last executing test programs: 3m30.86356729s ago: executing program 2 (id=6982): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x44, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m30.55944906s ago: executing program 2 (id=6984): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r1, &(0x7f0000000180)={'some', 0x20, 0x7fffffffffffffff, 0x20, 0xffffffffffffffff}, 0x2f) 3m30.231212843s ago: executing program 2 (id=6987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_eee={0x45, 0x9, 0x1, 0xd, 0x6, 0x1000, 0x100, 0x8, [0x4cc, 0xffff]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) 3m29.90942658s ago: executing program 2 (id=6990): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 3m28.949231707s ago: executing program 2 (id=7002): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x1000, 0xe000, 0x0, 0x0, 0x8, 0x1, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0x4, 0x10000, 0x4, 0xff, 0xff, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x0, 0xfc}, {0x1, 0x9000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x0, 0x8, 0x2, 0x6}, {0x6000, 0xffff1000, 0xf, 0x0, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x2, 0x0, 0xa, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0x4, 0xa000, 0x0, 0x3, 0x4, 0x2, 0xa9, 0x20, 0x0, 0x3, 0xff}, {0xeeee0000, 0x41000, 0xc, 0x0, 0xb, 0x7, 0x8, 0x40, 0x26, 0x0, 0x3, 0x2}, {0xdddd0000, 0x3}, {0x30000, 0xfffe}, 0xddfcffe7, 0x0, 0x104, 0x78, 0x0, 0x0, 0xd000, [0x3, 0x0, 0x40000000001]}) 3m28.674866351s ago: executing program 2 (id=7004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@bridge_newneigh={0x28, 0x1d, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x32}, [@NDA_LLADDR={0xa, 0x2, @random}]}, 0x28}}, 0x0) 3m27.998717415s ago: executing program 32 (id=7004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@bridge_newneigh={0x28, 0x1d, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x32}, [@NDA_LLADDR={0xa, 0x2, @random}]}, 0x28}}, 0x0) 1m37.204993588s ago: executing program 5 (id=8201): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1m37.118099022s ago: executing program 5 (id=8203): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c10) 1m36.945897498s ago: executing program 5 (id=8205): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r1, 0x0, 0x1, 0x3ff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r1, 0x0, 0x0, 0x200000000000008}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000079c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x40}) 1m36.832837359s ago: executing program 5 (id=8207): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0x11, "c273dcc6349588600c573d84d4ec94b7ef"}, &(0x7f0000000540)=0x19) 1m36.680468678s ago: executing program 5 (id=8210): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x8) 1m36.563832233s ago: executing program 5 (id=8212): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2800}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 1m21.34749423s ago: executing program 33 (id=8212): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2800}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 3.837669129s ago: executing program 1 (id=9143): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0xc0, 0x112, 0x27}, 0x18) 3.758534113s ago: executing program 1 (id=9145): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x1015, r0, 0x0) read(r1, &(0x7f0000000580)=""/190, 0xbe) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="87", 0x1}], 0x1) 3.603157008s ago: executing program 1 (id=9148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_LVALUE={0x6, 0x2, [@TCF_META_TYPE_VAR="b294"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200450c0}, 0x4880) 3.536530644s ago: executing program 0 (id=9149): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2e5, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 3.354563479s ago: executing program 1 (id=9152): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x7c, &(0x7f0000000600)={0x40, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.274379061s ago: executing program 0 (id=9154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000380)="b9f60b0000b88492e6dbba000000000f3066baa00066b86b4266ef66ba420066b8e200b9cb0900000f320f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x5c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.970348073s ago: executing program 0 (id=9156): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 2.123493152s ago: executing program 6 (id=9166): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x21, 0x8001020, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x1, 0x0) write$binfmt_script(r4, &(0x7f0000000280)={'#! ', './file0'}, 0xb) 2.072937429s ago: executing program 0 (id=9167): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x3}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000006c0)={r2}, &(0x7f0000000800)=0x8) 1.929987776s ago: executing program 6 (id=9168): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) 1.860171362s ago: executing program 6 (id=9170): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0x5, 0x1}, {0x1, 0xfff2}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.677778447s ago: executing program 4 (id=9173): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 1.569573483s ago: executing program 6 (id=9174): unshare(0x60000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x60, 0x18, 0x401, 0x0, 0x0, {0xa, 0x40, 0x14, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_OIF={0x8, 0x4, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x1c, 0x1, {0x0, 0x18, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}]}, 0x60}}, 0x0) 1.562245182s ago: executing program 4 (id=9175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000071, 0x0, 0x8019b}]}) 1.411753371s ago: executing program 3 (id=9176): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008010) sendmmsg$alg(r1, &(0x7f00000027c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}, {0x0}], 0x2}], 0x1, 0x40800) 1.231714003s ago: executing program 3 (id=9177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 984.611884ms ago: executing program 0 (id=9178): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000040)={&(0x7f0000000480)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "ca384a10fc3661f2"}, 0x10}, 0x2, 0x0, 0x0, 0x200008d5}, 0x10044009) 878.824905ms ago: executing program 4 (id=9179): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) 831.349913ms ago: executing program 0 (id=9180): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x1001, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2800}]}}}}}}}}, 0x0) 790.7836ms ago: executing program 3 (id=9181): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f0000000600)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0xc8200, 0x1080, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x6, 0xcbfb, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000007, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 709.349547ms ago: executing program 4 (id=9182): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 570.402882ms ago: executing program 4 (id=9183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304, 0x36}, "00257059cb008000", "8b3de2aabceef22f419e59f30000000004000000000200", "07350080", "000000d900"}, 0x38) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304, 0x36}, "b398a992143a240d", "d036788c4aaf9c6ef96dda7201d2d2a5", "1a13ecde", "0597b7f1463f0f33"}, 0x28) 526.617717ms ago: executing program 3 (id=9184): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000000002080400000000000000000a0092eb250a018006000340000300000c00028005000100000000003c0003800c000280050001"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 366.877876ms ago: executing program 1 (id=9185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x4400, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 300.019219ms ago: executing program 6 (id=9186): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000016c0)={0x1, &(0x7f0000001600)=[{0x23, '\x00', @st={0x4, [{0x2, @uvalue=0x10009}, {0x1, @uvalue=0x2}, {0x3, @uvalue=0x1}, {0x2, @svalue=0xaae}]}, 0x1}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 238.434932ms ago: executing program 3 (id=9187): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="094a9e5203eb4a", 0x1, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xf3, 0x6, @random="924996884a2b"}, 0x14) 166.358884ms ago: executing program 4 (id=9188): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r1, 0x4004480d, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, 0x0) 155.14064ms ago: executing program 1 (id=9189): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x6, 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 15.675555ms ago: executing program 6 (id=9190): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040), 0x10) 0s ago: executing program 3 (id=9191): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x401, 0xfffffffc, 0x7c, {0x0, 0x0, 0x0, 0x0, 0x17b93, 0x21}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001540)=0x4) kernel console output (not intermixed with test programs): 283][T24149] loop5: detected capacity change from 0 to 7 [ 650.393429][T24149] Dev loop5: unable to read RDB block 7 [ 650.393474][T24149] loop5: unable to read partition table [ 650.393793][T24149] loop5: partition table beyond EOD, truncated [ 650.393813][T24149] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 650.553067][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 650.553116][ T30] audit: type=1326 audit(1790877372.042:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24152 comm="syz.1.8051" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb499b9e159 code=0x0 [ 650.799388][T23254] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 650.851851][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.950026][T23254] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 650.951064][T23254] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.956929][T23254] usb 6-1: config 0 descriptor?? [ 650.989477][ T5695] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 651.160331][ T5695] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 651.163727][ T5695] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 651.163759][ T5695] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 651.163803][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.176920][T23254] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 651.377698][ T5695] usb 5-1: GET_CAPABILITIES returned 0 [ 651.377755][ T5695] usbtmc 5-1:16.0: can't read capabilities [ 651.418568][T23254] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 651.418596][T23254] [drm] Initialized udl on minor 2 [ 651.594077][T23358] usb 5-1: USB disconnect, device number 59 [ 651.891494][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.921541][T24173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.239662][T24180] macvlan0: entered promiscuous mode [ 652.294310][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.450688][T23350] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 652.455567][T23350] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 652.456970][T23254] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 652.469054][T23254] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 652.470391][ T5695] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 652.473618][ T5695] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 652.473828][ T5695] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 652.530698][ T5695] usb 4-1: USB disconnect, device number 78 [ 652.531926][T23254] usb 6-1: USB disconnect, device number 7 [ 652.583507][ T5714] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 652.739459][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 652.741314][ T5714] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 652.742939][ T5714] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 652.742967][ T5714] usb 5-1: config 0 has no interface number 0 [ 652.743009][ T5714] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 652.743033][ T5714] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 652.745455][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.745488][ T5714] usb 5-1: Product: syz [ 652.745504][ T5714] usb 5-1: Manufacturer: syz [ 652.745517][ T5714] usb 5-1: SerialNumber: syz [ 652.747931][ T5714] usb 5-1: config 0 descriptor?? [ 652.748902][T24182] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 652.749052][T24182] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 652.782306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.931905][T23254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.957871][T24182] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 652.957999][T24182] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 652.979366][ T5695] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 653.129370][ T5695] usb 4-1: Using ep0 maxpacket: 16 [ 653.130309][ T5695] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 653.131895][ T5695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.131945][ T5695] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.132001][ T5695] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.132024][ T5695] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 653.132048][ T5695] usb 4-1: config 0 interface 0 has no altsetting 0 [ 653.132085][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.136491][T24197] netlink: 51 bytes leftover after parsing attributes in process `syz.5.8072'. [ 653.141977][ T5695] usb 4-1: config 0 descriptor?? [ 653.201004][ T5714] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 653.609548][ T5714] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 653.609825][ T5714] asix 5-1:0.34: probe with driver asix failed with error -71 [ 653.624535][ T5714] usb 5-1: USB disconnect, device number 60 [ 653.662983][ T5695] logitech-djreceiver 0003:046D:C53A.0063: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 653.668194][T20280] udevd[20280]: setting mode of /dev/bus/usb/005/060 to 020664 failed: No such file or directory [ 653.668329][T20280] udevd[20280]: setting owner of /dev/bus/usb/005/060 to uid=0, gid=0 failed: No such file or directory [ 653.846360][ T5695] usb 4-1: USB disconnect, device number 79 [ 653.983064][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.321999][T23254] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 654.471343][T23254] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 654.473689][T23254] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.473837][T23254] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 654.473868][T23254] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 654.473892][T23254] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 654.473938][T23254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.515299][T23254] usb 2-1: config 0 descriptor?? [ 654.641432][T24230] kvm: user requested TSC rate below hardware speed [ 654.971500][T23254] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 654.971549][T23254] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 654.971577][T23254] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 654.971604][T23254] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 654.971629][T23254] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 654.971655][T23254] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 654.971681][T23254] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 654.971705][T23254] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 654.971729][T23254] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 654.971752][T23254] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 655.030087][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.081563][T23254] plantronics 0003:047F:FFFF.0064: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 655.210427][T23358] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 655.254620][T23254] usb 2-1: USB disconnect, device number 67 [ 655.330899][T23354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.370028][T23358] usb 5-1: Using ep0 maxpacket: 16 [ 655.371135][T23358] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 655.372353][T23358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 655.372399][T23358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.406836][T23358] usb 5-1: config 0 descriptor?? [ 655.417334][T24245] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 655.833025][T23358] hid (null): report_id 0 is invalid [ 655.875770][T23358] hid-sensor-hub 0003:0C70:F00D.0065: report_id 0 is invalid [ 655.875800][T23358] hid-sensor-hub 0003:0C70:F00D.0065: item 0 1 1 8 parsing failed [ 655.906293][T23358] hid-sensor-hub 0003:0C70:F00D.0065: parse failed [ 655.906989][T23358] hid-sensor-hub 0003:0C70:F00D.0065: probe with driver hid-sensor-hub failed with error -22 [ 655.942810][T23358] aquacomputer_d5next 0003:0C70:F00D.0065: report_id 0 is invalid [ 655.942837][T23358] aquacomputer_d5next 0003:0C70:F00D.0065: item 0 1 1 8 parsing failed [ 655.943962][T23358] aquacomputer_d5next 0003:0C70:F00D.0065: probe with driver aquacomputer_d5next failed with error -22 [ 656.037918][T23254] usb 5-1: USB disconnect, device number 61 [ 656.063642][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.675458][T24294] syzkaller1: entered promiscuous mode [ 656.675481][T24294] syzkaller1: entered allmulticast mode [ 657.089531][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.209295][ T5695] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 657.220626][T23254] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 657.365821][ T5695] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 657.365887][ T5695] usb 6-1: too many configurations: 102, using maximum allowed: 8 [ 657.370313][ T5695] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 657.370339][ T5695] usb 6-1: config 1 has no interface number 0 [ 657.374581][ T5695] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 657.374605][ T5695] usb 6-1: config 1 has no interface number 0 [ 657.377388][ T5695] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 657.377410][ T5695] usb 6-1: config 1 has no interface number 0 [ 657.378388][ T5695] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 657.378407][ T5695] usb 6-1: config 1 has no interface number 0 [ 657.382474][ T5695] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 657.382497][ T5695] usb 6-1: config 1 has no interface number 0 [ 657.385194][ T5695] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 657.385215][ T5695] usb 6-1: config 1 has no interface number 0 [ 657.386189][ T5695] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 657.386208][ T5695] usb 6-1: config 1 has no interface number 0 [ 657.389858][T23254] usb 2-1: Using ep0 maxpacket: 8 [ 657.390784][ T5695] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 657.390805][ T5695] usb 6-1: config 1 has no interface number 0 [ 657.391787][T23254] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 657.397218][T23254] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 657.397240][T23254] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 657.397346][T23254] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.400535][ T5695] usb 6-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211 [ 657.400558][ T5695] usb 6-1: Product: syz [ 657.400573][ T5695] usb 6-1: Manufacturer: syz [ 657.400586][ T5695] usb 6-1: SerialNumber: syz [ 657.406794][T23254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.406816][T23254] usb 2-1: Product: syz [ 657.406830][T23254] usb 2-1: Manufacturer: syz [ 657.406843][T23254] usb 2-1: SerialNumber: syz [ 657.444683][T23254] usb 2-1: config 0 descriptor?? [ 657.528293][ T5695] usb 6-1: 3:0 : does not exist [ 657.528317][ T5695] usb 6-1: 3:0 : does not exist [ 657.668342][T23254] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 657.705230][T23254] usb 2-1: USB disconnect, device number 68 [ 657.803007][ T5695] usb 6-1: USB disconnect, device number 8 [ 657.935920][T20280] udevd[20280]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.130271][T23254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.255732][T24337] veth1_to_bond: entered allmulticast mode [ 658.256541][T24337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8128'. [ 658.286789][T24337] veth1_to_bond (unregistering): left allmulticast mode [ 658.302043][T24337] bond0: (slave bond_slave_1): Releasing backup interface [ 658.369966][T23358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.474026][ T5695] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 658.531219][T23358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.619409][ T5695] usb 5-1: Using ep0 maxpacket: 16 [ 658.623591][ T5695] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 658.624790][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.624842][ T5695] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.624869][ T5695] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.624892][ T5695] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 658.624919][ T5695] usb 5-1: config 0 interface 0 has no altsetting 0 [ 658.624955][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.632838][ T5695] usb 5-1: config 0 descriptor?? [ 659.101142][ T5695] logitech-djreceiver 0003:046D:C53A.0066: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 659.177068][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.223292][ T30] audit: type=1326 audit(1790877380.712:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24371 comm="syz.1.8144" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb499b9e159 code=0x0 [ 659.287881][ T5695] usb 5-1: USB disconnect, device number 62 [ 659.319880][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 659.470435][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 659.471712][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.474079][ T10] usb 4-1: config 0 descriptor?? [ 659.682830][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 659.907210][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 659.907241][ T10] [drm] Initialized udl on minor 1 [ 660.209442][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.064069][T24398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8154'. [ 661.250503][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.411884][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.524449][T24409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 662.301651][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.359878][T23358] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 662.513616][T23358] usb 2-1: unable to get BOS descriptor or descriptor too short [ 662.513708][T23358] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 662.515286][T23358] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 662.519078][T23358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.521403][T23358] usb 2-1: Product: syz [ 662.521421][T23358] usb 2-1: Manufacturer: syz [ 662.521435][T23358] usb 2-1: SerialNumber: syz [ 662.742786][T23358] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 662.921004][T23350] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 663.070296][T23350] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 663.071229][T23350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.074029][T23350] usb 6-1: config 0 descriptor?? [ 663.278819][T23350] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 663.329505][T23254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.496528][T23350] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 663.496560][T23350] [drm] Initialized udl on minor 2 [ 663.550190][T23358] usb 2-1: failed to enable PITCH for EP 0x82 [ 663.550834][T23358] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 663.550915][T23358] usb 2-1: clock source 0 is not valid, cannot use [ 663.551482][T23358] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 663.552104][T23358] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 663.643381][T23358] usb 2-1: USB disconnect, device number 69 [ 663.745827][ T9702] udevd[9702]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.372255][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.450334][T23358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.931140][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 664.931770][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 664.957301][T23350] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 664.957809][T23350] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 665.012953][T23358] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 665.014943][T23350] usb 6-1: USB disconnect, device number 9 [ 665.040257][T23255] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 665.044927][ T10] usb 4-1: USB disconnect, device number 80 [ 665.046844][ T5715] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 665.047293][ T5715] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 665.047545][ T5715] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 665.090761][T23358] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 665.098015][T23358] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 665.199597][T23255] usb 2-1: Using ep0 maxpacket: 16 [ 665.202063][T23255] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 665.208349][T23255] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.208393][T23255] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 665.208415][T23255] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 665.208436][T23255] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 665.210815][T23255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 665.210857][T23255] usb 2-1: SerialNumber: syz [ 665.218913][T24468] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 665.219042][T24468] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 665.225869][T23255] hub 2-1:1.0: bad descriptor, ignoring hub [ 665.225895][T23255] hub 2-1:1.0: probe with driver hub failed with error -5 [ 665.421237][T23254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.435877][T24468] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 665.436010][T24468] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 665.735163][T24482] bridge1: entered promiscuous mode [ 665.735190][T24482] bridge1: entered allmulticast mode [ 665.776470][T24482] team0: Port device bridge1 added [ 665.854071][T24483] bridge0: port 5(team0) entered blocking state [ 665.854269][T24483] bridge0: port 5(team0) entered disabled state [ 665.864575][T24483] team0: entered allmulticast mode [ 665.864598][T24483] team_slave_0: entered allmulticast mode [ 665.864642][T24483] team_slave_1: entered allmulticast mode [ 665.864685][T24483] bond2: entered allmulticast mode [ 665.898027][T24483] team0: entered promiscuous mode [ 665.898051][T24483] team_slave_0: entered promiscuous mode [ 665.912910][T24483] team_slave_1: entered promiscuous mode [ 665.914738][T24483] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 665.929155][T24483] bond2: entered promiscuous mode [ 665.934134][T24483] bridge0: port 5(team0) entered blocking state [ 665.934288][T24483] bridge0: port 5(team0) entered forwarding state [ 665.980351][T23255] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 666.179511][T23255] usb 2-1: USB disconnect, device number 70 [ 666.184305][T23255] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 666.449927][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.814227][T24527] batadv_slave_1: Caught tx_queue_len zero misconfig [ 666.869637][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 666.969725][T23255] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 667.123961][T23255] usb 2-1: Using ep0 maxpacket: 16 [ 667.127941][T23255] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 667.129403][T23255] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 667.129436][T23255] usb 2-1: config 0 interface 0 has no altsetting 0 [ 667.143021][T23255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.143049][T23255] usb 2-1: Product: syz [ 667.143063][T23255] usb 2-1: Manufacturer: syz [ 667.143076][T23255] usb 2-1: SerialNumber: syz [ 667.178032][T23255] usb 2-1: config 0 descriptor?? [ 667.405622][T23255] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input113 [ 667.490531][T24546] ip_tables: iptables: counters copy to user failed while replacing table [ 667.491377][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.491460][T24546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.491838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.500604][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.550643][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 667.550702][ T10] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 667.550741][ T10] usb 4-1: no configurations [ 667.550754][ T10] usb 4-1: can't read configurations, error -22 [ 667.739251][T23255] rc_core: IR keymap rc-imon-pad not found [ 667.739273][T23255] Registered IR keymap rc-empty [ 667.739383][T23255] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 667.739427][T23255] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 667.868156][T23255] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 667.882944][T23255] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input114 [ 667.886060][T23255] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:71> initialized [ 668.130197][T23354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.286558][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 668.287159][T23354] usb 2-1: USB disconnect, device number 71 [ 668.469900][ T5715] psmouse serio4: Failed to reset mouse on : -5 [ 669.012736][T24572] binder: 24571:24572 ioctl 40046205 0 returned -22 [ 669.163803][T24579] netlink: 'syz.3.8221': attribute type 4 has an invalid length. [ 669.364373][T24585] netlink: 'syz.3.8225': attribute type 3 has an invalid length. [ 669.364400][T24585] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8225'. [ 669.465600][T24589] tipc: New replicast peer: 127.0.0.1 [ 669.465881][T24589] tipc: Enabled bearer , priority 0 [ 669.466585][T24589] tipc: New replicast peer: 172.20.20.11 [ 669.570291][T23254] net_ratelimit: 1 callbacks suppressed [ 669.570314][T23254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.530314][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.609418][T23254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.652527][T24612] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.700132][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 670.995115][T24623] sctp: [Deprecated]: syz.3.8240 (pid 24623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 670.995115][T24623] Use struct sctp_sack_info instead [ 671.651285][T23254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.976736][T24643] netlink: 'syz.0.8250': attribute type 11 has an invalid length. [ 672.231206][ T5715] misc userio: Buffer overflowed, userio client isn't keeping up [ 672.699728][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.287982][ T5715] input: PS/2 Generic Mouse as /devices/serio4/input/input115 [ 673.489693][T23255] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 673.495051][T24669] cifs: Unknown parameter 'f,ÍT¹ O"nx2qá墢Áê¶%ÖI1ÍOþg8Ù{›^ø(Yü¯yÁáK%˜Œi£™V|“vyqÓˆ¸eŠ ‡‹|׺üB“Þ' [ 673.567023][T24671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.567224][T24671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.567417][T24671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.587924][ T5715] psmouse serio4: Failed to enable mouse on [ 673.604903][T24671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.605075][T24671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.653825][T23255] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 673.656162][T23255] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 673.656198][T23255] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 673.656224][T23255] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 673.668704][T23255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.668730][T23255] usb 4-1: Product: syz [ 673.668745][T23255] usb 4-1: Manufacturer: syz [ 673.668758][T23255] usb 4-1: SerialNumber: syz [ 673.714513][T23255] usb 4-1: config 0 descriptor?? [ 673.734613][T24665] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 673.734751][T24665] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 673.754201][T23255] usb 4-1: ucan: probing device on interface #0 [ 674.385632][T23255] ucan 4-1:0.0 can0: registered device [ 674.548493][T24690] netlink: 'syz.0.8271': attribute type 1 has an invalid length. [ 674.548544][T24690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 674.548558][T24690] IPv6: NLM_F_CREATE should be set when creating new route [ 674.575435][T23255] ucan 4-1:0.0 can0: firmware string: unknown [ 674.595029][T23255] usb 4-1: USB disconnect, device number 83 [ 674.864040][ T5695] net_ratelimit: 16 callbacks suppressed [ 674.864074][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.767156][T24709] use of bytesused == 0 is deprecated and will be removed in the future, [ 675.767170][T24709] use the actual size instead. [ 675.892466][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.985059][T24716] Invalid argument reading file caps for ./file0 [ 676.063940][T24721] netlink: 428 bytes leftover after parsing attributes in process `syz.0.8284'. [ 676.200370][ T5715] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 676.338114][ C1] blk_print_req_error: 47 callbacks suppressed [ 676.338139][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 676.338237][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 676.338267][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 676.338347][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 676.338370][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 676.338448][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 676.338473][ C1] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 676.338557][ C1] Buffer I/O error on dev loop9, logical block 3, async page read [ 676.338641][ C1] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 676.338711][ C1] Buffer I/O error on dev loop9, logical block 4, async page read [ 676.338734][ C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 676.338809][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 676.338830][ C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 676.338896][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 676.366281][ T5715] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 676.377968][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 676.378054][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 676.378179][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 676.378243][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 676.378309][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 676.378379][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 676.379264][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.456771][ T4982] ldm_validate_partition_table(): Disk read failed. [ 676.467291][ T4982] Dev loop9: unable to read RDB block 0 [ 676.471510][ T4982] loop9: unable to read partition table [ 676.471781][ T4982] loop9: partition table beyond EOD, truncated [ 676.689961][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.929499][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.071570][T24743] input: syz0 as /devices/virtual/input/input116 [ 677.179249][T23255] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 677.206148][ T5715] usb 5-1: Firmware version (0.0) predates our first public release. [ 677.206179][ T5715] usb 5-1: Please update to version 0.2 or newer [ 677.344466][T23255] usb 4-1: unable to get BOS descriptor or descriptor too short [ 677.344525][T23255] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 677.345671][T23255] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.345762][T23255] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 677.345789][T23255] usb 4-1: config 1 interface 2 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 677.348252][T23255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.348278][T23255] usb 4-1: Product: syz [ 677.348294][T23255] usb 4-1: Manufacturer: syz [ 677.348345][T23255] usb 4-1: SerialNumber: syz [ 677.486569][ T5715] usb 5-1: USB disconnect, device number 63 [ 677.509252][T23254] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 677.602317][T23255] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 677.680953][T23254] usb 2-1: Using ep0 maxpacket: 8 [ 677.684212][T23254] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 677.685594][T23254] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 677.685650][T23254] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 677.685674][T23254] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 677.685699][T23254] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 677.685722][T23254] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.685767][T23254] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.737953][T23354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.794600][T23255] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 677.794659][T23255] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 677.794681][T23255] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 677.907149][T23254] usb 2-1: GET_CAPABILITIES returned 0 [ 677.907244][T23254] usbtmc 2-1:16.0: can't read capabilities [ 677.971552][T23254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.193962][T24747] usbtmc 2-1:16.0: usb_bulk_msg returned -71 [ 678.198512][T23255] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 678.321003][T23255] usb 4-1: USB disconnect, device number 84 [ 678.406484][T23254] usb 2-1: USB disconnect, device number 72 [ 678.481964][T20280] udevd[20280]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 679.044452][T23260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.731014][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.050169][T23260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.148758][T24778] loop5: detected capacity change from 0 to 7 [ 680.161672][T24778] Dev loop5: unable to read RDB block 7 [ 680.161708][T24778] loop5: AHDI p1 p2 p3 [ 680.161732][T24778] loop5: partition table partially beyond EOD, truncated [ 680.161966][T24778] loop5: p1 size 16318467 extends beyond EOD, truncated [ 680.224304][T24778] loop5: p2 start 167772160 is beyond EOD, truncated [ 680.291171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.417861][T20280] udevd[20280]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 680.907317][T24790] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8312'. [ 681.091623][T23254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.627387][T24811] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 681.758170][T23260] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 681.842802][T24820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8324'. [ 681.909946][T23260] usb 5-1: Using ep0 maxpacket: 8 [ 681.913785][T23260] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 681.919910][T23260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 681.919940][T23260] usb 5-1: Product: syz [ 681.919955][T23260] usb 5-1: Manufacturer: syz [ 681.919971][T23260] usb 5-1: SerialNumber: syz [ 681.929035][T23260] usb 5-1: config 0 descriptor?? [ 681.945278][T23260] gspca_main: sq905-2.14.0 probing 2770:9120 [ 682.129705][T23254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.176666][T24827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8327'. [ 682.189898][T24827] bond0: ARP target 128.0.0.0 is already present [ 682.189958][T24827] bond0: option arp_ip_target: invalid value (128) [ 682.220257][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 682.574626][T21070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 682.583059][T21070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 682.584830][T21070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 682.586044][T21070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 682.586852][T21070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 682.770721][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.018973][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 683.043665][T23260] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 683.043837][T23260] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 683.051643][T23260] usb 5-1: USB disconnect, device number 64 [ 683.169835][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.536553][T23217] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.827037][T23217] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.972948][T24837] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.973169][T24837] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.973321][T24837] bridge_slave_0: entered allmulticast mode [ 683.975450][T24837] bridge_slave_0: entered promiscuous mode [ 684.007657][T24837] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.007827][T24837] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.007963][T24837] bridge_slave_1: entered allmulticast mode [ 684.033229][T24837] bridge_slave_1: entered promiscuous mode [ 684.096574][T24872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.162371][T23217] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.210795][T23260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.271352][T24837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.293086][T24837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.350833][T24837] team0: Port device team_slave_0 added [ 684.355104][T24837] team0: Port device team_slave_1 added [ 684.434243][T24837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.434263][T24837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.434291][T24837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.436413][T24837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.436426][T24837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.436448][T24837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.536788][T24882] loop4: detected capacity change from 0 to 2640 [ 684.633734][T24882] buffer_io_error: 130 callbacks suppressed [ 684.633761][T24882] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 684.633796][T24882] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 684.633824][T24882] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 684.633851][T24882] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 684.633877][T24882] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 684.633913][T24882] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 684.633940][T24882] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 684.633967][T24882] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 684.633994][T24882] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 684.634021][T24882] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 684.699403][ T5629] Bluetooth: hci5: command tx timeout [ 684.782929][T23217] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.046039][T24837] hsr_slave_0: entered promiscuous mode [ 685.048269][T24837] hsr_slave_1: entered promiscuous mode [ 685.050707][T24837] debugfs: 'hsr0' already exists in 'hsr' [ 685.050727][T24837] Cannot create hsr debugfs directory [ 685.249837][T23260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.810282][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.873570][T23217] bridge_slave_1: left allmulticast mode [ 685.873600][T23217] bridge_slave_1: left promiscuous mode [ 685.873852][T23217] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.933664][T23217] bridge_slave_0: left allmulticast mode [ 685.935330][T23217] bridge_slave_0: left promiscuous mode [ 685.935576][T23217] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.039626][T23255] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 686.062837][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.062903][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.222921][T23255] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 686.227963][T23255] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 686.227995][T23255] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 686.239020][T23255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.239048][T23255] usb 2-1: Product: syz [ 686.239061][T23255] usb 2-1: Manufacturer: syz [ 686.239075][T23255] usb 2-1: SerialNumber: syz [ 686.289749][T23254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.506753][T23255] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 686.769612][ T5629] Bluetooth: hci5: command tx timeout [ 686.816823][T23217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.835934][T23217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.845593][T23217] bond0 (unregistering): Released all slaves [ 686.854877][T24946] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8369'. [ 686.865944][T23217] bond1 (unregistering): Released all slaves [ 686.976420][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 687.109334][ T5695] usb 2-1: USB disconnect, device number 73 [ 687.123442][ T5695] usblp0: removed [ 687.321758][T23254] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 687.321872][T23254] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 687.330213][T23354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.330829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.337428][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.481977][T24951] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 688.002042][T24837] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 688.042201][T24837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 688.164290][T24837] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 688.181510][T24981] netlink: 'syz.1.8380': attribute type 2 has an invalid length. [ 688.181534][T24981] netlink: 'syz.1.8380': attribute type 1 has an invalid length. [ 688.181546][T24981] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.8380'. [ 688.196512][T24837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 688.198489][T24837] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 688.243802][T24837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.247671][T24837] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 688.295355][ T5714] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 688.296438][T24837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.458519][T23217] hsr_slave_0: left promiscuous mode [ 688.466494][T23217] hsr_slave_1: left promiscuous mode [ 688.467671][T23217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.467693][T23217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.477650][T23217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.477672][T23217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.654200][T23217] veth1_macvtap: left promiscuous mode [ 688.654245][T23217] veth0_macvtap: left promiscuous mode [ 688.654536][T23217] veth1_vlan: left promiscuous mode [ 688.654606][T23217] veth0_vlan: left promiscuous mode [ 688.832809][ T5715] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 688.859529][ T5629] Bluetooth: hci5: command tx timeout [ 688.979889][ T5715] usb 2-1: Using ep0 maxpacket: 8 [ 688.980651][ T5715] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 688.982459][ T5715] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 688.982520][ T5715] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 688.982544][ T5715] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 688.982569][ T5715] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 688.982593][ T5715] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 688.982638][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.296324][ T5715] usb 2-1: GET_CAPABILITIES returned 0 [ 689.296380][ T5715] usbtmc 2-1:16.0: can't read capabilities [ 689.463257][T23217] team0 (unregistering): Port device team_slave_1 removed [ 689.506995][T23217] team0 (unregistering): Port device team_slave_0 removed [ 689.507003][ T5714] usb 2-1: USB disconnect, device number 74 [ 689.867610][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 690.009808][ T5715] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 690.160875][ T5715] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 690.162449][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.165895][ T5715] usb 5-1: config 0 descriptor?? [ 690.397471][ T5715] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 690.460034][T23260] net_ratelimit: 4 callbacks suppressed [ 690.460057][T23260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.645768][ T5715] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 690.645798][ T5715] [drm] Initialized udl on minor 1 [ 690.929528][ T5629] Bluetooth: hci5: command tx timeout [ 690.950333][T25055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8403'. [ 690.973349][T24837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.058772][T24837] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.144815][T23213] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.144944][T23213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.175973][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.176119][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.272874][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 691.455944][T24837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.493959][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.567548][T25070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8407'. [ 691.614804][T24837] veth0_vlan: entered promiscuous mode [ 691.668502][T24837] veth1_vlan: entered promiscuous mode [ 691.788317][T24837] veth0_macvtap: entered promiscuous mode [ 691.795669][T24837] veth1_macvtap: entered promiscuous mode [ 691.824924][T24837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.847227][T24837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.890237][T23217] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.890822][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.979695][T23255] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 692.021411][T23216] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.021507][T23216] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.021537][T23216] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.130012][T23255] usb 4-1: Using ep0 maxpacket: 16 [ 692.139724][T23255] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 692.156605][T23255] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.156635][T23255] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 692.166134][T23255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.166162][T23255] usb 4-1: Product: syz [ 692.166175][T23255] usb 4-1: Manufacturer: syz [ 692.166189][T23255] usb 4-1: SerialNumber: syz [ 692.183793][T23216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.183814][T23216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.292470][T23213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.292496][T23213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.557526][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.661457][T23255] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 692.664722][T23255] usb 4-1: 0:2 : does not exist [ 692.704609][ T30] audit: type=1326 audit(1790877414.192:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25091 comm="syz.1.8412" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb499b9e159 code=0x0 [ 692.705738][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 692.829270][T23255] usb 4-1: USB disconnect, device number 85 [ 692.983297][T20280] udevd[20280]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 693.014990][T25098] GUP no longer grows the stack in syz.1.8413 (25098): 200000033000-200000200000 (20000002f000) [ 693.015032][T25098] CPU: 0 UID: 0 PID: 25098 Comm: syz.1.8413 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.015062][T25098] Tainted: [L]=SOFTLOCKUP [ 693.015071][T25098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 693.015089][T25098] Call Trace: [ 693.015099][T25098] [ 693.015110][T25098] dump_stack_lvl+0xe8/0x150 [ 693.015152][T25098] __get_user_pages+0x23b6/0x2750 [ 693.015254][T25098] get_user_pages_remote+0x307/0xb10 [ 693.015283][T25098] ? __pfx_mtree_load+0x10/0x10 [ 693.015400][T25098] ? __pfx_get_user_pages_remote+0x10/0x10 [ 693.015429][T25098] ? __access_remote_vm+0xa3/0x6f0 [ 693.015461][T25098] ? __access_remote_vm+0x42c/0x6f0 [ 693.015497][T25098] __access_remote_vm+0x222/0x6f0 [ 693.015538][T25098] ? __pfx___access_remote_vm+0x10/0x10 [ 693.015571][T25098] ? rep_movs_alternative+0x4a/0xa0 [ 693.015603][T25098] proc_pid_cmdline_read+0x46b/0x900 [ 693.015648][T25098] ? __asan_memset+0x22/0x50 [ 693.015687][T25098] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 693.015724][T25098] ? rw_verify_area+0x24a/0x4c0 [ 693.015765][T25098] vfs_readv+0x57c/0x850 [ 693.015795][T25098] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 693.015834][T25098] ? __pfx_vfs_readv+0x10/0x10 [ 693.015877][T25098] ? __fget_files+0x2a/0x420 [ 693.015920][T25098] ? __fget_files+0x3a2/0x420 [ 693.015949][T25098] ? __fget_files+0x2a/0x420 [ 693.015988][T25098] __x64_sys_preadv+0x19c/0x2b0 [ 693.016014][T25098] ? __pfx___x64_sys_preadv+0x10/0x10 [ 693.016050][T25098] do_syscall_64+0x166/0x520 [ 693.016078][T25098] ? trace_irq_disable+0x3b/0x140 [ 693.016099][T25098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.016120][T25098] ? clear_bhb_loop+0x70/0xc0 [ 693.016145][T25098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.016166][T25098] RIP: 0033:0x7fb499b9e159 [ 693.016187][T25098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.016206][T25098] RSP: 002b:00007fb49aa1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 693.016231][T25098] RAX: ffffffffffffffda RBX: 00007fb499e25fa0 RCX: 00007fb499b9e159 [ 693.016246][T25098] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000003 [ 693.016260][T25098] RBP: 00007fb499c3506b R08: 0000000000006a76 R09: 0000000000000000 [ 693.016273][T25098] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 693.016287][T25098] R13: 00007fb499e26038 R14: 00007fb499e25fa0 R15: 00007fb499f4fa48 [ 693.016323][T25098] [ 693.574281][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.886007][T23352] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0067/input/input117 [ 693.918189][T23352] hid-generic 0005:FFFD057E:0305.0067: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 694.040774][T23350] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 694.201494][T23350] usb 2-1: unable to get BOS descriptor or descriptor too short [ 694.202520][T23350] usb 2-1: New USB device found, idVendor=0025, idProduct=0000, bcdDevice= 0.00 [ 694.202569][T23350] usb 2-1: no configurations [ 694.202583][T23350] usb 2-1: can't read configurations, error -22 [ 694.611672][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.740655][ T30] audit: type=1326 audit(1790877416.232:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25130 comm="syz.6.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 694.740716][ T30] audit: type=1326 audit(1790877416.232:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25130 comm="syz.6.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 694.741863][ T30] audit: type=1326 audit(1790877416.232:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25130 comm="syz.6.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63a995e98e code=0x7ffc0000 [ 694.742708][ T30] audit: type=1326 audit(1790877416.232:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25130 comm="syz.6.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63a995e98e code=0x7ffc0000 [ 694.746278][ T30] audit: type=1326 audit(1790877416.232:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25130 comm="syz.6.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 694.746393][ T30] audit: type=1326 audit(1790877416.232:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25130 comm="syz.6.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 694.747358][ T30] audit: type=1326 audit(1790877416.232:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25130 comm="syz.6.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f63a995e98e code=0x7ffc0000 [ 694.748133][ T30] audit: type=1326 audit(1790877416.232:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25130 comm="syz.6.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 694.748314][ T30] audit: type=1326 audit(1790877416.232:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25130 comm="syz.6.8423" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 694.933035][T23352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.170372][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.252223][T23358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.530384][T25149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8431'. [ 695.649485][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.732750][ T5715] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 695.733254][ T5715] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 695.772787][ T5715] usb 5-1: USB disconnect, device number 65 [ 695.782800][T23358] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 695.993354][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.194717][T25172] sit0: entered promiscuous mode [ 696.217566][T25172] netlink: 'syz.1.8440': attribute type 1 has an invalid length. [ 696.217593][T25172] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8440'. [ 696.289377][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 696.328193][T23358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.344225][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.345812][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.721071][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.934910][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.009651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.335211][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.732069][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.264752][T25226] input: syz1 as /devices/virtual/input/input118 [ 698.264793][T25226] input: failed to attach handler leds to device input118, error: -6 [ 698.830184][T23350] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 698.987914][T23350] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 699.002285][T23350] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 699.002317][T23350] usb 5-1: config 1 has no interface number 0 [ 699.006182][T23350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.006211][T23350] usb 5-1: Product: syz [ 699.006227][T23350] usb 5-1: Manufacturer: syz [ 699.006241][T23350] usb 5-1: SerialNumber: syz [ 699.071093][T23350] usb 5-1: 3:1 : does not exist [ 699.071121][T23350] usb 5-1: 3:2 : does not exist [ 699.105465][T25242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8471'. [ 699.352337][T23350] usb 5-1: USB disconnect, device number 66 [ 700.409846][T25292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.752732][T25306] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8499'. [ 700.860170][T23255] net_ratelimit: 15 callbacks suppressed [ 700.860205][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.990214][ T5715] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 701.009984][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.140884][ T5715] usb 2-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 701.142498][ T5715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.142525][ T5715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 701.146451][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.146476][ T5715] usb 2-1: Product: syz [ 701.146491][ T5715] usb 2-1: Manufacturer: syz [ 701.146507][ T5715] usb 2-1: SerialNumber: syz [ 701.577976][T23352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.639220][T23350] usb 2-1: USB disconnect, device number 77 [ 701.645525][ T5629] Bluetooth: hci2: CSR: Local version failed (-71) [ 701.894102][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.346551][T25340] netlink: 412 bytes leftover after parsing attributes in process `syz.1.8511'. [ 702.366830][T25341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8508'. [ 702.450318][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.610070][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.931007][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.650711][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.861191][ T5714] hid_parser_main: 379 callbacks suppressed [ 703.861289][ T5714] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 703.866957][ T5714] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz1] on syz0 [ 703.984739][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.050326][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.652474][T25411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8533'. [ 704.795887][T25422] bond0: invalid NS target ff00:: specified for addition [ 704.795918][T25422] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 704.828238][T23217] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 704.862808][T23217] bond0: active interface up! [ 705.009866][T25434] loop5: detected capacity change from 0 to 7 [ 705.015336][T25434] loop5: [POWERTEC] p1 p2 [ 705.015560][T25434] loop5: p1 size 8388608 extends beyond EOD, truncated [ 705.048432][T25434] loop5: p2 start 536870912 is beyond EOD, truncated [ 705.114098][T20280] udevd[20280]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 705.384204][T25443] loop5: detected capacity change from 0 to 7 [ 705.402935][T25443] Dev loop5: unable to read RDB block 7 [ 705.402983][T25443] loop5: unable to read partition table [ 705.403230][T25443] loop5: partition table beyond EOD, truncated [ 705.403251][T25443] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 705.907665][T23255] net_ratelimit: 7 callbacks suppressed [ 705.907688][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.980276][ T5695] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 706.062611][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.142927][ T5695] usb 7-1: Using ep0 maxpacket: 8 [ 706.143690][ T5695] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 706.145217][ T5695] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 706.145272][ T5695] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 706.145296][ T5695] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 706.145321][ T5695] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 706.145345][ T5695] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.145390][ T5695] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.458769][ T5695] usb 7-1: usb_control_msg returned -32 [ 706.458828][ T5695] usbtmc 7-1:16.0: can't read capabilities [ 706.534803][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.535042][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.771702][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.894707][T25475] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 706.903833][ T5715] usb 7-1: USB disconnect, device number 2 [ 707.089704][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.091858][T23352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.129786][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.852592][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.171106][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.717967][T25592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 710.933051][T23352] net_ratelimit: 12 callbacks suppressed [ 710.933074][T23352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.029320][T23255] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 711.118997][T25609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.144519][T25609] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 711.180911][T23255] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 711.182173][T23255] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.182198][T23255] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 711.183203][T23255] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 711.183227][T23255] usb 5-1: SerialNumber: syz [ 711.254887][T23255] usb 5-1: 0:2 : does not exist [ 711.255519][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.341356][T25615] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 711.402990][T25615] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 711.692173][ T5695] usb 5-1: USB disconnect, device number 67 [ 711.936264][T23255] wiimote 0005:057E:0330.0069: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 711.936619][T23255] wiimote 0005:057E:0330.0069: New device registered [ 711.970778][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.145598][T25630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.169476][ T5695] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 712.290980][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.329304][ T5695] usb 7-1: Using ep0 maxpacket: 32 [ 712.330110][ T5695] usb 7-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 712.332016][ T5695] usb 7-1: config 0 has no interfaces? [ 712.336170][ T5695] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.336198][ T5695] usb 7-1: Product: syz [ 712.336213][ T5695] usb 7-1: Manufacturer: syz [ 712.336229][ T5695] usb 7-1: SerialNumber: syz [ 712.388555][ T5695] usb 7-1: config 0 descriptor?? [ 712.441667][T25636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.614268][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.635763][ T5715] usb 7-1: USB disconnect, device number 3 [ 712.660175][T25624] wiimote 0005:057E:0330.0069: Device removed [ 713.012040][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.013776][T23255] wiimote 0005:057E:0330.0069: detected device: Nintendo Wii Remote Plus (Gen 2) [ 713.082698][T23255] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0069/input/input120 [ 713.103861][T23255] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0069/input/input121 [ 713.127016][T23255] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0069/input/input119 [ 713.174534][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.397241][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 713.397262][ T30] audit: type=1326 audit(1790877434.882:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.4.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 713.397405][ T30] audit: type=1326 audit(1790877434.882:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.4.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 713.398146][ T30] audit: type=1326 audit(1790877434.882:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.4.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 713.398305][ T30] audit: type=1326 audit(1790877434.882:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.4.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 713.398501][ T30] audit: type=1326 audit(1790877434.882:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.4.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 713.495902][ T30] audit: type=1326 audit(1790877434.982:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.4.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 713.496737][ T30] audit: type=1326 audit(1790877434.982:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.4.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 713.550494][ T30] audit: type=1326 audit(1790877435.042:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.4.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 713.550548][ T30] audit: type=1326 audit(1790877435.042:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.4.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 713.550588][ T30] audit: type=1326 audit(1790877435.042:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25670 comm="syz.4.8622" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 714.583438][T25697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8633'. [ 714.583477][T25697] netlink: 'syz.0.8633': attribute type 29 has an invalid length. [ 714.583493][T25697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8633'. [ 715.675285][T23260] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 715.821249][T23260] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 715.822642][T23260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.830249][T23260] usb 5-1: config 0 descriptor?? [ 715.861126][T23260] cp210x 5-1:0.0: cp210x converter detected [ 716.131616][ T5715] net_ratelimit: 13 callbacks suppressed [ 716.131642][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.133897][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.212097][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.272551][T23260] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 716.295296][T23260] usb 5-1: cp210x converter now attached to ttyUSB0 [ 716.452650][T23260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.492794][T23350] usb 5-1: USB disconnect, device number 68 [ 716.496744][T23350] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 716.516024][T23350] cp210x 5-1:0.0: device disconnected [ 716.665636][T25752] netlink: 'syz.1.8657': attribute type 12 has an invalid length. [ 716.665662][T25752] netlink: 'syz.1.8657': attribute type 29 has an invalid length. [ 716.665676][T25752] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8657'. [ 716.665697][T25752] netlink: 51 bytes leftover after parsing attributes in process `syz.1.8657'. [ 716.732852][T25754] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8658'. [ 716.765403][T25754] netlink: 5 bytes leftover after parsing attributes in process `syz.1.8658'. [ 716.765656][T25754] 0ªî{X¹¦: renamed from gretap0 [ 716.794353][T25754] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 717.088025][T25766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 717.170445][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.489607][T23260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.070197][T23350] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 718.211340][T23352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.228603][T23350] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 718.242144][T23350] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 718.242164][T23350] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 718.244196][T23350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.244221][T23350] usb 2-1: Product: syz [ 718.244237][T23350] usb 2-1: Manufacturer: syz [ 718.244251][T23350] usb 2-1: SerialNumber: syz [ 718.419411][T23260] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 718.458122][T23350] usb 2-1: Limiting number of CPorts to U8_MAX [ 718.529899][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.571967][T23260] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 718.573383][T23260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 718.573449][T23260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.573470][T23260] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 718.573512][T23260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.576207][T23260] usb 4-1: config 0 descriptor?? [ 718.689981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.862039][ C0] usb 2-1: invalid arpc response id received: 1280 [ 719.003002][T23260] hid-multitouch 0003:0457:07DA.006A: unknown main item tag 0x0 [ 719.003041][T23260] hid-multitouch 0003:0457:07DA.006A: unknown main item tag 0x0 [ 719.003095][T23260] hid-multitouch 0003:0457:07DA.006A: unknown main item tag 0x0 [ 719.003122][T23260] hid-multitouch 0003:0457:07DA.006A: unknown main item tag 0x0 [ 719.003148][T23260] hid-multitouch 0003:0457:07DA.006A: unknown main item tag 0x0 [ 719.003173][T23260] hid-multitouch 0003:0457:07DA.006A: unknown main item tag 0x0 [ 719.003199][T23260] hid-multitouch 0003:0457:07DA.006A: unknown main item tag 0x0 [ 719.003225][T23260] hid-multitouch 0003:0457:07DA.006A: unknown main item tag 0x0 [ 719.003252][T23260] hid-multitouch 0003:0457:07DA.006A: unknown main item tag 0x0 [ 719.003277][T23260] hid-multitouch 0003:0457:07DA.006A: unknown main item tag 0x0 [ 719.017468][T23260] hid-multitouch 0003:0457:07DA.006A: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 719.072988][T23350] usb 2-1: failed to send ARPC request 1: -71 [ 719.073610][T23350] usb 2-1: failed to execute ARPC: -71 [ 719.073626][T23350] usb 2-1: failed to set connected state for cport 0: -71 [ 719.073643][T23350] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 719.091896][T23350] usb 2-1: failed to send ARPC request 3: -71 [ 719.092520][T23350] usb 2-1: failed to execute ARPC: -71 [ 719.092536][T23350] usb 2-1: failed to clear cport 0: -71 [ 719.092552][T23350] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 719.176364][T23350] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 719.214479][T23350] usb 2-1: USB disconnect, device number 78 [ 719.325075][ T5715] usb 4-1: USB disconnect, device number 86 [ 719.577291][T25820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8687'. [ 719.577345][T25820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8687'. [ 720.350095][T23352] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 720.380968][T25846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8698'. [ 720.502717][T23352] usb 4-1: Using ep0 maxpacket: 16 [ 720.506520][T23352] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 720.510222][T23352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.510275][T23352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.510296][T23352] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 720.510341][T23352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.587379][T23352] usb 4-1: config 0 descriptor?? [ 721.088357][T23352] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.006B/input/input122 [ 721.122017][T23352] microsoft 0003:045E:07DA.006B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 721.254336][T25860] net_ratelimit: 7 callbacks suppressed [ 721.254360][T25860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.255144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.390438][ T5714] usb 4-1: USB disconnect, device number 87 [ 721.409946][T23352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.483845][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 721.483867][ T30] audit: type=1326 audit(1790877442.972:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25864 comm="syz.4.8705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 721.485159][ T30] audit: type=1326 audit(1790877442.972:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25864 comm="syz.4.8705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 721.507827][ T30] audit: type=1326 audit(1790877442.992:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25864 comm="syz.4.8705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 721.507879][ T30] audit: type=1326 audit(1790877442.992:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25864 comm="syz.4.8705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 721.507920][ T30] audit: type=1326 audit(1790877442.992:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25864 comm="syz.4.8705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 721.515030][ T30] audit: type=1326 audit(1790877443.002:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25864 comm="syz.4.8705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 721.515081][ T30] audit: type=1326 audit(1790877443.002:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25864 comm="syz.4.8705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 721.515120][ T30] audit: type=1326 audit(1790877443.002:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25864 comm="syz.4.8705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 721.515997][ T30] audit: type=1326 audit(1790877443.002:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25864 comm="syz.4.8705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 721.518150][ T30] audit: type=1326 audit(1790877443.002:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25864 comm="syz.4.8705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 721.700907][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.752008][T23260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.213844][T25888] bridge_slave_0: left allmulticast mode [ 722.213875][T25888] bridge_slave_0: left promiscuous mode [ 722.214149][T25888] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.246553][T25888] bridge_slave_1: left promiscuous mode [ 722.246808][T25888] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.264330][T25890] netlink: 'syz.1.8715': attribute type 10 has an invalid length. [ 722.287945][T25888] bond0: (slave bond_slave_0): Releasing backup interface [ 722.314666][T25888] bond0: (slave bond_slave_1): Releasing backup interface [ 722.351704][T25888] team0: Port device team_slave_0 removed [ 722.387937][T25888] team0: Port device team_slave_1 removed [ 722.393018][T25888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.393043][T25888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.396852][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.435947][T25888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.435973][T25888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.454319][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.464163][T25888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 722.540463][T23260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.554691][T25890] team0: Port device dummy0 added [ 722.728082][T25900] team_slave_1: Caught tx_queue_len zero misconfig [ 722.748954][T25902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.139844][T23350] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 723.296806][T23350] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 723.298190][T23350] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 723.298217][T23350] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 723.298238][T23350] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 723.298287][T23350] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 723.298313][T23350] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 723.302387][T23350] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 723.302433][T23350] usb 7-1: Product: syz [ 723.302447][T23350] usb 7-1: Manufacturer: syz [ 723.336723][T23350] cdc_wdm 7-1:1.0: skipping garbage [ 723.336762][T23350] cdc_wdm 7-1:1.0: skipping garbage [ 723.345525][T23350] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 723.345546][T23350] cdc_wdm 7-1:1.0: Unknown control protocol [ 723.749691][T25939] input: syz0 as /devices/virtual/input/input123 [ 723.909196][T23260] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 724.060915][ T5715] usb 7-1: USB disconnect, device number 4 [ 724.075990][T23260] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 724.077387][T23260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.107794][T23260] usb 4-1: config 0 descriptor?? [ 724.325925][T23260] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 724.355469][T25949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8739'. [ 724.355496][T25949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8739'. [ 724.558147][T23260] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 724.558179][T23260] [drm] Initialized udl on minor 1 [ 725.406948][T25985] macvlan1: entered promiscuous mode [ 725.416409][T25985] macvlan1: left promiscuous mode [ 725.466484][T25987] input: syz0 as /devices/virtual/input/input124 [ 725.569791][ T5714] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 725.622243][T25991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8756'. [ 725.622280][T25991] netlink: 'syz.0.8756': attribute type 5 has an invalid length. [ 725.622296][T25991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8756'. [ 725.636852][T25991] geneve2: entered promiscuous mode [ 725.636877][T25991] geneve2: entered allmulticast mode [ 725.639002][T23217] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 725.682109][T23217] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 725.682197][T23217] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 725.682239][T23217] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 725.730566][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 725.731573][ T5714] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 725.733875][ T5714] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 725.733927][ T5714] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 725.733950][ T5714] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 725.733997][ T5714] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 725.734021][ T5714] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 725.734090][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.041427][ T5714] usb 2-1: usb_control_msg returned -32 [ 726.041516][ T5714] usbtmc 2-1:16.0: can't read capabilities [ 726.293179][T26013] net_ratelimit: 12 callbacks suppressed [ 726.293206][T26013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.293956][T26013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.294786][T26013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.295367][T26013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.295749][T26013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.360326][T26010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.455314][T26018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.455553][T26018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.455840][T26018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.456119][T26018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.642471][ T5715] usb 2-1: USB disconnect, device number 79 [ 727.147218][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 727.147239][ T30] audit: type=1326 audit(1790877448.632:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26034 comm="syz.4.8775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 727.147513][ T30] audit: type=1326 audit(1790877448.632:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26034 comm="syz.4.8775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 727.224624][ T30] audit: type=1326 audit(1790877448.712:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26034 comm="syz.4.8775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 727.224680][ T30] audit: type=1326 audit(1790877448.712:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26034 comm="syz.4.8775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 727.224722][ T30] audit: type=1326 audit(1790877448.712:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26034 comm="syz.4.8775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 727.226446][ T30] audit: type=1326 audit(1790877448.712:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26034 comm="syz.4.8775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 727.236423][ T30] audit: type=1326 audit(1790877448.712:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26034 comm="syz.4.8775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 727.236473][ T30] audit: type=1326 audit(1790877448.722:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26034 comm="syz.4.8775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 727.248722][ T30] audit: type=1326 audit(1790877448.732:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26034 comm="syz.4.8775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 727.248775][ T30] audit: type=1326 audit(1790877448.732:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26034 comm="syz.4.8775" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 727.444153][T26044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8779'. [ 727.574118][T26045] netlink: 34959 bytes leftover after parsing attributes in process `syz.6.8779'. [ 727.663429][T23350] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 727.812600][T23350] usb 2-1: Using ep0 maxpacket: 16 [ 727.813378][T23350] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 727.814716][T23350] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 727.814741][T23350] usb 2-1: config 0 has no interface number 0 [ 727.814785][T23350] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 727.814811][T23350] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 727.818482][T23350] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 727.818508][T23350] usb 2-1: Product: syz [ 727.818523][T23350] usb 2-1: SerialNumber: syz [ 727.836047][T23350] usb 2-1: config 0 descriptor?? [ 727.848758][T23350] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 727.857700][T23350] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input125 [ 728.096672][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 728.096991][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 728.097222][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 728.097324][T23352] usb 2-1: USB disconnect, device number 80 [ 728.097440][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 728.097466][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 728.112672][T23352] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 729.502296][T26083] binder: 26082:26083 ioctl c0306201 200000000480 returned -14 [ 729.651916][T23260] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 729.652457][T23260] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 729.678429][ T5714] usb 4-1: USB disconnect, device number 88 [ 729.679276][T23260] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 729.679649][T23260] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 729.679862][T23260] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 729.747774][T26089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 730.355592][T23260] hsr0: entered promiscuous mode [ 730.356785][T26114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8810'. [ 731.287956][T26141] bond4: invalid NS target :: specified for addition [ 731.287990][T26141] bond4: option ns_ip6_target: invalid value (18446744073709551615) [ 731.295914][T26141] bond4 (unregistering): Released all slaves [ 731.490680][T23350] net_ratelimit: 27 callbacks suppressed [ 731.490704][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.764681][T26147] syz_tun: entered allmulticast mode [ 731.784800][T26146] syz_tun: left allmulticast mode [ 731.820681][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.141804][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 732.145566][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.145808][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.678302][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 732.678323][ T30] audit: type=1326 audit(1790877454.162:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26171 comm="syz.0.8833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe01619e159 code=0x0 [ 732.850027][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.869955][T26177] tmpfs: Unknown parameter ',2`R×Aì r7¨SÇA†¶«à,6' [ 733.169761][T23260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.350367][T23350] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 733.501446][T23350] usb 2-1: Using ep0 maxpacket: 8 [ 733.502277][T23350] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 733.503376][T23350] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 733.503409][T23350] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 733.503444][T23350] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 733.503469][T23350] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 733.503492][T23350] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 733.503515][T23350] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 733.503539][T23350] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 733.503564][T23350] usb 2-1: config 168 interface 0 has no altsetting 0 [ 733.504481][T23350] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 733.504511][T23350] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 733.504544][T23350] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 733.504567][T23350] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 733.504588][T23350] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 733.504610][T23350] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 733.504642][T23350] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 733.504665][T23350] usb 2-1: config 168 interface 0 has no altsetting 0 [ 733.507217][T23350] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 733.507248][T23350] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 733.507286][T23350] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 733.507310][T23350] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 733.507334][T23350] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 733.507357][T23350] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 733.507379][T23350] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 733.507403][T23350] usb 2-1: config 168 interface 0 has no altsetting 0 [ 733.512022][T23350] usb 2-1: string descriptor 0 read error: -22 [ 733.512153][T23350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.544553][T23350] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 733.866114][T23350] usb 2-1: USB disconnect, device number 81 [ 733.893618][T23352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.143706][T26221] dummy0: entered promiscuous mode [ 734.145467][T26221] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 734.165528][T26221] hsr1: entered allmulticast mode [ 734.165554][T26221] dummy0: entered allmulticast mode [ 734.165646][T26221] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 734.209489][T23260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.211325][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.391052][T26229] loop6: detected capacity change from 0 to 1 [ 734.413751][T26229] Dev loop6: unable to read RDB block 1 [ 734.413800][T26229] loop6: unable to read partition table [ 734.414010][T26229] loop6: partition table beyond EOD, truncated [ 734.414315][T26229] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 734.530374][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.538127][T26219] netlink: 'syz.4.8854': attribute type 12 has an invalid length. [ 735.180118][T26248] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8865'. [ 735.722482][ T30] audit: type=1326 audit(1790877457.212:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.4.8875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 735.724319][ T30] audit: type=1326 audit(1790877457.212:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.4.8875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 735.725782][ T30] audit: type=1326 audit(1790877457.212:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.4.8875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 735.725943][ T30] audit: type=1326 audit(1790877457.212:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.4.8875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 735.726123][ T30] audit: type=1326 audit(1790877457.212:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.4.8875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 735.726454][ T30] audit: type=1326 audit(1790877457.212:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.4.8875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 735.868664][ T30] audit: type=1326 audit(1790877457.352:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.4.8875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 735.868717][ T30] audit: type=1326 audit(1790877457.352:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.4.8875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 735.874044][T23350] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 735.935717][ T30] audit: type=1326 audit(1790877457.422:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26270 comm="syz.4.8875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d1159e159 code=0x7ffc0000 [ 736.023898][T23350] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 736.028529][T23350] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 736.028559][T23350] usb 2-1: config 1 has no interface number 0 [ 736.033302][T23350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.033329][T23350] usb 2-1: Product: syz [ 736.033343][T23350] usb 2-1: Manufacturer: syz [ 736.033357][T23350] usb 2-1: SerialNumber: syz [ 736.056512][T23350] usb 2-1: 3:1 : does not exist [ 736.056537][T23350] usb 2-1: 3:2 : does not exist [ 736.306537][T23358] usb 2-1: USB disconnect, device number 82 [ 736.429844][T23350] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 736.580841][T23350] usb 5-1: Using ep0 maxpacket: 16 [ 736.581629][T23350] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 736.583429][T23350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.583461][T23350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.583483][T23350] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 736.583523][T23350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.586775][T23350] usb 5-1: config 0 descriptor?? [ 737.013083][ T5715] net_ratelimit: 8 callbacks suppressed [ 737.013114][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.042085][T23350] hid_parser_main: 17 callbacks suppressed [ 737.042123][T23350] microsoft 0003:045E:07DA.006C: unknown main item tag 0x0 [ 737.042153][T23350] microsoft 0003:045E:07DA.006C: unknown main item tag 0x0 [ 737.042178][T23350] microsoft 0003:045E:07DA.006C: unknown main item tag 0x0 [ 737.042204][T23350] microsoft 0003:045E:07DA.006C: unknown main item tag 0x0 [ 737.042230][T23350] microsoft 0003:045E:07DA.006C: unknown main item tag 0x0 [ 737.042255][T23350] microsoft 0003:045E:07DA.006C: unknown main item tag 0x0 [ 737.042280][T23350] microsoft 0003:045E:07DA.006C: unknown main item tag 0x0 [ 737.042306][T23350] microsoft 0003:045E:07DA.006C: unknown main item tag 0x0 [ 737.042332][T23350] microsoft 0003:045E:07DA.006C: unknown main item tag 0x0 [ 737.042358][T23350] microsoft 0003:045E:07DA.006C: unknown main item tag 0x0 [ 737.097255][T23350] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.006C/input/input126 [ 737.235561][T23350] microsoft 0003:045E:07DA.006C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 737.265584][T26299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8886'. [ 737.265625][T26299] netlink: 'syz.1.8886': attribute type 30 has an invalid length. [ 737.278055][T23350] usb 5-1: USB disconnect, device number 69 [ 737.333283][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.334723][T26303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8886'. [ 737.334757][T26303] netlink: 'syz.1.8886': attribute type 30 has an invalid length. [ 737.424544][T26302] fido_id[26302]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 737.462993][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.525912][T26299] vxlan1: entered promiscuous mode [ 737.525938][T26299] vxlan1: entered allmulticast mode [ 737.575698][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.724408][T26303] vxlan1: entered promiscuous mode [ 737.724433][T26303] vxlan1: entered allmulticast mode [ 737.801887][T23358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.835955][T26313] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8891'. [ 737.837840][T26313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8891'. [ 738.031137][T23352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.050632][T23352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.372846][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.375160][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.462606][T23216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.119602][T26356] cifs: Unknown parameter 'f,' [ 739.355443][T26367] Invalid argument reading file caps for ./file0 [ 739.655980][T26378] input: syz0 as /devices/virtual/input/input127 [ 739.905141][T26383] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 739.905394][T26383] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 739.932135][T26383] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 740.179739][T23352] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 740.333966][T23352] usb 2-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 740.335377][T23352] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 740.335406][T23352] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 740.335447][T23352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.354225][T23352] usb-storage 2-1:1.0: USB Mass Storage device detected [ 740.420421][T23352] usb-storage 2-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 740.424342][T23352] scsi host1: usb-storage 2-1:1.0 [ 740.518157][T26413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 740.563922][T23350] usb 2-1: USB disconnect, device number 83 [ 740.592907][T26415] usb usb7: usbfs: interface 0 claimed by hub while 'syz.6.8936' resets device [ 741.892787][T23352] psmouse serio5: Failed to reset mouse on : -5 [ 741.906673][T26457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 741.979223][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout [ 742.212669][T23350] net_ratelimit: 22 callbacks suppressed [ 742.212694][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.370790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.375897][T26481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.376098][T26481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.376258][T26481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.376412][T26481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.376694][T26481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.376858][T26481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.377010][T26481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.377159][T26481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.650868][T26490] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8968'. [ 744.049197][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout [ 744.073840][T26544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8986'. [ 744.074139][T26544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8986'. [ 745.459993][T23352] misc userio: Buffer overflowed, userio client isn't keeping up [ 746.129250][ T5629] Bluetooth: hci5: command 0x0c1a tx timeout [ 746.756720][T23352] input: PS/2 Generic Mouse as /devices/serio5/input/input128 [ 746.981023][T26617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 747.032786][T23352] psmouse serio5: Failed to enable mouse on [ 747.386790][T26635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9024'. [ 747.399438][T23260] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 747.410483][T23352] net_ratelimit: 1037 callbacks suppressed [ 747.410506][T23352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.501996][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.502777][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.502840][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.560103][T23260] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 747.561206][T23260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.563489][T23260] usb 5-1: config 0 descriptor?? [ 747.570220][ T5715] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 747.721158][ T5715] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 747.722374][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.725214][ T5715] usb 4-1: config 0 descriptor?? [ 747.772616][T23260] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 747.810282][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.945075][ T5715] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 748.014309][T23260] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 748.014337][T23260] [drm] Initialized udl on minor 1 [ 748.231889][ T5715] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 748.231917][ T5715] [drm] Initialized udl on minor 2 [ 748.266187][T26657] misc userio: Begin command sent, but we're already running [ 748.451061][T23352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.851256][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.292542][T26677] Invalid argument reading file caps for ./file0 [ 749.375316][T26682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 749.492642][T23352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.751021][T23358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.889974][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.984134][T23217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.986318][T23358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.210465][T23352] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 750.360960][T23352] usb 2-1: Using ep0 maxpacket: 8 [ 750.361905][T23352] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 750.366570][T23352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.366597][T23352] usb 2-1: Product: syz [ 750.366622][T23352] usb 2-1: Manufacturer: syz [ 750.366638][T23352] usb 2-1: SerialNumber: syz [ 750.380146][T23352] usb 2-1: config 0 descriptor?? [ 750.615976][T23352] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 750.931313][T23350] hid_parser_main: 5 callbacks suppressed [ 750.931370][T23350] hid-generic 0000:0000:0001.006D: unknown main item tag 0x0 [ 750.931401][T23350] hid-generic 0000:0000:0001.006D: unknown main item tag 0x0 [ 750.931425][T23350] hid-generic 0000:0000:0001.006D: unknown main item tag 0x0 [ 750.931448][T23350] hid-generic 0000:0000:0001.006D: unknown main item tag 0x0 [ 750.931513][T23350] hid-generic 0000:0000:0001.006D: unknown main item tag 0x0 [ 750.931538][T23350] hid-generic 0000:0000:0001.006D: unknown main item tag 0x0 [ 750.931562][T23350] hid-generic 0000:0000:0001.006D: unknown main item tag 0x0 [ 750.931586][T23350] hid-generic 0000:0000:0001.006D: unknown main item tag 0x0 [ 750.937103][T23350] hid-generic 0000:0000:0001.006D: hidraw0: HID v0.10 Device [syz0] on syz1 [ 751.425652][T23352] usb write operation failed. (-71) [ 751.435018][T23352] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 751.435780][T23352] dvbdev: DVB: registering new adapter (Terratec H7) [ 751.435833][T23352] usb 2-1: media controller created [ 751.436535][T23352] usb read operation failed. (-71) [ 751.437074][T23352] usb write operation failed. (-71) [ 751.485121][T23352] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 751.505716][T23352] usb 2-1: USB disconnect, device number 84 [ 751.995443][T26720] netlink: 'syz.6.9055': attribute type 10 has an invalid length. [ 752.213922][T26726] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 752.213974][T26726] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 752.295877][T26728] netlink: 'syz.1.9059': attribute type 3 has an invalid length. [ 752.295904][T26728] netlink: 'syz.1.9059': attribute type 2 has an invalid length. [ 752.615898][T23352] net_ratelimit: 9 callbacks suppressed [ 752.615923][T23352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.616807][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 752.770792][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.017302][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.099989][T23260] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 753.100539][T23260] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 753.105256][T23260] usb 5-1: USB disconnect, device number 70 [ 753.107464][ T5715] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 753.107937][ T5715] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 753.111895][T23358] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 753.115224][T23358] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 753.115442][T23358] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 753.115921][T26746] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 753.131218][ T5715] usb 4-1: USB disconnect, device number 89 [ 753.185943][ T5714] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 753.251511][T23255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.570129][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.615710][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 753.615732][ T30] audit: type=1326 audit(1790877475.102:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.3.9072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b99e159 code=0x7ffc0000 [ 753.615786][ T30] audit: type=1326 audit(1790877475.102:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.3.9072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b99e159 code=0x7ffc0000 [ 753.631108][ T30] audit: type=1326 audit(1790877475.102:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.3.9072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b99e159 code=0x7ffc0000 [ 753.653493][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.658706][ T30] audit: type=1326 audit(1790877475.142:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.3.9072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b99e159 code=0x7ffc0000 [ 753.700892][ T30] audit: type=1326 audit(1790877475.182:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.3.9072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f4f4b99e159 code=0x7ffc0000 [ 753.700949][ T30] audit: type=1326 audit(1790877475.192:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.3.9072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b99e159 code=0x7ffc0000 [ 753.700988][ T30] audit: type=1326 audit(1790877475.192:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.3.9072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b99e159 code=0x7ffc0000 [ 753.713221][ T30] audit: type=1326 audit(1790877475.202:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.3.9072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b99e159 code=0x7ffc0000 [ 753.713271][ T30] audit: type=1326 audit(1790877475.202:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.3.9072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b99e159 code=0x7ffc0000 [ 753.717172][ T30] audit: type=1326 audit(1790877475.202:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.3.9072" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4f4b99e159 code=0x7ffc0000 [ 754.055366][T23260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.410586][T23260] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 754.579152][T23260] usb 2-1: Using ep0 maxpacket: 32 [ 754.694384][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.727786][T23260] usb 2-1: unable to get BOS descriptor or descriptor too short [ 754.727846][T23260] usb 2-1: New USB device found, idVendor=0499, idProduct=1024, bcdDevice= 0.40 [ 754.728752][T23260] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 754.728788][T23260] usb 2-1: can't read configurations, error -71 [ 754.817660][T26778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.061777][T26789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9085'. [ 755.065494][T26789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9085'. [ 755.203802][T26796] input: syz0 as /devices/virtual/input/input130 [ 755.306052][T26796] input: failed to attach handler leds to device input130, error: -6 [ 756.175640][T26820] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 756.518086][T26829] bridge0: port 1(veth0) entered blocking state [ 756.518280][T26829] bridge0: port 1(veth0) entered disabled state [ 756.518459][T26829] veth0: entered allmulticast mode [ 756.527156][T26829] veth0: entered promiscuous mode [ 756.527866][T26829] bridge0: port 1(veth0) entered blocking state [ 756.527978][T26829] bridge0: port 1(veth0) entered forwarding state [ 757.410524][ T5715] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 757.560142][ T5715] usb 4-1: Using ep0 maxpacket: 8 [ 757.560932][ T5715] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 757.564964][ T5715] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 757.565023][ T5715] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 757.565047][ T5715] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 757.565071][ T5715] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 757.565096][ T5715] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.565141][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.731291][ C1] net_ratelimit: 12 callbacks suppressed [ 757.731317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.810183][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.858231][ T5715] usb 4-1: usb_control_msg returned -32 [ 757.858288][ T5715] usbtmc 4-1:16.0: can't read capabilities [ 758.032615][T26881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.239187][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.365980][T26888] kvm [26886]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 758.366186][T26888] kvm [26886]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 758.464427][T23358] usb 4-1: USB disconnect, device number 90 [ 758.778942][T26899] syzkaller1: entered promiscuous mode [ 758.778965][T26899] syzkaller1: entered allmulticast mode [ 758.853179][T23358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.853320][T23358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.232954][T26909] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 759.251369][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.415338][T26909] nvme nvme0: failed to connect socket: -101 [ 759.651712][ T5695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.798341][T26929] ip_tables: iptables: counters copy to user failed while replacing table [ 759.824043][T26927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.890958][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.689356][ T5714] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 760.844118][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 760.845256][ T5714] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 760.846705][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.882923][ T5714] usb 2-1: config 0 descriptor?? [ 760.898161][ T5714] usb 2-1: probing VID:PID(0424:012C) [ 760.908704][ T5714] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 760.908734][ T5714] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 760.908754][ T5714] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 760.908773][ T5714] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 760.908791][ T5714] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 761.301675][ T5714] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 761.504541][ T5714] usb 2-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 761.911446][T27004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9170'. [ 762.275895][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 762.275928][ T30] audit: type=1326 audit(1790877483.762:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27011 comm="syz.6.9174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 762.310889][ T30] audit: type=1326 audit(1790877483.762:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27011 comm="syz.6.9174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 762.314101][ T30] audit: type=1326 audit(1790877483.802:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27011 comm="syz.6.9174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 762.314384][ T30] audit: type=1326 audit(1790877483.802:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27011 comm="syz.6.9174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 762.314622][ T30] audit: type=1326 audit(1790877483.802:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27011 comm="syz.6.9174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 762.314826][ T30] audit: type=1326 audit(1790877483.802:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27011 comm="syz.6.9174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 762.316118][ T30] audit: type=1326 audit(1790877483.802:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27011 comm="syz.6.9174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 762.316164][ T30] audit: type=1326 audit(1790877483.802:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27011 comm="syz.6.9174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 762.316200][ T30] audit: type=1326 audit(1790877483.802:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27011 comm="syz.6.9174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 762.371048][ T30] audit: type=1326 audit(1790877483.852:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27011 comm="syz.6.9174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63a999e159 code=0x7ffc0000 [ 762.586683][T27020] syzkaller1: entered promiscuous mode [ 762.586710][T27020] syzkaller1: entered allmulticast mode [ 762.652331][ T5714] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 762.673418][ T5714] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 762.676734][ T5714] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 762.704687][T23358] usb 2-1: USB disconnect, device number 87 [ 763.010266][T23350] net_ratelimit: 7 callbacks suppressed [ 763.010297][T23350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.348531][T23358] USB vub300 remote SDIO host controller[0] now disconnected [ 763.414569][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.558892][T23260] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0 [ 763.569619][T23260] hid-generic 0000:0000:0000.006E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 763.649385][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 763.649409][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 27050, name: syz.4.9188 [ 763.649428][ C1] preempt_count: 100, expected: 0 [ 763.649439][ C1] RCU nest depth: 0, expected: 0 [ 763.649451][ C1] locks held by syz.4.9188/27050: 2, last CPU#1: [ 763.649568][ C1] #0: ffff888035ed6540 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 763.649692][ C1] #1: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 763.649755][ C1] Preemption disabled at: [ 763.649786][ C1] [] handle_softirqs+0xab/0x860 [ 763.649843][ C1] CPU: 1 UID: 0 PID: 27050 Comm: syz.4.9188 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.649874][ C1] Tainted: [L]=SOFTLOCKUP [ 763.649882][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 763.649896][ C1] Call Trace: [ 763.649906][ C1] [ 763.649915][ C1] dump_stack_lvl+0xe8/0x150 [ 763.649950][ C1] __might_resched+0x36a/0x4c0 [ 763.649986][ C1] ? handle_softirqs+0xab/0x860 [ 763.650017][ C1] __cancel_work_sync+0x6d/0x110 [ 763.650057][ C1] mmc_free_host+0x19/0x40 [ 763.650133][ C1] call_timer_fn+0x18d/0x5f0 [ 763.650161][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 763.650236][ C1] ? call_timer_fn+0xd5/0x5f0 [ 763.650264][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 763.650301][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 763.650357][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 763.650397][ C1] __run_timer_base+0x652/0x8b0 [ 763.650448][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 763.650481][ C1] ? ktime_get+0x1f5/0x220 [ 763.650508][ C1] ? lapic_next_event+0x11/0x20 [ 763.650542][ C1] run_timer_softirq+0xb7/0x170 [ 763.650572][ C1] handle_softirqs+0x226/0x860 [ 763.650607][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 763.650646][ C1] __irq_exit_rcu+0xcb/0x220 [ 763.650678][ C1] irq_exit_rcu+0x9/0x30 [ 763.650707][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 763.650739][ C1] [ 763.650748][ C1] [ 763.650759][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 763.650795][ C1] RIP: 0010:handle_mm_fault+0x3523/0x3750 [ 763.650836][ C1] Code: 00 00 00 00 65 48 8b 05 b3 f2 76 11 48 3b 84 24 e0 01 00 00 0f 85 ce 00 00 00 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d 88 4c cb 09 cc 45 89 f7 41 89 de 41 83 e6 04 41 83 e7 20 44 89 [ 763.650858][ C1] RSP: 0018:ffffc9000431fac8 EFLAGS: 00000246 [ 763.650880][ C1] RAX: 0000000000000200 RBX: 1ffff110058c5801 RCX: 0000000000080000 [ 763.650899][ C1] RDX: ffffc9000d871000 RSI: 000000000007ffff RDI: 0000000000080000 [ 763.650915][ C1] RBP: 0000000000000014 R08: ffffffff907a647f R09: 1ffffffff20f4c8f [ 763.650933][ C1] R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: dffffc0000000000 [ 763.650950][ C1] R13: ffff8880762b7c80 R14: ffff8880762b7c90 R15: 000020000037a000 [ 763.650988][ C1] __get_user_pages+0x1675/0x2750 [ 763.651058][ C1] populate_vma_page_range+0x2be/0x3c0 [ 763.651091][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 763.651125][ C1] ? down_read+0x2be/0x330 [ 763.651164][ C1] __mm_populate+0x25f/0x390 [ 763.651198][ C1] ? __pfx___mm_populate+0x10/0x10 [ 763.651239][ C1] vm_mmap_pgoff+0x353/0x4e0 [ 763.651275][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 763.651307][ C1] ? rcu_is_watching+0x16/0xb0 [ 763.651341][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 763.651374][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 763.651420][ C1] do_syscall_64+0x166/0x520 [ 763.651451][ C1] ? trace_irq_disable+0x3b/0x140 [ 763.651477][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.651502][ C1] ? clear_bhb_loop+0x70/0xc0 [ 763.651531][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.651554][ C1] RIP: 0033:0x7f1d1159e159 [ 763.651577][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.651597][ C1] RSP: 002b:00007f1d12422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 763.651621][ C1] RAX: ffffffffffffffda RBX: 00007f1d11825fa0 RCX: 00007f1d1159e159 [ 763.651638][ C1] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 763.651654][ C1] RBP: 00007f1d1163506b R08: 0000000000000003 R09: 0000000000001000 [ 763.651670][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 763.651685][ C1] R13: 00007f1d11826038 R14: 00007f1d11825fa0 R15: 00007f1d1194fa48 [ 763.651722][ C1] [ 763.651970][ C1] [ 764.095126][ C1] ================================ [ 764.100266][ C1] WARNING: inconsistent lock state [ 764.105409][ C1] syzkaller #0 Tainted: G W L [ 764.111389][ C1] -------------------------------- [ 764.116507][ C1] inconsistent {SOFTIRQ-ON-R} -> {IN-SOFTIRQ-W} usage. [ 764.123429][ C1] syz.4.9188/27050 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 764.129853][ C1] ffffffff8f817d58 (wakeup_srcu){.+-+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 764.139020][ C1] {SOFTIRQ-ON-R} state was registered at: [ 764.144864][ C1] lock_acquire+0x115/0x350 [ 764.149472][ C1] pm_print_active_wakeup_sources+0x60/0x370 [ 764.155573][ C1] wakeup_count_store+0xcc/0x120 [ 764.160626][ C1] kernfs_fop_write_iter+0x3a4/0x540 [ 764.166011][ C1] aio_write+0x5d0/0x870 [ 764.170343][ C1] io_submit_one+0x798/0x13d0 [ 764.175109][ C1] __se_sys_io_submit+0x195/0x340 [ 764.180235][ C1] do_syscall_64+0x166/0x520 [ 764.184920][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.190897][ C1] irq event stamp: 6802 [ 764.195043][ C1] hardirqs last enabled at (6802): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 764.205374][ C1] hardirqs last disabled at (6801): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 764.215385][ C1] softirqs last enabled at (6564): [] __irq_exit_rcu+0xcb/0x220 [ 764.224694][ C1] softirqs last disabled at (6659): [] __irq_exit_rcu+0xcb/0x220 [ 764.233990][ C1] [ 764.233990][ C1] other info that might help us debug this: [ 764.242137][ C1] Possible unsafe locking scenario: [ 764.242137][ C1] [ 764.249589][ C1] CPU0 [ 764.252864][ C1] ---- [ 764.256159][ C1] lock(wakeup_srcu); [ 764.260237][ C1] [ 764.263733][ C1] lock(wakeup_srcu); [ 764.268073][ C1] [ 764.268073][ C1] *** DEADLOCK *** [ 764.268073][ C1] [ 764.276214][ C1] locks held by syz.4.9188/27050: 2, last CPU#1: [ 764.282546][ C1] #0: ffff888035ed6540 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 764.291966][ C1] #1: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 764.302428][ C1] [ 764.302428][ C1] stack backtrace: [ 764.308326][ C1] CPU: 1 UID: 0 PID: 27050 Comm: syz.4.9188 Tainted: G W L syzkaller #0 PREEMPT(full) [ 764.319273][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 764.324482][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 764.334541][ C1] Call Trace: [ 764.337822][ C1] [ 764.340668][ C1] dump_stack_lvl+0xe8/0x150 [ 764.345272][ C1] print_usage_bug+0x28c/0x2e0 [ 764.350136][ C1] valid_state+0xbe/0xf0 [ 764.354398][ C1] mark_lock_irq+0x58/0x380 [ 764.359016][ C1] ? arch_stack_walk+0xfb/0x150 [ 764.363932][ C1] mark_lock+0x117/0x190 [ 764.368214][ C1] __lock_acquire+0x71e/0x2de0 [ 764.373014][ C1] ? check_path+0x21/0x40 [ 764.377378][ C1] ? add_lock_to_list+0xc7/0x100 [ 764.382352][ C1] ? lockdep_unlock+0x5c/0xd0 [ 764.387054][ C1] ? __lock_acquire+0x1511/0x2de0 [ 764.392089][ C1] lock_sync+0xb3/0x130 [ 764.396266][ C1] ? __synchronize_srcu+0xb5/0x2f0 [ 764.401406][ C1] ? __synchronize_srcu+0xb5/0x2f0 [ 764.406534][ C1] __synchronize_srcu+0xc9/0x2f0 [ 764.411574][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 764.417305][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 764.422347][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 764.428166][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 764.433721][ C1] ? synchronize_srcu+0x20a/0x260 [ 764.438942][ C1] wakeup_source_unregister+0x129/0x3f0 [ 764.444586][ C1] mmc_host_classdev_release+0x47/0x100 [ 764.450582][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 764.456748][ C1] device_release+0xc4/0x1f0 [ 764.461439][ C1] kobject_put+0x222/0x550 [ 764.466210][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 764.470988][ C1] call_timer_fn+0x18d/0x5f0 [ 764.475675][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 764.482369][ C1] ? call_timer_fn+0xd5/0x5f0 [ 764.487058][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 764.492203][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 764.497411][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 764.504100][ C1] __run_timer_base+0x652/0x8b0 [ 764.508964][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 764.514435][ C1] ? ktime_get+0x1f5/0x220 [ 764.518855][ C1] ? lapic_next_event+0x11/0x20 [ 764.523714][ C1] run_timer_softirq+0xb7/0x170 [ 764.528573][ C1] handle_softirqs+0x226/0x860 [ 764.533344][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 764.538118][ C1] __irq_exit_rcu+0xcb/0x220 [ 764.542712][ C1] irq_exit_rcu+0x9/0x30 [ 764.546960][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 764.552604][ C1] [ 764.555534][ C1] [ 764.558464][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 764.564448][ C1] RIP: 0010:handle_mm_fault+0x3523/0x3750 [ 764.570176][ C1] Code: 00 00 00 00 65 48 8b 05 b3 f2 76 11 48 3b 84 24 e0 01 00 00 0f 85 ce 00 00 00 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d 88 4c cb 09 cc 45 89 f7 41 89 de 41 83 e6 04 41 83 e7 20 44 89 [ 764.589793][ C1] RSP: 0018:ffffc9000431fac8 EFLAGS: 00000246 [ 764.595876][ C1] RAX: 0000000000000200 RBX: 1ffff110058c5801 RCX: 0000000000080000 [ 764.603858][ C1] RDX: ffffc9000d871000 RSI: 000000000007ffff RDI: 0000000000080000 [ 764.611869][ C1] RBP: 0000000000000014 R08: ffffffff907a647f R09: 1ffffffff20f4c8f [ 764.619866][ C1] R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: dffffc0000000000 [ 764.627890][ C1] R13: ffff8880762b7c80 R14: ffff8880762b7c90 R15: 000020000037a000 [ 764.635901][ C1] __get_user_pages+0x1675/0x2750 [ 764.640969][ C1] populate_vma_page_range+0x2be/0x3c0 [ 764.646449][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 764.653222][ C1] ? down_read+0x2be/0x330 [ 764.657657][ C1] __mm_populate+0x25f/0x390 [ 764.665385][ C1] ? __pfx___mm_populate+0x10/0x10 [ 764.670519][ C1] vm_mmap_pgoff+0x353/0x4e0 [ 764.675121][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 764.680327][ C1] ? rcu_is_watching+0x16/0xb0 [ 764.685102][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 764.689972][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 764.694749][ C1] do_syscall_64+0x166/0x520 [ 764.699384][ C1] ? trace_irq_disable+0x3b/0x140 [ 764.704429][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.710506][ C1] ? clear_bhb_loop+0x70/0xc0 [ 764.715193][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.721179][ C1] RIP: 0033:0x7f1d1159e159 [ 764.725605][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.745218][ C1] RSP: 002b:00007f1d12422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 764.753657][ C1] RAX: ffffffffffffffda RBX: 00007f1d11825fa0 RCX: 00007f1d1159e159 [ 764.761635][ C1] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 764.769617][ C1] RBP: 00007f1d1163506b R08: 0000000000000003 R09: 0000000000001000 [ 764.777615][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 764.785620][ C1] R13: 00007f1d11826038 R14: 00007f1d11825fa0 R15: 00007f1d1194fa48 [ 764.793608][ C1] [ 764.797483][T27027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.799279][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 764.799299][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 27050, name: syz.4.9188 [ 764.799316][ C1] preempt_count: 100, expected: 0 [ 764.799327][ C1] RCU nest depth: 0, expected: 0 [ 764.799338][ C1] INFO: lockdep is turned off. [ 764.799345][ C1] Preemption disabled at: [ 764.799352][ C1] [] handle_softirqs+0xab/0x860 [ 764.799400][ C1] CPU: 1 UID: 0 PID: 27050 Comm: syz.4.9188 Tainted: G W L syzkaller #0 PREEMPT(full) [ 764.799431][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 764.799447][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 764.799460][ C1] Call Trace: [ 764.799469][ C1] [ 764.799477][ C1] dump_stack_lvl+0xe8/0x150 [ 764.799508][ C1] __might_resched+0x36a/0x4c0 [ 764.799539][ C1] ? handle_softirqs+0xab/0x860 [ 764.799568][ C1] __synchronize_srcu+0x1a1/0x2f0 [ 764.799591][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 764.799611][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 764.799646][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 764.799672][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 764.799695][ C1] ? synchronize_srcu+0x20a/0x260 [ 764.799718][ C1] wakeup_source_unregister+0x129/0x3f0 [ 764.799744][ C1] mmc_host_classdev_release+0x47/0x100 [ 764.799771][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 764.799796][ C1] device_release+0xc4/0x1f0 [ 764.799826][ C1] kobject_put+0x222/0x550 [ 764.799846][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 764.799875][ C1] call_timer_fn+0x18d/0x5f0 [ 764.799900][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 764.799934][ C1] ? call_timer_fn+0xd5/0x5f0 [ 764.799957][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 764.799988][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 764.800014][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 764.800054][ C1] __run_timer_base+0x652/0x8b0 [ 764.800083][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 764.800109][ C1] ? ktime_get+0x1f5/0x220 [ 764.800131][ C1] ? lapic_next_event+0x11/0x20 [ 764.800156][ C1] run_timer_softirq+0xb7/0x170 [ 764.800183][ C1] handle_softirqs+0x226/0x860 [ 764.800212][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 764.800241][ C1] __irq_exit_rcu+0xcb/0x220 [ 764.800270][ C1] irq_exit_rcu+0x9/0x30 [ 764.800296][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 764.800325][ C1] [ 764.800333][ C1] [ 764.800343][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 764.800367][ C1] RIP: 0010:handle_mm_fault+0x3523/0x3750 [ 764.800399][ C1] Code: 00 00 00 00 65 48 8b 05 b3 f2 76 11 48 3b 84 24 e0 01 00 00 0f 85 ce 00 00 00 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d 88 4c cb 09 cc 45 89 f7 41 89 de 41 83 e6 04 41 83 e7 20 44 89 [ 764.800420][ C1] RSP: 0018:ffffc9000431fac8 EFLAGS: 00000246 [ 764.800449][ C1] RAX: 0000000000000200 RBX: 1ffff110058c5801 RCX: 0000000000080000 [ 764.800465][ C1] RDX: ffffc9000d871000 RSI: 000000000007ffff RDI: 0000000000080000 [ 764.800481][ C1] RBP: 0000000000000014 R08: ffffffff907a647f R09: 1ffffffff20f4c8f [ 764.800497][ C1] R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: dffffc0000000000 [ 764.800514][ C1] R13: ffff8880762b7c80 R14: ffff8880762b7c90 R15: 000020000037a000 [ 764.800539][ C1] __get_user_pages+0x1675/0x2750 [ 764.800580][ C1] populate_vma_page_range+0x2be/0x3c0 [ 764.800610][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 764.800640][ C1] ? down_read+0x2be/0x330 [ 764.800674][ C1] __mm_populate+0x25f/0x390 [ 764.800702][ C1] ? __pfx___mm_populate+0x10/0x10 [ 764.800732][ C1] vm_mmap_pgoff+0x353/0x4e0 [ 764.800761][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 764.800787][ C1] ? rcu_is_watching+0x16/0xb0 [ 764.800815][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 764.800845][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 764.800870][ C1] do_syscall_64+0x166/0x520 [ 764.800899][ C1] ? trace_irq_disable+0x3b/0x140 [ 764.800922][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.800943][ C1] ? clear_bhb_loop+0x70/0xc0 [ 764.800967][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.800989][ C1] RIP: 0033:0x7f1d1159e159 [ 764.801008][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.801027][ C1] RSP: 002b:00007f1d12422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 764.801048][ C1] RAX: ffffffffffffffda RBX: 00007f1d11825fa0 RCX: 00007f1d1159e159 [ 764.801065][ C1] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 764.801080][ C1] RBP: 00007f1d1163506b R08: 0000000000000003 R09: 0000000000001000 [ 764.801096][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 764.801111][ C1] R13: 00007f1d11826038 R14: 00007f1d11825fa0 R15: 00007f1d1194fa48 [ 764.801135][ C1] [ 764.801164][ C1] ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc90004318000, but annotated. [ 764.801808][ C1] ------------[ cut here ]------------ [ 764.801818][ C1] 1 [ 764.801825][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz.4.9188/27050 [ 765.316307][ C1] Modules linked in: [ 765.320219][ C1] CPU: 1 UID: 0 PID: 27050 Comm: syz.4.9188 Tainted: G W L syzkaller #0 PREEMPT(full) [ 765.331164][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 765.336468][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 765.346529][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 765.352439][ C1] Code: cc cc cc 41 ff c7 44 89 3d 89 3e e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd a0 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 a9 6d 0a 3b 05 9f [ 765.372066][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 765.378144][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 7b837efa79d30600 [ 765.386124][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 765.394098][ C1] RBP: ffff88807d260020 R08: 0000000000000100 R09: 1ffffffff1ed22ec [ 765.402075][ C1] R10: dffffc0000000000 R11: fffffbfff1ed22ed R12: 1ffff9200014314c [ 765.410141][ C1] R13: ffff88802fc1a150 R14: dffffc0000000000 R15: 0000000000000001 [ 765.418127][ C1] FS: 00007f1d124226c0(0000) GS:ffff888124dc7000(0000) knlGS:0000000000000000 [ 765.427061][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 765.433655][ C1] CR2: 0000001b34022ff8 CR3: 000000007232e000 CR4: 00000000003526f0 [ 765.441641][ C1] Call Trace: [ 765.444927][ C1] [ 765.447783][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 765.453347][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 765.458381][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 765.463932][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 765.468983][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 765.474799][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 765.480354][ C1] ? synchronize_srcu+0x20a/0x260 [ 765.485385][ C1] wakeup_source_unregister+0x129/0x3f0 [ 765.490961][ C1] mmc_host_classdev_release+0x47/0x100 [ 765.496517][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 765.502689][ C1] device_release+0xc4/0x1f0 [ 765.507292][ C1] kobject_put+0x222/0x550 [ 765.511713][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 765.516597][ C1] call_timer_fn+0x18d/0x5f0 [ 765.521198][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 765.527886][ C1] ? call_timer_fn+0xd5/0x5f0 [ 765.532573][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 765.537703][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 765.543089][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 765.549780][ C1] __run_timer_base+0x652/0x8b0 [ 765.554669][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 765.560048][ C1] ? ktime_get+0x1f5/0x220 [ 765.564476][ C1] ? lapic_next_event+0x11/0x20 [ 765.569346][ C1] run_timer_softirq+0xb7/0x170 [ 765.574216][ C1] handle_softirqs+0x226/0x860 [ 765.578991][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 765.583765][ C1] __irq_exit_rcu+0xcb/0x220 [ 765.588372][ C1] irq_exit_rcu+0x9/0x30 [ 765.592642][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 765.598287][ C1] [ 765.601222][ C1] [ 765.604155][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 765.610138][ C1] RIP: 0010:handle_mm_fault+0x3523/0x3750 [ 765.615869][ C1] Code: 00 00 00 00 65 48 8b 05 b3 f2 76 11 48 3b 84 24 e0 01 00 00 0f 85 ce 00 00 00 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d 88 4c cb 09 cc 45 89 f7 41 89 de 41 83 e6 04 41 83 e7 20 44 89 [ 765.635484][ C1] RSP: 0018:ffffc9000431fac8 EFLAGS: 00000246 [ 765.641560][ C1] RAX: 0000000000000200 RBX: 1ffff110058c5801 RCX: 0000000000080000 [ 765.649542][ C1] RDX: ffffc9000d871000 RSI: 000000000007ffff RDI: 0000000000080000 [ 765.657559][ C1] RBP: 0000000000000014 R08: ffffffff907a647f R09: 1ffffffff20f4c8f [ 765.665540][ C1] R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: dffffc0000000000 [ 765.673518][ C1] R13: ffff8880762b7c80 R14: ffff8880762b7c90 R15: 000020000037a000 [ 765.681523][ C1] __get_user_pages+0x1675/0x2750 [ 765.686574][ C1] populate_vma_page_range+0x2be/0x3c0 [ 765.692037][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 765.698025][ C1] ? down_read+0x2be/0x330 [ 765.702461][ C1] __mm_populate+0x25f/0x390 [ 765.707063][ C1] ? __pfx___mm_populate+0x10/0x10 [ 765.712180][ C1] vm_mmap_pgoff+0x353/0x4e0 [ 765.716776][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 765.721898][ C1] ? rcu_is_watching+0x16/0xb0 [ 765.726667][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 765.731552][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 765.736327][ C1] do_syscall_64+0x166/0x520 [ 765.740925][ C1] ? trace_irq_disable+0x3b/0x140 [ 765.745956][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.752030][ C1] ? clear_bhb_loop+0x70/0xc0 [ 765.756718][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.762653][ C1] RIP: 0033:0x7f1d1159e159 [ 765.767079][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.786865][ C1] RSP: 002b:00007f1d12422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 765.795377][ C1] RAX: ffffffffffffffda RBX: 00007f1d11825fa0 RCX: 00007f1d1159e159 [ 765.803457][ C1] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 765.811463][ C1] RBP: 00007f1d1163506b R08: 0000000000000003 R09: 0000000000001000 [ 765.819457][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 765.827453][ C1] R13: 00007f1d11826038 R14: 00007f1d11825fa0 R15: 00007f1d1194fa48 [ 765.835448][ C1] [ 765.838481][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 765.845794][ C1] CPU: 1 UID: 0 PID: 27050 Comm: syz.4.9188 Tainted: G W L syzkaller #0 PREEMPT(full) [ 765.856769][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 765.861974][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 765.872146][ C1] Call Trace: [ 765.875434][ C1] [ 765.878380][ C1] vpanic+0x56d/0xa60 [ 765.882386][ C1] ? __pfx__printk+0x10/0x10 [ 765.886986][ C1] ? __pfx_vpanic+0x10/0x10 [ 765.891519][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 765.897122][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 765.902338][ C1] panic+0xc5/0xd0 [ 765.906086][ C1] ? __pfx_panic+0x10/0x10 [ 765.910635][ C1] __warn+0x315/0x4c0 [ 765.914641][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 765.919956][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 765.925291][ C1] __report_bug+0x276/0x570 [ 765.929897][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 765.935219][ C1] ? __pfx___report_bug+0x10/0x10 [ 765.940355][ C1] ? __wake_up_klogd+0xf0/0x130 [ 765.945320][ C1] ? vprintk_emit+0x4ee/0x560 [ 765.950109][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 765.955233][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 765.960531][ C1] report_bug+0x16b/0x220 [ 765.964874][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 765.970270][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 765.975742][ C1] handle_bug+0x9c/0x200 [ 765.979991][ C1] exc_invalid_op+0x1a/0x50 [ 765.984516][ C1] asm_exc_invalid_op+0x1a/0x20 [ 765.989437][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 765.995383][ C1] Code: cc cc cc 41 ff c7 44 89 3d 89 3e e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 cd a0 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 a1 a9 6d 0a 3b 05 9f [ 766.015024][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 766.021127][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: 7b837efa79d30600 [ 766.029200][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 766.037188][ C1] RBP: ffff88807d260020 R08: 0000000000000100 R09: 1ffffffff1ed22ec [ 766.045256][ C1] R10: dffffc0000000000 R11: fffffbfff1ed22ed R12: 1ffff9200014314c [ 766.053244][ C1] R13: ffff88802fc1a150 R14: dffffc0000000000 R15: 0000000000000001 [ 766.061256][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 766.066575][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 766.072224][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 766.077266][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 766.082824][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 766.087869][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 766.093691][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 766.099251][ C1] ? synchronize_srcu+0x20a/0x260 [ 766.104293][ C1] wakeup_source_unregister+0x129/0x3f0 [ 766.109881][ C1] mmc_host_classdev_release+0x47/0x100 [ 766.115444][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 766.121633][ C1] device_release+0xc4/0x1f0 [ 766.126239][ C1] kobject_put+0x222/0x550 [ 766.130672][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 766.135452][ C1] call_timer_fn+0x18d/0x5f0 [ 766.140053][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 766.147184][ C1] ? call_timer_fn+0xd5/0x5f0 [ 766.151893][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 766.157121][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 766.162333][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 766.169024][ C1] __run_timer_base+0x652/0x8b0 [ 766.173901][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 766.179641][ C1] ? ktime_get+0x1f5/0x220 [ 766.184089][ C1] ? lapic_next_event+0x11/0x20 [ 766.188957][ C1] run_timer_softirq+0xb7/0x170 [ 766.193816][ C1] handle_softirqs+0x226/0x860 [ 766.198613][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 766.203386][ C1] __irq_exit_rcu+0xcb/0x220 [ 766.207983][ C1] irq_exit_rcu+0x9/0x30 [ 766.212235][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 766.217882][ C1] [ 766.220852][ C1] [ 766.223785][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 766.229769][ C1] RIP: 0010:handle_mm_fault+0x3523/0x3750 [ 766.235503][ C1] Code: 00 00 00 00 65 48 8b 05 b3 f2 76 11 48 3b 84 24 e0 01 00 00 0f 85 ce 00 00 00 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d 88 4c cb 09 cc 45 89 f7 41 89 de 41 83 e6 04 41 83 e7 20 44 89 [ 766.255117][ C1] RSP: 0018:ffffc9000431fac8 EFLAGS: 00000246 [ 766.261200][ C1] RAX: 0000000000000200 RBX: 1ffff110058c5801 RCX: 0000000000080000 [ 766.269192][ C1] RDX: ffffc9000d871000 RSI: 000000000007ffff RDI: 0000000000080000 [ 766.277263][ C1] RBP: 0000000000000014 R08: ffffffff907a647f R09: 1ffffffff20f4c8f [ 766.285245][ C1] R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: dffffc0000000000 [ 766.293248][ C1] R13: ffff8880762b7c80 R14: ffff8880762b7c90 R15: 000020000037a000 [ 766.301251][ C1] __get_user_pages+0x1675/0x2750 [ 766.306302][ C1] populate_vma_page_range+0x2be/0x3c0 [ 766.311777][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 766.317778][ C1] ? down_read+0x2be/0x330 [ 766.322210][ C1] __mm_populate+0x25f/0x390 [ 766.326810][ C1] ? __pfx___mm_populate+0x10/0x10 [ 766.331935][ C1] vm_mmap_pgoff+0x353/0x4e0 [ 766.336535][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 766.341809][ C1] ? rcu_is_watching+0x16/0xb0 [ 766.346587][ C1] ? ksys_mmap_pgoff+0xf3/0x760 [ 766.351461][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 766.356245][ C1] do_syscall_64+0x166/0x520 [ 766.361150][ C1] ? trace_irq_disable+0x3b/0x140 [ 766.366284][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.372545][ C1] ? clear_bhb_loop+0x70/0xc0 [ 766.377236][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.383141][ C1] RIP: 0033:0x7f1d1159e159 [ 766.387569][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.407195][ C1] RSP: 002b:00007f1d12422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 766.415734][ C1] RAX: ffffffffffffffda RBX: 00007f1d11825fa0 RCX: 00007f1d1159e159 [ 766.423736][ C1] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 766.431727][ C1] RBP: 00007f1d1163506b R08: 0000000000000003 R09: 0000000000001000 [ 766.439716][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 766.447727][ C1] R13: 00007f1d11826038 R14: 00007f1d11825fa0 R15: 00007f1d1194fa48 [ 766.455716][ C1] [ 766.459020][ C1] Kernel Offset: disabled [ 766.463372][ C1] Rebooting in 86400 seconds..