last executing test programs: 7.238374183s ago: executing program 3 (id=662): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x8443, 0x1000009, 0xffffeffffffffffb, 0x8, 0x6, 0x7, 0x4002004c1, 0x5be3d206, 0xb, 0x4, 0x2, 0x0, 0x2, 0x2, 0xa, 0xffffffff7fffffff], 0x80a0000, 0x128106}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/21, 0x15}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 6.928388081s ago: executing program 3 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c00000009060101fffffff7000000000200ffff08000940000000390900020073797a3100000000050001000700fe005c0008801c00078018000180"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtaction={0x8c, 0x1e, 0x109, 0x4000102, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_mirred={0x74, 0x14, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xa, 0xffffffffffffffff, 0x2, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0x5, 0x4, 0x8}, 0x3}}]}, {0x6, 0x6, "d10d"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x8c}, 0x1, 0x2b1e}, 0x2000c000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 6.786225626s ago: executing program 3 (id=666): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f", 0x31}], 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r2, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2000800) 6.762963953s ago: executing program 3 (id=667): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 6.636452139s ago: executing program 3 (id=669): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) r1 = epoll_create(0xa67) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000000}) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000540)='\x00!', 0x2}], 0x1, 0x739, 0x1) 6.388959553s ago: executing program 3 (id=673): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0xfffffffc, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x15}, [@FRA_FLOW={0x8, 0xb, 0xf7}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x00\"'], 0xc) 5.330429384s ago: executing program 1 (id=676): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r5 = socket$unix(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 4.711343024s ago: executing program 4 (id=680): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 4.604896781s ago: executing program 2 (id=682): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 4.566952922s ago: executing program 2 (id=683): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x6, r1, 0x0}]) 4.467075158s ago: executing program 0 (id=685): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xd70, 0x1f280, 0x0, 0x1c7}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') io_uring_enter(r0, 0x100, 0x11, 0x1f, 0x0, 0x0) 4.402823312s ago: executing program 0 (id=686): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="0232e6fe", 0x4}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f00000001c0), 0x7) 4.306525861s ago: executing program 0 (id=687): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x14, 0x10, 0x21, 0xfffffffd, 0x0, {0x3}}, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0x1}], 0x1}, 0xa6}], 0x1, 0x4008440) 4.306124609s ago: executing program 2 (id=688): syz_open_dev$video4linux(&(0x7f0000000000), 0xb7c, 0x100) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x9d49, 0x400, 0x2, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x240, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f00000001c0)={r4, 0x0, 0xfffffffffffff206, 0x3, 0x2a98, 0x2, [0x401, 0x6, 0x8, 0x0, 0x8, 0x1000]}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xeeee8000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xddccb000, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, {0x118004, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x1}, {0x1000, 0x0, 0xd, 0x8, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0xeeef0000, 0x8, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x10000, 0xf, 0x0, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0xfc, 0x10, 0x4, 0xe}, {0x0, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x0, 0x10, 0x1000000000000001, 0x0, 0x900, [0x0, 0x0, 0x2, 0x5]}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4140aecd, &(0x7f0000000100)) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003c00), r6) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40008000) r12 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r12, 0x81044804, 0x0) set_mempolicy(0x4000, &(0x7f0000000080)=0xc00, 0xffffffffffffb176) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.300474946s ago: executing program 0 (id=689): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x1000, @local, 0x7ff}}, 0x9, 0x3, 0x9, 0x7fffffff, 0x8}, &(0x7f0000000280)=0x98) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 4.161769518s ago: executing program 0 (id=690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$DVB_DEMUX_DMX_GET_STC(0xffffffffffffffff, 0xc0106f32, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.009675033s ago: executing program 1 (id=691): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 3.900374572s ago: executing program 1 (id=692): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r4, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_open_dev$sg(0x0, 0x0, 0x40100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) preadv(r5, &(0x7f00000022c0)=[{&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000740)=""/155, 0x9b}, {&(0x7f0000000840)=""/239, 0xef}, {&(0x7f0000000940)=""/247, 0xf7}, {&(0x7f0000000a40)=""/166, 0xa6}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'bridge_slave_1\x00', @link_local}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000e00)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}, {&(0x7f0000000c00)="f089544272076c4d41fd398602b89b3fa3a9c58c88fe7b2196418b996d0900ab2acfaec9736958e9251d2dc35428a4d9f2e99383bbd12a723adde1215cba8da2fdc128a0c03d99353c90f9872df89d9e17fe616960fa65b29a328c5a3ad12eef1b1c40dd6095277b3a3af49cb421ea7b54e04a5a4b3e69355c5990305623ead4c316857b5b0c02a2bc26238cb7570e5771d92572ae7a25d7ef3016422e47328807aa0d756af338ede7940af5c81003a1fd00a3f5", 0xb4}, {&(0x7f0000000d00)="8d2aadf53c167444d7ecf2ff4aebc7af0637ef9c57778a567de1ae283b63a457869d734c1a43768ad2ca13eebce8a40a3c3fc64f933b80aa681e48449e7cdb3dc8577006b9532ea431e2bc35239518388132f7b03ba7530aca3d55738e10823d67cfc4f779f3334bc2a00212772e14650115b553ec39d5a1d117343fed6e80a0bc8883e526252e9278d4d8a8bc56e59fd506dafe2b695add69459918b0acd7657b53a6bd1da27dd5244e2acbd72f315ffefc3212c7d5ee2ddeadef0c1027d554834014d0641099407b62ed00fe72eacde224fce85be583b7c35e2747763b8f5926", 0xe1}], 0x3) sendto$inet(r3, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) 2.879188653s ago: executing program 1 (id=693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/15, 0x13}], 0x1d) 2.690327232s ago: executing program 1 (id=694): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x7c, &(0x7f0000000600)={0x40, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.513352642s ago: executing program 4 (id=695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xb81, 0x0) close(r0) close(0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x90}}, 0x40000) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 2.442553481s ago: executing program 4 (id=696): openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x6) 2.350621847s ago: executing program 4 (id=697): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000040)="9744012000000000035bdb61ea02df7bc728d08701008cc5595c08ff", 0x1c}], 0x1, &(0x7f00000008c0)}, 0xc884) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x5e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.350176215s ago: executing program 4 (id=698): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000004"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @remote, 0x6e}, 0x1c) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2.319934653s ago: executing program 2 (id=699): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) dup3(r1, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x9a1, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5c, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x20005, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x3ff, 0x5, 0x3e, 0x18a, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0xf, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x16, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x101, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x80004, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x2000000b, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9e, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x1, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x25, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x7fff, 0xfffffffa, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 2.228503854s ago: executing program 2 (id=700): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000003240)=[{&(0x7f0000000340)="47dad0e3466af430e94c4c6e8e2a5400bbc61fd54e31bc1836c40e7ea2601c5ddaf3ca645b13d2ed95e2e9e35b5c4920fb52ce60a7811c8a58a43c9abc2a44a197bb95ae8b156658daaff8ee34fc548b64ab36fe520906ffc1bd6d5cd0b6c368d3149a18ec658cd5cd210eae8ac8a97f2be2fbb013425a120995a4aa59bbb862e11cb5a1ed7322588d898e3caa68", 0x8e}, {&(0x7f0000002080)}, {&(0x7f0000003080)="9fee4fd30f8f427ae890ad1980fd6bb080b35b8558fd019b8a2342b840ec93aac7dccab9281228", 0x27}, {&(0x7f00000030c0)="f6bdeeffdb82ddc8044dd83729937d82762cad39657e4b0cea770db3f63c437e01d900b30f3a437e8d3acd1078376c678ef2ab291b7c43c650d5647955f526c956f6f90cce1d3132090832728d832bd3d045925305e4a08d62ead5277ade01ecea3b014e04c458679f5831964f964ace0a2ce3a3dc43af25b74556b0a0ad343b91000ab1a94f838352c72db843f23843754c2c448eb5144572b30ab7d27987e9531147", 0xa3}, {0x0}, {&(0x7f00000031c0)}, {&(0x7f0000003200)="b6352b1c", 0x4}], 0x7) fchdir(r2) r3 = open(0x0, 0x8000, 0x112) getdents(r3, 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000001c0)='wg2\x00', 0x4) listen(r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x80002) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) syz_usb_connect(0x4, 0x36, &(0x7f00000032c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) r6 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfeed, 0xffffffffffffffff) keyctl$revoke(0x3, r6) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000200)=0x1) 1.456396759s ago: executing program 4 (id=701): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x2, 0x4, 0x200, 0x0, {0x77359400}, {0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, "05000100"}, 0x0, 0x2, {}, 0x20800}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 1.344200682s ago: executing program 2 (id=702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="120000000100000004"], 0x50) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "7c98b307afa2738e", "9797fed914ba965b281cbe8c9b39e729", "049cee36", "90993a510db0b184"}, 0x28) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x100000000000027b) 1.033730832s ago: executing program 0 (id=703): r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xa0f3, 0x2, 0x0, 0x42}, &(0x7f0000000400)=0x0, &(0x7f0000011000)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, 0x0) syz_io_uring_complete(r1, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0xf, 0xfffffbff) 0s ago: executing program 1 (id=704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40010) kernel console output (not intermixed with test programs): [ 170.303580][ T6812] veth0_to_hsr: entered promiscuous mode [ 170.320265][ T6812] veth1_to_hsr: entered promiscuous mode [ 170.332585][ T6812] hsr0: entered promiscuous mode [ 170.349756][ T6812] veth1_virt_wifi: entered promiscuous mode [ 170.367896][ T6812] veth0_virt_wifi: entered promiscuous mode [ 170.382806][ T6812] virt_wifi0: entered promiscuous mode [ 170.408849][ T6812] vlan0: entered promiscuous mode [ 170.432732][ T31] audit: type=1326 audit(1790899258.263:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.0.219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052779e159 code=0x7ffc0000 [ 170.438326][ T31] audit: type=1326 audit(1790899258.273:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.0.219" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052779e159 code=0x7ffc0000 [ 170.495895][ T6812] macvlan0: entered promiscuous mode [ 170.521970][ T6812] macvlan1: entered promiscuous mode [ 170.550763][ T6812] ipvlan0: entered promiscuous mode [ 170.550899][ T6812] ipvlan1: entered promiscuous mode [ 170.575363][ T6836] kernel read not supported for file /memory.events (pid: 6836 comm: syz.3.220) [ 170.582722][ T31] audit: type=1800 audit(1790899258.413:747): pid=6836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.220" name="memory.events" dev="mqueue" ino=14217 res=0 errno=0 [ 170.639761][ T6812] macvtap0: entered promiscuous mode [ 170.658463][ T6812] macsec0: entered promiscuous mode [ 170.680716][ T6812] geneve0: entered promiscuous mode [ 170.724013][ T6812] geneve1: entered promiscuous mode [ 170.774337][ T6812] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 170.822493][ T6812] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 170.850568][ T6812] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 170.873164][ T6812] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 170.901526][ T6812] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 170.901723][ T6812] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 170.901852][ T6812] bridge_slave_1.: entered promiscuous mode [ 170.911692][ T6812] macvlan2: entered promiscuous mode [ 170.911866][ T6812] macvlan3: entered promiscuous mode [ 170.912061][ T6812] macvlan4: entered promiscuous mode [ 170.912222][ T6812] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode [ 170.913577][ T6812] sit1: entered promiscuous mode [ 171.115734][ T72] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.115779][ T72] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.115809][ T72] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.115839][ T72] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.238374][ T4944] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 171.238402][ T4944] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 171.238917][ T4944] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 171.293580][ T4944] usb 5-1: USB disconnect, device number 16 [ 172.241489][ T6856] Invalid option length (234) for dns_resolver key [ 173.016437][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 173.166442][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 173.167849][ T25] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 173.168791][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 173.168813][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.174120][ T25] usb 4-1: config 0 descriptor?? [ 173.205562][ T5705] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 173.369859][ T5705] usb 5-1: Using ep0 maxpacket: 8 [ 173.371066][ T5705] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 173.374587][ T5705] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 173.374611][ T5705] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 173.374631][ T5705] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 173.374645][ T5705] usb 5-1: config 168 interface 0 has no altsetting 0 [ 173.379356][ T5705] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 173.379392][ T5705] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 173.379449][ T5705] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 173.379476][ T5705] usb 5-1: config 168 interface 0 has no altsetting 0 [ 173.382995][ T5705] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 173.383029][ T5705] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 173.383066][ T5705] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 173.383112][ T5705] usb 5-1: config 168 interface 0 has no altsetting 0 [ 173.390390][ T5705] usb 5-1: string descriptor 0 read error: -22 [ 173.390540][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.416578][ T5705] adutux 5-1:168.0: interrupt endpoints not found [ 173.638854][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.639121][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.744269][ T1218] usb 5-1: USB disconnect, device number 17 [ 174.087473][ T6890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.233'. [ 174.089734][ T6890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.233'. [ 174.814117][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 175.029155][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'. [ 175.029178][ T6903] netlink: 1932 bytes leftover after parsing attributes in process `syz.2.236'. [ 175.029192][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 175.475489][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 175.635450][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 175.637111][ T9] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.40 [ 175.638129][ T9] usb 2-1: config 1 interface 0 altsetting 172 endpoint 0x81 has an invalid bInterval 241, changing to 11 [ 175.638152][ T9] usb 2-1: config 1 interface 0 altsetting 172 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 175.638167][ T9] usb 2-1: config 1 interface 0 altsetting 172 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.638180][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 175.640116][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.640131][ T9] usb 2-1: Product: syz [ 175.640139][ T9] usb 2-1: Manufacturer: syz [ 175.640152][ T9] usb 2-1: SerialNumber: syz [ 175.675346][ T6906] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 175.850997][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 175.851111][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 175.875164][ T25] usb 4-1: USB disconnect, device number 16 [ 176.170988][ T6911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.237'. [ 176.200289][ T6911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.557341][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 178.557791][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 178.581840][ T9] usb 2-1: USB disconnect, device number 15 [ 178.600223][ T5615] udevd[5615]: setting owner of /dev/bus/usb/002/015 to uid=0, gid=0 failed: No such file or directory [ 179.314145][ T6930] Invalid option length (234) for dns_resolver key [ 179.565499][ T25] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 179.729336][ T25] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 179.730344][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.730402][ T25] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.730431][ T25] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 179.736134][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.736158][ T25] usb 2-1: Product: syz [ 179.736172][ T25] usb 2-1: Manufacturer: syz [ 179.736186][ T25] usb 2-1: SerialNumber: syz [ 180.044865][ T25] snd-usb-caiaq 2-1:1.0: invalid EPs [ 180.044881][ T25] usb 2-1: unable to init card! (ret=-22) [ 180.045142][ T25] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 180.291284][ T6932] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 180.306583][ T25] usb 2-1: USB disconnect, device number 16 [ 180.764198][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 180.940118][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 180.940148][ T6960] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.250'. [ 180.940175][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.250'. [ 180.940203][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 181.181124][ T31] audit: type=1326 audit(1790899269.013:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.1.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4481d9e159 code=0x7ffc0000 [ 181.215225][ T31] audit: type=1326 audit(1790899269.033:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.1.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4481d9e159 code=0x7ffc0000 [ 181.215256][ T31] audit: type=1326 audit(1790899269.043:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.1.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4481d9e159 code=0x7ffc0000 [ 181.215277][ T31] audit: type=1326 audit(1790899269.043:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.1.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4481d9e159 code=0x7ffc0000 [ 181.215297][ T31] audit: type=1326 audit(1790899269.043:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.1.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4481d9e159 code=0x7ffc0000 [ 181.218067][ T31] audit: type=1326 audit(1790899269.053:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.1.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4481d9e159 code=0x7ffc0000 [ 181.379939][ T31] audit: type=1326 audit(1790899269.213:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.1.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4481d9e159 code=0x7ffc0000 [ 181.379976][ T31] audit: type=1326 audit(1790899269.213:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.1.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4481d9e159 code=0x7ffc0000 [ 181.507078][ T31] audit: type=1326 audit(1790899269.343:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.1.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4481d9e159 code=0x7ffc0000 [ 181.507109][ T31] audit: type=1326 audit(1790899269.343:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.1.252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4481d9e159 code=0x7ffc0000 [ 181.923098][ T6976] netlink: 188 bytes leftover after parsing attributes in process `syz.2.253'. [ 182.282553][ T6981] netlink: 'syz.4.254': attribute type 4 has an invalid length. [ 182.396427][ T6985] xt_connbytes: Forcing CT accounting to be enabled [ 182.899012][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 182.937026][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.256'. [ 182.937085][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 183.006790][ T25] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 183.103288][ T6991] netlink: 'syz.3.256': attribute type 2 has an invalid length. [ 183.103303][ T6991] netlink: 'syz.3.256': attribute type 7 has an invalid length. [ 183.227484][ T6991] Uż: entered promiscuous mode [ 184.004652][ T6995] Invalid option length (234) for dns_resolver key [ 184.207775][ T5705] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 184.356245][ T5705] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 184.357372][ T5705] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.357430][ T5705] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.357452][ T5705] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 184.359628][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.359653][ T5705] usb 4-1: Product: syz [ 184.359667][ T5705] usb 4-1: Manufacturer: syz [ 184.359681][ T5705] usb 4-1: SerialNumber: syz [ 184.516446][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 184.690647][ T5705] snd-usb-caiaq 4-1:1.0: invalid EPs [ 184.690663][ T5705] usb 4-1: unable to init card! (ret=-22) [ 184.694343][ T5705] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 185.425579][ T1218] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 185.554136][ T7024] netlink: 'syz.4.265': attribute type 12 has an invalid length. [ 185.576987][ T1218] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 185.578083][ T1218] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.578139][ T1218] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.578161][ T1218] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 185.580995][ T1218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.581020][ T1218] usb 3-1: Product: syz [ 185.581035][ T1218] usb 3-1: Manufacturer: syz [ 185.581050][ T1218] usb 3-1: SerialNumber: syz [ 185.706472][ T7028] loop9: detected capacity change from 0 to 524287999 [ 185.793231][ T5871] Buffer I/O error on dev loop9, logical block 65535999, async page read [ 185.856838][ T1218] snd-usb-caiaq 3-1:1.0: invalid EPs [ 185.856861][ T1218] usb 3-1: unable to init card! (ret=-22) [ 185.857358][ T1218] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 186.491871][ T9] usb 3-1: USB disconnect, device number 12 [ 186.664622][ T25] usb 4-1: USB disconnect, device number 17 [ 186.825803][ T7038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.828561][ T7037] __nla_validate_parse: 4 callbacks suppressed [ 186.828601][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 186.875737][ T1218] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 186.931683][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 186.931783][ T7037] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.266'. [ 186.931799][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'. [ 186.931816][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 187.027124][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 187.057305][ T1218] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 187.058751][ T1218] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 187.058787][ T1218] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 187.058801][ T1218] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 187.058815][ T1218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.058833][ T1218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.086559][ T1218] usb 2-1: config 0 descriptor?? [ 187.125849][ T7030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.272994][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 187.273019][ T7044] netlink: 1932 bytes leftover after parsing attributes in process `syz.3.269'. [ 187.273033][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 187.367637][ T7030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.367964][ T7030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.697238][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 187.726722][ T1218] usbhid 2-1:0.0: can't add hid device: -71 [ 187.726825][ T1218] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 187.734543][ T1218] usb 2-1: USB disconnect, device number 18 [ 187.856168][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 187.859861][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.859922][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.859935][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 187.859947][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 187.859970][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.936076][ T9] cxacru_cm: 55 callbacks suppressed [ 187.936098][ T9] cxacru 3-1:1.0: submit of read urb for cm 0x90 failed (-90) [ 187.936123][ T9] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 187.936287][ T9] cxacru 3-1:1.0: probe with driver cxacru failed with error -22 [ 188.356215][ T31] audit: type=1800 audit(1790899276.183:813): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.271" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 189.025459][ T1218] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 189.169372][ T7074] team0: Device vlan1 failed to change mtu [ 189.176425][ T1218] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.179972][ T1218] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.179999][ T1218] usb 2-1: config 0 has no interface number 0 [ 189.180038][ T1218] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 189.180056][ T1218] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 189.180079][ T1218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.261117][ T1218] usb 2-1: config 0 descriptor?? [ 189.280520][ T7071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.326810][ T1218] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 190.078003][ T25] usb 2-1: USB disconnect, device number 19 [ 190.431096][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 190.944816][ T7087] netlink: 'syz.4.276': attribute type 10 has an invalid length. [ 191.003968][ T7087] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 191.004916][ T7087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.029952][ T7087] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 191.079784][ T7087] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 191.142414][ T5705] usb 3-1: USB disconnect, device number 13 [ 191.575770][ T5705] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 191.725623][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 191.727916][ T5705] usb 3-1: unable to get BOS descriptor or descriptor too short [ 191.727946][ T5705] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 191.729660][ T5705] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 191.729686][ T5705] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 191.729706][ T5705] usb 3-1: config 14 has no interface number 0 [ 191.729723][ T5705] usb 3-1: config 14 has no interface number 1 [ 191.729783][ T5705] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 191.729808][ T5705] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 191.729833][ T5705] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 191.729860][ T5705] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 191.729887][ T5705] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 191.729914][ T5705] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.729941][ T5705] usb 3-1: config 14 interface 57 has no altsetting 0 [ 191.729959][ T5705] usb 3-1: config 14 interface 228 has no altsetting 0 [ 191.733664][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.733688][ T5705] usb 3-1: Product: syz [ 191.733703][ T5705] usb 3-1: Manufacturer: syz [ 191.733712][ T5705] usb 3-1: SerialNumber: syz [ 192.153171][ T7108] bridge_slave_1: left allmulticast mode [ 192.155588][ T7108] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.266649][ T7108] bridge_slave_0: left allmulticast mode [ 192.268904][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.345606][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.347913][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.424569][ T5705] legousbtower 3-1:14.57: interrupt endpoints not found [ 192.857516][ T5705] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 192.889586][ T5705] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 192.983573][ T7116] __nla_validate_parse: 4 callbacks suppressed [ 192.983593][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 193.171431][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 193.171453][ T7122] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.282'. [ 193.171468][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.282'. [ 193.289233][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 193.452984][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 193.453043][ T7123] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.283'. [ 193.453065][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 193.475709][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 194.228706][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.228764][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.769836][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 194.931497][ T4944] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 195.097248][ T4944] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 195.099821][ T4944] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 195.099847][ T4944] usb 5-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 195.099865][ T4944] usb 5-1: config 0 has no interface number 0 [ 195.099888][ T4944] usb 5-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 195.157446][ T4944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.157474][ T4944] usb 5-1: Product: syz [ 195.157488][ T4944] usb 5-1: Manufacturer: syz [ 195.157502][ T4944] usb 5-1: SerialNumber: syz [ 195.184386][ T4944] usb 5-1: config 0 descriptor?? [ 195.208386][ T4944] redrat3 5-1:0.83: Couldn't find all endpoints [ 195.693832][ T7141] syz.3.289 (7141): drop_caches: 2 [ 196.350854][ T1218] usb 3-1: USB disconnect, device number 14 [ 196.457044][ T1218] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 197.607962][ T7191] vivid-000: disconnect [ 197.632269][ T7183] Invalid option length (234) for dns_resolver key [ 197.754354][ T4944] usb 5-1: USB disconnect, device number 18 [ 197.948821][ T7182] vivid-000: reconnect [ 198.385802][ T7201] __nla_validate_parse: 9 callbacks suppressed [ 198.385825][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 198.635292][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 198.635319][ T7202] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.303'. [ 198.635335][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.303'. [ 198.896586][ T7208] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 199.095554][ T5705] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 199.246513][ T5705] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.247766][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.247785][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.247796][ T5705] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.247823][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.255030][ T5705] usb 3-1: config 0 descriptor?? [ 199.412569][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 199.593592][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 199.593616][ T7215] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.306'. [ 199.593630][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 199.593647][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 199.729647][ T5705] hid_parser_main: 5 callbacks suppressed [ 199.729669][ T5705] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 199.729697][ T5705] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 199.729722][ T5705] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 199.729747][ T5705] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 199.729772][ T5705] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 199.729797][ T5705] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 199.729823][ T5705] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 199.729849][ T5705] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 199.729874][ T5705] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 199.729899][ T5705] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 199.834294][ T5705] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 200.071589][ T7209] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 200.145520][ T1218] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 200.295581][ T1218] usb 5-1: Using ep0 maxpacket: 8 [ 200.296123][ T1218] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 200.297073][ T1218] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 200.297108][ T1218] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 200.297142][ T1218] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 200.297179][ T1218] usb 5-1: config 168 interface 0 has no altsetting 0 [ 200.302348][ T1218] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 200.302371][ T1218] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 200.302391][ T1218] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 200.302405][ T1218] usb 5-1: config 168 interface 0 has no altsetting 0 [ 200.304403][ T1218] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 200.304424][ T1218] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 200.304443][ T1218] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 200.304458][ T1218] usb 5-1: config 168 interface 0 has no altsetting 0 [ 200.454211][ T1218] usb 5-1: string descriptor 0 read error: -22 [ 200.454290][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.476817][ T1218] adutux 5-1:168.0: interrupt endpoints not found [ 200.499415][ T1218] usb 3-1: USB disconnect, device number 15 [ 200.678397][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.678639][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.684406][ T5705] usb 5-1: USB disconnect, device number 19 [ 201.111000][ T31] audit: type=1326 audit(1790899288.943:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.3.311" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe3759e159 code=0x0 [ 201.184798][ T7236] SET target dimension over the limit! [ 201.204042][ T7236] netlink: 9 bytes leftover after parsing attributes in process `syz.0.310'. [ 201.204232][ T7236] 0·: renamed from hsr0 (while UP) [ 201.272122][ T7236] 0·: entered allmulticast mode [ 201.272148][ T7236] hsr_slave_0: entered allmulticast mode [ 201.273239][ T7236] hsr_slave_1: entered allmulticast mode [ 201.282744][ T7236] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 201.396706][ T7238] bond3: Unable to set down delay as MII monitoring is disabled [ 201.411246][ T7238] bond3 (unregistering): Released all slaves [ 201.649485][ T7251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.650052][ T5705] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 201.843138][ T5705] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 201.844477][ T5705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.844519][ T5705] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.844530][ T5705] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 201.844542][ T5705] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 201.844565][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.959601][ T5705] cxacru 2-1:1.0: submit of read urb for cm 0x90 failed (-90) [ 201.959637][ T5705] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 201.979128][ T5705] cxacru 2-1:1.0: probe with driver cxacru failed with error -22 [ 203.441332][ T7268] __nla_validate_parse: 4 callbacks suppressed [ 203.441352][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 203.558099][ T7271] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 203.692925][ T7271] bond3: entered promiscuous mode [ 203.697729][ T7271] bond3: entered allmulticast mode [ 203.702395][ T7271] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.737331][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 203.811300][ T7267] erspan1: entered allmulticast mode [ 203.935073][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 203.935097][ T7277] netlink: 1932 bytes leftover after parsing attributes in process `syz.3.320'. [ 203.935110][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 203.935127][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.320'. [ 203.989975][ T7267] bond3: (slave erspan1): making interface the new active one [ 203.992272][ T7267] erspan1: entered promiscuous mode [ 204.101994][ T7267] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 204.174137][ T7267] syz.0.319 (7267) used greatest stack depth: 17952 bytes left [ 204.419115][ T7279] Invalid option length (234) for dns_resolver key [ 205.274985][ T5705] usb 2-1: USB disconnect, device number 20 [ 205.475808][ T7301] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 205.523056][ T30] hid_parser_main: 5 callbacks suppressed [ 205.523096][ T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 205.623839][ T30] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 205.940895][ T7326] usb usb7: check_ctrlrecip: process 7326 (syz.2.337) requesting ep 01 but needs 81 [ 205.940926][ T7326] usb usb7: usbfs: process 7326 (syz.2.337) did not claim interface 0 before use [ 206.020673][ T7317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.213074][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 206.252496][ T7338] random: crng reseeded on system resumption [ 206.600507][ T7354] No buffer was provided with the request [ 207.028167][ T7361] usb usb7: usbfs: process 7361 (syz.1.347) did not claim interface 0 before use [ 207.095874][ T30] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 207.248802][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.249291][ T30] usb 3-1: not running at top speed; connect to a high speed hub [ 207.249325][ T30] usb 3-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 207.250313][ T30] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 207.252542][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.252570][ T30] usb 3-1: Product: syz [ 207.252585][ T30] usb 3-1: Manufacturer: syz [ 207.252600][ T30] usb 3-1: SerialNumber: syz [ 207.435758][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 207.590099][ T9] usb 4-1: New USB device found, idVendor=1a61, idProduct=3410, bcdDevice=3f.83 [ 207.591097][ T30] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 207.591267][ T30] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 207.598046][ T9] usb 4-1: config 2 has an invalid interface number: 248 but max is 0 [ 207.598071][ T9] usb 4-1: config 2 has no interface number 0 [ 207.598109][ T9] usb 4-1: config 2 interface 248 altsetting 14 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 207.598136][ T9] usb 4-1: config 2 interface 248 has no altsetting 0 [ 207.603471][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.603498][ T9] usb 4-1: Product: syz [ 207.603512][ T9] usb 4-1: Manufacturer: syz [ 207.603526][ T9] usb 4-1: SerialNumber: syz [ 207.615061][ T7368] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 207.802138][ T30] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 207.833291][ T30] usb 3-1: USB disconnect, device number 16 [ 207.850223][ T9] ti_usb_3410_5052 4-1:2.248: TI USB 3410 1 port adapter converter detected [ 207.850363][ T9] ti_usb_3410_5052 4-1:2.248: missing endpoints [ 207.913544][ T9] usb 4-1: USB disconnect, device number 18 [ 207.963920][ T7297] udevd[7297]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.188852][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 208.637704][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 208.785622][ T5705] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 208.816795][ T7406] usb usb7: usbfs: process 7406 (syz.1.363) did not claim interface 0 before use [ 208.946401][ T5705] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 208.947418][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.947441][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.947453][ T5705] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 208.947478][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.965869][ T5705] usb 4-1: config 0 descriptor?? [ 209.240146][ T9] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 209.388213][ T9] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 209.406181][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.406207][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 209.406261][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 209.448127][ T9] usb 2-1: string descriptor 0 read error: -22 [ 209.448211][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 209.486659][ T5705] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 209.486696][ T5705] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 209.486723][ T5705] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 209.486750][ T5705] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 209.486776][ T5705] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 209.486801][ T5705] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 209.486826][ T5705] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 209.486852][ T5705] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 209.486878][ T5705] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 209.535099][ T9] usb 2-1: 0:2 : does not exist [ 209.595883][ T5705] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 209.785840][ T7400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.911491][ T9] usb-storage 2-1:1.1: USB Mass Storage device detected [ 209.934428][ T5705] usb 4-1: USB disconnect, device number 19 [ 210.049650][ T31] audit: type=1326 audit(1790899297.883:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052779e159 code=0x7ffc0000 [ 210.053393][ T31] audit: type=1326 audit(1790899297.883:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052779e159 code=0x7ffc0000 [ 210.053424][ T31] audit: type=1326 audit(1790899297.883:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052779e159 code=0x7ffc0000 [ 210.053446][ T31] audit: type=1326 audit(1790899297.883:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052779e159 code=0x7ffc0000 [ 210.053467][ T31] audit: type=1326 audit(1790899297.883:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f052779e159 code=0x7ffc0000 [ 210.053506][ T31] audit: type=1326 audit(1790899297.883:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052779e159 code=0x7ffc0000 [ 210.053528][ T31] audit: type=1326 audit(1790899297.883:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052779e159 code=0x7ffc0000 [ 210.055922][ T31] audit: type=1326 audit(1790899297.893:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f052779e159 code=0x7ffc0000 [ 210.056139][ T31] audit: type=1326 audit(1790899297.893:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.367" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f052779e159 code=0x7ffc0000 [ 210.125868][ T1218] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 210.199451][ T9] usb 2-1: us122l: couldn't allocate write buffer [ 210.199841][ T9] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 210.206202][ T9] usb 2-1: USB disconnect, device number 21 [ 210.290776][ T1218] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 210.303806][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.303833][ T1218] usb 5-1: Product: syz [ 210.303847][ T1218] usb 5-1: Manufacturer: syz [ 210.303861][ T1218] usb 5-1: SerialNumber: syz [ 210.612505][ C0] port100 5-1:1.0: NFC: Urb failure (status -71) [ 210.612571][ C0] port100 5-1:1.0: NFC: Urb failure (status -71) [ 210.615628][ T1218] port100 5-1:1.0: NFC: Could not get supported command types [ 210.629303][ T1218] usb 5-1: USB disconnect, device number 20 [ 210.690469][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 211.253836][ T7458] netlink: 72 bytes leftover after parsing attributes in process `syz.0.380'. [ 211.528792][ T7464] tipc: Failed to remove unknown binding: 66,0,0/0:1912337570/1912337571 [ 212.257447][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 212.365544][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 212.365627][ T7486] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 212.381872][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 212.539723][ T31] audit: type=1326 audit(1790899300.373:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7487 comm="syz.4.395" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 212.735202][ T7501] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 212.799351][ T7504] usb usb8: check_ctrlrecip: process 7504 (syz.4.401) requesting ep 01 but needs 81 [ 212.799385][ T7504] usb usb8: usbfs: process 7504 (syz.4.401) did not claim interface 0 before use [ 213.015338][ T7515] usb usb7: usbfs: process 7515 (syz.0.408) did not claim interface 0 before use [ 213.487487][ T1966] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 213.638148][ T1966] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 213.657127][ T1966] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 213.657154][ T1966] usb 5-1: config 0 has no interface number 0 [ 213.668798][ T1966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.668815][ T1966] usb 5-1: Product: syz [ 213.668822][ T1966] usb 5-1: Manufacturer: syz [ 213.668830][ T1966] usb 5-1: SerialNumber: syz [ 213.706939][ T1966] usb 5-1: config 0 descriptor?? [ 213.904074][ T7543] xt_hashlimit: size too large, truncated to 1048576 [ 213.945064][ T1966] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 213.945194][ T1966] uvcvideo 5-1:0.64: No valid video chain found. [ 213.967506][ T1966] usb 5-1: USB disconnect, device number 21 [ 214.796330][ T1218] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 214.946246][ T1218] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 214.948832][ T1218] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 214.948865][ T1218] usb 5-1: config 0 interface 0 has no altsetting 0 [ 214.948895][ T1218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.954550][ T1218] usb 5-1: config 0 descriptor?? [ 214.961783][ T7559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 214.992717][ T7582] futex_wake_op: syz.2.432 tries to shift op by -1; fix this program [ 215.355473][ T1966] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 215.403446][ T1218] waterforce 0003:1044:7A4D.0008: unexpected long global item [ 215.403848][ T1218] waterforce 0003:1044:7A4D.0008: hid parse failed with -22 [ 215.405275][ T1218] waterforce 0003:1044:7A4D.0008: probe with driver waterforce failed with error -22 [ 215.505729][ T1966] usb 3-1: Using ep0 maxpacket: 8 [ 215.507679][ T1966] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 215.507980][ T7605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.444'. [ 215.509113][ T1966] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 215.509144][ T1966] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.509179][ T1966] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.509279][ T1966] usb 3-1: config 168 interface 0 has no altsetting 0 [ 215.511061][ T1966] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 215.511098][ T1966] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.511150][ T1966] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.511177][ T1966] usb 3-1: config 168 interface 0 has no altsetting 0 [ 215.513306][ T1966] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 215.513342][ T1966] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 215.513378][ T1966] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 215.513406][ T1966] usb 3-1: config 168 interface 0 has no altsetting 0 [ 215.594443][ T1218] usb 5-1: USB disconnect, device number 22 [ 215.679675][ T1966] usb 3-1: string descriptor 0 read error: -22 [ 215.679753][ T1966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.713148][ T1966] adutux 3-1:168.0: interrupt endpoints not found [ 215.917362][ T7588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.917647][ T7588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.983125][ T1218] usb 3-1: USB disconnect, device number 17 [ 216.708937][ T7627] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 217.093201][ T7635] netlink: 'syz.2.455': attribute type 1 has an invalid length. [ 217.602951][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 217.716917][ T7649] netlink: 'syz.3.463': attribute type 10 has an invalid length. [ 217.737034][ T5736] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 217.887097][ T5736] usb 5-1: Using ep0 maxpacket: 8 [ 217.888117][ T5736] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 217.889270][ T5736] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 217.889307][ T5736] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 217.889342][ T5736] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 217.889369][ T5736] usb 5-1: config 168 interface 0 has no altsetting 0 [ 217.892968][ T5736] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 217.893004][ T5736] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 217.893038][ T5736] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 217.893065][ T5736] usb 5-1: config 168 interface 0 has no altsetting 0 [ 217.895193][ T5736] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 217.895228][ T5736] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 217.895293][ T5736] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 217.895321][ T5736] usb 5-1: config 168 interface 0 has no altsetting 0 [ 217.902853][ T5736] usb 5-1: string descriptor 0 read error: -22 [ 217.902976][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.957553][ T5736] adutux 5-1:168.0: interrupt endpoints not found [ 218.155944][ T7644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.160847][ T7644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.209281][ T5736] usb 5-1: USB disconnect, device number 23 [ 218.547690][ T7684] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 218.667136][ T7688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.477'. [ 218.667154][ T7688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.477'. [ 218.811365][ T7693] Cannot find del_set index 2 as target [ 218.845971][ T5736] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 218.914247][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 218.914260][ T31] audit: type=1326 audit(1790899306.743:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 218.914292][ T31] audit: type=1326 audit(1790899306.743:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 218.925856][ T31] audit: type=1326 audit(1790899306.753:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 218.925909][ T31] audit: type=1326 audit(1790899306.763:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 218.925946][ T31] audit: type=1326 audit(1790899306.763:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 218.926928][ T31] audit: type=1326 audit(1790899306.763:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 218.928779][ T31] audit: type=1326 audit(1790899306.763:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 218.928819][ T31] audit: type=1326 audit(1790899306.763:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 218.929063][ T31] audit: type=1326 audit(1790899306.763:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 218.929242][ T31] audit: type=1326 audit(1790899306.763:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7700 comm="syz.4.482" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 218.999347][ T5736] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 219.000875][ T5736] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.003626][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.003649][ T5736] usb 4-1: Product: syz [ 219.003663][ T5736] usb 4-1: Manufacturer: syz [ 219.003677][ T5736] usb 4-1: SerialNumber: syz [ 219.225696][ T5736] snd-usb-6fire 4-1:1.0: unable to receive device firmware state. [ 219.225729][ T5736] snd-usb-6fire 4-1:1.0: probe with driver snd-usb-6fire failed with error -121 [ 219.275877][ T7710] sg_write: data in/out 372224/136 bytes for SCSI command 0x0-- guessing data in; [ 219.275877][ T7710] program syz.2.485 not setting count and/or reply_len properly [ 219.385914][ T1218] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 219.442983][ T5694] usb 4-1: USB disconnect, device number 20 [ 219.536669][ T1218] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 219.540206][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.540338][ T1218] usb 5-1: Product: syz [ 219.540381][ T1218] usb 5-1: Manufacturer: syz [ 219.540409][ T1218] usb 5-1: SerialNumber: syz [ 219.544843][ T1218] usb 5-1: config 0 descriptor?? [ 219.656690][ T5736] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 219.754714][ T1218] usb 5-1: USB disconnect, device number 24 [ 219.808829][ T5736] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 219.813076][ T5736] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.836783][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.836810][ T5736] usb 3-1: Product: syz [ 219.836824][ T5736] usb 3-1: Manufacturer: syz [ 219.836838][ T5736] usb 3-1: SerialNumber: syz [ 220.064425][ T5736] snd-usb-6fire 3-1:1.0: invalid firmware version in device: 03 00 00 00. please reconnect to power. if this failure still happens, check your firmware installation. [ 220.064451][ T5736] snd-usb-6fire 3-1:1.0: probe with driver snd-usb-6fire failed with error -22 [ 220.266288][ T1966] usb 3-1: USB disconnect, device number 18 [ 220.755499][ T1966] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 220.916101][ T1966] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.917995][ T1966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.918027][ T1966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.918049][ T1966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.918091][ T1966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.989568][ T1966] usb 2-1: config 0 descriptor?? [ 221.418636][ T1966] hid_parser_main: 6 callbacks suppressed [ 221.418661][ T1966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.418692][ T1966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.418720][ T1966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.418746][ T1966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.418772][ T1966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.418798][ T1966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.418824][ T1966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.418851][ T1966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.418877][ T1966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.423984][ T1966] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 221.521367][ T1966] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 221.657230][ T7731] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 221.785906][ T7775] ip_tables: iptables: counters copy to user failed while replacing table [ 221.952751][ T5736] usb 2-1: USB disconnect, device number 22 [ 222.165511][ T1218] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 222.275555][ T5694] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 222.316123][ T1218] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 222.317198][ T1218] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.317252][ T1218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 222.317267][ T1218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.317294][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.319111][ T1218] usb 3-1: config 0 descriptor?? [ 222.456238][ T5694] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.457331][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.457362][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.457381][ T5694] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.457421][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.460307][ T5694] usb 5-1: config 0 descriptor?? [ 222.675835][ T5705] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 222.800418][ T1218] hid-picolcd 0003:04D8:F002.000A: No report with id 0xf3 found [ 222.800434][ T1218] hid-picolcd 0003:04D8:F002.000A: No report with id 0xf4 found [ 222.836818][ T5705] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 222.837830][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.909138][ T5705] usb 4-1: selecting invalid altsetting 3 [ 222.909163][ T5705] comedi comedi5: could not set alternate setting 3 in high speed [ 222.909180][ T5705] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 222.940953][ T5694] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 222.943582][ T7808] pim6reg: entered allmulticast mode [ 222.947936][ T7807] pim6reg: left allmulticast mode [ 222.971165][ T1966] usb 3-1: USB disconnect, device number 19 [ 222.982844][ T5705] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 223.054123][ T5694] usb 4-1: USB disconnect, device number 21 [ 223.116988][ T7788] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.181120][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 223.249836][ T1966] usb 5-1: USB disconnect, device number 25 [ 223.500572][ T7820] usb usb7: usbfs: process 7820 (syz.2.521) did not claim interface 0 before use [ 223.500712][ T7820] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 223.586376][ T5705] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 223.737673][ T5705] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.738925][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.738957][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.738980][ T5705] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.739021][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.743679][ T5705] usb 2-1: config 0 descriptor?? [ 224.072030][ T7854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.260938][ T5705] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 224.427877][ T7817] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 224.475466][ T5736] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 224.515702][ T5694] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 224.526511][ T1218] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 224.548678][ T5705] usb 2-1: USB disconnect, device number 23 [ 224.626195][ T5736] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.627368][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.627395][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.627407][ T5736] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.627431][ T5736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.630618][ T5736] usb 4-1: config 0 descriptor?? [ 224.669711][ T5694] usb 3-1: Using ep0 maxpacket: 8 [ 224.683865][ T1218] usb 5-1: Using ep0 maxpacket: 8 [ 224.684257][ T5694] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 224.684433][ T1218] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 224.699449][ T1218] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 224.699548][ T1218] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 224.699585][ T1218] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 224.699611][ T1218] usb 5-1: config 168 interface 0 has no altsetting 0 [ 224.719861][ T5694] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 224.719886][ T5694] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 224.719910][ T5694] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 224.719991][ T5694] usb 3-1: config 168 interface 0 has no altsetting 0 [ 224.751896][ T1218] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 224.751980][ T1218] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 224.752014][ T1218] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 224.752040][ T1218] usb 5-1: config 168 interface 0 has no altsetting 0 [ 224.752237][ T5694] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 224.752267][ T5694] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 224.752301][ T5694] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 224.752327][ T5694] usb 3-1: config 168 interface 0 has no altsetting 0 [ 224.754229][ T5694] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 224.754262][ T5694] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 224.754515][ T1218] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 224.754545][ T1218] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 224.754579][ T1218] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 224.754604][ T1218] usb 5-1: config 168 interface 0 has no altsetting 0 [ 224.754755][ T5694] usb 3-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 224.754803][ T5694] usb 3-1: config 168 interface 0 has no altsetting 0 [ 224.763591][ T1218] usb 5-1: string descriptor 0 read error: -22 [ 224.763738][ T1218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.765585][ T5694] usb 3-1: string descriptor 0 read error: -22 [ 224.765708][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.795028][ T5694] adutux 3-1:168.0: interrupt endpoints not found [ 224.796500][ T1218] adutux 5-1:168.0: interrupt endpoints not found [ 224.997391][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.018014][ T7868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.018665][ T7868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.020067][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.069722][ T1966] usb 3-1: USB disconnect, device number 20 [ 225.086037][ T5705] usb 5-1: USB disconnect, device number 26 [ 225.120309][ T5736] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 225.210417][ T7876] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 225.210417][ T7876] The task syz.0.543 (7876) triggered the difference, watch for misbehavior. [ 225.283427][ T7863] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 225.349040][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 225.408322][ T5705] usb 4-1: USB disconnect, device number 22 [ 225.515591][ T5736] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 225.666033][ T5736] usb 2-1: Using ep0 maxpacket: 32 [ 225.670676][ T5736] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.670723][ T5736] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 225.705029][ T5736] usb 2-1: string descriptor 0 read error: -22 [ 225.705165][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.736727][ T5736] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 225.736777][ T5736] dw2102: su3000_power_ctrl: 1, initialized 0 [ 225.742289][ T7885] netlink: 36 bytes leftover after parsing attributes in process `syz.4.549'. [ 225.747897][ T5736] dvb-usb: bulk message failed: -22 (2/0) [ 225.784275][ T5736] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.795703][ T5736] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 225.795759][ T5736] usb 2-1: media controller created [ 225.796115][ T5736] dvb-usb: bulk message failed: -22 (6/0) [ 225.796132][ T5736] dw2102: i2c transfer failed. [ 225.796148][ T5736] dvb-usb: bulk message failed: -22 (6/0) [ 225.796160][ T5736] dw2102: i2c transfer failed. [ 225.796173][ T5736] dvb-usb: bulk message failed: -22 (6/0) [ 225.796185][ T5736] dw2102: i2c transfer failed. [ 225.796198][ T5736] dvb-usb: bulk message failed: -22 (6/0) [ 225.796210][ T5736] dw2102: i2c transfer failed. [ 225.796221][ T5736] dvb-usb: bulk message failed: -22 (6/0) [ 225.796233][ T5736] dw2102: i2c transfer failed. [ 225.796245][ T5736] dvb-usb: bulk message failed: -22 (6/0) [ 225.796256][ T5736] dw2102: i2c transfer failed. [ 225.796264][ T5736] dvb-usb: MAC address: 02:02:02:02:02:02 [ 225.901824][ T5736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.933185][ T5736] dvb-usb: bulk message failed: -22 (3/0) [ 225.933207][ T5736] dw2102: command 0x0e transfer failed. [ 225.933226][ T5736] dvb-usb: bulk message failed: -22 (3/0) [ 225.933240][ T5736] dw2102: command 0x0e transfer failed. [ 226.133358][ T7904] loop5: detected capacity change from 0 to 7 [ 226.148276][ T7904] Dev loop5: unable to read RDB block 7 [ 226.148322][ T7904] loop5: unable to read partition table [ 226.148514][ T7904] loop5: partition table beyond EOD, truncated [ 226.148547][ T7904] loop_reread_partitions: partition scan of loop5 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 226.236820][ T5736] dvb-usb: bulk message failed: -22 (3/0) [ 226.236843][ T5736] dw2102: command 0x0e transfer failed. [ 226.236852][ T5736] dvb-usb: bulk message failed: -22 (3/0) [ 226.236865][ T5736] dw2102: command 0x0e transfer failed. [ 226.236872][ T5736] dvb-usb: bulk message failed: -22 (1/0) [ 226.236883][ T5736] dw2102: command 0x51 transfer failed. [ 226.310579][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 226.344466][ T5736] DVB: Unable to find symbol ds3000_attach() [ 226.344483][ T5736] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 226.449230][ T5736] rc_core: IR keymap rc-su3000 not found [ 226.449248][ T5736] Registered IR keymap rc-empty [ 226.451362][ T5736] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 226.479753][ T5736] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input13 [ 226.485486][ T1966] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 226.506755][ T5736] dvb-usb: schedule remote query interval to 150 msecs. [ 226.506778][ T5736] dw2102: su3000_power_ctrl: 0, initialized 1 [ 226.506790][ T5736] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 226.510754][ T5736] usb 2-1: USB disconnect, device number 24 [ 226.635603][ T1966] usb 4-1: Using ep0 maxpacket: 8 [ 226.639706][ T1966] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 226.640783][ T1966] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 226.640818][ T1966] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 226.640855][ T1966] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 226.640882][ T1966] usb 4-1: config 168 interface 0 has no altsetting 0 [ 226.642036][ T1966] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 226.642069][ T1966] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 226.642105][ T1966] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 226.642131][ T1966] usb 4-1: config 168 interface 0 has no altsetting 0 [ 226.643334][ T1966] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 226.643368][ T1966] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 226.643413][ T1966] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 226.643441][ T1966] usb 4-1: config 168 interface 0 has no altsetting 0 [ 226.648998][ T5736] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 226.676833][ T5705] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 226.699673][ T7929] warning: `syz.4.567' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 226.703882][ T1966] usb 4-1: string descriptor 0 read error: -22 [ 226.704028][ T1966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.821831][ T7933] netlink: 'syz.4.569': attribute type 1 has an invalid length. [ 226.821853][ T7933] netlink: 1 bytes leftover after parsing attributes in process `syz.4.569'. [ 226.865854][ T1966] adutux 4-1:168.0: interrupt endpoints not found [ 226.906720][ T5705] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.908346][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.908374][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.908394][ T5705] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.908430][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.911120][ T5705] usb 3-1: config 0 descriptor?? [ 226.955511][ T5736] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 227.070317][ T7907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.072405][ T7907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.105512][ T5736] usb 2-1: Using ep0 maxpacket: 32 [ 227.106336][ T5736] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 227.107173][ T25] usb 4-1: USB disconnect, device number 23 [ 227.109348][ T5736] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 227.109372][ T5736] usb 2-1: config 0 has no interface number 0 [ 227.111501][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.111524][ T5736] usb 2-1: Product: syz [ 227.111539][ T5736] usb 2-1: Manufacturer: syz [ 227.111552][ T5736] usb 2-1: SerialNumber: syz [ 227.123862][ T5736] usb 2-1: config 0 descriptor?? [ 227.131776][ T5736] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 227.315519][ T1966] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 227.340482][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.342540][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.356593][ T5736] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 227.366652][ T5736] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 227.389422][ T5705] hid_parser_main: 50 callbacks suppressed [ 227.389445][ T5705] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 227.391374][ T5705] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 227.391409][ T5705] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 227.391437][ T5705] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 227.391478][ T5705] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 227.391504][ T5705] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 227.391531][ T5705] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 227.391558][ T5705] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 227.391584][ T5705] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 227.391619][ T5705] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 227.417563][ T7941] netlink: 'syz.0.573': attribute type 12 has an invalid length. [ 227.503327][ T5705] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 227.505481][ T1966] usb 5-1: Using ep0 maxpacket: 8 [ 227.523455][ T1966] usb 5-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00 [ 227.534396][ T1966] usb 5-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 227.534434][ T1966] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 227.534457][ T1966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.534483][ T1966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.614853][ T1966] usb 5-1: config 0 descriptor?? [ 227.718787][ T7920] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.814854][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 227.815524][ T1218] usb 2-1: USB disconnect, device number 25 [ 227.857088][ T1218] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 227.886939][ T1218] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 227.892838][ T1218] quatech2 2-1:0.51: device disconnected [ 228.017810][ T5694] usb 3-1: USB disconnect, device number 21 [ 228.095579][ T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 228.130360][ T1966] nintendo 0003:057E:2017.000F: hidraw0: USB HID v80.01 Device [HID 057e:2017] on usb-dummy_hcd.4-1/input0 [ 228.187946][ T1966] nintendo 0003:057E:2017.000F: Failed to get joycon info; ret=-38 [ 228.187970][ T1966] nintendo 0003:057E:2017.000F: Failed to retrieve controller info; ret=-38 [ 228.187980][ T1966] nintendo 0003:057E:2017.000F: Failed to initialize controller; ret=-38 [ 228.191957][ T1966] nintendo 0003:057E:2017.000F: probe - fail = -38 [ 228.192137][ T1966] nintendo 0003:057E:2017.000F: probe with driver nintendo failed with error -38 [ 228.266157][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 228.266669][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 228.267767][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.267792][ T25] usb 4-1: config 0 has no interface number 0 [ 228.267832][ T25] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.267858][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.271242][ T25] usb 4-1: config 0 descriptor?? [ 228.281390][ T25] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 228.337490][ T25] usb 5-1: USB disconnect, device number 27 [ 228.603458][ T7964] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 228.819420][ T7976] input: syz1 as /devices/virtual/input/input14 [ 228.916773][ T5694] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 228.955997][ T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 229.066272][ T5694] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.067374][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.067398][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.067410][ T5694] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.067433][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.069511][ T5694] usb 2-1: config 0 descriptor?? [ 229.134758][ T25] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 229.144978][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.155863][ T25] usb 3-1: config 0 descriptor?? [ 229.185585][ T1966] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 229.336224][ T1966] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 229.339791][ T1966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.339818][ T1966] usb 5-1: Product: syz [ 229.339832][ T1966] usb 5-1: Manufacturer: syz [ 229.339871][ T1966] usb 5-1: SerialNumber: syz [ 229.378175][ T25] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 229.408429][ T5705] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 229.491300][ T5736] usb 4-1: USB disconnect, device number 24 [ 229.500474][ T5694] plantronics 0003:047F:FFFF.0010: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 229.604852][ T25] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 229.604878][ T25] [drm] Initialized udl on minor 1 [ 229.690257][ T7968] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.748260][ T4944] usb 2-1: USB disconnect, device number 26 [ 230.028044][ T5736] usb 5-1: USB disconnect, device number 28 [ 230.296413][ T4944] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 230.447255][ T4944] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.449078][ T4944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.449108][ T4944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.449152][ T4944] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.449176][ T4944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.456673][ T4944] usb 4-1: config 0 descriptor?? [ 230.487019][ T7999] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 230.685780][ T5705] usb 5-1: Service connection timeout for: 256 [ 230.685804][ T5705] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 230.686756][ T5705] ath9k_htc: Failed to initialize the device [ 230.687189][ T5736] usb 5-1: ath9k_htc: USB layer deinitialized [ 230.940984][ T4944] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 231.055901][ T5736] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 231.146815][ T7989] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 231.206534][ T5736] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.207708][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.207739][ T5736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.207760][ T5736] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.207798][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.212421][ T5736] usb 5-1: config 0 descriptor?? [ 231.328936][ T5694] usb 4-1: USB disconnect, device number 25 [ 231.628814][ T5736] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 231.836178][ T8012] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 231.983970][ T8023] sg_read: process 388 (syz.3.603) changed security contexts after opening file descriptor, this is not allowed. [ 232.001253][ T5736] usb 5-1: USB disconnect, device number 29 [ 232.719899][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 232.719917][ T31] audit: type=1326 audit(1790899320.553:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 232.720178][ T31] audit: type=1326 audit(1790899320.553:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 232.720304][ T31] audit: type=1326 audit(1790899320.553:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 232.810734][ T31] audit: type=1326 audit(1790899320.643:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 232.810851][ T31] audit: type=1326 audit(1790899320.643:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8034 comm="syz.4.609" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c8ad9e159 code=0x7ffc0000 [ 232.902198][ T8039] tipc: Started in network mode [ 232.902222][ T8039] tipc: Node identity , cluster identity 4711 [ 232.902237][ T8039] tipc: Failed to obtain node identity [ 232.902263][ T8039] tipc: Enabling of bearer rejected, failed to enable media [ 233.198943][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.613'. [ 234.145537][ T1218] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 234.175523][ T5736] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 234.296202][ T1218] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.297224][ T1218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.297255][ T1218] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.297278][ T1218] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.297325][ T1218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.300162][ T1218] usb 5-1: config 0 descriptor?? [ 234.365711][ T5736] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 234.365775][ T5736] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 234.368451][ T5736] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.368499][ T5736] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.368548][ T5736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.369851][ T5736] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.369897][ T5736] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.369923][ T5736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.371175][ T5736] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.371221][ T5736] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.371270][ T5736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.372500][ T5736] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.372544][ T5736] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.372569][ T5736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.373860][ T5736] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.373905][ T5736] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.373930][ T5736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.375060][ T5736] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.375105][ T5736] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.375183][ T5736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.448326][ T5736] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.448404][ T5736] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.448431][ T5736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.496617][ T5736] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 234.496670][ T5736] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 234.496722][ T5736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 234.515877][ T31] audit: type=1326 audit(1790899322.343:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3759e159 code=0x7ffc0000 [ 234.515924][ T31] audit: type=1326 audit(1790899322.343:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3759e159 code=0x7ffc0000 [ 234.517183][ T31] audit: type=1326 audit(1790899322.353:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efe3759e159 code=0x7ffc0000 [ 234.598194][ T31] audit: type=1326 audit(1790899322.433:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3759e159 code=0x7ffc0000 [ 234.598350][ T31] audit: type=1326 audit(1790899322.433:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.3.620" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe3759e159 code=0x7ffc0000 [ 234.598893][ T5736] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 234.598918][ T5736] usb 2-1: Product: syz [ 234.598932][ T5736] usb 2-1: Manufacturer: syz [ 234.598950][ T5736] usb 2-1: SerialNumber: syz [ 234.687625][ T25] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 234.688052][ T25] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 234.740553][ T25] usb 3-1: USB disconnect, device number 22 [ 234.748244][ T1966] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 234.812419][ T5736] usb 2-1: config 0 descriptor?? [ 234.839623][ T1218] hid_parser_main: 65 callbacks suppressed [ 234.839648][ T1218] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 234.839677][ T1218] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 234.839700][ T1218] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 234.839724][ T1218] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 234.839760][ T1218] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 234.839786][ T1218] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 234.839811][ T1218] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 234.839836][ T1218] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 234.839861][ T1218] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 234.839885][ T1218] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 234.853417][ T1966] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 234.959177][ T1218] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 234.960506][ T5736] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1 [ 235.033444][ T8055] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 235.136273][ T5736] usb 2-1: USB disconnect, device number 27 [ 235.137165][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 235.137551][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 235.149357][ T5736] yurex 2-1:0.0: USB YUREX #1 now disconnected [ 235.226492][ T8074] vlan2: entered promiscuous mode [ 235.227128][ T8074] bond0: entered promiscuous mode [ 235.227146][ T8074] bond_slave_0: entered promiscuous mode [ 235.227356][ T8074] bond_slave_1: entered promiscuous mode [ 235.227627][ T8074] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 235.320734][ T4944] usb 5-1: USB disconnect, device number 30 [ 236.218952][ T8099] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 236.745426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 236.957978][ T4944] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 237.108639][ T4944] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.109834][ T4944] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.109856][ T4944] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.110845][ T4944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.110868][ T4944] usb 4-1: SerialNumber: syz [ 237.285537][ T1966] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 237.342128][ T4944] usb 4-1: 0:2 : does not exist [ 237.416549][ T4944] usb 4-1: USB disconnect, device number 26 [ 237.456763][ T1966] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.457957][ T1966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.457988][ T1966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.458010][ T1966] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.458050][ T1966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.465624][ T5694] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 237.527572][ T1966] usb 5-1: config 0 descriptor?? [ 237.561254][ T7378] udevd[7378]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.636086][ T5694] usb 2-1: Using ep0 maxpacket: 8 [ 237.636875][ T5694] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 237.638114][ T5694] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 237.638129][ T5694] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.638141][ T5694] usb 2-1: config 1 has no interface number 0 [ 237.638172][ T5694] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 237.638198][ T5694] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 237.638223][ T5694] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 237.640190][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.640205][ T5694] usb 2-1: Product: syz [ 237.640212][ T5694] usb 2-1: Manufacturer: syz [ 237.640220][ T5694] usb 2-1: SerialNumber: syz [ 237.946208][ T1966] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 238.159881][ T8116] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 238.219868][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'. [ 238.268252][ T1966] usb 5-1: USB disconnect, device number 31 [ 238.316293][ T5705] usb 2-1: USB disconnect, device number 28 [ 238.923585][ T8136] input: syz0 as /devices/virtual/input/input15 [ 239.309949][ T1966] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 239.465478][ T1966] usb 2-1: Using ep0 maxpacket: 32 [ 239.557634][ T1966] usb 2-1: unable to get BOS descriptor or descriptor too short [ 239.557687][ T1966] usb 2-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice= 0.40 [ 239.558562][ T1966] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 239.558598][ T1966] usb 2-1: can't read configurations, error -71 [ 239.898829][ T5694] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 239.930631][ T8174] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 240.075846][ T5694] usb 5-1: Using ep0 maxpacket: 32 [ 240.076389][ T5694] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.63 [ 240.078152][ T5694] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 240.078177][ T5694] usb 5-1: config 0 has no interface number 0 [ 240.078215][ T5694] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.078238][ T5694] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 240.078270][ T5694] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.078296][ T5694] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 240.078317][ T5694] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.080313][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.080337][ T5694] usb 5-1: Product: syz [ 240.080351][ T5694] usb 5-1: Manufacturer: syz [ 240.080366][ T5694] usb 5-1: SerialNumber: syz [ 240.083269][ T5694] usb 5-1: config 0 descriptor?? [ 240.199544][ T1218] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 240.217415][ T5694] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input16 [ 240.372770][ T4944] usb 5-1: USB disconnect, device number 32 [ 240.382679][ T1218] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.397089][ T1218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.397122][ T1218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.397144][ T1218] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.397183][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.455154][ T1218] usb 3-1: config 0 descriptor?? [ 240.904552][ T1218] hid_parser_main: 20 callbacks suppressed [ 240.904578][ T1218] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 240.904608][ T1218] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 240.904636][ T1218] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 240.904662][ T1218] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 240.904688][ T1218] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 240.904714][ T1218] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 240.904740][ T1218] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 240.904765][ T1218] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 240.904791][ T1218] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 240.904816][ T1218] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 241.022248][ T1218] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 241.135519][ T5694] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 241.296647][ T5694] usb 2-1: Using ep0 maxpacket: 32 [ 241.298497][ T5694] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 241.299722][ T5694] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 241.302300][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.302325][ T5694] usb 2-1: Product: syz [ 241.302339][ T5694] usb 2-1: Manufacturer: syz [ 241.302353][ T5694] usb 2-1: SerialNumber: syz [ 241.381049][ T1218] wiimote 0005:057E:0306.0016: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 241.412428][ T1218] wiimote 0005:057E:0306.0016: New device registered [ 241.436379][ T5694] snd-ua101 2-1:1.1: sample format descriptor not found [ 241.436408][ T5694] snd-ua101 2-1:1.0: invalid num_altsetting [ 241.605590][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 241.624841][ T4944] usb 2-1: USB disconnect, device number 31 [ 241.666255][ T8216] Invalid option length (234) for dns_resolver key [ 241.768833][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 241.769619][ T5694] usb 3-1: USB disconnect, device number 23 [ 241.771141][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 241.773460][ T9] usb 4-1: config 0 has no interfaces? [ 241.805139][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.805167][ T9] usb 4-1: Product: syz [ 241.805182][ T9] usb 4-1: Manufacturer: syz [ 241.805197][ T9] usb 4-1: SerialNumber: syz [ 241.837078][ T9] usb 4-1: config 0 descriptor?? [ 242.447322][ T5706] wiimote 0005:057E:0306.0016: detected device: Nintendo Wii Remote (Gen 1) [ 242.526125][ T5694] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 242.549981][ T5706] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0016/input/input18 [ 242.573977][ T5706] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0016/input/input19 [ 242.607846][ T5706] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0016/input/input17 [ 242.675470][ T5694] usb 2-1: Using ep0 maxpacket: 8 [ 242.676383][ T5694] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 242.677735][ T5694] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 242.677772][ T5694] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 242.677805][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 242.677827][ T5694] usb 2-1: config 168 interface 0 has no altsetting 0 [ 242.678892][ T5694] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 242.678927][ T5694] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 242.678963][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 242.678990][ T5694] usb 2-1: config 168 interface 0 has no altsetting 0 [ 242.680142][ T5694] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 242.680176][ T5694] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 242.680214][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 242.680242][ T5694] usb 2-1: config 168 interface 0 has no altsetting 0 [ 242.683546][ T5694] usb 2-1: string descriptor 0 read error: -22 [ 242.683683][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.769966][ T8226] wiimote 0005:057E:0306.0016: Remote error 255 on req 255 [ 242.858816][ T5694] adutux 2-1:168.0: interrupt endpoints not found [ 243.064243][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.065303][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.091687][ T4944] usb 2-1: USB disconnect, device number 32 [ 243.187466][ T5694] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 243.335498][ T5694] usb 5-1: Using ep0 maxpacket: 8 [ 243.336279][ T5694] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 243.339440][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.339464][ T5694] usb 5-1: Product: syz [ 243.339478][ T5694] usb 5-1: Manufacturer: syz [ 243.339492][ T5694] usb 5-1: SerialNumber: syz [ 243.345570][ T5694] usb 5-1: config 0 descriptor?? [ 243.392045][ T5694] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 243.575561][ T1218] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 243.642744][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 243.737401][ T1218] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.739279][ T1218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.739311][ T1218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.739334][ T1218] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.739397][ T1218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.743068][ T1218] usb 3-1: config 0 descriptor?? [ 243.894915][ T8262] netlink: 'syz.1.692': attribute type 4 has an invalid length. [ 244.225997][ T1218] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 244.320449][ T1966] usb 4-1: USB disconnect, device number 27 [ 244.337894][ T8226] wiimote 0005:057E:0306.0016: Device removed [ 244.519851][ T8251] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 244.584543][ T5694] gspca_sonixj: reg_w1 err -71 [ 244.584627][ T5694] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 244.602465][ T5694] usb 5-1: USB disconnect, device number 33 [ 244.757756][ T9] usb 3-1: USB disconnect, device number 24 [ 245.135899][ T5705] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 245.295563][ T5705] usb 2-1: Using ep0 maxpacket: 8 [ 245.297110][ T5705] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 245.298128][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.302267][ T5705] usb 2-1: config 0 descriptor?? [ 245.306768][ T5705] usb 2-1: probing VID:PID(0424:012C) [ 245.308976][ T5705] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 245.309001][ T5705] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 245.309019][ T5705] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 245.309036][ T5705] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 245.309058][ T5705] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 245.571473][ T8282] Invalid option length (234) for dns_resolver key [ 245.720904][ T5705] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 245.921860][ T5705] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 246.149158][ T8286] loop5: detected capacity change from 0 to 7 [ 246.154268][ T8286] loop5: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 246.154345][ T8286] loop5: partition table partially beyond EOD, truncated [ 246.155141][ T8286] loop5: p1 size 512 extends beyond EOD, truncated [ 246.227495][ T8286] loop5: p5 size 512 extends beyond EOD, truncated [ 246.229523][ T8286] loop5: p6 size 512 extends beyond EOD, truncated [ 246.231861][ T8286] loop5: p7 size 512 extends beyond EOD, truncated [ 246.245974][ T8286] loop5: p8 size 512 extends beyond EOD, truncated [ 246.249234][ T8286] loop5: p9 size 512 extends beyond EOD, truncated [ 246.253931][ T8286] loop5: p10 size 512 extends beyond EOD, truncated [ 246.258467][ T8286] loop5: p11 size 512 extends beyond EOD, truncated [ 246.264400][ T8286] loop5: p12 size 512 extends beyond EOD, truncated [ 246.268188][ T8286] loop5: p13 size 512 extends beyond EOD, truncated [ 246.271455][ T8286] loop5: p14 size 512 extends beyond EOD, truncated [ 246.274830][ T8286] loop5: p15 size 512 extends beyond EOD, truncated [ 246.284892][ T8286] loop5: p16 size 512 extends beyond EOD, truncated [ 246.293365][ T8286] loop5: p17 size 512 extends beyond EOD, truncated [ 246.299385][ T8286] loop5: p18 size 512 extends beyond EOD, truncated [ 246.301793][ T8286] loop5: p19 size 512 extends beyond EOD, truncated [ 246.305076][ T8286] loop5: p20 size 512 extends beyond EOD, truncated [ 246.310640][ T8286] loop5: p21 size 512 extends beyond EOD, truncated [ 246.313523][ T8286] loop5: p22 size 512 extends beyond EOD, truncated [ 246.315648][ T8286] loop5: p23 size 512 extends beyond EOD, truncated [ 246.318125][ T8286] loop5: p24 size 512 extends beyond EOD, truncated [ 246.325658][ T8286] loop5: p25 size 512 extends beyond EOD, truncated [ 246.328002][ T8286] loop5: p26 size 512 extends beyond EOD, truncated [ 246.330563][ T8286] loop5: p27 size 512 extends beyond EOD, truncated [ 246.340785][ T8286] loop5: p28 size 512 extends beyond EOD, truncated [ 246.342733][ T8286] loop5: p29 size 512 extends beyond EOD, truncated [ 246.349014][ T8286] loop5: p30 size 512 extends beyond EOD, truncated [ 246.351371][ T8286] loop5: p31 size 512 extends beyond EOD, truncated [ 246.353460][ T8286] loop5: p32 size 512 extends beyond EOD, truncated [ 246.355003][ T8286] loop5: p33 size 512 extends beyond EOD, truncated [ 246.357981][ T8286] loop5: p34 size 512 extends beyond EOD, truncated [ 246.360041][ T8286] loop5: p35 size 512 extends beyond EOD, truncated [ 246.363918][ T8286] loop5: p36 size 512 extends beyond EOD, truncated [ 246.367058][ T8286] loop5: p37 size 512 extends beyond EOD, truncated [ 246.370200][ T8286] loop5: p38 size 512 extends beyond EOD, truncated [ 246.373878][ T8286] loop5: p39 size 512 extends beyond EOD, truncated [ 246.376250][ T8286] loop5: p40 size 512 extends beyond EOD, truncated [ 246.377805][ T8286] loop5: p41 size 512 extends beyond EOD, truncated [ 246.380246][ T8286] loop5: p42 size 512 extends beyond EOD, truncated [ 246.383852][ T8286] loop5: p43 size 512 extends beyond EOD, truncated [ 246.390691][ T8286] loop5: p44 size 512 extends beyond EOD, truncated [ 246.400377][ T8286] loop5: p45 size 512 extends beyond EOD, truncated [ 246.403875][ T8286] loop5: p46 size 512 extends beyond EOD, truncated [ 246.409956][ T8286] loop5: p47 size 512 extends beyond EOD, truncated [ 246.413917][ T8286] loop5: p48 size 512 extends beyond EOD, truncated [ 246.418250][ T8286] loop5: p49 size 512 extends beyond EOD, truncated [ 246.420410][ T8286] loop5: p50 size 512 extends beyond EOD, truncated [ 246.422856][ T8286] loop5: p51 size 512 extends beyond EOD, truncated [ 246.427127][ T8286] loop5: p52 size 512 extends beyond EOD, truncated [ 246.428986][ T8286] loop5: p53 size 512 extends beyond EOD, truncated [ 246.431339][ T8286] loop5: p54 size 512 extends beyond EOD, truncated [ 246.433802][ T8286] loop5: p55 size 512 extends beyond EOD, truncated [ 246.436486][ T8286] loop5: p56 size 512 extends beyond EOD, truncated [ 246.438973][ T8286] loop5: p57 size 512 extends beyond EOD, truncated [ 246.441397][ T8286] loop5: p58 size 512 extends beyond EOD, truncated [ 246.443188][ T8286] loop5: p59 size 512 extends beyond EOD, truncated [ 246.446659][ T8286] loop5: p60 size 512 extends beyond EOD, truncated [ 246.449721][ T8286] loop5: p61 size 512 extends beyond EOD, truncated [ 246.457362][ T8286] loop5: p62 size 512 extends beyond EOD, truncated [ 246.463723][ T8286] loop5: p63 size 512 extends beyond EOD, truncated [ 246.466102][ T8286] loop5: p64 size 512 extends beyond EOD, truncated [ 246.468860][ T8286] loop5: p65 size 512 extends beyond EOD, truncated [ 246.471438][ T8286] loop5: p66 size 512 extends beyond EOD, truncated [ 246.476485][ T8286] loop5: p67 size 512 extends beyond EOD, truncated [ 246.478184][ T8286] loop5: p68 size 512 extends beyond EOD, truncated [ 246.480486][ T8286] loop5: p69 size 512 extends beyond EOD, truncated [ 246.484137][ T8286] loop5: p70 size 512 extends beyond EOD, truncated [ 246.486868][ T8286] loop5: p71 size 512 extends beyond EOD, truncated [ 246.489072][ T8286] loop5: p72 size 512 extends beyond EOD, truncated [ 246.491575][ T8286] loop5: p73 size 512 extends beyond EOD, truncated [ 246.493868][ T8286] loop5: p74 size 512 extends beyond EOD, truncated [ 246.496519][ T8286] loop5: p75 size 512 extends beyond EOD, truncated [ 246.498730][ T8286] loop5: p76 size 512 extends beyond EOD, truncated [ 246.506832][ T8286] loop5: p77 size 512 extends beyond EOD, truncated [ 246.508905][ T8286] loop5: p78 size 512 extends beyond EOD, truncated [ 246.511628][ T8286] loop5: p79 size 512 extends beyond EOD, truncated [ 246.513835][ T8286] loop5: p80 size 512 extends beyond EOD, truncated [ 246.520718][ T8286] loop5: p81 size 512 extends beyond EOD, truncated [ 246.530022][ T8286] loop5: p82 size 512 extends beyond EOD, truncated [ 246.534847][ T8286] loop5: p83 size 512 extends beyond EOD, truncated [ 246.540626][ T8286] loop5: p84 size 512 extends beyond EOD, truncated [ 246.557597][ T8286] loop5: p85 size 512 extends beyond EOD, truncated [ 246.561000][ T8286] loop5: p86 size 512 extends beyond EOD, truncated [ 246.567167][ T8286] loop5: p87 size 512 extends beyond EOD, truncated [ 246.570329][ T8286] loop5: p88 size 512 extends beyond EOD, truncated [ 246.576010][ T8286] loop5: p89 size 512 extends beyond EOD, truncated [ 246.589272][ T8286] loop5: p90 size 512 extends beyond EOD, truncated [ 246.592820][ T8286] loop5: p91 size 512 extends beyond EOD, truncated [ 246.598409][ T8286] loop5: p92 size 512 extends beyond EOD, truncated [ 246.601831][ T8286] loop5: p93 size 512 extends beyond EOD, truncated [ 246.608094][ T8286] loop5: p94 size 512 extends beyond EOD, truncated [ 246.611634][ T8286] loop5: p95 size 512 extends beyond EOD, truncated [ 246.613548][ T8286] loop5: p96 size 512 extends beyond EOD, truncated [ 246.624698][ T8286] loop5: p97 size 512 extends beyond EOD, truncated [ 246.629683][ T8286] loop5: p98 size 512 extends beyond EOD, truncated [ 246.639350][ T8286] loop5: p99 size 512 extends beyond EOD, truncated [ 246.650626][ T8286] loop5: p100 size 512 extends beyond EOD, truncated [ 246.656619][ T8286] loop5: p101 size 512 extends beyond EOD, truncated [ 246.661682][ T8286] loop5: p102 size 512 extends beyond EOD, truncated [ 246.667790][ T8286] loop5: p103 size 512 extends beyond EOD, truncated [ 246.672899][ T8286] loop5: p104 size 512 extends beyond EOD, truncated [ 246.678258][ T8286] loop5: p105 size 512 extends beyond EOD, truncated [ 246.682246][ T8286] loop5: p106 size 512 extends beyond EOD, truncated [ 246.690831][ T8286] loop5: p107 size 512 extends beyond EOD, truncated [ 246.698719][ T8286] loop5: p108 size 512 extends beyond EOD, truncated [ 246.713540][ T8286] loop5: p109 size 512 extends beyond EOD, truncated [ 246.717315][ T8286] loop5: p110 size 512 extends beyond EOD, truncated [ 246.721174][ T8286] loop5: p111 size 512 extends beyond EOD, truncated [ 246.724395][ T8286] loop5: p112 size 512 extends beyond EOD, truncated [ 246.730348][ T8286] loop5: p113 size 512 extends beyond EOD, truncated [ 246.735076][ T8286] loop5: p114 size 512 extends beyond EOD, truncated [ 246.740191][ T8286] loop5: p115 size 512 extends beyond EOD, truncated [ 246.743683][ T8286] loop5: p116 size 512 extends beyond EOD, truncated [ 246.748573][ T8286] loop5: p117 size 512 extends beyond EOD, truncated [ 246.756666][ T8286] loop5: p118 size 512 extends beyond EOD, truncated [ 246.759682][ T8286] loop5: p119 size 512 extends beyond EOD, truncated [ 246.776275][ T8286] loop5: p120 size 512 extends beyond EOD, truncated [ 246.793292][ T8286] loop5: p121 size 512 extends beyond EOD, truncated [ 246.816947][ T8286] loop5: p122 size 512 extends beyond EOD, truncated [ 246.827926][ T8286] loop5: p123 size 512 extends beyond EOD, truncated [ 246.835846][ T8286] loop5: p124 size 512 extends beyond EOD, truncated [ 246.846815][ T8286] loop5: p125 size 512 extends beyond EOD, truncated [ 246.859431][ T8286] loop5: p126 size 512 extends beyond EOD, truncated [ 246.863919][ T8286] loop5: p127 size 512 extends beyond EOD, truncated [ 246.869435][ T8286] loop5: p128 size 512 extends beyond EOD, truncated [ 246.874280][ T8286] loop5: p129 size 512 extends beyond EOD, truncated [ 246.879638][ T8286] loop5: p130 size 512 extends beyond EOD, truncated [ 246.886651][ T8286] loop5: p131 size 512 extends beyond EOD, truncated [ 246.890726][ T8286] loop5: p132 size 512 extends beyond EOD, truncated [ 246.894601][ T8286] loop5: p133 size 512 extends beyond EOD, truncated [ 246.900538][ T8286] loop5: p134 size 512 extends beyond EOD, truncated [ 246.904777][ T8286] loop5: p135 size 512 extends beyond EOD, truncated [ 246.919407][ T8286] loop5: p136 size 512 extends beyond EOD, truncated [ 246.924656][ T8286] loop5: p137 size 512 extends beyond EOD, truncated [ 246.931360][ T8286] loop5: p138 size 512 extends beyond EOD, truncated [ 246.938779][ T8286] loop5: p139 size 512 extends beyond EOD, truncated [ 246.947246][ T8286] loop5: p140 size 512 extends beyond EOD, truncated [ 246.961266][ T8286] loop5: p141 size 512 extends beyond EOD, truncated [ 246.973024][ T8286] loop5: p142 size 512 extends beyond EOD, truncated [ 246.988743][ T8286] loop5: p143 size 512 extends beyond EOD, truncated [ 247.004710][ T1966] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 247.007624][ T8286] loop5: p144 size 512 extends beyond EOD, truncated [ 247.014054][ T5705] usb 2-1: USB disconnect, device number 33 [ 247.019260][ T1966] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 247.021181][ T1966] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 247.029017][ T8286] loop5: p145 size 512 extends beyond EOD, truncated [ 247.043891][ T8286] loop5: p146 size 512 extends beyond EOD, truncated [ 247.048610][ T8286] loop5: p147 size 512 extends beyond EOD, truncated [ 247.055167][ T8286] loop5: p148 size 512 extends beyond EOD, truncated [ 247.075291][ T8286] loop5: p149 size 512 extends beyond EOD, truncated [ 247.104551][ T8286] loop5: p150 size 512 extends beyond EOD, truncated [ 247.112978][ T8286] loop5: p151 size 512 extends beyond EOD, truncated [ 247.121760][ T8286] loop5: p152 size 512 extends beyond EOD, truncated [ 247.129859][ T8286] loop5: p153 size 512 extends beyond EOD, truncated [ 247.137703][ T8286] loop5: p154 size 512 extends beyond EOD, truncated [ 247.143457][ T8286] loop5: p155 size 512 extends beyond EOD, truncated [ 247.150020][ T8286] loop5: p156 size 512 extends beyond EOD, truncated [ 247.163475][ T8286] loop5: p157 size 512 extends beyond EOD, truncated [ 247.172839][ T8286] loop5: p158 size 512 extends beyond EOD, truncated [ 247.180746][ T8286] loop5: p159 size 512 extends beyond EOD, truncated [ 247.189647][ T8286] loop5: p160 size 512 extends beyond EOD, truncated [ 247.194604][ T8286] loop5: p161 size 512 extends beyond EOD, truncated [ 247.201925][ T8286] loop5: p162 size 512 extends beyond EOD, truncated [ 247.205001][ T8286] loop5: p163 size 512 extends beyond EOD, truncated [ 247.209397][ T8286] loop5: p164 size 512 extends beyond EOD, truncated [ 247.212898][ T8286] loop5: p165 size 512 extends beyond EOD, truncated [ 247.218108][ T8286] loop5: p166 size 512 extends beyond EOD, truncated [ 247.224085][ T8286] loop5: p167 size 512 extends beyond EOD, truncated [ 247.233774][ T8286] loop5: p168 size 512 extends beyond EOD, truncated [ 247.239467][ T8286] loop5: p169 size 512 extends beyond EOD, truncated [ 247.245080][ T8286] loop5: p170 size 512 extends beyond EOD, truncated [ 247.251272][ T8286] loop5: p171 size 512 extends beyond EOD, truncated [ 247.255161][ T8286] loop5: p172 size 512 extends beyond EOD, truncated [ 247.258678][ T8286] loop5: p173 size 512 extends beyond EOD, truncated [ 247.262074][ T8286] loop5: p174 size 512 extends beyond EOD, truncated [ 247.264748][ T8286] loop5: p175 size 512 extends beyond EOD, truncated [ 247.268278][ T8286] loop5: p176 size 512 extends beyond EOD, truncated [ 247.288513][ T8286] loop5: p177 size 512 extends beyond EOD, truncated [ 247.292416][ T8286] loop5: p178 size 512 extends beyond EOD, truncated [ 247.294054][ T8286] loop5: p179 size 512 extends beyond EOD, truncated [ 247.298683][ T8286] loop5: p180 size 512 extends beyond EOD, truncated [ 247.302936][ T8286] loop5: p181 size 512 extends beyond EOD, truncated [ 247.306687][ T8286] loop5: p182 size 512 extends beyond EOD, truncated [ 247.310193][ T8286] loop5: p183 size 512 extends beyond EOD, truncated [ 247.313749][ T8286] loop5: p184 size 512 extends beyond EOD, truncated [ 247.318099][ T8286] loop5: p185 size 512 extends beyond EOD, truncated [ 247.324352][ T8286] loop5: p186 size 512 extends beyond EOD, truncated [ 247.327170][ T8286] loop5: p187 size 512 extends beyond EOD, truncated [ 247.330145][ T8286] loop5: p188 size 512 extends beyond EOD, truncated [ 247.333185][ T8286] loop5: p189 size 512 extends beyond EOD, truncated [ 247.335077][ T8286] loop5: p190 size 512 extends beyond EOD, truncated [ 247.339533][ T8286] loop5: p191 size 512 extends beyond EOD, truncated [ 247.341670][ T8286] loop5: p192 size 512 extends beyond EOD, truncated [ 247.347416][ T8286] loop5: p193 size 512 extends beyond EOD, truncated [ 247.351283][ T8286] loop5: p194 size 512 extends beyond EOD, truncated [ 247.354866][ T8286] loop5: p195 size 512 extends beyond EOD, truncated [ 247.362105][ T8286] loop5: p196 size 512 extends beyond EOD, truncated [ 247.368206][ T8286] loop5: p197 size 512 extends beyond EOD, truncated [ 247.370074][ T8286] loop5: p198 size 512 extends beyond EOD, truncated [ 247.374995][ T8286] loop5: p199 size 512 extends beyond EOD, truncated [ 247.381550][ T8286] loop5: p200 size 512 extends beyond EOD, truncated [ 247.385016][ T8286] loop5: p201 size 512 extends beyond EOD, truncated [ 247.391099][ T8286] loop5: p202 size 512 extends beyond EOD, truncated [ 247.401511][ T8286] loop5: p203 size 512 extends beyond EOD, truncated [ 247.404552][ T8286] loop5: p204 size 512 extends beyond EOD, truncated [ 247.410070][ T8286] loop5: p205 size 512 extends beyond EOD, truncated [ 247.413193][ T8286] loop5: p206 size 512 extends beyond EOD, truncated [ 247.417378][ T8286] loop5: p207 size 512 extends beyond EOD, truncated [ 247.420729][ T8286] loop5: p208 size 512 extends beyond EOD, truncated [ 247.424301][ T8286] loop5: p209 size 512 extends beyond EOD, truncated [ 247.426886][ T8286] loop5: p210 size 512 extends beyond EOD, truncated [ 247.434058][ T8286] loop5: p211 size 512 extends beyond EOD, truncated [ 247.436436][ T8286] loop5: p212 size 512 extends beyond EOD, truncated [ 247.440420][ T8286] loop5: p213 size 512 extends beyond EOD, truncated [ 247.443554][ T8286] loop5: p214 size 512 extends beyond EOD, truncated [ 247.447458][ T8286] loop5: p215 size 512 extends beyond EOD, truncated [ 247.451934][ T8286] loop5: p216 size 512 extends beyond EOD, truncated [ 247.456207][ T8286] loop5: p217 size 512 extends beyond EOD, truncated [ 247.460385][ T8286] loop5: p218 size 512 extends beyond EOD, truncated [ 247.464258][ T8286] loop5: p219 size 512 extends beyond EOD, truncated [ 247.467190][ T8286] loop5: p220 size 512 extends beyond EOD, truncated [ 247.470896][ T8286] loop5: p221 size 512 extends beyond EOD, truncated [ 247.474981][ T8286] loop5: p222 size 512 extends beyond EOD, truncated [ 247.479446][ T8286] loop5: p223 size 512 extends beyond EOD, truncated [ 247.483449][ T8286] loop5: p224 size 512 extends beyond EOD, truncated [ 247.487424][ ** replaying previous printk message ** [ 247.487424][ T8286] loop5: p225 size 512 extends beyond EOD, truncated [ 247.491459][ T8286] loop5: p226 size 512 extends beyond EOD, truncated [ 247.495080][ T8286] loop5: p227 size 512 extends beyond EOD, truncated [ 247.502237][ T8286] loop5: p228 size 512 extends beyond EOD, truncated [ 247.515696][ T8286] loop5: p229 size 512 extends beyond EOD, truncated [ 247.520162][ T8286] loop5: p230 size 512 extends beyond EOD, truncated [ 247.523662][ T8286] loop5: p231 size 512 extends beyond EOD, truncated [ 247.530696][ T8286] loop5: p232 size 512 extends beyond EOD, truncated [ 247.533766][ T8286] loop5: p233 size 512 extends beyond EOD, truncated [ 247.540960][ T8286] loop5: p234 size 512 extends beyond EOD, truncated [ 247.545672][ T8286] loop5: p235 size 512 extends beyond EOD, truncated [ 247.550513][ T8286] loop5: p236 size 512 extends beyond EOD, truncated [ 247.555769][ T8286] loop5: p237 size 512 extends beyond EOD, truncated [ 247.559754][ T8286] loop5: p238 size 512 extends beyond EOD, truncated [ 247.565760][ T8286] loop5: p239 size 512 extends beyond EOD, truncated [ 247.571631][ T8286] loop5: p240 size 512 extends beyond EOD, truncated [ 247.576733][ T8286] loop5: p241 size 512 extends beyond EOD, truncated [ 247.582529][ T8286] loop5: p242 size 512 extends beyond EOD, truncated [ 247.597043][ T8286] loop5: p243 size 512 extends beyond EOD, truncated [ 247.601536][ T8286] loop5: p244 size 512 extends beyond EOD, truncated [ 247.609986][ T8286] loop5: p245 size 512 extends beyond EOD, truncated [ 247.615289][ T8286] loop5: p246 size 512 extends beyond EOD, truncated [ 247.621710][ T8286] loop5: p247 size 512 extends beyond EOD, truncated [ 247.627868][ T8286] loop5: p248 size 512 extends beyond EOD, truncated [ 247.646433][ T8286] loop5: p249 size 512 extends beyond EOD, truncated [ 247.652458][ T8286] loop5: p250 size 512 extends beyond EOD, truncated [ 247.658810][ T8286] loop5: p251 size 512 extends beyond EOD, truncated [ 247.666962][ T8286] loop5: p252 size 512 extends beyond EOD, truncated [ 247.674120][ T8286] loop5: p253 size 512 extends beyond EOD, truncated [ 247.678331][ T8286] loop5: p254 size 512 extends beyond EOD, truncated [ 247.684903][ T8286] loop5: p255 size 512 extends beyond EOD, truncated [ 247.698920][ T5705] USB vub300 remote SDIO host controller[0] now disconnected [ 247.806875][ C1] [ 248.029472][ C1] ============================= [ 248.034493][ C1] WARNING: suspicious RCU usage [ 248.039907][ C1] syzkaller #0 Tainted: G L [ 248.045964][ C1] ----------------------------- [ 248.050903][ C1] kernel/sched/core.c:9226 Illegal context switch in RCU-sched read-side critical section! [ 248.060916][ C1] [ 248.060916][ C1] other info that might help us debug this: [ 248.060916][ C1] [ 248.071285][ C1] [ 248.071285][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 248.079747][ C1] locks held by syz.0.703/8290: 5, last CPU#1: [ 248.086086][ C1] #0: ffff888028084080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 248.095171][ C1] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 248.104777][ C1] #2: ffff8880341aba98 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 248.115403][ C1] #3: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 248.124921][ C1] #4: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 248.135875][ C1] [ 248.135875][ C1] stack backtrace: [ 248.141972][ C1] CPU: 1 UID: 0 PID: 8290 Comm: syz.0.703 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.152765][ C1] Tainted: [L]=SOFTLOCKUP [ 248.157186][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.167625][ C1] Call Trace: [ 248.170956][ C1] [ 248.174072][ C1] dump_stack_lvl+0xe8/0x150 [ 248.178679][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 248.184161][ C1] __might_resched+0xbb/0x4c0 [ 248.188863][ C1] ? __cancel_work_sync+0x5c/0x110 [ 248.194077][ C1] __cancel_work_sync+0x6d/0x110 [ 248.199207][ C1] mmc_free_host+0x19/0x40 [ 248.203732][ C1] call_timer_fn+0x18d/0x5f0 [ 248.208355][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 248.215218][ C1] ? call_timer_fn+0xd5/0x5f0 [ 248.220093][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 248.225415][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.230951][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 248.237994][ C1] __run_timer_base+0x652/0x8b0 [ 248.242963][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 248.248721][ C1] ? ktime_get+0x1f5/0x220 [ 248.253154][ C1] ? lapic_next_event+0x11/0x20 [ 248.258028][ C1] run_timer_softirq+0xb7/0x170 [ 248.262897][ C1] handle_softirqs+0x226/0x860 [ 248.267675][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 248.272460][ C1] __irq_exit_rcu+0xcb/0x220 [ 248.277061][ C1] irq_exit_rcu+0x9/0x30 [ 248.281317][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 248.286970][ C1] [ 248.289900][ C1] [ 248.292846][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.298834][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x9e/0xb0 [ 248.305691][ C1] Code: 8d 51 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 02 48 c7 44 0a 08 05 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 cc cc cc cc cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 248.325394][ C1] RSP: 0018:ffffc90003967310 EFLAGS: 00000293 [ 248.331475][ C1] RAX: ffffffff8243edd2 RBX: ffffffff8243eb4a RCX: ffff88802e591f40 [ 248.339543][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 248.347515][ C1] RBP: 0000000000000001 R08: ffffffff8243eb4a R09: 0000000000000000 [ 248.355485][ C1] R10: dffffc0000000000 R11: fffff94000328df1 R12: dffffc0000000000 [ 248.363477][ C1] R13: 0000000000000008 R14: 00000000000651be R15: 0000000000000001 [ 248.371470][ C1] ? pfn_valid+0xba/0x490 [ 248.375820][ C1] ? pfn_valid+0xba/0x490 [ 248.380284][ C1] ? pfn_valid+0x342/0x490 [ 248.384725][ C1] pfn_valid+0x342/0x490 [ 248.388976][ C1] page_table_check_clear+0x21/0x500 [ 248.394267][ C1] ? vm_normal_page+0x13c/0x2b0 [ 248.399130][ C1] __zap_vma_range+0x3a12/0x4f80 [ 248.404117][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 248.409422][ C1] ? mas_find+0x6d6/0xcb0 [ 248.413801][ C1] unmap_vmas+0x390/0x550 [ 248.418145][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 248.423174][ C1] ? mas_next_slot+0xc91/0xd70 [ 248.427976][ C1] exit_mmap+0x293/0x9f0 [ 248.432232][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 248.437117][ C1] ? __pfx_exit_aio+0x10/0x10 [ 248.441827][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 248.447046][ C1] __mmput+0x118/0x420 [ 248.451119][ C1] exit_mm+0x18e/0x240 [ 248.455195][ C1] do_exit+0x6cd/0x2360 [ 248.459367][ C1] ? __pfx_do_exit+0x10/0x10 [ 248.463972][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 248.469021][ C1] do_group_exit+0x22d/0x2f0 [ 248.473612][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.478821][ C1] get_signal+0x121b/0x12c0 [ 248.483356][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 248.488912][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 248.494214][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 248.500391][ C1] ? __x64_sys_preadv+0x28b/0x2b0 [ 248.505430][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 248.510803][ C1] ? rcu_is_watching+0x16/0xb0 [ 248.515580][ C1] do_syscall_64+0x328/0x520 [ 248.520176][ C1] ? trace_irq_disable+0x3b/0x140 [ 248.525212][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.531288][ C1] ? clear_bhb_loop+0x70/0xc0 [ 248.535972][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.541876][ C1] RIP: 0033:0x7f052779e159 [ 248.546319][ C1] Code: Unable to access opcode bytes at 0x7f052779e12f. [ 248.553332][ C1] RSP: 002b:00007f05285b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 248.561752][ C1] RAX: fffffffffffffffe RBX: 00007f0527a25fa0 RCX: 00007f052779e159 [ 248.569734][ C1] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 248.577716][ C1] RBP: 00007f052783506b R08: 00000000fffffbff R09: 0000000000000000 [ 248.585783][ C1] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 248.593763][ C1] R13: 00007f0527a26038 R14: 00007f0527a25fa0 R15: 00007f0527b4fa48 [ 248.601752][ C1] [ 248.605710][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 248.605728][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8290, name: syz.0.703 [ 248.605746][ C1] preempt_count: 102, expected: 0 [ 248.605756][ C1] RCU nest depth: 1, expected: 0 [ 248.605767][ C1] locks held by syz.0.703/8290: 5, last CPU#1: [ 248.605782][ C1] #0: ffff888028084080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 248.605846][ C1] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 248.605900][ C1] #2: ffff8880341aba98 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 248.605965][ C1] #3: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 248.606015][ C1] #4: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 248.606073][ C1] Preemption disabled at: [ 248.606079][ C1] [<0000000000000000>] 0x0 [ 248.606108][ C1] CPU: 1 UID: 0 PID: 8290 Comm: syz.0.703 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.606137][ C1] Tainted: [L]=SOFTLOCKUP [ 248.606154][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.606166][ C1] Call Trace: [ 248.606174][ C1] [ 248.606182][ C1] dump_stack_lvl+0xe8/0x150 [ 248.606212][ C1] __might_resched+0x36a/0x4c0 [ 248.606249][ C1] __cancel_work_sync+0x6d/0x110 [ 248.606281][ C1] mmc_free_host+0x19/0x40 [ 248.606306][ C1] call_timer_fn+0x18d/0x5f0 [ 248.606333][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 248.606365][ C1] ? call_timer_fn+0xd5/0x5f0 [ 248.606390][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 248.606425][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.606450][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 248.606485][ C1] __run_timer_base+0x652/0x8b0 [ 248.606524][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 248.606552][ C1] ? ktime_get+0x1f5/0x220 [ 248.606575][ C1] ? lapic_next_event+0x11/0x20 [ 248.606603][ C1] run_timer_softirq+0xb7/0x170 [ 248.606628][ C1] handle_softirqs+0x226/0x860 [ 248.606658][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 248.606692][ C1] __irq_exit_rcu+0xcb/0x220 [ 248.606719][ C1] irq_exit_rcu+0x9/0x30 [ 248.606743][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 248.606771][ C1] [ 248.606778][ C1] [ 248.606786][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.606809][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x9e/0xb0 [ 248.606833][ C1] Code: 8d 51 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 02 48 c7 44 0a 08 05 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 cc cc cc cc cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 248.606851][ C1] RSP: 0018:ffffc90003967310 EFLAGS: 00000293 [ 248.606869][ C1] RAX: ffffffff8243edd2 RBX: ffffffff8243eb4a RCX: ffff88802e591f40 [ 248.606885][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 248.606897][ C1] RBP: 0000000000000001 R08: ffffffff8243eb4a R09: 0000000000000000 [ 248.606910][ C1] R10: dffffc0000000000 R11: fffff94000328df1 R12: dffffc0000000000 [ 248.606925][ C1] R13: 0000000000000008 R14: 00000000000651be R15: 0000000000000001 [ 248.606943][ C1] ? pfn_valid+0xba/0x490 [ 248.606967][ C1] ? pfn_valid+0xba/0x490 [ 248.606989][ C1] ? pfn_valid+0x342/0x490 [ 248.607016][ C1] pfn_valid+0x342/0x490 [ 248.607042][ C1] page_table_check_clear+0x21/0x500 [ 248.607065][ C1] ? vm_normal_page+0x13c/0x2b0 [ 248.607092][ C1] __zap_vma_range+0x3a12/0x4f80 [ 248.607171][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 248.607207][ C1] ? mas_find+0x6d6/0xcb0 [ 248.607240][ C1] unmap_vmas+0x390/0x550 [ 248.607272][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 248.607294][ C1] ? mas_next_slot+0xc91/0xd70 [ 248.607344][ C1] exit_mmap+0x293/0x9f0 [ 248.607376][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 248.607428][ C1] ? __pfx_exit_aio+0x10/0x10 [ 248.607459][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 248.607493][ C1] __mmput+0x118/0x420 [ 248.607521][ C1] exit_mm+0x18e/0x240 [ 248.607544][ C1] do_exit+0x6cd/0x2360 [ 248.607574][ C1] ? __pfx_do_exit+0x10/0x10 [ 248.607598][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 248.607636][ C1] do_group_exit+0x22d/0x2f0 [ 248.607656][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.607684][ C1] get_signal+0x121b/0x12c0 [ 248.607731][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 248.607762][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 248.607790][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 248.607826][ C1] ? __x64_sys_preadv+0x28b/0x2b0 [ 248.607856][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 248.607880][ C1] ? rcu_is_watching+0x16/0xb0 [ 248.607910][ C1] do_syscall_64+0x328/0x520 [ 248.607937][ C1] ? trace_irq_disable+0x3b/0x140 [ 248.607958][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.607980][ C1] ? clear_bhb_loop+0x70/0xc0 [ 248.608005][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.608025][ C1] RIP: 0033:0x7f052779e159 [ 248.608043][ C1] Code: Unable to access opcode bytes at 0x7f052779e12f. [ 248.608054][ C1] RSP: 002b:00007f05285b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 248.608073][ C1] RAX: fffffffffffffffe RBX: 00007f0527a25fa0 RCX: 00007f052779e159 [ 248.608088][ C1] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 248.608102][ C1] RBP: 00007f052783506b R08: 00000000fffffbff R09: 0000000000000000 [ 248.608115][ C1] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 248.608128][ C1] R13: 00007f0527a26038 R14: 00007f0527a25fa0 R15: 00007f0527b4fa48 [ 248.608166][ C1] [ 248.608828][ C1] [ 248.992507][ T7378] udevd[7378]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 249.109205][ T7378] udevd[7378]: inotify_add_watch(7, /dev/loop5p12, 10) failed: No such file or directory [ 249.132783][ T7378] udevd[7378]: inotify_add_watch(7, /dev/loop5p13, 10) failed: No such file or directory [ 249.156522][ T8299] udevd[8299]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 249.161031][ T7378] udevd[7378]: inotify_add_watch(7, /dev/loop5p14, 10) failed: No such file or directory [ 249.186664][ T8299] udevd[8299]: inotify_add_watch(7, /dev/loop5p15, 10) failed: No such file or directory [ 249.207074][ T7378] udevd[7378]: inotify_add_watch(7, /dev/loop5p16, 10) failed: No such file or directory [ 249.224677][ T8299] udevd[8299]: inotify_add_watch(7, /dev/loop5p17, 10) failed: No such file or directory [ 249.229902][ T8301] udevd[8301]: inotify_add_watch(7, /dev/loop5p9, 10) failed: No such file or directory [ 249.234186][ T7378] udevd[7378]: inotify_add_watch(7, /dev/loop5p18, 10) failed: No such file or directory [ 249.255264][ C1] ============================= [ 249.260176][ C1] WARNING: suspicious RCU usage [ 249.265038][ C1] syzkaller #0 Tainted: G W L [ 249.271077][ C1] ----------------------------- [ 249.275964][ C1] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 249.288125][ C1] [ 249.288125][ C1] other info that might help us debug this: [ 249.288125][ C1] [ 249.298414][ C1] [ 249.298414][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 249.306545][ C1] locks held by syz.0.703/8290: 5, last CPU#1: [ 249.312752][ C1] #0: ffff888028084080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 249.321895][ C1] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 249.331471][ C1] #2: ffff8880341aba98 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 249.342028][ C1] #3: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 249.351511][ C1] #4: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 249.362055][ C1] [ 249.362055][ C1] stack backtrace: [ 249.367993][ C1] CPU: 1 UID: 0 PID: 8290 Comm: syz.0.703 Tainted: G W L syzkaller #0 PREEMPT(full) [ 249.378756][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 249.383943][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.394091][ C1] Call Trace: [ 249.397379][ C1] [ 249.400234][ C1] dump_stack_lvl+0xe8/0x150 [ 249.404849][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 249.410243][ C1] __synchronize_srcu+0x157/0x2f0 [ 249.415279][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 249.420827][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 249.425892][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 249.431720][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 249.437283][ C1] ? synchronize_srcu+0x20a/0x260 [ 249.442326][ C1] wakeup_source_unregister+0x129/0x3f0 [ 249.447893][ C1] mmc_host_classdev_release+0x47/0x100 [ 249.453466][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 249.459660][ C1] device_release+0xc4/0x1f0 [ 249.464280][ C1] kobject_put+0x222/0x550 [ 249.468705][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 249.473570][ C1] call_timer_fn+0x18d/0x5f0 [ 249.478185][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 249.484878][ C1] ? call_timer_fn+0xd5/0x5f0 [ 249.489565][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 249.494750][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.500051][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 249.506745][ C1] __run_timer_base+0x652/0x8b0 [ 249.511632][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 249.517017][ C1] ? ktime_get+0x1f5/0x220 [ 249.521448][ C1] ? lapic_next_event+0x11/0x20 [ 249.526335][ C1] run_timer_softirq+0xb7/0x170 [ 249.531294][ C1] handle_softirqs+0x226/0x860 [ 249.536078][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 249.540956][ C1] __irq_exit_rcu+0xcb/0x220 [ 249.545573][ C1] irq_exit_rcu+0x9/0x30 [ 249.550260][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 249.555915][ C1] [ 249.558848][ C1] [ 249.561782][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.567818][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x9e/0xb0 [ 249.574684][ C1] Code: 8d 51 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 02 48 c7 44 0a 08 05 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 cc cc cc cc cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 249.594661][ C1] RSP: 0018:ffffc90003967310 EFLAGS: 00000293 [ 249.600831][ C1] RAX: ffffffff8243edd2 RBX: ffffffff8243eb4a RCX: ffff88802e591f40 [ 249.608985][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 249.616976][ C1] RBP: 0000000000000001 R08: ffffffff8243eb4a R09: 0000000000000000 [ 249.625221][ C1] R10: dffffc0000000000 R11: fffff94000328df1 R12: dffffc0000000000 [ 249.633199][ C1] R13: 0000000000000008 R14: 00000000000651be R15: 0000000000000001 [ 249.641191][ C1] ? pfn_valid+0xba/0x490 [ 249.645546][ C1] ? pfn_valid+0xba/0x490 [ 249.649887][ C1] ? pfn_valid+0x342/0x490 [ 249.654326][ C1] pfn_valid+0x342/0x490 [ 249.658591][ C1] page_table_check_clear+0x21/0x500 [ 249.663894][ C1] ? vm_normal_page+0x13c/0x2b0 [ 249.668764][ C1] __zap_vma_range+0x3a12/0x4f80 [ 249.673847][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 249.679175][ C1] ? mas_find+0x6d6/0xcb0 [ 249.683525][ C1] unmap_vmas+0x390/0x550 [ 249.687877][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 249.692735][ C1] ? mas_next_slot+0xc91/0xd70 [ 249.697544][ C1] exit_mmap+0x293/0x9f0 [ 249.701811][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 249.706611][ C1] ? __pfx_exit_aio+0x10/0x10 [ 249.711312][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 249.716537][ C1] __mmput+0x118/0x420 [ 249.720712][ C1] exit_mm+0x18e/0x240 [ 249.724807][ C1] do_exit+0x6cd/0x2360 [ 249.728981][ C1] ? __pfx_do_exit+0x10/0x10 [ 249.733587][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 249.738644][ C1] do_group_exit+0x22d/0x2f0 [ 249.743251][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.748478][ C1] get_signal+0x121b/0x12c0 [ 249.753020][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 249.758589][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 249.763896][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 249.770169][ C1] ? __x64_sys_preadv+0x28b/0x2b0 [ 249.775233][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 249.780754][ C1] ? rcu_is_watching+0x16/0xb0 [ 249.785551][ C1] do_syscall_64+0x328/0x520 [ 249.790161][ C1] ? trace_irq_disable+0x3b/0x140 [ 249.795211][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.801298][ C1] ? clear_bhb_loop+0x70/0xc0 [ 249.805998][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.811914][ C1] RIP: 0033:0x7f052779e159 [ 249.816339][ C1] Code: Unable to access opcode bytes at 0x7f052779e12f. [ 249.823360][ C1] RSP: 002b:00007f05285b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 249.831785][ C1] RAX: fffffffffffffffe RBX: 00007f0527a25fa0 RCX: 00007f052779e159 [ 249.839772][ C1] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 249.847750][ C1] RBP: 00007f052783506b R08: 00000000fffffbff R09: 0000000000000000 [ 249.855730][ C1] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 249.863746][ C1] R13: 00007f0527a26038 R14: 00007f0527a25fa0 R15: 00007f0527b4fa48 [ 249.871751][ C1] [ 249.874858][ ** replaying previous printk message ** [ 249.874858][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 249.874876][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8290, name: syz.0.703 [ 249.874895][ C1] preempt_count: 102, expected: 0 [ 249.874907][ C1] RCU nest depth: 1, expected: 0 [ 249.874918][ C1] locks held by syz.0.703/8290: 5, last CPU#1: [ 249.874934][ C1] #0: ffff888028084080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 249.875002][ C1] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 249.875052][ C1] #2: ffff8880341aba98 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 249.875112][ C1] #3: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 249.875162][ C1] #4: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 249.875215][ C1] Preemption disabled at: [ 249.875221][ C1] [<0000000000000000>] 0x0 [ 249.875247][ C1] CPU: 1 UID: 0 PID: 8290 Comm: syz.0.703 Tainted: G W L syzkaller #0 PREEMPT(full) [ 249.875278][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 249.875287][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.875298][ C1] Call Trace: [ 249.875307][ C1] [ 249.875315][ C1] dump_stack_lvl+0xe8/0x150 [ 249.875345][ C1] __might_resched+0x36a/0x4c0 [ 249.875386][ C1] __synchronize_srcu+0x1a1/0x2f0 [ 249.875410][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 249.875428][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 249.875474][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 249.875498][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 249.875520][ C1] ? synchronize_srcu+0x20a/0x260 [ 249.875545][ C1] wakeup_source_unregister+0x129/0x3f0 [ 249.875575][ C1] mmc_host_classdev_release+0x47/0x100 [ 249.875602][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 249.875627][ C1] device_release+0xc4/0x1f0 [ 249.875657][ C1] kobject_put+0x222/0x550 [ 249.875678][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 249.875707][ C1] call_timer_fn+0x18d/0x5f0 [ 249.875732][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 249.875759][ C1] ? call_timer_fn+0xd5/0x5f0 [ 249.875781][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 249.875818][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.875842][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 249.875878][ C1] __run_timer_base+0x652/0x8b0 [ 249.875915][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 249.875944][ C1] ? ktime_get+0x1f5/0x220 [ 249.875966][ C1] ? lapic_next_event+0x11/0x20 [ 249.875994][ C1] run_timer_softirq+0xb7/0x170 [ 249.876018][ C1] handle_softirqs+0x226/0x860 [ 249.876050][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 249.876083][ C1] __irq_exit_rcu+0xcb/0x220 [ 249.876111][ C1] irq_exit_rcu+0x9/0x30 [ 249.876135][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 249.876162][ C1] [ 249.876170][ C1] [ 249.876178][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.876200][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x9e/0xb0 [ 249.876223][ C1] Code: 8d 51 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 02 48 c7 44 0a 08 05 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 cc cc cc cc cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 249.876240][ C1] RSP: 0018:ffffc90003967310 EFLAGS: 00000293 [ 249.876258][ C1] RAX: ffffffff8243edd2 RBX: ffffffff8243eb4a RCX: ffff88802e591f40 [ 249.876274][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 249.876286][ C1] RBP: 0000000000000001 R08: ffffffff8243eb4a R09: 0000000000000000 [ 249.876298][ C1] R10: dffffc0000000000 R11: fffff94000328df1 R12: dffffc0000000000 [ 249.876312][ C1] R13: 0000000000000008 R14: 00000000000651be R15: 0000000000000001 [ 249.876326][ C1] ? pfn_valid+0xba/0x490 [ 249.876351][ C1] ? pfn_valid+0xba/0x490 [ 249.876371][ C1] ? pfn_valid+0x342/0x490 [ 249.876400][ C1] pfn_valid+0x342/0x490 [ 249.876427][ C1] page_table_check_clear+0x21/0x500 [ 249.876460][ C1] ? vm_normal_page+0x13c/0x2b0 [ 249.876487][ C1] __zap_vma_range+0x3a12/0x4f80 [ 249.876558][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 249.876592][ C1] ? mas_find+0x6d6/0xcb0 [ 249.876622][ C1] unmap_vmas+0x390/0x550 [ 249.876654][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 249.876675][ C1] ? mas_next_slot+0xc91/0xd70 [ 249.876728][ C1] exit_mmap+0x293/0x9f0 [ 249.876761][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 249.876813][ C1] ? __pfx_exit_aio+0x10/0x10 [ 249.876846][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 249.876879][ C1] __mmput+0x118/0x420 [ 249.876905][ C1] exit_mm+0x18e/0x240 [ 249.876928][ C1] do_exit+0x6cd/0x2360 [ 249.876957][ C1] ? __pfx_do_exit+0x10/0x10 [ 249.876980][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 249.877015][ C1] do_group_exit+0x22d/0x2f0 [ 249.877034][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.877061][ C1] get_signal+0x121b/0x12c0 [ 249.877106][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 249.877136][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 249.877163][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 249.877198][ C1] ? __x64_sys_preadv+0x28b/0x2b0 [ 249.877229][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 249.877252][ C1] ? rcu_is_watching+0x16/0xb0 [ 249.877281][ C1] do_syscall_64+0x328/0x520 [ 249.877306][ C1] ? trace_irq_disable+0x3b/0x140 [ 249.877327][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.877347][ C1] ? clear_bhb_loop+0x70/0xc0 [ 249.877371][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.877389][ C1] RIP: 0033:0x7f052779e159 [ 249.877403][ C1] Code: Unable to access opcode bytes at 0x7f052779e12f. [ 249.877413][ C1] RSP: 002b:00007f05285b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 249.877431][ C1] RAX: fffffffffffffffe RBX: 00007f0527a25fa0 RCX: 00007f052779e159 [ 249.877442][ C1] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 249.877460][ C1] RBP: 00007f052783506b R08: 00000000fffffbff R09: 0000000000000000 [ 249.877470][ C1] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 249.877479][ C1] R13: 00007f0527a26038 R14: 00007f0527a25fa0 R15: 00007f0527b4fa48 [ 249.877502][ C1] [ 249.877567][ C1] ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc90003960000, but annotated. [ 249.878227][ C1] ------------[ cut here ]------------ [ 249.878236][ C1] 1 [ 249.878246][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz.0.703/8290 [ 250.505560][ C1] Modules linked in: [ 250.509455][ C1] CPU: 1 UID: 0 PID: 8290 Comm: syz.0.703 Tainted: G W L syzkaller #0 PREEMPT(full) [ 250.520560][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 250.525763][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.535805][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 250.541697][ C1] Code: cc cc cc 41 ff c7 44 89 3d 89 3e e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd a0 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 a9 6d 0a 3b 05 9f [ 250.561645][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 250.567878][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 12303bfe5ef7dc00 [ 250.575859][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 250.583912][ C1] RBP: ffff88802e591f60 R08: 0000000000000100 R09: 0000000000000001 [ 250.591964][ C1] R10: dffffc0000000000 R11: fffff520001430b9 R12: ffff88805a53a3d0 [ 250.599933][ C1] R13: ffff88802aec9850 R14: dffffc0000000000 R15: 0000000000000001 [ 250.607994][ C1] FS: 0000000000000000(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000 [ 250.616931][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.623600][ C1] CR2: 000000110c4280bf CR3: 000000005d6ea000 CR4: 00000000003526f0 [ 250.631568][ C1] Call Trace: [ 250.634843][ C1] [ 250.637767][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 250.643338][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 250.648447][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 250.653981][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.659184][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 250.665022][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 250.670585][ C1] ? synchronize_srcu+0x20a/0x260 [ 250.675697][ C1] wakeup_source_unregister+0x129/0x3f0 [ 250.681246][ C1] mmc_host_classdev_release+0x47/0x100 [ 250.686789][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 250.692937][ C1] device_release+0xc4/0x1f0 [ 250.697530][ C1] kobject_put+0x222/0x550 [ 250.701935][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 250.706876][ C1] call_timer_fn+0x18d/0x5f0 [ 250.711635][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 250.718497][ C1] ? call_timer_fn+0xd5/0x5f0 [ 250.723184][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 250.728488][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.733677][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 250.740358][ C1] __run_timer_base+0x652/0x8b0 [ 250.745216][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 250.750580][ C1] ? ktime_get+0x1f5/0x220 [ 250.754993][ C1] ? lapic_next_event+0x11/0x20 [ 250.759864][ C1] run_timer_softirq+0xb7/0x170 [ 250.764710][ C1] handle_softirqs+0x226/0x860 [ 250.769495][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 250.774316][ C1] __irq_exit_rcu+0xcb/0x220 [ 250.778932][ C1] irq_exit_rcu+0x9/0x30 [ 250.783777][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 250.789405][ C1] [ 250.792422][ C1] [ 250.796530][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 250.803572][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x9e/0xb0 [ 250.810746][ C1] Code: 8d 51 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 02 48 c7 44 0a 08 05 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 cc cc cc cc cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 250.830794][ C1] RSP: 0018:ffffc90003967310 EFLAGS: 00000293 [ 250.836905][ C1] RAX: ffffffff8243edd2 RBX: ffffffff8243eb4a RCX: ffff88802e591f40 [ 250.844885][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 250.852857][ C1] RBP: 0000000000000001 R08: ffffffff8243eb4a R09: 0000000000000000 [ 250.860819][ C1] R10: dffffc0000000000 R11: fffff94000328df1 R12: dffffc0000000000 [ 250.868785][ C1] R13: 0000000000000008 R14: 00000000000651be R15: 0000000000000001 [ 250.876778][ C1] ? pfn_valid+0xba/0x490 [ 250.881105][ C1] ? pfn_valid+0xba/0x490 [ 250.885423][ C1] ? pfn_valid+0x342/0x490 [ 250.889838][ C1] pfn_valid+0x342/0x490 [ 250.894078][ C1] page_table_check_clear+0x21/0x500 [ 250.899354][ C1] ? vm_normal_page+0x13c/0x2b0 [ 250.904204][ C1] __zap_vma_range+0x3a12/0x4f80 [ 250.909171][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 250.914541][ C1] ? mas_find+0x6d6/0xcb0 [ 250.918879][ C1] unmap_vmas+0x390/0x550 [ 250.923729][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 250.928565][ C1] ? mas_next_slot+0xc91/0xd70 [ 250.933354][ C1] exit_mmap+0x293/0x9f0 [ 250.937700][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 250.942563][ C1] ? __pfx_exit_aio+0x10/0x10 [ 250.947235][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 250.952518][ C1] __mmput+0x118/0x420 [ 250.956579][ C1] exit_mm+0x18e/0x240 [ 250.960642][ C1] do_exit+0x6cd/0x2360 [ 250.964792][ C1] ? __pfx_do_exit+0x10/0x10 [ 250.969547][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.974590][ C1] do_group_exit+0x22d/0x2f0 [ 250.979168][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 250.984359][ C1] get_signal+0x121b/0x12c0 [ 250.988870][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 250.994504][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 250.999783][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 251.005956][ C1] ? __x64_sys_preadv+0x28b/0x2b0 [ 251.010978][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 251.016345][ C1] ? rcu_is_watching+0x16/0xb0 [ 251.021380][ C1] do_syscall_64+0x328/0x520 [ 251.026056][ C1] ? trace_irq_disable+0x3b/0x140 [ 251.031070][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.037123][ C1] ? clear_bhb_loop+0x70/0xc0 [ 251.041799][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.047678][ C1] RIP: 0033:0x7f052779e159 [ 251.052098][ C1] Code: Unable to access opcode bytes at 0x7f052779e12f. [ 251.059278][ C1] RSP: 002b:00007f05285b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 251.067706][ C1] RAX: fffffffffffffffe RBX: 00007f0527a25fa0 RCX: 00007f052779e159 [ 251.076128][ C1] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 251.084092][ C1] RBP: 00007f052783506b R08: 00000000fffffbff R09: 0000000000000000 [ 251.092054][ C1] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 251.100790][ C1] R13: 00007f0527a26038 R14: 00007f0527a25fa0 R15: 00007f0527b4fa48 [ 251.108763][ C1] [ 251.111791][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 251.119075][ C1] CPU: 1 UID: 0 PID: 8290 Comm: syz.0.703 Tainted: G W L syzkaller #0 PREEMPT(full) [ 251.129912][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 251.135106][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.145164][ C1] Call Trace: [ 251.148453][ C1] [ 251.151285][ C1] vpanic+0x56d/0xa60 [ 251.155270][ C1] ? __pfx__printk+0x10/0x10 [ 251.159851][ C1] ? __pfx_vpanic+0x10/0x10 [ 251.164357][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 251.169667][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 251.174873][ C1] panic+0xc5/0xd0 [ 251.178598][ C1] ? __pfx_panic+0x10/0x10 [ 251.183025][ C1] __warn+0x315/0x4c0 [ 251.187454][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 251.193045][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 251.198778][ C1] __report_bug+0x276/0x570 [ 251.205074][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 251.210991][ C1] ? __pfx___report_bug+0x10/0x10 [ 251.216672][ C1] ? __wake_up_klogd+0xf0/0x130 [ 251.221638][ C1] ? vprintk_emit+0x4ee/0x560 [ 251.226575][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 251.231706][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 251.237186][ C1] report_bug+0x16b/0x220 [ 251.241546][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 251.246854][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 251.252143][ C1] handle_bug+0x9c/0x200 [ 251.256409][ C1] exc_invalid_op+0x1a/0x50 [ 251.260916][ C1] asm_exc_invalid_op+0x1a/0x20 [ 251.265759][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 251.271736][ C1] Code: cc cc cc 41 ff c7 44 89 3d 89 3e e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd a0 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 a9 6d 0a 3b 05 9f [ 251.291511][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 251.297589][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 12303bfe5ef7dc00 [ 251.305983][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 251.314028][ C1] RBP: ffff88802e591f60 R08: 0000000000000100 R09: 0000000000000001 [ 251.321987][ C1] R10: dffffc0000000000 R11: fffff520001430b9 R12: ffff88805a53a3d0 [ 251.330132][ C1] R13: ffff88802aec9850 R14: dffffc0000000000 R15: 0000000000000001 [ 251.338107][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 251.343395][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 251.348936][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 251.354053][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 251.359618][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 251.364656][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 251.370461][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 251.376177][ C1] ? synchronize_srcu+0x20a/0x260 [ 251.381196][ C1] wakeup_source_unregister+0x129/0x3f0 [ 251.386742][ C1] mmc_host_classdev_release+0x47/0x100 [ 251.392284][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 251.398956][ C1] device_release+0xc4/0x1f0 [ 251.403546][ C1] kobject_put+0x222/0x550 [ 251.407981][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 251.412745][ C1] call_timer_fn+0x18d/0x5f0 [ 251.417330][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 251.424000][ C1] ? call_timer_fn+0xd5/0x5f0 [ 251.428669][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 251.433795][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.439007][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 251.445716][ C1] __run_timer_base+0x652/0x8b0 [ 251.450584][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 251.456564][ C1] ? ktime_get+0x1f5/0x220 [ 251.460975][ C1] ? lapic_next_event+0x11/0x20 [ 251.465820][ C1] run_timer_softirq+0xb7/0x170 [ 251.470671][ C1] handle_softirqs+0x226/0x860 [ 251.475431][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 251.480190][ C1] __irq_exit_rcu+0xcb/0x220 [ 251.484770][ C1] irq_exit_rcu+0x9/0x30 [ 251.489001][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 251.494716][ C1] [ 251.497636][ C1] [ 251.500556][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 251.506525][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x9e/0xb0 [ 251.513364][ C1] Code: 8d 51 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 02 48 c7 44 0a 08 05 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 cc cc cc cc cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 251.533062][ C1] RSP: 0018:ffffc90003967310 EFLAGS: 00000293 [ 251.539119][ C1] RAX: ffffffff8243edd2 RBX: ffffffff8243eb4a RCX: ffff88802e591f40 [ 251.547079][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 251.555055][ C1] RBP: 0000000000000001 R08: ffffffff8243eb4a R09: 0000000000000000 [ 251.563018][ C1] R10: dffffc0000000000 R11: fffff94000328df1 R12: dffffc0000000000 [ 251.571040][ C1] R13: 0000000000000008 R14: 00000000000651be R15: 0000000000000001 [ 251.579000][ C1] ? pfn_valid+0xba/0x490 [ 251.583322][ C1] ? pfn_valid+0xba/0x490 [ 251.587642][ C1] ? pfn_valid+0x342/0x490 [ 251.592055][ C1] pfn_valid+0x342/0x490 [ 251.596289][ C1] page_table_check_clear+0x21/0x500 [ 251.601649][ C1] ? vm_normal_page+0x13c/0x2b0 [ 251.606492][ C1] __zap_vma_range+0x3a12/0x4f80 [ 251.611458][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 251.616739][ C1] ? mas_find+0x6d6/0xcb0 [ 251.621098][ C1] unmap_vmas+0x390/0x550 [ 251.625521][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 251.630383][ C1] ? mas_next_slot+0xc91/0xd70 [ 251.635496][ C1] exit_mmap+0x293/0x9f0 [ 251.639743][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 251.644564][ C1] ? __pfx_exit_aio+0x10/0x10 [ 251.649596][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 251.654819][ C1] __mmput+0x118/0x420 [ 251.658890][ C1] exit_mm+0x18e/0x240 [ 251.663009][ C1] do_exit+0x6cd/0x2360 [ 251.667162][ C1] ? __pfx_do_exit+0x10/0x10 [ 251.671747][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 251.677128][ C1] do_group_exit+0x22d/0x2f0 [ 251.681707][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 251.686916][ C1] get_signal+0x121b/0x12c0 [ 251.691430][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 251.696973][ C1] ? __pfx___fput_deferred+0x10/0x10 [ 251.702250][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 251.708406][ C1] ? __x64_sys_preadv+0x28b/0x2b0 [ 251.713425][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 251.718787][ C1] ? rcu_is_watching+0x16/0xb0 [ 251.723545][ C1] do_syscall_64+0x328/0x520 [ 251.728145][ C1] ? trace_irq_disable+0x3b/0x140 [ 251.733157][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.739211][ C1] ? clear_bhb_loop+0x70/0xc0 [ 251.743879][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.749762][ C1] RIP: 0033:0x7f052779e159 [ 251.754212][ C1] Code: Unable to access opcode bytes at 0x7f052779e12f. [ 251.761213][ C1] RSP: 002b:00007f05285b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 251.769622][ C1] RAX: fffffffffffffffe RBX: 00007f0527a25fa0 RCX: 00007f052779e159 [ 251.777606][ C1] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000004 [ 251.785578][ C1] RBP: 00007f052783506b R08: 00000000fffffbff R09: 0000000000000000 [ 251.793544][ C1] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 251.801511][ C1] R13: 00007f0527a26038 R14: 00007f0527a25fa0 R15: 00007f0527b4fa48 [ 251.809500][ C1] [ 251.812781][ C1] Kernel Offset: disabled [ 251.817092][ C1] Rebooting in 86400 seconds..