last executing test programs: 6.63811292s ago: executing program 2 (id=530): socket(0xa, 0x3, 0xff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x28, 0x0, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) unshare(0x60600) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7ef6, 0x8}) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) syz_open_procfs(0x0, 0x0) 6.423556579s ago: executing program 4 (id=532): socket(0xa, 0x3, 0xff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) unshare(0x60600) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7ef6, 0x8}) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) syz_open_procfs(0x0, 0x0) 5.411060481s ago: executing program 0 (id=535): io_setup(0x5, &(0x7f0000000000)=0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) socket$inet(0x2, 0x3, 0x6) r2 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo.', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x70}, 0x1, 0x7}, 0x4040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c00c082}, 0x20000048) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) unshare(0x4000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0), 0x8) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) close(0x3) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000500)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x3f00, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2, 0x3]}}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000180)={0x2, 0x8000000000000000}, 0x1) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x22000004) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) r8 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, 0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 5.01278741s ago: executing program 1 (id=536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x1, 0x1, 0x10}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 4.863057558s ago: executing program 0 (id=537): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d4, 0x6c}, @in=@broadcast, {0x0, 0x192, 0x6, 0xffff, 0x8251a, 0x1, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x101}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.488243785s ago: executing program 1 (id=538): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 4.164312874s ago: executing program 1 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) sendmsg$NFT_BATCH(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0xac, 0x18, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x992}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x5c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'gre0\x00'}]}]}]}, @NFT_MSG_DELOBJ={0xdc, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x9c, 0x8, "fec4b02fa07b88d4e299182f4cc22f945f1a0aba303a8a6e924e59b14726d3f8829c3cd324260ba5c9fda58837a89154d542d564f439c72c337c9925f7076fa434a2bc10c90aaad8160bf1ad3391377b3b54cda60025c53aeea3500fe351a246e1b0a6099328daa7fd3dc15014b5961fac8427b1f84eed28afe1da1fcb6430a3715b81da56cadae274338934ef42d07d6385f0df6f04ff7d"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x294}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r11 = dup2(r9, r10) close_range(r11, 0xffffffffffffffff, 0x0) r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) r13 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r13, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r13, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000080)={0x980929, 0x6}) 3.620233133s ago: executing program 1 (id=541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x82}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x3, 0xff}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 3.531567093s ago: executing program 0 (id=542): syz_io_uring_setup(0x1b52, &(0x7f0000000000)={0x0, 0x6543, 0x10000, 0x1, 0x135}, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1f36, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 3.346103595s ago: executing program 3 (id=543): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.201268843s ago: executing program 0 (id=544): socket(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r2, 0x0, 0x0, 0x0, 0x1) syz_io_uring_setup(0x5793, &(0x7f0000000100)={0x0, 0x1650a, 0x14000, 0x1, 0x51}, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x400, 0x7, 0x4450290}) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @private2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.199364603s ago: executing program 1 (id=545): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x0, 0x18, 0xf, "ee4ef9677ff3f932698ca9fd6e8aee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.980241805s ago: executing program 3 (id=546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305839, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}}, 0x0) 2.817628776s ago: executing program 2 (id=547): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40084) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc1205531, &(0x7f0000002680)=""/4078) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000600)=0x17f) sendmsg$key(r3, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x1, 0x0, 0x20, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x5, 0x1}}) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@bridge_delneigh={0x20, 0x1e, 0x1, 0x1, 0x0, {0x7, 0x0, 0x0, r8, 0x0, 0x0, 0x3}, [@NDA_FDB_EXT_ATTRS={0x4}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = epoll_create(0xeb5) epoll_pwait(r10, &(0x7f0000000080)=[{}], 0x1, 0xb6c, 0x0, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f0000000700), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f00000000c0)) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$SNDCTL_TMR_STOP(r4, 0x5403) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c00028005000100000000002c000e800c00028004000100930000001400018008000100ac1414bb080002"], 0x90}}, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x50172, 0xffffffffffffffff, 0x0) 2.366461323s ago: executing program 4 (id=548): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x10000}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x3000000, 0x1, 0x54, 0x0, 0x1}, 0x9c) 2.027237271s ago: executing program 3 (id=549): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000100, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.997580252s ago: executing program 4 (id=550): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 1.610126766s ago: executing program 4 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r8, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) sendmsg$NFT_BATCH(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0xac, 0x18, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x992}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x5c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'gre0\x00'}]}]}]}, @NFT_MSG_DELOBJ={0xdc, 0x14, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x9c, 0x8, "fec4b02fa07b88d4e299182f4cc22f945f1a0aba303a8a6e924e59b14726d3f8829c3cd324260ba5c9fda58837a89154d542d564f439c72c337c9925f7076fa434a2bc10c90aaad8160bf1ad3391377b3b54cda60025c53aeea3500fe351a246e1b0a6099328daa7fd3dc15014b5961fac8427b1f84eed28afe1da1fcb6430a3715b81da56cadae274338934ef42d07d6385f0df6f04ff7d"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2e8}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r10 = dup2(0xffffffffffffffff, r9) close_range(r10, 0xffffffffffffffff, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r12 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) r13 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r13, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r13, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r13, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) close(r13) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000080)={0x980929, 0x6}) 1.591776925s ago: executing program 3 (id=552): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x300}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x80800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r3, 0x43, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000180), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x11e, 0x83, 0x0, &(0x7f0000001100)) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r8, 0xc0305720, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_emit_ethernet(0x9b, &(0x7f00000002c0)={@link_local={0x3}, @multicast, @void, {@llc={0x4, {@snap={0xaa, 0x0, "c724", "49f792", 0x886c, "fb36612948e17c571a3967cbed0881b72c57966cb1581e5f5bf9792a8299bd4f4f5383f261b044d0577e8ff67c8098b3bd0fd6c74a07a256c871bf5eee496539da1d14bc701d98d47b635af1206a746ba8dc7c1022f08fa1287cd898609b9898ac87a71900cc2b3107e9460ba947e4a7eb9565632187e3a55bcdb78c98bc311cf43f5371"}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, 0x0, 0x0) 1.55130596s ago: executing program 2 (id=553): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x300}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x80800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r3, 0x43, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000180), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x11e, 0x83, 0x0, &(0x7f0000001100)) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r8, 0xc0305720, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_emit_ethernet(0x9b, &(0x7f00000002c0)={@link_local={0x3}, @multicast, @void, {@llc={0x4, {@snap={0xaa, 0x0, "c724", "49f792", 0x886c, "fb36612948e17c571a3967cbed0881b72c57966cb1581e5f5bf9792a8299bd4f4f5383f261b044d0577e8ff67c8098b3bd0fd6c74a07a256c871bf5eee496539da1d14bc701d98d47b635af1206a746ba8dc7c1022f08fa1287cd898609b9898ac87a71900cc2b3107e9460ba947e4a7eb9565632187e3a55bcdb78c98bc311cf43f5371"}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, 0x0, 0x0) 1.12575333s ago: executing program 2 (id=554): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)) 1.061589247s ago: executing program 3 (id=555): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b6, 0x0, 0x2, 0x15c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x3, 0x80257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1, 0xffffffff, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 984.283509ms ago: executing program 4 (id=556): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x2) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001540)="a0b5954496e6454d22", 0x9}], 0x1}}], 0x2, 0x4040040) 627.245722ms ago: executing program 2 (id=557): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1}) read$char_usb(r1, 0x0, 0x0) 463.580483ms ago: executing program 0 (id=558): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x24040065) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a8018000480"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 334.062306ms ago: executing program 4 (id=559): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6", 0x29, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x2, 0x6, @remote}, 0x14) 289.640987ms ago: executing program 0 (id=560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={0x24, r1, 0x301, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4000014) 119.576662ms ago: executing program 1 (id=561): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 1.148235ms ago: executing program 2 (id=562): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000100, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=563): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000440)={0x0, 0x17, 0x21, "e971e87b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f00000002c0)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 5127][ T5861] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 120.840305][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 120.995633][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 121.014550][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 121.038109][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.038155][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.038212][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.100508][ T10] usb 4-1: config 0 descriptor?? [ 121.178949][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 121.187063][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 121.257268][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 121.272848][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 121.282144][ T10] usb 4-1: media controller created [ 121.291623][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.330050][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 121.338698][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 121.391520][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 121.535831][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 121.547319][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 121.574109][ T10] usb 4-1: USB disconnect, device number 4 [ 121.666997][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 121.804915][ T5713] usb 2-1: USB disconnect, device number 3 [ 122.340352][ T5750] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.502433][ T5750] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 122.533976][ T5750] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.573656][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 122.573722][ T5750] usb 1-1: Product: syz [ 122.573763][ T5750] usb 1-1: Manufacturer: syz [ 122.573833][ T5750] usb 1-1: SerialNumber: syz [ 122.772175][ T5886] syz.2.60 (5886): drop_caches: 2 [ 122.817356][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 122.817967][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 122.942262][ T30] usb 5-1: device descriptor read/64, error -32 [ 123.096855][ T5750] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 123.189993][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.367512][ T30] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.506931][ T5685] usb 1-1: USB disconnect, device number 4 [ 123.551107][ T5685] usblp0: removed [ 124.023623][ T30] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 124.023682][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 124.023711][ T30] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 124.087244][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.087307][ T30] usb 5-1: Product: syz [ 124.087342][ T30] usb 5-1: Manufacturer: syz [ 124.087398][ T30] usb 5-1: SerialNumber: syz [ 124.141944][ T30] usb 5-1: config 0 descriptor?? [ 124.369710][ T5927] loop9: detected capacity change from 0 to 7 [ 124.381262][ T5904] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 124.426405][ T5927] Dev loop9: unable to read RDB block 7 [ 124.426510][ T5927] loop9: unable to read partition table [ 124.426842][ T5927] loop9: partition table beyond EOD, truncated [ 124.426924][ T5927] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 125.033406][ T5713] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.208682][ T5713] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.261958][ T5713] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 125.262017][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 125.262075][ T5713] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 125.465591][ T5685] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 125.484939][ T5937] tipc: Started in network mode [ 125.485072][ T5937] tipc: Node identity ac14140f, cluster identity 4711 [ 125.518681][ T5937] tipc: New replicast peer: 172.30.0.2 [ 125.525462][ T5937] tipc: Enabled bearer , priority 10 [ 125.553749][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 125.553846][ T5937] tipc: Disabling bearer [ 125.607053][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.617894][ T5713] usb 3-1: Product: syz [ 125.623424][ T5713] usb 3-1: Manufacturer: syz [ 125.623452][ T5713] usb 3-1: SerialNumber: syz [ 125.642529][ T5713] usb 3-1: config 0 descriptor?? [ 125.664821][ T5685] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 125.684915][ T5685] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 125.684975][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 125.685100][ T5685] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 125.905873][ T5922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.919492][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.919580][ T5685] usb 4-1: Product: syz [ 125.919624][ T5685] usb 4-1: Manufacturer: syz [ 125.919702][ T5685] usb 4-1: SerialNumber: syz [ 125.985003][ T5685] usb 4-1: config 0 descriptor?? [ 125.997593][ T5930] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 126.222706][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 126.251077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 126.259224][ T30] usb 5-1: USB disconnect, device number 4 [ 126.274273][ T5922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 126.444145][ T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 126.462257][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.462304][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 126.462377][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.504270][ T10] usb 2-1: config 0 descriptor?? [ 126.537298][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 126.545369][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 126.569502][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 126.587872][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 126.588152][ T10] usb 2-1: media controller created [ 126.607296][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.648567][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 126.648693][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 126.659211][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 126.722279][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 126.722338][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 126.745011][ T5930] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 126.882059][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 126.882133][ T10] dvb-usb: error while querying for an remote control event. [ 126.945101][ T5622] usb 2-1: USB disconnect, device number 4 [ 127.126535][ T5622] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 127.457823][ T5952] netlink: 32 bytes leftover after parsing attributes in process `syz.4.84'. [ 127.543342][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.84'. [ 127.804274][ T5943] syz.0.81 (5943): drop_caches: 2 [ 128.056729][ T5959] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 128.128883][ T25] usb 4-1: USB disconnect, device number 5 [ 128.438520][ T5964] loop9: detected capacity change from 0 to 7 [ 128.472184][ T30] usb 3-1: USB disconnect, device number 4 [ 128.517226][ T5964] Dev loop9: unable to read RDB block 7 [ 128.517939][ T5964] loop9: unable to read partition table [ 128.541945][ T5964] loop9: partition table beyond EOD, truncated [ 128.542051][ T5964] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 129.182175][ T5713] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.370327][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 129.378234][ T5713] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 129.378348][ T5713] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 129.402403][ T5713] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 129.402457][ T5713] usb 1-1: config 0 has no interface number 0 [ 129.432639][ T5713] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 129.432690][ T5713] usb 1-1: config 0 has no interface number 0 [ 129.455631][ T5713] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 129.455692][ T5713] usb 1-1: config 0 has no interface number 0 [ 129.479115][ T5713] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 129.490236][ T5713] usb 1-1: config 0 has no interface number 0 [ 129.510494][ T5713] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 129.521842][ T5713] usb 1-1: config 0 has no interface number 0 [ 129.537620][ T5713] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 129.547789][ T5713] usb 1-1: config 0 has no interface number 0 [ 129.560642][ T5713] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 129.560691][ T5713] usb 1-1: config 0 has no interface number 0 [ 129.588369][ T5713] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 129.599222][ T5713] usb 1-1: config 0 has no interface number 0 [ 129.616238][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.616287][ T5713] usb 1-1: Product: syz [ 129.616327][ T5713] usb 1-1: Manufacturer: syz [ 129.616347][ T5713] usb 1-1: SerialNumber: syz [ 129.649702][ T5713] usb 1-1: config 0 descriptor?? [ 129.668740][ T5713] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 129.890982][ T5713] etas_es58x 1-1:0.2: could not retrieve the product info string [ 130.335286][ T5999] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 130.510750][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 130.629966][ T5622] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.672794][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.699830][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 130.700002][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 130.700057][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 130.807015][ T5622] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.837897][ T5622] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 130.837969][ T5622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 130.838021][ T5622] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 130.870118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 130.893141][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.893215][ T10] usb 4-1: Product: syz [ 130.893251][ T10] usb 4-1: Manufacturer: syz [ 130.911027][ T10] usb 4-1: SerialNumber: syz [ 130.924300][ T10] usb 4-1: config 0 descriptor?? [ 130.937631][ T5993] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 130.992990][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.993645][ T5622] usb 2-1: Product: syz [ 130.993685][ T5622] usb 2-1: Manufacturer: syz [ 130.993749][ T5622] usb 2-1: SerialNumber: syz [ 131.027291][ T5622] usb 2-1: config 0 descriptor?? [ 131.044034][ T5997] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 131.224379][ T5993] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 131.402825][ T5997] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 131.420728][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.594177][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 131.598542][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.630702][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 131.630767][ T25] usb 3-1: Product: syz [ 131.630786][ T25] usb 3-1: Manufacturer: syz [ 131.630856][ T25] usb 3-1: SerialNumber: syz [ 131.680165][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 131.854389][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 131.854453][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 131.878131][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.878233][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.945004][ T10] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 132.013271][ T25] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 132.208917][ T25] usb 1-1: USB disconnect, device number 5 [ 132.248475][ T25] etas_es58x 1-1:0.2: Disconnecting syz syz [ 132.324992][ T10] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 132.339347][ T10] uvcvideo 5-1:1.1: No frame descriptor found for the default format. [ 132.339406][ T10] uvcvideo 5-1:1.1: Failed to initialize the device (-22). [ 132.366761][ T10] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -22 [ 132.383566][ C1] usblp0: nonzero write bulk status received: -71 [ 132.398304][ T10] usb 3-1: USB disconnect, device number 5 [ 132.438015][ T10] usblp0: removed [ 132.573311][ T5715] usb 5-1: USB disconnect, device number 5 [ 133.204105][ T30] usb 2-1: USB disconnect, device number 5 [ 133.445573][ T59] bond0: (slave bond_slave_0): interface is now down [ 133.445620][ T59] bond0: (slave bond_slave_1): interface is now down [ 133.464755][ T59] bond0: (slave bond_slave_0): interface is now down [ 133.494299][ T59] bond0: (slave bond_slave_1): interface is now down [ 133.618534][ T30] usb 4-1: USB disconnect, device number 6 [ 133.695572][ T59] bond0: now running without any active interface! [ 133.711280][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.719323][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.145869][ T6051] loop2: detected capacity change from 0 to 7 [ 134.158512][ T6051] Dev loop2: unable to read RDB block 7 [ 134.158564][ T6051] loop2: unable to read partition table [ 134.159075][ T6051] loop2: partition table beyond EOD, truncated [ 134.159133][ T6051] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.199745][ T6053] netlink: 32 bytes leftover after parsing attributes in process `syz.4.111'. [ 134.276141][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.111'. [ 134.290074][ T30] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.450807][ T30] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 134.462909][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.488245][ T30] usb 4-1: config 0 descriptor?? [ 134.537556][ T30] cp210x 4-1:0.0: cp210x converter detected [ 134.941149][ T30] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 134.984639][ T6061] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 134.996514][ T30] usb 4-1: cp210x converter now attached to ttyUSB0 [ 135.042796][ T6066] Zero length message leads to an empty skb [ 135.054276][ T6066] loop9: detected capacity change from 0 to 7 [ 135.062619][ T6066] Dev loop9: unable to read RDB block 7 [ 135.068704][ T6066] loop9: unable to read partition table [ 135.076759][ T6066] loop9: partition table beyond EOD, truncated [ 135.084334][ T6066] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 135.139437][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 135.172110][ T5715] usb 4-1: USB disconnect, device number 7 [ 135.185353][ T6059] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 135.216731][ T5715] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 135.242129][ T5715] cp210x 4-1:0.0: device disconnected [ 135.661041][ T5750] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.843224][ T5750] usb 3-1: Using ep0 maxpacket: 32 [ 135.850424][ T5750] usb 3-1: New USB device found, idVendor=0582, idProduct=000b, bcdDevice= 0.40 [ 135.864824][ T5750] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.864915][ T5750] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 254, using maximum allowed: 30 [ 135.865045][ T5750] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 135.865160][ T5750] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 135.944002][ T5750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.944055][ T5750] usb 3-1: Product: syz [ 135.944125][ T5750] usb 3-1: Manufacturer: syz [ 135.944282][ T5750] usb 3-1: SerialNumber: syz [ 136.017581][ T5750] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.033113][ T5750] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 136.068945][ T5750] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.083899][ T5750] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 136.138435][ T5750] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 136.422517][ T5750] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 136.483150][ T5750] usb 3-1: USB disconnect, device number 6 [ 136.561939][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.450059][ T5750] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.618263][ T5750] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.647381][ T5750] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 137.647482][ T5750] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 137.647514][ T5750] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 137.680124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 137.695124][ T31] audit: type=1800 audit(1788206630.281:2): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.119" name="bus" dev="ramfs" ino=10135 res=0 errno=0 [ 137.738674][ T31] audit: type=1800 audit(1788206630.351:3): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.118" name="bus" dev="ramfs" ino=10136 res=0 errno=0 [ 137.801725][ T5750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.801803][ T5750] usb 5-1: Product: syz [ 137.801823][ T5750] usb 5-1: Manufacturer: syz [ 137.801840][ T5750] usb 5-1: SerialNumber: syz [ 137.854854][ T5750] usb 5-1: config 0 descriptor?? [ 137.867315][ T6082] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 137.929573][ T6094] process 'syz.2.123' launched './file0' with NULL argv: empty string added [ 138.081064][ T6096] loop2: detected capacity change from 0 to 7 [ 138.100794][ T6096] Dev loop2: unable to read RDB block 7 [ 138.108879][ T6096] loop2: unable to read partition table [ 138.115236][ T6096] loop2: partition table beyond EOD, truncated [ 138.129400][ T6096] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.220310][ T6082] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.367563][ T6100] loop9: detected capacity change from 0 to 7 [ 138.381680][ T6100] Dev loop9: unable to read RDB block 7 [ 138.382940][ T6100] loop9: unable to read partition table [ 138.398357][ T6100] loop9: partition table beyond EOD, truncated [ 138.408635][ T6100] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.454281][ T25] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.0004/input/input11 [ 138.655922][ T30] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 138.707292][ T25] hid-generic 0005:0576:0306.0004: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 138.831590][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 138.835522][ T30] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 138.892162][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.892260][ T30] usb 3-1: Product: syz [ 138.892301][ T30] usb 3-1: Manufacturer: syz [ 138.892367][ T30] usb 3-1: SerialNumber: syz [ 139.308461][ T30] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.308820][ T30] usb 3-1: MIDIStreaming interface descriptor not found [ 139.411807][ T6103] fido_id[6103]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 139.558621][ T6082] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 140.017657][ T30] usb 3-1: USB disconnect, device number 7 [ 140.069737][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 140.069800][ T6108] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 140.306580][ T5637] udevd[5637]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 140.464583][ T5750] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.580713][ T5685] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 140.631216][ T5750] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.646476][ T5750] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.646573][ T5750] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 140.646660][ T5750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.718073][ T6114] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 140.794256][ T5750] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.811767][ T10] usb 5-1: USB disconnect, device number 6 [ 140.927776][ T6119] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 141.020922][ T5685] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.088438][ T5685] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 141.088507][ T5685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 141.088542][ T5685] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 141.188812][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.188871][ T5685] usb 1-1: Product: syz [ 141.188907][ T5685] usb 1-1: Manufacturer: syz [ 141.188977][ T5685] usb 1-1: SerialNumber: syz [ 141.246352][ T5750] usb 4-1: USB disconnect, device number 8 [ 141.277933][ T5685] usb 1-1: config 0 descriptor?? [ 141.295381][ T6111] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 141.677592][ T6111] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 141.707579][ T6128] loop2: detected capacity change from 0 to 7 [ 141.739304][ T6128] Dev loop2: unable to read RDB block 7 [ 141.739395][ T6128] loop2: unable to read partition table [ 141.740758][ T6128] loop2: partition table beyond EOD, truncated [ 141.740832][ T6128] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 142.022783][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.048817][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.140'. [ 142.358204][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 142.358252][ T6137] netlink: 'syz.1.142': attribute type 1 has an invalid length. [ 142.675512][ T606] IPVS: starting estimator thread 0... [ 142.773967][ T6143] IPVS: using max 37 ests per chain, 88800 per kthread [ 143.315082][ T9] usb 1-1: USB disconnect, device number 6 [ 143.365186][ T5685] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 143.383414][ T5715] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 143.451110][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 143.523763][ T5685] usb 2-1: Using ep0 maxpacket: 8 [ 143.535338][ T5685] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 143.568346][ T5715] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 143.582824][ T5715] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 143.582898][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 143.582950][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 143.583007][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.616756][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.616850][ T5685] usb 2-1: Product: syz [ 143.616887][ T5685] usb 2-1: Manufacturer: syz [ 143.616931][ T5685] usb 2-1: SerialNumber: syz [ 143.686246][ T5715] usb 3-1: config 0 descriptor?? [ 143.694186][ T6151] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 143.747107][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 143.764982][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 143.765038][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 143.765064][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 143.839195][ T5685] usb 2-1: config 0 descriptor?? [ 143.892460][ T5685] gspca_main: sq930x-2.14.0 probing 2770:930c [ 144.033542][ T31] audit: type=1800 audit(1788206636.651:4): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.141" name="bus" dev="ramfs" ino=11284 res=0 errno=0 [ 144.191746][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.191787][ T10] usb 4-1: Product: syz [ 144.208840][ T10] usb 4-1: Manufacturer: syz [ 144.208866][ T10] usb 4-1: SerialNumber: syz [ 144.232786][ T10] usb 4-1: config 0 descriptor?? [ 144.242769][ T6153] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 144.467917][ T6153] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 144.713431][ T5685] gspca_sq930x: ucbus_write failed -71 [ 144.713652][ T5685] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 144.777148][ T5685] usb 2-1: USB disconnect, device number 6 [ 144.816040][ T5715] usbhid 3-1:0.0: can't add hid device: -71 [ 144.834377][ T5715] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 144.917853][ T5715] usb 3-1: USB disconnect, device number 8 [ 145.225123][ T6168] loop2: detected capacity change from 0 to 7 [ 145.239210][ T6168] Dev loop2: unable to read RDB block 7 [ 145.239287][ T6168] loop2: unable to read partition table [ 145.256059][ T6168] loop2: partition table beyond EOD, truncated [ 145.256133][ T6168] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 145.322928][ T4983] Dev loop2: unable to read RDB block 7 [ 145.323005][ T4983] loop2: unable to read partition table [ 145.323659][ T4983] loop2: partition table beyond EOD, truncated [ 145.691326][ T6175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.750085][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 145.922796][ T10] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 145.935195][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.953887][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.953920][ T10] usb 2-1: Product: syz [ 145.953943][ T10] usb 2-1: Manufacturer: syz [ 145.953956][ T10] usb 2-1: SerialNumber: syz [ 146.143133][ T5715] usb 4-1: USB disconnect, device number 9 [ 146.595516][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 146.607755][ T6189] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 146.694341][ T10] speedtch 2-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 146.902919][ T10] speedtch 2-1:1.0: probe with driver speedtch failed with error -22 [ 146.940083][ T10] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 146.949401][ T10] speedtch 2-1:1.1: probe with driver speedtch failed with error -71 [ 146.970583][ T10] usb 2-1: USB disconnect, device number 7 [ 147.117402][ T6199] loop2: detected capacity change from 0 to 7 [ 147.149537][ T6199] Dev loop2: unable to read RDB block 7 [ 147.151188][ T6199] loop2: unable to read partition table [ 147.153078][ T6199] loop2: partition table beyond EOD, truncated [ 147.153212][ T6199] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 147.486490][ T6206] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 147.712014][ T4983] Dev loop2: unable to read RDB block 7 [ 147.712139][ T4983] loop2: unable to read partition table [ 147.712881][ T4983] loop2: partition table beyond EOD, truncated [ 148.040800][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 148.203802][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 148.225291][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.225365][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 148.225452][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 148.270191][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 148.300267][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 148.300316][ T10] usb 2-1: Manufacturer: syz [ 148.335275][ T10] usb 2-1: config 0 descriptor?? [ 148.794607][ T10] rc_core: IR keymap rc-hauppauge not found [ 148.804293][ T10] Registered IR keymap rc-empty [ 148.811233][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 148.833181][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 148.874563][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 148.895048][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 148.927250][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 148.951091][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 148.970976][ T5715] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.988837][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 149.010740][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 149.039247][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 149.061922][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 149.080386][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 149.100305][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 149.120769][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 149.132392][ T5715] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 149.150927][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 149.159975][ T5715] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 149.170119][ T5715] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 149.170141][ T5715] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 149.170156][ T5715] usb 1-1: config 220 has no interface number 2 [ 149.171309][ T10] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 149.194204][ T5715] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 149.194246][ T5715] usb 1-1: config 220 interface 0 has no altsetting 0 [ 149.194268][ T5715] usb 1-1: config 220 interface 76 has no altsetting 0 [ 149.194289][ T5715] usb 1-1: config 220 interface 1 has no altsetting 0 [ 149.257571][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 149.268538][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 149.268990][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.287689][ T5715] usb 1-1: Product: syz [ 149.287722][ T5715] usb 1-1: Manufacturer: syz [ 149.287740][ T5715] usb 1-1: SerialNumber: syz [ 149.343199][ T10] usb 2-1: USB disconnect, device number 8 [ 149.602591][ T5715] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 149.602640][ T5715] uvcvideo 1-1:220.0: No valid video chain found. [ 149.605974][ T5715] usb 1-1: selecting invalid altsetting 0 [ 149.664985][ T5715] usb 1-1: selecting invalid altsetting 0 [ 149.671089][ T5715] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 149.691312][ T5715] usb 1-1: USB disconnect, device number 7 [ 149.694394][ T31] audit: type=1800 audit(1788206642.301:5): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.168" name="bus" dev="ramfs" ino=11467 res=0 errno=0 [ 150.063114][ T5685] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 150.242754][ T5685] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 150.302262][ T5685] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 150.302326][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 150.302357][ T5685] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 150.553008][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.553068][ T5685] usb 4-1: Product: syz [ 150.553107][ T5685] usb 4-1: Manufacturer: syz [ 150.553130][ T5685] usb 4-1: SerialNumber: syz [ 150.610728][ T5685] usb 4-1: config 0 descriptor?? [ 150.633451][ T6228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.868881][ T6246] netlink: 71 bytes leftover after parsing attributes in process `syz.4.180'. [ 150.909775][ T6228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 151.091763][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 151.273195][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.273269][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 151.300418][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 151.323992][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.324042][ T10] usb 1-1: Product: syz [ 151.324079][ T10] usb 1-1: Manufacturer: syz [ 151.324100][ T10] usb 1-1: SerialNumber: syz [ 151.634484][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 151.829438][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 152.090298][ T10] usb 1-1: USB disconnect, device number 8 [ 152.396872][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 152.533151][ T5622] usb 4-1: USB disconnect, device number 10 [ 153.000178][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.153519][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 153.168344][ T30] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.182840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 153.205894][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 153.205960][ T30] usb 5-1: Product: syz [ 153.205997][ T30] usb 5-1: Manufacturer: syz [ 153.206059][ T30] usb 5-1: SerialNumber: syz [ 153.340259][ T5622] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 153.369176][ T6274] loop9: detected capacity change from 0 to 7 [ 153.375388][ T5750] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.403460][ T6274] Dev loop9: unable to read RDB block 7 [ 153.403611][ T6274] loop9: unable to read partition table [ 153.406944][ T6274] loop9: partition table beyond EOD, truncated [ 153.409310][ T6274] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 153.454882][ T30] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 153.522368][ T5622] usb 1-1: Using ep0 maxpacket: 32 [ 153.544509][ T5622] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 153.557554][ T5750] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b29, bcdDevice= 0.00 [ 153.574203][ T5622] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 153.574310][ T5622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 153.574343][ T5622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 153.574506][ T5622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 153.574559][ T5622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 153.585608][ T5750] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 153.585731][ T5750] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.585807][ T5750] usb 2-1: config 0 interface 0 has no altsetting 0 [ 153.585973][ T5750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.685850][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.685909][ T5622] usb 1-1: Product: syz [ 153.685946][ T5622] usb 1-1: Manufacturer: syz [ 153.686002][ T5622] usb 1-1: SerialNumber: syz [ 153.735140][ T5750] usb 2-1: config 0 descriptor?? [ 153.758516][ T5622] usb 1-1: config 0 descriptor?? [ 153.809913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 153.843857][ T10] usb 5-1: USB disconnect, device number 7 [ 153.869535][ T10] usblp0: removed [ 154.064235][ T6277] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 154.184772][ T5622] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 154.184919][ T5622] input input13: Device does not respond to id packet M [ 154.194007][ T5622] input input13: Device does not respond to id packet P [ 154.223288][ T5750] hid-corsair-void 0003:1B1C:1B29.0005: ignoring exceeding usage max [ 154.273267][ T5750] hid-corsair-void 0003:1B1C:1B29.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b29] on usb-dummy_hcd.1-1/input0 [ 154.399164][ T5622] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 154.399281][ T5622] input input13: Device does not respond to id packet B [ 154.401849][ T30] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.415537][ T5622] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 154.415754][ T5622] input input13: Device does not respond to id packet N [ 154.420352][ T5622] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 154.423980][ T5622] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 154.447107][ T5622] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 154.465458][ T5622] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 154.497811][ T5685] hid-corsair-void 0003:1B1C:1B29.0005: failed to request firmware (reason: -71) [ 154.518753][ T5622] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 154.570625][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 154.578304][ T30] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 154.595784][ T5685] hid-corsair-void 0003:1B1C:1B29.0005: failed to request battery (reason: -71) [ 154.603615][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.643427][ T5622] usb 1-1: USB disconnect, device number 9 [ 154.650769][ T992] usb 2-1: USB disconnect, device number 9 [ 154.668685][ T30] usb 3-1: config 0 descriptor?? [ 155.136370][ T30] hid (null): report_id 0 is invalid [ 155.138396][ T30] hid (null): nested delimiters [ 155.142829][ T30] hid (null): bogus close delimiter [ 155.173372][ T30] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 155.180357][ T30] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 155.180484][ T30] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 155.180568][ T30] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 155.180667][ T30] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 155.180749][ T30] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 155.180831][ T30] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 155.180914][ T30] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 155.181005][ T30] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 155.181088][ T30] hid-corsair-void 0003:1B1C:1B27.0006: unknown main item tag 0x0 [ 155.213826][ T30] hid-corsair-void 0003:1B1C:1B27.0006: report_id 0 is invalid [ 155.213907][ T30] hid-corsair-void 0003:1B1C:1B27.0006: item 0 0 1 8 parsing failed [ 155.244175][ T30] hid-corsair-void 0003:1B1C:1B27.0006: parse failed (reason: -22) [ 155.244492][ T30] hid-corsair-void 0003:1B1C:1B27.0006: probe with driver hid-corsair-void failed with error -22 [ 155.370314][ T10] usb 3-1: USB disconnect, device number 9 [ 155.629999][ T5715] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.811010][ T5715] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 155.824482][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.824545][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.824594][ T5715] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.824650][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.884476][ T5715] usb 1-1: config 0 descriptor?? [ 156.371494][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 156.425000][ T5715] gt683r_led 0003:1770:FF00.0007: global environment stack underflow [ 156.425040][ T5715] gt683r_led 0003:1770:FF00.0007: item 0 2 1 11 parsing failed [ 156.435648][ T5715] gt683r_led 0003:1770:FF00.0007: hid parsing failed [ 156.435766][ T5715] gt683r_led 0003:1770:FF00.0007: probe with driver gt683r_led failed with error -22 [ 156.531151][ T30] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 156.558514][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.580184][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 156.580244][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 156.580295][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 156.639608][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.651210][ T9] usb 5-1: Product: syz [ 156.656257][ T9] usb 5-1: Manufacturer: syz [ 156.656286][ T9] usb 5-1: SerialNumber: syz [ 156.674789][ T9] usb 5-1: config 0 descriptor?? [ 156.690922][ T30] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 156.711700][ T6301] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 156.740816][ T30] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 156.740889][ T30] usb 3-1: Product: syz [ 156.740948][ T30] usb 3-1: Manufacturer: syz [ 156.740967][ T30] usb 3-1: SerialNumber: syz [ 156.787984][ T30] usb 3-1: config 0 descriptor?? [ 156.852156][ T5622] usb 1-1: USB disconnect, device number 10 [ 157.157740][ T6301] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 157.385156][ T30] usb 3-1: USB disconnect, device number 10 [ 158.017984][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 158.244766][ T6310] loop9: detected capacity change from 0 to 7 [ 158.272366][ T6310] Dev loop9: unable to read RDB block 7 [ 158.272449][ T6310] loop9: unable to read partition table [ 158.273074][ T6310] loop9: partition table beyond EOD, truncated [ 158.273134][ T6310] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 158.373418][ T6314] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 158.536854][ T6316] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 158.820154][ T30] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 158.980206][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 158.987185][ T30] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 158.998746][ T6331] loop9: detected capacity change from 0 to 7 [ 159.010553][ T6331] Dev loop9: unable to read RDB block 7 [ 159.018057][ T30] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.018086][ T30] usb 4-1: config 0 has no interface number 0 [ 159.018147][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.033559][ T6331] loop9: unable to read partition table [ 159.033732][ T6331] loop9: partition table beyond EOD, truncated [ 159.033793][ T6331] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 159.080847][ T30] usb 4-1: config 0 descriptor?? [ 159.712338][ T30] uclogic 0003:28BD:0071.0008: failed retrieving string descriptor #100: -71 [ 159.724673][ T30] uclogic 0003:28BD:0071.0008: failed retrieving pen parameters: -71 [ 159.724771][ T30] uclogic 0003:28BD:0071.0008: pen probing failed: -71 [ 159.724799][ T30] uclogic 0003:28BD:0071.0008: failed probing parameters: -71 [ 159.734937][ T30] uclogic 0003:28BD:0071.0008: probe with driver uclogic failed with error -71 [ 159.887797][ T6344] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 160.003594][ T30] usb 4-1: USB disconnect, device number 11 [ 160.031521][ T9] usb 5-1: USB disconnect, device number 8 [ 160.066081][ T6346] loop9: detected capacity change from 0 to 7 [ 160.093707][ T6346] Dev loop9: unable to read RDB block 7 [ 160.093787][ T6346] loop9: unable to read partition table [ 160.106203][ T6346] loop9: partition table beyond EOD, truncated [ 160.106254][ T6346] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 160.902098][ T5715] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.061849][ T5715] usb 2-1: Using ep0 maxpacket: 8 [ 161.063425][ T5715] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.070933][ T5715] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 161.071140][ T5715] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.071228][ T5715] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.071311][ T5715] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.071400][ T5715] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.071605][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.182880][ T6369] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 161.183023][ T6369] syzkaller0: linktype set to 825 [ 161.350149][ T5715] usb 2-1: GET_CAPABILITIES returned 0 [ 161.350230][ T5715] usbtmc 2-1:16.0: can't read capabilities [ 161.563716][ T189] usb 2-1: USB disconnect, device number 10 [ 161.581321][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 161.631411][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.650125][ T5715] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 161.762042][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 161.773387][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.792160][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 161.798023][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.798214][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.805033][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.805195][ T10] usb 1-1: SerialNumber: syz [ 161.842628][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 161.842683][ T9] usb 4-1: Product: syz [ 161.842723][ T9] usb 4-1: Manufacturer: syz [ 161.842877][ T9] usb 4-1: SerialNumber: syz [ 161.850634][ T5715] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 161.901470][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 161.901593][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 161.901624][ T5715] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 161.956091][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.956169][ T5715] usb 3-1: Product: syz [ 161.956186][ T5715] usb 3-1: Manufacturer: syz [ 161.956267][ T5715] usb 3-1: SerialNumber: syz [ 161.988522][ T5715] usb 3-1: config 0 descriptor?? [ 161.997466][ T6372] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 162.123842][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 162.215318][ T6372] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 162.294305][ T10] usb 1-1: 0:2 : does not exist [ 162.454445][ T5715] usb 4-1: USB disconnect, device number 12 [ 162.476099][ T5715] usblp0: removed [ 162.498826][ T10] usb 1-1: USB disconnect, device number 11 [ 162.638664][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 163.106195][ T9] usb 3-1: USB disconnect, device number 11 [ 163.113951][ T5715] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 163.272452][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short [ 163.272534][ T5715] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 163.294100][ T5715] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 163.312438][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.312491][ T5715] usb 2-1: Product: syz [ 163.312526][ T5715] usb 2-1: Manufacturer: syz [ 163.312548][ T5715] usb 2-1: SerialNumber: syz [ 163.647418][ T5715] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 163.829365][ T5715] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 163.981492][ T992] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 163.997997][ T5715] usb 2-1: USB disconnect, device number 11 [ 164.099175][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.132741][ T992] usb 1-1: Using ep0 maxpacket: 8 [ 164.142966][ T992] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 164.158366][ T992] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 164.158428][ T992] usb 1-1: config 0 has no interface number 0 [ 164.158496][ T992] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.158591][ T992] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 164.158706][ T992] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 164.158781][ T992] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.228463][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.228510][ T992] usb 1-1: Product: syz [ 164.228529][ T992] usb 1-1: Manufacturer: syz [ 164.228545][ T992] usb 1-1: SerialNumber: syz [ 164.266145][ T992] usb 1-1: config 0 descriptor?? [ 164.280212][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 164.290078][ T5622] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 164.440237][ T5622] usb 4-1: Using ep0 maxpacket: 16 [ 164.460084][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 164.464216][ T5622] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 164.476492][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 164.484502][ T5622] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.484678][ T5622] usb 4-1: config 0 interface 0 has no altsetting 0 [ 164.484826][ T5622] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.514060][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 164.514112][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 164.539974][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.548492][ T9] usb 3-1: Product: syz [ 164.554321][ T9] usb 3-1: Manufacturer: syz [ 164.559122][ T9] usb 3-1: SerialNumber: syz [ 164.559126][ T5622] usb 4-1: config 0 descriptor?? [ 164.577890][ T9] usb 3-1: config 0 descriptor?? [ 164.607193][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 164.617963][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 164.679354][ T992] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 164.893240][ T10] usb 1-1: USB disconnect, device number 12 [ 165.019001][ T5622] mcp2221 0003:04D8:00DD.0009: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 165.237293][ T9] em28xx 3-1:0.0: chip ID is em2800 [ 165.360199][ T5715] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 165.438407][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 165.448218][ T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 165.455722][ T9] em28xx 3-1:0.0: No AC97 audio processor [ 165.481114][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 165.490047][ T9] usb 3-1: USB disconnect, device number 12 [ 165.499762][ T992] usb 4-1: USB disconnect, device number 13 [ 165.520685][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 165.527169][ T5715] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 165.544577][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.544634][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.544685][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.556729][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 165.597390][ T5715] usb 5-1: config 0 descriptor?? [ 165.615408][ T5715] hub 5-1:0.0: USB hub found [ 165.621789][ T9] em28xx: Freeing device [ 165.663954][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 165.687202][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.717620][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 165.717686][ T10] usb 2-1: Product: syz [ 165.717724][ T10] usb 2-1: Manufacturer: syz [ 165.717745][ T10] usb 2-1: SerialNumber: syz [ 165.857879][ T5715] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 165.993789][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 166.063926][ T5715] usbhid 5-1:0.0: can't add hid device: -71 [ 166.070356][ T5715] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 166.122786][ T5715] usb 5-1: USB disconnect, device number 9 [ 166.298928][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.251'. [ 166.298982][ T6428] tipc: Started in network mode [ 166.299031][ T6428] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 166.337904][ T992] usb 2-1: USB disconnect, device number 12 [ 166.363695][ T992] usblp0: removed [ 166.407091][ T6428] tipc: Enabled bearer , priority 10 [ 167.016513][ T5622] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 167.172546][ T5622] usb 5-1: Using ep0 maxpacket: 32 [ 167.174503][ T5622] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.193852][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.193916][ T5622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.193997][ T5622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.240481][ T5622] usb 5-1: config 0 descriptor?? [ 167.274748][ T5622] hub 5-1:0.0: USB hub found [ 167.482025][ T30] tipc: Node number set to 4269801491 [ 167.493266][ T5622] hub 5-1:0.0: 1 port detected [ 167.702767][ T5622] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 167.725797][ T5622] usbhid 5-1:0.0: can't add hid device: -71 [ 167.725939][ T5622] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 167.774533][ T5622] usb 5-1: USB disconnect, device number 10 [ 168.398965][ T6459] loop9: detected capacity change from 0 to 7 [ 168.409387][ T6459] Dev loop9: unable to read RDB block 7 [ 168.409463][ T6459] loop9: unable to read partition table [ 168.409734][ T6459] loop9: partition table beyond EOD, truncated [ 168.409786][ T6459] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.107351][ T6483] loop9: detected capacity change from 0 to 7 [ 169.116645][ T6483] Dev loop9: unable to read RDB block 7 [ 169.123774][ T6483] loop9: unable to read partition table [ 169.130716][ T6483] loop9: partition table beyond EOD, truncated [ 169.130815][ T6483] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.326539][ T6487] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 169.523027][ T5715] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 169.546090][ T6490] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 169.630174][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 169.683940][ T5715] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 169.694762][ T5715] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 169.694798][ T5715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 169.694825][ T5715] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 169.741111][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.741177][ T5715] usb 4-1: Product: syz [ 169.741310][ T5715] usb 4-1: Manufacturer: syz [ 169.741374][ T5715] usb 4-1: SerialNumber: syz [ 169.777268][ T5715] usb 4-1: config 0 descriptor?? [ 169.794965][ T6484] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.812415][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 169.822770][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.851949][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 169.852008][ T9] usb 5-1: Product: syz [ 169.852025][ T9] usb 5-1: Manufacturer: syz [ 169.852042][ T9] usb 5-1: SerialNumber: syz [ 170.097022][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 170.150101][ T5614] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 170.204009][ T5715] usb 4-1: USB disconnect, device number 14 [ 170.273006][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.312154][ T5614] usb 1-1: Using ep0 maxpacket: 16 [ 170.318055][ T5614] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 170.345391][ T5614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.345480][ T5614] usb 1-1: Product: syz [ 170.345499][ T5614] usb 1-1: Manufacturer: syz [ 170.345599][ T5614] usb 1-1: SerialNumber: syz [ 170.383746][ T5614] usb 1-1: config 0 descriptor?? [ 170.404692][ T5614] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 170.482924][ T9] usb 5-1: USB disconnect, device number 11 [ 170.507679][ T9] usblp0: removed [ 170.645019][ T5715] usb 1-1: USB disconnect, device number 13 [ 171.483586][ T6522] loop9: detected capacity change from 0 to 7 [ 171.494464][ T6522] Dev loop9: unable to read RDB block 7 [ 171.494534][ T6522] loop9: unable to read partition table [ 171.495799][ T6522] loop9: partition table beyond EOD, truncated [ 171.495866][ T6522] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 171.650312][ T30] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 171.770195][ T6529] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 171.809986][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 171.820037][ T30] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 171.833320][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.850875][ T30] usb 1-1: config 0 descriptor?? [ 172.095949][ T30] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 172.113166][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.131049][ T30] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 172.139465][ T30] usb 1-1: media controller created [ 172.246385][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.330557][ T30] az6027: usb out operation failed. (-71) [ 172.339194][ T30] az6027: usb out operation failed. (-71) [ 172.339261][ T30] stb0899_attach: Driver disabled by Kconfig [ 172.339278][ T30] az6027: no front-end attached [ 172.339278][ T30] [ 172.345647][ T30] az6027: usb out operation failed. (-71) [ 172.345671][ T30] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 172.385057][ T30] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 172.428864][ T30] dvb-usb: schedule remote query interval to 400 msecs. [ 172.440077][ T30] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 172.456146][ T30] usb 1-1: USB disconnect, device number 14 [ 172.580508][ T5715] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 172.660690][ T30] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 172.755981][ T5715] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 172.781884][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 172.781947][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 172.781980][ T5715] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 172.831510][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.831572][ T5715] usb 3-1: Product: syz [ 172.831589][ T5715] usb 3-1: Manufacturer: syz [ 172.831605][ T5715] usb 3-1: SerialNumber: syz [ 172.870587][ T5715] usb 3-1: config 0 descriptor?? [ 172.884661][ T6546] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 173.705987][ T6556] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.884141][ T6560] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 174.359222][ T6566] netlink: 'syz.1.301': attribute type 12 has an invalid length. [ 174.368652][ T6566] netlink: 'syz.1.301': attribute type 29 has an invalid length. [ 174.385448][ T6566] netlink: 148 bytes leftover after parsing attributes in process `syz.1.301'. [ 174.385565][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 174.530010][ T30] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 174.718397][ T30] usb 1-1: unable to get BOS descriptor or descriptor too short [ 174.729769][ T30] usb 1-1: not running at top speed; connect to a high speed hub [ 174.731211][ T30] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50 [ 174.758370][ T30] usb 1-1: config 4 has an invalid interface number: 32 but max is 0 [ 174.758424][ T30] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 174.758472][ T30] usb 1-1: config 4 has no interface number 0 [ 174.792675][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.801100][ T30] usb 1-1: Product: syz [ 174.805676][ T30] usb 1-1: Manufacturer: syz [ 174.810706][ T30] usb 1-1: SerialNumber: syz [ 174.914129][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 174.914189][ T6568] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 175.221330][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 175.410518][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 175.425889][ T30] uvcvideo 1-1:4.32: probe with driver uvcvideo failed with error -22 [ 175.436678][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.460768][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 175.460867][ T9] usb 2-1: Product: syz [ 175.460887][ T9] usb 2-1: Manufacturer: syz [ 175.460904][ T9] usb 2-1: SerialNumber: syz [ 175.517914][ T30] usb 1-1: USB disconnect, device number 15 [ 175.762727][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 176.076144][ T992] usb 2-1: USB disconnect, device number 13 [ 176.105545][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 176.171523][ T992] usblp0: removed [ 176.213399][ T5715] usb 3-1: USB disconnect, device number 13 [ 176.287284][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 176.300720][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.336897][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 176.336951][ T9] usb 4-1: Product: syz [ 176.336987][ T9] usb 4-1: Manufacturer: syz [ 176.337051][ T9] usb 4-1: SerialNumber: syz [ 176.344637][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.604318][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 176.683249][ T6588] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 176.710013][ T5715] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 176.862117][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 176.868163][ T5715] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 176.892547][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.910435][ T5715] usb 3-1: config 0 descriptor?? [ 176.929301][ T5715] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 176.932092][ T189] usb 4-1: USB disconnect, device number 15 [ 176.966584][ T189] usblp0: removed [ 177.003392][ T6594] netlink: 48 bytes leftover after parsing attributes in process `syz.4.312'. [ 177.083033][ T6597] ALSA: mixer_oss: invalid OSS volume '' [ 177.530062][ T992] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 177.690101][ T992] usb 2-1: Using ep0 maxpacket: 8 [ 177.700140][ T992] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 177.712956][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 177.729174][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 177.729272][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.752678][ T992] usb 2-1: config 0 descriptor?? [ 177.780948][ T5715] gspca_vc032x: reg_w err -71 [ 177.781021][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781057][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781067][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781122][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781160][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781192][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781225][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781244][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781277][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781310][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781343][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781368][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781392][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781418][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781442][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781474][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781500][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781538][ T5715] gspca_vc032x: I2c Bus Busy Wait 00 [ 177.781563][ T5715] gspca_vc032x: Unknown sensor... [ 177.781783][ T5715] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 177.917347][ T5715] usb 3-1: USB disconnect, device number 14 [ 177.983900][ T992] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 178.204051][ T5715] usb 2-1: USB disconnect, device number 14 [ 178.204237][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 179.242143][ T6617] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.460154][ T5622] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 180.629982][ T5622] usb 4-1: Using ep0 maxpacket: 16 [ 180.636023][ T5622] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 180.654473][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.654530][ T5622] usb 4-1: Product: syz [ 180.654568][ T5622] usb 4-1: Manufacturer: syz [ 180.654672][ T5622] usb 4-1: SerialNumber: syz [ 180.703366][ T5622] usb 4-1: config 0 descriptor?? [ 180.715138][ T5622] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 180.971615][ T5622] usb 4-1: USB disconnect, device number 16 [ 181.558096][ T6646] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.750013][ T30] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 182.914067][ T30] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.924869][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.924921][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.924964][ T30] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.925013][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.971976][ T30] usb 1-1: config 0 descriptor?? [ 183.131007][ T5715] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 183.313017][ T5715] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 183.330224][ T5715] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.357377][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 183.357450][ T5715] usb 5-1: Product: syz [ 183.357476][ T5715] usb 5-1: Manufacturer: syz [ 183.357523][ T5715] usb 5-1: SerialNumber: syz [ 183.533348][ T30] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 183.643251][ T5715] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 183.934187][ T30] usb 5-1: USB disconnect, device number 12 [ 184.097030][ T6684] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 184.791186][ T30] usblp1: removed [ 185.133668][ T6708] loop9: detected capacity change from 0 to 7 [ 185.141001][ T5715] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 185.153134][ T6710] netlink: 52 bytes leftover after parsing attributes in process `syz.1.359'. [ 185.165459][ T6708] Dev loop9: unable to read RDB block 7 [ 185.172430][ T6708] loop9: unable to read partition table [ 185.172788][ T6708] loop9: partition table beyond EOD, truncated [ 185.172844][ T6708] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 185.291931][ T5715] usb 3-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 185.303251][ T5715] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 185.303334][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 185.303385][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 185.303520][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.361283][ T5715] usb 3-1: config 0 descriptor?? [ 185.369210][ T6702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 185.598793][ T10] usb 1-1: USB disconnect, device number 16 [ 185.660062][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 185.813942][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 185.828277][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 185.828406][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.828571][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.828645][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 185.884534][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 185.884626][ T9] usb 2-1: Manufacturer: syz [ 185.907969][ T9] usb 2-1: config 0 descriptor?? [ 186.359059][ T9] hid_parser_main: 74 callbacks suppressed [ 186.367850][ T9] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 186.414501][ T9] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 186.585191][ T6746] loop2: detected capacity change from 0 to 7 [ 186.597660][ T6746] Dev loop2: unable to read RDB block 7 [ 186.597759][ T6746] loop2: unable to read partition table [ 186.598067][ T6746] loop2: partition table beyond EOD, truncated [ 186.598097][ T6746] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 186.635519][ T9] usb 2-1: USB disconnect, device number 15 [ 186.709962][ T5698] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 186.791119][ T6744] fido_id[6744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 186.866207][ T5698] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.888494][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.888570][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.888617][ T5698] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.888800][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.936621][ T5698] usb 5-1: config 0 descriptor?? [ 186.943471][ T6749] syz.2.374 uses obsolete (PF_INET,SOCK_PACKET) [ 187.231989][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.248793][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.390257][ T30] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 187.401743][ T5698] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 187.401811][ T5698] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 187.401892][ T5698] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 187.401990][ T5698] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 187.402040][ T5698] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 187.402488][ T5698] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 187.402732][ T5698] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 187.402839][ T5698] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 187.402917][ T5698] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 187.481514][ T5698] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 187.561974][ T30] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 187.564630][ T30] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.596173][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 187.596225][ T30] usb 4-1: Product: syz [ 187.596259][ T30] usb 4-1: Manufacturer: syz [ 187.596275][ T30] usb 4-1: SerialNumber: syz [ 187.726803][ T5698] usb 5-1: USB disconnect, device number 13 [ 187.881929][ T30] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 187.895620][ T6768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.906702][ T6768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.062511][ T6772] netlink: 36 bytes leftover after parsing attributes in process `syz.1.383'. [ 188.099991][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 188.157614][ T992] usb 4-1: USB disconnect, device number 17 [ 188.176827][ T992] usblp0: removed [ 188.263077][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 188.289443][ T10] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 188.289493][ T10] usb 1-1: Product: syz [ 188.289573][ T10] usb 1-1: SerialNumber: syz [ 188.322991][ T10] usb 1-1: config 0 descriptor?? [ 188.562954][ T10] hso 1-1:0.0: Failed to find BULK eps [ 188.661467][ T992] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 188.820514][ T992] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 188.835404][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.835456][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.835543][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.862207][ T992] usb 5-1: config 0 descriptor?? [ 189.103536][ T992] usbhid 5-1:0.0: can't add hid device: -71 [ 189.103796][ T992] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 189.134528][ T992] usb 5-1: USB disconnect, device number 14 [ 189.350385][ T10] usb 1-1: USB disconnect, device number 17 [ 189.610908][ T992] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 189.762621][ T992] usb 5-1: Using ep0 maxpacket: 16 [ 189.766944][ T992] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 189.777503][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.777575][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.777671][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.825948][ T992] usb 5-1: config 0 descriptor?? [ 189.891258][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 190.060167][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 190.066081][ T5698] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 190.076619][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 190.118496][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.118557][ T10] usb 1-1: Product: syz [ 190.118596][ T10] usb 1-1: Manufacturer: syz [ 190.118655][ T10] usb 1-1: SerialNumber: syz [ 190.164994][ T10] usb 1-1: config 0 descriptor?? [ 190.187995][ T10] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 190.240568][ T5698] usb 2-1: Using ep0 maxpacket: 8 [ 190.245128][ T5698] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 190.278289][ T5698] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 190.278424][ T5698] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.278496][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 190.278690][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 190.324755][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.325069][ T5698] usb 2-1: Product: syz [ 190.325130][ T5698] usb 2-1: Manufacturer: syz [ 190.325236][ T5698] usb 2-1: SerialNumber: syz [ 190.378158][ T5698] usb 2-1: config 0 descriptor?? [ 190.386154][ T6804] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 190.441050][ T992] kye 0003:0458:5016.000D: control desc unexpectedly large [ 190.441107][ T992] kye 0003:0458:5016.000D: control desc unexpectedly large [ 190.478178][ T992] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.000D/input/input15 [ 190.510652][ T6806] netlink: 4384 bytes leftover after parsing attributes in process `syz.3.398'. [ 190.651719][ T5715] usbhid 3-1:0.0: can't add hid device: -32 [ 190.651918][ T5715] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 190.709298][ T5698] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 190.788978][ T5698] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 190.859281][ T992] kye 0003:0458:5016.000D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 190.932848][ T992] usb 5-1: USB disconnect, device number 15 [ 191.090419][ C1] powermate: config urb returned -71 [ 191.090729][ C1] powermate: config urb returned -71 [ 191.090923][ C1] powermate: config urb returned -71 [ 191.091344][ C1] powermate: config urb returned -71 [ 191.096857][ T9] usb 2-1: USB disconnect, device number 16 [ 191.096974][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 191.304844][ T6807] fido_id[6807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 191.363782][ T10] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 191.389112][ T10] usb 1-1: USB disconnect, device number 18 [ 192.036507][ T6823] sg_write: process 213 (syz.2.404) changed security contexts after opening file descriptor, this is not allowed. [ 192.205911][ T6833] raw_sendmsg: syz.3.408 forgot to set AF_INET. Fix it! [ 192.312881][ T6829] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 192.330176][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 192.485561][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 192.493134][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 192.506300][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 192.506363][ T10] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 192.506431][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.506466][ T10] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.506499][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.506534][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 192.506568][ T10] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 192.506596][ T10] usb 5-1: config 168 interface 0 has no altsetting 0 [ 192.590928][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 192.590978][ T10] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 192.591024][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.591059][ T10] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.591086][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.591114][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 192.591141][ T10] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 192.591170][ T10] usb 5-1: config 168 interface 0 has no altsetting 0 [ 192.619614][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 192.619660][ T10] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 192.619720][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 192.619753][ T10] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.619784][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.619880][ T10] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 192.619914][ T10] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 192.619947][ T10] usb 5-1: config 168 interface 0 has no altsetting 0 [ 192.699616][ T5715] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 192.794103][ T10] usb 5-1: string descriptor 0 read error: -22 [ 192.794255][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.868186][ T10] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 192.890515][ T5622] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 192.921914][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 192.932010][ T5715] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 192.944064][ T5715] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 192.944111][ T5715] usb 4-1: config 1 has no interface number 0 [ 192.944174][ T5715] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 192.944208][ T5715] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 192.944247][ T5715] usb 4-1: config 1 interface 105 has no altsetting 0 [ 192.991330][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 192.991378][ T5715] usb 4-1: Product: syz [ 192.991411][ T5715] usb 4-1: Manufacturer: syz [ 192.991432][ T5715] usb 4-1: SerialNumber: syz [ 193.023525][ T6840] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 193.023830][ T6840] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 193.051182][ T5622] usb 1-1: Using ep0 maxpacket: 8 [ 193.052642][ T5622] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 193.057736][ T5622] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 193.057872][ T5622] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.057969][ T5622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.058048][ T5622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.089066][ T5622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.089160][ T5622] usb 1-1: Product: syz [ 193.089204][ T5622] usb 1-1: Manufacturer: syz [ 193.089257][ T5622] usb 1-1: SerialNumber: syz [ 193.141086][ T5622] usb 1-1: config 0 descriptor?? [ 193.146601][ T6844] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 193.310951][ T10] usb 5-1: USB disconnect, device number 16 [ 193.349698][ T6857] loop9: detected capacity change from 0 to 7 [ 193.362575][ T6857] Dev loop9: unable to read RDB block 7 [ 193.368400][ T6857] loop9: unable to read partition table [ 193.376468][ T6857] loop9: partition table beyond EOD, truncated [ 193.383400][ T6857] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 193.423855][ T5622] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 193.469099][ T5622] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 193.502750][ T6840] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 193.503613][ T6840] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 193.795755][ C1] powermate: config urb returned -71 [ 193.798244][ C1] powermate: config urb returned -71 [ 193.799557][ C1] powermate: config urb returned -71 [ 193.800149][ T5622] usb 1-1: USB disconnect, device number 19 [ 193.801134][ C1] powermate: config urb returned -71 [ 193.801183][ C1] powermate: usb_submit_urb(config) failed [ 193.801294][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 194.146691][ T5715] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 194.158769][ T5715] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 194.258633][ T5715] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a4:b1:e1:10:b6:e9 [ 194.276360][ T5715] usb 4-1: USB disconnect, device number 18 [ 194.316037][ T5715] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 194.400778][ T5715] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 194.401023][ T5715] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 194.401206][ T5715] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 194.520122][ T5698] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 194.671282][ T5698] usb 5-1: Using ep0 maxpacket: 16 [ 194.676928][ T5698] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 194.687652][ T5698] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.687738][ T5698] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.705067][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.705160][ T5698] usb 5-1: Product: syz [ 194.705199][ T5698] usb 5-1: Manufacturer: syz [ 194.705246][ T5698] usb 5-1: SerialNumber: syz [ 194.738433][ T5698] usb 5-1: config 0 descriptor?? [ 195.078869][ T5698] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 195.123552][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.123637][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.240079][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 195.266354][ T31] audit: type=1800 audit(1788206687.881:6): pid=6875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.420" name="bus" dev="ramfs" ino=14057 res=0 errno=0 [ 195.350740][ T6884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.369722][ T6884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.400927][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.411878][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.411933][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.412005][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.412059][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.477478][ T10] usb 4-1: config 0 descriptor?? [ 195.730859][ T5698] rc_core: IR keymap rc-imon-pad not found [ 195.732963][ T5698] Registered IR keymap rc-empty [ 195.733177][ T5698] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 195.733232][ T5698] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 195.814393][ T5698] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 195.837722][ T5698] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 195.899386][ T5698] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:17> initialized [ 195.931466][ T10] hid_parser_main: 6 callbacks suppressed [ 195.937357][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 195.937404][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 195.937435][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 195.937471][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 195.937501][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 195.937530][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 195.937559][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 195.937588][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 195.937616][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 195.937644][ T10] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 196.028002][ T10] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 196.111846][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 196.115896][ T5698] usb 5-1: USB disconnect, device number 17 [ 196.224747][ T10] usb 4-1: USB disconnect, device number 19 [ 196.463763][ T6889] fido_id[6889]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 196.585593][ T6891] loop9: detected capacity change from 0 to 7 [ 196.599476][ T6891] Dev loop9: unable to read RDB block 7 [ 196.599564][ T6891] loop9: unable to read partition table [ 196.602874][ T6891] loop9: partition table beyond EOD, truncated [ 196.602996][ T6891] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 196.948267][ T6895] netlink: 'syz.0.433': attribute type 6 has an invalid length. [ 197.560215][ T6909] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 197.663178][ T5698] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 197.828592][ T5698] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 197.851864][ T5698] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.872590][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 197.872656][ T5698] usb 5-1: Product: syz [ 197.872694][ T5698] usb 5-1: Manufacturer: syz [ 197.872752][ T5698] usb 5-1: SerialNumber: syz [ 198.137285][ T5698] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 198.430732][ T30] usb 5-1: USB disconnect, device number 18 [ 198.487185][ T30] usblp0: removed [ 198.510094][ T5698] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 198.672043][ T5698] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 198.686423][ T5698] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.709543][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 198.709603][ T5698] usb 1-1: Product: syz [ 198.709620][ T5698] usb 1-1: Manufacturer: syz [ 198.709638][ T5698] usb 1-1: SerialNumber: syz [ 198.987948][ T5698] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 199.228693][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 199.243746][ T6926] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 199.300086][ C0] usblp0: nonzero write bulk status received: -71 [ 199.307881][ T5698] usb 1-1: USB disconnect, device number 20 [ 199.314083][ T189] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 199.340218][ T5698] usblp0: removed [ 199.397422][ T31] audit: type=1326 audit(1788206692.011:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.4.445" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 199.438323][ T31] audit: type=1326 audit(1788206692.051:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.4.445" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 199.468763][ T31] audit: type=1326 audit(1788206692.081:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.4.445" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 199.468864][ T31] audit: type=1326 audit(1788206692.081:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.4.445" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 199.485035][ T31] audit: type=1326 audit(1788206692.101:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.4.445" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 199.485200][ T31] audit: type=1326 audit(1788206692.101:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.4.445" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 199.485331][ T31] audit: type=1326 audit(1788206692.101:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.4.445" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 199.494443][ T189] usb 2-1: Using ep0 maxpacket: 32 [ 199.551147][ T31] audit: type=1326 audit(1788206692.131:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.4.445" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 199.551311][ T31] audit: type=1326 audit(1788206692.171:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.4.445" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 199.573121][ T189] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 199.670499][ T189] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 199.670563][ T189] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.670621][ T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.706789][ T189] usb 2-1: config 0 descriptor?? [ 200.290012][ T992] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 200.459463][ T992] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.474381][ T992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.474459][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.474490][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.474589][ T992] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.474726][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.536092][ T992] usb 5-1: config 0 descriptor?? [ 200.562786][ T189] corsair-cpro 0003:1B1C:0C10.000F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 200.757379][ T189] corsair-cpro 0003:1B1C:0C10.000F: probe with driver corsair-cpro failed with error -61 [ 200.958917][ T9] usb 2-1: USB disconnect, device number 17 [ 201.058102][ T992] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 201.342507][ T5698] usb 5-1: USB disconnect, device number 19 [ 201.712385][ T6951] xt_hashlimit: size too large, truncated to 1048576 [ 201.893709][ T6954] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 202.418337][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 202.418392][ T31] audit: type=1800 audit(1788206695.031:43): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.449" name="bus" dev="ramfs" ino=14257 res=0 errno=0 [ 202.570035][ T5698] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 202.736391][ T5698] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 202.757271][ T5698] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 202.757337][ T5698] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 202.757369][ T5698] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 202.810081][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.810147][ T5698] usb 5-1: Product: syz [ 202.810183][ T5698] usb 5-1: Manufacturer: syz [ 202.810210][ T5698] usb 5-1: SerialNumber: syz [ 202.854268][ T5698] usb 5-1: config 0 descriptor?? [ 202.868859][ T6962] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 203.093945][ T6962] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 203.240387][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 203.384370][ T6976] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 203.392349][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 203.398376][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 203.430008][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 203.440356][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.448715][ T9] usb 4-1: Product: syz [ 203.453566][ T9] usb 4-1: Manufacturer: syz [ 203.453588][ T9] usb 4-1: SerialNumber: syz [ 203.471365][ T9] usb 4-1: config 0 descriptor?? [ 203.583580][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.598202][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.598262][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.598340][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.598394][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.652410][ T10] usb 2-1: config 0 descriptor?? [ 203.859483][ T31] audit: type=1326 audit(1788206696.471:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f990ec code=0x7ffc0000 [ 203.859604][ T31] audit: type=1326 audit(1788206696.471:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f990ec code=0x7ffc0000 [ 203.859715][ T31] audit: type=1326 audit(1788206696.471:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f990ec code=0x7ffc0000 [ 203.894895][ T31] audit: type=1326 audit(1788206696.471:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f990ec code=0x7ffc0000 [ 203.899689][ T31] audit: type=1326 audit(1788206696.511:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f990ec code=0x7ffc0000 [ 203.900254][ T31] audit: type=1326 audit(1788206696.511:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f990ec code=0x7ffc0000 [ 203.900385][ T31] audit: type=1326 audit(1788206696.511:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f990ec code=0x7ffc0000 [ 203.938427][ T31] audit: type=1326 audit(1788206696.521:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f990ec code=0x7ffc0000 [ 203.950675][ T31] audit: type=1326 audit(1788206696.551:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.463" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f990ec code=0x7ffc0000 [ 204.062113][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 204.131344][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 204.143764][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 204.152132][ T9] usb 4-1: media controller created [ 204.239360][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.292621][ T6972] dtv5100: wlen = 0, aborting. [ 204.375658][ T10] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 204.392254][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 204.400181][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 204.409800][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 204.436509][ T9] usb 4-1: USB disconnect, device number 20 [ 204.436790][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 204.619322][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 204.902842][ T6985] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 205.082237][ T5698] usb 5-1: USB disconnect, device number 20 [ 205.257892][ T6987] capability: warning: `syz.0.466' uses 32-bit capabilities (legacy support in use) [ 205.487046][ T6992] netlink: 'syz.2.468': attribute type 34 has an invalid length. [ 205.631104][ T6996] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 205.754913][ T6998] xt_hashlimit: size too large, truncated to 1048576 [ 205.800107][ T5698] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 205.950178][ T5698] usb 1-1: Using ep0 maxpacket: 8 [ 205.966833][ T5698] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 205.975961][ T5698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.975989][ T5698] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 205.976044][ T5698] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 206.025037][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.025094][ T5698] usb 1-1: Product: syz [ 206.025110][ T5698] usb 1-1: Manufacturer: syz [ 206.025126][ T5698] usb 1-1: SerialNumber: syz [ 206.280311][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 206.442843][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 206.477167][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 206.477255][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 206.477309][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 206.539415][ T9] usb 2-1: USB disconnect, device number 18 [ 206.689051][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.689124][ T10] usb 4-1: Product: syz [ 206.689163][ T10] usb 4-1: Manufacturer: syz [ 206.689185][ T10] usb 4-1: SerialNumber: syz [ 206.720912][ T10] usb 4-1: config 0 descriptor?? [ 206.728946][ T7002] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 206.747632][ T5698] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 206.747713][ T5698] usb 1-1: clock source 0 is not valid, cannot use [ 206.910627][ T7012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.478'. [ 206.983074][ T5698] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 207.031162][ T7014] capability: warning: `syz.1.477' uses deprecated v2 capabilities in a way that may be insecure [ 207.259459][ T7002] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 207.288620][ T5698] usb 1-1: USB disconnect, device number 21 [ 207.882307][ T7028] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.030332][ T7033] netlink: 'syz.2.485': attribute type 4 has an invalid length. [ 208.098661][ T7031] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.105339][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 208.105401][ T31] audit: type=1800 audit(1788206700.721:57): pid=7029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.475" name="bus" dev="ramfs" ino=15400 res=0 errno=0 [ 208.652863][ T7039] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.866430][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.890285][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.019702][ T10] usb 4-1: USB disconnect, device number 21 [ 209.645603][ T7059] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.795710][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 209.824848][ T7063] loop9: detected capacity change from 0 to 7 [ 209.833980][ T7063] Dev loop9: unable to read RDB block 7 [ 209.834060][ T7063] loop9: unable to read partition table [ 209.834694][ T7063] loop9: partition table beyond EOD, truncated [ 209.834753][ T7063] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.200480][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 210.289979][ T5715] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 210.314015][ T7088] loop2: detected capacity change from 0 to 7 [ 210.332198][ T7088] Dev loop2: unable to read RDB block 7 [ 210.332279][ T7088] loop2: unable to read partition table [ 210.332465][ T7088] loop2: partition table beyond EOD, truncated [ 210.333579][ T7088] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 210.392947][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 210.407469][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.407518][ T10] usb 2-1: Product: syz [ 210.407554][ T10] usb 2-1: Manufacturer: syz [ 210.407576][ T10] usb 2-1: SerialNumber: syz [ 210.440653][ T10] usb 2-1: config 0 descriptor?? [ 210.461244][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 210.474010][ T5715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.482739][ T5715] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 210.496527][ T5715] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 210.505132][ T5715] usb 4-1: config 9 has no interface number 0 [ 210.505245][ T5715] usb 4-1: config 9 interface 57 has no altsetting 0 [ 210.525111][ T5715] usb 4-1: string descriptor 0 read error: -22 [ 210.532746][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.640223][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 210.848698][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.867094][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 210.867138][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 210.867229][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 210.923688][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.923756][ T9] usb 5-1: Product: syz [ 210.923804][ T9] usb 5-1: Manufacturer: syz [ 210.923909][ T9] usb 5-1: SerialNumber: syz [ 210.963009][ T9] usb 5-1: config 0 descriptor?? [ 210.974773][ T7087] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 211.217674][ T7087] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 211.516320][ T10] usb 2-1: unexpected transceiver, part 0x00 version 0x48 [ 211.626098][ T5715] video4linux radio48: keene_cmd_set failed (-71) [ 211.626177][ T5715] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 211.648625][ T5715] usb 4-1: USB disconnect, device number 22 [ 211.717263][ T10] usb 2-1: Firmware version (0.0) predates our first public release. [ 211.717322][ T10] usb 2-1: Please update to version 0.2 or newer [ 211.732704][ T10] usb 2-1: atusb_probe: initialization failed, error = -19 [ 211.777787][ T10] usb 2-1: USB disconnect, device number 19 [ 212.341860][ T7095] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.470172][ T7100] tipc: Started in network mode [ 212.470232][ T7100] tipc: Node identity ac1414aa, cluster identity 4711 [ 212.470521][ T7100] tipc: New replicast peer: 172.20.20.187 [ 212.500075][ T7100] tipc: Enabled bearer , priority 10 [ 212.550602][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 212.676864][ T7104] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.690102][ T5715] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 212.712233][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.724209][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.724250][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.735436][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.757664][ T7097] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 212.820029][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.850261][ T5715] usb 2-1: Using ep0 maxpacket: 8 [ 212.856077][ T5715] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 212.875660][ T5715] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 212.875716][ T5715] usb 2-1: config 179 has no interface number 0 [ 212.875784][ T5715] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 212.875822][ T5715] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 212.875856][ T5715] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 212.875890][ T5715] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 212.875927][ T5715] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 212.875981][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.990620][ T7101] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 213.144306][ T7109] loop9: detected capacity change from 0 to 7 [ 213.170902][ T7109] Dev loop9: unable to read RDB block 7 [ 213.171002][ T7109] loop9: unable to read partition table [ 213.171519][ T7109] loop9: partition table beyond EOD, truncated [ 213.175730][ T7109] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.213844][ T5698] usb 5-1: USB disconnect, device number 21 [ 213.269627][ T10] usb 1-1: USB disconnect, device number 22 [ 213.470021][ T9] tipc: Node number set to 2886997162 [ 213.593657][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input21 [ 213.818348][ T5698] usb 2-1: USB disconnect, device number 20 [ 213.818363][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 213.818725][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 214.178380][ T7119] loop2: detected capacity change from 0 to 7 [ 214.193299][ T7119] Dev loop2: unable to read RDB block 7 [ 214.193373][ T7119] loop2: unable to read partition table [ 214.194049][ T7119] loop2: partition table beyond EOD, truncated [ 214.195930][ T7119] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 214.231587][ T7113] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 214.269402][ T7113] bond1: (slave lo): Enslaving as an active interface with an up link [ 214.283172][ T7113] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 214.615146][ T7128] loop9: detected capacity change from 0 to 7 [ 214.631832][ T7128] Dev loop9: unable to read RDB block 7 [ 214.631905][ T7128] loop9: unable to read partition table [ 214.632585][ T7128] loop9: partition table beyond EOD, truncated [ 214.634407][ T7128] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 214.814293][ T7134] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.030502][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 215.167068][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.178071][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.190864][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 215.192853][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.209603][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 215.209694][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 215.209725][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.209973][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.210108][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.505215][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 215.505307][ T10] usbtmc 2-1:16.0: can't read capabilities [ 215.729518][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 215.804395][ T9] usb 2-1: USB disconnect, device number 21 [ 215.953993][ T7154] openvswitch: netlink: Flow key attr not present in new flow. [ 216.331611][ T7156] loop2: detected capacity change from 0 to 7 [ 216.352557][ T7156] Dev loop2: unable to read RDB block 7 [ 216.365929][ T7156] loop2: unable to read partition table [ 216.372244][ T7156] loop2: partition table beyond EOD, truncated [ 216.379952][ T7156] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 216.430548][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 216.604684][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 216.642773][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 216.656300][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 216.656339][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 216.765332][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.765404][ T25] usb 5-1: Product: syz [ 216.765442][ T25] usb 5-1: Manufacturer: syz [ 216.765465][ T25] usb 5-1: SerialNumber: syz [ 216.839082][ T25] usb 5-1: config 0 descriptor?? [ 216.863160][ T7149] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 216.955822][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 217.098803][ T7149] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 217.659705][ T7165] loop9: detected capacity change from 0 to 7 [ 217.683141][ T7165] Dev loop9: unable to read RDB block 7 [ 217.683275][ T7165] loop9: unable to read partition table [ 217.683576][ T7165] loop9: partition table beyond EOD, truncated [ 217.683622][ T7165] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 217.993706][ T7167] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 218.623976][ T9] usb 5-1: USB disconnect, device number 22 [ 218.790346][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 218.953856][ T25] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 218.967948][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 218.967993][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 218.968026][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.019048][ T25] usb 2-1: probing VID:PID(0424:012C) [ 219.035591][ T25] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 219.043836][ T25] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 219.050558][ T25] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 219.057386][ T25] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 219.064086][ T25] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 219.461152][ T25] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 219.482661][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 219.482726][ T7184] netlink: 'syz.2.547': attribute type 1 has an invalid length. [ 219.675387][ T25] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 220.174035][ T7198] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.284268][ T7201] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.750177][ T5698] usb 2-1: USB disconnect, device number 22 [ 220.761330][ T25] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 220.779055][ T25] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 220.858835][ T5698] USB vub300 remote SDIO host controller[0] now disconnected [ 220.936091][ T7213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.957006][ T7213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.182361][ T7216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.558'. [ 221.601530][ C1] [ 221.604715][ C1] ============================= [ 221.609669][ C1] WARNING: suspicious RCU usage [ 221.614675][ C1] syzkaller #0 Not tainted [ 221.619138][ C1] ----------------------------- [ 221.624096][ C1] kernel/sched/core.c:9196 Illegal context switch in RCU-sched read-side critical section! [ 221.634174][ C1] [ 221.634174][ C1] other info that might help us debug this: [ 221.634174][ C1] [ 221.644521][ C1] [ 221.644521][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 221.652689][ C1] locks held by syz-executor/5641: 9, last CPU#1: [ 221.659193][ C1] #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 221.668096][ C1] #1: ffff888028895cf8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 221.677346][ C1] #2: ffff8880768703b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 221.686783][ C1] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 221.696515][ C1] #4: ffff888058aa8af8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 221.707572][ C1] #5: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 221.717224][ C1] #6: ffff88805ba4c6d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 221.727723][ C1] #7: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 221.737291][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 221.747864][ C1] [ 221.747864][ C1] stack backtrace: [ 221.753891][ C1] CPU: 1 UID: 0 PID: 5641 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 221.763399][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.773535][ C1] Call Trace: [ 221.776877][ C1] [ 221.779766][ C1] dump_stack_lvl+0xe8/0x150 [ 221.784428][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 221.789879][ C1] __might_resched+0xbb/0x4c0 [ 221.794638][ C1] ? __cancel_work_sync+0x5c/0x110 [ 221.799840][ C1] __cancel_work_sync+0x6d/0x110 [ 221.804865][ C1] mmc_free_host+0x19/0x30 [ 221.809357][ C1] call_timer_fn+0x18d/0x5f0 [ 221.814017][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 221.820749][ C1] ? call_timer_fn+0xd5/0x5f0 [ 221.825479][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 221.830679][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 221.835949][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 221.842701][ C1] __run_timer_base+0x652/0x8b0 [ 221.847626][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 221.853059][ C1] ? ktime_get+0x1f5/0x220 [ 221.857529][ C1] ? lapic_next_event+0x11/0x20 [ 221.862438][ C1] run_timer_softirq+0xb7/0x170 [ 221.867351][ C1] handle_softirqs+0x226/0x860 [ 221.872191][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 221.877026][ C1] __irq_exit_rcu+0xcb/0x220 [ 221.881676][ C1] irq_exit_rcu+0x9/0x30 [ 221.885970][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 221.891677][ C1] [ 221.894638][ C1] [ 221.897604][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.903615][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 221.908961][ C1] Code: ff ff ff e8 90 9a 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 45 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f 9e 43 0a cc 48 8d 3d 57 32 da [ 221.928620][ C1] RSP: 0000:ffffc90003fcf210 EFLAGS: 00000292 [ 221.934755][ C1] RAX: a3fc482593d61300 RBX: 0000000000000000 RCX: 8000000000000003 [ 221.942767][ C1] RDX: 00000000502922a9 RSI: ffffffff8e6fc284 RDI: ffffffff8c6d9380 [ 221.950755][ C1] RBP: ffff8880793ebe80 R08: ac00000000000000 R09: 0000000000000000 [ 221.958752][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 221.966750][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 221.974751][ C1] ? pfn_valid+0xba/0x490 [ 221.979102][ C1] pfn_valid+0xd6/0x490 [ 221.983280][ C1] ? pfn_valid+0xba/0x490 [ 221.987637][ C1] page_table_check_set+0x25/0x530 [ 221.992790][ C1] copy_pmd_range+0x4adc/0x5c10 [ 221.997678][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 222.003177][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 222.008424][ C1] ? __lock_acquire+0x6df/0x2e50 [ 222.013395][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 222.018633][ C1] copy_page_range+0xc82/0x1290 [ 222.023900][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 222.029278][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 222.034779][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 222.041780][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 222.048431][ C1] dup_mmap+0xf17/0x1dc0 [ 222.052815][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 222.057551][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 222.062641][ C1] ? lock_acquire+0x115/0x350 [ 222.067396][ C1] copy_mm+0x11a/0x480 [ 222.071590][ C1] ? copy_process+0xd3c/0x43e0 [ 222.076412][ C1] copy_process+0x1e75/0x43e0 [ 222.081246][ C1] ? __lock_acquire+0x6df/0x2e50 [ 222.086227][ C1] ? copy_process+0xd3c/0x43e0 [ 222.091053][ C1] ? __pfx_copy_process+0x10/0x10 [ 222.096133][ C1] kernel_clone+0x2d7/0x940 [ 222.100827][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 222.105932][ C1] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 222.111873][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 222.118357][ C1] ? exc_page_fault+0x6a/0xc0 [ 222.123091][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 222.128367][ C1] ? do_fast_syscall_32+0x33/0x70 [ 222.133455][ C1] ? irqentry_exit+0x10f/0x910 [ 222.138293][ C1] ? trace_irq_disable+0x3b/0x140 [ 222.143634][ C1] do_fast_syscall_32+0x33/0x70 [ 222.148544][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.154922][ C1] RIP: 0023:0xf7f190ec [ 222.159361][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 222.179024][ C1] RSP: 002b:00000000f74ffc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 222.187498][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 222.195503][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000057d414e8 [ 222.203519][ C1] RBP: 00000000f74ffcb4 R08: 0000000000000000 R09: 0000000000000000 [ 222.211527][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.219545][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.227565][ C1] [ 222.230761][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4552 [ 222.230783][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5641, name: syz-executor [ 222.230807][ C1] preempt_count: 103, expected: 0 [ 222.230823][ C1] RCU nest depth: 2, expected: 0 [ 222.230838][ C1] locks held by syz-executor/5641: 9, last CPU#1: [ 222.230862][ C1] #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 222.230964][ C1] #1: ffff888028895cf8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 222.231072][ C1] #2: ffff8880768703b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 222.231185][ C1] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 222.231277][ C1] #4: ffff888058aa8af8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 222.231380][ C1] #5: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 222.231470][ C1] #6: ffff88805ba4c6d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 222.231589][ C1] #7: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 222.231677][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 222.231770][ C1] Preemption disabled at: [ 222.231782][ C1] [<0000000000000000>] 0x0 [ 222.231816][ C1] CPU: 1 UID: 0 PID: 5641 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 222.231848][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.231864][ C1] Call Trace: [ 222.231874][ C1] [ 222.231885][ C1] dump_stack_lvl+0xe8/0x150 [ 222.231926][ C1] __might_resched+0x36a/0x4c0 [ 222.231973][ C1] __cancel_work_sync+0x6d/0x110 [ 222.232017][ C1] mmc_free_host+0x19/0x30 [ 222.232057][ C1] call_timer_fn+0x18d/0x5f0 [ 222.232089][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 222.232123][ C1] ? call_timer_fn+0xd5/0x5f0 [ 222.232154][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 222.232205][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 222.232239][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 222.232277][ C1] __run_timer_base+0x652/0x8b0 [ 222.232323][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 222.232357][ C1] ? ktime_get+0x1f5/0x220 [ 222.232385][ C1] ? lapic_next_event+0x11/0x20 [ 222.232421][ C1] run_timer_softirq+0xb7/0x170 [ 222.232452][ C1] handle_softirqs+0x226/0x860 [ 222.232491][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 222.232535][ C1] __irq_exit_rcu+0xcb/0x220 [ 222.232571][ C1] irq_exit_rcu+0x9/0x30 [ 222.232603][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 222.232640][ C1] [ 222.232649][ C1] [ 222.232660][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 222.232691][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 222.232717][ C1] Code: ff ff ff e8 90 9a 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 45 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f 9e 43 0a cc 48 8d 3d 57 32 da [ 222.232742][ C1] RSP: 0000:ffffc90003fcf210 EFLAGS: 00000292 [ 222.232765][ C1] RAX: a3fc482593d61300 RBX: 0000000000000000 RCX: 8000000000000003 [ 222.232784][ C1] RDX: 00000000502922a9 RSI: ffffffff8e6fc284 RDI: ffffffff8c6d9380 [ 222.232805][ C1] RBP: ffff8880793ebe80 R08: ac00000000000000 R09: 0000000000000000 [ 222.232823][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 222.232842][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 222.232877][ C1] ? pfn_valid+0xba/0x490 [ 222.232908][ C1] pfn_valid+0xd6/0x490 [ 222.232933][ C1] ? pfn_valid+0xba/0x490 [ 222.232964][ C1] page_table_check_set+0x25/0x530 [ 222.233000][ C1] copy_pmd_range+0x4adc/0x5c10 [ 222.233059][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 222.233113][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 222.233156][ C1] ? __lock_acquire+0x6df/0x2e50 [ 222.233221][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 222.233264][ C1] copy_page_range+0xc82/0x1290 [ 222.233313][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 222.233349][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 222.233383][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 222.233422][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 222.233469][ C1] dup_mmap+0xf17/0x1dc0 [ 222.233526][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 222.233564][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 222.233615][ C1] ? lock_acquire+0x115/0x350 [ 222.233661][ C1] copy_mm+0x11a/0x480 [ 222.233697][ C1] ? copy_process+0xd3c/0x43e0 [ 222.233730][ C1] copy_process+0x1e75/0x43e0 [ 222.233762][ C1] ? __lock_acquire+0x6df/0x2e50 [ 222.233796][ C1] ? copy_process+0xd3c/0x43e0 [ 222.233850][ C1] ? __pfx_copy_process+0x10/0x10 [ 222.233928][ C1] kernel_clone+0x2d7/0x940 [ 222.233971][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 222.234030][ C1] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 222.234064][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 222.234108][ C1] ? exc_page_fault+0x6a/0xc0 [ 222.234267][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 222.234330][ C1] ? do_fast_syscall_32+0x33/0x70 [ 222.234371][ C1] ? irqentry_exit+0x10f/0x910 [ 222.234407][ C1] ? trace_irq_disable+0x3b/0x140 [ 222.234455][ C1] do_fast_syscall_32+0x33/0x70 [ 222.234497][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 222.234531][ C1] RIP: 0023:0xf7f190ec [ 222.234554][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 222.234577][ C1] RSP: 002b:00000000f74ffc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 222.234615][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 222.234634][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000057d414e8 [ 222.234659][ C1] RBP: 00000000f74ffcb4 R08: 0000000000000000 R09: 0000000000000000 [ 222.234675][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 222.234697][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 222.234733][ C1] [ 222.235037][ C1] [ 222.836431][ C1] ============================= [ 222.841392][ C1] WARNING: suspicious RCU usage [ 222.846287][ C1] syzkaller #0 Tainted: G W [ 222.852365][ C1] ----------------------------- [ 222.857248][ C1] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 222.869304][ C1] [ 222.869304][ C1] other info that might help us debug this: [ 222.869304][ C1] [ 222.879618][ C1] [ 222.879618][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 222.887801][ C1] locks held by syz-executor/5641: 9, last CPU#1: [ 222.894384][ C1] #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 222.903226][ C1] #1: ffff888028895cf8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 222.912452][ C1] #2: ffff8880768703b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 222.922007][ C1] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 222.931601][ C1] #4: ffff888058aa8af8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 222.942175][ C1] #5: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 222.951798][ C1] #6: ffff88805ba4c6d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 222.962207][ C1] #7: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 222.971733][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 222.982302][ C1] [ 222.982302][ C1] stack backtrace: [ 222.988236][ C1] CPU: 1 UID: 0 PID: 5641 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 222.999307][ C1] Tainted: [W]=WARN [ 223.003149][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.013238][ C1] Call Trace: [ 223.016554][ C1] [ 223.019429][ C1] dump_stack_lvl+0xe8/0x150 [ 223.024076][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 223.029501][ C1] __synchronize_srcu+0x157/0x2f0 [ 223.034570][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 223.040159][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 223.045257][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 223.051115][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 223.056732][ C1] ? synchronize_srcu+0x20a/0x260 [ 223.061812][ C1] wakeup_source_unregister+0x129/0x3f0 [ 223.067441][ C1] mmc_host_classdev_release+0x47/0x100 [ 223.073076][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 223.079335][ C1] device_release+0xc4/0x1f0 [ 223.083987][ C1] kobject_put+0x222/0x550 [ 223.088460][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 223.093279][ C1] call_timer_fn+0x18d/0x5f0 [ 223.097945][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 223.104681][ C1] ? call_timer_fn+0xd5/0x5f0 [ 223.109409][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 223.114598][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 223.119865][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 223.126701][ C1] __run_timer_base+0x652/0x8b0 [ 223.131632][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 223.137084][ C1] ? ktime_get+0x1f5/0x220 [ 223.141570][ C1] ? lapic_next_event+0x11/0x20 [ 223.146498][ C1] run_timer_softirq+0xb7/0x170 [ 223.151418][ C1] handle_softirqs+0x226/0x860 [ 223.156262][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 223.161221][ C1] __irq_exit_rcu+0xcb/0x220 [ 223.165928][ C1] irq_exit_rcu+0x9/0x30 [ 223.166741][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 223.176521][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 223.179415][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 223.182080][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 223.194262][ C1] [ 223.197252][ C1] [ 223.200238][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.206281][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 223.211623][ C1] Code: ff ff ff e8 90 9a 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 45 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f 9e 43 0a cc 48 8d 3d 57 32 da [ 223.232599][ C1] RSP: 0000:ffffc90003fcf210 EFLAGS: 00000292 [ 223.239261][ C1] RAX: a3fc482593d61300 RBX: 0000000000000000 RCX: 8000000000000003 [ 223.247334][ C1] RDX: 00000000502922a9 RSI: ffffffff8e6fc284 RDI: ffffffff8c6d9380 [ 223.255371][ C1] RBP: ffff8880793ebe80 R08: ac00000000000000 R09: 0000000000000000 [ 223.263401][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 223.271425][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 223.279477][ C1] ? pfn_valid+0xba/0x490 [ 223.283885][ C1] pfn_valid+0xd6/0x490 [ 223.288099][ C1] ? pfn_valid+0xba/0x490 [ 223.292487][ C1] page_table_check_set+0x25/0x530 [ 223.297788][ C1] copy_pmd_range+0x4adc/0x5c10 [ 223.302716][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 223.308806][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 223.314131][ C1] ? __lock_acquire+0x6df/0x2e50 [ 223.319135][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 223.324405][ C1] copy_page_range+0xc82/0x1290 [ 223.329340][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 223.334713][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 223.340247][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 223.347270][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 223.353948][ C1] dup_mmap+0xf17/0x1dc0 [ 223.358290][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 223.363041][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 223.368144][ C1] ? lock_acquire+0x115/0x350 [ 223.372888][ C1] copy_mm+0x11a/0x480 [ 223.377046][ C1] ? copy_process+0xd3c/0x43e0 [ 223.381880][ C1] copy_process+0x1e75/0x43e0 [ 223.386713][ C1] ? __lock_acquire+0x6df/0x2e50 [ 223.391717][ C1] ? copy_process+0xd3c/0x43e0 [ 223.396557][ C1] ? __pfx_copy_process+0x10/0x10 [ 223.401655][ C1] kernel_clone+0x2d7/0x940 [ 223.406241][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 223.411359][ C1] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 223.417314][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 223.423793][ C1] ? exc_page_fault+0x6a/0xc0 [ 223.428598][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 223.433867][ C1] ? do_fast_syscall_32+0x33/0x70 [ 223.438947][ C1] ? irqentry_exit+0x10f/0x910 [ 223.443752][ C1] ? trace_irq_disable+0x3b/0x140 [ 223.448927][ C1] do_fast_syscall_32+0x33/0x70 [ 223.453870][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.460266][ C1] RIP: 0023:0xf7f190ec [ 223.464376][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 223.484047][ C1] RSP: 002b:00000000f74ffc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 223.492536][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 223.500568][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000057d414e8 [ 223.508603][ C1] RBP: 00000000f74ffcb4 R08: 0000000000000000 R09: 0000000000000000 [ 223.516629][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 223.524646][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.532722][ C1] [ 223.535934][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 223.535964][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5641, name: syz-executor [ 223.535993][ C1] preempt_count: 103, expected: 0 [ 223.536011][ C1] RCU nest depth: 2, expected: 0 [ 223.536029][ C1] locks held by syz-executor/5641: 9, last CPU#1: [ 223.536054][ C1] #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 223.536162][ C1] #1: ffff888028895cf8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 223.536262][ C1] #2: ffff8880768703b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 223.536457][ C1] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 223.536664][ C1] #4: ffff888058aa8af8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 223.536869][ C1] #5: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 223.537046][ C1] #6: ffff88805ba4c6d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 223.537266][ C1] #7: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 223.537439][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 223.537622][ C1] Preemption disabled at: [ 223.537643][ C1] [<0000000000000000>] 0x0 [ 223.537732][ C1] CPU: 1 UID: 0 PID: 5641 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 223.537828][ C1] Tainted: [W]=WARN [ 223.537855][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.537906][ C1] Call Trace: [ 223.537939][ C1] [ 223.537978][ C1] dump_stack_lvl+0xe8/0x150 [ 223.538078][ C1] __might_resched+0x36a/0x4c0 [ 223.538197][ C1] __synchronize_srcu+0x1a1/0x2f0 [ 223.538276][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 223.538333][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 223.538464][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 223.538553][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 223.538667][ C1] ? synchronize_srcu+0x20a/0x260 [ 223.538746][ C1] wakeup_source_unregister+0x129/0x3f0 [ 223.538853][ C1] mmc_host_classdev_release+0x47/0x100 [ 223.538955][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 223.539056][ C1] device_release+0xc4/0x1f0 [ 223.539135][ C1] kobject_put+0x222/0x550 [ 223.539207][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 223.539303][ C1] call_timer_fn+0x18d/0x5f0 [ 223.539399][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 223.539486][ C1] ? call_timer_fn+0xd5/0x5f0 [ 223.539564][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 223.539668][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 223.539748][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 223.539852][ C1] __run_timer_base+0x652/0x8b0 [ 223.539961][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 223.540049][ C1] ? ktime_get+0x1f5/0x220 [ 223.540117][ C1] ? lapic_next_event+0x11/0x20 [ 223.540206][ C1] run_timer_softirq+0xb7/0x170 [ 223.540279][ C1] handle_softirqs+0x226/0x860 [ 223.540383][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 223.540486][ C1] __irq_exit_rcu+0xcb/0x220 [ 223.540579][ C1] irq_exit_rcu+0x9/0x30 [ 223.540677][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 223.540777][ C1] [ 223.540800][ C1] [ 223.540831][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.540905][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 223.540964][ C1] Code: ff ff ff e8 90 9a 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 45 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f 9e 43 0a cc 48 8d 3d 57 32 da [ 223.541022][ C1] RSP: 0000:ffffc90003fcf210 EFLAGS: 00000292 [ 223.541080][ C1] RAX: a3fc482593d61300 RBX: 0000000000000000 RCX: 8000000000000003 [ 223.541135][ C1] RDX: 00000000502922a9 RSI: ffffffff8e6fc284 RDI: ffffffff8c6d9380 [ 223.541181][ C1] RBP: ffff8880793ebe80 R08: ac00000000000000 R09: 0000000000000000 [ 223.541229][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 223.541274][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 223.541367][ C1] ? pfn_valid+0xba/0x490 [ 223.541447][ C1] pfn_valid+0xd6/0x490 [ 223.541516][ C1] ? pfn_valid+0xba/0x490 [ 223.541587][ C1] page_table_check_set+0x25/0x530 [ 223.541671][ C1] copy_pmd_range+0x4adc/0x5c10 [ 223.541816][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 223.541971][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 223.542102][ C1] ? __lock_acquire+0x6df/0x2e50 [ 223.542194][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 223.542319][ C1] copy_page_range+0xc82/0x1290 [ 223.542463][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 223.542550][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 223.542636][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 223.542729][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 223.542844][ C1] dup_mmap+0xf17/0x1dc0 [ 223.542994][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 223.543085][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 223.543211][ C1] ? lock_acquire+0x115/0x350 [ 223.543330][ C1] copy_mm+0x11a/0x480 [ 223.543436][ C1] ? copy_process+0xd3c/0x43e0 [ 223.543530][ C1] copy_process+0x1e75/0x43e0 [ 223.543607][ C1] ? __lock_acquire+0x6df/0x2e50 [ 223.543685][ C1] ? copy_process+0xd3c/0x43e0 [ 223.543803][ C1] ? __pfx_copy_process+0x10/0x10 [ 223.543917][ C1] kernel_clone+0x2d7/0x940 [ 223.544018][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 223.544153][ C1] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 223.544238][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 223.544341][ C1] ? exc_page_fault+0x6a/0xc0 [ 223.544455][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 223.544553][ C1] ? do_fast_syscall_32+0x33/0x70 [ 223.544650][ C1] ? irqentry_exit+0x10f/0x910 [ 223.544728][ C1] ? trace_irq_disable+0x3b/0x140 [ 223.544806][ C1] do_fast_syscall_32+0x33/0x70 [ 223.544905][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.544975][ C1] RIP: 0023:0xf7f190ec [ 223.545030][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 223.545085][ C1] RSP: 002b:00000000f74ffc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 223.545150][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 223.545188][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000057d414e8 [ 223.545230][ C1] RBP: 00000000f74ffcb4 R08: 0000000000000000 R09: 0000000000000000 [ 223.545273][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 223.545308][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.545397][ C1] [ 223.545538][ C1] ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc90003fc8000, but annotated. [ 223.546427][ C1] ------------[ cut here ]------------ [ 223.546439][ C1] 1 [ 223.546452][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz-executor/5641 [ 224.217508][ C1] Modules linked in: [ 224.221452][ C1] CPU: 1 UID: 0 PID: 5641 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 224.232711][ C1] Tainted: [W]=WARN [ 224.236532][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.246883][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 224.252943][ C1] Code: cc cc cc 41 ff c7 44 89 3d 49 99 e8 15 48 c7 c1 80 9c 6d 8c 48 c7 c7 e0 9c 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 8d 2d 3e fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 00 6f 0a 3b 05 9f [ 224.272614][ C1] RSP: 0000:ffffc90000a189b8 EFLAGS: 00010046 [ 224.278796][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: a3fc482593d61300 [ 224.286791][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 224.294807][ C1] RBP: ffff8880793ebea0 R08: 0000000000000100 R09: 0000000000080000 [ 224.302827][ C1] R10: 0000000000008000 R11: ffffffff8ec362b8 R12: 1ffff9200014314c [ 224.310845][ C1] R13: ffff888077446888 R14: dffffc0000000000 R15: 0000000000000001 [ 224.318877][ C1] FS: 0000000000000000(0000) GS:ffff888124dda000(0063) knlGS:0000000057d41480 [ 224.327887][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 224.334496][ C1] CR2: 00000000f7258c10 CR3: 0000000071b86000 CR4: 00000000003526f0 [ 224.342522][ C1] Call Trace: [ 224.345838][ C1] [ 224.348712][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 224.354330][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 224.359414][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 224.365021][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.370111][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 224.375941][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 224.381591][ C1] ? synchronize_srcu+0x20a/0x260 [ 224.386646][ C1] wakeup_source_unregister+0x129/0x3f0 [ 224.392324][ C1] mmc_host_classdev_release+0x47/0x100 [ 224.397909][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 224.404084][ C1] device_release+0xc4/0x1f0 [ 224.408704][ C1] kobject_put+0x222/0x550 [ 224.413254][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 224.418100][ C1] call_timer_fn+0x18d/0x5f0 [ 224.422723][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 224.429420][ C1] ? call_timer_fn+0xd5/0x5f0 [ 224.434120][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 224.439271][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 224.444565][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 224.451396][ C1] __run_timer_base+0x652/0x8b0 [ 224.456346][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 224.461793][ C1] ? ktime_get+0x1f5/0x220 [ 224.466262][ C1] ? lapic_next_event+0x11/0x20 [ 224.471178][ C1] run_timer_softirq+0xb7/0x170 [ 224.476056][ C1] handle_softirqs+0x226/0x860 [ 224.480858][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 224.485688][ C1] __irq_exit_rcu+0xcb/0x220 [ 224.490343][ C1] irq_exit_rcu+0x9/0x30 [ 224.494658][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 224.500369][ C1] [ 224.503331][ C1] [ 224.506310][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 224.512320][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 224.517630][ C1] Code: ff ff ff e8 90 9a 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 45 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f 9e 43 0a cc 48 8d 3d 57 32 da [ 224.537257][ C1] RSP: 0000:ffffc90003fcf210 EFLAGS: 00000292 [ 224.543397][ C1] RAX: a3fc482593d61300 RBX: 0000000000000000 RCX: 8000000000000003 [ 224.551390][ C1] RDX: 00000000502922a9 RSI: ffffffff8e6fc284 RDI: ffffffff8c6d9380 [ 224.559394][ C1] RBP: ffff8880793ebe80 R08: ac00000000000000 R09: 0000000000000000 [ 224.567421][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 224.575444][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 224.583489][ C1] ? pfn_valid+0xba/0x490 [ 224.587918][ C1] pfn_valid+0xd6/0x490 [ 224.592117][ C1] ? pfn_valid+0xba/0x490 [ 224.596508][ C1] page_table_check_set+0x25/0x530 [ 224.601688][ C1] copy_pmd_range+0x4adc/0x5c10 [ 224.606649][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 224.612193][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 224.617443][ C1] ? __lock_acquire+0x6df/0x2e50 [ 224.622427][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 224.627669][ C1] copy_page_range+0xc82/0x1290 [ 224.632571][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 224.637931][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 224.643450][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 224.650496][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 224.657195][ C1] dup_mmap+0xf17/0x1dc0 [ 224.661527][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 224.666264][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.671336][ C1] ? lock_acquire+0x115/0x350 [ 224.676106][ C1] copy_mm+0x11a/0x480 [ 224.680248][ C1] ? copy_process+0xd3c/0x43e0 [ 224.685068][ C1] copy_process+0x1e75/0x43e0 [ 224.689804][ C1] ? __lock_acquire+0x6df/0x2e50 [ 224.694791][ C1] ? copy_process+0xd3c/0x43e0 [ 224.699591][ C1] ? __pfx_copy_process+0x10/0x10 [ 224.704673][ C1] kernel_clone+0x2d7/0x940 [ 224.709251][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 224.714360][ C1] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 224.720323][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 224.726818][ C1] ? exc_page_fault+0x6a/0xc0 [ 224.731579][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 224.736850][ C1] ? do_fast_syscall_32+0x33/0x70 [ 224.741914][ C1] ? irqentry_exit+0x10f/0x910 [ 224.746743][ C1] ? trace_irq_disable+0x3b/0x140 [ 224.751802][ C1] do_fast_syscall_32+0x33/0x70 [ 224.756727][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.763121][ C1] RIP: 0023:0xf7f190ec [ 224.767271][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 224.787350][ C1] RSP: 002b:00000000f74ffc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 224.795838][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 224.803870][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000057d414e8 [ 224.811900][ C1] RBP: 00000000f74ffcb4 R08: 0000000000000000 R09: 0000000000000000 [ 224.819941][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 224.828056][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.836102][ C1] [ 224.839168][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 224.846495][ C1] CPU: 1 UID: 0 PID: 5641 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 224.857540][ C1] Tainted: [W]=WARN [ 224.861362][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.871469][ C1] Call Trace: [ 224.874813][ C1] [ 224.877675][ C1] vpanic+0x56d/0xa60 [ 224.881715][ C1] ? __pfx__printk+0x10/0x10 [ 224.886348][ C1] ? __pfx_vpanic+0x10/0x10 [ 224.890926][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 224.896268][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 224.901506][ C1] panic+0xc5/0xd0 [ 224.905293][ C1] ? __pfx_panic+0x10/0x10 [ 224.909789][ C1] __warn+0x315/0x4c0 [ 224.913833][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 224.919179][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 224.924515][ C1] __report_bug+0x276/0x570 [ 224.929074][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 224.934386][ C1] ? __pfx___report_bug+0x10/0x10 [ 224.939445][ C1] ? __wake_up_klogd+0xf0/0x130 [ 224.944318][ C1] ? vprintk_emit+0x4ee/0x560 [ 224.949020][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 224.954075][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 224.959413][ C1] report_bug+0x16b/0x220 [ 224.964227][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 224.969531][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 224.974839][ C1] handle_bug+0x9c/0x200 [ 224.979108][ C1] exc_invalid_op+0x1a/0x50 [ 224.983659][ C1] asm_exc_invalid_op+0x1a/0x20 [ 224.988536][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 224.994461][ C1] Code: cc cc cc 41 ff c7 44 89 3d 49 99 e8 15 48 c7 c1 80 9c 6d 8c 48 c7 c7 e0 9c 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 8d 2d 3e fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 00 6f 0a 3b 05 9f [ 225.014106][ C1] RSP: 0000:ffffc90000a189b8 EFLAGS: 00010046 [ 225.020193][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: a3fc482593d61300 [ 225.028195][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 225.036203][ C1] RBP: ffff8880793ebea0 R08: 0000000000000100 R09: 0000000000080000 [ 225.044202][ C1] R10: 0000000000008000 R11: ffffffff8ec362b8 R12: 1ffff9200014314c [ 225.052204][ C1] R13: ffff888077446888 R14: dffffc0000000000 R15: 0000000000000001 [ 225.060274][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 225.065593][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 225.071178][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 225.076244][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 225.081850][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 225.086988][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 225.092831][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 225.098434][ C1] ? synchronize_srcu+0x20a/0x260 [ 225.103493][ C1] wakeup_source_unregister+0x129/0x3f0 [ 225.109089][ C1] mmc_host_classdev_release+0x47/0x100 [ 225.114957][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 225.121219][ C1] device_release+0xc4/0x1f0 [ 225.125885][ C1] kobject_put+0x222/0x550 [ 225.130347][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 225.135161][ C1] call_timer_fn+0x18d/0x5f0 [ 225.139792][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 225.146501][ C1] ? call_timer_fn+0xd5/0x5f0 [ 225.151221][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 225.156415][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 225.161646][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 225.168360][ C1] __run_timer_base+0x652/0x8b0 [ 225.173270][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 225.178696][ C1] ? ktime_get+0x1f5/0x220 [ 225.183157][ C1] ? lapic_next_event+0x11/0x20 [ 225.188041][ C1] run_timer_softirq+0xb7/0x170 [ 225.192933][ C1] handle_softirqs+0x226/0x860 [ 225.198110][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 225.202952][ C1] __irq_exit_rcu+0xcb/0x220 [ 225.207600][ C1] irq_exit_rcu+0x9/0x30 [ 225.211892][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 225.217562][ C1] [ 225.220531][ C1] [ 225.223498][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 225.229511][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 225.234830][ C1] Code: ff ff ff e8 90 9a 40 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 45 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f 9e 43 0a cc 48 8d 3d 57 32 da [ 225.254517][ C1] RSP: 0000:ffffc90003fcf210 EFLAGS: 00000292 [ 225.260626][ C1] RAX: a3fc482593d61300 RBX: 0000000000000000 RCX: 8000000000000003 [ 225.268629][ C1] RDX: 00000000502922a9 RSI: ffffffff8e6fc284 RDI: ffffffff8c6d9380 [ 225.276646][ C1] RBP: ffff8880793ebe80 R08: ac00000000000000 R09: 0000000000000000 [ 225.284650][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 225.292694][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 225.300730][ C1] ? pfn_valid+0xba/0x490 [ 225.305105][ C1] pfn_valid+0xd6/0x490 [ 225.309317][ C1] ? pfn_valid+0xba/0x490 [ 225.313697][ C1] page_table_check_set+0x25/0x530 [ 225.318852][ C1] copy_pmd_range+0x4adc/0x5c10 [ 225.324451][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 225.329966][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 225.335208][ C1] ? __lock_acquire+0x6df/0x2e50 [ 225.340204][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 225.345473][ C1] copy_page_range+0xc82/0x1290 [ 225.350385][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 225.355708][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 225.361242][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 225.368213][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 225.374852][ C1] dup_mmap+0xf17/0x1dc0 [ 225.379167][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 225.383891][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 225.388967][ C1] ? lock_acquire+0x115/0x350 [ 225.393724][ C1] copy_mm+0x11a/0x480 [ 225.397855][ C1] ? copy_process+0xd3c/0x43e0 [ 225.402654][ C1] copy_process+0x1e75/0x43e0 [ 225.407368][ C1] ? __lock_acquire+0x6df/0x2e50 [ 225.412352][ C1] ? copy_process+0xd3c/0x43e0 [ 225.417194][ C1] ? __pfx_copy_process+0x10/0x10 [ 225.422323][ C1] kernel_clone+0x2d7/0x940 [ 225.426889][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 225.431999][ C1] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 225.437931][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 225.444390][ C1] ? exc_page_fault+0x6a/0xc0 [ 225.449116][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 225.454363][ C1] ? do_fast_syscall_32+0x33/0x70 [ 225.459441][ C1] ? irqentry_exit+0x10f/0x910 [ 225.464262][ C1] ? trace_irq_disable+0x3b/0x140 [ 225.469336][ C1] do_fast_syscall_32+0x33/0x70 [ 225.474227][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 225.480635][ C1] RIP: 0023:0xf7f190ec [ 225.484734][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 225.504374][ C1] RSP: 002b:00000000f74ffc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 225.512834][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 225.520939][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000057d414e8 [ 225.528951][ C1] RBP: 00000000f74ffcb4 R08: 0000000000000000 R09: 0000000000000000 [ 225.536974][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 225.544999][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 225.553024][ C1] [ 225.556353][ C1] Kernel Offset: disabled [ 225.560700][ C1] Rebooting in 86400 seconds..