last executing test programs: 8m29.430069355s ago: executing program 3 (id=17007): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0x8}, {0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 8m29.251133664s ago: executing program 3 (id=17010): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0e}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x16}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 8m28.903874145s ago: executing program 3 (id=17014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010030bd7000fddbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="0500350005000000080034"], 0x2c}}, 0x0) 8m28.727933932s ago: executing program 3 (id=17019): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) 8m28.589562201s ago: executing program 3 (id=17022): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xb) 8m28.430049361s ago: executing program 3 (id=17025): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r0) 8m13.329272321s ago: executing program 32 (id=17025): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) close(r0) 4m30.114781123s ago: executing program 5 (id=19928): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x70, 0x80000}, 0x20) 4m29.027569488s ago: executing program 5 (id=19940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000024000000040000000100000000000000", @ANYRES32=r0], 0x48) syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000080), 0x0}, 0x20) 4m28.748166827s ago: executing program 5 (id=19943): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 4m28.429429051s ago: executing program 5 (id=19945): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 4m27.314693329s ago: executing program 5 (id=19956): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = open_tree(r0, &(0x7f0000000300)='mnt\x00', 0x88101) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r1, 0x0, r2, 0x0, 0x46) unlink(&(0x7f0000000440)='./cgroup\x00') 4m27.001985059s ago: executing program 5 (id=19960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d6974000000140002800800014080000001080002400000000114000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="ec0600000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000c0060380180000800c00018006000100ffd700000800034000000001"], 0x6ec}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4m26.039292474s ago: executing program 33 (id=19960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d6974000000140002800800014080000001080002400000000114000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="ec0600000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000c0060380180000800c00018006000100ffd700000800034000000001"], 0x6ec}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4m23.817971091s ago: executing program 4 (id=19973): r0 = io_uring_setup(0x6d52, &(0x7f0000000040)={0x0, 0x37ae, 0x2, 0x1, 0x117}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000002340)={0xa8, 0x0, 0x2}) unshare(0x64000600) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/141, 0x8d}], 0x113e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4m19.436663836s ago: executing program 4 (id=19986): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) 4m18.261390694s ago: executing program 4 (id=19992): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0x60a3}], 0x4}, 0x0) 4m17.810002301s ago: executing program 4 (id=19994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d6974000000140002800800014080000001080002400000000114000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) 4m17.630292248s ago: executing program 4 (id=19996): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x8) 4m17.505943679s ago: executing program 4 (id=19998): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={r2, 0xff, 0x6, 0xce6}, 0x10) 4m2.437278735s ago: executing program 34 (id=19998): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={r2, 0xff, 0x6, 0xce6}, 0x10) 37.037864961s ago: executing program 2 (id=22412): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 36.143692419s ago: executing program 2 (id=22420): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="f69239bda5fc6c0176", 0x9, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x4000009}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) shutdown(r0, 0x1) 36.072503998s ago: executing program 2 (id=22422): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffec, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) landlock_restrict_self(0xffffffffffffffff, 0xc) 35.450145736s ago: executing program 2 (id=22426): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 35.421170268s ago: executing program 2 (id=22427): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x121c02, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595d, 0x10000, 0x0, 0x4f}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x3f00) 34.854932496s ago: executing program 2 (id=22428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 34.190592965s ago: executing program 35 (id=22428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 4.553469201s ago: executing program 7 (id=22653): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100037040100"/20, @ANYRES32=r2, @ANYBLOB="c30801000b2ebe2620001280080001006774700014000280050005"], 0x40}, 0x1, 0x0, 0x0, 0x404c000}, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 4.304320393s ago: executing program 6 (id=22655): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000780)={@link_local, @random="0100000000c9", @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x4}}, {@ipv6={0x86dd, @generic={0x8, 0x6, "d82b06", 0x0, 0x81, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @local}}}}}, 0x0) r1 = epoll_create(0x7f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000740)={0x40000004}) 4.256066938s ago: executing program 7 (id=22657): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newtclass={0x6c, 0x28, 0x601, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0xfff1}, {0x8, 0xfff1}, {0x0, 0xa}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x0, 0x3f1, 0x2, 0x8}, {0x8, 0x0, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x5, 0xffff, 0x8, 0x2}}, @TCA_HTB_RATE64={0xc, 0x6, 0x400000400}]}}]}, 0x6c}}, 0x20000000) 4.192298787s ago: executing program 6 (id=22658): syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202ff"], 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x111, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x891, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x104}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x8000, 0x1, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000ac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 4.149020413s ago: executing program 7 (id=22659): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x6, 0x3, &(0x7f0000000080)={0x2, "1a9c66bf2f615e4200000000e200"}}) 3.964451213s ago: executing program 0 (id=22662): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421, 0x0, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x2, 0x6, 0x9a6, 0x10001, 0x8}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) 3.877148182s ago: executing program 0 (id=22664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x87, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x1c) listen(r0, 0x0) 3.810194946s ago: executing program 0 (id=22666): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010064a6fb7e11cd47a95c8b37e6000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r1 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 3.726612164s ago: executing program 0 (id=22667): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, 0x0, 0x0) 2.104977671s ago: executing program 1 (id=22681): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d80140003"], 0x1f0}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc96f, 0x45}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004013}, 0x40000c0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 2.028106438s ago: executing program 1 (id=22682): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.849435308s ago: executing program 1 (id=22685): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0xb, &(0x7f0000000ac0), &(0x7f0000000b00)=0x10) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x202, 0x2001, 0x0, 0xa, "243260d44b00"}) 1.597218381s ago: executing program 8 (id=22688): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fsopen(&(0x7f0000000000)='nfs\x00', 0x0) syz_io_uring_setup(0x4382, &(0x7f0000000080)={0x0, 0x6526, 0x800, 0x2, 0x1008, 0x0, r0}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) 1.551093213s ago: executing program 8 (id=22689): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458081, 0x0) 1.504448553s ago: executing program 8 (id=22690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000700)) 1.398678958s ago: executing program 8 (id=22691): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000540)=[@request_death={0x400c6313, 0x2}], 0x0, 0x1000000, 0x0}) 1.358644544s ago: executing program 8 (id=22692): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000080)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040)=0x6, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1.187979945s ago: executing program 8 (id=22693): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x2) 1.058690969s ago: executing program 6 (id=22694): r0 = socket$kcm(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f883472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a3f582d7c604013317281c5e9a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) 1.055179688s ago: executing program 7 (id=22695): unshare(0x22020400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, 0x0) 963.682651ms ago: executing program 6 (id=22696): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 875.551547ms ago: executing program 1 (id=22697): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x78bd22, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3f}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) 660.128022ms ago: executing program 1 (id=22698): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xde9f, 0x1000, 0x2, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x800, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b75, 0x800, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b6e, 0x200, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0xe3, {}, 0x0, 0x0, '\x00', {0xfff9, 0x6, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 616.552357ms ago: executing program 6 (id=22699): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000300)=0x3, 0x4) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r1, 0x2, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha224'], &(0x7f0000000480)="c0f9", &(0x7f00000004c0)=""/90) 381.29101ms ago: executing program 6 (id=22700): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e64, 0x2eb, @dev={0xfe, 0x80, '\x00', 0xc}, 0xc}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="f4", 0xfdef}], 0x1) pselect6(0x40, &(0x7f0000000100)={0x8, 0x800000000000000, 0xffffff7ffffffffc, 0x10001, 0x5, 0xffffffffffffffff, 0x8100000}, 0x0, 0x0, 0x0, 0x0) 326.714194ms ago: executing program 7 (id=22701): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x2, 0x0, @ioapic={0x3000, 0x7f, 0xfffffff7, 0x22f1, 0x0, [{0x1, 0xb1, 0x0, '\x00', 0x3}, {0xc5, 0x2, 0x4, '\x00', 0x2}, {0x1, 0x1, 0x2, '\x00', 0xfa}, {0x0, 0xff, 0x2, '\x00', 0x5e}, {0xfd, 0x40, 0x6, '\x00', 0xea}, {0x6, 0x9, 0xf9, '\x00', 0x5}, {0x5, 0x6, 0xd, '\x00', 0x2}, {0x5, 0x40, 0x83, '\x00', 0x40}, {0x0, 0x7, 0xf}, {0x9, 0x7, 0x6, '\x00', 0x7f}, {0x7, 0x4, 0x9, '\x00', 0x80}, {0xb7, 0x2, 0x1, '\x00', 0x4}, {0xfe, 0xb, 0xff, '\x00', 0x3}, {0x8, 0x4, 0x7, '\x00', 0x7}, {0xf8, 0x0, 0xf, '\x00', 0x68}, {0x5, 0x5, 0xa, '\x00', 0xa}, {0xa, 0x7, 0x6, '\x00', 0x6}, {0xa, 0x9, 0xe, '\x00', 0x7f}, {0x2, 0x0, 0x1, '\x00', 0x10}, {0x80, 0x0, 0xfc, '\x00', 0x3}, {0xa, 0x7f, 0x2, '\x00', 0xa}, {0x2, 0xd8, 0x40, '\x00', 0xf9}, {0x0, 0x7, 0x8, '\x00', 0x6}, {0x8, 0x5, 0x2, '\x00', 0x33}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 278.278436ms ago: executing program 0 (id=22702): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101501, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r0 = socket$inet6(0xa, 0x3, 0x3c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e33, 0x0, @empty, 0x9}, 0x1c) 127.419523ms ago: executing program 0 (id=22703): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x10, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4b}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x2a4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x28, 0x1ffa, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="f0000000100030060000000000002000ac14224c0000000080000003000000000000000000000000000000000000298000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000004d432"], 0xf0}}, 0x24000800) 90.45267ms ago: executing program 1 (id=22704): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) 0s ago: executing program 7 (id=22705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x0, 0x9}, {0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0xfd}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4080) kernel console output (not intermixed with test programs): onnect, device number 37 [ 1371.676747][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.730531][ T5099] bond0: (slave bond_slave_0): Releasing backup interface [ 1371.747715][ T5099] bond0: (slave bond_slave_1): Releasing backup interface [ 1371.817615][ T5099] team0: Port device team_slave_0 removed [ 1371.830490][ T5099] team0: Port device team_slave_1 removed [ 1371.832771][ T5099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.832799][ T5099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.837842][ T5099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.837866][ T5099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.967353][ T5099] team0: Port device netdevsim1 removed [ 1372.027224][ T5102] team0: Port device dummy0 added [ 1372.221660][ T5126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.222540][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.885001][T13409] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1373.034451][T13409] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1373.035795][T13409] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1373.035827][T13409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1373.035855][T13409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1373.035881][T13409] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1373.035924][T13409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.092535][T13409] usb 1-1: config 0 descriptor?? [ 1373.118204][ T5141] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1373.557812][T13409] plantronics 0003:047F:FFFF.00A3: reserved main item tag 0xd [ 1373.594494][T13409] plantronics 0003:047F:FFFF.00A3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1373.879778][T13392] hid_parser_main: 5 callbacks suppressed [ 1373.880032][T13392] hid-generic 0000:0000:0000.00A4: unknown main item tag 0x0 [ 1373.904621][T13392] hid-generic 0000:0000:0000.00A4: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1374.665069][T27920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.665325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.003298][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21117'. [ 1375.018867][ T5255] netlink: 47 bytes leftover after parsing attributes in process `syz.1.21117'. [ 1375.018898][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21117'. [ 1375.508635][ T5294] input: syz1 as /devices/virtual/input/input253 [ 1375.508674][ T5294] input: failed to attach handler leds to device input253, error: -6 [ 1375.688053][T13392] usb 1-1: USB disconnect, device number 44 [ 1375.994266][ T5734] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1376.175592][ T5734] usb 2-1: Using ep0 maxpacket: 32 [ 1376.247233][ T5365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1376.303967][ T5734] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1376.304026][ T5734] usb 2-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice= 0.40 [ 1376.305032][ T5734] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1376.305072][ T5734] usb 2-1: can't read configurations, error -71 [ 1376.647863][ T5385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1376.941067][ T5399] loop6: detected capacity change from 0 to 2640 [ 1376.941718][ T5399] Buffer I/O error on dev loop6, logical block 0, async page read [ 1376.941761][ T5399] Buffer I/O error on dev loop6, logical block 0, async page read [ 1376.941792][ T5399] Buffer I/O error on dev loop6, logical block 0, async page read [ 1376.941901][ T5399] Buffer I/O error on dev loop6, logical block 0, async page read [ 1376.941980][ T5399] Buffer I/O error on dev loop6, logical block 0, async page read [ 1376.942039][ T5399] Buffer I/O error on dev loop6, logical block 0, async page read [ 1376.942087][ T5399] Buffer I/O error on dev loop6, logical block 0, async page read [ 1376.942118][ T5399] Buffer I/O error on dev loop6, logical block 0, async page read [ 1376.942132][ T5399] ldm_validate_partition_table(): Disk read failed. [ 1376.942162][ T5399] Buffer I/O error on dev loop6, logical block 0, async page read [ 1376.942194][ T5399] Buffer I/O error on dev loop6, logical block 0, async page read [ 1376.943186][ T5399] Dev loop6: unable to read RDB block 0 [ 1376.944875][ T5399] loop6: unable to read partition table [ 1376.945112][ T5399] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1377.453595][T18339] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1377.616103][T18339] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1377.617377][T18339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.617411][T18339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.618692][T18339] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1377.618718][T18339] usb 3-1: Manufacturer: syz [ 1377.623396][T18339] usb 3-1: config 0 descriptor?? [ 1378.546678][T18339] input: syz Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00A5/input/input254 [ 1378.619586][T18339] input: syz Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00A5/input/input255 [ 1378.652659][T18339] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00A5/input/input256 [ 1378.674824][T18339] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00A5/input/input257 [ 1378.705800][T18339] uclogic 0003:256C:006D.00A5: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 1378.731596][ T5500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.732390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.741079][ T30] usb 3-1: USB disconnect, device number 40 [ 1378.758788][ T5734] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1378.921843][ T5734] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1378.950832][ T5734] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1378.950862][ T5734] usb 2-1: config 1 has no interface number 0 [ 1378.997648][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.997677][ T5734] usb 2-1: Product: syz [ 1378.997693][ T5734] usb 2-1: Manufacturer: syz [ 1378.997707][ T5734] usb 2-1: SerialNumber: syz [ 1379.076994][ T5734] usb 2-1: 3:1 : does not exist [ 1379.077085][ T5734] usb 2-1: 3:2 : does not exist [ 1379.199878][ T5512] fido_id[5512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1379.766335][ T5562] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 1379.766383][ T5562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1379.768634][ T5562] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 1379.768675][ T5562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1379.804993][ T5734] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1379.949231][T18339] usb 2-1: USB disconnect, device number 40 [ 1379.964272][ T5734] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1379.968117][ T5734] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1379.968153][ T5734] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1379.968225][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.028331][ T5552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1380.052668][ T5734] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1380.214097][ T30] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1380.284422][T18339] usb 1-1: USB disconnect, device number 45 [ 1380.392658][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1380.396313][ T30] usb 3-1: not running at top speed; connect to a high speed hub [ 1380.396349][ T30] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1380.398133][ T30] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 1380.406248][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.406275][ T30] usb 3-1: Product: syz [ 1380.406288][ T30] usb 3-1: Manufacturer: syz [ 1380.406301][ T30] usb 3-1: SerialNumber: syz [ 1380.425307][T27920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.425524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.676407][ T30] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1380.859750][ T30] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1380.859785][ T30] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1381.264766][ T30] usb 3-1: invalid uac2 rates [ 1381.266626][ T30] usb 3-1: invalid uac2 rates [ 1381.267075][ T30] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1381.267102][ T30] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1381.469597][ T30] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1381.550956][ T5684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21202'. [ 1381.591798][ T30] usb 3-1: USB disconnect, device number 41 [ 1381.648852][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.649227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.707595][T28858] udevd[28858]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1382.404038][ T1576] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1382.553874][ T1576] usb 3-1: Using ep0 maxpacket: 32 [ 1382.592886][ T1576] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1382.592942][ T1576] usb 3-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice= 0.40 [ 1382.595679][ T1576] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1382.595716][ T1576] usb 3-1: can't read configurations, error -71 [ 1382.749968][ T5781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21213'. [ 1382.774028][T13392] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1382.924953][T13392] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1382.926613][T13392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1382.926750][T13392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1382.926774][T13392] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1382.926819][T13392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.929979][T13392] usb 2-1: config 0 descriptor?? [ 1383.264982][ T5795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1383.408508][T13392] hid-multitouch 0003:0457:07DA.00A6: unknown main item tag 0x0 [ 1383.408550][T13392] hid-multitouch 0003:0457:07DA.00A6: unknown main item tag 0x0 [ 1383.408575][T13392] hid-multitouch 0003:0457:07DA.00A6: unknown main item tag 0x0 [ 1383.408602][T13392] hid-multitouch 0003:0457:07DA.00A6: unknown main item tag 0x0 [ 1383.408629][T13392] hid-multitouch 0003:0457:07DA.00A6: unknown main item tag 0x0 [ 1383.408655][T13392] hid-multitouch 0003:0457:07DA.00A6: unknown main item tag 0x0 [ 1383.408679][T13392] hid-multitouch 0003:0457:07DA.00A6: unknown main item tag 0x0 [ 1383.408705][T13392] hid-multitouch 0003:0457:07DA.00A6: unknown main item tag 0x0 [ 1383.408730][T13392] hid-multitouch 0003:0457:07DA.00A6: unknown main item tag 0x0 [ 1383.408757][T13392] hid-multitouch 0003:0457:07DA.00A6: unknown main item tag 0x0 [ 1383.444392][T13392] hid-multitouch 0003:0457:07DA.00A6: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 1383.670096][ T30] usb 2-1: USB disconnect, device number 41 [ 1383.706753][ T5822] netlink: 9 bytes leftover after parsing attributes in process `syz.2.21219'. [ 1383.739161][ T5822] gretap0: entered promiscuous mode [ 1383.764360][ T5822] netlink: 5 bytes leftover after parsing attributes in process `syz.2.21219'. [ 1383.764515][ T5822] 0Ŗī{X¹¦: renamed from gretap0 [ 1383.767152][ T5822] 0Ŗī{X¹¦: left promiscuous mode [ 1383.767175][ T5822] 0Ŗī{X¹¦: entered allmulticast mode [ 1384.087152][ T5841] loop5: detected capacity change from 0 to 7 [ 1384.089912][ T5841] Dev loop5: unable to read RDB block 7 [ 1384.089959][ T5841] loop5: unable to read partition table [ 1384.112481][ T5841] loop5: partition table beyond EOD, truncated [ 1384.112538][ T5841] loop_reread_partitions: partition scan of loop5 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 1384.560458][ T5869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1385.544532][ T59] net_ratelimit: 2 callbacks suppressed [ 1385.544557][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.544825][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.786433][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.881295][ T5906] batman_adv: batadv0: Adding interface: syz_tun [ 1385.881316][ T5906] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1385.896780][ T5906] batman_adv: batadv0: Interface activated: syz_tun [ 1386.574983][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21255'. [ 1386.694182][ T5734] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1386.825404][ T5941] vxcan1: tx drop: invalid da for name 0x00000000000000f5 [ 1386.856094][ T5734] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1386.858092][ T5734] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1386.858124][ T5734] usb 3-1: config 1 has no interface number 0 [ 1386.863120][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.863150][ T5734] usb 3-1: Product: syz [ 1386.863166][ T5734] usb 3-1: Manufacturer: syz [ 1386.863181][ T5734] usb 3-1: SerialNumber: syz [ 1386.922030][ T5734] usb 3-1: 3:1 : does not exist [ 1386.922058][ T5734] usb 3-1: 3:2 : does not exist [ 1387.239774][ T5734] hid-generic 0000:0000:0000.00A7: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1387.690359][ T5734] usb 3-1: USB disconnect, device number 44 [ 1387.694057][ T1576] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1387.854476][ T1576] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1387.855800][ T1576] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.855890][ T1576] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1387.858347][ T1576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.858371][ T1576] usb 2-1: Product: syz [ 1387.858386][ T1576] usb 2-1: Manufacturer: syz [ 1387.858401][ T1576] usb 2-1: SerialNumber: syz [ 1387.938001][ T1576] snd-ua101 2-1:1.1: invalid num_altsetting [ 1387.938028][ T1576] snd-ua101 2-1:1.0: invalid format type [ 1388.116586][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.116735][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.116934][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.118119][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.118241][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.119288][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.196576][ T1576] usb 2-1: USB disconnect, device number 42 [ 1388.279185][ T6018] syzkaller0: left promiscuous mode [ 1388.279212][ T6018] syzkaller0: left allmulticast mode [ 1388.596435][ T6031] netlink: 48 bytes leftover after parsing attributes in process `syz.2.21278'. [ 1389.006164][ T5734] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1389.167251][ T5734] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1389.168698][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.168731][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.168754][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1389.168798][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.172206][ T5734] usb 3-1: config 0 descriptor?? [ 1389.609269][ T5734] hid_parser_main: 25 callbacks suppressed [ 1389.609296][ T5734] logitech-hidpp-device 0003:046D:C262.00A8: unknown main item tag 0x0 [ 1389.609389][ T5734] logitech-hidpp-device 0003:046D:C262.00A8: unknown main item tag 0x3 [ 1389.609418][ T5734] logitech-hidpp-device 0003:046D:C262.00A8: item fetching failed at offset 23/24 [ 1389.610078][ T5734] logitech-hidpp-device 0003:046D:C262.00A8: hidpp_probe:parse failed [ 1389.610141][ T5734] logitech-hidpp-device 0003:046D:C262.00A8: probe with driver logitech-hidpp-device failed with error -22 [ 1389.623555][T13409] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1389.785305][T13409] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1389.789419][T13409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.789455][T13409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.789477][T13409] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1389.789524][T13409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.793145][T13409] usb 2-1: config 0 descriptor?? [ 1389.826000][ T4690] usb 3-1: USB disconnect, device number 45 [ 1389.876492][ T5734] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1390.044883][ T5734] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1390.046822][ T5734] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.046849][ T5734] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1390.048676][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1390.048702][ T5734] usb 1-1: SerialNumber: syz [ 1390.259449][T13409] plantronics 0003:047F:FFFF.00A9: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1390.310139][ T5734] usb 1-1: 0:2 : does not exist [ 1390.472246][ T5734] usb 1-1: USB disconnect, device number 46 [ 1390.496614][T13392] usb 2-1: USB disconnect, device number 43 [ 1390.677249][T28858] udevd[28858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1390.938620][ T6184] Invalid argument reading file caps for ./file0 [ 1391.307029][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.307261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.523776][ T4690] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1391.683768][ T4690] usb 3-1: Using ep0 maxpacket: 32 [ 1391.687572][ T4690] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1391.691955][ T4690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.691981][ T4690] usb 3-1: Product: syz [ 1391.691996][ T4690] usb 3-1: Manufacturer: syz [ 1391.692008][ T4690] usb 3-1: SerialNumber: syz [ 1391.712545][ T4690] usb 3-1: config 0 descriptor?? [ 1391.731075][ T4690] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1391.731177][ T4690] dvb-usb: bulk message failed: -22 (4/0) [ 1391.731191][ T4690] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1391.731315][ T4690] dvb-usb: bulk message failed: -22 (5/0) [ 1391.731327][ T4690] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1391.758890][ T4690] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1391.763313][ T4690] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1391.763375][ T4690] usb 3-1: media controller created [ 1391.815799][ T4690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1391.837855][ T6238] syzkaller1: entered promiscuous mode [ 1391.837881][ T6238] syzkaller1: entered allmulticast mode [ 1391.858609][ T4690] usb 3-1: selecting invalid altsetting 3 [ 1391.858634][ T4690] ttusb2: set interface to alts=3 failed [ 1391.933730][ T4690] DVB: Unable to find symbol tda10086_attach() [ 1391.933750][ T4690] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1391.934584][ T4690] dvb-usb: bulk message failed: -22 (4/0) [ 1391.934605][ T4690] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1391.934730][ T4690] dvb-usb: bulk message failed: -22 (5/0) [ 1391.934742][ T4690] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1391.934812][ T4690] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1391.951454][ T4690] usb 3-1: USB disconnect, device number 46 [ 1392.063622][ T4690] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1392.550332][ T6268] syzkaller1: entered promiscuous mode [ 1392.550368][ T6268] syzkaller1: entered allmulticast mode [ 1392.669656][ T6274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1393.418534][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.418802][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.418988][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.419154][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.419317][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.419481][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.419713][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.419889][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.371690][ T6377] kvm: user requested TSC rate below hardware speed [ 1395.593754][T13409] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1395.693132][ T6404] netlink: 'syz.6.21378': attribute type 3 has an invalid length. [ 1395.754175][T13409] usb 3-1: Using ep0 maxpacket: 8 [ 1395.759479][T13409] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1395.761066][T13409] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1395.761120][T13409] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1395.761141][T13409] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1395.761163][T13409] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1395.761184][T13409] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1395.761226][T13409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.991185][T13409] usb 3-1: GET_CAPABILITIES returned 0 [ 1395.991244][T13409] usbtmc 3-1:16.0: can't read capabilities [ 1396.246348][ T6382] usbtmc 3-1:16.0: usb_bulk_msg returned -71 [ 1396.275026][T13409] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1396.373925][ T30] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1396.425918][T17450] net_ratelimit: 1017 callbacks suppressed [ 1396.425949][T17450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.426185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.433942][T13409] usb 2-1: Using ep0 maxpacket: 32 [ 1396.450903][ T1576] usb 3-1: USB disconnect, device number 47 [ 1396.470912][T13409] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1396.484173][T13409] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1396.484219][T13409] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1396.484258][T13409] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1396.484285][T13409] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1396.484313][T13409] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1396.488032][T13409] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1396.488063][T13409] usb 2-1: Product: syz [ 1396.488079][T13409] usb 2-1: Manufacturer: syz [ 1396.488093][T13409] usb 2-1: SerialNumber: syz [ 1396.527966][ T30] usb 1-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1396.529161][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.589797][T13409] usb 2-1: config 0 descriptor?? [ 1396.600153][T13409] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1396.614490][T13409] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1396.688400][ T6459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1396.806427][ T6468] netlink: 1700 bytes leftover after parsing attributes in process `syz.7.21389'. [ 1396.806459][ T6468] netlink: 1700 bytes leftover after parsing attributes in process `syz.7.21389'. [ 1396.865163][T13392] usb 2-1: USB disconnect, device number 44 [ 1396.865270][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 1396.868697][ T6429] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1396.875726][T13392] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1397.000123][ T30] pn533_usb 1-1:1.0: NFC: Couldn't poweron the reader (error -71) [ 1397.000293][ T30] pn533_usb 1-1:1.0: probe with driver pn533_usb failed with error -71 [ 1397.023965][ T30] usb 1-1: USB disconnect, device number 47 [ 1397.954034][ T6522] loop4: detected capacity change from 0 to 7 [ 1397.956036][ T6522] Dev loop4: unable to read RDB block 7 [ 1397.956082][ T6522] loop4: unable to read partition table [ 1397.956332][ T6522] loop4: partition table beyond EOD, truncated [ 1397.958109][ T6522] loop_reread_partitions: partition scan of loop4 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 1398.172331][ T6537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1398.785133][ T6559] tmpfs: Unknown parameter 'Ō»ū¢Y.:x•:‹FGDF×ĶjAćö»n8ōƒ£æJ9O× [ 1398.785133][ T6559] é8³õ”NŻ÷Cż$²I<„÷z|ŌE' [ 1398.976459][ T6566] loop5: detected capacity change from 0 to 7 [ 1399.106733][ T6573] netlink: 48 bytes leftover after parsing attributes in process `syz.0.21419'. [ 1399.494021][T13392] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1399.643980][T13392] usb 2-1: Using ep0 maxpacket: 32 [ 1399.645168][T13392] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1399.646906][T13392] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1399.651851][T13392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.651880][T13392] usb 2-1: Product: syz [ 1399.651896][T13392] usb 2-1: Manufacturer: syz [ 1399.651911][T13392] usb 2-1: SerialNumber: syz [ 1399.680501][T13392] snd-ua101 2-1:1.1: sample format descriptor not found [ 1399.680522][T13392] snd-ua101 2-1:1.0: invalid num_altsetting [ 1399.966216][T13392] usb 2-1: USB disconnect, device number 45 [ 1401.357974][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21442'. [ 1401.461700][ T6665] Invalid argument reading file caps for ./file0 [ 1401.579661][ T6670] syz_tun: entered allmulticast mode [ 1401.762150][ T6673] input: syz1 as /devices/virtual/input/input258 [ 1402.184684][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.184930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.292283][ T6709] Invalid argument reading file caps for ./file0 [ 1402.385193][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21455'. [ 1402.389634][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21455'. [ 1402.407048][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21455'. [ 1404.454558][T13398] psmouse serio6: Failed to reset mouse on : -5 [ 1404.617152][ T6805] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1404.786325][ T6816] netlink: 'syz.1.21490': attribute type 11 has an invalid length. [ 1404.903810][T14491] Bluetooth: hci5: command 0x0406 tx timeout [ 1405.803692][ T4690] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1405.954783][ T4690] usb 3-1: Using ep0 maxpacket: 16 [ 1405.955540][ T4690] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1405.957362][ T4690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.957393][ T4690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.957415][ T4690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1405.957460][ T4690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.964047][ T4690] usb 3-1: config 0 descriptor?? [ 1406.408024][ T4690] microsoft 0003:045E:07DA.00AA: unknown main item tag 0x0 [ 1406.408063][ T4690] microsoft 0003:045E:07DA.00AA: unknown main item tag 0x0 [ 1406.408091][ T4690] microsoft 0003:045E:07DA.00AA: unknown main item tag 0x0 [ 1406.408119][ T4690] microsoft 0003:045E:07DA.00AA: unknown main item tag 0x0 [ 1406.408146][ T4690] microsoft 0003:045E:07DA.00AA: unknown main item tag 0x0 [ 1406.408175][ T4690] microsoft 0003:045E:07DA.00AA: unknown main item tag 0x0 [ 1406.408201][ T4690] microsoft 0003:045E:07DA.00AA: unknown main item tag 0x0 [ 1406.408228][ T4690] microsoft 0003:045E:07DA.00AA: unknown main item tag 0x0 [ 1406.408263][ T4690] microsoft 0003:045E:07DA.00AA: unknown main item tag 0x0 [ 1406.408290][ T4690] microsoft 0003:045E:07DA.00AA: unknown main item tag 0x0 [ 1406.423595][ T4690] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00AA/input/input260 [ 1406.452074][ T4690] microsoft 0003:045E:07DA.00AA: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1406.657306][ T4690] usb 3-1: USB disconnect, device number 48 [ 1406.775717][ T6865] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1407.056863][ T6879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1407.114293][ T6885] netlink: 4384 bytes leftover after parsing attributes in process `syz.1.21507'. [ 1407.305620][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.305904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.993984][T13398] misc userio: Buffer overflowed, userio client isn't keeping up [ 1408.352760][ T6955] netlink: 1700 bytes leftover after parsing attributes in process `syz.2.21521'. [ 1408.352792][ T6955] netlink: 1700 bytes leftover after parsing attributes in process `syz.2.21521'. [ 1409.335916][T13398] input: PS/2 Generic Mouse as /devices/serio6/input/input259 [ 1409.583759][T13398] psmouse serio6: Failed to enable mouse on [ 1411.483021][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21559'. [ 1411.483282][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.611423][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.344982][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.345214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.963031][ T7185] netlink: 'syz.2.21581': attribute type 1 has an invalid length. [ 1412.963057][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21581'. [ 1413.307910][ T7197] binder: 7196:7197 ioctl c0306201 2000000001c0 returned -14 [ 1413.637882][ T7206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1414.143835][ T5734] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1414.314416][ T5734] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1414.315617][ T5734] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1414.315644][ T5734] usb 3-1: config 1 has no interface number 0 [ 1414.318665][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.318693][ T5734] usb 3-1: Product: syz [ 1414.318708][ T5734] usb 3-1: Manufacturer: syz [ 1414.318723][ T5734] usb 3-1: SerialNumber: syz [ 1414.338688][ T5734] usb 3-1: 3:1 : does not exist [ 1414.338712][ T5734] usb 3-1: 3:2 : does not exist [ 1414.879028][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21605'. [ 1414.979331][T13392] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1415.104989][ T30] usb 3-1: USB disconnect, device number 49 [ 1415.124904][T13392] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1415.126358][T13392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.131843][T13392] usb 1-1: config 0 descriptor?? [ 1415.165251][T13392] cp210x 1-1:0.0: cp210x converter detected [ 1415.204257][ T7279] netlink: 7 bytes leftover after parsing attributes in process `syz.7.21607'. [ 1415.570676][T13392] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1415.798004][T13392] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1415.979823][T13392] usb 1-1: USB disconnect, device number 48 [ 1415.997220][T13392] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1415.999812][T13392] cp210x 1-1:0.0: device disconnected [ 1416.377135][ T31] audit: type=1326 audit(1791452504.575:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.1.21623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141839e199 code=0x7ffc0000 [ 1416.377479][ T31] audit: type=1326 audit(1791452504.575:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.1.21623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141839e199 code=0x7ffc0000 [ 1416.383368][ T31] audit: type=1326 audit(1791452504.575:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.1.21623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f141839e199 code=0x7ffc0000 [ 1416.465056][ T31] audit: type=1326 audit(1791452504.665:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.1.21623" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141839e199 code=0x7ffc0000 [ 1416.813249][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21630'. [ 1416.964101][T18339] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1417.058055][ T7380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.21636'. [ 1417.123911][T18339] usb 2-1: Using ep0 maxpacket: 32 [ 1417.126008][T18339] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1417.137191][T18339] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1417.141349][T18339] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1417.141379][T18339] usb 2-1: Product: syz [ 1417.141392][T18339] usb 2-1: Manufacturer: syz [ 1417.141407][T18339] usb 2-1: SerialNumber: syz [ 1417.146288][T18339] usb 2-1: config 0 descriptor?? [ 1417.147947][ T7362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1417.151294][T18339] hub 2-1:0.0: bad descriptor, ignoring hub [ 1417.151334][T18339] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1417.376758][ T7391] kvm: user requested TSC rate below hardware speed [ 1417.495381][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21640'. [ 1417.504135][T18339] usb 2-1: USB disconnect, device number 46 [ 1417.545804][T31353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.546057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.702797][ T7440] binder: 7439:7440 ioctl c0306201 200000000480 returned -14 [ 1417.784167][T13392] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1417.934679][T13392] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1417.935882][T13392] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.935939][T13392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.939898][T13392] usb 3-1: config 0 descriptor?? [ 1418.255527][T13392] usb 3-1: USB disconnect, device number 50 [ 1418.301464][ T7461] bridge_slave_0: entered promiscuous mode [ 1418.551173][ T7473] netlink: 'syz.1.21652': attribute type 3 has an invalid length. [ 1418.714718][T18339] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1418.732952][ T7486] ovs-dp0: entered promiscuous mode [ 1418.750698][ T7490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1418.874619][T18339] usb 3-1: Using ep0 maxpacket: 8 [ 1418.876244][T18339] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice= 0.9b [ 1418.879468][T18339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.879651][T18339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.884963][T18339] usb 3-1: config 0 descriptor?? [ 1418.899147][T18339] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 1418.899202][T18339] dvb-usb: bulk message failed: -22 (2/0) [ 1418.912973][T18339] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1418.915837][T18339] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 1418.915893][T18339] usb 3-1: media controller created [ 1418.973257][T18339] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1419.096637][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1419.100379][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.129394][T18339] cxusb: set interface failed [ 1419.129416][T18339] dvb-usb: bulk message failed: -22 (1/0) [ 1419.243240][T18339] DVB: Unable to find symbol mt352_attach() [ 1419.243292][T18339] dvb-usb: bulk message failed: -22 (5/0) [ 1419.243306][T18339] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1419.243333][T18339] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 1419.255974][ T7519] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1419.404381][T18339] rc_core: IR keymap rc-dvico-mce not found [ 1419.404404][T18339] Registered IR keymap rc-empty [ 1419.409578][T18339] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1419.420835][T18339] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input261 [ 1419.431926][T18339] dvb-usb: schedule remote query interval to 100 msecs. [ 1419.431949][T18339] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 1419.449382][T18339] usb 3-1: USB disconnect, device number 51 [ 1419.706650][T18339] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 1420.016166][ T7558] cifs: Unknown parameter 'g' [ 1420.119487][ T7559] syz_tun: entered allmulticast mode [ 1420.263818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.721586][ T7575] syz.2.21679 (7575): drop_caches: 2 [ 1420.758284][ T7589] input: syz0 as /devices/virtual/input/input262 [ 1421.243858][ T5734] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1421.405867][ T5734] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1421.407134][ T5734] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 1421.407171][ T5734] usb 1-1: config 1 has no interface number 0 [ 1421.411614][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.411638][ T5734] usb 1-1: Product: syz [ 1421.411650][ T5734] usb 1-1: Manufacturer: syz [ 1421.411659][ T5734] usb 1-1: SerialNumber: syz [ 1421.467639][ T5734] usb 1-1: 3:1 : does not exist [ 1421.467665][ T5734] usb 1-1: 3:2 : does not exist [ 1421.550626][T17450] tipc: Subscription rejected, illegal request [ 1421.588690][ T1576] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1421.704946][ T5734] usb 1-1: USB disconnect, device number 49 [ 1421.734551][ T1576] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1421.735891][ T1576] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.735918][ T1576] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1421.735939][ T1576] usb 3-1: config 1 has no interface number 0 [ 1421.735983][ T1576] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.736010][ T1576] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1421.739874][ T1576] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.739899][ T1576] usb 3-1: Product: syz [ 1421.739914][ T1576] usb 3-1: Manufacturer: syz [ 1421.739928][ T1576] usb 3-1: SerialNumber: syz [ 1421.757373][ T7649] loop4: detected capacity change from 0 to 6 [ 1421.797329][ T7649] Dev loop4: unable to read RDB block 6 [ 1421.797376][ T7649] loop4: unable to read partition table [ 1421.797616][ T7649] loop4: partition table beyond EOD, truncated [ 1421.797643][ T7649] loop_reread_partitions: partition scan of loop4 (žč¢«xüŸŃų éŚ¬§Źdʤ“ą–ƒŻ”ÆØ) failed (rc=-5) [ 1421.890040][T28858] udevd[28858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1422.322152][ T7679] netlink: 220 bytes leftover after parsing attributes in process `syz.6.21707'. [ 1422.647234][ T7691] ip_tables: iptables: counters copy to user failed while replacing table [ 1422.648043][ T7691] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 1422.676261][T31353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.676539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.703426][ T1576] cdc_ncm 3-1:1.1: bind() failure [ 1422.786630][ T7696] netlink: 104 bytes leftover after parsing attributes in process `syz.6.21712'. [ 1422.911581][ T5734] usb 3-1: USB disconnect, device number 52 [ 1423.319291][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.319357][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.543829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.056066][ T7752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1424.602121][ T7769] syzkaller1: entered allmulticast mode [ 1424.764724][ T7773] bond0: invalid NS target ff00:: specified for addition [ 1424.764760][ T7773] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 1424.987480][ T7778] sctp: [Deprecated]: syz.2.21740 (pid 7778) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1424.987480][ T7778] Use struct sctp_sack_info instead [ 1426.080781][ T7832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.081552][ T7832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.082745][ T7832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.083414][ T7832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.087712][ T7832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.213717][ T5734] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1426.363896][ T5734] usb 2-1: Using ep0 maxpacket: 8 [ 1426.364656][ T5734] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1426.370509][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.370538][ T5734] usb 2-1: Product: syz [ 1426.370554][ T5734] usb 2-1: Manufacturer: syz [ 1426.370570][ T5734] usb 2-1: SerialNumber: syz [ 1426.410667][ T5734] usb 2-1: config 0 descriptor?? [ 1426.632460][ T5734] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1426.729278][T18339] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1426.835113][T13392] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1426.836282][T13392] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1426.837035][T13392] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1426.846801][ T1576] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1426.849539][ T7855] veth0_virt_wifi: entered promiscuous mode [ 1426.888183][ T1576] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1427.014060][ T1576] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1427.056175][ T5734] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1427.074018][ T5734] usb 2-1: USB disconnect, device number 47 [ 1427.082447][ T1576] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1427.454055][ T1576] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1427.464716][ T5734] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1428.044380][ T1576] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1428.182546][ T7930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1428.194948][ T1576] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1428.196566][ T1576] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1428.196669][ T1576] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1428.203656][ T1576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.203685][ T1576] usb 2-1: Product: syz [ 1428.203700][ T1576] usb 2-1: Manufacturer: syz [ 1428.203714][ T1576] usb 2-1: SerialNumber: syz [ 1428.284028][T13392] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1428.439393][T13392] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1428.441009][T13392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.466834][T13392] usb 1-1: config 0 descriptor?? [ 1428.482599][ T1576] usb 2-1: Limiting number of CPorts to U8_MAX [ 1428.640566][ T7953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1428.674925][T13392] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1428.830213][ T31] audit: type=1326 audit(1791452517.025:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.7.21798" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f924a19e199 code=0x0 [ 1428.891794][T13392] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 1428.891824][T13392] [drm] Initialized udl on minor 1 [ 1428.909078][ C1] usb 2-1: invalid arpc response id received: 1280 [ 1429.034174][T13398] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1429.127026][ T1576] usb 2-1: failed to send ARPC request 1: -71 [ 1429.127218][ T1576] usb 2-1: failed to execute ARPC: -71 [ 1429.127228][ T1576] usb 2-1: failed to set connected state for cport 0: -71 [ 1429.127350][ T1576] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 1429.128636][ T1576] usb 2-1: failed to send ARPC request 3: -71 [ 1429.129046][ T1576] usb 2-1: failed to execute ARPC: -71 [ 1429.129059][ T1576] usb 2-1: failed to clear cport 0: -71 [ 1429.129070][ T1576] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 1429.196504][ T1576] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1429.203302][ T1576] usb 2-1: USB disconnect, device number 48 [ 1429.219179][T13398] usb 3-1: Using ep0 maxpacket: 32 [ 1429.244375][T13398] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1429.244461][T13398] usb 3-1: New USB device found, idVendor=2040, idProduct=b210, bcdDevice=bc.da [ 1429.245862][T13398] usb 3-1: config 4 has an invalid interface number: 224 but max is 0 [ 1429.245886][T13398] usb 3-1: config 4 has no interface number 0 [ 1429.245915][T13398] usb 3-1: config 4 interface 224 has no altsetting 0 [ 1429.248722][T13398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.248747][T13398] usb 3-1: Product: syz [ 1429.248761][T13398] usb 3-1: Manufacturer: syz [ 1429.248774][T13398] usb 3-1: SerialNumber: syz [ 1429.704450][ T3364] net_ratelimit: 2 callbacks suppressed [ 1429.704475][ T3364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.704720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.738796][T13398] dvb-usb: found a 'Hauppauge ATSC MiniCard (B210)' in warm state. [ 1429.759215][T13398] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1429.763148][T13398] dvbdev: DVB: registering new adapter (Hauppauge ATSC MiniCard (B210)) [ 1429.763245][T13398] usb 3-1: media controller created [ 1429.808521][T13398] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1429.864045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.209098][T13398] DVB: Unable to find symbol lgdt3305_attach() [ 1430.209112][T13398] dvb-usb: no frontend was attached by 'Hauppauge ATSC MiniCard (B210)' [ 1430.209120][T13398] dvb-usb: Hauppauge ATSC MiniCard (B210) successfully initialized and connected. [ 1430.245269][T13398] usb 3-1: USB disconnect, device number 53 [ 1430.316273][T13398] dvb-usb: Hauppauge ATSC MiniCard (B210) successfully deinitialized and disconnected. [ 1430.494793][ T1576] wacom 0003:056A:003F.00AB: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 1431.341779][ T8073] netlink: 52 bytes leftover after parsing attributes in process `syz.2.21826'. [ 1432.438217][ T8136] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1432.829895][ T8156] tipc: Started in network mode [ 1432.829919][ T8156] tipc: Node identity ac14140f, cluster identity 4711 [ 1432.832725][ T8156] tipc: Enabled bearer , priority 10 [ 1432.983894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.951293][T13398] tipc: Node number set to 2886997007 [ 1433.952070][T13392] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1433.952607][T13392] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1434.002500][ T4690] usb 1-1: USB disconnect, device number 50 [ 1434.010605][T13398] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1434.014086][T13398] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1435.443815][ T4983] Dev loop4: unable to read RDB block 6 [ 1435.443866][ T4983] loop4: unable to read partition table [ 1435.444091][ T4983] loop4: partition table beyond EOD, truncated [ 1435.472499][T17450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.472736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.103809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.134082][T18339] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1436.183938][T13392] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1436.291301][T18339] usb 3-1: Using ep0 maxpacket: 8 [ 1436.292493][T18339] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1436.310454][T18339] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1436.310503][T18339] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1436.310557][T18339] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1436.310586][T18339] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1436.310611][T18339] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1436.310636][T18339] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1436.310662][T18339] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1436.310687][T18339] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1436.336886][T13392] usb 1-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=8c.d0 [ 1436.337894][T13392] usb 1-1: config 4 has an invalid interface number: 12 but max is 0 [ 1436.337917][T13392] usb 1-1: config 4 has no interface number 0 [ 1436.337945][T13392] usb 1-1: config 4 interface 12 has no altsetting 0 [ 1436.339910][T13392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.339930][T13392] usb 1-1: Product: syz [ 1436.339944][T13392] usb 1-1: Manufacturer: syz [ 1436.339957][T13392] usb 1-1: SerialNumber: syz [ 1436.394202][T18339] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1436.394249][T18339] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1436.394288][T18339] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1436.394316][T18339] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1436.394341][T18339] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1436.394363][T18339] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1436.394388][T18339] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1436.394413][T18339] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1436.440803][T18339] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1436.440850][T18339] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1436.440889][T18339] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1436.440917][T18339] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1436.440942][T18339] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1436.440979][T18339] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1436.441005][T18339] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1436.441033][T18339] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1436.543740][T13398] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1436.608195][T13392] cdc_acm 1-1:4.12: Zero length descriptor references [ 1436.608227][T13392] cdc_acm 1-1:4.12: probe with driver cdc_acm failed with error -22 [ 1436.619248][T13392] usb 1-1: USB disconnect, device number 51 [ 1436.659921][T18339] usb 3-1: string descriptor 0 read error: -22 [ 1436.660078][T18339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.676168][T18339] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1436.693892][T13398] usb 2-1: Using ep0 maxpacket: 8 [ 1436.698388][T13398] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1436.707959][T13398] usb 2-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 1436.707989][T13398] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1436.708010][T13398] usb 2-1: config 1 has no interface number 0 [ 1436.708053][T13398] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 1436.708078][T13398] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 1436.708120][T13398] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 1436.726578][T13398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.726608][T13398] usb 2-1: Product: syz [ 1436.726624][T13398] usb 2-1: Manufacturer: syz [ 1436.726639][T13398] usb 2-1: SerialNumber: syz [ 1437.213188][ T4983] Dev loop4: unable to read RDB block 6 [ 1437.213237][ T4983] loop4: unable to read partition table [ 1437.228389][ T4983] loop4: partition table beyond EOD, truncated [ 1437.371043][T13398] usb 2-1: USB disconnect, device number 49 [ 1438.181694][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.182757][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.186271][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.186898][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.187097][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.187241][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.187658][ T8381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.292852][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807bc56c00: rx timeout, send abort [ 1438.793120][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807bc56800: rx timeout, send abort [ 1438.802682][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807bc56c00: abort rx timeout. Force session deactivation [ 1438.933926][ T5734] usb 3-1: USB disconnect, device number 54 [ 1439.097044][ T8398] kvm: user requested TSC rate below hardware speed [ 1439.293174][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807bc56800: abort rx timeout. Force session deactivation [ 1440.570078][ T8480] tipc: Started in network mode [ 1440.570106][ T8480] tipc: Node identity 1001001, cluster identity 4711 [ 1440.570119][ T8480] tipc: Node number set to 16781313 [ 1440.594749][T31353] net_ratelimit: 7 callbacks suppressed [ 1440.594770][T31353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.595027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.601086][ T8480] tipc: Enabled bearer , priority 0 [ 1440.705053][ T8483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1440.933953][T13398] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1441.084475][T13398] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1441.086346][ T8513] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1441.086556][T13398] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1441.086584][T13398] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1441.086629][T13398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.365296][T13398] usb 1-1: GET_CAPABILITIES returned 0 [ 1441.365365][T13398] usbtmc 1-1:16.0: can't read capabilities [ 1441.612697][T13398] usb 1-1: USB disconnect, device number 52 [ 1442.663847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.695497][T18339] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1442.844411][T18339] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1442.847818][T18339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.847853][T18339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.847874][T18339] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1442.847916][T18339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.868582][T18339] usb 1-1: config 0 descriptor?? [ 1443.315988][T18339] plantronics 0003:047F:FFFF.00AC: reserved main item tag 0xd [ 1443.349676][T18339] plantronics 0003:047F:FFFF.00AC: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1443.646383][T18339] usb 1-1: USB disconnect, device number 53 [ 1444.279385][ T8612] kvm: MWAIT instruction emulated as NOP! [ 1444.535626][ T4690] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1444.693764][ T4690] usb 1-1: Using ep0 maxpacket: 16 [ 1444.694365][ T4690] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1444.695480][ T4690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1444.695529][ T4690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.698706][ T4690] usb 1-1: config 0 descriptor?? [ 1444.699640][ T8616] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1445.117341][ T4690] hid_parser_main: 5 callbacks suppressed [ 1445.117369][ T4690] hid-sensor-hub 0003:0C70:F00D.00AD: unknown main item tag 0x0 [ 1445.117403][ T4690] hid-sensor-hub 0003:0C70:F00D.00AD: unknown main item tag 0x0 [ 1445.117431][ T4690] hid-sensor-hub 0003:0C70:F00D.00AD: unknown main item tag 0x0 [ 1445.117457][ T4690] hid-sensor-hub 0003:0C70:F00D.00AD: unknown main item tag 0x0 [ 1445.117484][ T4690] hid-sensor-hub 0003:0C70:F00D.00AD: unknown main item tag 0x0 [ 1445.117511][ T4690] hid-sensor-hub 0003:0C70:F00D.00AD: unknown main item tag 0x0 [ 1445.117538][ T4690] hid-sensor-hub 0003:0C70:F00D.00AD: unknown main item tag 0x0 [ 1445.117564][ T4690] hid-sensor-hub 0003:0C70:F00D.00AD: unknown main item tag 0x0 [ 1445.117591][ T4690] hid-sensor-hub 0003:0C70:F00D.00AD: unknown main item tag 0x0 [ 1445.117617][ T4690] hid-sensor-hub 0003:0C70:F00D.00AD: unknown main item tag 0x0 [ 1445.132418][ T4690] hid-sensor-hub 0003:0C70:F00D.00AD: hiddev0,hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.0-1/input0 [ 1445.318319][ T4690] hid_sensor_accel_3d HID-SENSOR-200073.1.auto: failed to setup attributes [ 1445.318346][ T4690] hid_sensor_accel_3d HID-SENSOR-200073.1.auto: probe with driver hid_sensor_accel_3d failed with error -1 [ 1445.357932][ T4690] usb 1-1: USB disconnect, device number 54 [ 1445.704529][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.704755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.803856][ T5734] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1445.964564][ T5734] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1445.965899][ T5734] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 1445.965924][ T5734] usb 2-1: config 1 has no interface number 0 [ 1445.970407][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.970432][ T5734] usb 2-1: Product: syz [ 1445.970447][ T5734] usb 2-1: Manufacturer: syz [ 1445.970461][ T5734] usb 2-1: SerialNumber: syz [ 1445.996109][ T5734] usb 2-1: 3:0 : does not exist [ 1445.996133][ T5734] usb 2-1: 3:0 : does not exist [ 1446.287434][T13392] usb 2-1: USB disconnect, device number 50 [ 1446.343970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.703812][ T5734] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1446.777917][ T8737] ip_tables: iptables: counters copy to user failed while replacing table [ 1446.855485][ T5734] usb 1-1: Using ep0 maxpacket: 8 [ 1446.856441][ T5734] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1446.861561][ T5734] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1446.861618][ T5734] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1446.861642][ T5734] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1446.861666][ T5734] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1446.861690][ T5734] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1446.861765][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.099068][ T5734] usb 1-1: GET_CAPABILITIES returned 0 [ 1447.099122][ T5734] usbtmc 1-1:16.0: can't read capabilities [ 1447.316249][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1447.319614][T18339] usb 1-1: USB disconnect, device number 55 [ 1447.412350][ T8774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1447.964136][ T5734] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1448.058194][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22000'. [ 1448.114774][ T5734] usb 3-1: Using ep0 maxpacket: 16 [ 1448.117022][ T5734] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1448.120325][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1448.120356][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1448.122922][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.122948][ T5734] usb 3-1: Product: syz [ 1448.122961][ T5734] usb 3-1: Manufacturer: syz [ 1448.123005][ T5734] usb 3-1: SerialNumber: syz [ 1448.132713][ T5734] usb 3-1: config 0 descriptor?? [ 1448.152324][ T5734] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1448.152357][ T5734] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1448.419232][ T8830] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1448.595414][ T8836] batadv_slave_1: Caught tx_queue_len zero misconfig [ 1448.774850][ T5734] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1448.776518][ T5734] em28xx 3-1:0.0: Config register raw data: 0x3f [ 1448.776542][ T5734] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 1448.776557][ T5734] em28xx 3-1:0.0: No AC97 audio processor [ 1449.217800][ T5734] usb 3-1: USB disconnect, device number 55 [ 1449.283351][ T8876] io-wq is not configured for unbound workers [ 1449.623968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.014414][ T4690] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1450.165054][ T4690] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1450.166310][ T4690] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1450.166341][ T4690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1450.166366][ T4690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1450.166388][ T4690] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1450.166431][ T4690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.172937][ T4690] usb 2-1: config 0 descriptor?? [ 1450.233415][T13398] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 1450.405111][T13398] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1450.406727][T13398] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1450.406755][T13398] usb 3-1: config 0 has no interface number 0 [ 1450.406808][T13398] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1450.406835][T13398] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1450.406877][T13398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.471199][T13398] usb 3-1: config 0 descriptor?? [ 1450.473401][ T8900] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1450.501007][T13398] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1450.632826][ T4690] plantronics 0003:047F:FFFF.00AE: ignoring exceeding usage max [ 1450.713796][ T4690] plantronics 0003:047F:FFFF.00AE: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1450.807811][ T4690] usb 3-1: USB disconnect, device number 56 [ 1450.807934][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1450.830666][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.830902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.978758][T18339] usb 2-1: USB disconnect, device number 51 [ 1452.459330][ T9025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.459893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.460213][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.462744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.710547][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22056'. [ 1452.713782][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22056'. [ 1452.875899][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22058'. [ 1453.388514][ T9067] netlink: 'syz.1.22067': attribute type 15 has an invalid length. [ 1453.400123][ T9067] netlink: 'syz.1.22067': attribute type 15 has an invalid length. [ 1453.402498][T17450] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1453.402714][T17450] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1453.402773][T17450] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1453.402806][T17450] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1453.403672][T13398] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1453.555737][T13398] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1453.557139][T13398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.568104][T13398] usb 3-1: config 0 descriptor?? [ 1453.623946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.735678][ T1576] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1453.789785][T13398] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1453.901634][ T1576] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1453.903313][ T1576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.903345][ T1576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.903408][ T1576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.908414][ T1576] usb 2-1: config 0 descriptor?? [ 1454.027070][T13398] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1454.027127][T13398] [drm] Initialized udl on minor 1 [ 1454.248620][T31351] IPVS: starting estimator thread 0... [ 1454.287870][ T31] audit: type=1326 audit(1791452542.485:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.6.22073" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f9ef9e199 code=0x0 [ 1454.343660][ T9121] IPVS: using max 27 ests per chain, 64800 per kthread [ 1454.348823][ T1576] hid_parser_main: 442 callbacks suppressed [ 1454.348875][ T1576] playstation 0003:054C:0DF2.00AF: unknown main item tag 0x0 [ 1454.348923][ T1576] playstation 0003:054C:0DF2.00AF: unknown main item tag 0x0 [ 1454.348949][ T1576] playstation 0003:054C:0DF2.00AF: unknown main item tag 0x0 [ 1454.348975][ T1576] playstation 0003:054C:0DF2.00AF: unknown main item tag 0x0 [ 1454.349031][ T1576] playstation 0003:054C:0DF2.00AF: unknown main item tag 0x0 [ 1454.363042][ T1576] playstation 0003:054C:0DF2.00AF: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 1454.563921][ T1576] playstation 0003:054C:0DF2.00AF: Failed to retrieve feature with reportID 9: -71 [ 1454.563953][ T1576] playstation 0003:054C:0DF2.00AF: Failed to retrieve DualSense pairing info: -71 [ 1454.564038][ T1576] playstation 0003:054C:0DF2.00AF: Failed to get MAC address from DualSense [ 1454.564054][ T1576] playstation 0003:054C:0DF2.00AF: Failed to create dualsense. [ 1454.584878][ T1576] playstation 0003:054C:0DF2.00AF: probe with driver playstation failed with error -71 [ 1454.605134][ T1576] usb 2-1: USB disconnect, device number 52 [ 1454.818474][T31351] IPVS: stop unused estimator thread 0... [ 1455.873597][ T1576] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1455.945599][ T3364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.945825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.023780][ T1576] usb 2-1: Using ep0 maxpacket: 8 [ 1456.024699][ T1576] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1456.026126][ T1576] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1456.026296][ T1576] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1456.026320][ T1576] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1456.026340][ T1576] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1456.026392][ T1576] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1456.026433][ T1576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.252278][ T1576] usb 2-1: GET_CAPABILITIES returned 0 [ 1456.252360][ T1576] usbtmc 2-1:16.0: can't read capabilities [ 1456.961014][ T5734] usb 2-1: USB disconnect, device number 53 [ 1457.136356][ T9222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22096'. [ 1457.142206][ T9222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22096'. [ 1457.223889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.514075][T13392] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1457.666939][T13392] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 1457.668565][T13392] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.668660][T13392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.306693][T13392] usb 1-1: USB disconnect, device number 56 [ 1458.541535][ T9280] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22107'. [ 1458.542268][ T9280] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22107'. [ 1459.064363][T13398] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1459.064850][T13398] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1459.092663][T13398] usb 3-1: USB disconnect, device number 57 [ 1459.099594][T13392] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1459.100075][T13392] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1459.100280][T13392] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1459.393651][ T5734] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1459.547616][ T5734] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1459.550553][ T5734] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.550609][ T5734] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1459.550632][ T5734] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1459.550672][ T5734] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1459.550714][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.313669][T18339] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1460.359400][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.6.22135'. [ 1460.389209][ T5734] gud 2-1:1.0: Failed to get connectors (error=-5) [ 1460.389247][ T5734] gud 2-1:1.0: probe with driver gud failed with error -5 [ 1460.465305][T18339] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1460.468304][T18339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1460.468339][T18339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1460.468379][T18339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.476560][T18339] usb 3-1: config 0 descriptor?? [ 1460.604917][ T4690] usb 2-1: USB disconnect, device number 54 [ 1460.754010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.905566][T18339] hid-steam 0003:28DE:1142.00B0: unknown main item tag 0x0 [ 1460.905636][T18339] hid-steam 0003:28DE:1142.00B0: unknown main item tag 0x0 [ 1460.905665][T18339] hid-steam 0003:28DE:1142.00B0: unknown main item tag 0x0 [ 1460.905693][T18339] hid-steam 0003:28DE:1142.00B0: unknown main item tag 0x0 [ 1460.905719][T18339] hid-steam 0003:28DE:1142.00B0: unknown main item tag 0x0 [ 1460.913108][T18339] hid-steam 0003:28DE:1142.00B0: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1461.562985][T18339] usb 3-1: USB disconnect, device number 58 [ 1461.604104][T13392] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1461.705815][ T3364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.706052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1461.756189][T13392] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1461.757645][T13392] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1461.757673][T13392] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1461.760235][T13392] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1461.760263][T13392] usb 1-1: Product: syz [ 1461.760278][T13392] usb 1-1: Manufacturer: syz [ 1461.760294][T13392] usb 1-1: SerialNumber: syz [ 1461.769038][T13392] usb 1-1: config 0 descriptor?? [ 1461.801642][T13392] usb 1-1: selecting invalid altsetting 0 [ 1462.049882][T13392] usb 1-1: USB disconnect, device number 57 [ 1462.131396][T28125] udevd[28125]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1462.163723][T18339] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1462.258913][ T9533] syzkaller1: entered promiscuous mode [ 1462.258937][ T9533] syzkaller1: entered allmulticast mode [ 1462.345648][T18339] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1462.346876][T18339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.346905][T18339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.346919][T18339] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1462.346945][T18339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.349197][T18339] usb 2-1: config 0 descriptor?? [ 1462.569677][T18339] usbhid 2-1:0.0: can't add hid device: -71 [ 1462.569797][T18339] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1462.583582][T18339] usb 2-1: USB disconnect, device number 55 [ 1462.742399][ T9561] netlink: 60 bytes leftover after parsing attributes in process `syz.6.22159'. [ 1462.755203][ T9561] netlink: 60 bytes leftover after parsing attributes in process `syz.6.22159'. [ 1462.756412][ T9561] netlink: 'syz.6.22159': attribute type 32 has an invalid length. [ 1462.756436][ T9561] netlink: 500 bytes leftover after parsing attributes in process `syz.6.22159'. [ 1463.537034][ T9588] input: syz0 as /devices/virtual/input/input267 [ 1464.499564][ T9633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1464.667046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.751712][ T9644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1464.773608][ T9642] bridge0: entered promiscuous mode [ 1464.773661][ T9642] bridge0: entered allmulticast mode [ 1464.992959][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22191'. [ 1465.030353][ T9660] ip_tables: iptables: counters copy to user failed while replacing table [ 1465.506501][ T9694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1465.564029][ T5734] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1465.715238][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 1465.716007][ T5734] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1465.717369][ T5734] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.717400][ T5734] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.717423][ T5734] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1465.717460][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.730430][ T5734] usb 2-1: config 0 descriptor?? [ 1465.917324][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22211'. [ 1465.917444][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22211'. [ 1465.917475][ T9725] netlink: 'syz.2.22211': attribute type 6 has an invalid length. [ 1465.918466][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22211'. [ 1465.918486][ T9725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22211'. [ 1465.918506][ T9725] netlink: 'syz.2.22211': attribute type 6 has an invalid length. [ 1466.166965][ T5734] mcp2221 0003:04D8:00DD.00B1: unknown main item tag 0x0 [ 1466.167008][ T5734] mcp2221 0003:04D8:00DD.00B1: unknown main item tag 0x0 [ 1466.167036][ T5734] mcp2221 0003:04D8:00DD.00B1: unknown main item tag 0x0 [ 1466.167062][ T5734] mcp2221 0003:04D8:00DD.00B1: unknown main item tag 0x0 [ 1466.167089][ T5734] mcp2221 0003:04D8:00DD.00B1: unknown main item tag 0x0 [ 1466.174880][ T5734] mcp2221 0003:04D8:00DD.00B1: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1466.530471][ T5734] usb 2-1: USB disconnect, device number 56 [ 1467.068310][ T9781] netlink: 'syz.6.22220': attribute type 1 has an invalid length. [ 1467.459944][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22224'. [ 1467.459980][ T9789] netlink: 'syz.6.22224': attribute type 11 has an invalid length. [ 1467.459995][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22224'. [ 1467.466634][T31353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.466899][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.503647][ T3364] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1467.503693][ T3364] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1467.503724][ T3364] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1467.503753][ T3364] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1467.954388][ T9806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22229'. [ 1468.263813][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.264208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.527040][ T9840] ip_tables: iptables: counters copy to user failed while replacing table [ 1469.535692][ T9871] netlink: 27 bytes leftover after parsing attributes in process `syz.1.22248'. [ 1469.660738][ T9873] dummy0: Caught tx_queue_len zero misconfig [ 1470.061149][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22254'. [ 1470.097277][ T9893] bond1: entered promiscuous mode [ 1470.097736][ T9893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1470.143098][ T9893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1470.143386][ T9893] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1470.147459][ T9893] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 1470.505754][ T9942] xt_hashlimit: size too large, truncated to 1048576 [ 1471.863991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.354872][ T4690] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1472.517650][ T4690] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1472.521011][ T4690] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.521068][ T4690] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1472.521090][ T4690] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1472.521112][ T4690] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1472.521154][ T4690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.596568][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.596827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.993173][T10038] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1473.045031][T10040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1473.619655][ T4690] gud 1-1:1.0: USB-1: Failed to add properties (ret=-5) [ 1473.619717][ T4690] gud 1-1:1.0: Failed to get connectors (error=-5) [ 1473.619745][ T4690] gud 1-1:1.0: probe with driver gud failed with error -5 [ 1473.828689][ T1576] usb 1-1: USB disconnect, device number 58 [ 1475.783822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1475.853558][T18339] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1476.015084][T18339] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1476.016281][T18339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.016312][T18339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.016352][T18339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.023152][T18339] usb 3-1: config 0 descriptor?? [ 1476.084357][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ff03800: rx timeout, send abort [ 1476.178730][T10140] input: syz0 as /devices/virtual/input/input268 [ 1476.441985][T18339] pyra 0003:1E7D:2CF6.00B2: unknown main item tag 0x0 [ 1476.442026][T18339] pyra 0003:1E7D:2CF6.00B2: unknown main item tag 0x0 [ 1476.442054][T18339] pyra 0003:1E7D:2CF6.00B2: unknown main item tag 0x0 [ 1476.442081][T18339] pyra 0003:1E7D:2CF6.00B2: unknown main item tag 0x0 [ 1476.442107][T18339] pyra 0003:1E7D:2CF6.00B2: unknown main item tag 0x0 [ 1476.442144][T18339] pyra 0003:1E7D:2CF6.00B2: unknown main item tag 0x0 [ 1476.442171][T18339] pyra 0003:1E7D:2CF6.00B2: unknown main item tag 0x0 [ 1476.454827][T18339] pyra 0003:1E7D:2CF6.00B2: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1476.584415][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ff03800: abort rx timeout. Force session deactivation [ 1476.584641][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ff02400: rx timeout, send abort [ 1476.645031][T18339] pyra 0003:1E7D:2CF6.00B2: couldn't init struct pyra_device [ 1476.645186][T18339] pyra 0003:1E7D:2CF6.00B2: couldn't install mouse [ 1476.660853][T18339] pyra 0003:1E7D:2CF6.00B2: probe with driver pyra failed with error -32 [ 1477.084689][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801ff02400: abort rx timeout. Force session deactivation [ 1477.391929][T10210] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1477.409371][T10210] bond8: (slave lo): Enslaving as an active interface with an up link [ 1477.419567][T10210] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1477.789039][T10237] loop6: detected capacity change from 0 to 2640 [ 1477.809296][T28858] buffer_io_error: 6 callbacks suppressed [ 1477.809318][T28858] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.814592][T28858] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.815091][T28858] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.815535][T28858] Buffer I/O error on dev loop6, logical block 0, async page read [ 1477.825199][T28858] Buffer I/O error on dev loop6, logical block 0, async page read [ 1478.636619][ T1576] usb 3-1: USB disconnect, device number 59 [ 1478.769380][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22343'. [ 1479.570441][ T31] audit: type=1326 audit(1791452567.766:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.6.22355" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f9ef9e199 code=0x0 [ 1479.944802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.025944][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22362'. [ 1480.027455][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22362'. [ 1480.061029][T10338] input: syz1 as /devices/virtual/input/input269 [ 1480.753712][ T4690] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1480.915348][ T4690] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1480.919879][ T4690] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 1480.919909][ T4690] usb 1-1: config 1 has no interface number 0 [ 1480.926147][ T4690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.926174][ T4690] usb 1-1: Product: syz [ 1480.926188][ T4690] usb 1-1: Manufacturer: syz [ 1480.926235][ T4690] usb 1-1: SerialNumber: syz [ 1481.047571][ T4690] usb 1-1: 3:0 : does not exist [ 1481.047616][ T4690] usb 1-1: 3:0 : does not exist [ 1481.144073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.354235][T18339] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1481.463990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.530622][T18339] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1481.535499][T18339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.563359][T18339] usb 2-1: config 0 descriptor?? [ 1481.737640][T13392] usb 1-1: USB disconnect, device number 59 [ 1481.795551][T18339] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1481.915435][T28858] udevd[28858]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1482.088684][T18339] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 1482.088722][T18339] [drm] Initialized udl on minor 1 [ 1482.796498][ T31] audit: type=1326 audit(1791452570.996:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10442 comm="syz.2.22384" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb7ed9e199 code=0x0 [ 1483.130751][T10459] netlink: 'syz.0.22388': attribute type 11 has an invalid length. [ 1483.860374][T10478] ip_tables: iptables: counters copy to user failed while replacing table [ 1484.033627][ T4690] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1484.104376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.223670][ T4690] usb 3-1: Using ep0 maxpacket: 16 [ 1484.224640][ T4690] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1484.226309][ T4690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.226341][ T4690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1484.226419][ T4690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.232672][ T4690] usb 3-1: config 0 descriptor?? [ 1484.591426][T10507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.591761][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.591950][T10507] bridge_slave_0: entered allmulticast mode [ 1484.615356][T10507] bridge_slave_0: entered promiscuous mode [ 1484.679749][ T4690] HID 045e:07da: Invalid code 65791 type 1 [ 1484.706755][ T4690] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00B3/input/input270 [ 1484.749959][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.750054][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.751654][ T4690] microsoft 0003:045E:07DA.00B3: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1485.521477][ T4690] usb 3-1: USB disconnect, device number 60 [ 1485.823321][T10540] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22402'. [ 1485.905438][T10542] netlink: 'syz.0.22403': attribute type 4 has an invalid length. [ 1485.948959][T10542] netlink: 'syz.0.22403': attribute type 4 has an invalid length. [ 1486.046286][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22404'. [ 1486.046317][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22404'. [ 1486.046334][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22404'. [ 1486.700642][T10573] sock: sock_set_timeout: `syz.0.22411' (pid 10573) tries to set negative timeout [ 1486.986485][T10584] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1487.066300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.144179][T18339] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1487.144628][T18339] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1487.147055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.147433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.148379][T13409] usb 2-1: USB disconnect, device number 57 [ 1487.190064][T18339] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1487.190791][T18339] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1487.223708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.674130][T13409] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1487.828008][T13409] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1487.829453][T13409] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1487.829481][T13409] usb 2-1: config 0 has no interface number 0 [ 1487.829525][T13409] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1487.832092][T13409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.832120][T13409] usb 2-1: Product: syz [ 1487.832136][T13409] usb 2-1: Manufacturer: syz [ 1487.832152][T13409] usb 2-1: SerialNumber: syz [ 1487.902666][T13409] usb 2-1: config 0 descriptor?? [ 1487.918907][T13409] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 1488.263799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.323883][ T1576] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1488.377492][T13409] usb 2-1: USB disconnect, device number 58 [ 1488.477470][ T1576] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1488.480174][ T1576] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 1488.480204][ T1576] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.480222][ T1576] usb 1-1: config 4 has no interface number 0 [ 1488.480264][ T1576] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1488.489869][ T1576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.489896][ T1576] usb 1-1: Product: syz [ 1488.489910][ T1576] usb 1-1: Manufacturer: syz [ 1488.489922][ T1576] usb 1-1: SerialNumber: syz [ 1488.755336][ T1391] syz_tun (unregistering): left allmulticast mode [ 1488.959176][ T1576] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1488.999584][ T1576] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1489.000374][ T1576] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1489.000439][ T1576] usb 1-1: media controller created [ 1489.025053][ T1576] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1489.152489][ T1576] DVB: Unable to find symbol dib7000p_attach() [ 1489.152511][ T1576] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1489.336819][ T1576] rc_core: IR keymap rc-dib0700-rc5 not found [ 1489.336845][ T1576] Registered IR keymap rc-empty [ 1489.337200][ T1576] dvb-usb: could not initialize remote control. [ 1489.337212][ T1576] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1489.599398][ T1576] usb 1-1: USB disconnect, device number 60 [ 1489.696374][ T1576] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1489.894631][ T3364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1489.894672][ T3364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.894699][ T3364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1489.934069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.957878][T14491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1489.974818][T14491] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1489.989920][T14491] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1490.008758][T14491] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1490.021436][T14491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1490.214211][T13409] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 1490.522311][ T3364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1490.522349][ T3364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.522370][ T3364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1490.637811][T13392] hid-generic 0000:0000:0000.00B4: unknown main item tag 0x0 [ 1490.642645][T13392] hid-generic 0000:0000:0000.00B4: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1490.786880][ T3364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1490.786921][ T3364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.786947][ T3364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1491.192693][ T3364] netdevsim netdevsim2  (unregistering): left allmulticast mode [ 1491.195539][ T3364] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1491.195575][ T3364] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.195601][ T3364] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1491.379649][T10778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1491.703790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.104112][ T5652] Bluetooth: hci2: command tx timeout [ 1492.736021][T10681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.736143][T10681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.736317][T10681] bridge_slave_0: entered allmulticast mode [ 1492.740608][T10681] bridge_slave_0: entered promiscuous mode [ 1492.748872][T10681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.748984][T10681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.749600][T10681] bridge_slave_1: entered allmulticast mode [ 1492.755479][T10681] bridge_slave_1: entered promiscuous mode [ 1492.933158][T10681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1492.951306][T10681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.173008][ T3364] dvmrp8: left allmulticast mode [ 1493.173149][ T3364] dvmrp12: left allmulticast mode [ 1493.964977][T10979] netlink: 'syz.6.22459': attribute type 1 has an invalid length. [ 1494.193901][ T5652] Bluetooth: hci2: command tx timeout [ 1494.498010][T10992] input: syz0 as /devices/virtual/input/input272 [ 1495.227798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1495.306064][ T3364] team0: Port device bridge0 removed [ 1495.372623][ T3364] bond0 (unregistering): (slave bond5): Releasing backup interface [ 1495.373382][ T3364] bond0 (unregistering): Released all slaves [ 1495.409932][ T3364] bond1 (unregistering): Released all slaves [ 1495.429917][ T3364] bond2 (unregistering): Released all slaves [ 1495.448223][ T3364] bond3 (unregistering): Released all slaves [ 1495.468902][ T3364] bond4 (unregistering): Released all slaves [ 1495.481524][ T3364] bond5 (unregistering): Released all slaves [ 1495.501095][T10681] team0: Port device team_slave_0 added [ 1495.501190][T10938] bond0: entered promiscuous mode [ 1495.501204][T10938] bond6: entered promiscuous mode [ 1495.501572][T10938] bond0: left promiscuous mode [ 1495.501587][T10938] bond6: left promiscuous mode [ 1495.573238][T10979] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1495.578322][ T5278] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1495.596874][T11003] sit2: entered allmulticast mode [ 1495.848221][T10681] team0: Port device team_slave_1 added [ 1495.889106][ T3364] Uż+: left promiscuous mode [ 1496.253084][ T4983] Dev loop4: unable to read RDB block 6 [ 1496.253135][ T4983] loop4: unable to read partition table [ 1496.253384][ T4983] loop4: partition table beyond EOD, truncated [ 1496.276914][ T5652] Bluetooth: hci2: command tx timeout [ 1496.401725][ T3364] : left promiscuous mode [ 1496.477203][T10681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.477224][T10681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.477248][T10681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.484767][T10681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.484785][T10681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1496.484809][T10681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1496.640411][ T3364] tipc: Left network mode [ 1496.643788][ T5734] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1496.677502][T10681] hsr_slave_0: entered promiscuous mode [ 1496.678690][T10681] hsr_slave_1: entered promiscuous mode [ 1496.697087][T10681] debugfs: 'hsr0' already exists in 'hsr' [ 1496.697110][T10681] Cannot create hsr debugfs directory [ 1496.795384][ T5734] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1496.796481][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1496.796511][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1496.796532][ T5734] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1496.796574][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.802116][ T5734] usb 1-1: config 0 descriptor?? [ 1498.344844][T14491] Bluetooth: hci2: command tx timeout [ 1498.500366][ T5278] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1498.501152][T10681] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1498.526273][T10681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1498.528923][T10681] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1498.534735][T10681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1498.535933][T10681] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1498.573359][T10681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1498.589637][T10681] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1498.640284][T10681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1498.763807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.764043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.805285][ T5734] usbhid 1-1:0.0: can't add hid device: -71 [ 1498.805418][ T5734] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1498.812399][ T5734] usb 1-1: USB disconnect, device number 61 [ 1499.021824][T10681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.095549][T10681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.162325][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.162449][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.223766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.232279][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.232406][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.429662][ T3364] team0: Port device wlan0 removed [ 1499.512130][ T5278] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1499.604501][ T3364] hsr_slave_0: left promiscuous mode [ 1499.606234][ T3364] hsr_slave_1: left promiscuous mode [ 1499.669580][ T3364] veth1_to_batadv: left promiscuous mode [ 1499.669831][ T3364] veth1_vlan: left promiscuous mode [ 1499.669904][ T3364] veth0_vlan: left promiscuous mode [ 1501.333304][T10681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1501.555289][T10681] veth0_vlan: entered promiscuous mode [ 1501.625634][T10681] veth1_vlan: entered promiscuous mode [ 1501.877360][T10681] veth0_macvtap: entered promiscuous mode [ 1501.899279][ T3364] IPVS: stop unused estimator thread 0... [ 1501.928205][T10681] veth1_macvtap: entered promiscuous mode [ 1501.943765][ T4690] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1502.046237][T10681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1502.098217][T10681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1502.112454][ T4690] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1502.117502][ T4690] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1502.117538][ T4690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1502.117573][ T4690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1502.117594][ T4690] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1502.117638][ T4690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.186509][ T4690] usb 2-1: config 0 descriptor?? [ 1502.265168][T31351] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.305930][ T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.306872][ T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.434922][ T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1502.450758][T31351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.450780][T31351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.647122][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1502.647148][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.740334][ T4690] plantronics 0003:047F:FFFF.00B5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1502.906737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.137336][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1503.223953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.224436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.562205][ T1576] usb 2-1: USB disconnect, device number 59 [ 1504.503776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.511146][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22517'. [ 1505.512149][T11490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.512434][T11490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.512771][T11490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.541906][T11490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.542128][T11490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.561633][T11490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.561929][T11490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.614722][T11490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.615218][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.703915][ T1576] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1505.856310][ T1576] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1505.858776][ T1576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.858811][ T1576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.858849][ T1576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.887155][ T1576] usb 2-1: config 0 descriptor?? [ 1506.531974][ T1576] usb 2-1: language id specifier not provided by device, defaulting to English [ 1506.819487][ T31] audit: type=1326 audit(1791452595.006:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11513 comm="syz.0.22536" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2afef9e199 code=0x0 [ 1506.853675][T13392] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1506.948584][ T1576] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00B6/input/input274 [ 1507.006885][T13392] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1507.008411][T13392] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.008465][T13392] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1507.008490][T13392] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1507.008523][T13392] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1507.008604][T13392] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.063903][ T1576] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00B6/input/input275 [ 1507.170883][ T1576] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00B6/input/input276 [ 1507.298693][ T1576] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00B6/input/input277 [ 1507.542944][ T1576] uclogic 0003:256C:006D.00B6: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1507.600060][ T1576] usb 2-1: USB disconnect, device number 60 [ 1507.669765][T11542] fido_id[11542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1508.218897][T13392] [drm] Initialized gud 1.0.0 for 9-1:1.0 on minor 1 [ 1508.469361][T13392] gud 9-1:1.0: [drm] *ERROR* fbdev: Failed to setup emulation (ret=-22) [ 1508.482421][T13392] usb 9-1: USB disconnect, device number 2 [ 1508.685577][ T30] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1508.837132][ T30] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1508.840185][ T30] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 1508.840215][ T30] usb 1-1: config 1 has no interface number 0 [ 1508.842842][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.842868][ T30] usb 1-1: Product: syz [ 1508.842884][ T30] usb 1-1: Manufacturer: syz [ 1508.842898][ T30] usb 1-1: SerialNumber: syz [ 1508.892435][ T30] usb 1-1: 3:1 : does not exist [ 1508.892459][ T30] usb 1-1: 3:2 : does not exist [ 1509.544061][ C1] net_ratelimit: 253 callbacks suppressed [ 1509.544088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.666812][T18339] usb 1-1: USB disconnect, device number 62 [ 1510.079257][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22566'. [ 1510.102844][T11686] xfrm2: entered promiscuous mode [ 1510.102871][T11686] xfrm2: entered allmulticast mode [ 1510.110567][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22566'. [ 1510.129510][ T4690] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1510.263723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.294048][ T4690] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1510.296370][ T4690] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.296403][ T4690] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.296444][ T4690] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.301355][ T4690] usb 9-1: config 0 descriptor?? [ 1510.731578][ T4690] playstation 0003:054C:0DF2.00B7: unknown main item tag 0x0 [ 1510.731617][ T4690] playstation 0003:054C:0DF2.00B7: unknown main item tag 0x0 [ 1510.731644][ T4690] playstation 0003:054C:0DF2.00B7: unknown main item tag 0x0 [ 1510.731670][ T4690] playstation 0003:054C:0DF2.00B7: unknown main item tag 0x0 [ 1510.731696][ T4690] playstation 0003:054C:0DF2.00B7: unknown main item tag 0x0 [ 1510.774283][ T4690] playstation 0003:054C:0DF2.00B7: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 1510.864617][ T30] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1511.015708][ T30] usb 2-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 1511.017162][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1511.017195][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1511.020032][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.020067][ T30] usb 2-1: Product: syz [ 1511.020082][ T30] usb 2-1: Manufacturer: syz [ 1511.020097][ T30] usb 2-1: SerialNumber: syz [ 1511.326561][ T30] kaweth 2-1:1.0: Firmware present in device. [ 1511.341568][ T4690] playstation 0003:054C:0DF2.00B7: Failed to retrieve feature with reportID 5: -71 [ 1511.341600][ T4690] playstation 0003:054C:0DF2.00B7: Failed to retrieve DualSense calibration info: -71 [ 1511.341657][ T4690] playstation 0003:054C:0DF2.00B7: Failed to get calibration data from DualSense [ 1511.341676][ T4690] playstation 0003:054C:0DF2.00B7: Failed to create dualsense. [ 1511.370544][ T4690] playstation 0003:054C:0DF2.00B7: probe with driver playstation failed with error -71 [ 1511.414086][ T4690] usb 9-1: USB disconnect, device number 3 [ 1511.508387][ T30] kaweth 2-1:1.0: Statistics collection: 0 [ 1511.508415][ T30] kaweth 2-1:1.0: Multicast filter limit: 0 [ 1511.508430][ T30] kaweth 2-1:1.0: MTU: 0 [ 1511.508444][ T30] kaweth 2-1:1.0: Read MAC address 00:00:00:00:00:00 [ 1512.138702][ T30] kaweth 2-1:1.0: Error setting receive filter [ 1512.138956][ T30] kaweth 2-1:1.0: probe with driver kaweth failed with error -5 [ 1512.160100][ T30] usb 2-1: USB disconnect, device number 61 [ 1512.581531][T11806] netlink: 'syz.0.22590': attribute type 3 has an invalid length. [ 1513.064397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.394225][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22600'. [ 1513.394269][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.8.22600'. [ 1513.593767][ T4690] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1513.765955][ T4690] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1513.766013][ T4690] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1513.767252][ T4690] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.767278][ T4690] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1513.817939][ T4690] usb 1-1: string descriptor 0 read error: -22 [ 1513.818112][ T4690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.851474][ T4690] usb 1-1: selecting invalid altsetting 1 [ 1513.852297][ T4690] usb 1-1: unit 6 not found! [ 1514.041791][T11870] netlink: 'syz.8.22605': attribute type 16 has an invalid length. [ 1514.041842][T11870] netlink: 'syz.8.22605': attribute type 17 has an invalid length. [ 1514.113623][ T5734] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1514.274688][ T5734] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1514.278451][ T5734] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1514.278486][ T5734] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.278556][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.337183][ T5734] hub 2-1:4.0: USB hub found [ 1514.546544][ T5734] hub 2-1:4.0: 2 ports detected [ 1514.546640][ T5734] usb 2-1: selecting invalid altsetting 1 [ 1514.546657][ T5734] hub 2-1:4.0: Using single TT (err -22) [ 1514.608005][T11884] netlink: 156 bytes leftover after parsing attributes in process `syz.8.22606'. [ 1514.712447][ T4690] usb 1-1: 2:0: broken mixer GET_CUR (0/238/1 => 0) [ 1514.960029][T11900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1515.003816][ T5734] usb 2-1: USB disconnect, device number 62 [ 1515.186125][ T4690] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1515.205191][ T4690] usb 1-1: USB disconnect, device number 63 [ 1515.344071][T11938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1515.461417][T11948] ip_tables: iptables: counters copy to user failed while replacing table [ 1516.023728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.338918][T11992] netlink: 44 bytes leftover after parsing attributes in process `syz.7.22625'. [ 1516.384822][T11992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.391057][T11992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.435452][T11995] netlink: 44 bytes leftover after parsing attributes in process `syz.7.22625'. [ 1516.583740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.744532][ T1576] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1516.760196][T12013] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1516.896625][ T1576] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1516.898053][ T1576] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.898103][ T1576] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.912460][ T1576] usb 9-1: config 0 descriptor?? [ 1517.137242][ T1576] usbhid 9-1:0.0: can't add hid device: -71 [ 1517.137370][ T1576] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1517.146593][ T1576] usb 9-1: USB disconnect, device number 4 [ 1517.654631][ T1576] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1517.803600][ T1576] usb 9-1: Using ep0 maxpacket: 32 [ 1517.804402][ T1576] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1517.806779][ T1576] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.806830][ T1576] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.816610][ T1576] usb 9-1: config 0 descriptor?? [ 1517.854560][ T1576] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1517.895692][ T1576] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1518.280954][ T30] usb 9-1: USB disconnect, device number 5 [ 1518.292130][ T30] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1518.484072][ T1576] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1518.635066][ T1576] usb 1-1: Using ep0 maxpacket: 32 [ 1518.639870][ T1576] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1518.639929][ T1576] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1518.641106][ T1576] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 1518.641133][ T1576] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 1518.641154][ T1576] usb 1-1: config 14 has no interface number 0 [ 1518.641171][ T1576] usb 1-1: config 14 has no interface number 1 [ 1518.641238][ T1576] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1518.641264][ T1576] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1518.641288][ T1576] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1518.641313][ T1576] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1518.641341][ T1576] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1518.641366][ T1576] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1518.641393][ T1576] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1518.641411][ T1576] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1518.646566][ T1576] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.646591][ T1576] usb 1-1: Product: syz [ 1518.646605][ T1576] usb 1-1: Manufacturer: syz [ 1518.646618][ T1576] usb 1-1: SerialNumber: syz [ 1519.112230][ T1576] legousbtower 1-1:14.57: interrupt endpoints not found [ 1519.130217][ T1576] legousbtower 1-1:14.228: get version request failed: -71 [ 1519.130451][ T1576] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 1519.148050][ T1576] usb 1-1: USB disconnect, device number 64 [ 1519.327294][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.7.22653'. [ 1519.347108][T12141] syz_tun: entered allmulticast mode [ 1519.395211][T12141] pim6reg: entered allmulticast mode [ 1519.408568][T12141] pim6reg: left allmulticast mode [ 1519.408685][T12141] syz_tun: left allmulticast mode [ 1519.912713][T12184] netlink: 'syz.0.22666': attribute type 12 has an invalid length. [ 1519.912731][T12184] netlink: 'syz.0.22666': attribute type 29 has an invalid length. [ 1519.912739][T12184] netlink: 148 bytes leftover after parsing attributes in process `syz.0.22666'. [ 1520.224418][ T1576] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1520.267891][T12193] input: syz1 as /devices/virtual/input/input278 [ 1520.375619][ T1576] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1520.377452][ T1576] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1520.377481][ T1576] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1520.377520][ T1576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.397505][ T1576] usb 1-1: probing VID:PID(0424:012C) [ 1520.406488][ T1576] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 1520.406514][ T1576] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1520.406531][ T1576] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 1520.406547][ T1576] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1520.406563][ T1576] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1520.584771][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.805098][ T1576] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1520.907789][T12219] netlink: 'syz.1.22675': attribute type 2 has an invalid length. [ 1520.907842][T12219] netlink: 'syz.1.22675': attribute type 1 has an invalid length. [ 1520.907856][T12219] netlink: 80 bytes leftover after parsing attributes in process `syz.1.22675'. [ 1521.005737][ T1576] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 1521.143714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1521.616286][T12247] netlink: 'syz.1.22681': attribute type 3 has an invalid length. [ 1521.616305][T12247] netlink: 'syz.1.22681': attribute type 6 has an invalid length. [ 1521.616313][T12247] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22681'. [ 1522.228876][T12272] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1522.310690][T12276] binder: 12275:12276 ioctl c0306201 200000000440 returned -22 [ 1522.676318][ T1576] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 1522.799327][T12298] input: syz0 as /devices/virtual/input/input279 [ 1522.819464][T13409] usb 1-1: USB disconnect, device number 65 [ 1522.854199][ T1576] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1522.859693][ T1576] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1522.862677][ T1576] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1523.574303][T13409] USB vub300 remote SDIO host controller[0] now disconnected [ 1523.783840][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 1523.783867][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5653, name: syz-executor [ 1523.783886][ C1] preempt_count: 100, expected: 0 [ 1523.783897][ C1] RCU nest depth: 1, expected: 0 [ 1523.783910][ C1] locks held by syz-executor/5653: 5, last CPU#1: [ 1523.783926][ C1] #0: ffffffff8ee36690 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 1523.784124][ C1] #1: ffff8880124fe540 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1523.784204][ C1] #2: ffff88802bc7a800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1523.784263][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: percpu_ref_get_many+0x19/0x140 [ 1523.784353][ C1] #4: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 1523.784433][ C1] Preemption disabled at: [ 1523.784441][ C1] [] handle_softirqs+0xab/0x860 [ 1523.784481][ C1] CPU: 1 UID: 0 PID: 5653 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1523.784512][ C1] Tainted: [L]=SOFTLOCKUP [ 1523.784521][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1523.784535][ C1] Call Trace: [ 1523.784545][ C1] [ 1523.784556][ C1] dump_stack_lvl+0xe8/0x150 [ 1523.784594][ C1] __might_resched+0x36a/0x4c0 [ 1523.784643][ C1] ? handle_softirqs+0xab/0x860 [ 1523.784673][ C1] __cancel_work_sync+0x6d/0x110 [ 1523.784707][ C1] mmc_free_host+0x19/0x40 [ 1523.784865][ C1] call_timer_fn+0x18d/0x5f0 [ 1523.784891][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1523.784952][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1523.784979][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1523.785019][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1523.785078][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1523.785106][ C1] __run_timer_base+0x652/0x8b0 [ 1523.785156][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1523.785188][ C1] ? ktime_get+0x1f5/0x220 [ 1523.785215][ C1] ? lapic_next_event+0x11/0x20 [ 1523.785268][ C1] run_timer_softirq+0xb7/0x170 [ 1523.785297][ C1] handle_softirqs+0x226/0x860 [ 1523.785327][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1523.785364][ C1] __irq_exit_rcu+0xcb/0x220 [ 1523.785395][ C1] irq_exit_rcu+0x9/0x30 [ 1523.785423][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1523.785455][ C1] [ 1523.785464][ C1] [ 1523.785475][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1523.785502][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 1523.785528][ C1] Code: ff ff ff e8 20 ee 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 82 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 37 39 da [ 1523.785549][ C1] RSP: 0018:ffffc900046a7528 EFLAGS: 00000286 [ 1523.785568][ C1] RAX: 4e35cf09a0254900 RBX: 0000000000000000 RCX: 0000000000000046 [ 1523.785584][ C1] RDX: 00000000ef0486b7 RSI: ffffffff8e69fc58 RDI: ffffffff8c6dad80 [ 1523.785600][ C1] RBP: ffff88807f209f40 R08: ffffffff82419399 R09: 0000000000000000 [ 1523.785616][ C1] R10: 000000000000000b R11: ffffffff81b2c4a0 R12: ffffffff8ed5c8a0 [ 1523.785632][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1523.785651][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1523.785674][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1523.785715][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1523.785748][ C1] percpu_ref_get_many+0x35/0x140 [ 1523.785775][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1523.785805][ C1] __memcg_slab_post_alloc_hook+0xa35/0xd90 [ 1523.785846][ C1] ? vm_area_dup+0x28/0x760 [ 1523.785873][ C1] kmem_cache_alloc_noprof+0x367/0x600 [ 1523.785897][ C1] ? vm_area_dup+0x28/0x760 [ 1523.785917][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1523.785938][ C1] ? vm_area_dup+0x28/0x760 [ 1523.785977][ C1] vm_area_dup+0x28/0x760 [ 1523.785998][ C1] ? dup_mmap+0x875/0x1dc0 [ 1523.786020][ C1] dup_mmap+0x87d/0x1dc0 [ 1523.786065][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1523.786087][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1523.786132][ C1] ? lock_acquire+0x115/0x350 [ 1523.786164][ C1] copy_mm+0x115/0x480 [ 1523.786188][ C1] copy_process+0x1e79/0x4400 [ 1523.786209][ C1] ? __lock_acquire+0x747/0x2de0 [ 1523.786236][ C1] ? copy_process+0xd16/0x4400 [ 1523.786272][ C1] ? __pfx_copy_process+0x10/0x10 [ 1523.786304][ C1] kernel_clone+0x2d7/0x940 [ 1523.786328][ C1] ? cgroup1_freezing+0x20/0x350 [ 1523.786356][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1523.786394][ C1] __x64_sys_clone+0x1b6/0x230 [ 1523.786420][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1523.786459][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 1523.786486][ C1] do_syscall_64+0x166/0x520 [ 1523.786509][ C1] ? trace_irq_disable+0x3b/0x140 [ 1523.786528][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.786545][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1523.786566][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.786582][ C1] RIP: 0033:0x7f14183c6c12 [ 1523.786599][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1523.786613][ C1] RSP: 002b:00007f141874fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1523.786631][ C1] RAX: ffffffffffffffda RBX: 00007f141874fc60 RCX: 00007f14183c6c12 [ 1523.786644][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1523.786655][ C1] RBP: 00007f141874fdec R08: 0000000000000000 R09: 0000000000000001 [ 1523.786666][ C1] R10: 000055558975c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1523.786677][ C1] R13: 00000000000927c0 R14: 0000000000173fc7 R15: 00007f141874fe40 [ 1523.786703][ C1] [ 1523.786907][ C1] [ 1524.356361][ C1] ================================ [ 1524.361581][ C1] WARNING: inconsistent lock state [ 1524.367247][ C1] syzkaller #0 Tainted: G W L [ 1524.373245][ C1] -------------------------------- [ 1524.378544][ C1] inconsistent {SOFTIRQ-ON-R} -> {IN-SOFTIRQ-W} usage. [ 1524.385525][ C1] syz-executor/5653 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 1524.392170][ C1] ffffffff8f817e58 (wakeup_srcu){.+-+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 1524.401481][ C1] {SOFTIRQ-ON-R} state was registered at: [ 1524.407211][ C1] lock_acquire+0x115/0x350 [ 1524.411870][ C1] pm_print_active_wakeup_sources+0x60/0x370 [ 1524.418483][ C1] wakeup_count_store+0xcc/0x120 [ 1524.423623][ C1] kernfs_fop_write_iter+0x3a4/0x540 [ 1524.429022][ C1] aio_write+0x5d0/0x870 [ 1524.433893][ C1] io_submit_one+0x798/0x13d0 [ 1524.439025][ C1] __se_sys_io_submit+0x195/0x340 [ 1524.444215][ C1] do_syscall_64+0x166/0x520 [ 1524.449327][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.455810][ C1] irq event stamp: 16844192 [ 1524.460465][ C1] hardirqs last enabled at (16844192): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 1524.471353][ C1] hardirqs last disabled at (16844191): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 1524.481628][ C1] softirqs last enabled at (16843956): [] __irq_exit_rcu+0xcb/0x220 [ 1524.492521][ C1] softirqs last disabled at (16844007): [] __irq_exit_rcu+0xcb/0x220 [ 1524.502383][ C1] [ 1524.502383][ C1] other info that might help us debug this: [ 1524.510736][ C1] Possible unsafe locking scenario: [ 1524.510736][ C1] [ 1524.518212][ C1] CPU0 [ 1524.521512][ C1] ---- [ 1524.524821][ C1] lock(wakeup_srcu); [ 1524.528926][ C1] [ 1524.532387][ C1] lock(wakeup_srcu); [ 1524.536674][ C1] [ 1524.536674][ C1] *** DEADLOCK *** [ 1524.536674][ C1] [ 1524.544907][ C1] locks held by syz-executor/5653: 5, last CPU#1: [ 1524.551340][ C1] #0: ffffffff8ee36690 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 1524.560176][ C1] #1: ffff8880124fe540 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1524.569267][ C1] #2: ffff88802bc7a800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1524.579242][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: percpu_ref_get_many+0x19/0x140 [ 1524.589043][ C1] #4: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 1524.599627][ C1] [ 1524.599627][ C1] stack backtrace: [ 1524.605549][ C1] CPU: 1 UID: 0 PID: 5653 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 1524.617138][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1524.622535][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1524.632913][ C1] Call Trace: [ 1524.636237][ C1] [ 1524.639112][ C1] dump_stack_lvl+0xe8/0x150 [ 1524.643822][ C1] print_usage_bug+0x28c/0x2e0 [ 1524.648615][ C1] valid_state+0xbe/0xf0 [ 1524.654296][ C1] mark_lock_irq+0x58/0x380 [ 1524.659065][ C1] ? arch_stack_walk+0xfb/0x150 [ 1524.664039][ C1] mark_lock+0x117/0x190 [ 1524.668310][ C1] __lock_acquire+0x71e/0x2de0 [ 1524.673197][ C1] ? check_path+0x21/0x40 [ 1524.677908][ C1] ? add_lock_to_list+0xc7/0x100 [ 1524.683031][ C1] ? lockdep_unlock+0x5c/0xd0 [ 1524.687815][ C1] ? __lock_acquire+0x1511/0x2de0 [ 1524.692878][ C1] lock_sync+0xb3/0x130 [ 1524.697043][ C1] ? __synchronize_srcu+0xb5/0x2f0 [ 1524.702178][ C1] ? __synchronize_srcu+0xb5/0x2f0 [ 1524.707410][ C1] __synchronize_srcu+0xc9/0x2f0 [ 1524.712382][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 1524.717954][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1524.723655][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1524.729680][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1524.735274][ C1] ? synchronize_srcu+0x20a/0x260 [ 1524.740517][ C1] wakeup_source_unregister+0x129/0x3f0 [ 1524.746116][ C1] mmc_host_classdev_release+0x47/0x100 [ 1524.751771][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 1524.758372][ C1] device_release+0xc4/0x1f0 [ 1524.763062][ C1] kobject_put+0x222/0x550 [ 1524.767613][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 1524.772438][ C1] call_timer_fn+0x18d/0x5f0 [ 1524.777478][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1524.785035][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1524.790818][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1524.796729][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1524.803028][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1524.809929][ C1] __run_timer_base+0x652/0x8b0 [ 1524.815001][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1524.820557][ C1] ? ktime_get+0x1f5/0x220 [ 1524.824996][ C1] ? lapic_next_event+0x11/0x20 [ 1524.830072][ C1] run_timer_softirq+0xb7/0x170 [ 1524.834945][ C1] handle_softirqs+0x226/0x860 [ 1524.839733][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1524.844512][ C1] __irq_exit_rcu+0xcb/0x220 [ 1524.849219][ C1] irq_exit_rcu+0x9/0x30 [ 1524.853475][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1524.859293][ C1] [ 1524.862225][ C1] [ 1524.865158][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1524.871163][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 1524.877009][ C1] Code: ff ff ff e8 20 ee 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 82 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 37 39 da [ 1524.897070][ C1] RSP: 0018:ffffc900046a7528 EFLAGS: 00000286 [ 1524.903236][ C1] RAX: 4e35cf09a0254900 RBX: 0000000000000000 RCX: 0000000000000046 [ 1524.911310][ C1] RDX: 00000000ef0486b7 RSI: ffffffff8e69fc58 RDI: ffffffff8c6dad80 [ 1524.919464][ C1] RBP: ffff88807f209f40 R08: ffffffff82419399 R09: 0000000000000000 [ 1524.927615][ C1] R10: 000000000000000b R11: ffffffff81b2c4a0 R12: ffffffff8ed5c8a0 [ 1524.935590][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1524.943569][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1524.949821][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1524.955048][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1524.960540][ C1] percpu_ref_get_many+0x35/0x140 [ 1524.965578][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1524.970971][ C1] __memcg_slab_post_alloc_hook+0xa35/0xd90 [ 1524.977171][ C1] ? vm_area_dup+0x28/0x760 [ 1524.981853][ C1] kmem_cache_alloc_noprof+0x367/0x600 [ 1524.987421][ C1] ? vm_area_dup+0x28/0x760 [ 1524.992461][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1524.998270][ C1] ? vm_area_dup+0x28/0x760 [ 1525.002877][ C1] vm_area_dup+0x28/0x760 [ 1525.007214][ C1] ? dup_mmap+0x875/0x1dc0 [ 1525.011789][ C1] dup_mmap+0x87d/0x1dc0 [ 1525.016127][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1525.020843][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1525.025929][ C1] ? lock_acquire+0x115/0x350 [ 1525.030642][ C1] copy_mm+0x115/0x480 [ 1525.034745][ C1] copy_process+0x1e79/0x4400 [ 1525.039450][ C1] ? __lock_acquire+0x747/0x2de0 [ 1525.044657][ C1] ? copy_process+0xd16/0x4400 [ 1525.050069][ C1] ? __pfx_copy_process+0x10/0x10 [ 1525.055327][ C1] kernel_clone+0x2d7/0x940 [ 1525.059987][ C1] ? cgroup1_freezing+0x20/0x350 [ 1525.064985][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1525.070040][ C1] __x64_sys_clone+0x1b6/0x230 [ 1525.074996][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1525.080928][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 1525.086218][ C1] do_syscall_64+0x166/0x520 [ 1525.090916][ C1] ? trace_irq_disable+0x3b/0x140 [ 1525.096585][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.102753][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1525.107445][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.113534][ C1] RIP: 0033:0x7f14183c6c12 [ 1525.118044][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1525.137931][ C1] RSP: 002b:00007f141874fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1525.146990][ C1] RAX: ffffffffffffffda RBX: 00007f141874fc60 RCX: 00007f14183c6c12 [ 1525.155162][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1525.163153][ C1] RBP: 00007f141874fdec R08: 0000000000000000 R09: 0000000000000001 [ 1525.171135][ C1] R10: 000055558975c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1525.179500][ C1] R13: 00000000000927c0 R14: 0000000000173fc7 R15: 00007f141874fe40 [ 1525.188465][ C1] [ 1525.191732][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 1525.191757][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5653, name: syz-executor [ 1525.191792][ C1] preempt_count: 100, expected: 0 [ 1525.191804][ C1] RCU nest depth: 1, expected: 0 [ 1525.191813][ C1] INFO: lockdep is turned off. [ 1525.191820][ C1] Preemption disabled at: [ 1525.191826][ C1] [] handle_softirqs+0xab/0x860 [ 1525.191874][ C1] CPU: 1 UID: 0 PID: 5653 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 1525.191907][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1525.191916][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1525.191930][ C1] Call Trace: [ 1525.191939][ C1] [ 1525.191949][ C1] dump_stack_lvl+0xe8/0x150 [ 1525.191981][ C1] __might_resched+0x36a/0x4c0 [ 1525.192013][ C1] ? handle_softirqs+0xab/0x860 [ 1525.192042][ C1] __synchronize_srcu+0x1a1/0x2f0 [ 1525.192067][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 1525.192089][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1525.192123][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1525.192153][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1525.192178][ C1] ? synchronize_srcu+0x20a/0x260 [ 1525.192201][ C1] wakeup_source_unregister+0x129/0x3f0 [ 1525.192232][ C1] mmc_host_classdev_release+0x47/0x100 [ 1525.192261][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 1525.192288][ C1] device_release+0xc4/0x1f0 [ 1525.192319][ C1] kobject_put+0x222/0x550 [ 1525.192342][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 1525.192375][ C1] call_timer_fn+0x18d/0x5f0 [ 1525.192402][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1525.192425][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1525.192451][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1525.192482][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1525.192508][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1525.192533][ C1] __run_timer_base+0x652/0x8b0 [ 1525.192564][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1525.192590][ C1] ? ktime_get+0x1f5/0x220 [ 1525.192613][ C1] ? lapic_next_event+0x11/0x20 [ 1525.192639][ C1] run_timer_softirq+0xb7/0x170 [ 1525.192665][ C1] handle_softirqs+0x226/0x860 [ 1525.192693][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1525.192723][ C1] __irq_exit_rcu+0xcb/0x220 [ 1525.192751][ C1] irq_exit_rcu+0x9/0x30 [ 1525.192786][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1525.192817][ C1] [ 1525.192824][ C1] [ 1525.192832][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1525.192856][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 1525.192880][ C1] Code: ff ff ff e8 20 ee 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 82 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 37 39 da [ 1525.192899][ C1] RSP: 0018:ffffc900046a7528 EFLAGS: 00000286 [ 1525.192921][ C1] RAX: 4e35cf09a0254900 RBX: 0000000000000000 RCX: 0000000000000046 [ 1525.192938][ C1] RDX: 00000000ef0486b7 RSI: ffffffff8e69fc58 RDI: ffffffff8c6dad80 [ 1525.192955][ C1] RBP: ffff88807f209f40 R08: ffffffff82419399 R09: 0000000000000000 [ 1525.192971][ C1] R10: 000000000000000b R11: ffffffff81b2c4a0 R12: ffffffff8ed5c8a0 [ 1525.192986][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1525.193003][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1525.193026][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1525.193060][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1525.193086][ C1] percpu_ref_get_many+0x35/0x140 [ 1525.193115][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1525.193145][ C1] __memcg_slab_post_alloc_hook+0xa35/0xd90 [ 1525.193177][ C1] ? vm_area_dup+0x28/0x760 [ 1525.193198][ C1] kmem_cache_alloc_noprof+0x367/0x600 [ 1525.193218][ C1] ? vm_area_dup+0x28/0x760 [ 1525.193234][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1525.193254][ C1] ? vm_area_dup+0x28/0x760 [ 1525.193276][ C1] vm_area_dup+0x28/0x760 [ 1525.193295][ C1] ? dup_mmap+0x875/0x1dc0 [ 1525.193313][ C1] dup_mmap+0x87d/0x1dc0 [ 1525.193340][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1525.193362][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1525.193401][ C1] ? lock_acquire+0x115/0x350 [ 1525.193427][ C1] copy_mm+0x115/0x480 [ 1525.193454][ C1] copy_process+0x1e79/0x4400 [ 1525.193481][ C1] ? __lock_acquire+0x747/0x2de0 [ 1525.193508][ C1] ? copy_process+0xd16/0x4400 [ 1525.193535][ C1] ? __pfx_copy_process+0x10/0x10 [ 1525.193566][ C1] kernel_clone+0x2d7/0x940 [ 1525.193594][ C1] ? cgroup1_freezing+0x20/0x350 [ 1525.193626][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1525.193663][ C1] __x64_sys_clone+0x1b6/0x230 [ 1525.193693][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1525.193739][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 1525.193765][ C1] do_syscall_64+0x166/0x520 [ 1525.193808][ C1] ? trace_irq_disable+0x3b/0x140 [ 1525.193833][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.193854][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1525.193879][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.193900][ C1] RIP: 0033:0x7f14183c6c12 [ 1525.193919][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1525.193939][ C1] RSP: 002b:00007f141874fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1525.193963][ C1] RAX: ffffffffffffffda RBX: 00007f141874fc60 RCX: 00007f14183c6c12 [ 1525.193979][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1525.193995][ C1] RBP: 00007f141874fdec R08: 0000000000000000 R09: 0000000000000001 [ 1525.194010][ C1] R10: 000055558975c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1525.194024][ C1] R13: 00000000000927c0 R14: 0000000000173fc7 R15: 00007f141874fe40 [ 1525.194046][ C1] [ 1525.194087][ C1] ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc900046a0000, but annotated. [ 1525.194720][ C1] ------------[ cut here ]------------ [ 1525.194731][ C1] 1 [ 1525.194738][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz-executor/5653 [ 1525.790454][ C1] Modules linked in: [ 1525.794378][ C1] CPU: 1 UID: 0 PID: 5653 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 1525.805943][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1525.811258][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1525.821524][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 1525.827622][ C1] Code: fe 06 cc 41 ff c7 44 89 3d 69 0c e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ad 5e 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 41 67 6d 0a 3b 05 3f [ 1525.847669][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 1525.854091][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 4e35cf09a0254900 [ 1525.862173][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 1525.870151][ C1] RBP: ffff88807f209f60 R08: 0000000000000100 R09: 1ffff920001430e4 [ 1525.878400][ C1] R10: dffffc0000000000 R11: fffff520001430e5 R12: 1ffff9200014314c [ 1525.886485][ C1] R13: ffff88802bc2a7a8 R14: dffffc0000000000 R15: 0000000000000001 [ 1525.894478][ C1] FS: 000055558975c500(0000) GS:ffff888124dc6000(0000) knlGS:0000000000000000 [ 1525.903531][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1525.910154][ C1] CR2: 00007f14191556c8 CR3: 0000000071e7c000 CR4: 00000000003526f0 [ 1525.918250][ C1] Call Trace: [ 1525.921559][ C1] [ 1525.924418][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 1525.930068][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 1525.935102][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 1525.940652][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1525.945715][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1525.951656][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1525.957295][ C1] ? synchronize_srcu+0x20a/0x260 [ 1525.962356][ C1] wakeup_source_unregister+0x129/0x3f0 [ 1525.967927][ C1] mmc_host_classdev_release+0x47/0x100 [ 1525.973664][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 1525.980097][ C1] device_release+0xc4/0x1f0 [ 1525.984972][ C1] kobject_put+0x222/0x550 [ 1525.989542][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 1525.994602][ C1] call_timer_fn+0x18d/0x5f0 [ 1525.999320][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1526.006018][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1526.010881][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1526.016012][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1526.021705][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1526.028407][ C1] __run_timer_base+0x652/0x8b0 [ 1526.033372][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1526.038800][ C1] ? ktime_get+0x1f5/0x220 [ 1526.043330][ C1] ? lapic_next_event+0x11/0x20 [ 1526.048210][ C1] run_timer_softirq+0xb7/0x170 [ 1526.053283][ C1] handle_softirqs+0x226/0x860 [ 1526.058178][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1526.063220][ C1] __irq_exit_rcu+0xcb/0x220 [ 1526.067927][ C1] irq_exit_rcu+0x9/0x30 [ 1526.072176][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1526.077865][ C1] [ 1526.081071][ C1] [ 1526.084320][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1526.090596][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 1526.095905][ C1] Code: ff ff ff e8 20 ee 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 82 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 37 39 da [ 1526.115654][ C1] RSP: 0018:ffffc900046a7528 EFLAGS: 00000286 [ 1526.121834][ C1] RAX: 4e35cf09a0254900 RBX: 0000000000000000 RCX: 0000000000000046 [ 1526.130023][ C1] RDX: 00000000ef0486b7 RSI: ffffffff8e69fc58 RDI: ffffffff8c6dad80 [ 1526.138011][ C1] RBP: ffff88807f209f40 R08: ffffffff82419399 R09: 0000000000000000 [ 1526.145988][ C1] R10: 000000000000000b R11: ffffffff81b2c4a0 R12: ffffffff8ed5c8a0 [ 1526.154413][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1526.162392][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1526.168558][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1526.175261][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1526.180504][ C1] percpu_ref_get_many+0x35/0x140 [ 1526.186173][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1526.191514][ C1] __memcg_slab_post_alloc_hook+0xa35/0xd90 [ 1526.197478][ C1] ? vm_area_dup+0x28/0x760 [ 1526.202091][ C1] kmem_cache_alloc_noprof+0x367/0x600 [ 1526.207901][ C1] ? vm_area_dup+0x28/0x760 [ 1526.212498][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1526.218155][ C1] ? vm_area_dup+0x28/0x760 [ 1526.222680][ C1] vm_area_dup+0x28/0x760 [ 1526.227032][ C1] ? dup_mmap+0x875/0x1dc0 [ 1526.231476][ C1] dup_mmap+0x87d/0x1dc0 [ 1526.235768][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1526.240662][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1526.245710][ C1] ? lock_acquire+0x115/0x350 [ 1526.250401][ C1] copy_mm+0x115/0x480 [ 1526.254573][ C1] copy_process+0x1e79/0x4400 [ 1526.259349][ C1] ? __lock_acquire+0x747/0x2de0 [ 1526.264389][ C1] ? copy_process+0xd16/0x4400 [ 1526.269284][ C1] ? __pfx_copy_process+0x10/0x10 [ 1526.274320][ C1] kernel_clone+0x2d7/0x940 [ 1526.278837][ C1] ? cgroup1_freezing+0x20/0x350 [ 1526.283789][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1526.288921][ C1] __x64_sys_clone+0x1b6/0x230 [ 1526.293786][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1526.299102][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 1526.304666][ C1] do_syscall_64+0x166/0x520 [ 1526.309390][ C1] ? trace_irq_disable+0x3b/0x140 [ 1526.314476][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.320579][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1526.325357][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1526.331279][ C1] RIP: 0033:0x7f14183c6c12 [ 1526.335811][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1526.355546][ C1] RSP: 002b:00007f141874fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1526.364007][ C1] RAX: ffffffffffffffda RBX: 00007f141874fc60 RCX: 00007f14183c6c12 [ 1526.372182][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1526.380440][ C1] RBP: 00007f141874fdec R08: 0000000000000000 R09: 0000000000000001 [ 1526.388425][ C1] R10: 000055558975c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1526.396404][ C1] R13: 00000000000927c0 R14: 0000000000173fc7 R15: 00007f141874fe40 [ 1526.404839][ C1] [ 1526.408253][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1526.415627][ C1] CPU: 1 UID: 0 PID: 5653 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 1526.426741][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1526.432045][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1526.442388][ C1] Call Trace: [ 1526.445680][ C1] [ 1526.448531][ C1] vpanic+0x56d/0xa60 [ 1526.452529][ C1] ? __pfx__printk+0x10/0x10 [ 1526.457217][ C1] ? __pfx_vpanic+0x10/0x10 [ 1526.461733][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1526.467044][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1526.472327][ C1] panic+0xc5/0xd0 [ 1526.476161][ C1] ? __pfx_panic+0x10/0x10 [ 1526.480618][ C1] __warn+0x315/0x4c0 [ 1526.484764][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 1526.490254][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 1526.495543][ C1] __report_bug+0x276/0x570 [ 1526.500170][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 1526.505566][ C1] ? __pfx___report_bug+0x10/0x10 [ 1526.510690][ C1] ? __wake_up_klogd+0xf0/0x130 [ 1526.515552][ C1] ? vprintk_emit+0x4ee/0x560 [ 1526.520357][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1526.525395][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 1526.530781][ C1] report_bug+0x16b/0x220 [ 1526.535121][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 1526.540497][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 1526.545939][ C1] handle_bug+0x9c/0x200 [ 1526.550408][ C1] exc_invalid_op+0x1a/0x50 [ 1526.555030][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1526.559917][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 1526.565944][ C1] Code: fe 06 cc 41 ff c7 44 89 3d 69 0c e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 ad 5e 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 41 67 6d 0a 3b 05 3f [ 1526.585664][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 1526.591758][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 4e35cf09a0254900 [ 1526.599925][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 1526.608258][ C1] RBP: ffff88807f209f60 R08: 0000000000000100 R09: 1ffff920001430e4 [ 1526.616429][ C1] R10: dffffc0000000000 R11: fffff520001430e5 R12: 1ffff9200014314c [ 1526.624408][ C1] R13: ffff88802bc2a7a8 R14: dffffc0000000000 R15: 0000000000000001 [ 1526.632394][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 1526.637697][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 1526.643340][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 1526.648679][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 1526.654412][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1526.659452][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1526.665712][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 1526.671295][ C1] ? synchronize_srcu+0x20a/0x260 [ 1526.676442][ C1] wakeup_source_unregister+0x129/0x3f0 [ 1526.682212][ C1] mmc_host_classdev_release+0x47/0x100 [ 1526.687885][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 1526.694148][ C1] device_release+0xc4/0x1f0 [ 1526.698753][ C1] kobject_put+0x222/0x550 [ 1526.703175][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 1526.707952][ C1] call_timer_fn+0x18d/0x5f0 [ 1526.712642][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1526.719409][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1526.724099][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1526.729227][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1526.734488][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1526.741409][ C1] __run_timer_base+0x652/0x8b0 [ 1526.746305][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1526.751728][ C1] ? ktime_get+0x1f5/0x220 [ 1526.756160][ C1] ? lapic_next_event+0x11/0x20 [ 1526.761332][ C1] run_timer_softirq+0xb7/0x170 [ 1526.766246][ C1] handle_softirqs+0x226/0x860 [ 1526.771210][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1526.775992][ C1] __irq_exit_rcu+0xcb/0x220 [ 1526.780606][ C1] irq_exit_rcu+0x9/0x30 [ 1526.785126][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1526.790814][ C1] [ 1526.793854][ C1] [ 1526.796795][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1526.802981][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 1526.808480][ C1] Code: ff ff ff e8 20 ee 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 82 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 37 39 da [ 1526.828288][ C1] RSP: 0018:ffffc900046a7528 EFLAGS: 00000286 [ 1526.834392][ C1] RAX: 4e35cf09a0254900 RBX: 0000000000000000 RCX: 0000000000000046 [ 1526.842542][ C1] RDX: 00000000ef0486b7 RSI: ffffffff8e69fc58 RDI: ffffffff8c6dad80 [ 1526.850705][ C1] RBP: ffff88807f209f40 R08: ffffffff82419399 R09: 0000000000000000 [ 1526.859206][ C1] R10: 000000000000000b R11: ffffffff81b2c4a0 R12: ffffffff8ed5c8a0 [ 1526.867205][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 1526.875479][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1526.881704][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1526.887227][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1526.892782][ C1] percpu_ref_get_many+0x35/0x140 [ 1526.897854][ C1] ? percpu_ref_get_many+0x19/0x140 [ 1526.903237][ C1] __memcg_slab_post_alloc_hook+0xa35/0xd90 [ 1526.909229][ C1] ? vm_area_dup+0x28/0x760 [ 1526.913741][ C1] kmem_cache_alloc_noprof+0x367/0x600 [ 1526.919313][ C1] ? vm_area_dup+0x28/0x760 [ 1526.923847][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1526.929519][ C1] ? vm_area_dup+0x28/0x760 [ 1526.934029][ C1] vm_area_dup+0x28/0x760 [ 1526.938451][ C1] ? dup_mmap+0x875/0x1dc0 [ 1526.942870][ C1] dup_mmap+0x87d/0x1dc0 [ 1526.947142][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1526.951830][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1526.957496][ C1] ? lock_acquire+0x115/0x350 [ 1526.962224][ C1] copy_mm+0x115/0x480 [ 1526.966324][ C1] copy_process+0x1e79/0x4400 [ 1526.971109][ C1] ? __lock_acquire+0x747/0x2de0 [ 1526.976327][ C1] ? copy_process+0xd16/0x4400 [ 1526.981107][ C1] ? __pfx_copy_process+0x10/0x10 [ 1526.986316][ C1] kernel_clone+0x2d7/0x940 [ 1526.990838][ C1] ? cgroup1_freezing+0x20/0x350 [ 1526.995789][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1527.001019][ C1] __x64_sys_clone+0x1b6/0x230 [ 1527.005798][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1527.011198][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 1527.016583][ C1] do_syscall_64+0x166/0x520 [ 1527.021188][ C1] ? trace_irq_disable+0x3b/0x140 [ 1527.026233][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.032423][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1527.037120][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.043042][ C1] RIP: 0033:0x7f14183c6c12 [ 1527.047560][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1527.067868][ C1] RSP: 002b:00007f141874fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1527.076401][ C1] RAX: ffffffffffffffda RBX: 00007f141874fc60 RCX: 00007f14183c6c12 [ 1527.084571][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1527.092555][ C1] RBP: 00007f141874fdec R08: 0000000000000000 R09: 0000000000000001 [ 1527.100538][ C1] R10: 000055558975c7d0 R11: 0000000000000246 R12: 0000000000000001 [ 1527.108609][ C1] R13: 00000000000927c0 R14: 0000000000173fc7 R15: 00007f141874fe40 [ 1527.117057][ C1] [ 1527.120673][ C1] Kernel Offset: disabled [ 1527.125005][ C1] Rebooting in 86400 seconds..