last executing test programs: 6.812280742s ago: executing program 2 (id=1030): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000ac0)={0x14, 0x0, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x410}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00035c0000005c03"]}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 4.566973044s ago: executing program 3 (id=1043): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x68800, 0x1c) lseek(r2, 0x101, 0x1) getdents64(r2, 0x0, 0x4f) 4.276948867s ago: executing program 3 (id=1044): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2400c04c) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000300), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) 4.139583532s ago: executing program 3 (id=1045): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x4f, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x2663}, 0x8840) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 4.028926529s ago: executing program 3 (id=1046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="0800080006000600080014000000450a0014006600000b11"], 0x22) 3.824656769s ago: executing program 2 (id=1047): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x41, 0xb2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000074}]}) 3.81371432s ago: executing program 1 (id=1048): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2099, 0x24d0, 0x2, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000100)={[0x4]}, &(0x7f0000000140), 0x8) 3.52342013s ago: executing program 1 (id=1050): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r2, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x48}}, 0x4040000) 3.422087563s ago: executing program 2 (id=1051): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b200101000000090400000202060000052406000005240000000d240f01"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x2, 0x7, 0x2, 0x0, 0x9, 0x1, 0x6, 0xb2, 0x4, 0x4, 0x8, 0x0, 0x0, 0x4, 0x4, 0x6, 0x10, 0xb, 0x4, '\x00', 0x7, 0x800000}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0xc, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0x9}, {0x7, 0x9, 0xe, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7c, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0xa, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x3d}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0x9}, {0xf, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0x10, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0xf8, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0xfd}]}}) 3.349673941s ago: executing program 3 (id=1052): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.299952989s ago: executing program 1 (id=1053): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r2, 0x2007ffb) open(&(0x7f0000000040)='./bus\x00', 0x40000, 0x18) 2.709226721s ago: executing program 4 (id=1054): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0xfffffffe, 0x0, 0x3fc, 0x0, 0x32, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x800, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.173779887s ago: executing program 4 (id=1056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000160a010300000000000000000a0008042c0003800800014000000000080002400000000218000380140001006e657464657673696d300000000000000900010073797a310000000008000740000000030900020073797a310000000014000000040001"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.082477126s ago: executing program 0 (id=1057): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x19, 0xe, 0x4, 0xc20, 0x2, 0x3e, 0x2, 0x4, 0x40, 0x23f, 0x10, 0xd, 0x38, 0x1, 0x8, 0xff7d, 0x9}, [{0x60000000, 0x5, 0xffffffffffffffff, 0x100000000, 0x80, 0x800000000, 0xf, 0x8000000000000000}]}, 0x78) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 1.984369736s ago: executing program 0 (id=1058): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r1, 0x4004480d, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.88621406s ago: executing program 4 (id=1059): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x10c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000080), &(0x7f0000000000)="15", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 1.711535104s ago: executing program 2 (id=1060): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1.580482672s ago: executing program 4 (id=1061): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) accept(r0, 0x0, 0x0) 824.991029ms ago: executing program 0 (id=1062): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) 668.732136ms ago: executing program 1 (id=1063): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x3}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 666.87914ms ago: executing program 2 (id=1064): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 617.243242ms ago: executing program 0 (id=1065): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x28141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 476.618815ms ago: executing program 4 (id=1066): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"96398d2fd9b43f86d912e46b79bc31220f8763754c201a0392a16210166895317c919effe306379c8bfc6deabd7ce27fdec0c16a77e7fd5f6f96a3e3a2c53ff467d7965124bed66f2d8df224e357d27c36b9b6df92a82b83fb54fcfa10c6a32d5f2e7fcdda12fac3c3518498e23bf6af290a0bda5a9a003cfceed707d0108f33d7c1ebe7d0adc55f36f0b756c05951bff0bb3e54ea276103ce9cb1ca20fdead019b2b1ea4c45fdb7b296d171fb1bea1c28759ef6cd0548b8f6c7e13743026fd78553a6c921e9109aecef7eeea9e2e8904d62e8af2a0eabb6fd0a638e9559ca96f85c7fc303f2992e75261d6f4dacb14180333080274fe22f47efb609802d3f0866ded623740181cc626e81157af8d758c8385e97998604ef132535aa1c2df0a88b3e01c0aa6b401329d757126da4ed7a1edc34b00f91613b57fff7024ca4706b4c79de16e8e1caa8624be0f02d2d76fa0f27f3a51556a00cd21ed0402a543fbc89a6f2636316f13ac1b98284f30efcfbe74c67a7c46549accfddf12fe25ccb9aa6d18a28e4c63c1a2a134786a646f3e7432cc1e477454d8839679a7a9da6c923622cc2ec748b2337fec8187b03c94721c1607ef7f305e718a004d01af6b23a0834c2cc8e6bf75b574786d1468baceaa70f58d444d97cffc3a7d9ffb54ca3a0500c6499018d07f3b9e82ee0ba7eb94ca949e4da9ab0c71edfff53e703adfafb5e2bfcac165fe483dc04620d18fb3f46741dc32ad9887dbc3fe53d47fac34b72156b7a4366bc717a7f3dafae82026fde89cbfbcf22bcb3768ba51c4a29984c4ec5334c9aee894b8256c45d85149688bef7ade6dbd483cadba1e87506a32b84e80d339c56cd5955dd7a1eb7894afd5b774f44ec1c3e847d1a83db24ca98ec893f798d854c4aadfc02d4a93dc7aeacc4dcaa5b683b0110e226acb1cdf6ea4ce53a5abeda7de6a34eb47b152c8c7dd26f2300dd180c5595a00e1e8cfbc22842a6f7a750402d5909edc8ab69249cb256ec6263123f9d26296b3358461e8da2561be0c269fa3fa4f29fdc36b35e2fbf0e9d62900c4ab98328ee0bc15599f800b8688a655bfbcf26e0ae7fd175d1c4e31e981623d3c9f27a1ca89d79a4e599501b6a16cbc7c38d4bc29817a92f642bf0dcacdbc07753296e7568287889a03e43dccd05d6e54bbfd21455e2ebb1c38b97d5498ecff863cdc13e6c7aca467b660542d69024d5830a4fd505973d0f6a8a809c03ddb0459133f0535d44f0a05462a577ed03038d45acc6aac491435a3336373dda045e55c2365bdc0e375ad4a03f14531d302924397e23e3da8b88f791be2418c2e04981b27f933d435a8799e66db6d2112baca6cf7c6f6b87dacfd80e7fb6373ea2def3b7e7f2bf539a98885b537f0f218608349d6782ed66855e6b8ea533e8490224ee2bdfb7e93f27169d4dd9cc66d8c1c5"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xffff1000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x98, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x8, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0x0, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x3, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 344.579516ms ago: executing program 1 (id=1067): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r0}) fcntl$notify(r2, 0x402, 0x80000027) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 223.646677ms ago: executing program 0 (id=1068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000019, 0x11, r2, 0x100000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 150.168451ms ago: executing program 2 (id=1069): socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000240)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2040800) 82.416788ms ago: executing program 3 (id=1070): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) mknod$loop(&(0x7f00000006c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x10c091, 0x0) 64.420854ms ago: executing program 4 (id=1071): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000001280)=0x0) r2 = eventfd2(0x3, 0x80000) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_destroy(r1) 1.81374ms ago: executing program 1 (id=1072): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x6, @local, 0x1}]}, &(0x7f00000001c0)=0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r2}, 0x8) 0s ago: executing program 0 (id=1073): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) kernel console output (not intermixed with test programs): atadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.612546][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.638569][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.650043][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.670490][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.677914][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.704301][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.736801][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.758518][ T5630] team0: Port device team_slave_0 added [ 82.767433][ T5630] team0: Port device team_slave_1 added [ 82.789949][ T5633] team0: Port device team_slave_0 added [ 82.842100][ T5633] team0: Port device team_slave_1 added [ 82.853253][ T51] Bluetooth: hci2: command tx timeout [ 82.853631][ T5612] Bluetooth: hci3: command tx timeout [ 82.865223][ T4929] Bluetooth: hci4: command tx timeout [ 82.880878][ T5631] team0: Port device team_slave_0 added [ 82.889019][ T5631] team0: Port device team_slave_1 added [ 82.911427][ T5629] hsr_slave_0: entered promiscuous mode [ 82.918143][ T5629] hsr_slave_1: entered promiscuous mode [ 82.931970][ T4929] Bluetooth: hci0: command tx timeout [ 82.938029][ T5612] Bluetooth: hci1: command tx timeout [ 82.951553][ T5632] team0: Port device team_slave_0 added [ 82.968816][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.975903][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.001911][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.014607][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.021574][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.047800][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.071596][ T5632] team0: Port device team_slave_1 added [ 83.106805][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.113865][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.140011][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.162017][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.169078][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.195645][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.226491][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.233682][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.259870][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.282684][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.289670][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.315717][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.347784][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.354913][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.381044][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.419926][ T5630] hsr_slave_0: entered promiscuous mode [ 83.426973][ T5630] hsr_slave_1: entered promiscuous mode [ 83.433701][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 83.439508][ T5630] Cannot create hsr debugfs directory [ 83.465523][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.472731][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.498785][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.623472][ T5631] hsr_slave_0: entered promiscuous mode [ 83.630065][ T5631] hsr_slave_1: entered promiscuous mode [ 83.636660][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 83.642456][ T5631] Cannot create hsr debugfs directory [ 83.661350][ T5633] hsr_slave_0: entered promiscuous mode [ 83.668310][ T5633] hsr_slave_1: entered promiscuous mode [ 83.674801][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 83.680585][ T5633] Cannot create hsr debugfs directory [ 83.736798][ T5632] hsr_slave_0: entered promiscuous mode [ 83.743357][ T5632] hsr_slave_1: entered promiscuous mode [ 83.749526][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 83.755371][ T5632] Cannot create hsr debugfs directory [ 84.149659][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.162842][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.171042][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.181177][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.227168][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.237209][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.245262][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.257339][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.351600][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.362063][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.370233][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.381637][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.407004][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.417761][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.425614][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.435632][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.496968][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.511041][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.526595][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.537359][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.545700][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.556130][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.573239][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.585945][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.705566][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.714141][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.724433][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.734459][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.744511][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.769053][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.780835][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.790757][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.802405][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.863907][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.917504][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.925182][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.933513][ T4929] Bluetooth: hci4: command tx timeout [ 84.935233][ T51] Bluetooth: hci2: command tx timeout [ 84.939836][ T5612] Bluetooth: hci3: command tx timeout [ 84.963809][ T5633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.974548][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.995315][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.003466][ T5633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.012615][ T4929] Bluetooth: hci0: command tx timeout [ 85.018088][ T5612] Bluetooth: hci1: command tx timeout [ 85.024750][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.033284][ T5633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.044598][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.052621][ T5633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.062434][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.071467][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.078677][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.155663][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.195256][ T1346] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.202780][ T1346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.241202][ T1346] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.248511][ T1346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.291243][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.380362][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.396581][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.431050][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.438205][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.471516][ T1346] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.478691][ T1346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.496750][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.525530][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.548245][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.561115][ T1346] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.568262][ T1346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.599349][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.606529][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.664899][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.710854][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.722833][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.729984][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.749975][ T5629] veth0_vlan: entered promiscuous mode [ 85.761570][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.768728][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.816256][ T5629] veth1_vlan: entered promiscuous mode [ 85.836425][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.949189][ T5630] veth0_vlan: entered promiscuous mode [ 85.968220][ T5629] veth0_macvtap: entered promiscuous mode [ 85.991235][ T5629] veth1_macvtap: entered promiscuous mode [ 86.005414][ T5630] veth1_vlan: entered promiscuous mode [ 86.043510][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.054468][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.067436][ T5631] veth0_vlan: entered promiscuous mode [ 86.085493][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.111347][ T5631] veth1_vlan: entered promiscuous mode [ 86.120502][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.180302][ T5630] veth0_macvtap: entered promiscuous mode [ 86.201272][ T5630] veth1_macvtap: entered promiscuous mode [ 86.233263][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.256137][ T5632] veth0_vlan: entered promiscuous mode [ 86.290776][ T5633] veth0_vlan: entered promiscuous mode [ 86.309804][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.323565][ T5631] veth0_macvtap: entered promiscuous mode [ 86.348226][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.358618][ T5631] veth1_macvtap: entered promiscuous mode [ 86.374084][ T5633] veth1_vlan: entered promiscuous mode [ 86.387399][ T5632] veth1_vlan: entered promiscuous mode [ 86.402939][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.460215][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.471222][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.502365][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.534831][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.546632][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.595174][ T1346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.613258][ T999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.627874][ T1346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.644494][ T999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.659578][ T5632] veth0_macvtap: entered promiscuous mode [ 86.678505][ T5633] veth0_macvtap: entered promiscuous mode [ 86.717224][ T5632] veth1_macvtap: entered promiscuous mode [ 86.749967][ T5633] veth1_macvtap: entered promiscuous mode [ 86.784566][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.802110][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.812455][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.838086][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.868406][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.922453][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.955103][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.972384][ T1346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.012625][ T5612] Bluetooth: hci2: command tx timeout [ 87.018947][ T4929] Bluetooth: hci3: command tx timeout [ 87.018961][ T51] Bluetooth: hci4: command tx timeout [ 87.073072][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.076795][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.092695][ T51] Bluetooth: hci1: command tx timeout [ 87.093627][ T4929] Bluetooth: hci0: command tx timeout [ 87.123984][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.151934][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.187495][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.250827][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.259643][ T82] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.284250][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.312752][ T177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.372711][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.520983][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.529432][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.550986][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.779956][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.790474][ T1346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.804727][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.902026][ T5691] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.005407][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.015173][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.049739][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.060262][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.084043][ T5691] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 88.104607][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.134418][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.199206][ T5691] usb 2-1: config 0 descriptor?? [ 88.207713][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.271320][ T5691] gspca_main: spca508-2.14.0 probing 8086:0110 [ 88.284238][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.293688][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.303898][ T999] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.317308][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.398572][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.430388][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.464060][ T5691] gspca_spca508: reg_read err -32 [ 88.730297][ T5691] gspca_spca508: reg_read err -71 [ 88.769958][ T5691] gspca_spca508: reg_read err -71 [ 88.806814][ T5691] gspca_spca508: reg_read err -71 [ 88.848742][ T5691] gspca_spca508: reg write: error -71 [ 88.876277][ T5691] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 88.983596][ T5691] usb 2-1: USB disconnect, device number 2 [ 89.093043][ T51] Bluetooth: hci2: command tx timeout [ 89.093391][ T5612] Bluetooth: hci4: command tx timeout [ 89.100742][ T4929] Bluetooth: hci3: command tx timeout [ 89.171875][ T4929] Bluetooth: hci1: command tx timeout [ 89.174736][ T5612] Bluetooth: hci0: command tx timeout [ 89.911026][ T5752] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.814007][ T5611] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 90.984833][ T5611] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 91.033202][ T5611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.049397][ T5611] usb 1-1: Product: syz [ 91.060931][ T5611] usb 1-1: Manufacturer: syz [ 91.084077][ T5611] usb 1-1: SerialNumber: syz [ 91.094697][ T5781] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 91.108517][ T5781] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.126834][ T5611] usb 1-1: config 0 descriptor?? [ 91.150616][ T5611] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 91.909121][ T10] cfg80211: failed to load regulatory.db [ 92.413179][ T5611] gspca_stk1135: reg_w 0xd err -71 [ 92.433397][ T5611] gspca_stk1135: serial bus timeout: status=0x00 [ 92.463918][ T5611] gspca_stk1135: Sensor write failed [ 92.481169][ T5611] gspca_stk1135: serial bus timeout: status=0x00 [ 92.507018][ T5611] gspca_stk1135: Sensor write failed [ 92.530922][ T5611] gspca_stk1135: serial bus timeout: status=0x00 [ 92.548430][ T5611] gspca_stk1135: Sensor read failed [ 92.560414][ T5611] gspca_stk1135: serial bus timeout: status=0x00 [ 92.582493][ T5611] gspca_stk1135: Sensor read failed [ 92.595342][ T5611] gspca_stk1135: Detected sensor type unknown (0x0) [ 92.606900][ T5611] gspca_stk1135: serial bus timeout: status=0x00 [ 92.624854][ T5611] gspca_stk1135: Sensor read failed [ 92.655672][ T5611] gspca_stk1135: serial bus timeout: status=0x00 [ 92.662917][ T10] psmouse serio2: Failed to reset mouse on : -5 [ 92.686349][ T5611] gspca_stk1135: Sensor read failed [ 92.716763][ T5611] gspca_stk1135: serial bus timeout: status=0x00 [ 92.729618][ T5611] gspca_stk1135: Sensor write failed [ 92.740160][ T5611] gspca_stk1135: serial bus timeout: status=0x00 [ 92.747399][ T5611] gspca_stk1135: Sensor write failed [ 92.753807][ T5611] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 92.762462][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 92.790915][ T5611] usb 1-1: USB disconnect, device number 2 [ 92.894603][ T5669] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.922452][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.941428][ T9] usb 5-1: config 1 has an invalid descriptor of length 200, skipping remainder of the config [ 92.956595][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 92.966626][ T9] usb 5-1: config 1 has no interface number 0 [ 92.973111][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 93.005508][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 93.044051][ T9] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 93.062222][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 56968, setting to 64 [ 93.074539][ T9] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.088638][ T5669] usb 4-1: Using ep0 maxpacket: 32 [ 93.106917][ T5669] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 93.126427][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.154433][ T9] usb 5-1: Product: syz [ 93.160007][ T5669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.171318][ T9] usb 5-1: Manufacturer: syz [ 93.171362][ T9] usb 5-1: SerialNumber: syz [ 93.214295][ T5669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.234246][ T5798] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 93.243946][ T5669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.284002][ T5669] usb 4-1: config 0 descriptor?? [ 93.333349][ T5669] hub 4-1:0.0: USB hub found [ 93.369550][ T43] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.440594][ T43] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.502382][ T5798] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 93.568299][ T5669] hub 4-1:0.0: 1 port detected [ 93.741619][ T5798] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.187057][ T5798] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.199379][ T9] cdc_ncm 5-1:1.1: bind() failure [ 94.247625][ T5669] hub 4-1:0.0: activate --> -90 [ 94.432389][ T9] usb 5-1: USB disconnect, device number 2 [ 94.667704][ T9] usb 4-1: USB disconnect, device number 2 [ 94.676358][ T5669] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 94.714230][ T5669] usb 4-1-port1: connect-debounce failed [ 95.523183][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.722491][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 95.753922][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.788059][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.828438][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.866787][ T9] usb 1-1: config 0 descriptor?? [ 96.347556][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 96.378507][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 96.391906][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 96.416163][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 96.434913][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 96.455558][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 96.471809][ T10] misc userio: Buffer overflowed, userio client isn't keeping up [ 96.484617][ T9] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 96.546236][ T9] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 96.642099][ T5683] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 96.822708][ T5683] usb 4-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 96.855874][ T5683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 96.890608][ T5683] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 96.903831][ T5683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.214661][ T9] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 97.252954][ T9] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 97.293682][ T9] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -71 [ 97.356391][ T9] usb 1-1: USB disconnect, device number 3 [ 97.565744][ T10] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 97.831897][ T10] psmouse serio2: Failed to enable mouse on [ 97.986331][ T5683] pegasus 4-1:1.0: probe with driver pegasus failed with error -121 [ 98.233002][ T5683] usb 4-1: USB disconnect, device number 3 [ 98.844953][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.035405][ T43] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 99.060376][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.103502][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.149575][ T43] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.195186][ T43] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.236345][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.243244][ T5913] binder: 5912:5913 ioctl c0306201 2000000003c0 returned -14 [ 100.329755][ T43] gud 1-1:1.0: DP-1: Failed to add properties (ret=-71) [ 100.358266][ T43] gud 1-1:1.0: Failed to get connectors (error=-71) [ 100.389849][ T43] gud 1-1:1.0: probe with driver gud failed with error -71 [ 100.524075][ T43] usb 1-1: USB disconnect, device number 4 [ 102.342081][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.536095][ T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 102.554379][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.576297][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.702197][ T986] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 102.746529][ T5963] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.853049][ T9] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 102.881270][ T986] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 3.00 [ 102.908992][ T9] wwan wwan0: port wwan0qmi0 attached [ 102.921353][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.944034][ T986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.993810][ T986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.059113][ T986] usb 3-1: config 0 descriptor?? [ 103.164533][ T9] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 8a:35:7e:93:1f:df [ 103.197913][ T5968] netlink: 84 bytes leftover after parsing attributes in process `syz.0.99'. [ 103.264393][ T5683] usb 5-1: USB disconnect, device number 3 [ 103.294885][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.355861][ T5683] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 103.472856][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 103.500071][ T5683] wwan wwan0: port wwan0qmi0 disconnected [ 103.516941][ T10] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 103.545794][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.580822][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.617959][ T10] usb 2-1: Product: syz [ 103.628250][ T986] lenovo 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 103.639596][ T10] usb 2-1: Manufacturer: syz [ 103.655015][ T986] lenovo 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 103.663669][ T10] usb 2-1: SerialNumber: syz [ 103.674807][ T986] lenovo 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 103.710364][ T986] lenovo 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 103.748350][ T986] lenovo 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 103.763685][ T986] lenovo 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 103.771732][ T986] lenovo 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 103.780566][ T986] lenovo 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 103.789831][ T986] lenovo 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 103.800543][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 103.809822][ T986] lenovo 0003:17EF:60EE.0003: unknown main item tag 0x0 [ 103.923365][ T986] lenovo 0003:17EF:60EE.0003: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.2-1/input0 [ 103.989559][ T4965] bcm5974 2-1:1.0: could not read from device [ 104.049201][ T10] bcm5974 2-1:1.0: could not read from device [ 104.137151][ T4965] bcm5974 2-1:1.0: could not read from device [ 104.211348][ T10] input: failed to attach handler mousedev to device input6, error: -5 [ 104.266984][ T4965] bcm5974 2-1:1.0: could not read from device [ 104.267203][ T10] usb 2-1: USB disconnect, device number 3 [ 104.327891][ T4965] bcm5974 2-1:1.0: could not read from device [ 104.762807][ T10] usb 3-1: USB disconnect, device number 2 [ 104.937755][ T5996] netlink: 830 bytes leftover after parsing attributes in process `syz.4.105'. [ 104.993797][ T5998] Zero length message leads to an empty skb [ 106.940249][ T6051] netlink: 384 bytes leftover after parsing attributes in process `syz.4.121'. [ 106.955953][ T6051] netlink: 384 bytes leftover after parsing attributes in process `syz.4.121'. [ 106.992275][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.121'. [ 107.142665][ T6057] netlink: 'syz.2.122': attribute type 25 has an invalid length. [ 107.184041][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 107.320293][ T6057] netlink: 'syz.2.122': attribute type 25 has an invalid length. [ 107.329637][ T82] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.375855][ T82] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.395667][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 107.425150][ T82] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.463283][ T82] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.302761][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.466027][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 109.477260][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.503203][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 109.517202][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.528549][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.544949][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.560510][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.575307][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.825051][ T10] usb 4-1: usb_control_msg returned -32 [ 109.833183][ T10] usbtmc 4-1:16.0: can't read capabilities [ 110.650682][ T6094] usbtmc 4-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 110.757897][ T6101] capability: warning: `syz.1.137' uses deprecated v2 capabilities in a way that may be insecure [ 110.846079][ T5683] usb 4-1: USB disconnect, device number 4 [ 112.462160][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 112.644180][ T10] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 112.663503][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.697679][ T10] usb 5-1: config 0 descriptor?? [ 112.763229][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 112.951394][ T10] gp8psk: usb in 128 operation failed. [ 113.167202][ T10] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 113.373040][ T10] gp8psk: usb in 149 operation failed. [ 113.394547][ T10] gp8psk: failed to get FPGA version [ 113.410328][ T10] gp8psk: usb in 138 operation failed. [ 113.437780][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 113.484656][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 113.517638][ T10] usb 5-1: USB disconnect, device number 4 [ 113.712541][ T6154] use of bytesused == 0 is deprecated and will be removed in the future, [ 113.777086][ T6154] use the actual size instead. [ 113.979219][ T6162] process 'syz.1.160' launched '/dev/fd/3' with NULL argv: empty string added [ 114.194216][ T6167] vcan0: tx address claim with different name [ 114.401503][ T6177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.167'. [ 114.581773][ T5683] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 114.613533][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.784245][ T5683] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.800669][ T5683] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 114.810459][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 114.820741][ T10] usb 1-1: New USB device found, idVendor=10d2, idProduct=0001, bcdDevice= 0.00 [ 114.837911][ T5683] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.857690][ T5683] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 114.872666][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.888632][ T5683] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 114.925507][ T10] usb 1-1: config 0 descriptor?? [ 114.935680][ T5683] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 114.978102][ T10] usblcd 1-1:0.0: Could not find both bulk-in and bulk-out endpoints [ 114.990594][ T5683] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 115.030956][ T5683] usb 4-1: config 1 interface 1 has no altsetting 0 [ 115.067882][ T5683] usb 4-1: string descriptor 0 read error: -22 [ 115.084552][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.219935][ T9] usb 1-1: USB disconnect, device number 5 [ 116.166597][ T5683] usb 4-1: USB disconnect, device number 5 [ 117.382896][ T986] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.411184][ T6237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.581083][ T986] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.609761][ T986] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 117.630132][ T986] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.664380][ T986] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.715108][ T986] usb 3-1: string descriptor 0 read error: -22 [ 117.762132][ T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.819116][ T986] usb 3-1: selecting invalid altsetting 1 [ 117.846079][ T986] usb 3-1: unit 6 not found! [ 117.941732][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.103075][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 118.117026][ T5683] bridge0: entered promiscuous mode [ 118.138042][ T10] usb 2-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.40 [ 118.169238][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 118.192837][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.212446][ T10] usb 2-1: Product: syz [ 118.218265][ T10] usb 2-1: Manufacturer: syz [ 118.226761][ T10] usb 2-1: SerialNumber: syz [ 118.489075][ T6261] loop3: detected capacity change from 0 to 7 [ 118.531126][ T6261] Dev loop3: unable to read RDB block 7 [ 118.547232][ T6261] loop3: unable to read partition table [ 118.554670][ T6261] loop3: partition table beyond EOD, truncated [ 118.566811][ T6261] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.677684][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 118.684445][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 118.718788][ T10] usb 2-1: USB disconnect, device number 4 [ 118.871369][ T986] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 119.159661][ T986] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 119.188890][ T986] usb 3-1: USB disconnect, device number 3 [ 119.682599][ T6286] input: syz0 as /devices/virtual/input/input7 [ 120.103105][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.271741][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 120.286749][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 120.316370][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.330634][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ab00000: rx timeout, send abort [ 120.341704][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ab00000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.389686][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.410810][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.435808][ T10] usb 3-1: config 0 descriptor?? [ 120.475483][ T10] hub 3-1:0.0: USB hub found [ 120.697432][ T10] hub 3-1:0.0: 1 port detected [ 121.313229][ T10] hub 3-1:0.0: activate --> -90 [ 121.729601][ T986] usb 3-1: USB disconnect, device number 4 [ 121.989529][ T10] usb 3-1-port1: config error [ 123.502220][ T5683] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.682180][ T5683] usb 2-1: Using ep0 maxpacket: 8 [ 123.696812][ T5683] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 123.712295][ T5683] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 123.730329][ T5683] usb 2-1: config 179 has no interface number 0 [ 123.754827][ T5683] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 123.799351][ T5683] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 123.835515][ T5683] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 123.872657][ T5683] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 123.909934][ T5683] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 123.947420][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.984110][ T6359] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.124754][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.298504][ T5683] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 124.308948][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 124.325721][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.385105][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.420788][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.475426][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.557636][ T24] usb 5-1: config 0 descriptor?? [ 124.654503][ T24] hub 5-1:0.0: USB hub found [ 124.827149][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805964c800: rx timeout, send abort [ 124.906064][ T43] usb 2-1: USB disconnect, device number 5 [ 124.906157][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 124.920368][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 124.933652][ T24] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 125.153047][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 125.165371][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 125.214745][ T24] usb 5-1: USB disconnect, device number 5 [ 125.328669][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058936c00: rx timeout, send abort [ 125.337305][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805964c800: abort rx timeout. Force session deactivation [ 125.753499][ T6394] input: syz1 as /devices/virtual/input/input9 [ 125.837458][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058936c00: abort rx timeout. Force session deactivation [ 125.892807][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 126.092745][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 126.112477][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.136530][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.166999][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 126.196111][ T10] usb 4-1: SerialNumber: syz [ 126.472547][ T10] usb 4-1: 0:2 : does not exist [ 126.584348][ T10] usb 4-1: USB disconnect, device number 6 [ 126.699945][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.173130][ T6425] netlink: 8716 bytes leftover after parsing attributes in process `syz.1.266'. [ 128.043029][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.252963][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.299390][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.348933][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.392864][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 128.429096][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.507160][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.572880][ T9] usb 1-1: config 0 descriptor?? [ 129.131948][ T9] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 129.781235][ T29] audit: type=1800 audit(1787314142.136:2): pid=6472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.286" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 130.044979][ T5683] usb 1-1: USB disconnect, device number 6 [ 131.017117][ T6498] netlink: 'syz.2.297': attribute type 5 has an invalid length. [ 131.043831][ T6498] netlink: 'syz.2.297': attribute type 9 has an invalid length. [ 131.067780][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 131.132898][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.313677][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 131.329801][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.374241][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 131.394102][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.408284][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.426533][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.438862][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.458423][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.724563][ T24] usb 5-1: usb_control_msg returned -32 [ 131.744293][ T24] usbtmc 5-1:16.0: can't read capabilities [ 131.937404][ T24] usb 5-1: USB disconnect, device number 6 [ 132.817647][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.861874][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.881967][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.928993][ T6527] netlink: 'syz.3.308': attribute type 10 has an invalid length. [ 132.946555][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.960424][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.992788][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.000908][ T6527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.010110][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.018356][ T6527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.044018][ T6527] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 133.055422][ T24] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 133.096440][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.129509][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.265537][ T24] as10x_usb: device has been detected [ 133.293643][ T24] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 133.517420][ T24] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 133.535458][ T5683] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.732813][ T6540] mmap: syz.3.312 (6540) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.757531][ T5683] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 133.778234][ T24] as10x_usb: error during firmware upload part1 [ 133.811529][ T24] Registered device Abilis Systems DVB-Titan [ 133.812278][ T5683] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.858513][ T5683] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.881440][ T5683] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 133.939485][ T5683] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.989392][ T5683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.883993][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 135.042511][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.058059][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.078507][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.108108][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.161156][ T24] usb 3-1: USB disconnect, device number 5 [ 135.303070][ T24] Unregistered device Abilis Systems DVB-Titan [ 135.309268][ T24] as10x_usb: device has been disconnected [ 135.340772][ T5683] gud 1-1:1.0: USB-2: Failed to add properties (ret=-71) [ 135.370500][ T5683] gud 1-1:1.0: Failed to get connectors (error=-71) [ 135.384600][ T9] usb 2-1: usb_control_msg returned -32 [ 135.391585][ T5683] gud 1-1:1.0: probe with driver gud failed with error -71 [ 135.406038][ T9] usbtmc 2-1:16.0: can't read capabilities [ 135.486428][ T5683] usb 1-1: USB disconnect, device number 7 [ 136.398965][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 136.409159][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 136.432045][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 136.603638][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.619533][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.630087][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.652945][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.920993][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 136.940317][ T9] usbtmc 3-1:16.0: can't read capabilities [ 137.258222][ T24] usb 3-1: USB disconnect, device number 6 [ 137.475845][ T6606] syz.3.338 uses obsolete (PF_INET,SOCK_PACKET) [ 137.498668][ T6606] syzkaller1: entered promiscuous mode [ 137.512293][ T6606] syzkaller1: entered allmulticast mode [ 137.628436][ T9] usb 2-1: USB disconnect, device number 6 [ 138.337156][ T6619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.763690][ T6630] all: renamed from lo (while UP) [ 138.925717][ T5690] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.105654][ T5690] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.128713][ T5690] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.168123][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.221960][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 139.263378][ T5690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.306123][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.363627][ T5690] usb 3-1: config 0 descriptor?? [ 139.542595][ T6644] loop5: detected capacity change from 0 to 4095 [ 139.818076][ T6648] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in; [ 139.818076][ T6648] program syz.0.359 not setting count and/or reply_len properly [ 139.908862][ T5690] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 140.107211][ T6644] Buffer I/O error on dev loop5, logical block 511, async page read [ 140.227772][ T5618] Buffer I/O error on dev loop5, logical block 511, async page read [ 140.738305][ T5690] usb 3-1: USB disconnect, device number 7 [ 141.919762][ T6688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.111788][ T5690] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.324275][ T5690] usb 1-1: Using ep0 maxpacket: 32 [ 142.343162][ T5690] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 142.397451][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.412048][ T24] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 142.448884][ T5690] usb 1-1: config 0 descriptor?? [ 142.485005][ T5690] as10x_usb: device has been detected [ 142.506731][ T5690] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 142.587331][ T5690] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 142.601184][ T24] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 142.650069][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.672966][ T5690] as10x_usb: error during firmware upload part1 [ 142.691067][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.702925][ T5690] Registered device nBox DVB-T Dongle [ 142.716954][ T5690] usb 1-1: USB disconnect, device number 8 [ 142.725288][ T24] usb 2-1: Product: syz [ 142.760055][ T24] usb 2-1: Manufacturer: syz [ 142.784958][ T24] usb 2-1: SerialNumber: syz [ 142.832520][ T5690] Unregistered device nBox DVB-T Dongle [ 142.833943][ T24] usb 2-1: config 0 descriptor?? [ 142.857573][ T5690] as10x_usb: device has been disconnected [ 142.895207][ T24] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 143.404227][ T6707] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 143.801776][ T24] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 144.063186][ T5690] usb 2-1: USB disconnect, device number 7 [ 144.913221][ T6748] io-wq is not configured for unbound workers [ 146.062519][ T6774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.089322][ T29] audit: type=1326 audit(1787314159.446:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.1.414" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b1699e0d9 code=0x0 [ 147.772689][ T6806] netlink: 'syz.3.422': attribute type 12 has an invalid length. [ 149.535838][ T6841] loop3: detected capacity change from 0 to 7 [ 149.575698][ T6841] Dev loop3: unable to read RDB block 7 [ 149.598259][ T6841] loop3: unable to read partition table [ 149.641924][ T6841] loop3: partition table beyond EOD, truncated [ 149.686808][ T6841] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 150.352904][ T5690] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.531939][ T5690] usb 3-1: Using ep0 maxpacket: 16 [ 150.561817][ T5690] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 150.601464][ T5690] usb 3-1: config 0 has no interfaces? [ 150.628124][ T5690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.666718][ T5690] usb 3-1: config 0 descriptor?? [ 150.977372][ T5690] usb 3-1: USB disconnect, device number 8 [ 151.021867][ T24] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 151.215164][ T24] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 151.256560][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.294153][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 151.339072][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 151.390719][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.418628][ T24] usb 4-1: Product: syz [ 151.432754][ T24] usb 4-1: Manufacturer: syz [ 151.445239][ T24] usb 4-1: SerialNumber: syz [ 151.480079][ T24] usb 4-1: config 0 descriptor?? [ 151.504571][ T6856] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 151.763803][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.771874][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.854390][ T24] rc_core: IR keymap rc-streamzap not found [ 151.886673][ T24] Registered IR keymap rc-empty [ 151.944833][ T24] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 152.000276][ T24] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 152.515272][ T6866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.633368][ T6866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.909120][ T9] usb 4-1: USB disconnect, device number 7 [ 153.957345][ T6867] geneve2: entered promiscuous mode [ 154.453287][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.651599][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 154.676269][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.716717][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.765562][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.842737][ T9] usb 4-1: config 0 descriptor?? [ 155.187683][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 156.032106][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 156.232037][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 156.262758][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 156.291227][ T9] usb 3-1: config 3 has an invalid interface number: 20 but max is 0 [ 156.319208][ T9] usb 3-1: config 3 has no interface number 0 [ 156.344790][ T9] usb 3-1: config 3 interface 20 has no altsetting 0 [ 156.370107][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.389129][ T9] usb 3-1: Product: syz [ 156.404839][ T9] usb 3-1: Manufacturer: syz [ 156.416255][ T9] usb 3-1: SerialNumber: syz [ 156.714803][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.20/input/input14 [ 156.764988][ T4965] bcm5974 3-1:3.20: could not read from device [ 156.839278][ T4965] bcm5974 3-1:3.20: could not read from device [ 156.851005][ T9] usb 3-1: USB disconnect, device number 9 [ 157.427852][ T5690] usb 4-1: USB disconnect, device number 8 [ 157.680322][ T6949] syzkaller1: entered allmulticast mode [ 157.763560][ T6952] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 158.196431][ T6965] bridge1: entered promiscuous mode [ 158.235979][ T6965] bridge1: entered allmulticast mode [ 158.925274][ T5611] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 159.107530][ T5611] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.171404][ T5611] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.227358][ T5611] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.301316][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.619776][ T5611] usb 3-1: usb_control_msg returned -32 [ 159.627904][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 159.637642][ T5611] usbtmc 3-1:16.0: can't read capabilities [ 159.728079][ T6995] batadv0: entered promiscuous mode [ 159.737215][ T6995] macsec2: entered promiscuous mode [ 159.743300][ T6995] macsec2: entered allmulticast mode [ 159.748909][ T6995] batadv0: entered allmulticast mode [ 159.790578][ T6995] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 159.837254][ T6999] loop5: detected capacity change from 0 to 7 [ 159.846693][ T6999] Dev loop5: unable to read RDB block 7 [ 159.853345][ T6999] loop5: AHDI p1 p3 p4 [ 159.857498][ T6995] batadv0: left allmulticast mode [ 159.858015][ T6995] batadv0: left promiscuous mode [ 159.863544][ T6999] loop5: partition table partially beyond EOD, truncated [ 159.871410][ T6999] loop5: p1 size 100663296 extends beyond EOD, truncated [ 159.912188][ T6999] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 159.968666][ T7001] Dev loop5: unable to read RDB block 7 [ 159.988539][ T7001] loop5: AHDI p1 p3 p4 [ 159.998046][ T7001] loop5: partition table partially beyond EOD, truncated [ 160.022803][ T7001] loop5: p1 size 100663296 extends beyond EOD, truncated [ 160.055041][ T7001] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 160.306354][ T5618] udevd[5618]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 160.317300][ T5623] udevd[5623]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 160.632524][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 160.809767][ T24] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 160.845220][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.872186][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 160.892897][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.989277][ T24] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 161.192865][ T986] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.363177][ T986] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 161.376376][ T986] usb 4-1: config 0 has no interfaces? [ 161.393904][ T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.403677][ T986] usb 4-1: Product: syz [ 161.408619][ T986] usb 4-1: Manufacturer: syz [ 161.415343][ T986] usb 4-1: SerialNumber: syz [ 161.427382][ T7036] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.433862][ T986] usb 4-1: config 0 descriptor?? [ 161.455148][ T7036] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.519284][ T7036] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.530400][ T7036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.539615][ T7036] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.561270][ T7036] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.570690][ T7036] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.583542][ T7036] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.595104][ T7036] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.611389][ T7036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.619198][ T7036] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.632361][ T7036] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.645180][ T7036] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 161.660751][ T7036] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 161.684836][ T24] usb 3-1: USB disconnect, device number 10 [ 161.698455][ T7036] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 161.896433][ T7022] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.054463][ T7022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.124300][ T5611] usb 4-1: USB disconnect, device number 9 [ 162.129976][ T7046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.494434][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.539096][ T5611] usb 5-1: USB disconnect, device number 7 [ 163.572125][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.581963][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.653137][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.669869][ T5611] idmouse 5-1:1.0: disconnected [ 163.734702][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 164.399143][ T7098] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 164.465733][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 164.586182][ T7105] ipvlan2: entered allmulticast mode [ 164.624261][ T7105] syz_tun: entered allmulticast mode [ 165.115243][ T7121] netlink: 80 bytes leftover after parsing attributes in process `syz.2.529'. [ 165.432900][ T5611] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.572017][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.625937][ T5611] usb 1-1: Using ep0 maxpacket: 32 [ 165.652073][ T4929] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.658953][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.667727][ T5611] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 165.731995][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.752763][ T5611] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 165.796212][ T5611] usb 1-1: config 0 has no interface number 0 [ 165.811917][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.836336][ T5611] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 165.911757][ T5611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.939642][ T5611] usb 1-1: Product: syz [ 165.945168][ T5611] usb 1-1: Manufacturer: syz [ 165.955073][ T5611] usb 1-1: SerialNumber: syz [ 165.978585][ T5611] usb 1-1: config 0 descriptor?? [ 165.994099][ T7125] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.090674][ T5275] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.246418][ T7125] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.523316][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 166.700755][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.727995][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 166.757423][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 166.798079][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.823933][ T9] usb 4-1: Product: syz [ 166.830574][ T9] usb 4-1: Manufacturer: syz [ 166.839919][ T9] usb 4-1: SerialNumber: syz [ 167.129924][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 167.295134][ T9] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 167.313181][ T9] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 167.328009][ T5611] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 167.355821][ T5611] asix 1-1:0.188: probe with driver asix failed with error -71 [ 167.388700][ T5611] usb 1-1: USB disconnect, device number 9 [ 167.656977][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.714444][ T9] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 167.731913][ T4929] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.738936][ T5612] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.767003][ T9] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 167.812074][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.891956][ T5612] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.929686][ T9] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 168.243647][ T9] usb 4-1: USB disconnect, device number 10 [ 168.433147][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.605567][ T7182] loop5: detected capacity change from 0 to 4095 [ 168.796536][ T7182] Buffer I/O error on dev loop5, logical block 511, async page read [ 168.846393][ T5618] Buffer I/O error on dev loop5, logical block 511, async page read [ 169.413617][ T7193] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 169.671340][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 169.765634][ T7200] xfrm1: entered promiscuous mode [ 169.789637][ T7200] xfrm1: entered allmulticast mode [ 169.821418][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 170.606806][ T29] audit: type=1326 audit(1787314182.966:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.3.561" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322f9e0d9 code=0x7fc00000 [ 171.021070][ T7231] input: syz0 as /devices/virtual/input/input15 [ 171.262669][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.431736][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 171.440126][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 171.452342][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 171.463945][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 171.483649][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.499674][ T9] usb 2-1: config 0 descriptor?? [ 171.729403][ T7241] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 171.766387][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 171.925156][ T7243] input: syz0 as /devices/virtual/input/input16 [ 172.022613][ T9] usb 2-1: USB disconnect, device number 8 [ 172.028579][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 172.104444][ T29] audit: type=1326 audit(1787314184.466:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7249 comm="syz.0.579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f241c59e0d9 code=0x0 [ 172.882379][ T986] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 173.051804][ T986] usb 4-1: Using ep0 maxpacket: 8 [ 173.078219][ T986] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 173.120219][ T986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.138597][ T986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.168979][ T986] usb 4-1: config 0 descriptor?? [ 173.448371][ T986] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 173.753657][ T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 173.923028][ T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 173.960789][ T9] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 173.984405][ T9] usb 5-1: config 0 has no interface number 0 [ 174.015607][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.030550][ T9] usb 5-1: Product: syz [ 174.038893][ T5683] usb 4-1: USB disconnect, device number 11 [ 174.046946][ T9] usb 5-1: Manufacturer: syz [ 174.057201][ T9] usb 5-1: SerialNumber: syz [ 174.090054][ T9] usb 5-1: config 0 descriptor?? [ 174.594301][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 174.741857][ T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 174.924741][ T43] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 174.951348][ T9] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 174.970519][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.980255][ T9] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 174.995675][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.014074][ T43] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 175.023990][ T43] usb 1-1: Manufacturer: syz [ 175.030331][ T9] asix 5-1:0.251: probe with driver asix failed with error -71 [ 175.069290][ T43] usb 1-1: config 0 descriptor?? [ 175.086648][ T9] usb 5-1: USB disconnect, device number 8 [ 175.619708][ T7318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.821761][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 176.011364][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.025487][ T43] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0006/input/input17 [ 176.034510][ T9] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 176.048885][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 176.089545][ T9] usb 4-1: no configurations [ 176.109396][ T9] usb 4-1: can't read configurations, error -22 [ 176.165085][ T7330] sg_write: data in/out 432480/136 bytes for SCSI command 0x0-- guessing data in; [ 176.165085][ T7330] program syz.2.613 not setting count and/or reply_len properly [ 176.223074][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.247781][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.264786][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 176.290454][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 176.305796][ T43] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0006/input/input18 [ 176.332283][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.365264][ T43] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0006/input/input19 [ 176.367607][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.392056][ T10] usb 5-1: config 0 descriptor?? [ 176.449269][ T7332] netlink: 148 bytes leftover after parsing attributes in process `syz.2.614'. [ 176.460269][ T43] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0006/input/input20 [ 176.556607][ T43] uclogic 0003:256C:006D.0006: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 176.616086][ T43] usb 1-1: USB disconnect, device number 10 [ 176.791898][ T5690] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.961908][ T5690] usb 2-1: Using ep0 maxpacket: 8 [ 176.977560][ T5690] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 176.998220][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 177.043332][ T5690] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 177.058687][ T5690] usb 2-1: config 179 has no interface number 0 [ 177.083958][ T5690] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 177.144240][ T5690] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 177.205303][ T5690] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.287705][ T5690] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 177.330785][ T7343] fido_id[7343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 177.350487][ T5690] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 177.405730][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.475564][ T7334] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.769266][ T24] usb 5-1: USB disconnect, device number 9 [ 177.955304][ T5690] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input22 [ 178.161551][ T5690] usb 2-1: USB disconnect, device number 9 [ 178.161618][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 178.175864][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 178.420899][ T7362] fido_id[7362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 178.912504][ T7379] loop4: detected capacity change from 0 to 7 [ 178.935301][ T7379] Dev loop4: unable to read RDB block 7 [ 178.951228][ T7379] loop4: unable to read partition table [ 178.974922][ T7379] loop4: partition table beyond EOD, truncated [ 179.016098][ T7379] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.715893][ T7429] team0: Port device veth0_to_team added [ 180.872643][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 181.079515][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 181.108611][ T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 181.135841][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.161694][ T24] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 181.197125][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 181.231997][ T7442] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.247985][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.257275][ T24] usb 5-1: Product: syz [ 181.261541][ T24] usb 5-1: Manufacturer: syz [ 181.265727][ T7442] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.273206][ T24] usb 5-1: SerialNumber: syz [ 181.290260][ T24] usb 5-1: config 0 descriptor?? [ 181.321006][ T7442] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.348346][ T7442] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 181.355686][ T7442] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 181.604432][ T29] audit: type=1800 audit(1787314193.966:6): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.657" name="bus" dev="tmpfs" ino=648 res=0 errno=0 [ 181.681730][ T5611] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 181.732168][ T24] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 181.843328][ T5611] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 181.861473][ T5611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.870595][ T5611] usb 2-1: Product: syz [ 181.874912][ T5611] usb 2-1: Manufacturer: syz [ 181.879585][ T5611] usb 2-1: SerialNumber: syz [ 181.890524][ T5611] usb 2-1: config 0 descriptor?? [ 182.134941][ T24] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 182.185289][ T7448] Invalid argument reading file caps for ./file0 [ 182.246136][ T5611] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 182.270058][ T5611] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 182.319110][ T5611] usb 2-1: USB disconnect, device number 10 [ 182.499307][ T5690] usb 5-1: USB disconnect, device number 10 [ 183.023341][ T43] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 183.241806][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 183.253617][ T5612] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.271136][ T43] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.316220][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.331693][ T5612] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.335139][ T4929] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.362342][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.412309][ T4929] Bluetooth: hci4: command 0x0c1a tx timeout [ 183.418719][ T5612] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.429118][ T43] usb 1-1: config 0 descriptor?? [ 183.504281][ T5690] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 183.682681][ T5690] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 183.707721][ T5690] usb 5-1: config 0 has no interfaces? [ 183.717849][ T43] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 183.746499][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.769270][ T5690] usb 5-1: Product: syz [ 183.780188][ T5690] usb 5-1: Manufacturer: syz [ 183.793665][ T5690] usb 5-1: SerialNumber: syz [ 183.824378][ T5690] usb 5-1: config 0 descriptor?? [ 184.263560][ T7502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.437938][ T5611] usb 5-1: USB disconnect, device number 11 [ 184.448555][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 184.611888][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 184.617071][ T5690] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 184.624883][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 184.628920][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.645075][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.655332][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.665521][ T9] usb 2-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 184.677463][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 184.690419][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 184.700986][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.714923][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.793233][ T5690] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.803652][ T5690] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 184.814785][ T5690] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 184.822323][ T24] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 184.826232][ T5690] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 184.848482][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.856762][ T5690] usb 4-1: Product: syz [ 184.860860][ T24] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 184.861066][ T5690] usb 4-1: Manufacturer: syz [ 184.873904][ T5690] usb 4-1: SerialNumber: syz [ 184.880840][ T24] usb 3-1: config 0 has no interface number 0 [ 184.888936][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.901311][ T7508] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 184.909973][ T24] usb 3-1: config 0 descriptor?? [ 184.933995][ T24] ums-realtek 3-1:0.2: USB Mass Storage device detected [ 184.943828][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 184.949869][ T9] usbtmc 2-1:16.0: can't read capabilities [ 185.134724][ T7508] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 185.193345][ T9] usb 2-1: USB disconnect, device number 11 [ 185.224928][ T43] usb 3-1: USB disconnect, device number 11 [ 185.719343][ T9] usb 1-1: USB disconnect, device number 11 [ 185.766388][ T7508] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 185.904489][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 186.006946][ T5690] cdc_ncm 4-1:1.0: failed to get mac address [ 186.104965][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 186.136158][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.174771][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 186.190265][ T43] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 186.213309][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.226223][ T5690] cdc_ncm 4-1:1.0: bind() failure [ 186.255960][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.281819][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.295769][ T5690] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 186.305360][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.339992][ T5690] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 186.359287][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.373484][ T5690] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 186.418426][ T5690] usb 4-1: USB disconnect, device number 14 [ 186.650244][ T43] usb 5-1: usb_control_msg returned -32 [ 186.668620][ T43] usbtmc 5-1:16.0: can't read capabilities [ 187.378965][ T7556] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 187.576365][ T5690] usb 5-1: USB disconnect, device number 12 [ 187.752057][ T7566] netlink: 'syz.2.701': attribute type 3 has an invalid length. [ 187.784627][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'. [ 188.521799][ T5690] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 188.696510][ T5690] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.713343][ T5611] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 188.722394][ T5690] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 188.738318][ T5690] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.760962][ T5690] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 188.780626][ T5690] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 188.811721][ T5690] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 188.825900][ T5690] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 188.854307][ T5690] usb 5-1: config 1 interface 1 has no altsetting 0 [ 188.884364][ T5611] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 188.906259][ T5690] usb 5-1: string descriptor 0 read error: -22 [ 188.917078][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.928059][ T5611] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 188.940972][ T5611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.973379][ T5611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.987106][ T5611] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 189.020995][ T5611] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 189.031184][ T5611] usb 4-1: Manufacturer: syz [ 189.043869][ T5611] usb 4-1: config 0 descriptor?? [ 189.241769][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 189.394671][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.424611][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.437375][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.447760][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.461115][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.478521][ T5611] hid_parser_main: 470 callbacks suppressed [ 189.478541][ T5611] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 189.492516][ T9] usb 1-1: config 0 descriptor?? [ 189.530935][ T5611] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 189.990821][ T9] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 190.006640][ T7606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.718'. [ 190.077298][ T5690] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 190.303556][ T5690] usb 5-1: USB disconnect, device number 13 [ 190.962706][ T7623] netlink: 64 bytes leftover after parsing attributes in process `syz.1.722'. [ 191.331686][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 191.349127][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 191.472230][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 191.482433][ T177] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.509741][ T177] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.529356][ T177] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.549335][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 191.566441][ T177] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.704325][ T5611] usb 4-1: USB disconnect, device number 15 [ 191.738609][ T29] audit: type=1326 audit(1787314204.096:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.3.728" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5322f9e0d9 code=0x0 [ 191.990571][ T5611] usb 1-1: USB disconnect, device number 12 [ 192.162348][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 192.372661][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 192.388621][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 192.431781][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.445865][ T43] usb 2-1: Product: syz [ 192.451921][ T43] usb 2-1: Manufacturer: syz [ 192.484041][ T43] usb 2-1: SerialNumber: syz [ 192.508368][ T7648] netlink: 'syz.2.733': attribute type 1 has an invalid length. [ 192.533879][ T43] usb 2-1: config 0 descriptor?? [ 192.564814][ T43] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 192.675302][ T7648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.937697][ T7658] input: syz1 as /devices/virtual/input/input23 [ 193.237325][ T7665] kernel read not supported for file /sg0 (pid: 7665 comm: syz.2.740) [ 193.721987][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 193.810266][ T43] gspca_sonixj: reg_w1 err -71 [ 193.884775][ T43] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 193.893236][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 193.894048][ T9] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 193.895559][ T9] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 193.920440][ T43] usb 2-1: USB disconnect, device number 12 [ 193.968830][ T9] usb 5-1: config 1 has no interface number 0 [ 193.982622][ T9] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 194.019073][ T9] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 194.045352][ T9] usb 5-1: config 1 interface 105 has no altsetting 0 [ 194.076045][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 194.103929][ T9] usb 5-1: Product: syz [ 194.118296][ T9] usb 5-1: Manufacturer: syz [ 194.132681][ T9] usb 5-1: SerialNumber: syz [ 194.164343][ T7672] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.196311][ T7672] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.298977][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.307692][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.678591][ T7672] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.704514][ T7672] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 194.971758][ T5611] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 195.136701][ T9] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 195.162801][ T5611] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 195.188858][ T5611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.218701][ T5611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.231219][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.251524][ T5611] usb 4-1: config 0 descriptor?? [ 195.395388][ T9] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 195.510310][ T9] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 06:b2:97:f8:97:64 [ 195.532252][ T7706] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.551678][ T9] usb 5-1: USB disconnect, device number 14 [ 195.561331][ T7706] block device autoloading is deprecated and will be removed. [ 195.572389][ T9] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 195.683589][ T9] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 195.719897][ T9] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 195.736280][ T5611] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 195.768983][ T5611] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 195.782491][ T9] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 195.873940][ T5611] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 195.898368][ T5611] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT present for ID 0 [ 195.914550][ T5611] hid-steam 0003:28DE:1142.000A: steam_probe:steam_get_conn_status failed with error -22 [ 195.949289][ T5611] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 196.006765][ T5611] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 196.551002][ T5611] usb 4-1: USB disconnect, device number 16 [ 196.597330][ T5611] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 196.924636][ T7743] netlink: 'syz.2.769': attribute type 20 has an invalid length. [ 196.932835][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 196.943558][ T7743] netlink: 'syz.2.769': attribute type 20 has an invalid length. [ 196.963947][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 197.131924][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'. [ 197.393033][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 197.581974][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 197.595731][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.628665][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.658725][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.699061][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.719797][ T43] usb 5-1: Product: syz [ 197.735654][ T43] usb 5-1: Manufacturer: syz [ 197.751810][ T43] usb 5-1: SerialNumber: syz [ 197.827187][ T43] usb 5-1: 0:2 : does not exist [ 197.839747][ T29] audit: type=1326 audit(1787314210.196:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.3.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322f9e0d9 code=0x7ffc0000 [ 197.919278][ T29] audit: type=1326 audit(1787314210.196:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.3.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322f9e0d9 code=0x7ffc0000 [ 197.957792][ T29] audit: type=1326 audit(1787314210.196:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.3.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f5322f9e0d9 code=0x7ffc0000 [ 197.987011][ T29] audit: type=1326 audit(1787314210.196:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.3.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322f9e0d9 code=0x7ffc0000 [ 198.036470][ T29] audit: type=1326 audit(1787314210.196:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.3.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322f9e0d9 code=0x7ffc0000 [ 198.115521][ T43] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 198.118295][ T29] audit: type=1326 audit(1787314210.196:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.3.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322f9e0d9 code=0x7ffc0000 [ 198.228870][ T29] audit: type=1326 audit(1787314210.196:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.3.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322f9e0d9 code=0x7ffc0000 [ 198.266354][ T5683] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 198.294424][ T29] audit: type=1326 audit(1787314210.196:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.3.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322f9e0d9 code=0x7ffc0000 [ 198.323689][ T5683] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 198.396947][ T29] audit: type=1326 audit(1787314210.196:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.3.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5322f9e0d9 code=0x7ffc0000 [ 198.463039][ T43] usb 5-1: USB disconnect, device number 15 [ 198.521387][ T29] audit: type=1326 audit(1787314210.196:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.3.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322f9e0d9 code=0x7ffc0000 [ 198.812234][ T7363] udevd[7363]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.280178][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.791'. [ 199.304061][ T7795] netlink: 'syz.0.791': attribute type 15 has an invalid length. [ 199.404635][ T5611] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 199.592473][ T5611] usb 3-1: Using ep0 maxpacket: 32 [ 199.609121][ T5611] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 199.633568][ T5611] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 199.663838][ T5611] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 199.694793][ T5611] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 199.702994][ T43] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 199.736923][ T5611] usb 3-1: config 1 has no interface number 0 [ 199.776696][ T5611] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.812352][ T5611] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 199.838666][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.879262][ T5611] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 199.921787][ T5683] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 199.953307][ T43] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 199.986034][ T43] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 200.007666][ T43] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 200.030867][ T43] usb 5-1: config 150 has no interface number 0 [ 200.046629][ T43] usb 5-1: config 150 interface 204 has no altsetting 0 [ 200.070090][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.081035][ T43] usb 5-1: Product: syz [ 200.086006][ T5683] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.086055][ T5683] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 200.105930][ T5683] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.128712][ T5611] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 200.139749][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.153781][ T43] usb 5-1: Manufacturer: syz [ 200.159551][ T43] usb 5-1: SerialNumber: syz [ 200.163763][ T5683] usb 2-1: Product: syz [ 200.172684][ T5683] usb 2-1: Manufacturer: syz [ 200.184358][ T5683] usb 2-1: SerialNumber: syz [ 200.433012][ T5683] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 200.446848][ T5683] usb 2-1: 2:1 : bogus bTerminalLink 3 [ 200.453974][ T43] xr_serial 5-1:150.204: skipping garbage [ 200.472919][ T43] xr_serial 5-1:150.204: xr_serial converter detected [ 200.560482][ T5683] usb 2-1: USB disconnect, device number 13 [ 200.594751][ T5690] usb 3-1: USB disconnect, device number 12 [ 200.614064][ T5690] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 200.732545][ T7363] udevd[7363]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 201.281894][ T43] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 201.504707][ T5690] usb 5-1: USB disconnect, device number 16 [ 201.534074][ T5690] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 201.553162][ T5690] xr_serial 5-1:150.204: device disconnected [ 202.886984][ T7857] vivid-000: disconnect [ 202.908570][ T7856] vivid-000: reconnect [ 203.712042][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 203.742354][ T7882] TCP: TCP_TX_DELAY enabled [ 203.756971][ T7887] bridge0: port 3(veth0) entered blocking state [ 203.763653][ T7887] bridge0: port 3(veth0) entered disabled state [ 203.770134][ T7887] veth0: entered allmulticast mode [ 203.782583][ T7887] veth0: entered promiscuous mode [ 203.788448][ T7887] bridge0: port 3(veth0) entered blocking state [ 203.794911][ T7887] bridge0: port 3(veth0) entered forwarding state [ 203.884964][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.937030][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.977960][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.004697][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.026910][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.044669][ T24] usb 4-1: config 0 descriptor?? [ 204.671835][ T24] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 205.196825][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 205.402024][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 205.422571][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 205.465216][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.484605][ T24] usb 5-1: config 0 descriptor?? [ 205.514457][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 205.892510][ C1] plantronics 0003:047F:FFFF.000D: usb_submit_urb(ctrl) failed: -1 [ 205.925985][ T5683] usb 4-1: USB disconnect, device number 17 [ 206.778099][ T24] gspca_sunplus: reg_w_riv err -71 [ 206.785245][ T24] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 206.826098][ T24] usb 5-1: USB disconnect, device number 17 [ 207.321831][ T5690] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 207.509079][ T5690] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 207.539521][ T5690] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 207.557721][ T5690] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 207.580737][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.609275][ T5690] usb 4-1: Product: syz [ 207.622223][ T5690] usb 4-1: Manufacturer: syz [ 207.633160][ T5690] usb 4-1: SerialNumber: syz [ 207.661762][ T5611] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 207.844723][ T5611] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.880515][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.919746][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.949523][ T5611] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.972195][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.009013][ T5611] usb 1-1: config 0 descriptor?? [ 208.097278][ T5690] usb 4-1: Limiting number of CPorts to U8_MAX [ 208.519216][ T5611] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 208.643092][ T8006] ip_tables: iptables: counters copy to user failed while replacing table [ 208.703510][ C0] greybus greybus1: nonexistent connection (8 bytes dropped) [ 208.740922][ T24] usb 1-1: USB disconnect, device number 13 [ 208.972185][ T5690] usb 4-1: USB disconnect, device number 18 [ 208.978242][ C0] usb 4-1: failed to resubmit arpc in-urb: -19 [ 208.978290][ C0] usb 4-1: failed to resubmit arpc in-urb: -19 [ 208.978331][ C0] usb 4-1: failed to resubmit in-urb: -19 [ 208.978371][ C0] usb 4-1: failed to resubmit in-urb: -19 [ 208.978410][ C0] usb 4-1: failed to resubmit in-urb: -19 [ 208.978451][ C0] usb 4-1: failed to resubmit in-urb: -19 [ 209.028132][ T5690] usb 4-1: failed to send ARPC request 4: -19 [ 209.036313][ T5690] usb 4-1: failed to execute ARPC: -19 [ 209.042156][ T5690] usb 4-1: failed to flush cport 0: -19 [ 209.047923][ T5690] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 209.047926][ T8007] fido_id[8007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 209.102672][ T5690] usb 4-1: failed to send ARPC request 2: -19 [ 209.119399][ T5690] usb 4-1: failed to execute ARPC: -19 [ 209.128355][ T5690] usb 4-1: failed to quiesce cport 0: -19 (0) [ 209.142197][ T5690] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 209.178117][ T5690] usb 4-1: failed to send ARPC request 3: -19 [ 209.197789][ T5690] usb 4-1: failed to execute ARPC: -19 [ 209.219910][ T5690] usb 4-1: failed to clear cport 0: -19 [ 209.241959][ T5690] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 209.929859][ T8025] netlink: 'syz.0.883': attribute type 4 has an invalid length. [ 209.992674][ T8029] netlink: 'syz.0.883': attribute type 4 has an invalid length. [ 210.043975][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 210.043994][ T29] audit: type=1326 audit(1787314222.406:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8026 comm="syz.2.884" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24af99e0d9 code=0x0 [ 210.411058][ T29] audit: type=1326 audit(1787314222.766:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.3.888" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5322f9e0d9 code=0x0 [ 210.721743][ T5611] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 210.884012][ T5611] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 210.905531][ T5611] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.925348][ T5611] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 210.950304][ T5611] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 210.972295][ T5611] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.994071][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 211.001926][ T5683] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 211.027208][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.049300][ T9] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 211.174321][ T5683] usb 5-1: Using ep0 maxpacket: 8 [ 211.185897][ T5683] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 211.213394][ T5683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.249550][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.287767][ T5683] usb 5-1: config 0 descriptor?? [ 211.503698][ T5611] gud 1-1:1.0: probe with driver gud failed with error -71 [ 211.533876][ T5683] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 211.739386][ T5704] usb 1-1: USB disconnect, device number 14 [ 212.056166][ T5704] usb 5-1: USB disconnect, device number 18 [ 212.922095][ T29] audit: type=1804 audit(1787314225.276:46): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.905" name="file0" dev="ramfs" ino=21674 res=1 errno=0 [ 212.989762][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 213.064883][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 213.076417][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.109025][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.147314][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.479077][ T8099] bridge2: entered promiscuous mode [ 213.497120][ T8099] bridge2: entered allmulticast mode [ 215.605766][ T8142] misc userio: Can't change port type on an already running userio instance [ 215.655747][ T8144] netlink: 'syz.4.930': attribute type 1 has an invalid length. [ 215.930218][ T8144] bond1: entered promiscuous mode [ 215.956912][ T8144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.980833][ T8146] netlink: 52 bytes leftover after parsing attributes in process `syz.2.931'. [ 216.140332][ T8149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.176261][ T8149] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 216.208494][ T8149] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 216.238273][ T8149] bond1: (slave ip6gre1): making interface the new active one [ 216.267694][ T8149] ip6gre1: entered promiscuous mode [ 216.283589][ T29] audit: type=1326 audit(1787314228.636:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241c59e0d9 code=0x7fc00000 [ 216.366566][ T8149] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 216.383580][ T29] audit: type=1326 audit(1787314228.636:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f241c59e0d9 code=0x7fc00000 [ 216.502560][ T29] audit: type=1326 audit(1787314228.636:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241c59e0d9 code=0x7fc00000 [ 216.655160][ T29] audit: type=1326 audit(1787314228.676:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241c59e0d9 code=0x7fc00000 [ 216.762777][ T29] audit: type=1326 audit(1787314228.676:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241c59e0d9 code=0x7fc00000 [ 216.807600][ T29] audit: type=1326 audit(1787314228.676:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241c59e0d9 code=0x7fc00000 [ 216.837680][ T29] audit: type=1326 audit(1787314228.676:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241c59e0d9 code=0x7fc00000 [ 216.988392][ T29] audit: type=1326 audit(1787314228.676:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241c59e0d9 code=0x7fc00000 [ 217.072184][ T29] audit: type=1326 audit(1787314228.676:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241c59e0d9 code=0x7fc00000 [ 217.198243][ T29] audit: type=1326 audit(1787314228.676:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.927" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f241c59e0d9 code=0x7fc00000 [ 218.512521][ T5683] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 218.713944][ T5683] usb 4-1: Using ep0 maxpacket: 32 [ 218.737190][ T5683] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 218.766650][ T5683] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 218.820375][ T5683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 218.884913][ T5683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 218.914224][ T5683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 218.960912][ T5683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 218.981141][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.001416][ T5683] usb 4-1: Product: syz [ 219.006254][ T5683] usb 4-1: Manufacturer: syz [ 219.014780][ T5683] usb 4-1: SerialNumber: syz [ 219.055796][ T5683] usb 4-1: config 0 descriptor?? [ 219.287434][ T8226] loop5: detected capacity change from 0 to 7 [ 219.319985][ T8226] Dev loop5: unable to read RDB block 7 [ 219.337418][ T8226] loop5: AHDI p2 [ 219.360806][ T8226] loop5: partition table partially beyond EOD, truncated [ 219.519408][ T5683] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.554732][ T5683] input input25: Device does not respond to id packet M [ 219.589412][ T5683] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.617715][ T5683] input input25: Device does not respond to id packet P [ 219.648183][ T5683] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.663143][ T8228] tipc: Started in network mode [ 219.689907][ T5683] input input25: Device does not respond to id packet B [ 219.710745][ T8228] tipc: Node identity ac1414aa, cluster identity 4711 [ 219.727106][ T5683] input input25: Device does not respond to id packet N [ 219.740204][ T8228] tipc: New replicast peer: 172.20.20.187 [ 219.753161][ T8228] tipc: Enabled bearer , priority 10 [ 219.928951][ T5683] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 219.949471][ T5683] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 219.968183][ T5683] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 219.996914][ T5683] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 220.055290][ T5683] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 220.130551][ T5683] usb 4-1: USB disconnect, device number 19 [ 220.465667][ T8250] loop5: detected capacity change from 0 to 7 [ 220.486965][ T8250] Dev loop5: unable to read RDB block 7 [ 220.505503][ T8250] loop5: AHDI p1 p2 p3 [ 220.532521][ T8250] loop5: partition table partially beyond EOD, truncated [ 220.571956][ T8250] loop5: p1 start 1818582900 is beyond EOD, truncated [ 220.629433][ T8250] loop5: p3 start 335544320 is beyond EOD, truncated [ 220.754268][ T43] tipc: Node number set to 2886997162 [ 221.402337][ T5611] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 221.564200][ T5611] usb 5-1: Using ep0 maxpacket: 8 [ 221.615326][ T5611] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 221.649474][ T5611] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 221.691459][ T5611] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.777995][ T5611] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.883793][ T5611] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.005996][ T5611] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.136014][ T5611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.454661][ T5611] usb 5-1: usb_control_msg returned -32 [ 222.468538][ T5611] usbtmc 5-1:16.0: can't read capabilities [ 222.808168][ T8262] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 222.893246][ T5611] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 222.903001][ T9] usb 5-1: USB disconnect, device number 19 [ 223.096317][ T5611] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 223.133083][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.186703][ T5611] usb 2-1: config 0 descriptor?? [ 223.228907][ T5611] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 223.278108][ T8323] netlink: 'syz.2.983': attribute type 1 has an invalid length. [ 223.721302][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.985'. [ 224.124874][ T5611] gspca_sunplus: reg_w_riv err -71 [ 224.139866][ T5611] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 224.188693][ T5611] usb 2-1: USB disconnect, device number 14 [ 225.231295][ T8352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.306709][ T8374] team0: Port device syz_tun added [ 226.394497][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 226.465923][ T8378] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 227.162992][ T8401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 228.068190][ T8422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.945145][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 228.945181][ T29] audit: type=1326 audit(1787314241.306:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8417 comm="syz.3.1021" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5322f9e0d9 code=0x0 [ 229.172850][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 229.382053][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 229.393326][ T43] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 229.447053][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.491197][ T43] usb 3-1: Product: syz [ 229.506994][ T43] usb 3-1: Manufacturer: syz [ 229.518498][ T43] usb 3-1: SerialNumber: syz [ 229.602336][ T5683] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 229.762408][ T5683] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 229.785839][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.805083][ T5683] usb 2-1: config 0 descriptor?? [ 229.820510][ T5683] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 229.981982][ T986] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 230.144058][ T986] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 230.167424][ T986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 230.198458][ T986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.222536][ T986] usb 5-1: config 0 descriptor?? [ 230.242918][ T8457] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 230.870386][ T986] hid (null): invalid report_size 12130 [ 230.909968][ T986] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 230.932409][ T986] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 230.940480][ T986] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 230.950640][ T986] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 230.960364][ T986] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 230.969498][ T986] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 230.979407][ T986] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 230.988843][ T986] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 230.997053][ T986] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 231.009355][ T986] asus 0003:0B05:1ABE.0010: unknown main item tag 0x0 [ 231.038329][ T43] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 231.074734][ T5683] usb 2-1: USB disconnect, device number 15 [ 231.095938][ T986] asus 0003:0B05:1ABE.0010: invalid report_size 12130 [ 231.116612][ T986] asus 0003:0B05:1ABE.0010: item 0 2 1 7 parsing failed [ 231.146716][ T986] asus 0003:0B05:1ABE.0010: Asus hid parse failed: -22 [ 231.160414][ T43] usb 3-1: USB disconnect, device number 13 [ 231.184310][ T986] asus 0003:0B05:1ABE.0010: probe with driver asus failed with error -22 [ 231.586150][ T8480] syzkaller1: entered promiscuous mode [ 231.595099][ T8480] syzkaller1: entered allmulticast mode [ 232.075557][ T8492] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 232.278994][ T29] audit: type=1804 audit(1787314244.636:96): pid=8496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1053" name="bus" dev="ramfs" ino=25658 res=1 errno=0 [ 232.391776][ T5683] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 232.499897][ T9] usb 5-1: USB disconnect, device number 20 [ 232.541798][ T43] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 232.556019][ T5683] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 232.577290][ T5683] usb 3-1: config index 0 descriptor too short (expected 8251, got 59) [ 232.595586][ T5683] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.623110][ T5683] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.653458][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 232.671663][ T5683] usb 3-1: SerialNumber: syz [ 232.687438][ T5683] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 232.725763][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 232.757426][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 232.800635][ T43] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 232.856870][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.932240][ T43] usb 4-1: probing VID:PID(0424:012C) [ 232.960984][ T43] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 232.976118][ T43] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 233.000857][ T43] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 233.028098][ T43] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 233.036410][ T8494] kvm: Disabled LAPIC found during irq injection [ 233.057518][ T43] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 233.132958][ T5683] usb 3-1: USB disconnect, device number 14 [ 233.345850][ T43] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 233.564358][ T43] usb 4-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 233.689987][ T986] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 234.700481][ T43] usb 4-1: USB disconnect, device number 20 [ 234.715889][ T986] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 234.760627][ T986] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 234.884712][ T43] USB vub300 remote SDIO host controller[0] now disconnected [ 235.053633][ T8528] kvm: emulating exchange as write [ 235.231803][ T8534] kvm: apic: phys broadcast and lowest prio [ 235.504647][ C1] [ 235.508281][ C1] ============================= [ 235.514429][ C1] WARNING: suspicious RCU usage [ 235.520096][ C1] syzkaller #0 Tainted: G L [ 235.526986][ C1] ----------------------------- [ 235.531890][ C1] kernel/sched/core.c:9196 Illegal context switch in RCU-sched read-side critical section! [ 235.543899][ C1] [ 235.543899][ C1] other info that might help us debug this: [ 235.543899][ C1] [ 235.555625][ C1] [ 235.555625][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 235.564880][ C1] locks held by syz-executor/5632: 9, last CPU#1: [ 235.572241][ C1] #0: ffffffff8ec332d0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 235.582334][ C1] #1: ffff8880297203b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 235.592783][ C1] #2: ffff888022fb03b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 235.603408][ C1] #3: ffffffff8eb5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 235.614277][ C1] #4: ffff88801b0621f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 235.626304][ C1] #5: ffffffff8eb5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 235.637191][ C1] #6: ffff88805b9e76d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x70f/0x5c50 [ 235.649032][ C1] #7: ffffffff8eb5a420 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 235.659604][ C1] #8: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 235.671767][ C1] [ 235.671767][ C1] stack backtrace: [ 235.678590][ C1] CPU: 1 UID: 0 PID: 5632 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 235.678629][ C1] Tainted: [L]=SOFTLOCKUP [ 235.678638][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.678661][ C1] Call Trace: [ 235.678671][ C1] [ 235.678686][ C1] dump_stack_lvl+0xe8/0x150 [ 235.678725][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 235.678769][ C1] __might_resched+0xbb/0x4c0 [ 235.678802][ C1] ? __cancel_work_sync+0x5c/0x110 [ 235.678837][ C1] __cancel_work_sync+0x6d/0x110 [ 235.678872][ C1] mmc_free_host+0x19/0x30 [ 235.678915][ C1] call_timer_fn+0x18d/0x5f0 [ 235.678940][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 235.678970][ C1] ? call_timer_fn+0xd5/0x5f0 [ 235.678992][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 235.679037][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.679061][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 235.679093][ C1] __run_timer_base+0x652/0x8b0 [ 235.679143][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 235.679195][ C1] run_timer_softirq+0xb7/0x170 [ 235.679229][ C1] handle_softirqs+0x226/0x860 [ 235.679259][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 235.679292][ C1] __irq_exit_rcu+0xcb/0x220 [ 235.679319][ C1] irq_exit_rcu+0x9/0x30 [ 235.679343][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 235.679389][ C1] [ 235.679397][ C1] [ 235.679406][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.679432][ C1] RIP: 0010:lock_acquire+0x222/0x350 [ 235.679472][ C1] Code: ff ff ff e8 a0 20 39 0a f7 44 24 08 00 02 00 00 0f 84 39 ff ff ff 65 48 8b 05 f2 0b ce 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 27 3c 0a cc 48 8d 3d a7 64 b9 [ 235.679492][ C1] RSP: 0018:ffffc90004307210 EFLAGS: 00000282 [ 235.679514][ C1] RAX: 2ab30850d67e6b00 RBX: 0000000000000000 RCX: 8000000000000003 [ 235.679536][ C1] RDX: 00000000dc7298f8 RSI: ffffffff8e4e132a RDI: ffffffff8c4cf580 [ 235.679553][ C1] RBP: ffffffff8242ba4a R08: ffffffff8242ba4a R09: 0000000000000000 [ 235.679570][ C1] R10: 0000000000000000 R11: ffffffff8eb5a420 R12: 0000000000000002 [ 235.679585][ C1] R13: ffffffff8eb5a420 R14: 0000000000000000 R15: 0000000000000246 [ 235.679605][ C1] ? pfn_valid+0xba/0x490 [ 235.679639][ C1] ? pfn_valid+0xba/0x490 [ 235.679677][ C1] ? pfn_valid+0xba/0x490 [ 235.679710][ C1] pfn_valid+0xd6/0x490 [ 235.679739][ C1] ? pfn_valid+0xba/0x490 [ 235.679774][ C1] page_table_check_set+0x25/0x530 [ 235.679814][ C1] copy_pmd_range+0x4b46/0x5c50 [ 235.679840][ C1] ? arch_stack_walk+0xfb/0x150 [ 235.679889][ C1] ? __lock_acquire+0x683/0x2cf0 [ 235.679940][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 235.679966][ C1] ? do_syscall_64+0x166/0x520 [ 235.679994][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.680024][ C1] ? __lock_acquire+0x683/0x2cf0 [ 235.680076][ C1] copy_page_range+0xc25/0x1230 [ 235.680131][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 235.680172][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 235.680199][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 235.680231][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 235.680266][ C1] dup_mmap+0xf17/0x1dc0 [ 235.680312][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 235.680340][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 235.680381][ C1] ? copy_mm+0x10f/0x480 [ 235.680410][ C1] ? copy_mm+0x10f/0x480 [ 235.680449][ C1] copy_mm+0x11a/0x480 [ 235.680479][ C1] ? copy_process+0xd3c/0x43e0 [ 235.680503][ C1] copy_process+0x1e75/0x43e0 [ 235.680539][ C1] ? copy_process+0xd3c/0x43e0 [ 235.680585][ C1] ? __pfx_copy_process+0x10/0x10 [ 235.680627][ C1] kernel_clone+0x2d7/0x940 [ 235.680662][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 235.680701][ C1] ? kasan_check_range+0x1ca/0x2c0 [ 235.680745][ C1] __x64_sys_clone+0x1b6/0x230 [ 235.680792][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 235.680839][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 235.680890][ C1] do_syscall_64+0x166/0x520 [ 235.680917][ C1] ? trace_irq_disable+0x3b/0x140 [ 235.680948][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.680972][ C1] ? clear_bhb_loop+0x70/0xc0 [ 235.681000][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.681023][ C1] RIP: 0033:0x7f5322fc6b52 [ 235.681052][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 235.681072][ C1] RSP: 002b:00007f532334fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 235.681096][ C1] RAX: ffffffffffffffda RBX: 00007f532334fc60 RCX: 00007f5322fc6b52 [ 235.681114][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 235.681128][ C1] RBP: 00007f532334fdec R08: 0000000000000000 R09: 0000000000000001 [ 235.681143][ C1] R10: 0000555576c227d0 R11: 0000000000000246 R12: 0000000000000001 [ 235.681157][ C1] R13: 00000000000927c0 R14: 0000000000039654 R15: 00007f532334fe40 [ 235.681191][ C1] [ 235.681557][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4552 [ 236.222426][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5632, name: syz-executor [ 236.231685][ C1] preempt_count: 103, expected: 0 [ 236.236755][ C1] RCU nest depth: 2, expected: 0 [ 236.241733][ C1] locks held by syz-executor/5632: 9, last CPU#1: [ 236.248183][ C1] #0: ffffffff8ec332d0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 236.256973][ C1] #1: ffff8880297203b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 236.266093][ C1] #2: ffff888022fb03b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 236.275413][ C1] #3: ffffffff8eb5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 236.285066][ C1] #4: ffff88801b0621f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 236.295616][ C1] #5: ffffffff8eb5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 236.305192][ C1] #6: ffff88805b9e76d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x70f/0x5c50 [ 236.315575][ C1] #7: ffffffff8eb5a420 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 236.338480][ C1] #8: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 236.349014][ C1] Preemption disabled at: [ 236.349037][ C1] [<0000000000000000>] 0x0 [ 236.357878][ C1] CPU: 1 UID: 0 PID: 5632 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 236.357917][ C1] Tainted: [L]=SOFTLOCKUP [ 236.357926][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.357941][ C1] Call Trace: [ 236.357951][ C1] [ 236.357960][ C1] dump_stack_lvl+0xe8/0x150 [ 236.358010][ C1] __might_resched+0x36a/0x4c0 [ 236.358063][ C1] __cancel_work_sync+0x6d/0x110 [ 236.358098][ C1] mmc_free_host+0x19/0x30 [ 236.358133][ C1] call_timer_fn+0x18d/0x5f0 [ 236.358156][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 236.358186][ C1] ? call_timer_fn+0xd5/0x5f0 [ 236.358208][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 236.358242][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.358268][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 236.358300][ C1] __run_timer_base+0x652/0x8b0 [ 236.358352][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 236.358404][ C1] run_timer_softirq+0xb7/0x170 [ 236.358440][ C1] handle_softirqs+0x226/0x860 [ 236.358473][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 236.358509][ C1] __irq_exit_rcu+0xcb/0x220 [ 236.358537][ C1] irq_exit_rcu+0x9/0x30 [ 236.358566][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 236.358596][ C1] [ 236.358604][ C1] [ 236.358613][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 236.358640][ C1] RIP: 0010:lock_acquire+0x222/0x350 [ 236.358677][ C1] Code: ff ff ff e8 a0 20 39 0a f7 44 24 08 00 02 00 00 0f 84 39 ff ff ff 65 48 8b 05 f2 0b ce 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 27 3c 0a cc 48 8d 3d a7 64 b9 [ 236.358698][ C1] RSP: 0018:ffffc90004307210 EFLAGS: 00000282 [ 236.358720][ C1] RAX: 2ab30850d67e6b00 RBX: 0000000000000000 RCX: 8000000000000003 [ 236.358738][ C1] RDX: 00000000dc7298f8 RSI: ffffffff8e4e132a RDI: ffffffff8c4cf580 [ 236.358755][ C1] RBP: ffffffff8242ba4a R08: ffffffff8242ba4a R09: 0000000000000000 [ 236.358772][ C1] R10: 0000000000000000 R11: ffffffff8eb5a420 R12: 0000000000000002 [ 236.358788][ C1] R13: ffffffff8eb5a420 R14: 0000000000000000 R15: 0000000000000246 [ 236.358808][ C1] ? pfn_valid+0xba/0x490 [ 236.358842][ C1] ? pfn_valid+0xba/0x490 [ 236.358881][ C1] ? pfn_valid+0xba/0x490 [ 236.358914][ C1] pfn_valid+0xd6/0x490 [ 236.358944][ C1] ? pfn_valid+0xba/0x490 [ 236.358978][ C1] page_table_check_set+0x25/0x530 [ 236.359017][ C1] copy_pmd_range+0x4b46/0x5c50 [ 236.359051][ C1] ? arch_stack_walk+0xfb/0x150 [ 236.359090][ C1] ? __lock_acquire+0x683/0x2cf0 [ 236.359141][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 236.359166][ C1] ? do_syscall_64+0x166/0x520 [ 236.359193][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.359224][ C1] ? __lock_acquire+0x683/0x2cf0 [ 236.359276][ C1] copy_page_range+0xc25/0x1230 [ 236.359330][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 236.359371][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 236.359398][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 236.359428][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 236.359464][ C1] dup_mmap+0xf17/0x1dc0 [ 236.359510][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 236.359538][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 236.359580][ C1] ? copy_mm+0x10f/0x480 [ 236.359607][ C1] ? copy_mm+0x10f/0x480 [ 236.359649][ C1] copy_mm+0x11a/0x480 [ 236.359678][ C1] ? copy_process+0xd3c/0x43e0 [ 236.359704][ C1] copy_process+0x1e75/0x43e0 [ 236.359740][ C1] ? copy_process+0xd3c/0x43e0 [ 236.359785][ C1] ? __pfx_copy_process+0x10/0x10 [ 236.359827][ C1] kernel_clone+0x2d7/0x940 [ 236.359862][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 236.359901][ C1] ? kasan_check_range+0x1ca/0x2c0 [ 236.359946][ C1] __x64_sys_clone+0x1b6/0x230 [ 236.359980][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 236.360036][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 236.360081][ C1] do_syscall_64+0x166/0x520 [ 236.360109][ C1] ? trace_irq_disable+0x3b/0x140 [ 236.360140][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.360164][ C1] ? clear_bhb_loop+0x70/0xc0 [ 236.360194][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.360217][ C1] RIP: 0033:0x7f5322fc6b52 [ 236.360238][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 236.360258][ C1] RSP: 002b:00007f532334fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 236.360281][ C1] RAX: ffffffffffffffda RBX: 00007f532334fc60 RCX: 00007f5322fc6b52 [ 236.360299][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 236.360314][ C1] RBP: 00007f532334fdec R08: 0000000000000000 R09: 0000000000000001 [ 236.360329][ C1] R10: 0000555576c227d0 R11: 0000000000000246 R12: 0000000000000001 [ 236.360344][ C1] R13: 00000000000927c0 R14: 0000000000039654 R15: 00007f532334fe40 [ 236.360379][ C1] [ 236.361066][ C1] [ 236.893980][ C1] ============================= [ 236.898865][ C1] WARNING: suspicious RCU usage [ 236.904183][ C1] syzkaller #0 Tainted: G W L [ 236.910207][ C1] ----------------------------- [ 236.928800][ C1] kernel/rcu/srcutree.c:1487 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 236.940833][ C1] [ 236.940833][ C1] other info that might help us debug this: [ 236.940833][ C1] [ 236.951102][ C1] [ 236.951102][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 236.959210][ C1] locks held by syz-executor/5632: 9, last CPU#1: [ 236.965669][ C1] #0: ffffffff8ec332d0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 236.974566][ C1] #1: ffff8880297203b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 236.984057][ C1] #2: ffff888022fb03b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 236.993376][ C1] #3: ffffffff8eb5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 237.002939][ C1] #4: ffff88801b0621f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 237.013449][ C1] #5: ffffffff8eb5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 237.023018][ C1] #6: ffff88805b9e76d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x70f/0x5c50 [ 237.048580][ C1] #7: ffffffff8eb5a420 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 237.058092][ C1] #8: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 237.068650][ C1] [ 237.068650][ C1] stack backtrace: [ 237.074586][ C1] CPU: 1 UID: 0 PID: 5632 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 237.074624][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 237.074632][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.074643][ C1] Call Trace: [ 237.074650][ C1] [ 237.074658][ C1] dump_stack_lvl+0xe8/0x150 [ 237.074690][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 237.074724][ C1] __synchronize_srcu+0x157/0x2f0 [ 237.074753][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 237.074791][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 237.074823][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 237.074843][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 237.074871][ C1] ? synchronize_srcu+0x20a/0x260 [ 237.074898][ C1] wakeup_source_unregister+0x129/0x3f0 [ 237.074930][ C1] mmc_host_classdev_release+0x47/0x100 [ 237.074959][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 237.074986][ C1] device_release+0xc4/0x1f0 [ 237.075007][ C1] kobject_put+0x222/0x550 [ 237.075034][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 237.075055][ C1] call_timer_fn+0x18d/0x5f0 [ 237.075072][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 237.075094][ C1] ? call_timer_fn+0xd5/0x5f0 [ 237.075111][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 237.075135][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.075154][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 237.075178][ C1] __run_timer_base+0x652/0x8b0 [ 237.075217][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 237.075257][ C1] run_timer_softirq+0xb7/0x170 [ 237.075286][ C1] handle_softirqs+0x226/0x860 [ 237.075317][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 237.075352][ C1] __irq_exit_rcu+0xcb/0x220 [ 237.075380][ C1] irq_exit_rcu+0x9/0x30 [ 237.075404][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 237.075431][ C1] [ 237.075438][ C1] [ 237.075448][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 237.075473][ C1] RIP: 0010:lock_acquire+0x222/0x350 [ 237.075507][ C1] Code: ff ff ff e8 a0 20 39 0a f7 44 24 08 00 02 00 00 0f 84 39 ff ff ff 65 48 8b 05 f2 0b ce 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 27 3c 0a cc 48 8d 3d a7 64 b9 [ 237.075528][ C1] RSP: 0018:ffffc90004307210 EFLAGS: 00000282 [ 237.075550][ C1] RAX: 2ab30850d67e6b00 RBX: 0000000000000000 RCX: 8000000000000003 [ 237.075568][ C1] RDX: 00000000dc7298f8 RSI: ffffffff8e4e132a RDI: ffffffff8c4cf580 [ 237.075586][ C1] RBP: ffffffff8242ba4a R08: ffffffff8242ba4a R09: 0000000000000000 [ 237.075603][ C1] R10: 0000000000000000 R11: ffffffff8eb5a420 R12: 0000000000000002 [ 237.075618][ C1] R13: ffffffff8eb5a420 R14: 0000000000000000 R15: 0000000000000246 [ 237.075638][ C1] ? pfn_valid+0xba/0x490 [ 237.075672][ C1] ? pfn_valid+0xba/0x490 [ 237.075710][ C1] ? pfn_valid+0xba/0x490 [ 237.075743][ C1] pfn_valid+0xd6/0x490 [ 237.075774][ C1] ? pfn_valid+0xba/0x490 [ 237.075815][ C1] page_table_check_set+0x25/0x530 [ 237.075855][ C1] copy_pmd_range+0x4b46/0x5c50 [ 237.075881][ C1] ? arch_stack_walk+0xfb/0x150 [ 237.075919][ C1] ? __lock_acquire+0x683/0x2cf0 [ 237.075970][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 237.075995][ C1] ? do_syscall_64+0x166/0x520 [ 237.076024][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.076054][ C1] ? __lock_acquire+0x683/0x2cf0 [ 237.076105][ C1] copy_page_range+0xc25/0x1230 [ 237.076159][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 237.076201][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 237.076229][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 237.076258][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 237.076290][ C1] dup_mmap+0xf17/0x1dc0 [ 237.076325][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 237.076346][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 237.076377][ C1] ? copy_mm+0x10f/0x480 [ 237.076404][ C1] ? copy_mm+0x10f/0x480 [ 237.076438][ C1] copy_mm+0x11a/0x480 [ 237.076459][ C1] ? copy_process+0xd3c/0x43e0 [ 237.076479][ C1] copy_process+0x1e75/0x43e0 [ 237.076506][ C1] ? copy_process+0xd3c/0x43e0 [ 237.076541][ C1] ? __pfx_copy_process+0x10/0x10 [ 237.076571][ C1] kernel_clone+0x2d7/0x940 [ 237.076598][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 237.076627][ C1] ? kasan_check_range+0x1ca/0x2c0 [ 237.076661][ C1] __x64_sys_clone+0x1b6/0x230 [ 237.076687][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 237.076723][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 237.076757][ C1] do_syscall_64+0x166/0x520 [ 237.076784][ C1] ? trace_irq_disable+0x3b/0x140 [ 237.076810][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.076828][ C1] ? clear_bhb_loop+0x70/0xc0 [ 237.076849][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.076867][ C1] RIP: 0033:0x7f5322fc6b52 [ 237.076884][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 237.076899][ C1] RSP: 002b:00007f532334fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 237.076918][ C1] RAX: ffffffffffffffda RBX: 00007f532334fc60 RCX: 00007f5322fc6b52 [ 237.076931][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 237.076942][ C1] RBP: 00007f532334fdec R08: 0000000000000000 R09: 0000000000000001 [ 237.076953][ C1] R10: 0000555576c227d0 R11: 0000000000000246 R12: 0000000000000001 [ 237.076965][ C1] R13: 00000000000927c0 R14: 0000000000039654 R15: 00007f532334fe40 [ 237.076991][ C1] [ 237.077004][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1491 [ 237.697474][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5632, name: syz-executor [ 237.706717][ C1] preempt_count: 103, expected: 0 [ 237.711775][ C1] RCU nest depth: 2, expected: 0 [ 237.716755][ C1] locks held by syz-executor/5632: 9, last CPU#1: [ 237.723203][ C1] #0: ffffffff8ec332d0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 237.732001][ C1] #1: ffff8880297203b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 237.758121][ C1] #2: ffff888022fb03b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 237.767520][ C1] #3: ffffffff8eb5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 237.777083][ C1] #4: ffff88801b0621f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 237.787625][ C1] #5: ffffffff8eb5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 237.797217][ C1] #6: ffff88805b9e76d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x70f/0x5c50 [ 237.807682][ C1] #7: ffffffff8eb5a420 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 237.817180][ C1] #8: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 237.827774][ C1] Preemption disabled at: [ 237.827791][ C1] [<0000000000000000>] 0x0 [ 237.836599][ C1] CPU: 1 UID: 0 PID: 5632 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 237.836636][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 237.836645][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.836659][ C1] Call Trace: [ 237.836669][ C1] [ 237.836678][ C1] dump_stack_lvl+0xe8/0x150 [ 237.836716][ C1] __might_resched+0x36a/0x4c0 [ 237.836758][ C1] __synchronize_srcu+0x1a1/0x2f0 [ 237.836796][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 237.836828][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 237.836869][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 237.836894][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 237.836930][ C1] ? synchronize_srcu+0x20a/0x260 [ 237.836966][ C1] wakeup_source_unregister+0x129/0x3f0 [ 237.837005][ C1] mmc_host_classdev_release+0x47/0x100 [ 237.837043][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 237.837077][ C1] device_release+0xc4/0x1f0 [ 237.837106][ C1] kobject_put+0x222/0x550 [ 237.837142][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 237.837170][ C1] call_timer_fn+0x18d/0x5f0 [ 237.837194][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 237.837235][ C1] ? call_timer_fn+0xd5/0x5f0 [ 237.837257][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 237.837292][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.837317][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 237.837350][ C1] __run_timer_base+0x652/0x8b0 [ 237.837398][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 237.837451][ C1] run_timer_softirq+0xb7/0x170 [ 237.837487][ C1] handle_softirqs+0x226/0x860 [ 237.837518][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 237.837554][ C1] __irq_exit_rcu+0xcb/0x220 [ 237.837582][ C1] irq_exit_rcu+0x9/0x30 [ 237.837605][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 237.837632][ C1] [ 237.837640][ C1] [ 237.837649][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 237.837676][ C1] RIP: 0010:lock_acquire+0x222/0x350 [ 237.837711][ C1] Code: ff ff ff e8 a0 20 39 0a f7 44 24 08 00 02 00 00 0f 84 39 ff ff ff 65 48 8b 05 f2 0b ce 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 27 3c 0a cc 48 8d 3d a7 64 b9 [ 237.837732][ C1] RSP: 0018:ffffc90004307210 EFLAGS: 00000282 [ 237.837753][ C1] RAX: 2ab30850d67e6b00 RBX: 0000000000000000 RCX: 8000000000000003 [ 237.837771][ C1] RDX: 00000000dc7298f8 RSI: ffffffff8e4e132a RDI: ffffffff8c4cf580 [ 237.837789][ C1] RBP: ffffffff8242ba4a R08: ffffffff8242ba4a R09: 0000000000000000 [ 237.837806][ C1] R10: 0000000000000000 R11: ffffffff8eb5a420 R12: 0000000000000002 [ 237.837821][ C1] R13: ffffffff8eb5a420 R14: 0000000000000000 R15: 0000000000000246 [ 237.837841][ C1] ? pfn_valid+0xba/0x490 [ 237.837876][ C1] ? pfn_valid+0xba/0x490 [ 237.837921][ C1] ? pfn_valid+0xba/0x490 [ 237.837955][ C1] pfn_valid+0xd6/0x490 [ 237.837984][ C1] ? pfn_valid+0xba/0x490 [ 237.838019][ C1] page_table_check_set+0x25/0x530 [ 237.838057][ C1] copy_pmd_range+0x4b46/0x5c50 [ 237.838083][ C1] ? arch_stack_walk+0xfb/0x150 [ 237.838120][ C1] ? __lock_acquire+0x683/0x2cf0 [ 237.838172][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 237.838198][ C1] ? do_syscall_64+0x166/0x520 [ 237.838234][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.838266][ C1] ? __lock_acquire+0x683/0x2cf0 [ 237.838317][ C1] copy_page_range+0xc25/0x1230 [ 237.838373][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 237.838415][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 237.838443][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 237.838474][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 237.838510][ C1] dup_mmap+0xf17/0x1dc0 [ 237.838558][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 237.838586][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 237.838628][ C1] ? copy_mm+0x10f/0x480 [ 237.838656][ C1] ? copy_mm+0x10f/0x480 [ 237.838697][ C1] copy_mm+0x11a/0x480 [ 237.838726][ C1] ? copy_process+0xd3c/0x43e0 [ 237.838753][ C1] copy_process+0x1e75/0x43e0 [ 237.838789][ C1] ? copy_process+0xd3c/0x43e0 [ 237.838834][ C1] ? __pfx_copy_process+0x10/0x10 [ 237.838875][ C1] kernel_clone+0x2d7/0x940 [ 237.838910][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 237.838949][ C1] ? kasan_check_range+0x1ca/0x2c0 [ 237.838994][ C1] __x64_sys_clone+0x1b6/0x230 [ 237.839027][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 237.839075][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 237.839121][ C1] do_syscall_64+0x166/0x520 [ 237.839149][ C1] ? trace_irq_disable+0x3b/0x140 [ 237.839181][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.839205][ C1] ? clear_bhb_loop+0x70/0xc0 [ 237.839242][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.839266][ C1] RIP: 0033:0x7f5322fc6b52 [ 237.839289][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 237.839310][ C1] RSP: 002b:00007f532334fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 237.839334][ C1] RAX: ffffffffffffffda RBX: 00007f532334fc60 RCX: 00007f5322fc6b52 [ 237.839352][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 237.839367][ C1] RBP: 00007f532334fdec R08: 0000000000000000 R09: 0000000000000001 [ 237.839382][ C1] R10: 0000555576c227d0 R11: 0000000000000246 R12: 0000000000000001 [ 237.839397][ C1] R13: 00000000000927c0 R14: 0000000000039654 R15: 00007f532334fe40 [ 237.839432][ C1] [ 237.839445][ C1] ODEBUG: object ffffc90000a08a80 is NOT on stack ffffc90004300000, but annotated. [ 237.841679][ C1] [ 237.841688][ C1] ====================================================== [ 237.841697][ C1] WARNING: possible circular locking dependency detected [ 237.841711][ C1] syzkaller #0 Tainted: G W L [ 237.841723][ C1] ------------------------------------------------------ [ 237.841733][ C1] syz-executor/5632 is trying to acquire lock: [ 237.841745][ C1] ffffffff8eb4c640 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x123/0xb40 [ 237.841805][ C1] [ 237.841805][ C1] but task is already holding lock: [ 237.841814][ C1] ffffffff9aa67100 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x81/0x3c0 [ 237.841862][ C1] [ 237.841862][ C1] which lock already depends on the new lock. [ 237.841862][ C1] [ 237.841870][ C1] [ 237.841870][ C1] the existing dependency chain (in reverse order) is: [ 237.841879][ C1] [ 237.841879][ C1] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}: [ 237.841910][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 237.841935][ C1] debug_object_assert_init+0xb0/0x380 [ 237.841956][ C1] hrtimer_start_range_ns+0x3d/0x3e0 [ 237.841978][ C1] rpm_suspend+0x12d9/0x17a0 [ 237.842011][ C1] __pm_runtime_idle+0x12f/0x1a0 [ 237.842041][ C1] __device_attach+0x355/0x450 [ 237.842074][ C1] device_initial_probe+0xa1/0xd0 [ 237.842106][ C1] bus_probe_device+0x12a/0x220 [ 237.842131][ C1] device_add+0x7d7/0xb80 [ 237.842159][ C1] serdev_controller_add+0x85/0x6d0 [ 237.842181][ C1] serdev_tty_port_register+0x159/0x260 [ 237.842203][ C1] tty_port_register_device_attr_serdev+0x169/0x1f0 [ 237.842244][ C1] serial_core_register_port+0xffa/0x2840 [ 237.842270][ C1] serial8250_register_8250_port+0x16b4/0x2090 [ 237.842294][ C1] serial_pnp_probe+0x56a/0x7f0 [ 237.842317][ C1] pnp_device_probe+0x30b/0x4c0 [ 237.842340][ C1] really_probe+0x254/0xae0 [ 237.842359][ C1] __driver_probe_device+0x1e8/0x360 [ 237.842392][ C1] driver_probe_device+0x4f/0x240 [ 237.842412][ C1] __driver_attach+0x339/0x600 [ 237.842444][ C1] bus_for_each_dev+0x23b/0x2c0 [ 237.842469][ C1] bus_add_driver+0x345/0x670 [ 237.842494][ C1] driver_register+0x23a/0x320 [ 237.842514][ C1] serial8250_init+0x8f/0x160 [ 237.842538][ C1] do_one_initcall+0x250/0x870 [ 237.842569][ C1] do_initcall_level+0x10a/0x1a0 [ 237.842594][ C1] do_initcalls+0x59/0xa0 [ 237.842617][ C1] kernel_init_freeable+0x29d/0x3e0 [ 237.842641][ C1] kernel_init+0x22/0x1d0 [ 237.842672][ C1] ret_from_fork+0x514/0xb70 [ 237.842702][ C1] ret_from_fork_asm+0x1a/0x30 [ 237.842734][ C1] [ 237.842734][ C1] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 237.842766][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 237.842788][ C1] __pm_runtime_resume+0x10f/0x180 [ 237.842820][ C1] __uart_start+0x171/0x460 [ 237.842843][ C1] uart_write+0x251/0x9f0 [ 237.842867][ C1] n_tty_write+0xd49/0x11e0 [ 237.842899][ C1] file_tty_write+0x50d/0x9f0 [ 237.842923][ C1] vfs_write+0x612/0xba0 [ 237.842945][ C1] ksys_write+0x150/0x270 [ 237.842967][ C1] do_syscall_64+0x166/0x520 [ 237.842994][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.843017][ C1] [ 237.843017][ C1] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 237.843047][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 237.843069][ C1] serial8250_console_write+0x153/0x1ba0 [ 237.843099][ C1] console_flush_all+0x709/0xb40 [ 237.843123][ C1] console_unlock+0xd1/0x1c0 [ 237.843143][ C1] vprintk_emit+0x485/0x560 [ 237.843163][ C1] _printk+0xdd/0x130 [ 237.843182][ C1] register_console+0xc1b/0x1040 [ 237.843206][ C1] univ8250_console_init+0x3a/0x70 [ 237.843236][ C1] console_init+0x10b/0x4a0 [ 237.843268][ C1] start_kernel+0x238/0x3e0 [ 237.843290][ C1] x86_64_start_reservations+0x24/0x30 [ 237.843322][ C1] x86_64_start_kernel+0x137/0x1b0 [ 237.843352][ C1] common_startup_64+0x13e/0x157 [ 237.843375][ C1] [ 237.843375][ C1] -> #0 (console_owner){-.-.}-{0:0}: [ 237.843406][ C1] __lock_acquire+0x1520/0x2cf0 [ 237.843438][ C1] lock_acquire+0x106/0x350 [ 237.843468][ C1] console_flush_all+0x6b2/0xb40 [ 237.843491][ C1] console_unlock+0xd1/0x1c0 [ 237.843512][ C1] vprintk_emit+0x485/0x560 [ 237.843532][ C1] _printk+0xdd/0x130 [ 237.843551][ C1] __debug_object_init+0x2c3/0x3c0 [ 237.843570][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 237.843600][ C1] wakeup_source_unregister+0x129/0x3f0 [ 237.843631][ C1] mmc_host_classdev_release+0x47/0x100 [ 237.843663][ C1] device_release+0xc4/0x1f0 [ 237.843684][ C1] kobject_put+0x222/0x550 [ 237.843715][ C1] call_timer_fn+0x18d/0x5f0 [ 237.843733][ C1] __run_timer_base+0x652/0x8b0 [ 237.843763][ C1] run_timer_softirq+0xb7/0x170 [ 237.843795][ C1] handle_softirqs+0x226/0x860 [ 237.843820][ C1] __irq_exit_rcu+0xcb/0x220 [ 237.843843][ C1] irq_exit_rcu+0x9/0x30 [ 237.843866][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 237.843889][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 237.843912][ C1] lock_acquire+0x222/0x350 [ 237.843942][ C1] pfn_valid+0xd6/0x490 [ 237.843970][ C1] page_table_check_set+0x25/0x530 [ 237.843999][ C1] copy_pmd_range+0x4b46/0x5c50 [ 237.844023][ C1] copy_page_range+0xc25/0x1230 [ 237.844051][ C1] dup_mmap+0xf17/0x1dc0 [ 237.844075][ C1] copy_mm+0x11a/0x480 [ 237.844097][ C1] copy_process+0x1e75/0x43e0 [ 237.844121][ C1] kernel_clone+0x2d7/0x940 [ 237.844145][ C1] __x64_sys_clone+0x1b6/0x230 [ 237.844172][ C1] do_syscall_64+0x166/0x520 [ 237.844197][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.844226][ C1] [ 237.844226][ C1] other info that might help us debug this: [ 237.844226][ C1] [ 237.844235][ C1] Chain exists of: [ 237.844235][ C1] console_owner --> &dev->power.lock --> &obj_hash[i].lock [ 237.844235][ C1] [ 237.844272][ C1] Possible unsafe locking scenario: [ 237.844272][ C1] [ 237.844279][ C1] CPU0 CPU1 [ 237.844287][ C1] ---- ---- [ 237.844294][ C1] lock(&obj_hash[i].lock); [ 237.844310][ C1] lock(&dev->power.lock); [ 237.844328][ C1] lock(&obj_hash[i].lock); [ 237.844345][ C1] lock(console_owner); [ 237.844361][ C1] [ 237.844361][ C1] *** DEADLOCK *** [ 237.844361][ C1] [ 237.844367][ C1] locks held by syz-executor/5632: 12, last CPU#1: [ 237.844385][ C1] #0: ffffffff8ec332d0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 237.844440][ C1] #1: ffff8880297203b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 237.844494][ C1] #2: ffff888022fb03b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 237.844556][ C1] #3: ffffffff8eb5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 237.844609][ C1] #4: ffff88801b0621f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 237.844665][ C1] #5: ffffffff8eb5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 237.844717][ C1] #6: ffff88805b9e76d8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x70f/0x5c50 [ 237.844783][ C1] #7: ffffffff8eb5a420 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 237.844842][ C1] #8: ffffc90000a08cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 237.844894][ C1] #9: ffffffff9aa67100 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x81/0x3c0 [ 237.844943][ C1] #10: ffffffff8eb4c6a0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 237.844992][ C1] #11: ffffffff8ea33f38 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xb40 [ 237.845048][ C1] [ 237.845048][ C1] stack backtrace: [ 237.845062][ C1] CPU: 1 UID: 0 PID: 5632 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 237.845096][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 237.845104][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.845118][ C1] Call Trace: [ 237.845125][ C1] [ 237.845134][ C1] dump_stack_lvl+0xe8/0x150 [ 237.845166][ C1] print_circular_bug+0x2e1/0x300 [ 237.845192][ C1] check_noncircular+0x12e/0x150 [ 237.845227][ C1] __lock_acquire+0x1520/0x2cf0 [ 237.845271][ C1] ? console_flush_all+0x123/0xb40 [ 237.845294][ C1] lock_acquire+0x106/0x350 [ 237.845325][ C1] ? console_flush_all+0x123/0xb40 [ 237.845352][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 237.845379][ C1] ? console_flush_all+0x123/0xb40 [ 237.845406][ C1] console_flush_all+0x6b2/0xb40 [ 237.845430][ C1] ? console_flush_all+0x123/0xb40 [ 237.845456][ C1] ? console_flush_all+0x123/0xb40 [ 237.845485][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 237.845512][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 237.845545][ C1] console_unlock+0xd1/0x1c0 [ 237.845569][ C1] ? __pfx_console_unlock+0x10/0x10 [ 237.845590][ C1] ? _raw_spin_lock_bh+0x30/0x50 [ 237.845614][ C1] ? _printk+0xdd/0x130 [ 237.845636][ C1] vprintk_emit+0x485/0x560 [ 237.845660][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 237.845681][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 237.845705][ C1] _printk+0xdd/0x130 [ 237.845729][ C1] ? __pfx__printk+0x10/0x10 [ 237.845756][ C1] __debug_object_init+0x2c3/0x3c0 [ 237.845779][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 237.845803][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 237.845836][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 237.845868][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 237.845900][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 237.845924][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 237.845956][ C1] ? synchronize_srcu+0x20a/0x260 [ 237.845990][ C1] wakeup_source_unregister+0x129/0x3f0 [ 237.846024][ C1] mmc_host_classdev_release+0x47/0x100 [ 237.846057][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 237.846089][ C1] device_release+0xc4/0x1f0 [ 237.846112][ C1] kobject_put+0x222/0x550 [ 237.846144][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 237.846169][ C1] call_timer_fn+0x18d/0x5f0 [ 237.846190][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 237.846225][ C1] ? call_timer_fn+0xd5/0x5f0 [ 237.846245][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 237.846270][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.846294][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 237.846324][ C1] __run_timer_base+0x652/0x8b0 [ 237.846363][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 237.846403][ C1] run_timer_softirq+0xb7/0x170 [ 237.846437][ C1] handle_softirqs+0x226/0x860 [ 237.846465][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 237.846493][ C1] __irq_exit_rcu+0xcb/0x220 [ 237.846519][ C1] irq_exit_rcu+0x9/0x30 [ 237.846543][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 237.846571][ C1] [ 237.846578][ C1] [ 237.846587][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 237.846612][ C1] RIP: 0010:lock_acquire+0x222/0x350 [ 237.846647][ C1] Code: ff ff ff e8 a0 20 39 0a f7 44 24 08 00 02 00 00 0f 84 39 ff ff ff 65 48 8b 05 f2 0b ce 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 27 3c 0a cc 48 8d 3d a7 64 b9 [ 237.846668][ C1] RSP: 0018:ffffc90004307210 EFLAGS: 00000282 [ 237.846687][ C1] RAX: 2ab30850d67e6b00 RBX: 0000000000000000 RCX: 8000000000000003 [ 237.846705][ C1] RDX: 00000000dc7298f8 RSI: ffffffff8e4e132a RDI: ffffffff8c4cf580 [ 237.846722][ C1] RBP: ffffffff8242ba4a R08: ffffffff8242ba4a R09: 0000000000000000 [ 237.846739][ C1] R10: 0000000000000000 R11: ffffffff8eb5a420 R12: 0000000000000002 [ 237.846755][ C1] R13: ffffffff8eb5a420 R14: 0000000000000000 R15: 0000000000000246 [ 237.846772][ C1] ? pfn_valid+0xba/0x490 [ 237.846804][ C1] ? pfn_valid+0xba/0x490 [ 237.846837][ C1] ? pfn_valid+0xba/0x490 [ 237.846868][ C1] pfn_valid+0xd6/0x490 [ 237.846897][ C1] ? pfn_valid+0xba/0x490 [ 237.846928][ C1] page_table_check_set+0x25/0x530 [ 237.846963][ C1] copy_pmd_range+0x4b46/0x5c50 [ 237.846987][ C1] ? arch_stack_walk+0xfb/0x150 [ 237.847017][ C1] ? __lock_acquire+0x683/0x2cf0 [ 237.847058][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 237.847083][ C1] ? do_syscall_64+0x166/0x520 [ 237.847110][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.847137][ C1] ? __lock_acquire+0x683/0x2cf0 [ 237.847178][ C1] copy_page_range+0xc25/0x1230 [ 237.847226][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 237.847261][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 237.847289][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 237.847318][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 237.847350][ C1] dup_mmap+0xf17/0x1dc0 [ 237.847385][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 237.847411][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 237.847442][ C1] ? copy_mm+0x10f/0x480 [ 237.847469][ C1] ? copy_mm+0x10f/0x480 [ 237.847500][ C1] copy_mm+0x11a/0x480 [ 237.847527][ C1] ? copy_process+0xd3c/0x43e0 [ 237.847552][ C1] copy_process+0x1e75/0x43e0 [ 237.847580][ C1] ? copy_process+0xd3c/0x43e0 [ 237.847611][ C1] ? __pfx_copy_process+0x10/0x10 [ 237.847638][ C1] kernel_clone+0x2d7/0x940 [ 237.847665][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 237.847695][ C1] ? kasan_check_range+0x1ca/0x2c0 [ 237.847733][ C1] __x64_sys_clone+0x1b6/0x230 [ 237.847762][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 237.847799][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 237.847837][ C1] do_syscall_64+0x166/0x520 [ 237.847865][ C1] ? trace_irq_disable+0x3b/0x140 [ 237.847896][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.847920][ C1] ? clear_bhb_loop+0x70/0xc0 [ 237.847946][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.847969][ C1] RIP: 0033:0x7f5322fc6b52 [ 237.847989][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 237.848010][ C1] RSP: 002b:00007f532334fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 237.848034][ C1] RAX: ffffffffffffffda RBX: 00007f532334fc60 RCX: 00007f5322fc6b52 [ 237.848052][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 237.848066][ C1] RBP: 00007f532334fdec R08: 0000000000000000 R09: 0000000000000001 [ 237.848082][ C1] R10: 0000555576c227d0 R11: 0000000000000246 R12: 0000000000000001 [ 237.848097][ C1] R13: 00000000000927c0 R14: 0000000000039654 R15: 00007f532334fe40 [ 237.848122][ C1] [ 239.808536][ C1] ------------[ cut here ]------------ [ 239.814012][ C1] 1 [ 239.814029][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz-executor/5632 [ 239.826968][ C1] Modules linked in: [ 239.830886][ C1] CPU: 1 UID: 0 PID: 5632 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 239.841932][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 239.847134][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.857205][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 239.863112][ C1] Code: cc cc cc 41 ff c7 44 89 3d 89 f8 c9 15 48 c7 c1 80 fe 4c 8c 48 c7 c7 e0 fe 4c 8c 84 c0 48 0f 45 f9 48 89 de e8 6d 50 43 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 61 12 53 0a 3b 05 5f [ 239.882740][ C1] RSP: 0018:ffffc90000a089b8 EFLAGS: 00010046 [ 239.888834][ C1] RAX: 0000000000000050 RBX: ffffc90000a08a80 RCX: 2ab30850d67e6b00 [ 239.896825][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 239.904819][ C1] RBP: ffff888076f9dde0 R08: 0000000000000100 R09: 1ffff110170e48da [ 239.912821][ C1] R10: dffffc0000000000 R11: ffffed10170e48db R12: 1ffff9200014114c [ 239.920823][ C1] R13: ffff888058ac8700 R14: dffffc0000000000 R15: 0000000000000001 [ 239.928806][ C1] FS: 0000555576c22500(0000) GS:ffff888125015000(0000) knlGS:0000000000000000 [ 239.937756][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.944352][ C1] CR2: 00007f5323d556c8 CR3: 0000000072bf4000 CR4: 00000000003526f0 [ 239.952350][ C1] Call Trace: [ 239.955656][ C1] [ 239.958521][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 239.964093][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 239.969145][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 239.974717][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 239.979774][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 239.985605][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 239.991198][ C1] ? synchronize_srcu+0x20a/0x260 [ 239.996252][ C1] wakeup_source_unregister+0x129/0x3f0 [ 240.001825][ C1] mmc_host_classdev_release+0x47/0x100 [ 240.007395][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 240.013590][ C1] device_release+0xc4/0x1f0 [ 240.018204][ C1] kobject_put+0x222/0x550 [ 240.022667][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 240.027457][ C1] call_timer_fn+0x18d/0x5f0 [ 240.032075][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 240.038767][ C1] ? call_timer_fn+0xd5/0x5f0 [ 240.043466][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 240.048614][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.053838][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 240.060558][ C1] __run_timer_base+0x652/0x8b0 [ 240.065445][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 240.070847][ C1] run_timer_softirq+0xb7/0x170 [ 240.075721][ C1] handle_softirqs+0x226/0x860 [ 240.080527][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 240.085311][ C1] __irq_exit_rcu+0xcb/0x220 [ 240.089956][ C1] irq_exit_rcu+0x9/0x30 [ 240.094323][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 240.099988][ C1] [ 240.102933][ C1] [ 240.105878][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.111877][ C1] RIP: 0010:lock_acquire+0x222/0x350 [ 240.117188][ C1] Code: ff ff ff e8 a0 20 39 0a f7 44 24 08 00 02 00 00 0f 84 39 ff ff ff 65 48 8b 05 f2 0b ce 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 27 3c 0a cc 48 8d 3d a7 64 b9 [ 240.137243][ C1] RSP: 0018:ffffc90004307210 EFLAGS: 00000282 [ 240.143326][ C1] RAX: 2ab30850d67e6b00 RBX: 0000000000000000 RCX: 8000000000000003 [ 240.151331][ C1] RDX: 00000000dc7298f8 RSI: ffffffff8e4e132a RDI: ffffffff8c4cf580 [ 240.159317][ C1] RBP: ffffffff8242ba4a R08: ffffffff8242ba4a R09: 0000000000000000 [ 240.167301][ C1] R10: 0000000000000000 R11: ffffffff8eb5a420 R12: 0000000000000002 [ 240.175292][ C1] R13: ffffffff8eb5a420 R14: 0000000000000000 R15: 0000000000000246 [ 240.183279][ C1] ? pfn_valid+0xba/0x490 [ 240.187644][ C1] ? pfn_valid+0xba/0x490 [ 240.192005][ C1] ? pfn_valid+0xba/0x490 [ 240.196373][ C1] pfn_valid+0xd6/0x490 [ 240.200552][ C1] ? pfn_valid+0xba/0x490 [ 240.204928][ C1] page_table_check_set+0x25/0x530 [ 240.210151][ C1] copy_pmd_range+0x4b46/0x5c50 [ 240.215023][ C1] ? arch_stack_walk+0xfb/0x150 [ 240.219895][ C1] ? __lock_acquire+0x683/0x2cf0 [ 240.224863][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 240.230080][ C1] ? do_syscall_64+0x166/0x520 [ 240.234863][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.240955][ C1] ? __lock_acquire+0x683/0x2cf0 [ 240.245958][ C1] copy_page_range+0xc25/0x1230 [ 240.250838][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 240.256144][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 240.261629][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 240.268597][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 240.275215][ C1] dup_mmap+0xf17/0x1dc0 [ 240.279485][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 240.284274][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 240.289322][ C1] ? copy_mm+0x10f/0x480 [ 240.293584][ C1] ? copy_mm+0x10f/0x480 [ 240.297860][ C1] copy_mm+0x11a/0x480 [ 240.301951][ C1] ? copy_process+0xd3c/0x43e0 [ 240.306743][ C1] copy_process+0x1e75/0x43e0 [ 240.311439][ C1] ? copy_process+0xd3c/0x43e0 [ 240.316224][ C1] ? __pfx_copy_process+0x10/0x10 [ 240.321276][ C1] kernel_clone+0x2d7/0x940 [ 240.325811][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 240.330855][ C1] ? kasan_check_range+0x1ca/0x2c0 [ 240.335983][ C1] __x64_sys_clone+0x1b6/0x230 [ 240.340783][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 240.346115][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 240.351427][ C1] do_syscall_64+0x166/0x520 [ 240.356045][ C1] ? trace_irq_disable+0x3b/0x140 [ 240.361115][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.367202][ C1] ? clear_bhb_loop+0x70/0xc0 [ 240.371926][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.377852][ C1] RIP: 0033:0x7f5322fc6b52 [ 240.382322][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 240.401948][ C1] RSP: 002b:00007f532334fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 240.410390][ C1] RAX: ffffffffffffffda RBX: 00007f532334fc60 RCX: 00007f5322fc6b52 [ 240.418398][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 240.426384][ C1] RBP: 00007f532334fdec R08: 0000000000000000 R09: 0000000000000001 [ 240.434369][ C1] R10: 0000555576c227d0 R11: 0000000000000246 R12: 0000000000000001 [ 240.442355][ C1] R13: 00000000000927c0 R14: 0000000000039654 R15: 00007f532334fe40 [ 240.450354][ C1] [ 240.453397][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.460695][ C1] CPU: 1 UID: 0 PID: 5632 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 240.471737][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 240.476954][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.487020][ C1] Call Trace: [ 240.490317][ C1] [ 240.493176][ C1] vpanic+0x56d/0xa60 [ 240.497186][ C1] ? __pfx__printk+0x10/0x10 [ 240.501829][ C1] ? __pfx_vpanic+0x10/0x10 [ 240.506382][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 240.511686][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 240.516911][ C1] panic+0xc5/0xd0 [ 240.520668][ C1] ? __pfx_panic+0x10/0x10 [ 240.525116][ C1] __warn+0x315/0x4c0 [ 240.529117][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 240.534418][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 240.539720][ C1] __report_bug+0x276/0x570 [ 240.544249][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 240.549550][ C1] ? __pfx___report_bug+0x10/0x10 [ 240.554604][ C1] ? __wake_up_klogd+0xf0/0x130 [ 240.559494][ C1] ? vprintk_emit+0x4ee/0x560 [ 240.564186][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 240.569231][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 240.574573][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 240.581104][ C1] report_bug+0x16b/0x220 [ 240.585460][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 240.590761][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 240.596063][ C1] handle_bug+0x9c/0x200 [ 240.600339][ C1] exc_invalid_op+0x1a/0x50 [ 240.604880][ C1] asm_exc_invalid_op+0x1a/0x20 [ 240.609749][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 240.615660][ C1] Code: cc cc cc 41 ff c7 44 89 3d 89 f8 c9 15 48 c7 c1 80 fe 4c 8c 48 c7 c7 e0 fe 4c 8c 84 c0 48 0f 45 f9 48 89 de e8 6d 50 43 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 61 12 53 0a 3b 05 5f [ 240.635282][ C1] RSP: 0018:ffffc90000a089b8 EFLAGS: 00010046 [ 240.641371][ C1] RAX: 0000000000000050 RBX: ffffc90000a08a80 RCX: 2ab30850d67e6b00 [ 240.649356][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 240.657345][ C1] RBP: ffff888076f9dde0 R08: 0000000000000100 R09: 1ffff110170e48da [ 240.665330][ C1] R10: dffffc0000000000 R11: ffffed10170e48db R12: 1ffff9200014114c [ 240.673317][ C1] R13: ffff888058ac8700 R14: dffffc0000000000 R15: 0000000000000001 [ 240.681317][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 240.686622][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 240.692189][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 240.697240][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 240.702810][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 240.707867][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 240.713688][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 240.719261][ C1] ? synchronize_srcu+0x20a/0x260 [ 240.724315][ C1] wakeup_source_unregister+0x129/0x3f0 [ 240.729901][ C1] mmc_host_classdev_release+0x47/0x100 [ 240.735474][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 240.741656][ C1] device_release+0xc4/0x1f0 [ 240.746271][ C1] kobject_put+0x222/0x550 [ 240.750729][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 240.755560][ C1] call_timer_fn+0x18d/0x5f0 [ 240.760179][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 240.766872][ C1] ? call_timer_fn+0xd5/0x5f0 [ 240.771578][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 240.776753][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.781981][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 240.788682][ C1] __run_timer_base+0x652/0x8b0 [ 240.793570][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 240.798973][ C1] run_timer_softirq+0xb7/0x170 [ 240.803851][ C1] handle_softirqs+0x226/0x860 [ 240.808639][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 240.813426][ C1] __irq_exit_rcu+0xcb/0x220 [ 240.818035][ C1] irq_exit_rcu+0x9/0x30 [ 240.822298][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 240.827953][ C1] [ 240.830901][ C1] [ 240.833851][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.839850][ C1] RIP: 0010:lock_acquire+0x222/0x350 [ 240.845159][ C1] Code: ff ff ff e8 a0 20 39 0a f7 44 24 08 00 02 00 00 0f 84 39 ff ff ff 65 48 8b 05 f2 0b ce 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 27 3c 0a cc 48 8d 3d a7 64 b9 [ 240.864779][ C1] RSP: 0018:ffffc90004307210 EFLAGS: 00000282 [ 240.870867][ C1] RAX: 2ab30850d67e6b00 RBX: 0000000000000000 RCX: 8000000000000003 [ 240.878857][ C1] RDX: 00000000dc7298f8 RSI: ffffffff8e4e132a RDI: ffffffff8c4cf580 [ 240.886877][ C1] RBP: ffffffff8242ba4a R08: ffffffff8242ba4a R09: 0000000000000000 [ 240.894902][ C1] R10: 0000000000000000 R11: ffffffff8eb5a420 R12: 0000000000000002 [ 240.902925][ C1] R13: ffffffff8eb5a420 R14: 0000000000000000 R15: 0000000000000246 [ 240.911007][ C1] ? pfn_valid+0xba/0x490 [ 240.915371][ C1] ? pfn_valid+0xba/0x490 [ 240.919741][ C1] ? pfn_valid+0xba/0x490 [ 240.924100][ C1] pfn_valid+0xd6/0x490 [ 240.928300][ C1] ? pfn_valid+0xba/0x490 [ 240.932659][ C1] page_table_check_set+0x25/0x530 [ 240.937797][ C1] copy_pmd_range+0x4b46/0x5c50 [ 240.942667][ C1] ? arch_stack_walk+0xfb/0x150 [ 240.947548][ C1] ? __lock_acquire+0x683/0x2cf0 [ 240.952528][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 240.957752][ C1] ? do_syscall_64+0x166/0x520 [ 240.962542][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.968633][ C1] ? __lock_acquire+0x683/0x2cf0 [ 240.973602][ C1] copy_page_range+0xc25/0x1230 [ 240.978486][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 240.983818][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 240.989303][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 240.996259][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 241.002871][ C1] dup_mmap+0xf17/0x1dc0 [ 241.007149][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 241.011893][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 241.016954][ C1] ? copy_mm+0x10f/0x480 [ 241.021221][ C1] ? copy_mm+0x10f/0x480 [ 241.025488][ C1] copy_mm+0x11a/0x480 [ 241.029612][ C1] ? copy_process+0xd3c/0x43e0 [ 241.034404][ C1] copy_process+0x1e75/0x43e0 [ 241.039117][ C1] ? copy_process+0xd3c/0x43e0 [ 241.043911][ C1] ? __pfx_copy_process+0x10/0x10 [ 241.048974][ C1] kernel_clone+0x2d7/0x940 [ 241.053517][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 241.058568][ C1] ? kasan_check_range+0x1ca/0x2c0 [ 241.063709][ C1] __x64_sys_clone+0x1b6/0x230 [ 241.068503][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 241.073826][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 241.079144][ C1] do_syscall_64+0x166/0x520 [ 241.083758][ C1] ? trace_irq_disable+0x3b/0x140 [ 241.088805][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.094893][ C1] ? clear_bhb_loop+0x70/0xc0 [ 241.099596][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.105524][ C1] RIP: 0033:0x7f5322fc6b52 [ 241.110391][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 241.130020][ C1] RSP: 002b:00007f532334fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 241.138457][ C1] RAX: ffffffffffffffda RBX: 00007f532334fc60 RCX: 00007f5322fc6b52 [ 241.146457][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 241.154450][ C1] RBP: 00007f532334fdec R08: 0000000000000000 R09: 0000000000000001 [ 241.162442][ C1] R10: 0000555576c227d0 R11: 0000000000000246 R12: 0000000000000001 [ 241.170428][ C1] R13: 00000000000927c0 R14: 0000000000039654 R15: 00007f532334fe40 [ 241.178425][ C1] [ 241.182078][ C1] Kernel Offset: disabled [ 241.186429][ C1] Rebooting in 86400 seconds..