from 0 to 512 [ 357.683907][T11415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.764582][T11416] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #2: block 8: comm syz.4.2107: lblock 0 mapped to illegal pblock 8 (length 1) [ 357.764648][T11416] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 357.766851][ C0] EXT4-fs (loop4): initial error at time 34413829: ext4_map_blocks:790: inode 2: block 8 [ 357.766920][ C0] EXT4-fs (loop4): last error at time 34413829: ext4_map_blocks:790: inode 2: block 8 [ 357.816291][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 357.816455][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 357.865856][T11416] EXT4-fs (loop4): Remounting filesystem read-only [ 357.865956][T11416] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.2107: error -EUCLEAN reading directory block [ 357.866054][ T10] usb 2-1: USB disconnect, device number 20 [ 357.866880][T11416] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 357.867027][T11416] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.2107: error -EUCLEAN reading directory block [ 357.867099][T11416] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 357.951718][T11416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.112584][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.114462][ T1222] hid-picolcd 0003:04D8:F002.0024: No report with id 0xf4 found [ 358.114493][ T1222] hid-picolcd 0003:04D8:F002.0024: No report with id 0xf3 found [ 358.216847][ T6127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.539762][ T1222] usb 1-1: USB disconnect, device number 26 [ 358.612270][T11433] loop4: detected capacity change from 0 to 256 [ 359.038524][T11450] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 359.342111][T11454] jffs2: notice: (11454) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 359.972391][T11473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2132'. [ 360.016817][T11473] ipvlan2: entered allmulticast mode [ 360.016852][T11473] syz_tun: entered allmulticast mode [ 361.254248][T11479] loop4: detected capacity change from 0 to 32768 [ 361.264148][T11500] loop6: detected capacity change from 0 to 4096 [ 361.471762][T11500] ntfs3(loop6): Failed to load $Extend (-22). [ 361.471803][T11500] ntfs3(loop6): Failed to initialize $Extend. [ 362.210477][T11513] loop3: detected capacity change from 0 to 512 [ 362.287047][T11513] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 362.310552][T11513] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.2151: bad orphan inode 131083 [ 362.310603][T11513] loop3: lost filesystem error report for type 5 error -117 [ 362.336199][T11513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.503180][T11513] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #2: block 13: comm syz.3.2151: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 362.610447][T11521] loop6: detected capacity change from 0 to 512 [ 362.611362][T11521] EXT4-fs: Ignoring removed mblk_io_submit option [ 362.651614][T11521] EXT4-fs (loop6): orphan cleanup on readonly fs [ 362.651649][T11521] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 362.706031][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.731575][T11521] EXT4-fs error (device loop6): ext4_clear_blocks:874: inode #13: comm syz.6.2153: attempt to clear invalid blocks 2 len 1 [ 362.731632][T11521] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 362.735368][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 362.735397][ C0] EXT4-fs (loop6): initial error at time 34413834: ext4_clear_blocks:874: inode 13 [ 362.735445][ C0] EXT4-fs (loop6): last error at time 34413834: ext4_clear_blocks:874: inode 13 [ 362.791259][ T6555] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.791376][T11521] EXT4-fs (loop6): Remounting filesystem read-only [ 362.807986][T11521] EXT4-fs (loop6): 1 truncate cleaned up [ 362.810272][T11521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 362.875930][T11521] EXT4-fs (loop6): Quota file not on filesystem root. Journaled quota will not work [ 362.959732][ T6127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.338773][T11538] netlink: 'syz.0.2158': attribute type 1 has an invalid length. [ 363.338808][T11538] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2158'. [ 363.338836][T11538] netlink: 'syz.0.2158': attribute type 1 has an invalid length. [ 363.338859][T11538] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.2158'. [ 363.385025][ T188] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 363.546221][ T188] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 363.547809][ T188] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 363.547851][ T188] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.547890][ T188] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 363.547961][ T188] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.549606][ T188] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 363.549647][ T188] usb 6-1: Product: syz [ 363.549674][ T188] usb 6-1: Manufacturer: syz [ 363.634765][ T188] cdc_wdm 6-1:1.0: skipping garbage [ 363.634796][ T188] cdc_wdm 6-1:1.0: skipping garbage [ 363.650197][ T188] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 363.650234][ T188] cdc_wdm 6-1:1.0: Unknown control protocol [ 363.851155][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 363.851196][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 363.851502][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 363.851535][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 363.851774][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 363.851804][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 363.852042][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 363.852075][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 363.853484][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 363.853515][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 363.853740][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 363.853771][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 363.853991][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 363.854027][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 363.854262][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 363.854292][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 363.854524][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 363.854556][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 363.854785][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 363.854816][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 363.862636][ T1222] usb 6-1: USB disconnect, device number 22 [ 363.862742][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 364.169051][T11545] loop3: detected capacity change from 0 to 4096 [ 364.513483][ T31] audit: type=1800 audit(34413836.513:42): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2162" name="file1" dev="loop3" ino=34 res=0 errno=0 [ 364.845025][ T188] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 364.891575][T11566] jffs2: notice: (11566) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 364.996994][ T188] usb 1-1: Using ep0 maxpacket: 16 [ 364.997720][ T188] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 364.998941][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.998992][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.999048][ T188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.052819][ T188] usb 1-1: config 0 descriptor?? [ 365.255555][ T1954] block nbd0: Possible stuck request ffff888027a95080: control (read@0,1024B). Runtime 150 seconds [ 365.255622][ T1954] block nbd0: Possible stuck request ffff888027a95240: control (read@1024,1024B). Runtime 150 seconds [ 365.255673][ T1954] block nbd0: Possible stuck request ffff888027a95400: control (read@2048,1024B). Runtime 150 seconds [ 365.255722][ T1954] block nbd0: Possible stuck request ffff888027a955c0: control (read@3072,1024B). Runtime 150 seconds [ 365.550584][ T188] apple 0003:05AC:024B.0025: fixing up MacBook JIS keyboard report descriptor [ 365.570015][ T188] apple 0003:05AC:024B.0025: unknown global tag 0xe [ 365.570054][ T188] apple 0003:05AC:024B.0025: item 0 1 1 14 parsing failed [ 365.570797][ T188] apple 0003:05AC:024B.0025: parse failed [ 365.570928][ T188] apple 0003:05AC:024B.0025: probe with driver apple failed with error -22 [ 365.770719][ T5746] usb 1-1: USB disconnect, device number 27 [ 365.852370][T11585] loop6: detected capacity change from 0 to 512 [ 365.871306][T11585] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 365.911960][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2179'. [ 365.932084][T11585] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.2178: bad orphan inode 13 [ 365.932137][T11585] loop6: lost filesystem error report for type 5 error -117 [ 365.934927][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 365.934958][ C1] EXT4-fs (loop6): last error at time 34413837: ext4_orphan_get:1429 [ 365.970100][T11585] ext4_test_bit(bit=12, block=18) = 1 [ 365.970132][T11585] is_bad_inode(inode)=0 [ 365.970147][T11585] NEXT_ORPHAN(inode)=0 [ 365.970160][T11585] max_ino=32 [ 365.970173][T11585] i_nlink=1 [ 365.997284][T11585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 366.027628][T11586] ipvlan2: entered allmulticast mode [ 366.027660][T11586] syz_tun: entered allmulticast mode [ 366.102999][T11585] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 366.137586][T11585] EXT4-fs error (device loop6): ext4_validate_block_bitmap:444: comm syz.6.2178: bg 0: block 248: padding at end of block bitmap is not set [ 366.159985][T11585] Quota error (device loop6): write_blk: dquota write failed [ 366.160102][T11585] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 366.160169][T11585] EXT4-fs error (device loop6): ext4_acquire_dquot:7067: comm syz.6.2178: Failed to acquire dquot type 1 [ 366.477397][ T6127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 366.487399][ T3339] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 366.487561][ T3339] EXT4-fs error (device loop6): ext4_release_dquot:7103: comm kworker/u8:14: Failed to release dquot type 1 [ 366.487602][ T3339] loop6: lost filesystem error report for type 5 error -117 [ 366.890831][T11614] loop4: detected capacity change from 0 to 512 [ 366.991270][T11614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.250151][ T5624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.303068][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2196'. [ 367.367256][T11624] ipvlan2: entered allmulticast mode [ 367.367291][T11624] syz_tun: entered allmulticast mode [ 367.945131][T11644] loop6: detected capacity change from 0 to 512 [ 368.071111][T11644] EXT4-fs error (device loop6): ext4_validate_block_bitmap:435: comm syz.6.2202: bg 0: block 5: invalid block bitmap [ 368.071167][T11644] loop6: lost filesystem error report for type 5 error -117 [ 368.087369][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 368.087402][ C1] EXT4-fs (loop6): initial error at time 34413840: ext4_validate_block_bitmap:435 [ 368.087436][ C1] EXT4-fs (loop6): last error at time 34413840: ext4_validate_block_bitmap:435 [ 368.094211][T11644] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 368.094247][T11644] loop6: lost filesystem error report for type 5 error -117 [ 368.094679][T11644] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #11: comm syz.6.2202: invalid indirect mapped block 3 (level 2) [ 368.094752][T11644] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 368.097583][T11644] EXT4-fs (loop6): 1 orphan inode deleted [ 368.097614][T11644] EXT4-fs (loop6): 1 truncate cleaned up [ 368.102427][T11644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.126066][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 368.287315][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 368.288488][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 368.288539][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.288574][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 368.288639][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.290376][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 368.290445][ T10] usb 1-1: Product: syz [ 368.290472][ T10] usb 1-1: Manufacturer: syz [ 368.308382][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 368.308412][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 368.339266][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 368.339299][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 368.429567][ T6127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.593597][T11657] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 368.604687][ T10] usb 1-1: USB disconnect, device number 28 [ 368.604788][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 369.095140][ T188] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 369.248727][ T188] usb 6-1: Using ep0 maxpacket: 8 [ 369.257336][ T188] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 369.259429][ T188] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 369.259480][ T188] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 369.259531][ T188] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 369.259574][ T188] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.259637][ T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.500775][ T188] usb 6-1: GET_CAPABILITIES returned 0 [ 369.500839][ T188] usbtmc 6-1:16.0: can't read capabilities [ 369.529677][T11662] loop3: detected capacity change from 0 to 32768 [ 369.602324][T11662] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 369.717238][T11665] usbtmc 6-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 369.718503][ T188] usb 6-1: USB disconnect, device number 23 [ 369.745953][ T1001] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.777589][T11662] XFS (loop3): Ending clean mount [ 369.910250][T11670] loop6: detected capacity change from 0 to 32768 [ 369.946996][T11670] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 369.993236][ T6555] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 370.048720][T11670] XFS (loop6): Ending clean mount [ 370.387156][ T6127] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 370.637086][T11707] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 371.128568][T11718] loop3: detected capacity change from 0 to 1024 [ 371.147770][T11718] EXT4-fs: Ignoring removed bh option [ 371.189058][T11714] loop6: detected capacity change from 0 to 4096 [ 371.261676][T11718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 371.384182][T11718] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.2227: lblock 3 mapped to illegal pblock 3 (length 3) [ 371.441468][T11718] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 371.441520][T11718] EXT4-fs (loop3): This should not happen!! Data will be lost [ 371.441520][T11718] [ 371.542581][T11723] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.2227: lblock 0 mapped to illegal pblock 0 (length 1) [ 371.630527][T11723] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 371.630580][T11723] EXT4-fs (loop3): This should not happen!! Data will be lost [ 371.630580][T11723] [ 371.645751][ T12] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 371.730588][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 371.730643][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 371.730643][ T12] [ 372.028171][ T6555] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 372.245109][ T1222] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 372.407482][ T1222] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 372.408601][ T1222] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.408653][ T1222] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.408703][ T1222] usb 6-1: config 0 interface 0 has no altsetting 0 [ 372.408752][ T1222] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.470881][ T1222] usb 6-1: config 0 descriptor?? [ 372.490371][T11738] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.976107][ T5850] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 372.976704][ T1222] hid-picolcd 0003:04D8:F002.0026: No report with id 0xf4 found [ 372.976796][ T1222] hid-picolcd 0003:04D8:F002.0026: No report with id 0xf3 found [ 373.136474][ T5850] usb 4-1: Using ep0 maxpacket: 32 [ 373.140534][ T5850] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 373.151707][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.151805][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.151847][ T5850] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 373.151952][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.169296][ T5850] usb 4-1: config 0 descriptor?? [ 373.428086][ T1222] usb 6-1: USB disconnect, device number 24 [ 373.669722][ T5850] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0027/input/input52 [ 373.768336][T11760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2244'. [ 373.782685][ T5850] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0027/input/input53 [ 374.055722][ T5850] kye 0003:0458:5011.0027: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 374.331499][ T5850] usb 4-1: USB disconnect, device number 19 [ 375.765032][ T5768] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 375.877775][T11813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.877865][T11813] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 375.933612][T11813] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.933937][T11813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.934625][T11813] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 375.934777][T11813] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 375.938963][ T5768] usb 7-1: New USB device found, idVendor=6253, idProduct=0100, bcdDevice= 0.00 [ 375.941129][ T5768] usb 7-1: config 0 interface 0 has no altsetting 0 [ 375.941226][ T5768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.945982][ T5768] usb 7-1: config 0 descriptor?? [ 376.030698][T11813] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 376.030980][T11813] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 376.118567][T11824] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input54 [ 376.217645][T11826] loop3: detected capacity change from 0 to 64 [ 376.285011][ T5746] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 376.289052][ T188] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 376.394676][T11802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.404074][T11802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.435091][ T188] usb 2-1: Using ep0 maxpacket: 32 [ 376.436231][ T5746] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 376.436287][ T5746] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 376.436709][ T188] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 376.439550][ T5746] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.439617][ T5746] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.439665][ T5746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 376.439829][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.439934][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.439975][ T188] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 376.440038][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.441017][ T5746] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.441101][ T5746] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.441148][ T5746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 376.442160][ T5746] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.442216][ T5746] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.442259][ T5746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 376.444608][ T5746] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.444672][ T5746] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.444720][ T5746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 376.455288][ T5768] input: HID 6253:0100 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:6253:0100.0028/input/input55 [ 376.499294][ T5746] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.499365][ T5746] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.499414][ T5746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 376.504379][ T5768] twinhan 0003:6253:0100.0028: input,hidraw0: USB HID v80.00 Joystick [HID 6253:0100] on usb-dummy_hcd.6-1/input0 [ 376.527964][ T5746] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.528033][ T5746] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.528088][ T5746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 376.593712][ T5746] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.593786][ T5746] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.593835][ T5746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 376.641762][ T5746] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.641904][ T5746] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 376.641955][ T5746] usb 5-1: config 0 interface 0 has no altsetting 0 [ 376.695543][ T188] usb 2-1: config 0 descriptor?? [ 376.723690][ T5746] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 376.723735][ T5746] usb 5-1: Product: syz [ 376.723763][ T5746] usb 5-1: Manufacturer: syz [ 376.723789][ T5746] usb 5-1: SerialNumber: syz [ 376.788200][ T5768] usb 7-1: USB disconnect, device number 16 [ 376.839474][ T5746] usb 5-1: config 0 descriptor?? [ 376.868333][ T5746] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 377.087800][T11830] fido_id[11830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 377.156075][ T188] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0029/input/input56 [ 377.237822][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 377.237895][ C0] usb 5-1: yurex_control_callback - control failed: -32 [ 377.251053][ T5768] usb 5-1: USB disconnect, device number 19 [ 377.285235][ T188] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0029/input/input57 [ 377.368367][ T5768] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 377.586667][ T188] kye 0003:0458:5011.0029: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 377.896132][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 377.914857][ T5746] usb 2-1: USB disconnect, device number 21 [ 377.960173][T11846] fido_id[11846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 377.975785][ T5629] Bluetooth: hci0: command 0x0406 tx timeout [ 377.975854][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 377.975940][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout [ 378.061349][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.061429][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.064978][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 378.065024][ T5630] Bluetooth: hci5: command 0x0c1a tx timeout [ 378.181482][ T31] audit: type=1326 audit(34413850.183:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2285" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffe39e159 code=0x7ffc0000 [ 378.181805][ T31] audit: type=1326 audit(34413850.183:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2285" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffe39e159 code=0x7ffc0000 [ 378.192291][ T31] audit: type=1326 audit(34413850.193:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2285" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffe39e159 code=0x7ffc0000 [ 378.193099][ T31] audit: type=1326 audit(34413850.193:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2285" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbffe39e159 code=0x7ffc0000 [ 378.193176][ T31] audit: type=1326 audit(34413850.193:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2285" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffe39e159 code=0x7ffc0000 [ 378.193247][ T31] audit: type=1326 audit(34413850.193:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2285" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffe39e159 code=0x7ffc0000 [ 378.194430][ T31] audit: type=1326 audit(34413850.193:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2285" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffe39e159 code=0x7ffc0000 [ 378.194517][ T31] audit: type=1326 audit(34413850.193:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2285" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffe39e159 code=0x7ffc0000 [ 378.194589][ T31] audit: type=1326 audit(34413850.193:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2285" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbffe39e159 code=0x7ffc0000 [ 378.195522][ T31] audit: type=1326 audit(34413850.193:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2285" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fbffe39e159 code=0x7ffc0000 [ 378.914635][T11870] loop5: detected capacity change from 0 to 512 [ 378.915649][T11870] EXT4-fs: Ignoring removed oldalloc option [ 378.987901][T11870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.125337][ T5768] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 379.193748][T11870] netfs: Cache "CacheFiles" added (type cachefiles) [ 379.193779][T11870] CacheFiles: File cache on CacheFiles registered [ 379.213850][T11866] CacheFiles: File cache on CacheFiles unregistering [ 379.213875][T11866] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 379.280517][ T5768] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 379.292492][ T5768] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 379.292566][ T5768] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 379.292612][ T5768] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.292657][ T5768] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 379.292703][ T5768] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 379.295783][ T5768] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 379.295845][ T5768] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 379.295892][ T5768] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.295963][ T5768] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 379.296011][ T5768] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 379.300114][ T5768] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 379.300176][ T5768] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 379.300222][ T5768] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.300267][ T5768] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 379.300313][ T5768] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 379.308594][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.310038][ T5768] usb 2-1: string descriptor 0 read error: -22 [ 379.310189][ T5768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.341285][ T5746] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 379.401209][ T5768] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 379.528975][ T5746] usb 4-1: unable to get BOS descriptor or descriptor too short [ 379.529046][ T5746] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 379.530190][ T5746] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.530230][ T5746] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 379.530293][ T5746] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 379.530351][ T5746] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 379.530415][ T5746] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 379.530465][ T5746] usb 4-1: config 1 interface 1 has no altsetting 0 [ 379.535012][ T5746] usb 4-1: string descriptor 0 read error: -22 [ 379.535175][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.975675][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 380.055268][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout [ 380.465519][T11879] loop6: detected capacity change from 0 to 32768 [ 380.468326][ T5746] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 380.476852][T11879] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2298 (11879) [ 380.509069][ T5746] usb 4-1: Warning! Unlikely big volume step count (=6540), linear volume or wrong cval->res? [ 380.509111][ T5746] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/6540/1 [ 380.527849][T11879] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 380.527901][T11879] BTRFS info (device loop6): using blake2b checksum algorithm [ 380.715464][T11879] BTRFS info (device loop6): enabling ssd optimizations [ 380.715659][T11879] BTRFS info (device loop6): turning on async discard [ 380.715690][T11879] BTRFS info (device loop6): enabling free space tree [ 380.715721][T11879] BTRFS info (device loop6): use zstd compression, level 3 [ 380.832706][ T5746] usb 4-1: USB disconnect, device number 20 [ 381.049022][ T6127] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 381.262186][T11923] kernel profiling enabled (shift: 9) [ 381.353369][T11927] jffs2: notice: (11927) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 381.469676][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 381.723010][T11933] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2316'. [ 381.817207][ T5768] usb 2-1: USB disconnect, device number 22 [ 383.505158][ T5746] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 383.655904][ T5746] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 383.657055][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.682794][ T5746] usb 5-1: config 0 descriptor?? [ 384.114839][ T5746] usb 5-1: Cannot set MAC address [ 384.115172][ T5746] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 384.151368][ T5746] usb 5-1: USB disconnect, device number 20 [ 384.345950][T11997] netlink: 'syz.6.2344': attribute type 10 has an invalid length. [ 384.349768][T11997] syz_tun: entered promiscuous mode [ 384.382210][T11997] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 384.686486][T11997] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 384.686563][T11997] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 384.732158][T11997] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 384.783082][T11997] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 384.819810][T11997] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 385.930676][ T5747] kernel read not supported for file /comedi4 (pid: 5747 comm: kworker/0:5) [ 385.931001][T12026] kAFS: bad VL server IP address [ 386.293669][T12039] loop3: detected capacity change from 0 to 512 [ 386.341944][T12039] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 387.499575][T12064] loop6: detected capacity change from 0 to 512 [ 387.523379][T12064] EXT4-fs: Ignoring removed oldalloc option [ 387.535330][T12064] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 387.671327][T12064] EXT4-fs (loop6): 1 truncate cleaned up [ 387.690390][T12064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.970578][ T6127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.352774][T12084] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input58 [ 388.663308][T12082] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 389.491046][T12095] loop6: detected capacity change from 0 to 128 [ 389.514706][T12091] loop4: detected capacity change from 0 to 4096 [ 389.648047][T12098] loop5: detected capacity change from 0 to 512 [ 389.679253][T12098] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 389.680457][T12098] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 389.680493][T12098] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 389.680525][T12098] EXT4-fs (loop5): group descriptors corrupted! [ 390.507179][ T1160] IPVS: starting estimator thread 0... [ 390.507539][T12117] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 390.507665][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 390.595114][T12118] IPVS: using max 23 ests per chain, 55200 per kthread [ 390.665369][ T1222] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 390.814520][ T3301] Bluetooth: hci6: Frame reassembly failed (-84) [ 390.828505][ T1222] usb 4-1: Using ep0 maxpacket: 16 [ 390.834272][ T1222] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 390.844782][ T1222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.844837][ T1222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.844968][ T1222] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.845040][ T1222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.906788][ T1222] usb 4-1: config 0 descriptor?? [ 390.962903][T12126] sctp: [Deprecated]: syz.0.2398 (pid 12126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.962903][T12126] Use struct sctp_sack_info instead [ 391.373256][ T1222] hid_parser_main: 42 callbacks suppressed [ 391.373292][ T1222] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 391.373333][ T1222] microsoft 0003:045E:07DA.002A: ignoring exceeding usage max [ 391.381998][ T1222] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 391.382046][ T1222] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 391.382081][ T1222] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 391.382117][ T1222] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 391.382152][ T1222] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 391.382187][ T1222] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 391.382222][ T1222] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 391.382258][ T1222] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 391.382293][ T1222] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 391.395204][ T1222] microsoft 0003:045E:07DA.002A: implement() called with n (56) > 32! (kworker/1:2) [ 391.591071][ T1222] microsoft 0003:045E:07DA.002A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 391.608197][ T188] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 391.768817][ T188] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 391.770343][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.770411][ T188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.806102][ T188] usb 1-1: config 0 descriptor?? [ 391.842598][ T5746] usb 4-1: USB disconnect, device number 21 [ 391.922241][T12135] fido_id[12135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 392.030453][ T188] usbhid 1-1:0.0: can't add hid device: -71 [ 392.030591][ T188] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 392.051372][ T188] usb 1-1: USB disconnect, device number 29 [ 392.515107][ T1222] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 392.662745][ T5746] input: syz0 as /devices/virtual/misc/uhid/0005:057B:030A.002B/input/input59 [ 392.698129][ T1222] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 0.40 [ 392.701532][ T1222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.701607][ T1222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.751308][ T1222] usb 1-1: config 0 descriptor?? [ 392.776891][ T1222] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 392.778015][ T1222] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 392.782695][ T5746] hid-generic 0005:057B:030A.002B: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 392.795078][ T1222] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 392.795210][ T1222] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 392.824791][ T1222] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 392.843379][ T1222] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 88 [ 392.843509][ T1222] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 392.868270][ T5630] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 392.885028][ T188] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 392.893525][ T1222] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 393.034986][ T188] usb 4-1: Using ep0 maxpacket: 8 [ 393.037627][ T188] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 393.043595][ T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.043638][ T188] usb 4-1: Product: syz [ 393.043665][ T188] usb 4-1: Manufacturer: syz [ 393.043693][ T188] usb 4-1: SerialNumber: syz [ 393.237994][ T5747] usb 1-1: USB disconnect, device number 30 [ 393.276487][ T5747] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 393.351932][ T5747] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 393.352775][ T5747] keyspan 1-1:0.0: device disconnected [ 393.445083][ T5850] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 393.502447][ T188] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 393.502514][ T188] usb 4-1: MIDIStreaming interface descriptor not found [ 393.606741][ T5850] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 393.610710][ T188] usb 4-1: USB disconnect, device number 22 [ 393.610746][ T5850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 393.610808][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.996031][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.122277][T12178] batman_adv: batadv0: Adding interface: macvtap1 [ 394.122335][T12178] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.122383][T12178] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 394.191258][ T5850] lg-g15 0003:046D:C222.002C: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 394.394821][ T5850] lg-g15 0003:046D:C222.002C: Error getting LED brightness: -71 [ 394.409752][ T5850] lg-g15 0003:046D:C222.002C: probe with driver lg-g15 failed with error -71 [ 394.457646][ T5850] usb 5-1: USB disconnect, device number 21 [ 394.775287][T12191] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2425'. [ 395.339015][ T1954] block nbd0: Possible stuck request ffff888027a95080: control (read@0,1024B). Runtime 180 seconds [ 395.339085][ T1954] block nbd0: Possible stuck request ffff888027a95240: control (read@1024,1024B). Runtime 180 seconds [ 395.339135][ T1954] block nbd0: Possible stuck request ffff888027a95400: control (read@2048,1024B). Runtime 180 seconds [ 395.339186][ T1954] block nbd0: Possible stuck request ffff888027a955c0: control (read@3072,1024B). Runtime 180 seconds [ 396.298229][ T59] IPVS: starting estimator thread 0... [ 396.301446][T12226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2440'. [ 396.330154][T12222] loop5: detected capacity change from 0 to 4096 [ 396.363059][T12222] EXT4-fs: Ignoring removed orlov option [ 396.373475][T12222] EXT4-fs (loop5): Test dummy encryption mode enabled [ 396.385011][T12227] IPVS: using max 22 ests per chain, 52800 per kthread [ 396.449950][T12222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.492241][T12222] EXT4-fs (loop5): shut down requested (2) [ 396.633032][ T5633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.672002][ T1222] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 396.785038][ T188] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 396.829600][ T1222] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 396.829666][ T1222] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 396.832018][ T1222] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.832092][ T1222] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.832140][ T1222] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.834780][ T1222] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.834845][ T1222] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.835130][ T1222] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.836718][ T1222] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.836782][ T1222] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.836829][ T1222] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.839364][ T1222] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.839428][ T1222] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.839474][ T1222] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.840625][ T1222] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.840688][ T1222] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.840734][ T1222] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.845024][ T1222] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.845094][ T1222] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.845140][ T1222] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.847590][ T1222] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.847655][ T1222] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.847700][ T1222] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.850668][ T1222] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.850733][ T1222] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 396.850778][ T1222] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.861373][ T1222] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 396.861413][ T1222] usb 4-1: Product: syz [ 396.861439][ T1222] usb 4-1: Manufacturer: syz [ 396.861465][ T1222] usb 4-1: SerialNumber: syz [ 396.901563][ T1222] usb 4-1: config 0 descriptor?? [ 396.995010][ T188] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 397.018232][ T1222] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 397.033302][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.033358][ T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.033417][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.155697][ T188] usb 2-1: config 0 descriptor?? [ 397.318270][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 397.327842][ T1222] usb 4-1: USB disconnect, device number 23 [ 397.336000][ T1222] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 397.632750][ T188] arvo 0003:1E7D:30D4.002D: item fetching failed at offset 5/7 [ 397.648287][ T188] arvo 0003:1E7D:30D4.002D: parse failed [ 397.648385][ T188] arvo 0003:1E7D:30D4.002D: probe with driver arvo failed with error -22 [ 397.876432][ T188] usb 2-1: USB disconnect, device number 23 [ 399.306190][ T5768] hid_parser_main: 4 callbacks suppressed [ 399.306225][ T5768] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 399.306263][ T5768] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 399.413524][ T5768] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 399.707692][T12277] jffs2: notice: (12277) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 399.809090][T12275] fido_id[12275]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 399.990255][T12282] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 400.165192][ T5768] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 400.327680][ T5768] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 400.331579][ T5768] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 400.331625][ T5768] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 400.331659][ T5768] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 400.331694][ T5768] usb 2-1: config 220 has no interface number 2 [ 400.331772][ T5768] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 400.331822][ T5768] usb 2-1: config 220 interface 0 has no altsetting 0 [ 400.331856][ T5768] usb 2-1: config 220 interface 76 has no altsetting 0 [ 400.331890][ T5768] usb 2-1: config 220 interface 1 has no altsetting 0 [ 400.332397][T12288] netlink: 7180 bytes leftover after parsing attributes in process `syz.6.2467'. [ 400.332433][T12288] netlink: 7180 bytes leftover after parsing attributes in process `syz.6.2467'. [ 400.397761][ T5768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.397806][ T5768] usb 2-1: Product: syz [ 400.397833][ T5768] usb 2-1: Manufacturer: syz [ 400.397860][ T5768] usb 2-1: SerialNumber: syz [ 400.727934][ T5768] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 400.727991][ T5768] uvcvideo 2-1:220.0: No valid video chain found. [ 400.728057][ T5768] usb 2-1: selecting invalid altsetting 0 [ 400.776800][ T5768] usb 2-1: selecting invalid altsetting 0 [ 400.776846][ T5768] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 400.781494][ T5768] usb 2-1: USB disconnect, device number 24 [ 401.182463][T12305] misc userio: Can't change port extra on an already running userio instance [ 401.739993][ T3301] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 401.932668][T12326] loop3: detected capacity change from 0 to 128 [ 401.973107][T12326] FAT-fs (loop3): Directory bread(block 1048) failed [ 401.973159][T12326] FAT-fs (loop3): Directory bread(block 1049) failed [ 401.973199][T12326] FAT-fs (loop3): Directory bread(block 1050) failed [ 401.973237][T12326] FAT-fs (loop3): Directory bread(block 1051) failed [ 401.973277][T12326] FAT-fs (loop3): Directory bread(block 1052) failed [ 401.973316][T12326] FAT-fs (loop3): Directory bread(block 1053) failed [ 401.973355][T12326] FAT-fs (loop3): Directory bread(block 1054) failed [ 401.973393][T12326] FAT-fs (loop3): Directory bread(block 1055) failed [ 402.094573][T12326] FAT-fs (loop3): FAT read failed (blocknr 128) [ 402.501648][T12333] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2490'. [ 402.950965][T12348] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2494'. [ 403.675034][ T1222] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 403.835445][ T1222] usb 7-1: Using ep0 maxpacket: 8 [ 403.836225][ T1222] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 403.839857][ T1222] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 403.839897][ T1222] usb 7-1: Product: syz [ 403.839954][ T1222] usb 7-1: Manufacturer: syz [ 403.839981][ T1222] usb 7-1: SerialNumber: syz [ 403.910840][ T1222] usb 7-1: config 0 descriptor?? [ 403.928483][ T1222] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 404.398725][T12384] /dev/loop0: Can't lookup blockdev [ 404.499342][T12386] loop3: detected capacity change from 0 to 2048 [ 404.586273][ T1222] input: gspca_zc3xx as /devices/platform/dummy_hcd.6/usb7/7-1/input/input63 [ 404.832774][ T5747] usb 7-1: USB disconnect, device number 17 [ 404.858033][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2512'. [ 405.184312][T12403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2517'. [ 405.592373][T12409] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2519'. [ 405.945026][ T1222] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 406.102748][ T1222] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 406.102813][ T1222] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 406.127797][ T1222] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.127869][ T1222] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.127966][ T1222] usb 1-1: config 0 interface 0 has no altsetting 0 [ 406.160276][ T1222] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.160348][ T1222] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.160399][ T1222] usb 1-1: config 0 interface 0 has no altsetting 0 [ 406.161427][ T1222] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.161491][ T1222] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.161537][ T1222] usb 1-1: config 0 interface 0 has no altsetting 0 [ 406.162566][ T1222] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.162639][ T1222] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.162686][ T1222] usb 1-1: config 0 interface 0 has no altsetting 0 [ 406.163690][ T1222] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.163756][ T1222] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.163803][ T1222] usb 1-1: config 0 interface 0 has no altsetting 0 [ 406.164788][ T1222] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.164851][ T1222] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.165568][ T1222] usb 1-1: config 0 interface 0 has no altsetting 0 [ 406.204196][ T1222] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.204276][ T1222] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.204326][ T1222] usb 1-1: config 0 interface 0 has no altsetting 0 [ 406.234213][ T1222] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.234288][ T1222] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 406.234337][ T1222] usb 1-1: config 0 interface 0 has no altsetting 0 [ 406.326963][T12424] loop5: detected capacity change from 0 to 1024 [ 406.339499][T12424] EXT4-fs: Ignoring removed bh option [ 406.347144][T12424] EXT4-fs: Mount option(s) incompatible with ext3 [ 406.366612][ T1222] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 406.366658][ T1222] usb 1-1: Product: syz [ 406.366685][ T1222] usb 1-1: Manufacturer: syz [ 406.366712][ T1222] usb 1-1: SerialNumber: syz [ 406.428162][ T1222] usb 1-1: config 0 descriptor?? [ 406.453222][ T1222] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 406.539819][T12424] binder: 12422:12424 ioctl c0306201 2000000001c0 returned -14 [ 406.747638][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 406.748313][ T1222] usb 1-1: USB disconnect, device number 31 [ 406.774715][ T1222] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 407.260792][ T1222] input: syz0 as /devices/virtual/misc/uhid/0005:057B:030A.002F/input/input64 [ 407.283587][ T1222] hid-generic 0005:057B:030A.002F: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 407.456694][ T25] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 407.605050][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 407.612797][ T25] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 407.646626][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.646672][ T25] usb 7-1: Product: syz [ 407.646699][ T25] usb 7-1: Manufacturer: syz [ 407.646725][ T25] usb 7-1: SerialNumber: syz [ 407.877265][ T5768] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 407.877338][ T5768] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 407.936197][ T25] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.936264][ T25] usb 7-1: MIDIStreaming interface descriptor not found [ 407.975667][ T5768] hid-generic 0000:0000:0000.0030: hidraw1: HID v0.00 Device [syz0] on syz0 [ 408.238602][ T25] usb 7-1: USB disconnect, device number 18 [ 408.507733][T12466] fido_id[12466]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 408.581200][ T5651] udevd[5651]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.327146][ T1222] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 409.481775][ T1222] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 409.494694][ T1222] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 409.494736][ T1222] usb 1-1: config 1 has no interface number 0 [ 409.511046][ T1222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.511087][ T1222] usb 1-1: Product: syz [ 409.511114][ T1222] usb 1-1: Manufacturer: syz [ 409.511141][ T1222] usb 1-1: SerialNumber: syz [ 409.558211][ T1222] usb 1-1: 3:0 : does not exist [ 409.558249][ T1222] usb 1-1: 3:0 : does not exist [ 409.615265][T12512] ip_tables: iptables: counters copy to user failed while replacing table [ 409.735808][T12517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2552'. [ 409.854187][ T5747] usb 1-1: USB disconnect, device number 32 [ 409.987442][T12525] loop5: detected capacity change from 0 to 128 [ 410.270873][T12525] bio_check_eod: 20 callbacks suppressed [ 410.270904][T12525] syz.5.2559: attempt to access beyond end of device [ 410.270904][T12525] loop5: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 410.271462][T12525] syz.5.2559: attempt to access beyond end of device [ 410.271462][T12525] loop5: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 410.446109][T12528] loop3: detected capacity change from 0 to 4096 [ 410.577531][T12528] ntfs3(loop3): Failed to load $Extend (-22). [ 410.577571][T12528] ntfs3(loop3): Failed to initialize $Extend. [ 410.674407][T12528] ntfs3(loop3): ino=5, "/" indx_read_ra [ 411.038969][ T1222] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 411.215070][ T1222] usb 1-1: Using ep0 maxpacket: 32 [ 411.215710][ T1222] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 411.216820][ T1222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.220506][ T1222] usb 1-1: config 0 descriptor?? [ 411.458177][ T1222] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 411.470233][ T1222] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.471615][ T1222] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 411.471674][ T1222] usb 1-1: media controller created [ 411.548107][ T1222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.712166][ T1222] az6027: usb out operation failed. (-71) [ 411.732838][ T1222] az6027: usb out operation failed. (-71) [ 411.732865][ T1222] stb0899_attach: Driver disabled by Kconfig [ 411.732881][ T1222] az6027: no front-end attached [ 411.732881][ T1222] [ 411.733901][ T1222] az6027: usb out operation failed. (-71) [ 411.733953][ T1222] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 411.746517][ T1222] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input65 [ 411.751622][ T1222] dvb-usb: schedule remote query interval to 400 msecs. [ 411.751649][ T1222] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 411.773807][ T1222] usb 1-1: USB disconnect, device number 33 [ 412.077371][ T1222] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 412.381903][T12579] loop4: detected capacity change from 0 to 1024 [ 412.507378][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 412.611965][ T188] Process accounting resumed [ 413.030166][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 413.030194][ T31] audit: type=1326 audit(34413885.023:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.0.2590" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 413.040696][ T31] audit: type=1326 audit(34413885.043:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.0.2590" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 413.044506][ T31] audit: type=1326 audit(34413885.043:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.0.2590" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 413.045674][ T31] audit: type=1326 audit(34413885.043:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.0.2590" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 413.045983][ T31] audit: type=1326 audit(34413885.043:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.0.2590" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 413.048748][ T31] audit: type=1326 audit(34413885.043:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.0.2590" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 413.049081][ T31] audit: type=1326 audit(34413885.043:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.0.2590" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 413.049805][ T31] audit: type=1326 audit(34413885.043:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.0.2590" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 413.052570][ T31] audit: type=1326 audit(34413885.043:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.0.2590" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 413.053439][ T31] audit: type=1326 audit(34413885.043:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12596 comm="syz.0.2590" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f79ba39e159 code=0x7ffc0000 [ 413.605119][ T188] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 413.757081][ T188] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 413.758383][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.007509][T12621] loop6: detected capacity change from 0 to 256 [ 414.346677][T12629] loop6: detected capacity change from 0 to 512 [ 414.362533][T12629] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 414.381349][T12629] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 414.381498][T12629] System zones: 1-12 [ 414.381779][T12629] EXT4-fs (loop6): orphan cleanup on readonly fs [ 414.398309][T12629] EXT4-fs error (device loop6): ext4_validate_block_bitmap:444: comm syz.6.2604: bg 0: block 361: padding at end of block bitmap is not set [ 414.398363][T12629] loop6: lost filesystem error report for type 5 error -117 [ 414.401768][T12629] EXT4-fs (loop6): Remounting filesystem read-only [ 414.404944][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 414.404993][ C1] EXT4-fs (loop6): initial error at time 34413886: ext4_validate_block_bitmap:444 [ 414.405033][ C1] EXT4-fs (loop6): last error at time 34413886: ext4_validate_block_bitmap:444 [ 414.410951][T12629] EXT4-fs (loop6): 1 truncate cleaned up [ 414.418632][T12629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 414.510790][T12629] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.2604: error -EUCLEAN reading directory block [ 414.709327][ T6127] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 415.059273][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2608'. [ 415.380615][T12651] loop5: detected capacity change from 0 to 1024 [ 415.430517][T12656] loop4: detected capacity change from 0 to 256 [ 415.431721][T12656] exfat: Deprecated parameter 'namecase' [ 415.431865][T12656] exfat: Deprecated parameter 'namecase' [ 415.485671][ C0] usb 4-1: NFC: Urb failure (status -71) [ 415.489570][ T188] usb 4-1: NFC: Unable to get FW version [ 415.510498][T12656] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 415.602553][ T188] pn533_usb 4-1:1.0: probe with driver pn533_usb failed with error -71 [ 415.637646][ T188] usb 4-1: USB disconnect, device number 24 [ 416.656466][ T5768] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 416.680645][T12689] sctp: [Deprecated]: syz.3.2628 (pid 12689) Use of int in maxseg socket option. [ 416.680645][T12689] Use struct sctp_assoc_value instead [ 416.805102][ T5768] usb 7-1: Using ep0 maxpacket: 32 [ 416.807274][ T5768] usb 7-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 416.812133][ T5768] usb 7-1: config 0 interface 0 has no altsetting 0 [ 416.812185][ T5768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.838001][ T5768] usb 7-1: config 0 descriptor?? [ 416.866387][ T5768] usb 7-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 416.920512][ T5768] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 416.920948][ T5768] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 416.921006][ T5768] usb 7-1: media controller created [ 416.987762][ T5768] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.137493][ T5768] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 417.137531][ T5768] error writing reg: 0xff, val: 0x00 [ 417.185045][ T188] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 417.193385][T12696] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.194210][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.289475][ T5768] dvb_usb_mxl111sf 7-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 417.337191][ T188] usb 4-1: Using ep0 maxpacket: 16 [ 417.337781][ T188] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 417.340475][ T188] usb 4-1: config index 0 descriptor too short (expected 1060, got 36) [ 417.340541][ T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.340597][ T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.340654][ T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.403712][ T188] usb 4-1: config 0 descriptor?? [ 417.532987][T12696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.555997][T12696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.565426][T12711] usb 7-1: USB disconnect, device number 19 [ 417.832576][ T188] hid (null): unknown global tag 0xc8 [ 417.857426][ T188] aquacomputer_d5next 0003:0C70:F00D.0031: unknown main item tag 0x0 [ 417.857473][ T188] aquacomputer_d5next 0003:0C70:F00D.0031: unknown main item tag 0x0 [ 417.857509][ T188] aquacomputer_d5next 0003:0C70:F00D.0031: unknown main item tag 0x0 [ 417.857545][ T188] aquacomputer_d5next 0003:0C70:F00D.0031: unknown main item tag 0x0 [ 417.857582][ T188] aquacomputer_d5next 0003:0C70:F00D.0031: unknown main item tag 0x0 [ 417.857617][ T188] aquacomputer_d5next 0003:0C70:F00D.0031: unknown main item tag 0x0 [ 417.857699][ T188] aquacomputer_d5next 0003:0C70:F00D.0031: item 0 4 0 9 parsing failed [ 417.863194][ T188] aquacomputer_d5next 0003:0C70:F00D.0031: probe with driver aquacomputer_d5next failed with error -22 [ 418.091658][T12728] usb 4-1: USB disconnect, device number 25 [ 523.434900][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 523.441917][ C0] rcu: 1-...!: (1 GPs behind) idle=d9ac/1/0x4000000000000000 softirq=64427/64428 fqs=0 [ 523.451670][ C0] rcu: (detected by 0, t=10502 jiffies, g=73641, q=428 ncpus=2) [ 523.459402][ C0] Sending NMI from CPU 0 to CPUs 1: [ 523.464790][ C1] NMI backtrace for cpu 1 [ 523.464816][ C1] CPU: 1 UID: 0 PID: 12751 Comm: syz.6.2644 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.464862][ C1] Tainted: [L]=SOFTLOCKUP [ 523.464875][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 523.464895][ C1] RIP: 0010:_raw_spin_lock+0x2e/0x40 [ 523.464946][ C1] Code: 53 48 89 fb bf 01 00 00 00 e8 7e dc 03 f6 ff 74 24 08 48 8d 7b 18 45 31 c9 31 c9 41 b8 01 00 00 00 31 d2 31 f6 e8 e2 29 14 f6 <48> 89 df 58 5b e9 f8 81 14 f6 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 523.464978][ C1] RSP: 0018:ffffc90000a18dc8 EFLAGS: 00000096 [ 523.465005][ C1] RAX: 0000000000000000 RBX: ffff8880213ab2a8 RCX: 0000000000000100 [ 523.465027][ C1] RDX: 0000000001000002 RSI: ffffffff8e36abf3 RDI: ffffffff8c623380 [ 523.465050][ C1] RBP: ffff888050c94000 R08: 000000000002b7e2 R09: 0000000000000f39 [ 523.465071][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880213ab300 [ 523.465092][ C1] R13: ffffffff89d8e2d0 R14: ffff8880b8528640 R15: ffff8880b8528690 [ 523.465118][ C1] FS: 00007fbfff30e6c0(0000) GS:ffff888123c56000(0000) knlGS:0000000000000000 [ 523.465148][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.465171][ C1] CR2: 0000200000000240 CR3: 0000000026838000 CR4: 0000000000350ef0 [ 523.465192][ C1] Call Trace: [ 523.465203][ C1] [ 523.465213][ C1] ? advance_sched+0xe5/0xd20 [ 523.465394][ C1] advance_sched+0xe5/0xd20 [ 523.465444][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.465486][ C1] ? find_held_lock+0x2b/0x80 [ 523.465531][ C1] ? __hrtimer_run_queues+0x37b/0x9c0 [ 523.465579][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.465619][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 523.465659][ C1] ? __pfx_advance_sched+0x10/0x10 [ 523.465762][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 523.465830][ C1] hrtimer_interrupt+0x441/0xaa0 [ 523.465905][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 523.465957][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 523.466021][ C1] [ 523.466034][ C1] [ 523.466048][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 523.466094][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 523.466156][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 29 14 f6 48 89 df e8 3e 80 14 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 95 76 03 f6 65 48 83 3d 74 84 b9 08 00 74 16 5b [ 523.466204][ C1] RSP: 0018:ffffc9000e387c90 EFLAGS: 00000246 [ 523.466236][ C1] RAX: 0000000000000002 RBX: ffff8880b8428500 RCX: 0000000000000080 [ 523.466263][ C1] RDX: 0000000000000001 RSI: ffffffff8e391042 RDI: ffffffff8c623380 [ 523.466289][ C1] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 523.466314][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 523.466339][ C1] R13: 0000000000000006 R14: 1bc16d05e938b61a R15: ffff8880b8428500 [ 523.466385][ C1] clock_was_set+0x631/0x910 [ 523.466448][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.466499][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 523.466557][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.466605][ C1] ? rcu_is_watching+0x13/0xc0 [ 523.466656][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 523.466719][ C1] do_settimeofday64+0x330/0x4d0 [ 523.466762][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 523.466800][ C1] ? security_capable+0x80/0x260 [ 523.466917][ C1] ? rtsx_usb_ms_handle_req+0x172/0x1a00 [ 523.467030][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.467080][ C1] ? capable+0xd3/0xf0 [ 523.467138][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 523.467175][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 523.467301][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 523.467366][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.467421][ C1] do_syscall_64+0x123/0x790 [ 523.467488][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.467529][ C1] RIP: 0033:0x7fbffe39e159 [ 523.467559][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.467598][ C1] RSP: 002b:00007fbfff30e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 523.467636][ C1] RAX: ffffffffffffffda RBX: 00007fbffe625fa0 RCX: 00007fbffe39e159 [ 523.467663][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 523.467688][ C1] RBP: 00007fbffe43503b R08: 0000000000000000 R09: 0000000000000000 [ 523.467714][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.467739][ C1] R13: 00007fbffe626038 R14: 00007fbffe625fa0 R15: 00007ffd13aff558 [ 523.467783][ C1] [ 523.915388][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g73641 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 523.926423][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 523.936396][ C0] rcu: RCU grace-period kthread stack dump: [ 523.942452][ C0] task:rcu_preempt state:R running task stack:27400 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 523.956016][ C0] Call Trace: [ 523.959297][ C0] [ 523.962235][ C0] __schedule+0x1259/0x6920 [ 523.966773][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 523.972427][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 523.977400][ C0] ? lock_acquire+0x1d1/0x380 [ 523.982091][ C0] ? __pfx___schedule+0x10/0x10 [ 523.986969][ C0] ? find_held_lock+0x2b/0x80 [ 523.991675][ C0] ? schedule+0x225/0x2c0 [ 523.996030][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.001692][ C0] schedule+0xdd/0x2c0 [ 524.005794][ C0] schedule_timeout+0x127/0x280 [ 524.010671][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 524.016069][ C0] ? __pfx_process_timeout+0x10/0x10 [ 524.021401][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.027055][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 524.032890][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.038631][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 524.044135][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 524.048943][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.054600][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 524.059925][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 524.064901][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 524.070157][ C0] rcu_gp_kthread+0x17a/0x220 [ 524.074852][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 524.080061][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 524.085900][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.091556][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.097208][ C0] ? __kthread_parkme+0x18f/0x230 [ 524.102255][ C0] ? kthread+0x13a/0x450 [ 524.106517][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 524.111725][ C0] kthread+0x373/0x450 [ 524.115818][ C0] ? __pfx_kthread+0x10/0x10 [ 524.120434][ C0] ret_from_fork+0x730/0xd60 [ 524.125136][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 524.130268][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.135923][ C0] ? __switch_to+0x800/0x10f0 [ 524.140625][ C0] ? __switch_to_asm+0x39/0x70 [ 524.145399][ C0] ? __pfx_kthread+0x10/0x10 [ 524.150105][ C0] ret_from_fork_asm+0x1a/0x30 [ 524.154930][ C0] [ 524.157966][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 524.164334][ C0] CPU: 0 UID: 0 PID: 1037 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.175387][ C0] Tainted: [L]=SOFTLOCKUP [ 524.179709][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 524.189771][ C0] Workqueue: events_unbound toggle_allocation_gate [ 524.196356][ C0] RIP: 0010:smp_call_function_many_cond+0x59e/0x18c0 [ 524.203052][ C0] Code: 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 51 11 00 00 44 8b 73 08 31 ff 41 83 e6 01 44 89 f6 e8 55 bd 0c 00 45 85 f6 <75> d0 e8 db c2 0c 00 e8 d6 c2 0c 00 48 89 ea 48 b8 00 00 00 00 00 [ 524.222706][ C0] RSP: 0018:ffffc90004f678a0 EFLAGS: 00000202 [ 524.228789][ C0] RAX: 0000000000000000 RBX: ffff8880b8541a40 RCX: ffffffff81ff490b [ 524.236766][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88802819be80 [ 524.244741][ C0] RBP: ffff8880b8541a48 R08: 0000000000000005 R09: 0000000000000000 [ 524.252803][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 524.260774][ C0] R13: ffffed10170a8349 R14: 0000000000000001 R15: 0000000000000001 [ 524.268752][ C0] FS: 0000000000000000(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000 [ 524.277691][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 524.284280][ C0] CR2: 0000200000c8f000 CR3: 000000000eb96000 CR4: 0000000000350ef0 [ 524.292256][ C0] Call Trace: [ 524.295530][ C0] [ 524.298472][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 524.303527][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 524.309872][ C0] ? __pfx___text_poke+0x10/0x10 [ 524.314832][ C0] ? __kmalloc_cache_node_noprof+0xa9/0x720 [ 524.320772][ C0] ? __kmalloc_cache_node_noprof+0xa9/0x720 [ 524.326730][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 524.332489][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.338147][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 524.344516][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.350170][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 524.356451][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.362108][ C0] ? find_held_lock+0x2b/0x80 [ 524.366823][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.372485][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 524.378502][ C0] jump_label_update+0x37a/0x550 [ 524.383472][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 524.389393][ C0] static_key_enable+0x1a/0x20 [ 524.394186][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 524.399596][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 524.405522][ C0] ? process_one_work+0xa2c/0x1b10 [ 524.410663][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.416320][ C0] ? process_one_work+0x906/0x1b10 [ 524.421462][ C0] ? process_one_work+0x906/0x1b10 [ 524.426600][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.432262][ C0] process_one_work+0xac7/0x1b10 [ 524.437268][ C0] ? __pfx_process_one_work+0x10/0x10 [ 524.442718][ C0] ? lock_acquire+0x1d1/0x380 [ 524.447439][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.453104][ C0] worker_thread+0x5ef/0xe50 [ 524.457748][ C0] ? __pfx_worker_thread+0x10/0x10 [ 524.462895][ C0] ? kthread+0x13a/0x450 [ 524.467160][ C0] ? __pfx_worker_thread+0x10/0x10 [ 524.472308][ C0] kthread+0x373/0x450 [ 524.476406][ C0] ? __pfx_kthread+0x10/0x10 [ 524.481025][ C0] ret_from_fork+0x730/0xd60 [ 524.485631][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 524.490846][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 524.496500][ C0] ? __switch_to+0x800/0x10f0 [ 524.501308][ C0] ? __switch_to_asm+0x39/0x70 [ 524.506085][ C0] ? __pfx_kthread+0x10/0x10 [ 524.510705][ C0] ret_from_fork_asm+0x1a/0x30 [ 524.515507][ C0] [ 662.042204][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [kworker/u8:9:1037] [ 662.042247][ C0] Modules linked in: [ 662.042266][ C0] irq event stamp: 1828214 [ 662.059008][ C0] hardirqs last enabled at (1828213): [] irqentry_exit+0x24d/0xa10 [ 662.068608][ C0] hardirqs last disabled at (1828214): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 662.079157][ C0] softirqs last enabled at (1828212): [] __irq_exit_rcu+0x16a/0x210 [ 662.088821][ C0] softirqs last disabled at (1828137): [] __irq_exit_rcu+0x16a/0x210 [ 662.098497][ C0] CPU: 0 UID: 0 PID: 1037 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.098556][ C0] Tainted: [L]=SOFTLOCKUP [ 662.098570][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 662.098597][ C0] Workqueue: events_unbound toggle_allocation_gate [ 662.098662][ C0] RIP: 0010:smp_call_function_many_cond+0x57c/0x18c0 [ 662.098707][ C0] Code: 00 00 00 00 00 fc ff df 48 89 ea 49 89 ec 48 c1 ea 03 41 83 e4 07 4c 8d 2c 02 41 83 c4 03 e8 0b c3 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 51 11 00 00 44 8b 73 08 31 ff 41 83 e6 [ 662.098744][ C0] RSP: 0018:ffffc90004f678a0 EFLAGS: 00000293 [ 662.098774][ C0] RAX: 0000000000000000 RBX: ffff8880b8541a40 RCX: 0000000000000001 [ 662.098798][ C0] RDX: ffff88802819be80 RSI: ffffffff81ff48e5 RDI: ffff88802819be80 [ 662.098824][ C0] RBP: ffff8880b8541a48 R08: 0000000000000005 R09: 0000000000000000 [ 662.098848][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 662.098872][ C0] R13: ffffed10170a8349 R14: 0000000000000001 R15: 0000000000000001 [ 662.098899][ C0] FS: 0000000000000000(0000) GS:ffff888123b56000(0000) knlGS:0000000000000000 [ 662.098933][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 662.098959][ C0] CR2: 0000200000c8f000 CR3: 000000000eb96000 CR4: 0000000000350ef0 [ 662.098985][ C0] Call Trace: [ 662.098998][ C0] [ 662.099025][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 662.099081][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 662.099125][ C0] ? __pfx___text_poke+0x10/0x10 [ 662.099174][ C0] ? __kmalloc_cache_node_noprof+0xa9/0x720 [ 662.099241][ C0] ? __kmalloc_cache_node_noprof+0xa9/0x720 [ 662.099300][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 662.099360][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.099409][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 662.099469][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.099514][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 662.099577][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.099622][ C0] ? find_held_lock+0x2b/0x80 [ 662.099674][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.099730][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 662.099787][ C0] jump_label_update+0x37a/0x550 [ 662.099843][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 662.099898][ C0] static_key_enable+0x1a/0x20 [ 662.099947][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 662.100008][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 662.100067][ C0] ? process_one_work+0xa2c/0x1b10 [ 662.100123][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.100171][ C0] ? process_one_work+0x906/0x1b10 [ 662.100224][ C0] ? process_one_work+0x906/0x1b10 [ 662.100277][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.100333][ C0] process_one_work+0xac7/0x1b10 [ 662.100408][ C0] ? __pfx_process_one_work+0x10/0x10 [ 662.100466][ C0] ? lock_acquire+0x1d1/0x380 [ 662.100515][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.100571][ C0] worker_thread+0x5ef/0xe50 [ 662.100640][ C0] ? __pfx_worker_thread+0x10/0x10 [ 662.100698][ C0] ? kthread+0x13a/0x450 [ 662.100744][ C0] ? __pfx_worker_thread+0x10/0x10 [ 662.100798][ C0] kthread+0x373/0x450 [ 662.100846][ C0] ? __pfx_kthread+0x10/0x10 [ 662.100899][ C0] ret_from_fork+0x730/0xd60 [ 662.100940][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 662.100981][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.101027][ C0] ? __switch_to+0x800/0x10f0 [ 662.101076][ C0] ? __switch_to_asm+0x39/0x70 [ 662.101112][ C0] ? __pfx_kthread+0x10/0x10 [ 662.101165][ C0] ret_from_fork_asm+0x1a/0x30 [ 662.101226][ C0] [ 662.101241][ C0] Sending NMI from CPU 0 to CPUs 1: [ 662.101280][ C1] NMI backtrace for cpu 1 [ 662.101304][ C1] CPU: 1 UID: 0 PID: 12751 Comm: syz.6.2644 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.101350][ C1] Tainted: [L]=SOFTLOCKUP [ 662.101362][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 662.101382][ C1] RIP: 0010:rcu_is_watching+0x85/0xc0 [ 662.101428][ C1] Code: ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 25 8b 03 c1 e8 02 83 e0 01 65 48 ff 0d 16 e0 9c 12 74 07 5b <5d> e9 f0 80 20 ff e8 50 bd 86 ff 5b 5d e9 e4 80 20 ff 48 89 df e8 [ 662.101461][ C1] RSP: 0018:ffffc90000a18dd0 EFLAGS: 00000002 [ 662.101487][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000001000001 [ 662.101509][ C1] RDX: 0000000000000000 RSI: ffffffff8c623300 RDI: ffffffff8e65b928 [ 662.101531][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 662.101551][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 662.101573][ C1] R13: 007a7cffe40900c0 R14: ffff888069f3f008 R15: ffff888069f3f000 [ 662.101599][ C1] FS: 00007fbfff30e6c0(0000) GS:ffff888123c56000(0000) knlGS:0000000000000000 [ 662.101629][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 662.101652][ C1] CR2: 0000200000000240 CR3: 0000000026838000 CR4: 0000000000350ef0 [ 662.101675][ C1] Call Trace: [ 662.101685][ C1] [ 662.101698][ C1] advance_sched+0x9c7/0xd20 [ 662.101809][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 662.101851][ C1] ? __pfx_advance_sched+0x10/0x10 [ 662.101903][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 662.101961][ C1] hrtimer_interrupt+0x441/0xaa0 [ 662.102029][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 662.102074][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 662.102129][ C1] [ 662.102140][ C1] [ 662.102152][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 662.102190][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 662.102243][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 29 14 f6 48 89 df e8 3e 80 14 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 95 76 03 f6 65 48 83 3d 74 84 b9 08 00 74 16 5b [ 662.102276][ C1] RSP: 0018:ffffc9000e387c90 EFLAGS: 00000246 [ 662.102302][ C1] RAX: 0000000000000002 RBX: ffff8880b8428500 RCX: 0000000000000080 [ 662.102324][ C1] RDX: 0000000000000001 RSI: ffffffff8e391042 RDI: ffffffff8c623380 [ 662.102347][ C1] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 662.102368][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 662.102389][ C1] R13: 0000000000000006 R14: 1bc16d05e938b61a R15: ffff8880b8428500 [ 662.102427][ C1] clock_was_set+0x631/0x910 [ 662.102479][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.102521][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 662.102569][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.102611][ C1] ? rcu_is_watching+0x13/0xc0 [ 662.102653][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 662.102707][ C1] do_settimeofday64+0x330/0x4d0 [ 662.102743][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 662.102775][ C1] ? security_capable+0x80/0x260 [ 662.102815][ C1] ? rtsx_usb_ms_handle_req+0x172/0x1a00 [ 662.102873][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.102914][ C1] ? capable+0xd3/0xf0 [ 662.102970][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 662.103009][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 662.103068][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 662.103124][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.103170][ C1] do_syscall_64+0x123/0x790 [ 662.103227][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.103262][ C1] RIP: 0033:0x7fbffe39e159 [ 662.103289][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.103322][ C1] RSP: 002b:00007fbfff30e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 662.103353][ C1] RAX: ffffffffffffffda RBX: 00007fbffe625fa0 RCX: 00007fbffe39e159 [ 662.103376][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 662.103397][ C1] RBP: 00007fbffe43503b R08: 0000000000000000 R09: 0000000000000000 [ 662.103422][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.103443][ C1] R13: 00007fbffe626038 R14: 00007fbffe625fa0 R15: 00007ffd13aff558 [ 662.103480][ C1] [ 662.104277][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 662.888772][ C0] CPU: 0 UID: 0 PID: 1037 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.899837][ C0] Tainted: [L]=SOFTLOCKUP [ 662.904170][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 662.914302][ C0] Workqueue: events_unbound toggle_allocation_gate [ 662.920870][ C0] Call Trace: [ 662.924182][ C0] [ 662.927033][ C0] dump_stack_lvl+0x100/0x190 [ 662.931757][ C0] vpanic+0x553/0x970 [ 662.935760][ C0] ? __pfx_vpanic+0x10/0x10 [ 662.940277][ C0] ? console_srcu_read_unlock+0x41/0x60 [ 662.945849][ C0] ? console_srcu_read_unlock+0x41/0x60 [ 662.951421][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.957096][ C0] panic+0xd1/0xe0 [ 662.960842][ C0] ? __pfx_panic+0x10/0x10 [ 662.965277][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.970943][ C0] ? __pfx_printk_trigger_flush+0x10/0x10 [ 662.976705][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 662.982372][ C0] ? wq_watchdog_touch+0xec/0x1a0 [ 662.987454][ C0] ? watchdog_timer_fn.cold+0x5/0x25 [ 662.992797][ C0] watchdog_timer_fn.cold+0x16/0x25 [ 662.998031][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 663.003523][ C0] __hrtimer_run_queues+0x13f/0x9c0 [ 663.008870][ C0] hrtimer_interrupt+0x441/0xaa0 [ 663.013875][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 663.019891][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 663.025569][ C0] [ 663.028506][ C0] [ 663.031443][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 663.037451][ C0] RIP: 0010:smp_call_function_many_cond+0x57c/0x18c0 [ 663.044152][ C0] Code: 00 00 00 00 00 fc ff df 48 89 ea 49 89 ec 48 c1 ea 03 41 83 e4 07 4c 8d 2c 02 41 83 c4 03 e8 0b c3 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 51 11 00 00 44 8b 73 08 31 ff 41 83 e6 [ 663.063788][ C0] RSP: 0018:ffffc90004f678a0 EFLAGS: 00000293 [ 663.069885][ C0] RAX: 0000000000000000 RBX: ffff8880b8541a40 RCX: 0000000000000001 [ 663.077886][ C0] RDX: ffff88802819be80 RSI: ffffffff81ff48e5 RDI: ffff88802819be80 [ 663.085931][ C0] RBP: ffff8880b8541a48 R08: 0000000000000005 R09: 0000000000000000 [ 663.093934][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 663.101922][ C0] R13: ffffed10170a8349 R14: 0000000000000001 R15: 0000000000000001 [ 663.109926][ C0] ? smp_call_function_many_cond+0x575/0x18c0 [ 663.116057][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 663.121145][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 663.127520][ C0] ? __pfx___text_poke+0x10/0x10 [ 663.132502][ C0] ? __kmalloc_cache_node_noprof+0xa9/0x720 [ 663.138465][ C0] ? __kmalloc_cache_node_noprof+0xa9/0x720 [ 663.144422][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 663.150205][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 663.155878][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 663.162172][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 663.167840][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 663.174129][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 663.179802][ C0] ? find_held_lock+0x2b/0x80 [ 663.184611][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 663.190289][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 663.196323][ C0] jump_label_update+0x37a/0x550 [ 663.201323][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 663.207264][ C0] static_key_enable+0x1a/0x20 [ 663.212072][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 663.217418][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 663.223366][ C0] ? process_one_work+0xa2c/0x1b10 [ 663.228530][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 663.234219][ C0] ? process_one_work+0x906/0x1b10 [ 663.239393][ C0] ? process_one_work+0x906/0x1b10 [ 663.244547][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 663.250231][ C0] process_one_work+0xac7/0x1b10 [ 663.255235][ C0] ? __pfx_process_one_work+0x10/0x10 [ 663.260650][ C0] ? lock_acquire+0x1d1/0x380 [ 663.265360][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 663.271032][ C0] worker_thread+0x5ef/0xe50 [ 663.275675][ C0] ? __pfx_worker_thread+0x10/0x10 [ 663.280822][ C0] ? kthread+0x13a/0x450 [ 663.285099][ C0] ? __pfx_worker_thread+0x10/0x10 [ 663.290242][ C0] kthread+0x373/0x450 [ 663.294344][ C0] ? __pfx_kthread+0x10/0x10 [ 663.298968][ C0] ret_from_fork+0x730/0xd60 [ 663.303584][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 663.308726][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 663.314387][ C0] ? __switch_to+0x800/0x10f0 [ 663.319100][ C0] ? __switch_to_asm+0x39/0x70 [ 663.323882][ C0] ? __pfx_kthread+0x10/0x10 [ 663.328509][ C0] ret_from_fork_asm+0x1a/0x30 [ 663.333321][ C0] [ 664.506435][ C0] Shutting down cpus with NMI [ 664.511440][ C0] Kernel Offset: disabled [ 664.515764][ C0] Rebooting in 86400 seconds..