last executing test programs: 1m28.063524418s ago: executing program 3 (id=990): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000008}) close(r0) 1m27.801535781s ago: executing program 3 (id=991): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x24040800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r2}, 0x10) 1m27.73816781s ago: executing program 3 (id=993): ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000200)={{@any, 0xffffffff}, 0x0, 0x2, 0x1}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f00000000c0)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) 1m27.659961643s ago: executing program 3 (id=994): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 1m26.732422151s ago: executing program 3 (id=1006): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r1, 0x1, {}, 0x1f9}, 0x18) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0x2}, 0x18) 1m26.431791033s ago: executing program 3 (id=1009): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x20101) r1 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9000001c}) epoll_pwait2(r1, &(0x7f000001fb80)=[{}], 0x1, 0x0, 0x0, 0x0) 1m26.206308064s ago: executing program 32 (id=1009): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x20101) r1 = epoll_create(0xff9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9000001c}) epoll_pwait2(r1, &(0x7f000001fb80)=[{}], 0x1, 0x0, 0x0, 0x0) 4.559706335s ago: executing program 0 (id=1946): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x2, @local, 0x6}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000080)=0x11, 0x7fff) 4.379069193s ago: executing program 0 (id=1950): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) tee(r0, r2, 0xffffbffffffffc01, 0x0) tee(r0, r2, 0x5ffffffffff, 0x0) 3.392000461s ago: executing program 0 (id=1965): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) 3.284657608s ago: executing program 0 (id=1966): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$tipc(r0, &(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x10) 2.889920486s ago: executing program 0 (id=1971): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x0, 0x18, 0xf, "ee4ef9677ff3f932698ca9fd6e8aee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.763262596s ago: executing program 5 (id=1973): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e0000002000000000000000000000000000000000000000095eced4778f5641200000010000000000a00200062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000003000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2.649045935s ago: executing program 5 (id=1974): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.331439251s ago: executing program 5 (id=1980): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="7c60933a88d76a2979d19b1a47363b838482a15ae1ca46df7c8f814e6f323fe97147d94c37aa14d23af92584e955bf5ea604da1371ebeaabf79f6229a064fddfd40bb55b6fc2ecccd91b7d7be714f4937db04551c462bff3ec4a191aca744d2792a717c814a88fe5e7127c330d2ce063c5ace17455db94d1096bdbaba282ab0eec92a2fbe9939807c200405341a0f8ff71dad41cb475531f48647a876cb61cd4897cec082383e4f465d2788597503edf9ed5ffb2113a2aead5ca76451f88699d46132a2cb30f1144d25c248f45c91f8fc4ae359f80d83af6966ccfe642a6581d3e3d66d5acbf1cf57ede53788786821526175b67c0f43de5058211ec7c59fc7f1684d816d84649915d1f9ef40edd517e32ae9e20f1d82065111ff318badea5b9af137f4d15eb2cd861525a297df3a048a5e17536212fd5648c76048f2490597ab08f79f003ef52a34cd37fb72922757188de4e1883695c8a600c88c3f83eda0799439ef7f8f3ff30d26c60c528bb5b14018179e0290fa0bc5510697b07ef514bce316a1f101286472fc464c24eae6a265b63b98472f5d669bbb5dd82925f45246c453e5f66184f69047af37a12733117e6b7dc663a8aa2e2fdec59dee998f1794aafa4a56d312b3f7820d43c78cac7b3fee7312e028fa571ecea92d3db79b185c697833e18ebdeb1a1b7d48633dc6ea78cefd74a1399d8a8362879c2416e6850b483057807d080d9ad61cd1b3d3eedfcae780315c1b5c0735f4655f732b4dd8ba55cf84d29c9c6d06f3020e7042b209de37e51a7d17a930b834f98a4805e4ee18db264a63dd0c0949d6ad332ee9ec915a1e5d1dd649ad09022023792a7a59ff1d21c18d6efed92d65cfc27d0f953c35e8a3b9d7fc23ed37bc054bbd0f867a5cc5cdacdb08b3ee2dab67b9552d0c64df74fa945db0afabd7de792ee04264c8d3f3210be29465fc2af853830c59687f3c2d5b29602c1260b3cb31e95beee609ac3bffd7ff00fc97089f5791f670bc9fbb7252c24f981010235aa54cb77be24d9b345a1e21ac19b9667712d3dd474d478235f9ab438b36b0b27151c3f403c50b0f82379f8fbcef88e3d7bafad1112804d0726b43617b332bb55a323a6eda3a7db340fd9a5b625d2f992d084d59bc05144a239dafb782663bf5d3d3f17628e5c495fdb4953fe67ed7011ead6c7202b037374000000009a7ab5c617ae57508ceb1ee09a79fca924ae2c2db0c1f64570f823d29f703d09af1053a3f55014e1af9f0c72710a88b26bee1735cd1b7d38c499b04aadd211efdf60a26e51bb0ab9e22a40fe86c99a48cb5c9e0a506649fc269bbe161e80294192a3ea22bc0dfb4804708e8d0573a98ef6c056dea914e3bd7a49759b4438dda9ffaf86c6995ef526565c15cae88f4b340c074932fa0f161a25294b3417ff2555109705521c4fafd034b9f9e5689efa1a5003d510a1099652b46e6797af00e0328670db8b29d48e96a904f998b7ca59a348de713476785f1fb76b5ad91b4107a745ca43e67c6257b11571d70a39bd1913640514611511c54a3efc03d54fb29467973f95a7396498088e935428f8fe6021f61b536227e4c9958e7ae8cc599d8fbe5fe4218c7405b828fa4e84c92e98be66d375e1c3d31537180cd03cf0f0c3b1592dfefa9b8466bffe96127a3dfc12784ebf9ff440d824eef957ac3fe1e457a6fee39cedc00c87f9f1bcc68c91333656192f2479461ee3def59bc7cf19c8a2f36bcdca3c173264e5dc251f15d27612e869e8e18a3c412fb1c6eda45364732e6b552fca8530c4e8143d67b3697d45d5286cb5d2478a8a4d144657277bce97fea1bc405c40892e37c785b24e3126942ff0effcf6fad105493b9960a5bb1fc4dbc4dba44b141c8841ef1e44901f9f7bfe5cc942dc31b514ba36cb858d9537a5eef5cd7f6f2c2a7e5452029aeff5274f47ad6360257d1156e776ab89dc9a7adc2e151454b171f785ced26d3c69aef8a6fe53b4915977f11049a1787a3ef0bda32a10e4ca92d31e02eb77c575562f173943c119479d10e4714b86ea0209877326163813c974650cee30757ae5758dd95be001cbad0fca9d8102cd6aeae0982c017040052983c76e9733c58e94a739402451555e59e5ff0932b09ca975d66ac3a48701c7c98b4fdbf84ce894f02da3da2e0d7737b2cdd4d5970e003bd925c987fd6e17ba109ff50398869519b6e6b48141408d977d973ae99e12f541ce28ea765f72d9f09e82bd9430fa7092f67570a4af1010d0e2ed7d0e2c9f5c15488fc5369fa1546c61472e4e05c38b6a857e73fdd59f0946d0547fce3415a606700286a5272f7933d33bb1a7e5e57e20af8374524436d25df2c6e5e76fe5ee89d89643c939ada6997fd53ff45368fab6e952482a7bbc3e75e9dff4e830c836b6c2792b7ecaceab5959dd454a490a54147e56327f7187382e2e1cd78df1b7c603f4cd42e776eb9f60b0ce9c3ea3392bc7b86ea9c7c4bfd7137b0a469b83ce4cd25ed1972904d5ab825d5380846ff1ae33bbf01366d61cd6c067becb2800e6463f40300f8731d50c5ad39f8de05d9100bc0265b6fcbe548747df89e614e7767b30e086007c2435ac5b62b9ae6d4d83ee1a61e4fa608848dbc1d229bfffc3e1c05d364adae3d21b653f9a671e42f740dcc3c8b10c0a0bc70d093fa8d2b99b1a09e391004c0afc765b4aa210dead05fb9a5955a2291bd4181e752ace0db6f1217fdfc56aa2392d081176a907e26d295f03321af736bec89577e975b18b53af8a3480447e8aed18718abde41609723d82cad1a5b7a17ac578310b7fd6ee9c31bfb5def019d00eae869b8ddf9f135c5cc325026da2c6e8e5ca9f30b928c0ac884409f7b8502c4df1d5a4a1a64f294987fb94c2288de8d16dc6eef3206d38f2d0f5dcb13d43633a7d0e2f9f35cdcab95975602cb5ce0a6b6833a0b96a9d3c0fe32afbea9d9a92b86dfe5ab1caa7f77d47ac0410d81ac624ce7993054061c2e01dea2c64f0cba89ee88a0fa54c2204b74cab75b08bd92409f1cb5f170c6e3db551f77bb5e892380a7923821da934ac6a3f3133c0ca45828e4b890ed8e1ddfa7cc0fa3d69823f18888dae08bdf8e7633db061b47555360f51493ed9f46426150e0d85744cc1df2dd55f1c02d831a4ff90173af5b9feb77c5f8d21b75a1264e53d87e3893bd32c5cc8aa3fac0547307ed481b0df6561656b144580e48e53c58783424a4cfe99b06cff968c641f05f91c141483fa9bf94ed2a70a2f4a8e809a375a11bdb1563b540bb3a0181f48d165b781fc250a5a076fc2d4c1b63d5ebc0c5bbb711f7955faf7b581560793508806dbdf490ef1b358476157784412d6bb11427b4c937e63e17044cbfa79fcf159c1e632d2cc1de85404327ebbbf4b7763184a059d92ebb6e19a6156defea425b79a4f9a4651b47d1b9f8ff65e016b62a78f4893e0bb621446cac2a6c3f7e57092904a47ffae159e4d7ca0a0d06970dae6b7e7261f70beeac02f19e26caf7e745c82690c4fe9483dfdceea399d6d254181035d9baa211e87b94bc178d6e86b5a6bf012ea39223ddeddfc4731e0c8b5d6d454e76ff6018fa5d0039f991d56f78d953633b0e2457c67f5d06f35940d75dad0904dcb9e48033f1a833beb1994ed2fa58a0d75dddc8e570eddcfd12bd2239f1ec001e940b203fa73d87e715a5d431dfed069b7df9b4bf6374c7848b26424fbb5f75c8494532c1ce6b825e55aca77e056a7f0ca42b291e96d1d5e92b3b628ae7d5a2bb73eaf8deb5f80452ed1a47afebfa084eb06c9897eb70ec3f4aa32c5413b5118ae57fcf5b9b236099f0d8f3fe5cb3a2f0def902057fd26d2557168322c13066af51b882be00ebcfdeb6e33d294214ac4e4390b2bbec78be29938ba03ca9f31cf36d8645d1f8bcf752d6d9ccddde2e8cd3bd90d01e5c14d37666dd2e5768bbf1df585d5e0e986adbe379197d1aa77e4dbdf55e9d7f64a5bb4ab44403657913e4723a6ce5196e5a67ed0206406940202f697e2c80dd0efff938ac79458661761846ba57911d7d86bd09d94839920176460deedc3f13feb96e28554ab01cc95bc9764bf7527b0153c45955cc7e71f97ae452f2c9e8277ab66535d3f6c87283791fbfc7de2cab1313e821613b0db320985c9ee8b0066ca4a1b8da0ea43c3f453b9983a6d5cd01dcf40149fd4f441b7f593987a05cf41088f6e474c1a5a23be48adaa73d8e90a1c4857e7b88743345014670a9c74d748765872d447f00cc6be4b03e5253b1709d0e47e2532347e0bb748bbd05f2d3765c881325fbdc04d582ff128b38fe29c04e75554dd82ae6c81fb15d93cbe96563e50c46d65a65eb00890953714f5c1c198566ba6de1db794297f948f0c315d433b77d867a9db6cca86241cbb4db80fb9b1782b5bf0a57401b79644f45ecb9d8642c6aeacbfb70d8b8429c5e867ff780a19e8cd80cc153636f17e338b8c069a54829c8ae6cd9361fb10ea5eb231811a45336fa650f060d21c481580456ecacea8b5ee5050fe84ff5463df2d7d5d475fe65da9e848ecf65769dae6da4b7977d5b95307694889c703f8eff6ae51182dcd32ec27c1b453a216913a79653977ec256ad37739a6e99b6fb0f2b2aa3f1f494c01c2a7f79da0a6ec6a0a855fd0efebeec595c1dea772d064f9c046096069285c22f117ff8bd16c4d003323692036a22002f3020d28a94eeae09894017fce5747c1374c0dc158d4d930452ada5a1c4d00ed805fe14d4016d7bb5ec9b064c5e595bb63c6474d94167839a8680de9f726c5119e73c563c15d775a78425562eae4a07d70c8746de4514fde36fc0ea1c7bce94f016444812c11556d8d82bc7aae33d4eceb684208b6eef7679012ec5549144a2716226f3adab8f52b835f7704b11443df808d5921ee920899757b438d5c4a0b50264840cace40a159356fa271b039edfc696844afdde58fea1787a5f38044cc50a9978d1412930f9dba720b6036f4cff01b04b5bcbcfd4b4be2fc37742eaa4ab2cc0dc3843d8beaaf5f5e3ef70a5c48bfe26502f34647c4a6b0b6daa2db6ef89d2b808647d7ecc671be7cd014940e8c2b1e3b59f4e031921f30adfc0c1b432e8f388fbee20948e19fee912dbf7f57650abd65de07807495e273a78481c3f21dfb83e5f8a60b5564d0699a90c079dac2caf8f4c8a3e56fcaf9568d1b9120803adecd3435d9134201576ecb332296897e81a56c0b229ee3a57fec2212c9ac0c771064c3cfece323b97e8cacce390d58cefca0417d5fdf4eb9acc1c754d5d04e9b85a62e3a19d8fb1e8dc23b63ab8dd4552439f3c90ce0047792d769fa2e784a8d7098f34f11423ee1a0d47639d7759b8affbf50e77e74e4af57b33ab87a2b049c84de6c55b341bc51ae2a107995bc8d91a75cb455af7b95f5c49539aab76fdf159bc64bad8bba493fb49c5e08f2cfa8a0e4c5ec35dae9ed7e01eb24b54701ba7960a258e2428f50e185d1dbed1b566845f136302d5f88f5b3eb244e611caa6e1cfacc9b0c51d7e56d56297c08edaa1f150e138370ca12595598f4d2bbc7639adcb6cc051c71f2d04f638d570deae96842712bdbf68daeec73478148254f709776ffe187ba4b38769f04489d87d7af42c7dad6ab1064035c5c61e69a95c660d3696c6f66a43fbd57a931ee172a3eba71cc0b4d1a9c1f6a28d95489d0dc2a67772457897d74f51e3672051593e3a9624c3778d9dbfb05ff3aa672b3c1cb83ebbfc3a0212f8bc1366a0f32b62a3f698f6ee31d12388d43464955c72a6e9ed5dfc7deb7f09c7f23f01dee2b3437ab5af05ddc7f030afb8b714a34573b425288379bf84a7b5200476df88b3874f785ec3cd1aa946558159f3fdb9cc481094f1bc6a01a11fef9b56bea73a5124a62456b79f22dfe60ce8e53989c8b1d0c031ee35ba2bd408f99ca48b6d9ca1414c5e750d5efc5fbf225fafda284ef80118964292d18f77a01eabdffd68f8c62d8af07a5a6d5a23464c08e3bbfce5912abcc1f4acacc3d4bc0cf511cb9682dc5fc775a0fa0229d6260370989ae8850ffbf0aa94bbef450994083f4b0616c7f481fbcf373b4e6f8cac4949f13d9c3b55e27275c8fb6d95d9b3ca9c7df28b8b8331e81fbd8dbb9bb63e19f8f6a10ef16d1fa0b000fb72af4894b4d51663e65d717028d192ca935ec17aabaa8602867afc5942f6624a57ecd7572521c3eca53ea09cd7519c724c19ab89b63d1752c1c503e732c72b0f0d8558900ba0c575b918ac6d4fa9e0ca8584876c654a83000df383a4cf41ab54b8f8df44a0e59499dd850277c14f6ee8bfc86822dc473b33634dbb638ca0de90a4e506854d468894d8409c15bfea5ba91720a2daa2e4946f5897bb0b03accb214c3d06ecf711166202d24828fb4b9c96ae0db50ce319a64750e002198b73ebda97dd96a677da9fb59feecde57ccf492b300667b743611a29dd4b30190450c640b2ae5da517edfd88a78c8fdfbaeff0bd17eb334464c0dcb3b851a9fcdb4485bac45262bc985de4cc2ba2005e82549ba80833641a4e86cbb8e18b960e8deb880a3cd8c75941fb0c6969a6cc55977d9c970dcf7a7506e581c795fc59dca99f80486e761bce7262407df3b4f0769b295011fd4f568c18efe53a1b058b43472d07ed4860f38124678994def0a6c72f84f0b12280e91ff4699ca93d12f8c6ace9d2e89844602d52d0ce1acc16d4faebeb649bab4e3b5c16973a765e9488acaab196b5aac840826609934b99a9cc513f6a546a542c2313c5ec5a902ab4a3186ae97156b27216aea9879503d402314e7800714ad6e78cb8f627a4c80497efd68bbf522aaab7b68653236e73229378cb198ebb33aae5e4a9adfb99fa6e38b74ca1af9cad80ec974039769c633694b161628c3e97e49a78762d30f8cd513b9df0f917107afd11d77c59898ce270e60d91ddb526c679b98500934338a8a4bf994ecb6078fa2ce773350184d81d431a5e31fc672d4be414b435b779135f7f60d4a1269c24d2c135d41b613f43db878c85a414e9e79b4c09ebaf3bba6a000fdb59f9cd91cf589e09d81e41b84641d7edafd018396c2f0243de265a6a238fdfd00e07c206ea6220f3de46fcdc10939efb01c8569b8c1c3a3224b5dcf909a13f1d5e8ba2eabf1d533360c3f96a8628152d3c7467c9c2312f2aa4e2f5e4cb08519f75cdff4691263fed7cca0f8ebc7d0890adafb0d758794b4d82696ae782b70addae7c67d4bff760a1c2ebbab45dacccb651b2883e464aab45f98a69efbded5338ae4ce54e66c6657b40f040ccf698bc1f111ac04242508164c92add63b35a3db0ff11f29405d964c76e9cfe90dbd035249f443ecc2d80d5602bd805de38907efd1729767211e19e56c15c939c353ef18fbf56f5b2443d16354022a22ce835572d8b039face4147403633daa3823c3b6dc20f1675a28dd28187edef3d38fdd5e21ba596fa881daa52e024088aae82744d04699311228d7b1878ff726e21627f91a3e58f55e88c48d3db3592d568de891e5e48e00a39be19e4c43553d9613c34b1df3d96e3ab26a759f57f7b3c3ff971f269a51a953e23c646b39836149f50b11914d5861479d03319bdff8630e331c60c73eddd6cc3f041383b598d8055488517fcecc9bf99508bcb1e4a3120ee391ef8487265d66994dade2343717e584fb30abe59cca126ced0847eb2c4e4bd6d5fda67c18a0adc7a0bf59610c98988b3a08ec7130f3cb69be7d7ca0555e92417f25306e79b5a509f68c16ccfe8d8c69967a9f80b87e163d414efda1a9bc2f0f691b64cf58c8b6636dddf9140670d2d0d883401afc51d05445b49b4d7063dbe0c2f7ac63a6b09ce465ef5953b9b99bfa578819716d3565e4fa0d95a2e1266abdada47ece5332dcf9c4ce68ecff1397669db3fbdfa22fdffc39eb665a951d73d7fba0fafe0c02ca69b4ae43b5a251e743df672d3e5c6893c7701042a2366f7e3d9406235993f3ed63c7356651acf17cbf6229bf52d1c895d992378457bf035e3d79b58de436966e2ab4236194ea87ed0745216542866cee8cc92b1abc43b5d4628d9bde4ba674229bb83a9aa15613d102e1b39c12e3ed6095284282452bc0f63557f06aaef97f3a0604f467070a350c8f94a7d37d43c81c6b6f71cd170dcb742515a58baa40fab685a79ea8188f0d6f893d1a1a86b1fcce9fd8353c9602974ca315fd129459b88f6129b5d073435eac7c6fc00ed5da18d27e72ccb0b5e755fedafbd74770772f79930b2f5db8451e1ea004db3f826df026f16dd831a68737476b1d69d4ed46fc48ad14425a455e689d51362d5b445da484950ed2b0943e5d3a1e88afadb66f7e817b778ac049c91875a626ae347c5ef28ca1e104f8cf7f038f5551581e3d6375647777de8ae9854517217887a957527148d8a0438b5958ae7774267bcbb6ebda5f2af12454ae2d8dbaef741ed936bcee0135cd440a83146446ed63b8e279f9a02c64b8bc082b1d31157e86c7cf374af30442c2c6e91a1909289e7f193ef9caaa516a1951b6042ef3407f55b19b28646357ad6f06913466cad44576d39623376fb47f5f21a6492e9b2286bbf26e539815223ddea65635d1e5901b91902e888b8f22d8fa9989bf3373bf95458b57fffe8d5cbae020000004742d77bb799a985b245384cf66ec38175a081fee6d84d13f27409e51bf9fdaa92a596058d280f204ea98fa8468266a5dda479196a2111aebd5638b890d3da16033c6135aa57c97bf3bec417059e1e7d3066a1d094d37b05d33719e62ee392ff7091d02c26375b56a2cdb0d76e3f93dbb4ff256eb43aa281f7fa0525b33d68b0d9bcb4ee5a7787d3a9a51d86b2395b7848113b917230bc4329f89beac3d03b72e7b6e9f2404bbf5cda91dc876246bc391f6107dcfd46bb566b9371a85341e09ba0355de0b340d319c96ff0fd7f9b7e75847ddc5f902f67a109804ecc1e176c20a14d07a8726a167c2d22b272245ad607ade6524b3751d6240a7fa924ab7a0977ab7a8d53ad12598eaaee42b60fa115004d3fd5a81d5f05c8529c43bba0bfceecf640d2e1d00f1de89be887a443232d32945a6b93067b86b1ad7690bb7451e1dc05cb54368de12883a65686eaae6c572cf7ee3cafe8a37da87d62d5a19b1f0691f1a617786ee2a8ebca5e085e0bd239798946a43302da7d369feb1e9d02788378af55e7af698fa1996a0eb27ed1b7daf937331f1fd2a23d77fb74c32dd73e314bb03d6651125606f499706f19d3716990c359cd726dd6c1e670671ce0bf18db472197a36e99b8b579fb5d4284ee9d23b9774e2d9fcd47aba2faddcbc53e28cdc4b9f25417eeb8cf01a3d0cbd98ca0c83f32f935742465dec5ac714fdfe0b5fb679937cd44df27ed81ca21203e400cbcf8abb36fe86d5f99a0c425c4321f23e882ae919743e17f927bc4999135d50452b89f1fac9107b5499f3bbec5710aa6804c8b95138595ef043ea4da063a540f451917fe1facec0de011597104a577bee29e6ecf69f44892282feeb6afcb0f5ea17c3272a5fe51bbf69a60d4432358087dcc1e204c325b12fbccdf2e946420691d611d286f51d17a3e5eefa3c74351accede359968ca779b1d3035c08cc9ccf5bc62b1520efa248e5cda2bb3569dfd6571d9219486f3aac82c63b4213f8b2052f39046460557a83b3aac740182f5c1574efc752c3d8717551a554717647eff9aa015d6f484c647aafbf8f93fba8faac812b0f51beb76c0e4c1b85789f8b1259dee1bc8a013ca8b9b7e59143cc9748020a75d2d099323294179630fb42344ce9e986cff8af1287348219cfb1265b04c4225f305a6c81efc1e3176c2ed31eacbe1ad2d32dee14bd66c140ebe4dffb2b45d87f093a452cdbe459b8bff9b2814478dbe2fde437887534d5b7acb3172508bde4a98bd0453750e6ea49283e7798646863b11268ab352ade2c3a84370ea08b50245232c715efd33fafee4b5768d75afa9d8c5cc7248516df5449b930a6127e9d287ad09c9cb7cddcd7926383312627037defb1fc6c788ce27ffcb4fd2be4203a3caa2e52ef66fe74ad5a5bb268054ad9c518630944c0f2954cc16ca0b443bbc30e551533c45961c4e9e946969598e011358d60ac38e594d81cb32207369b7ca01e410b30100000040147ab656c0b811a3d91fab5ba8616bd4e37340db79616d9b62525f53a2dfe0424ac56cc7ebf150158257ec3b1bec84dae3dee711cd119fc7484664ff23c173c4edde30de8c3fbe715532a3038dbf2c58e660b1c4ce47382f0f6dc175875a06e6c81f135d674854dd97e9b869965b2b570edf514959832cc6d2c6a73a0f4942b221688349aa3e18fa1b5d214c1d4a0a130b5856ba1c053392474695366691e49524335143d671858b4fba20afc81c38d367d9fb7c576a6bed03fd1b6bf8239acaf4defae336dfac2105e8cb557fc7e925a8c448836ad2007b7a861f995fc3ab468502d656d51031799397a361376a257829c948c00756f472ed7a6b90b738217ae47f5360fe8a0abd912a57b9c3b7e8bded887b394c820f5fa04f4ce9e2bfb686292a8aa55a78fb0db03947e31ae98adb3b4404275696ba63c67873d8b2dbd146933a67e0c3f2ae8ee310e778c9ae5cf11d021af9530c6008ce833c3726b600a5bbf614d4099ce5d09c0ff8b29dfba32882c431780eb48b7ad19c90808892795ccdd0cd82332564daf404a58986e6b556c1dfb582fb5e9c9febae027319dc90a69f0bf37ece6392f2c1268a0dbdbade3f10f065c4936250d0230cbf7425d68bdc65ebc174039df0a6ff2988cfbea6055e73384ee5ecece1f14431592a52b3c2e80a5d3ad6f8197bd94146f968ebccb8f0e2180d387ebee3b9269c616ede15389e9f61fd5a23778dd26e0c40321986602046335112a2022ed46077594d28aa01bd63a9affc8df91e60e5d1e498f80c14839cf335cfe017a9e15e04768d7a36382970a5ad5db557a9133ad03b0131005c9c78b3aed1978df4939f967cf6254dee706bd459dab264af3a857adfe498928be418fbd28e3576384823fb629a927e3dededee8b1d6a5fca0dd1bdd8ab6d0c6d5d3bb5e29a93d2edad215903c94af9aaa334f1be42c2b9cff2d28fb18f334534770650cfc2c60693a25f829b1167c4a1a75e244ecd0ce73fe7badb7556d0502d99bcb6341bf82f64c36da7649718005826c6f681f92304e6fc4f667d77755cc6cd40611756dc2bacc31fd67d60facf62dd23345be3aa04493274474c298b16e8a0789add54c58e6591d089783956b45055ff401788f14e2333bd2bccd81412d0aa82ab2c19ce8e7499e7056b435ca4539985734a0ae01290f79faf61f3b865b4b4a9ca968da561f23a537a411ccc13ac5ba14a85bef64f3fae0e0bdcf9e70da55dc2c44f89d263c1a44f18b50ea3a02c073183e9816adf7d841d597931f116e2b325c2908545968b863e520098a295a58d4261d0bd08d1cd77a7eac8a64feb114f231f9e760ec6d84634ebef6d1b24d85fabd72fb15735390c0aec246c909d5c82976110844b5bfde94aadfa6a89396709000a59c71331ea7ece5719057c797d55c0a4d2aa5100", 0x2000, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x3d, 0x58, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @empty}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0xfffe}, {0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x7f, 0x3, 0x1, 0x2, 0x3, 0xfe}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0x2, 0x2, 0x9, 0x1, 0x1, 0x2, 0x3}, 0x2, {0x800, 0x3, 0x2, 0x1e, 0x0, 0x0, 0x2}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 2.324232617s ago: executing program 2 (id=1982): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r0, &(0x7f00000009c0)="fd", 0x1, 0x20000081, &(0x7f0000000000)={0xa, 0x4e23, 0x57bc3377, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/13, 0xd}}], 0x1, 0xf1, 0x0) 2.093816521s ago: executing program 5 (id=1984): io_setup(0x5, &(0x7f0000000240)=0x0) r1 = inotify_init() io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) 2.093616209s ago: executing program 1 (id=1985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x6, 0x0, 0x18, {[@window={0x9, 0x3}, @md5sig={0x13, 0x12, "26736e25c864857deac78120fad33510"}]}}}}}}, 0x4e) 1.959375112s ago: executing program 5 (id=1987): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000840)={0x40, 0x19, 0x6, "76ec7fa112a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000001140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.851617654s ago: executing program 1 (id=1990): socket$inet_mptcp(0x2, 0x1, 0x106) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1.738013887s ago: executing program 4 (id=1991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x400000ca}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 1.666322213s ago: executing program 1 (id=1992): syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x48400) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) write$dsp(r0, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x8) 1.574581189s ago: executing program 4 (id=1993): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f0000000040)) 1.560114029s ago: executing program 4 (id=1994): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) write$cgroup_int(r1, &(0x7f00000003c0)=0x202, 0x12) 1.429230379s ago: executing program 1 (id=1995): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x9, 0xa2000) r1 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000002}) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x6) 1.400338823s ago: executing program 4 (id=1996): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x32120011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1.330993839s ago: executing program 2 (id=1997): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 1.290381171s ago: executing program 1 (id=1998): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="247cfe07", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="15", 0x1}], 0x1}}], 0x2, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) 1.207241335s ago: executing program 1 (id=1999): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200105"], 0x0}) 1.206760107s ago: executing program 2 (id=2000): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89101) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) 1.1104673s ago: executing program 2 (id=2001): socket(0x10, 0x3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000600), 0x101000, 0x0) r0 = syz_io_uring_setup(0x156, &(0x7f00000000c0)={0x0, 0x595f, 0x800, 0x2, 0x51}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.075657749s ago: executing program 2 (id=2002): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0xff, 0x7, 0x8}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000500)={0x2a800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) 1.062217603s ago: executing program 4 (id=2003): r0 = memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futimesat(r0, 0x0, 0x0) 830.976439ms ago: executing program 0 (id=2004): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f00000007c0)={0x40, 0x18, 0x6, "037bbc9e48f7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x1, "e8"}, 0x0, 0x0, 0x0, 0x0}) 69.360546ms ago: executing program 2 (id=2005): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x2, 0xd9, 0xfe, 0x2, 0x0, 0xfc, 0xc, 0x0, 0x3, 0x4, 0x0, 0x0, 0x5}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r1, 0x3321, 0x97c}, 0x10) 69.25526ms ago: executing program 4 (id=2006): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendfile(r2, r1, 0x0, 0x9c) 0s ago: executing program 5 (id=2007): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001140006"], 0x70}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) kernel console output (not intermixed with test programs): terval 0, changing to 7 [ 155.584496][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.584550][ T5710] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.621047][ T5710] usb 1-1: config 0 descriptor?? [ 155.721670][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.878284][ T925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.085711][ T5710] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 156.359702][ T5710] usb 1-1: USB disconnect, device number 10 [ 156.411967][ T8062] syzkaller1: entered promiscuous mode [ 156.412021][ T8062] syzkaller1: entered allmulticast mode [ 156.775235][ T925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.821803][ T8074] input: syz1 as /devices/virtual/input/input17 [ 156.917929][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.267047][ T925] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 157.417818][ T925] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 157.418782][ T925] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.418821][ T925] usb 1-1: config 0 has no interface number 0 [ 157.423530][ T925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.423552][ T925] usb 1-1: Product: syz [ 157.423565][ T925] usb 1-1: Manufacturer: syz [ 157.423577][ T925] usb 1-1: SerialNumber: syz [ 157.433756][ T925] usb 1-1: config 0 descriptor?? [ 157.653709][ T925] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 157.733768][ T925] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 157.734216][ T925] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 157.738590][ T925] usb 1-1: media controller created [ 157.799783][ T925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.814261][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.826545][ T8100] Invalid logical block size (4194304) [ 157.876776][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.095596][ T8115] sctp: [Deprecated]: syz.2.998 (pid 8115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.095596][ T8115] Use struct sctp_sack_info instead [ 158.153052][ T925] usb 1-1: USB disconnect, device number 11 [ 158.619367][ T31] audit: type=1326 audit(1787927139.648:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.2.1004" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f980ec code=0x0 [ 159.255314][ T1007] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.361135][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.375077][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.383082][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.384225][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.385451][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.433421][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.439154][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.439741][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.447996][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.449376][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.592887][ T1007] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.784521][ T1007] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.897129][ T5758] net_ratelimit: 7 callbacks suppressed [ 159.897181][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.943278][ T1007] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.036609][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.481561][ T1007] bridge_slave_1: left allmulticast mode [ 160.481631][ T1007] bridge_slave_1: left promiscuous mode [ 160.482995][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.507464][ T1007] bridge_slave_0: left allmulticast mode [ 160.507493][ T1007] bridge_slave_0: left promiscuous mode [ 160.507731][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.660605][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.674372][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.684566][ T1007] bond0 (unregistering): Released all slaves [ 160.733266][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.735902][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.737624][ T8160] bridge_slave_0: entered allmulticast mode [ 160.741613][ T8160] bridge_slave_0: entered promiscuous mode [ 160.752200][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.752293][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.752434][ T8160] bridge_slave_1: entered allmulticast mode [ 160.756772][ T8160] bridge_slave_1: entered promiscuous mode [ 160.849296][ T8160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.859398][ T8160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.051546][ T8160] team0: Port device team_slave_0 added [ 161.062911][ T8160] team0: Port device team_slave_1 added [ 161.076764][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.145968][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.146007][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.146028][ T8160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.157784][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.157799][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.157822][ T8160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.204622][ T8160] hsr_slave_0: entered promiscuous mode [ 161.205591][ T8160] hsr_slave_1: entered promiscuous mode [ 161.206779][ T8160] debugfs: 'hsr0' already exists in 'hsr' [ 161.206797][ T8160] Cannot create hsr debugfs directory [ 161.332949][ T1007] hsr_slave_0: left promiscuous mode [ 161.339619][ T1007] hsr_slave_1: left promiscuous mode [ 161.340891][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.340927][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.347614][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.347628][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.390276][ T1007] veth1_macvtap: left promiscuous mode [ 161.395936][ T1007] veth0_macvtap: left promiscuous mode [ 161.404238][ T1007] veth1_vlan: left promiscuous mode [ 161.404386][ T1007] veth0_vlan: left promiscuous mode [ 161.476618][ T52] Bluetooth: hci1: command tx timeout [ 161.560610][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.675884][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 161.686824][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 161.717092][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.827164][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 162.092408][ T8160] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.116744][ T1887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.128941][ T8160] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.129751][ T8160] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.155413][ T8160] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.180874][ T8160] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.194254][ T8160] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.202519][ T8160] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.214612][ T8160] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.340514][ T8160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.369298][ T8160] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.378267][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.378390][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.390009][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.390104][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.492095][ T8160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.538571][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 162.549884][ T8160] veth0_vlan: entered promiscuous mode [ 162.561404][ T8160] veth1_vlan: entered promiscuous mode [ 162.600587][ T8160] veth0_macvtap: entered promiscuous mode [ 162.607011][ T8160] veth1_macvtap: entered promiscuous mode [ 162.622195][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.642710][ T8160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.670643][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.738127][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.738862][ T135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.739186][ T135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.785507][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.785553][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.836989][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.837028][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.047089][ T8244] bond1 (unregistering): Released all slaves [ 163.159219][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.221290][ T8256] netlink: 'syz.4.1027': attribute type 13 has an invalid length. [ 163.567189][ T52] Bluetooth: hci1: command tx timeout [ 163.675479][ T2353] pvrusb2: request_firmware fatal error with code=-110 [ 163.686481][ T5709] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 163.705412][ T2353] pvrusb2: Failure uploading firmware1 [ 163.708470][ T2353] pvrusb2: Device initialization was not successful. [ 163.708481][ T2353] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 163.708490][ T2353] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 163.756122][ T5694] pvrusb2: Device being rendered inoperable [ 163.837429][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 163.841439][ T5709] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 163.842777][ T5709] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.842802][ T5709] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.842823][ T5709] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.842845][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.842875][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.851495][ T5709] usb 1-1: config 0 descriptor?? [ 163.992047][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 164.093535][ T5709] usbhid 1-1:0.0: can't add hid device: -71 [ 164.093654][ T5709] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 164.115671][ T5709] usb 1-1: USB disconnect, device number 12 [ 164.175505][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888031e64400: rx timeout, send abort [ 164.199495][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.429954][ T8283] loop8: detected capacity change from 0 to 8 [ 164.452397][ T8283] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 164.458167][ T8283] loop8: partition table partially beyond EOD, truncated [ 164.472224][ T8283] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 164.478100][ T5709] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 164.598411][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.627262][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 164.632530][ T5709] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 164.635958][ T5709] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.635987][ T5709] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.636006][ T5709] usb 1-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.636029][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.636065][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.642424][ T5709] usb 1-1: config 0 descriptor?? [ 164.677486][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888031e64400: abort rx timeout. Force session deactivation [ 164.678151][ T5727] udevd[5727]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 164.833818][ T8298] sctp: [Deprecated]: syz.4.1044 (pid 8298) Use of int in maxseg socket option. [ 164.833818][ T8298] Use struct sctp_assoc_value instead [ 164.879436][ T8296] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1042'. [ 164.879480][ T8296] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1042'. [ 164.879509][ T8296] netlink: 'syz.5.1042': attribute type 5 has an invalid length. [ 164.879523][ T8296] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1042'. [ 165.098078][ T8304] bond1: option ad_user_port_key: invalid value (4096) [ 165.105571][ T8304] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 165.123180][ T8304] bond1 (unregistering): Released all slaves [ 165.188578][ T5709] lenovo 0003:17EF:60EE.0008: item fetching failed at offset 4/6 [ 165.189234][ T5709] lenovo 0003:17EF:60EE.0008: hid_parse failed [ 165.189298][ T5709] lenovo 0003:17EF:60EE.0008: probe with driver lenovo failed with error -22 [ 165.237193][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.301586][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 165.371800][ T8317] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1049'. [ 165.401070][ T5758] usb 1-1: USB disconnect, device number 13 [ 165.636526][ T52] Bluetooth: hci1: command tx timeout [ 166.277500][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.311379][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'. [ 166.424993][ T8363] loop8: detected capacity change from 0 to 7 [ 166.436730][ T8363] Dev loop8: unable to read RDB block 7 [ 166.436787][ T8363] loop8: unable to read partition table [ 166.437004][ T8363] loop8: partition table beyond EOD, truncated [ 166.437028][ T8363] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 167.316696][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.637618][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.716929][ T52] Bluetooth: hci1: command tx timeout [ 167.809732][ T8379] netlink: 'syz.2.1076': attribute type 16 has an invalid length. [ 167.818063][ T8379] netlink: 'syz.2.1076': attribute type 17 has an invalid length. [ 167.833311][ T8379] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 168.357581][ T925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.498336][ T5758] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 168.498871][ T8435] Invalid argument reading file caps for ./file0 [ 168.656462][ T5758] usb 1-1: Using ep0 maxpacket: 32 [ 168.662946][ T5758] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 168.665945][ T8441] loop8: detected capacity change from 0 to 8 [ 168.669956][ T8441] Dev loop8: unable to read RDB block 8 [ 168.669993][ T8441] loop8: unable to read partition table [ 168.671581][ T8441] loop8: partition table beyond EOD, truncated [ 168.671600][ T8441] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 168.685574][ T5758] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 168.685599][ T5758] usb 1-1: config 0 has no interface number 1 [ 168.728511][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.737498][ T5758] usb 1-1: Product: syz [ 168.737519][ T5758] usb 1-1: Manufacturer: syz [ 168.737533][ T5758] usb 1-1: SerialNumber: syz [ 168.795738][ T1888] usb 5-1: [UEAGLE-ATM] firmware is not available [ 168.809849][ T5758] usb 1-1: config 0 descriptor?? [ 168.936995][ T5758] viperboard 1-1:0.61: version 0.00 found at bus 001 address 014 [ 168.996600][ T5758] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 169.010672][ T5758] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 169.097038][ T8452] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1104'. [ 169.176688][ T5758] viperboard 1-1:0.0: version 0.b2 found at bus 001 address 014 [ 169.210238][ T5758] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 169.220123][ T5758] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 169.325460][ T5709] usb 1-1: USB disconnect, device number 14 [ 169.401044][ T1888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.606603][ T5758] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 169.788111][ T5758] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 169.798811][ T5758] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.806966][ T5758] usb 6-1: config 0 has no interface number 0 [ 169.818020][ T5758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.818057][ T5758] usb 6-1: Product: syz [ 169.818088][ T5758] usb 6-1: Manufacturer: syz [ 169.818105][ T5758] usb 6-1: SerialNumber: syz [ 169.843075][ T5758] usb 6-1: config 0 descriptor?? [ 170.046443][ T5618] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.071973][ T5758] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 170.092704][ T8478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.109217][ T5758] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 170.120953][ T5758] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 170.130197][ T5758] usb 6-1: media controller created [ 170.147030][ T5758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.187305][ T1888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 170.208295][ T5618] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 170.209963][ T5618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.210012][ T5618] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.210037][ T5618] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.220741][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.220766][ T5618] usb 2-1: Product: syz [ 170.220779][ T5618] usb 2-1: Manufacturer: syz [ 170.220792][ T5618] usb 2-1: SerialNumber: syz [ 170.251956][ T5618] hub 2-1:1.0: bad descriptor, ignoring hub [ 170.251982][ T5618] hub 2-1:1.0: probe with driver hub failed with error -5 [ 170.347088][ T1888] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 170.360048][ T1888] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 170.382762][ T1888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.382802][ T1888] usb 5-1: Product: syz [ 170.382830][ T1888] usb 5-1: Manufacturer: syz [ 170.382846][ T1888] usb 5-1: SerialNumber: syz [ 170.420409][ T1888] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 170.436922][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.472892][ T8482] bond1: option ad_user_port_key: invalid value (4096) [ 170.490303][ T5618] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 170.492868][ T8482] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 170.504979][ T8482] bond1 (unregistering): Released all slaves [ 170.597219][ T5758] usb 6-1: USB disconnect, device number 2 [ 170.676613][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.798979][ T8490] loop8: detected capacity change from 0 to 8 [ 170.803194][ T8490] Dev loop8: unable to read RDB block 8 [ 170.803235][ T8490] loop8: unable to read partition table [ 170.803442][ T8490] loop8: partition table beyond EOD, truncated [ 170.803459][ T8490] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 170.839614][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.863053][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.887070][ T1888] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 170.899031][ T1888] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 170.912991][ T1888] usb 5-1: media controller created [ 170.944510][ T1888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.989367][ T8467] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 171.081788][ T1888] usb 5-1: USB disconnect, device number 7 [ 171.319143][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.370457][ T5618] usb 2-1: USB disconnect, device number 7 [ 171.375645][ T5618] usblp0: removed [ 171.477198][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.501716][ T8507] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 171.527164][ T1888] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 171.676504][ T1888] usb 6-1: Using ep0 maxpacket: 32 [ 171.677325][ T1888] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 171.678624][ T1888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.697789][ T1888] usb 6-1: config 0 descriptor?? [ 171.713060][ T1888] gspca_main: sq930x-2.14.0 probing 041e:403c [ 171.786453][ T5694] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 171.946909][ T5694] usb 5-1: Using ep0 maxpacket: 32 [ 171.949197][ T5694] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 171.950778][ T5694] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 171.950801][ T5694] usb 5-1: config 0 has no interface number 0 [ 171.950837][ T5694] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.950883][ T5694] usb 5-1: config 0 interface 85 has no altsetting 0 [ 171.953613][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.953634][ T5694] usb 5-1: Product: syz [ 171.953646][ T5694] usb 5-1: Manufacturer: syz [ 171.953728][ T5694] usb 5-1: SerialNumber: syz [ 171.963112][ T5694] usb 5-1: config 0 descriptor?? [ 172.516689][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.611121][ T5694] appletouch 5-1:0.85: Geyser mode initialized. [ 172.623740][ T5694] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input18 [ 172.735660][ T1888] gspca_sq930x: ucbus_write failed -71 [ 172.735752][ T1888] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 172.742157][ T1888] usb 6-1: USB disconnect, device number 3 [ 172.869698][ T5693] usb 5-1: USB disconnect, device number 8 [ 172.875656][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 172.962384][ T5693] appletouch 5-1:0.85: input: appletouch disconnected [ 173.186573][ T1888] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 173.286466][ T5710] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 173.349285][ T1888] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 173.351298][ T1888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 173.351325][ T1888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.351366][ T1888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.370427][ T1888] usb 1-1: config 0 descriptor?? [ 173.397476][ T8569] loop8: detected capacity change from 0 to 8 [ 173.404377][ T8569] Dev loop8: unable to read RDB block 8 [ 173.404446][ T8569] loop8: unable to read partition table [ 173.404661][ T8569] loop8: partition table beyond EOD, truncated [ 173.404721][ T8569] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 173.450238][ T5710] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 173.460753][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 173.460812][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.460836][ T5710] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 173.460894][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.529257][ T5710] usb 2-1: config 0 descriptor?? [ 173.557676][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.723431][ T5618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.844511][ T1888] aquacomputer_d5next 0003:0C70:F0B6.0009: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 173.995954][ T5710] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 174.005288][ T5710] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 174.013617][ T5710] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 174.014198][ T5710] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 174.014231][ T5710] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 174.014259][ T5710] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 174.014286][ T5710] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 174.014313][ T5710] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 174.014341][ T5710] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 174.014367][ T5710] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 174.086212][ T5710] hid-multitouch 0003:0457:07DA.000A: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 174.151381][ T5693] usb 1-1: USB disconnect, device number 15 [ 174.212706][ T5710] usb 2-1: USB disconnect, device number 8 [ 174.243618][ T8585] fido_id[8585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 174.596759][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.652494][ T8601] loop8: detected capacity change from 0 to 8 [ 174.655760][ T8601] Dev loop8: unable to read RDB block 8 [ 174.655800][ T8601] loop8: unable to read partition table [ 174.656009][ T8601] loop8: partition table beyond EOD, truncated [ 174.656037][ T8601] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 175.001647][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 175.326428][ T8635] sg_write: data in/out 483412/136 bytes for SCSI command 0x0-- guessing data in; [ 175.326428][ T8635] program syz.0.1179 not setting count and/or reply_len properly [ 175.571197][ T8647] syzkaller1: entered promiscuous mode [ 175.571245][ T8647] syzkaller1: entered allmulticast mode [ 175.626389][ T5709] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 175.636876][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.779128][ T5710] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 175.787531][ T5709] usb 5-1: Using ep0 maxpacket: 8 [ 175.795651][ T5709] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 175.811370][ T5709] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 175.820100][ T5709] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 175.820158][ T5709] usb 5-1: config 0 has no interface number 0 [ 175.820200][ T5709] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.820225][ T5709] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.820249][ T5709] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.870147][ T5709] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 175.878455][ T5709] usb 5-1: Product: syz [ 175.878476][ T5709] usb 5-1: Manufacturer: syz [ 175.889825][ T5709] usb 5-1: config 0 descriptor?? [ 175.957291][ T5710] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 175.958540][ T5710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.958565][ T5710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.960407][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 175.960429][ T5710] usb 1-1: Product: syz [ 175.960442][ T5710] usb 1-1: Manufacturer: syz [ 175.974432][ T5710] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 176.532937][ T5709] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input19 [ 176.569608][ T5709] input: failed to attach handler kbd to device input19, error: -5 [ 176.677940][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.757033][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.762515][ T5618] usb 5-1: USB disconnect, device number 9 [ 177.052308][ T5710] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 177.073594][ T5710] usb 1-1: USB disconnect, device number 16 [ 177.106253][ T5710] mos7840 1-1:1.0: device disconnected [ 177.718909][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.857268][ T5694] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 178.017050][ T5694] usb 6-1: Using ep0 maxpacket: 16 [ 178.023788][ T5694] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 178.034859][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.035203][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.035228][ T5694] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 178.035268][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.085278][ T5694] usb 6-1: config 0 descriptor?? [ 178.289638][ T5618] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 178.440066][ T5618] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 178.443047][ T5618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.443090][ T5618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.479795][ T5618] usb 3-1: config 0 descriptor?? [ 178.625880][ T5694] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000B/input/input20 [ 178.716093][ T5618] usbhid 3-1:0.0: can't add hid device: -71 [ 178.716215][ T5618] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 178.744838][ T5694] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 178.754211][ T5618] usb 3-1: USB disconnect, device number 10 [ 178.764752][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.968977][ T5710] usb 6-1: USB disconnect, device number 4 [ 179.176435][ T5694] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 179.287127][ T5618] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 179.327999][ T5694] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.342080][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.342142][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.342189][ T5694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.342210][ T5694] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.342252][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.403340][ T5694] usb 5-1: config 0 descriptor?? [ 179.437582][ T5618] usb 3-1: Using ep0 maxpacket: 8 [ 179.438214][ T5618] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 179.440240][ T5618] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 179.440262][ T5618] usb 3-1: config 0 has no interface number 0 [ 179.440299][ T5618] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.440322][ T5618] usb 3-1: config 0 interface 52 has no altsetting 0 [ 179.440352][ T5618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.448254][ T5618] usb 3-1: config 0 descriptor?? [ 179.798266][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.798889][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.916470][ T5694] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 179.925202][ T5618] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input22 [ 180.091233][ T5694] usb 5-1: USB disconnect, device number 10 [ 180.114823][ T5618] usb 3-1: USB disconnect, device number 11 [ 180.164703][ T4970] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 180.386508][ T8812] kvm: apic: phys broadcast and lowest prio [ 180.466627][ T5710] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.632694][ T5710] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 180.634488][ T5710] usb 2-1: config 0 has no interfaces? [ 180.634539][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.642594][ T5710] usb 2-1: config 0 descriptor?? [ 180.836672][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.912628][ T5710] usb 2-1: USB disconnect, device number 9 [ 180.917200][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.879036][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.607262][ T8908] batadv_slave_1: entered promiscuous mode [ 182.608521][ T8907] batadv_slave_1: left promiscuous mode [ 182.837298][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.916700][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.034079][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 183.043889][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1280'. [ 183.053787][ T8924] netlink: 'syz.4.1280': attribute type 7 has an invalid length. [ 183.466715][ T5710] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 183.616372][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 183.617970][ T5710] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.619044][ T5710] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 183.619090][ T5710] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.619110][ T5710] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.619132][ T5710] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.619152][ T5710] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.619189][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.859891][ T5710] usb 5-1: GET_CAPABILITIES returned 0 [ 183.859963][ T5710] usbtmc 5-1:16.0: can't read capabilities [ 183.874417][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1291'. [ 183.879639][ T8952] netlink: 'syz.5.1291': attribute type 15 has an invalid length. [ 183.969985][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.086401][ T5701] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 184.115664][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.127352][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.127410][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.127456][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.127499][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.127728][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.127773][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.127814][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.127857][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.128046][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.128089][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.128138][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.128181][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.128375][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.128414][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.128453][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 184.155884][ T5710] usb 5-1: USB disconnect, device number 11 [ 184.240010][ T5701] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.242500][ T5701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.242522][ T5701] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 184.242540][ T5701] usb 3-1: config 1 has no interface number 0 [ 184.242576][ T5701] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.242600][ T5701] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 184.242627][ T5701] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.252942][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.252963][ T5701] usb 3-1: Product: syz [ 184.252977][ T5701] usb 3-1: Manufacturer: syz [ 184.252989][ T5701] usb 3-1: SerialNumber: syz [ 184.506211][ T8963] syzkaller1: entered allmulticast mode [ 184.659577][ T5710] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 184.808499][ T5710] usb 6-1: Using ep0 maxpacket: 16 [ 184.809354][ T5710] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.810664][ T5710] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.810707][ T5710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.810732][ T5710] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.810773][ T5710] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 184.811938][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 184.811958][ T5710] usb 6-1: SerialNumber: syz [ 184.828141][ T5710] hub 6-1:1.0: bad descriptor, ignoring hub [ 184.828166][ T5710] hub 6-1:1.0: probe with driver hub failed with error -5 [ 184.832262][ T5710] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 184.997420][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.010750][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 185.152285][ T5701] cdc_ncm 3-1:1.1: bind() failure [ 185.362364][ T5701] usb 3-1: USB disconnect, device number 12 [ 185.530401][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 185.689583][ T10] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 185.700456][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64 [ 185.700515][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.700552][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.744190][ T10] usb 5-1: config 0 descriptor?? [ 185.879819][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.036704][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.118294][ T5710] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 186.170270][ T10] hid-multitouch 0003:0457:07DA.000D: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 186.276758][ T5710] usb 1-1: Using ep0 maxpacket: 8 [ 186.284879][ T5710] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 186.287473][ T5710] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.287530][ T5710] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.289896][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 186.289923][ T5710] usb 1-1: Product: syz [ 186.289936][ T5710] usb 1-1: Manufacturer: syz [ 186.289948][ T5710] usb 1-1: SerialNumber: syz [ 186.293403][ T5710] usb 1-1: config 0 descriptor?? [ 186.301506][ T5710] imon_raw 1-1:0.0: IR endpoint missing [ 186.406406][ T5694] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 186.420503][ T5710] usb 5-1: USB disconnect, device number 12 [ 186.557077][ T5694] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 186.568496][ T5694] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.578483][ T5694] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 186.591992][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.600520][ T5694] usb 2-1: Product: syz [ 186.600540][ T5694] usb 2-1: Manufacturer: syz [ 186.600553][ T5694] usb 2-1: SerialNumber: syz [ 186.654039][ T5693] usb 1-1: USB disconnect, device number 17 [ 186.835872][ T5694] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 187.049840][ T9027] loop4: detected capacity change from 0 to 7 [ 187.060773][ T9027] Dev loop4: unable to read RDB block 7 [ 187.060806][ T9027] loop4: AHDI p3 [ 187.060839][ T9027] loop4: partition table partially beyond EOD, truncated [ 187.068611][ T5694] usb 2-1: USB disconnect, device number 10 [ 187.078136][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.079123][ T5694] usblp0: removed [ 187.287285][ T5701] usb 6-1: USB disconnect, device number 5 [ 187.529671][ T5693] hid_parser_main: 24 callbacks suppressed [ 187.529747][ T5693] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 187.580207][ T5693] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.706417][ T5693] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 187.872953][ T5693] usb 1-1: Using ep0 maxpacket: 8 [ 187.877097][ T5693] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.879000][ T5693] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 187.879047][ T5693] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 187.879067][ T5693] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.879088][ T5693] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.879108][ T5693] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.879144][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.124439][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.694653][ T9077] usbtmc 1-1:16.0: simple usb_control_msg returned 0 [ 188.902100][ T5710] usb 1-1: USB disconnect, device number 18 [ 188.918362][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.160473][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.823639][ T9124] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 189.936783][ T5694] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 190.086385][ T5694] usb 6-1: Using ep0 maxpacket: 16 [ 190.087372][ T5694] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 190.088604][ T5694] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 190.088626][ T5694] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 190.088644][ T5694] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 190.088662][ T5694] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 190.088680][ T5694] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 190.088698][ T5694] usb 6-1: config 0 has no interface number 0 [ 190.088734][ T5694] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 190.088782][ T5694] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 190.088802][ T5694] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 190.088830][ T5694] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.088854][ T5694] usb 6-1: config 0 interface 125 has no altsetting 0 [ 190.088870][ T5694] usb 6-1: config 0 interface 125 has no altsetting 2 [ 190.090965][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.090985][ T5694] usb 6-1: Product: syz [ 190.090998][ T5694] usb 6-1: Manufacturer: syz [ 190.091011][ T5694] usb 6-1: SerialNumber: syz [ 190.103715][ T5694] usb 6-1: config 0 descriptor?? [ 190.126526][ T5694] usb 6-1: selecting invalid altsetting 2 [ 190.204531][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.520918][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.205010][ T5709] usb 6-1: USB disconnect, device number 6 [ 191.237131][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.247002][ T5701] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 191.397144][ T5701] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 191.398295][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.398322][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.398355][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.407622][ T5701] usb 5-1: config 0 descriptor?? [ 191.443340][ T5693] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 191.596997][ T5693] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 191.598142][ T5693] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.598163][ T5693] usb 3-1: config 0 has no interfaces? [ 191.598190][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.600897][ T5693] usb 3-1: config 0 descriptor?? [ 191.831786][ T5694] usb 3-1: USB disconnect, device number 13 [ 191.882135][ T9165] pim6reg: entered allmulticast mode [ 191.901422][ T9165] pim6reg: left allmulticast mode [ 191.956607][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.242671][ T5701] hid-led 0003:27B8:01ED.000F: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 192.277074][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.428961][ T9184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.439048][ T9184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.439206][ T9184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.439365][ T9184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.439498][ T9184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.439617][ T9184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.439736][ T9184] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.454330][ T5701] hid-led 0003:27B8:01ED.000F: ThingM blink(1) initialized [ 192.479434][ T5701] usb 5-1: USB disconnect, device number 13 [ 192.692256][ T9189] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 192.860062][ T9195] netlink: 190972 bytes leftover after parsing attributes in process `syz.5.1392'. [ 193.332302][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 193.332355][ T9212] netlink: 'syz.2.1400': attribute type 30 has an invalid length. [ 193.409764][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 193.409821][ T9218] netlink: 'syz.2.1400': attribute type 30 has an invalid length. [ 193.438324][ T6847] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.492187][ T9222] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1405'. [ 193.547631][ T6847] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.548827][ T6847] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.548868][ T6847] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.909778][ T9238] syzkaller1: entered promiscuous mode [ 193.909820][ T9238] syzkaller1: entered allmulticast mode [ 193.966357][ T5701] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.975190][ T9241] sctp: [Deprecated]: syz.1.1414 (pid 9241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.975190][ T9241] Use struct sctp_sack_info instead [ 194.116793][ T5701] usb 3-1: Using ep0 maxpacket: 16 [ 194.124634][ T5701] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 194.135604][ T5701] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 194.135644][ T5701] usb 3-1: config 252 has no interface number 0 [ 194.135712][ T5701] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.167520][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.167562][ T5701] usb 3-1: Product: syz [ 194.167590][ T5701] usb 3-1: Manufacturer: syz [ 194.167607][ T5701] usb 3-1: SerialNumber: syz [ 194.228593][ T5701] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 194.365241][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.365922][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.425585][ T5701] usb 3-1: USB disconnect, device number 14 [ 194.433503][ T12] usb 3-1: Failed to submit usb control message: -71 [ 194.433559][ T12] usb 3-1: unable to send the bmi data to the device: -71 [ 194.433593][ T12] usb 3-1: unable to get target info from device [ 194.433622][ T12] usb 3-1: could not get target info (-71) [ 194.433894][ T12] usb 3-1: could not probe fw (-71) [ 195.416575][ T5693] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 195.567151][ T5693] usb 3-1: Using ep0 maxpacket: 32 [ 195.569589][ T5693] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 195.572039][ T5693] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.572066][ T5693] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 195.572087][ T5693] usb 3-1: config 0 interface 0 has no altsetting 0 [ 195.583312][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.583337][ T5693] usb 3-1: Product: syz [ 195.583351][ T5693] usb 3-1: Manufacturer: syz [ 195.583363][ T5693] usb 3-1: SerialNumber: syz [ 195.605069][ T5693] usb 3-1: config 0 descriptor?? [ 195.906844][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1437'. [ 196.022876][ T5693] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 196.029302][ T5710] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 196.187145][ T5710] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.198653][ T5710] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.198717][ T5710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.198762][ T5710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.198786][ T5710] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.198827][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.259983][ T5710] usb 6-1: config 0 descriptor?? [ 196.436638][ T5694] net_ratelimit: 1021 callbacks suppressed [ 196.436726][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.707656][ T5693] usb 3-1: USB disconnect, device number 15 [ 196.793668][ T5710] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 197.018573][ T5710] usb 6-1: USB disconnect, device number 7 [ 197.486345][ T1888] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 197.518896][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.651555][ T1888] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.660036][ T1888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.660067][ T1888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.660086][ T1888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.660124][ T1888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.668093][ T1888] usb 1-1: config 0 descriptor?? [ 197.991635][ T9363] syzkaller1: entered promiscuous mode [ 198.000127][ T9363] syzkaller1: entered allmulticast mode [ 198.037232][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.155745][ T1888] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 198.434478][ T5709] usb 1-1: USB disconnect, device number 19 [ 198.596502][ T1888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.128784][ T5709] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 199.289892][ T5709] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.309153][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.309200][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.309240][ T5709] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.309282][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.360958][ T5709] usb 3-1: config 0 descriptor?? [ 199.479536][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.605316][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1492'. [ 199.605366][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 199.640729][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.654065][ T6847] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.655092][ T6847] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.655128][ T6847] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.666571][ T58] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.808979][ T5709] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 200.061869][ T5694] usb 3-1: USB disconnect, device number 16 [ 200.089373][ T1888] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 200.119519][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.237323][ T1888] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.241008][ T1888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.241038][ T1888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.241058][ T1888] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.241095][ T1888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.249427][ T1888] usb 2-1: config 0 descriptor?? [ 200.366691][ T925] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 200.521359][ T925] usb 6-1: not running at top speed; connect to a high speed hub [ 200.521413][ T925] usb 6-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 200.524374][ T925] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 200.536080][ T925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.536125][ T925] usb 6-1: Product: à  [ 200.536138][ T925] usb 6-1: SerialNumber: â° [ 200.677489][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.715098][ T1888] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 200.829002][ T925] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.830069][ T925] usb 6-1: invalid MIDI in EP 0 [ 200.973084][ T5710] usb 2-1: USB disconnect, device number 11 [ 201.154012][ T925] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 201.177537][ T925] usb 6-1: USB disconnect, device number 8 [ 201.226945][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.275141][ T9469] syzkaller1: entered promiscuous mode [ 201.275195][ T9469] syzkaller1: entered allmulticast mode [ 201.326617][ T5709] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 201.478772][ T5709] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 201.490001][ T5709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 201.490059][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.701646][ T31] audit: type=1800 audit(1787927182.728:39): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1517" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 201.736628][ T925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.783822][ T5709] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 201.825954][ T5709] wwan wwan0: port wwan0qmi0 attached [ 202.069905][ T5709] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 82:f4:e5:35:8e:e4 [ 202.085861][ T5709] usb 1-1: USB disconnect, device number 20 [ 202.114777][ T5709] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 202.311202][ T5709] wwan wwan0: port wwan0qmi0 disconnected [ 202.414047][ T9489] geneve0: entered promiscuous mode [ 202.516994][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.759163][ T925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.098694][ T5694] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 203.129318][ T9514] tipc: Started in network mode [ 203.129371][ T9514] tipc: Node identity ac1414aa, cluster identity 4711 [ 203.136300][ T9514] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.143383][ T9514] tipc: Enabled bearer , priority 10 [ 203.188275][ T6847] IPVS: starting estimator thread 0... [ 203.247286][ T5694] usb 5-1: Using ep0 maxpacket: 16 [ 203.250686][ T5694] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 203.254180][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.254204][ T5694] usb 5-1: Product: syz [ 203.254218][ T5694] usb 5-1: Manufacturer: syz [ 203.254231][ T5694] usb 5-1: SerialNumber: syz [ 203.276568][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.288124][ T9519] IPVS: using max 36 ests per chain, 86400 per kthread [ 203.350369][ T5694] usb 5-1: config 0 descriptor?? [ 203.360604][ T5694] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 203.365851][ T5694] usb 5-1: Detected FT-X [ 203.380850][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1529'. [ 203.406404][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.546399][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.600205][ T5694] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 203.626788][ T925] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 203.697714][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.783394][ T925] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 203.784844][ T925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.784871][ T925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.784926][ T925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.794233][ T925] usb 2-1: config 0 descriptor?? [ 203.836454][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 203.837625][ T1888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.027071][ T5694] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 204.211250][ T9549] Invalid argument reading file caps for ./file0 [ 204.243928][ T925] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 204.260271][ T1888] usb 5-1: USB disconnect, device number 14 [ 204.263187][ T5694] tipc: Node number set to 2886997162 [ 204.273658][ T925] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 204.330590][ T1888] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 204.331378][ T1888] ftdi_sio 5-1:0.0: device disconnected [ 204.442742][ T9525] cp2112 0003:10C4:EA90.0014: pid 9525 passed too short report [ 204.447150][ T925] cp2112 0003:10C4:EA90.0014: error requesting version [ 204.473145][ T925] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -71 [ 204.483651][ T925] usb 2-1: USB disconnect, device number 12 [ 204.575065][ T9559] fido_id[9559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 204.690347][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'. [ 204.690392][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1551'. [ 205.246407][ T5709] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 205.396740][ T5709] usb 5-1: Using ep0 maxpacket: 32 [ 205.404550][ T5709] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 205.415893][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.431781][ T5709] usb 5-1: config 0 descriptor?? [ 205.648241][ T925] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 205.667231][ T5709] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 205.694987][ T5709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.705515][ T5709] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 205.716199][ T5709] usb 5-1: media controller created [ 205.753564][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.797211][ T9585] geneve0: entered promiscuous mode [ 205.799695][ T925] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 205.805662][ T925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.805686][ T925] usb 2-1: Product: syz [ 205.805699][ T925] usb 2-1: Manufacturer: syz [ 205.805712][ T925] usb 2-1: SerialNumber: syz [ 205.916411][ T1888] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 206.038276][ T925] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 206.039309][ T925] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 206.092409][ T1888] usb 1-1: Using ep0 maxpacket: 8 [ 206.099620][ T1888] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 206.114030][ T1888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.114059][ T1888] usb 1-1: Product: syz [ 206.114111][ T1888] usb 1-1: Manufacturer: syz [ 206.114122][ T1888] usb 1-1: SerialNumber: syz [ 206.127896][ T1888] usb 1-1: config 0 descriptor?? [ 206.139737][ T1888] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 206.239742][ T925] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 206.240553][ T925] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 206.255002][ T925] kalmia 2-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.1-1, Samsung Kalmia LTE USB dongle, 56:e1:28:9c:e6:66 [ 206.276567][ T1887] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 206.287863][ T5709] az6027: usb out operation failed. (-71) [ 206.287895][ T5709] stb0899_attach: Driver disabled by Kconfig [ 206.287932][ T5709] az6027: no front-end attached [ 206.287932][ T5709] [ 206.309336][ T5709] az6027: usb out operation failed. (-71) [ 206.309373][ T5709] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 206.326236][ T5709] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 206.343041][ T5709] dvb-usb: schedule remote query interval to 400 msecs. [ 206.343088][ T5709] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 206.365388][ T5709] usb 5-1: USB disconnect, device number 15 [ 206.418966][ T5709] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 206.448682][ T1887] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 206.449910][ T1887] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 206.449951][ T1887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.495821][ T5694] usb 2-1: USB disconnect, device number 13 [ 206.512197][ T5694] kalmia 2-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.1-1, Samsung Kalmia LTE USB dongle [ 206.738717][ T1887] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 206.760711][ T1887] wwan wwan0: port wwan0qmi0 attached [ 207.000665][ T1887] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, a6:79:fc:e1:77:20 [ 207.007105][ T5694] net_ratelimit: 13 callbacks suppressed [ 207.007122][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.014216][ T1887] usb 3-1: USB disconnect, device number 17 [ 207.026517][ T1887] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 207.131453][ T1887] wwan wwan0: port wwan0qmi0 disconnected [ 207.197434][ T1888] gspca_sonixj: reg_w1 err -71 [ 207.249004][ T1888] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 207.268060][ T1888] usb 1-1: USB disconnect, device number 21 [ 207.316437][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 207.895304][ T9654] netlink: 'syz.5.1581': attribute type 12 has an invalid length. [ 207.895363][ T9654] netlink: 'syz.5.1581': attribute type 29 has an invalid length. [ 207.895396][ T9654] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1581'. [ 207.915871][ T6847] IPVS: starting estimator thread 0... [ 207.996412][ T9657] IPVS: using max 44 ests per chain, 105600 per kthread [ 208.036730][ T1887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.356391][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 208.596779][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.077058][ T1888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.368143][ T9680] geneve0: entered promiscuous mode [ 209.396642][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 209.439558][ T9723] sg_write: data in/out 409564/136 bytes for SCSI command 0x0-- guessing data in; [ 209.439558][ T9723] program syz.1.1608 not setting count and/or reply_len properly [ 209.696476][ T5709] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 209.722894][ T1888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.729204][ T135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.745426][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.846392][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 209.852714][ T5709] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 209.863219][ T5709] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 209.873100][ T5709] usb 1-1: config 0 has no interface number 0 [ 209.884512][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.892680][ T5709] usb 1-1: Product: syz [ 209.896984][ T5709] usb 1-1: Manufacturer: syz [ 209.901836][ T5709] usb 1-1: SerialNumber: syz [ 209.928161][ T5709] usb 1-1: config 0 descriptor?? [ 210.529581][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'. [ 210.589347][ T9748] bond1: Invalid ad_actor_system MAC address. [ 210.589390][ T9748] bond1: option ad_actor_system: invalid value (5) [ 210.619369][ T9748] bond1 (unregistering): Released all slaves [ 210.761698][ T5709] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 210.854192][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1622'. [ 210.854254][ T9758] netlink: 'syz.5.1622': attribute type 10 has an invalid length. [ 210.854286][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1622'. [ 210.972840][ T5709] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 210.973292][ T5709] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 211.014717][ T5709] usb 1-1: USB disconnect, device number 22 [ 211.178736][ T9755] geneve0: entered promiscuous mode [ 211.848242][ T1887] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 211.896685][ T5694] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 211.997957][ T1887] usb 3-1: Using ep0 maxpacket: 16 [ 212.000751][ T1887] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 212.017131][ T1887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.017181][ T1887] usb 3-1: Product: syz [ 212.017195][ T1887] usb 3-1: Manufacturer: syz [ 212.017208][ T1887] usb 3-1: SerialNumber: syz [ 212.055902][ T1887] usb 3-1: config 0 descriptor?? [ 212.068633][ T5694] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 212.072864][ T5694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.072893][ T5694] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.072920][ T5694] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 212.072957][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.095076][ T1887] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 212.101885][ T5694] usb 1-1: config 0 descriptor?? [ 212.124920][ T1887] usb 3-1: Detected FT-X [ 212.207679][ T925] net_ratelimit: 9 callbacks suppressed [ 212.207744][ T925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.352129][ T1887] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 212.516539][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 212.602357][ T5694] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 212.702317][ T5693] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 212.807413][ T1887] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 212.838738][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.857728][ T5693] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 212.860452][ T5693] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 212.860503][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.008866][ T5694] usb 3-1: USB disconnect, device number 18 [ 213.045517][ T5694] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 213.047985][ T5694] ftdi_sio 3-1:0.0: device disconnected [ 213.084220][ T9795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1636'. [ 213.118540][ T5693] qmi_wwan 5-1:1.0: cdc-wdm1: USB WDM device [ 213.124964][ T5693] wwan wwan0: port wwan0qmi0 attached [ 213.239712][ T1887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.439317][ T5693] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 3e:30:12:36:ca:0b [ 213.445575][ T5693] usb 5-1: USB disconnect, device number 16 [ 213.456080][ T5693] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 213.556667][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 213.756366][ T5694] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 213.906486][ T5694] usb 2-1: Using ep0 maxpacket: 16 [ 213.907272][ T5694] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 213.908517][ T5694] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.908537][ T5694] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 213.910537][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 213.910558][ T5694] usb 2-1: Product: syz [ 213.910571][ T5694] usb 2-1: Manufacturer: syz [ 213.910584][ T5694] usb 2-1: SerialNumber: syz [ 213.920984][ T5693] wwan wwan0: port wwan0qmi0 disconnected [ 214.278151][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.326932][ T5694] usb 2-1: USB disconnect, device number 14 [ 214.596566][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 214.680401][ T1888] usb 1-1: USB disconnect, device number 23 [ 214.784662][ T9804] geneve0: entered promiscuous mode [ 215.213460][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'. [ 215.317975][ T1888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.410112][ T1887] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 215.434812][ T9836] netlink: NAT attribute type 9 has unexpected length (4 != 0) [ 215.443843][ T9836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.577397][ T1887] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 215.579057][ T1887] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 215.579081][ T1887] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 215.581569][ T1887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.581591][ T1887] usb 2-1: Product: syz [ 215.581604][ T1887] usb 2-1: Manufacturer: syz [ 215.581616][ T1887] usb 2-1: SerialNumber: syz [ 215.587416][ T1888] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 215.746526][ T1888] usb 3-1: Using ep0 maxpacket: 8 [ 215.747379][ T1888] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 215.748826][ T1888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.748847][ T1888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 215.748887][ T1888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 215.748933][ T1888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 215.748970][ T1888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.765490][ T1888] hub 3-1:1.0: bad descriptor, ignoring hub [ 215.765513][ T1888] hub 3-1:1.0: probe with driver hub failed with error -5 [ 215.770804][ T1888] cdc_wdm 3-1:1.0: skipping garbage [ 215.770822][ T1888] cdc_wdm 3-1:1.0: skipping garbage [ 215.822064][ T1887] usb 2-1: Limiting number of CPorts to U8_MAX [ 215.844797][ T1888] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 215.844817][ T1888] cdc_wdm 3-1:1.0: Unknown control protocol [ 215.987699][ T5709] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 216.036087][ T9851] syzkaller1: entered promiscuous mode [ 216.043487][ T9851] syzkaller1: entered allmulticast mode [ 216.157905][ T5709] usb 5-1: Using ep0 maxpacket: 8 [ 216.165132][ T5709] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 216.176388][ T5709] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 216.176453][ T5709] usb 5-1: config 179 has no interface number 0 [ 216.176508][ T5709] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 216.176535][ T5709] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 216.176564][ T5709] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 216.176590][ T5709] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 216.176617][ T5709] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 216.176672][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.207097][ T9859] tun0: tun_chr_ioctl cmd 1074812118 [ 216.207669][ T9859] tun0: tun_chr_ioctl cmd 2147767520 [ 216.276857][ T9843] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 216.563320][ T9865] netlink: 762 bytes leftover after parsing attributes in process `syz.0.1665'. [ 216.683677][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'. [ 216.698139][ T1887] usb 2-1: USB disconnect, device number 15 [ 216.698208][ C1] usb 2-1: failed to resubmit arpc in-urb: -19 [ 216.698248][ C1] usb 2-1: failed to resubmit arpc in-urb: -19 [ 216.698288][ C1] usb 2-1: failed to resubmit in-urb: -19 [ 216.698331][ C1] usb 2-1: failed to resubmit in-urb: -19 [ 216.698368][ C1] usb 2-1: failed to resubmit in-urb: -19 [ 216.698405][ C1] usb 2-1: failed to resubmit in-urb: -19 [ 216.713331][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 216.722021][ T1887] usb 2-1: failed to send ARPC request 4: -19 [ 216.722095][ T1887] usb 2-1: failed to execute ARPC: -19 [ 216.722109][ T1887] usb 2-1: failed to flush cport 0: -19 [ 216.722125][ T1887] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 216.722274][ T1887] usb 2-1: failed to send ARPC request 2: -19 [ 216.722340][ T1887] usb 2-1: failed to execute ARPC: -19 [ 216.722352][ T1887] usb 2-1: failed to quiesce cport 0: -19 (0) [ 216.722368][ T1887] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 216.722498][ T1887] usb 2-1: failed to send ARPC request 3: -19 [ 216.722568][ T1887] usb 2-1: failed to execute ARPC: -19 [ 216.722581][ T1887] usb 2-1: failed to clear cport 0: -19 [ 216.722595][ T1887] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 216.832099][ T5709] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input27 [ 217.108170][ T1887] usb 5-1: USB disconnect, device number 17 [ 217.114372][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 217.346417][ T1888] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 217.398193][ T1887] net_ratelimit: 4 callbacks suppressed [ 217.398229][ T1887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.499388][ T1888] usb 6-1: Using ep0 maxpacket: 32 [ 217.501547][ T1888] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 217.502620][ T1888] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 217.502643][ T1888] usb 6-1: config 0 has no interface number 0 [ 217.502679][ T1888] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 217.502703][ T1888] usb 6-1: config 0 interface 196 has no altsetting 0 [ 217.509638][ T1888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.509662][ T1888] usb 6-1: Product: syz [ 217.509676][ T1888] usb 6-1: Manufacturer: syz [ 217.509688][ T1888] usb 6-1: SerialNumber: syz [ 217.513862][ T1888] usb 6-1: config 0 descriptor?? [ 217.515943][ T9877] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 217.716633][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 218.004952][ T9902] cifs: Unknown parameter 'f,' [ 218.168345][ T1888] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 218.183446][ T1888] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached [ 218.336254][ T5701] usb 3-1: USB disconnect, device number 19 [ 218.437407][ T1888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.668901][ T5709] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 218.756606][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 218.826764][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 218.841018][ T5709] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 218.862678][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.862720][ T5709] usb 5-1: Product: syz [ 218.862749][ T5709] usb 5-1: Manufacturer: syz [ 218.862767][ T5709] usb 5-1: SerialNumber: syz [ 218.891769][ T5709] usb 5-1: config 0 descriptor?? [ 218.902077][ T5709] gspca_main: spca508-2.14.0 probing 041e:4018 [ 218.918472][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.026451][ T9942] cifs: Unknown parameter 'f,' [ 219.098986][ C1] ipheth 6-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 219.152535][ T5709] gspca_spca508: reg_read err -32 [ 219.160366][ T5709] gspca_spca508: reg_read err -32 [ 219.171421][ T5709] gspca_spca508: reg_read err -32 [ 219.311613][ T1888] usb 6-1: USB disconnect, device number 9 [ 219.319320][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.395066][ T5709] gspca_spca508: reg_read err -71 [ 219.402163][ T5709] gspca_spca508: reg write: error -71 [ 219.402247][ T5709] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 219.425097][ T5709] usb 5-1: USB disconnect, device number 18 [ 219.477529][ T925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.571077][ T1888] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected [ 219.720544][ T5701] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 219.737100][ T925] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 219.796788][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 219.887408][ T925] usb 1-1: Using ep0 maxpacket: 16 [ 219.887538][ T5701] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 219.887954][ T925] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 219.889033][ T925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.889059][ T925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.889092][ T925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.898546][ T925] usb 1-1: config 0 descriptor?? [ 219.951232][ T5701] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 219.951324][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.243462][ T5701] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 220.259995][ T5701] wwan wwan0: port wwan0qmi0 attached [ 220.424465][ T925] hid (null): report_id 0 is invalid [ 220.424508][ T925] hid (null): report_id 4252247276 is invalid [ 220.427396][ T925] hid (null): unknown global tag 0xe [ 220.427427][ T925] hid (null): global environment stack underflow [ 220.474242][ T925] hid-vivaldi 0003:6161:4D15.0016: unknown main item tag 0x0 [ 220.474329][ T925] hid-vivaldi 0003:6161:4D15.0016: unknown main item tag 0x0 [ 220.474355][ T925] hid-vivaldi 0003:6161:4D15.0016: unknown main item tag 0x0 [ 220.474374][ T925] hid-vivaldi 0003:6161:4D15.0016: unknown main item tag 0x0 [ 220.474397][ T925] hid-vivaldi 0003:6161:4D15.0016: unknown main item tag 0x0 [ 220.474421][ T925] hid-vivaldi 0003:6161:4D15.0016: unknown main item tag 0x0 [ 220.474446][ T925] hid-vivaldi 0003:6161:4D15.0016: unknown main item tag 0x0 [ 220.474470][ T925] hid-vivaldi 0003:6161:4D15.0016: unknown main item tag 0x0 [ 220.474494][ T925] hid-vivaldi 0003:6161:4D15.0016: unknown main item tag 0x0 [ 220.474517][ T925] hid-vivaldi 0003:6161:4D15.0016: unknown main item tag 0x0 [ 220.516685][ T1888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.533641][ T925] hid-vivaldi 0003:6161:4D15.0016: unexpected long global item [ 220.553823][ T925] hid-vivaldi 0003:6161:4D15.0016: probe with driver hid-vivaldi failed with error -22 [ 220.579137][ T925] usb 1-1: string descriptor 0 read error: -71 [ 220.610214][ T925] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 220.610308][ T925] letsketch 0003:6161:4D15.0016: probe with driver letsketch failed with error -32 [ 220.638790][ T925] usb 1-1: USB disconnect, device number 24 [ 220.648701][ T5701] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 86:e2:58:ce:33:0c [ 220.670740][ T5701] usb 2-1: USB disconnect, device number 16 [ 220.737488][ T5701] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 220.836540][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 220.855071][ T5701] wwan wwan0: port wwan0qmi0 disconnected [ 221.423732][ T1888] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 222.222616][T10021] hid-generic 0000:0000:0000.0017: pid 10021 passed too large report [ 222.410824][T10060] net_ratelimit: 254 callbacks suppressed [ 222.410878][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.414373][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.438031][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.447115][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.455618][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.466421][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.466616][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.466756][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.466886][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.467007][T10060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.176727][ T5709] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 223.216790][ T5701] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 223.344673][ T5709] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 223.356632][ T5709] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 223.356693][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.396402][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 223.402492][ T5701] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 223.413951][ T5701] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 223.429123][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.429164][ T5701] usb 1-1: Product: syz [ 223.429218][ T5701] usb 1-1: Manufacturer: syz [ 223.429235][ T5701] usb 1-1: SerialNumber: syz [ 223.459139][ T5701] usb 1-1: config 0 descriptor?? [ 223.466494][T10080] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 223.484219][ T5701] hub 1-1:0.0: bad descriptor, ignoring hub [ 223.484263][ T5701] hub 1-1:0.0: probe with driver hub failed with error -5 [ 223.512167][ T5701] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input28 [ 223.627499][ T5618] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 223.663444][ T5709] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 223.701414][ T5709] wwan wwan0: port wwan0qmi0 attached [ 223.762373][ T31] audit: type=1326 audit(1787927204.788:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10077 comm="syz.0.1744" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x0 [ 223.807219][ T5618] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 223.816990][ T5618] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 223.861715][ T5618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.861757][ T5618] usb 3-1: Product: syz [ 223.861785][ T5618] usb 3-1: Manufacturer: syz [ 223.861801][ T5618] usb 3-1: SerialNumber: syz [ 223.894530][ T5709] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 9a:b2:41:c1:2d:f9 [ 223.911117][ T1888] usb 1-1: USB disconnect, device number 25 [ 223.917271][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 223.972499][ T5709] usb 6-1: USB disconnect, device number 10 [ 224.005124][ T5709] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 224.184967][ T5709] wwan wwan0: port wwan0qmi0 disconnected [ 224.310461][ T5618] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 224.310506][ T5618] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 224.356404][ T5618] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 224.396120][ T5618] usb 3-1: USB disconnect, device number 20 [ 224.707433][T10129] netlink: 'syz.1.1747': attribute type 1 has an invalid length. [ 224.707459][T10129] netlink: 'syz.1.1747': attribute type 2 has an invalid length. [ 224.707751][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1747'. [ 224.856219][T10139] syzkaller1: entered promiscuous mode [ 224.856247][T10139] syzkaller1: entered allmulticast mode [ 224.877592][ T5709] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 225.029848][ T5709] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 225.035691][ T5709] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 225.035719][ T5709] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 225.046413][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.046439][ T5709] usb 6-1: Product: syz [ 225.046453][ T5709] usb 6-1: Manufacturer: syz [ 225.046465][ T5709] usb 6-1: SerialNumber: syz [ 225.331429][ T5709] usb 6-1: Limiting number of CPorts to U8_MAX [ 225.757148][ T5618] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 225.908836][ T5618] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 225.911601][ T5618] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.911631][ T5618] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 225.911674][ T5618] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.916983][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 225.917006][ T5618] usb 5-1: Product: syz [ 225.917020][ T5618] usb 5-1: Manufacturer: syz [ 225.917033][ T5618] usb 5-1: SerialNumber: syz [ 225.933662][ T5618] usb 5-1: config 0 descriptor?? [ 225.986657][ T5618] usb 5-1: selecting invalid altsetting 0 [ 226.168285][ T925] usb 6-1: USB disconnect, device number 11 [ 226.168342][ C0] usb 6-1: failed to resubmit arpc in-urb: -19 [ 226.168403][ C0] usb 6-1: failed to resubmit arpc in-urb: -19 [ 226.168459][ C0] usb 6-1: failed to resubmit in-urb: -19 [ 226.168518][ C0] usb 6-1: failed to resubmit in-urb: -19 [ 226.168576][ C0] usb 6-1: failed to resubmit in-urb: -19 [ 226.168631][ C0] usb 6-1: failed to resubmit in-urb: -19 [ 226.187999][ T31] audit: type=1326 audit(1787927207.218:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10157 comm="syz.4.1760" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f080ec code=0x0 [ 226.247693][ T925] usb 6-1: failed to send ARPC request 4: -19 [ 226.247783][ T925] usb 6-1: failed to execute ARPC: -19 [ 226.247823][ T925] usb 6-1: failed to flush cport 0: -19 [ 226.247843][ T925] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 226.247985][ T925] usb 6-1: failed to send ARPC request 2: -19 [ 226.248055][ T925] usb 6-1: failed to execute ARPC: -19 [ 226.248072][ T925] usb 6-1: failed to quiesce cport 0: -19 (0) [ 226.248092][ T925] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 226.248212][ T925] usb 6-1: failed to send ARPC request 3: -19 [ 226.248277][ T925] usb 6-1: failed to execute ARPC: -19 [ 226.248294][ T925] usb 6-1: failed to clear cport 0: -19 [ 226.248312][ T925] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 226.302968][ T5618] usb 5-1: USB disconnect, device number 19 [ 226.484964][ T8459] udevd[8459]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.357522][T10213] netlink: 'syz.0.1783': attribute type 10 has an invalid length. [ 227.363881][T10213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.367052][T10213] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 227.797090][ T1887] net_ratelimit: 782 callbacks suppressed [ 227.797151][ T1887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.958455][ T5618] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 228.039065][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.107130][ T5618] usb 2-1: Using ep0 maxpacket: 8 [ 228.108555][ T5618] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 228.109947][ T5618] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.109970][ T5618] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 228.110011][ T5618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 228.110040][ T5618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 228.110077][ T5618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.124304][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 228.127507][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.196555][ T1887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.197358][ T5618] hub 2-1:1.0: bad descriptor, ignoring hub [ 228.197382][ T5618] hub 2-1:1.0: probe with driver hub failed with error -5 [ 228.197894][ T5618] cdc_wdm 2-1:1.0: skipping garbage [ 228.197907][ T5618] cdc_wdm 2-1:1.0: skipping garbage [ 228.223978][ T5618] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 228.224000][ T5618] cdc_wdm 2-1:1.0: Unknown control protocol [ 228.434552][T10226] geneve0: entered promiscuous mode [ 228.464545][ T5709] hid_parser_main: 525 callbacks suppressed [ 228.464588][ T5709] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 228.482047][ T5709] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 228.839137][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.887444][ T1887] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 228.917396][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.925307][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 228.925436][T10255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.950147][T10255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.050139][ T1887] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 229.060930][ T1887] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.060992][ T1887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.136219][T10228] cdc_wdm 2-1:1.0: Error autopm - -16 [ 229.142544][ T1888] usb 2-1: USB disconnect, device number 17 [ 229.156348][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 229.237511][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.318438][ T1888] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 229.334894][ T1887] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 229.344898][ T1887] wwan wwan0: port wwan0qmi0 attached [ 229.416427][ T925] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 229.477540][ T1888] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 229.478866][ T1888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.478888][ T1888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 229.478952][ T1888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 229.478991][ T1888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.489413][T10245] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.491748][ T1888] hub 2-1:1.0: bad descriptor, ignoring hub [ 229.491770][ T1888] hub 2-1:1.0: probe with driver hub failed with error -5 [ 229.492349][ T1888] cdc_wdm 2-1:1.0: skipping garbage [ 229.492362][ T1888] cdc_wdm 2-1:1.0: skipping garbage [ 229.512312][ T1888] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 229.512353][ T1888] cdc_wdm 2-1:1.0: Unknown control protocol [ 229.557758][ T5701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.575304][ T925] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 229.582117][ T925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.582143][ T925] usb 3-1: Product: syz [ 229.582156][ T925] usb 3-1: Manufacturer: syz [ 229.582169][ T925] usb 3-1: SerialNumber: syz [ 229.596664][ T925] usb 3-1: config 0 descriptor?? [ 229.603867][ T5618] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 229.606188][ T925] hub 3-1:0.0: bad descriptor, ignoring hub [ 229.608893][ T925] hub 3-1:0.0: probe with driver hub failed with error -5 [ 229.636637][ T1887] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.5-1, WWAN/QMI device, 46:50:02:cc:96:5b [ 229.674225][ T1887] usb 6-1: USB disconnect, device number 12 [ 229.678473][ T1887] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.5-1, WWAN/QMI device [ 229.749198][ T1887] wwan wwan0: port wwan0qmi0 disconnected [ 229.767599][ T5618] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 229.779667][ T5618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.790340][ T5618] usb 5-1: config 0 descriptor?? [ 229.801627][ T5618] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 229.808263][ T5758] usb 2-1: USB disconnect, device number 18 [ 229.819882][ T925] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 229.833227][ T925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.834739][ T925] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 229.834789][ T925] usb 3-1: media controller created [ 229.850399][ T925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.904380][ T925] DVB: Unable to find symbol dib7000p_attach() [ 229.904409][ T925] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 229.967086][ T925] rc_core: IR keymap rc-dib0700-rc5 not found [ 229.967153][ T925] Registered IR keymap rc-empty [ 229.967457][ T925] dvb-usb: could not initialize remote control. [ 229.967467][ T925] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 230.362816][T10276] macvlan2: entered promiscuous mode [ 230.430353][T10279] macvlan2: entered promiscuous mode [ 230.618750][ T5618] gspca_stv06xx: I2C: Read error writing address: -71 [ 230.632950][ T5618] usb 5-1: USB disconnect, device number 20 [ 230.895705][T10294] loop8: detected capacity change from 0 to 7 [ 230.900973][T10294] Dev loop8: unable to read RDB block 7 [ 230.901004][T10294] loop8: AHDI p1 p2 [ 230.901023][T10294] loop8: partition table partially beyond EOD, truncated [ 230.901234][T10294] loop8: p1 start 1702000233 is beyond EOD, truncated [ 231.001375][ T5613] udevd[5613]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 231.086583][T10298] input: syz0 as /devices/virtual/input/input31 [ 232.159738][T10262] dib0700: could not acquire lock [ 232.196258][ T925] usb 3-1: USB disconnect, device number 21 [ 232.282910][ T925] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 232.296159][ T5727] udevd[5727]: setting mode of /dev/bus/usb/003/021 to 020664 failed: No such file or directory [ 232.307380][ T5727] udevd[5727]: setting owner of /dev/bus/usb/003/021 to uid=0, gid=0 failed: No such file or directory [ 232.501939][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 232.502064][T10346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.524780][T10346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.996590][ T5694] net_ratelimit: 12 callbacks suppressed [ 232.996635][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.316363][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 233.386433][ T5694] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 233.386616][ T925] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 233.396694][ T1887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.494145][T10379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.503619][T10379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.512982][T10379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.523165][T10379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.536519][T10379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.536688][T10379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.536808][T10379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.537564][ T5694] usb 5-1: Using ep0 maxpacket: 16 [ 233.545015][ T5694] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 233.546401][ T5694] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 233.546423][ T5694] usb 5-1: config 0 has no interface number 0 [ 233.546459][ T5694] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.546481][ T5694] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 233.548448][ T925] usb 2-1: unable to get BOS descriptor or descriptor too short [ 233.548507][ T925] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 233.560525][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 233.560576][ T5694] usb 5-1: Product: syz [ 233.560589][ T5694] usb 5-1: SerialNumber: syz [ 233.564993][ T925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.565017][ T925] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 233.565056][ T925] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 233.565088][ T925] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 233.565122][ T925] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 233.565144][ T925] usb 2-1: config 1 interface 1 has no altsetting 0 [ 233.582476][ T925] usb 2-1: string descriptor 0 read error: -22 [ 233.582603][ T925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.589489][ T5694] usb 5-1: config 0 descriptor?? [ 233.602661][ T5694] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 233.639892][ T5694] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input32 [ 233.882474][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 233.892745][T10383] netlink: 'syz.0.1852': attribute type 20 has an invalid length. [ 233.892766][T10383] netlink: 'syz.0.1852': attribute type 21 has an invalid length. [ 234.028709][ T925] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 234.028770][ T925] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 234.031962][ T925] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 234.099997][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 234.100275][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 234.100495][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 234.100595][ T5694] usb 5-1: USB disconnect, device number 21 [ 234.100695][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 234.100714][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 234.160140][ T5694] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 234.226390][T10385] sctp: [Deprecated]: syz.0.1864 (pid 10385) Use of int in max_burst socket option. [ 234.226390][T10385] Use struct sctp_assoc_value instead [ 234.251198][T10387] macvlan2: entered promiscuous mode [ 234.301317][T10388] macvlan2: entered promiscuous mode [ 234.557806][ T5709] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 234.560085][ T925] usb 2-1: USB disconnect, device number 19 [ 234.717863][ T5709] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 234.728550][ T5709] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 234.728610][ T5709] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 234.751683][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.760197][ T5709] usb 1-1: Product: syz [ 234.764578][ T5709] usb 1-1: Manufacturer: syz [ 234.770247][ T5709] usb 1-1: SerialNumber: syz [ 234.906584][ T1888] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 235.000813][ T5709] usb 1-1: Limiting number of CPorts to U8_MAX [ 235.026815][T10409] netlink: 'syz.5.1863': attribute type 10 has an invalid length. [ 235.047078][T10409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.060733][T10409] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 235.069105][ T1888] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 235.070068][ T1888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 235.070115][ T1888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.318325][ T1888] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 235.332683][ T1888] wwan wwan0: port wwan0qmi0 attached [ 235.486410][ T5618] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 235.559662][ T1888] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, ca:ee:e5:3d:94:ff [ 235.571608][ T1888] usb 3-1: USB disconnect, device number 22 [ 235.603960][ T1888] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 235.657069][ T5618] usb 2-1: Using ep0 maxpacket: 16 [ 235.666745][ T5618] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 235.678347][ T5618] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 235.692771][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.692812][ T5618] usb 2-1: Product: syz [ 235.692845][ T5618] usb 2-1: Manufacturer: syz [ 235.692888][ T5618] usb 2-1: SerialNumber: syz [ 235.700284][ T1888] wwan wwan0: port wwan0qmi0 disconnected [ 235.729523][ T5694] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 235.744544][ T5618] r8152-cfgselector 2-1: Unknown version 0x0000 [ 235.744608][ T5618] r8152-cfgselector 2-1: config 0 descriptor?? [ 235.852098][ T5758] usb 1-1: USB disconnect, device number 26 [ 235.852114][ C0] usb 1-1: failed to resubmit arpc in-urb: -19 [ 235.852155][ C0] usb 1-1: failed to resubmit arpc in-urb: -19 [ 235.852195][ C0] usb 1-1: failed to resubmit in-urb: -19 [ 235.852235][ C0] usb 1-1: failed to resubmit in-urb: -19 [ 235.852275][ C0] usb 1-1: failed to resubmit in-urb: -19 [ 235.852315][ C0] usb 1-1: failed to resubmit in-urb: -19 [ 235.867820][ T5758] usb 1-1: failed to send ARPC request 4: -19 [ 235.867890][ T5758] usb 1-1: failed to execute ARPC: -19 [ 235.867903][ T5758] usb 1-1: failed to flush cport 0: -19 [ 235.867919][ T5758] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 235.868042][ T5758] usb 1-1: failed to send ARPC request 2: -19 [ 235.868103][ T5758] usb 1-1: failed to execute ARPC: -19 [ 235.868116][ T5758] usb 1-1: failed to quiesce cport 0: -19 (0) [ 235.868132][ T5758] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 235.868255][ T5758] usb 1-1: failed to send ARPC request 3: -19 [ 235.868316][ T5758] usb 1-1: failed to execute ARPC: -19 [ 235.868329][ T5758] usb 1-1: failed to clear cport 0: -19 [ 235.868343][ T5758] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 235.893238][ T5694] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 235.895896][ T5694] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.895951][ T5694] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 235.895973][ T5694] usb 5-1: config 0 interface 0 has no altsetting 0 [ 235.909893][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 235.909919][ T5694] usb 5-1: Product: syz [ 235.909932][ T5694] usb 5-1: Manufacturer: syz [ 235.909946][ T5694] usb 5-1: SerialNumber: syz [ 235.914848][ T5694] usb 5-1: config 0 descriptor?? [ 235.915824][T10423] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 235.946538][ T5694] usb 5-1: selecting invalid altsetting 0 [ 236.049906][ T5618] r8152-cfgselector 2-1: Needed 2 retries to read version [ 236.181507][ T5694] usb 5-1: USB disconnect, device number 22 [ 236.282350][ T1888] r8152-cfgselector 2-1: USB disconnect, device number 20 [ 236.539348][T10441] netlink: 'syz.2.1878': attribute type 10 has an invalid length. [ 236.544379][T10441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.548377][T10441] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 236.573031][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1879'. [ 236.573093][T10444] netlink: 'syz.5.1879': attribute type 10 has an invalid length. [ 236.573125][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1879'. [ 236.602378][T10444] geneve2: entered promiscuous mode [ 236.602427][T10444] geneve2: entered allmulticast mode [ 236.697470][T10448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1881'. [ 236.708752][T10448] bond0: ARP target 1.4.0.0 is already present [ 236.716574][T10448] bond0: option arp_ip_target: invalid value (1025) [ 237.016732][ T5694] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 237.181247][ T5694] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 237.181306][ T5694] usb 1-1: too many configurations: 53, using maximum allowed: 8 [ 237.232822][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.232865][ T5694] usb 1-1: Product: syz [ 237.232893][ T5694] usb 1-1: Manufacturer: syz [ 237.232910][ T5694] usb 1-1: SerialNumber: syz [ 237.438207][T10483] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1896'. [ 237.673016][ T5694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 237.673062][ T5694] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 237.697920][ T5694] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 237.720792][ T5694] usb 1-1: USB disconnect, device number 27 [ 238.041259][T10508] loop8: detected capacity change from 0 to 7 [ 238.048362][T10508] Dev loop8: unable to read RDB block 7 [ 238.048404][T10508] loop8: unable to read partition table [ 238.054987][T10508] loop8: partition table beyond EOD, truncated [ 238.055013][T10508] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 238.083891][ T4985] Dev loop8: unable to read RDB block 7 [ 238.083986][ T4985] loop8: unable to read partition table [ 238.084180][ T4985] loop8: partition table beyond EOD, truncated [ 238.516462][ C1] net_ratelimit: 1267 callbacks suppressed [ 238.516567][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 238.860606][T10535] Invalid argument reading file caps for ./file0 [ 238.999416][T10511] geneve0: entered promiscuous mode [ 239.556431][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 239.606855][ T5758] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 239.771290][ T5758] usb 1-1: unable to get BOS descriptor or descriptor too short [ 239.771350][ T5758] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 239.772189][ T5758] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 239.772221][ T5758] usb 1-1: can't read configurations, error -71 [ 239.986700][T10561] xt_LOG: level 115 >= 8 [ 240.596349][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.450930][ T31] audit: type=1326 audit(1787927222.478:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.2.1957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 241.458863][ T31] audit: type=1326 audit(1787927222.478:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.2.1957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 241.458908][ T31] audit: type=1326 audit(1787927222.488:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.2.1957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 241.458946][ T31] audit: type=1326 audit(1787927222.488:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.2.1957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 241.458982][ T31] audit: type=1326 audit(1787927222.488:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.2.1957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 241.459633][ T31] audit: type=1326 audit(1787927222.488:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.2.1957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 241.460274][ T31] audit: type=1326 audit(1787927222.488:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.2.1957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 241.461242][ T31] audit: type=1326 audit(1787927222.488:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.2.1957" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x7ffc0000 [ 241.602222][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1958'. [ 241.636392][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 241.646479][ T1888] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 241.759662][T10637] IPVS: set_ctl: invalid protocol: 122 224.0.0.1:20000 [ 241.797763][ T1888] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 241.808110][ T1888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.808154][ T1888] usb 2-1: Product: syz [ 241.808176][ T1888] usb 2-1: Manufacturer: syz [ 241.808191][ T1888] usb 2-1: SerialNumber: syz [ 241.818820][ T1888] usb 2-1: config 0 descriptor?? [ 241.826093][ T1888] hub 2-1:0.0: bad descriptor, ignoring hub [ 241.826117][ T1888] hub 2-1:0.0: probe with driver hub failed with error -5 [ 241.867066][T10639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1961'. [ 242.049916][ T1888] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 242.097964][ T1888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.114623][ T1888] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 242.114728][ T1888] usb 2-1: media controller created [ 242.172876][ T1888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.253368][T10628] dib0700: tx buffer length is larger than 4. Not supported. [ 242.262253][ T1888] DVB: Unable to find symbol dib7000p_attach() [ 242.262268][ T1888] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 242.450514][ T1888] rc_core: IR keymap rc-dib0700-rc5 not found [ 242.450557][ T1888] Registered IR keymap rc-empty [ 242.450827][ T1888] dvb-usb: could not initialize remote control. [ 242.450837][ T1888] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 242.492914][ T1888] usb 2-1: USB disconnect, device number 21 [ 242.608484][ T1888] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 242.655125][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1973'. [ 242.661257][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1973'. [ 242.663833][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1973'. [ 242.676405][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 242.762127][ T5694] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 242.791241][T10673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1974'. [ 242.908586][ T5694] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 242.909945][ T5694] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 242.909969][ T5694] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 242.910005][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.928573][ T5694] usb 1-1: probing VID:PID(0424:012C) [ 242.941593][ T5694] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 242.941619][ T5694] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 242.941636][ T5694] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 242.941652][ T5694] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 242.941672][ T5694] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 243.346229][ T5694] usb 1-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 243.358394][T10691] syzkaller1: entered promiscuous mode [ 243.364247][T10691] syzkaller1: entered allmulticast mode [ 243.489159][T10699] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 243.551094][ T5694] usb 1-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 243.706424][ T5758] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 243.716485][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 243.859672][ T5758] usb 6-1: unable to get BOS descriptor or descriptor too short [ 243.859742][ T5758] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 243.860813][ T5758] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.860833][ T5758] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 243.860872][ T5758] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 243.860902][ T5758] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 243.860936][ T5758] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 243.860959][ T5758] usb 6-1: config 1 interface 1 has no altsetting 0 [ 243.864744][ T5758] usb 6-1: string descriptor 0 read error: -22 [ 243.864870][ T5758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.299391][ T5758] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 244.300021][ T5758] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 244.300041][ T5758] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 244.369941][ T5694] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 244.383734][ T31] audit: type=1326 audit(1787927225.408:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.2.2002" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f980ec code=0x0 [ 244.416368][ T5709] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 244.444963][ T5694] usb 1-1: USB disconnect, device number 30 [ 244.462505][ T925] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 244.471795][ T925] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 244.473197][ T925] usb 1-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 244.579288][ T5709] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 244.591747][ T5709] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 244.591818][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.756430][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 244.807198][ T5758] usb 6-1: USB disconnect, device number 13 [ 245.035729][ T5709] lg-g15 0003:046D:C222.0019: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 245.148913][ T5694] USB vub300 remote SDIO host controller[0] now disconnected [ 245.229945][ T5709] input: Logitech Gaming Keyboard Gaming Keys as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:046D:C222.0019/input/input34 [ 245.316564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.317424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.396801][ C1] [ 245.400735][ C1] ============================= [ 245.405825][T10743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.407705][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.422657][ C1] WARNING: suspicious RCU usage [ 245.427917][ C1] syzkaller #0 Tainted: G L [ 245.434393][ C1] ----------------------------- [ 245.440362][ C1] kernel/sched/core.c:9196 Illegal context switch in RCU-sched read-side critical section! [ 245.450579][ C1] [ 245.450579][ C1] other info that might help us debug this: [ 245.450579][ C1] [ 245.460959][ C1] [ 245.460959][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 245.469160][ C1] locks held by syz-executor/8160: 9, last CPU#1: [ 245.475679][ C1] #0: ffffffff8ee35b90 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 245.484662][ C1] #1: ffff8880772003b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 245.495364][ C1] #2: ffff88801b097678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 245.497802][ T5709] lg-g15 0003:046D:C222.0019: Error getting LED brightness: -71 [ 245.511610][ T5709] lg-g15 0003:046D:C222.0019: Error getting LED brightness: -71 [ 245.520303][ T5709] lg-g15 0003:046D:C222.0019: Error getting LED brightness: -71 [ 245.529246][ C1] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 245.530486][ T5709] lg-g15 0003:046D:C222.0019: Error getting LED brightness: -71 [ 245.543379][ T5709] lg-g15 0003:046D:C222.0019: Error getting LED brightness: -71 [ 245.552686][ T5709] lg-g15 0003:046D:C222.0019: Error getting LED brightness: -71 [ 245.558366][ T5709] usb 2-1: USB disconnect, device number 22 [ 245.569408][ C1] #4: ffff88805583eeb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 245.580150][ C1] #5: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 245.589824][ C1] #6: ffff8880295db318 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 245.600224][ C1] #7: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 245.610057][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 245.620923][ C1] [ 245.620923][ C1] stack backtrace: [ 245.627779][ C1] CPU: 1 UID: 0 PID: 8160 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 245.638820][ C1] Tainted: [L]=SOFTLOCKUP [ 245.643661][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.653806][ C1] Call Trace: [ 245.657084][ C1] [ 245.659934][ C1] dump_stack_lvl+0xe8/0x150 [ 245.664532][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 245.669904][ C1] __might_resched+0xbb/0x4c0 [ 245.674600][ C1] ? __cancel_work_sync+0x5c/0x110 [ 245.679712][ C1] __cancel_work_sync+0x6d/0x110 [ 245.684671][ C1] mmc_free_host+0x19/0x30 [ 245.689204][ C1] call_timer_fn+0x18d/0x5f0 [ 245.693790][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 245.700458][ C1] ? call_timer_fn+0xd5/0x5f0 [ 245.705149][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 245.710691][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 245.715886][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 245.723072][ C1] __run_timer_base+0x652/0x8b0 [ 245.728106][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 245.733478][ C1] ? ktime_get+0x1f5/0x220 [ 245.738001][ C1] ? lapic_next_event+0x11/0x20 [ 245.743050][ C1] run_timer_softirq+0xb7/0x170 [ 245.747900][ C1] handle_softirqs+0x226/0x860 [ 245.753060][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 245.758314][ C1] __irq_exit_rcu+0xcb/0x220 [ 245.762922][ C1] irq_exit_rcu+0x9/0x30 [ 245.767171][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 245.773139][ C1] [ 245.776957][ C1] [ 245.780351][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 245.786440][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 245.792003][ C1] Code: ff ff ff e8 40 dc 3f 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 e7 f0 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 07 23 da [ 245.813024][ C1] RSP: 0018:ffffc90004867210 EFLAGS: 00000292 [ 245.819297][ C1] RAX: debc2c9cc5bad500 RBX: 0000000000000000 RCX: 8000000000000003 [ 245.827269][ C1] RDX: 00000000e98138db RSI: ffffffff8e6fac39 RDI: ffffffff8c6d8b80 [ 245.835323][ C1] RBP: ffff88801cf2be80 R08: 3300000000000000 R09: 0000000000000000 [ 245.844091][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 245.852183][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 245.860898][ C1] ? pfn_valid+0xba/0x490 [ 245.865406][ C1] pfn_valid+0xd6/0x490 [ 245.870018][ C1] ? pfn_valid+0xba/0x490 [ 245.875059][ C1] page_table_check_set+0x25/0x530 [ 245.880191][ C1] copy_pmd_range+0x4adc/0x5c10 [ 245.885080][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 245.890920][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 245.896128][ C1] ? __lock_acquire+0x6df/0x2e50 [ 245.901335][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 245.906661][ C1] copy_page_range+0xc82/0x1290 [ 245.911542][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 245.916925][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 245.922526][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 245.929893][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 245.936730][ C1] dup_mmap+0xf17/0x1dc0 [ 245.941380][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 245.946535][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 245.951834][ C1] ? lock_acquire+0x115/0x350 [ 245.956534][ C1] copy_mm+0x11a/0x480 [ 245.960803][ C1] ? copy_process+0xd3c/0x43e0 [ 245.965592][ C1] copy_process+0x1e75/0x43e0 [ 245.970303][ C1] ? __lock_acquire+0x6df/0x2e50 [ 245.975269][ C1] ? copy_process+0xd3c/0x43e0 [ 245.980045][ C1] ? __pfx_copy_process+0x10/0x10 [ 245.985126][ C1] kernel_clone+0x2d7/0x940 [ 245.989716][ C1] ? cgroup1_freezing+0x20/0x350 [ 245.994862][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 246.000123][ C1] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 246.006103][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 246.012563][ C1] ? exc_page_fault+0x6a/0xc0 [ 246.017355][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 246.022579][ C1] ? do_fast_syscall_32+0x33/0x70 [ 246.027615][ C1] ? irqentry_exit+0x10f/0x910 [ 246.032449][ C1] ? trace_irq_disable+0x3b/0x140 [ 246.037570][ C1] do_fast_syscall_32+0x33/0x70 [ 246.042683][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.050293][ C1] RIP: 0023:0xf7f270ec [ 246.054498][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 246.075829][ C1] RSP: 002b:00000000f750fc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 246.084255][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 246.092411][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056ba94e8 [ 246.100484][ C1] RBP: 00000000f750fcb4 R08: 0000000000000000 R09: 0000000000000000 [ 246.108459][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 246.116959][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.125660][ C1] [ 246.130155][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:4552 [ 246.130204][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8160, name: syz-executor [ 246.130220][ C1] preempt_count: 103, expected: 0 [ 246.130230][ C1] RCU nest depth: 2, expected: 0 [ 246.130240][ C1] locks held by syz-executor/8160: 9, last CPU#1: [ 246.130253][ C1] #0: ffffffff8ee35b90 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 246.130328][ C1] #1: ffff8880772003b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 246.130389][ C1] #2: ffff88801b097678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 246.130458][ C1] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 246.130522][ C1] #4: ffff88805583eeb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 246.130588][ C1] #5: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 246.130647][ C1] #6: ffff8880295db318 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 246.130733][ C1] #7: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 246.130805][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 246.130879][ C1] Preemption disabled at: [ 246.130888][ C1] [<0000000000000000>] 0x0 [ 246.130918][ C1] CPU: 1 UID: 0 PID: 8160 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 246.130949][ C1] Tainted: [L]=SOFTLOCKUP [ 246.130957][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.130970][ C1] Call Trace: [ 246.130979][ C1] [ 246.130987][ C1] dump_stack_lvl+0xe8/0x150 [ 246.131020][ C1] __might_resched+0x36a/0x4c0 [ 246.131060][ C1] __cancel_work_sync+0x6d/0x110 [ 246.131092][ C1] mmc_free_host+0x19/0x30 [ 246.131118][ C1] call_timer_fn+0x18d/0x5f0 [ 246.131143][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 246.131170][ C1] ? call_timer_fn+0xd5/0x5f0 [ 246.131195][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 246.131231][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 246.131255][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 246.131284][ C1] __run_timer_base+0x652/0x8b0 [ 246.131333][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 246.131362][ C1] ? ktime_get+0x1f5/0x220 [ 246.131385][ C1] ? lapic_next_event+0x11/0x20 [ 246.131414][ C1] run_timer_softirq+0xb7/0x170 [ 246.131438][ C1] handle_softirqs+0x226/0x860 [ 246.131470][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 246.131505][ C1] __irq_exit_rcu+0xcb/0x220 [ 246.131534][ C1] irq_exit_rcu+0x9/0x30 [ 246.131565][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 246.131594][ C1] [ 246.131601][ C1] [ 246.131610][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 246.131634][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 246.131655][ C1] Code: ff ff ff e8 40 dc 3f 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 e7 f0 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 07 23 da [ 246.131673][ C1] RSP: 0018:ffffc90004867210 EFLAGS: 00000292 [ 246.131691][ C1] RAX: debc2c9cc5bad500 RBX: 0000000000000000 RCX: 8000000000000003 [ 246.131707][ C1] RDX: 00000000e98138db RSI: ffffffff8e6fac39 RDI: ffffffff8c6d8b80 [ 246.131724][ C1] RBP: ffff88801cf2be80 R08: 3300000000000000 R09: 0000000000000000 [ 246.131740][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 246.131756][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 246.131783][ C1] ? pfn_valid+0xba/0x490 [ 246.131808][ C1] pfn_valid+0xd6/0x490 [ 246.131827][ C1] ? pfn_valid+0xba/0x490 [ 246.131851][ C1] page_table_check_set+0x25/0x530 [ 246.131881][ C1] copy_pmd_range+0x4adc/0x5c10 [ 246.131928][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 246.131972][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 246.132007][ C1] ? __lock_acquire+0x6df/0x2e50 [ 246.132035][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 246.132070][ C1] copy_page_range+0xc82/0x1290 [ 246.132113][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 246.132142][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 246.132170][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 246.132204][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 246.132242][ C1] dup_mmap+0xf17/0x1dc0 [ 246.132291][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 246.132328][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 246.132370][ C1] ? lock_acquire+0x115/0x350 [ 246.132408][ C1] copy_mm+0x11a/0x480 [ 246.132438][ C1] ? copy_process+0xd3c/0x43e0 [ 246.132464][ C1] copy_process+0x1e75/0x43e0 [ 246.132491][ C1] ? __lock_acquire+0x6df/0x2e50 [ 246.132519][ C1] ? copy_process+0xd3c/0x43e0 [ 246.132564][ C1] ? __pfx_copy_process+0x10/0x10 [ 246.132604][ C1] kernel_clone+0x2d7/0x940 [ 246.132632][ C1] ? cgroup1_freezing+0x20/0x350 [ 246.132669][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 246.132716][ C1] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 246.132744][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 246.132780][ C1] ? exc_page_fault+0x6a/0xc0 [ 246.132819][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 246.132851][ C1] ? do_fast_syscall_32+0x33/0x70 [ 246.132882][ C1] ? irqentry_exit+0x10f/0x910 [ 246.132908][ C1] ? trace_irq_disable+0x3b/0x140 [ 246.132931][ C1] do_fast_syscall_32+0x33/0x70 [ 246.132959][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 246.132985][ C1] RIP: 0023:0xf7f270ec [ 246.133004][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 246.133023][ C1] RSP: 002b:00000000f750fc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 246.133042][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 246.133057][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056ba94e8 [ 246.133069][ C1] RBP: 00000000f750fcb4 R08: 0000000000000000 R09: 0000000000000000 [ 246.133083][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 246.133097][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.133127][ C1] [ 246.133776][ C1] [ 246.760974][ C1] ============================= [ 246.765892][ C1] WARNING: suspicious RCU usage [ 246.770970][ C1] syzkaller #0 Tainted: G W L [ 246.777081][ C1] ----------------------------- [ 246.783683][ C1] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 246.795904][ C1] [ 246.795904][ C1] other info that might help us debug this: [ 246.795904][ C1] [ 246.806379][ C1] [ 246.806379][ C1] rcu_scheduler_active = 2, debug_locks = 1 [ 246.814794][ C1] locks held by syz-executor/8160: 9, last CPU#1: [ 246.821267][ C1] #0: ffffffff8ee35b90 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 246.830111][ C1] #1: ffff8880772003b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 246.839334][ C1] #2: ffff88801b097678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 246.849544][ C1] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 246.859114][ C1] #4: ffff88805583eeb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 246.869714][ C1] #5: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 246.879322][ C1] #6: ffff8880295db318 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 246.889933][ C1] #7: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 246.900028][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 246.910551][ C1] [ 246.910551][ C1] stack backtrace: [ 246.916583][ C1] CPU: 1 UID: 0 PID: 8160 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 246.927701][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 246.932978][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.943238][ C1] Call Trace: [ 246.946543][ C1] [ 246.949497][ C1] dump_stack_lvl+0xe8/0x150 [ 246.954090][ C1] lockdep_rcu_suspicious+0x140/0x1d0 [ 246.959485][ C1] __synchronize_srcu+0x157/0x2f0 [ 246.964568][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 246.970316][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 246.975353][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 246.981274][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 246.986839][ C1] ? synchronize_srcu+0x20a/0x260 [ 246.991967][ C1] wakeup_source_unregister+0x129/0x3f0 [ 246.997726][ C1] mmc_host_classdev_release+0x47/0x100 [ 247.003316][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 247.009560][ C1] device_release+0xc4/0x1f0 [ 247.014184][ C1] kobject_put+0x222/0x550 [ 247.018608][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 247.023370][ C1] call_timer_fn+0x18d/0x5f0 [ 247.027964][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 247.034651][ C1] ? call_timer_fn+0xd5/0x5f0 [ 247.039346][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 247.044475][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.049687][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 247.056357][ C1] __run_timer_base+0x652/0x8b0 [ 247.061314][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 247.066696][ C1] ? ktime_get+0x1f5/0x220 [ 247.071113][ C1] ? lapic_next_event+0x11/0x20 [ 247.076012][ C1] run_timer_softirq+0xb7/0x170 [ 247.081300][ C1] handle_softirqs+0x226/0x860 [ 247.086074][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 247.091126][ C1] __irq_exit_rcu+0xcb/0x220 [ 247.096074][ C1] irq_exit_rcu+0x9/0x30 [ 247.100314][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 247.105949][ C1] [ 247.108900][ C1] [ 247.112205][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.118213][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 247.123583][ C1] Code: ff ff ff e8 40 dc 3f 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 e7 f0 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 07 23 da [ 247.143571][ C1] RSP: 0018:ffffc90004867210 EFLAGS: 00000292 [ 247.149660][ C1] RAX: debc2c9cc5bad500 RBX: 0000000000000000 RCX: 8000000000000003 [ 247.157726][ C1] RDX: 00000000e98138db RSI: ffffffff8e6fac39 RDI: ffffffff8c6d8b80 [ 247.165695][ C1] RBP: ffff88801cf2be80 R08: 3300000000000000 R09: 0000000000000000 [ 247.173941][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 247.181928][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 247.189961][ C1] ? pfn_valid+0xba/0x490 [ 247.194396][ C1] pfn_valid+0xd6/0x490 [ 247.198743][ C1] ? pfn_valid+0xba/0x490 [ 247.203079][ C1] page_table_check_set+0x25/0x530 [ 247.208216][ C1] copy_pmd_range+0x4adc/0x5c10 [ 247.213072][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 247.218528][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 247.223745][ C1] ? __lock_acquire+0x6df/0x2e50 [ 247.228707][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 247.234184][ C1] copy_page_range+0xc82/0x1290 [ 247.239292][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 247.244632][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 247.250097][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 247.257125][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 247.263721][ C1] dup_mmap+0xf17/0x1dc0 [ 247.268048][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 247.272916][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 247.277965][ C1] ? lock_acquire+0x115/0x350 [ 247.282676][ C1] copy_mm+0x11a/0x480 [ 247.287196][ C1] ? copy_process+0xd3c/0x43e0 [ 247.292069][ C1] copy_process+0x1e75/0x43e0 [ 247.297805][ C1] ? __lock_acquire+0x6df/0x2e50 [ 247.303102][ C1] ? copy_process+0xd3c/0x43e0 [ 247.308124][ C1] ? __pfx_copy_process+0x10/0x10 [ 247.313548][ C1] kernel_clone+0x2d7/0x940 [ 247.318297][ C1] ? cgroup1_freezing+0x20/0x350 [ 247.323861][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 247.329160][ C1] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 247.335743][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 247.342969][ C1] ? exc_page_fault+0x6a/0xc0 [ 247.348628][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 247.354307][ C1] ? do_fast_syscall_32+0x33/0x70 [ 247.359785][ C1] ? irqentry_exit+0x10f/0x910 [ 247.364704][ C1] ? trace_irq_disable+0x3b/0x140 [ 247.369820][ C1] do_fast_syscall_32+0x33/0x70 [ 247.374955][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.384338][ C1] RIP: 0023:0xf7f270ec [ 247.388876][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 247.409777][ C1] RSP: 002b:00000000f750fc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 247.418521][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 247.426604][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056ba94e8 [ 247.435021][ C1] RBP: 00000000f750fcb4 R08: 0000000000000000 R09: 0000000000000000 [ 247.443012][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.451952][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.461026][ C1] [ 247.464224][ C1] BUG: sleeping function called from invali ** replaying previous printk message ** [ 247.464224][ C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 247.464256][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8160, name: syz-executor [ 247.464280][ C1] preempt_count: 103, expected: 0 [ 247.464295][ C1] RCU nest depth: 2, expected: 0 [ 247.464310][ C1] locks held by syz-executor/8160: 9, last CPU#1: [ 247.464331][ C1] #0: ffffffff8ee35b90 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 247.464407][ C1] #1: ffff8880772003b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 247.464481][ C1] #2: ffff88801b097678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 247.464570][ C1] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 247.464647][ C1] #4: ffff88805583eeb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 247.464732][ C1] #5: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 247.464806][ C1] #6: ffff8880295db318 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 247.464895][ C1] #7: ffffffff8ed5c7a0 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 247.464941][ C1] #8: ffffc90000a18cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 247.464997][ C1] Preemption disabled at: [ 247.465002][ C1] [<0000000000000000>] 0x0 [ 247.465028][ C1] CPU: 1 UID: 0 PID: 8160 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 247.465057][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 247.465065][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.465078][ C1] Call Trace: [ 247.465087][ C1] [ 247.465095][ C1] dump_stack_lvl+0xe8/0x150 [ 247.465126][ C1] __might_resched+0x36a/0x4c0 [ 247.465164][ C1] __synchronize_srcu+0x1a1/0x2f0 [ 247.465188][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 247.465208][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 247.465255][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 247.465281][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 247.465317][ C1] ? synchronize_srcu+0x20a/0x260 [ 247.465340][ C1] wakeup_source_unregister+0x129/0x3f0 [ 247.465375][ C1] mmc_host_classdev_release+0x47/0x100 [ 247.465408][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 247.465436][ C1] device_release+0xc4/0x1f0 [ 247.465460][ C1] kobject_put+0x222/0x550 [ 247.465493][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 247.465516][ C1] call_timer_fn+0x18d/0x5f0 [ 247.465541][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 247.465566][ C1] ? call_timer_fn+0xd5/0x5f0 [ 247.465590][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 247.465624][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.465648][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 247.465677][ C1] __run_timer_base+0x652/0x8b0 [ 247.465713][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 247.465738][ C1] ? ktime_get+0x1f5/0x220 [ 247.465759][ C1] ? lapic_next_event+0x11/0x20 [ 247.465787][ C1] run_timer_softirq+0xb7/0x170 [ 247.465811][ C1] handle_softirqs+0x226/0x860 [ 247.465842][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 247.465876][ C1] __irq_exit_rcu+0xcb/0x220 [ 247.465904][ C1] irq_exit_rcu+0x9/0x30 [ 247.465929][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 247.465956][ C1] [ 247.465963][ C1] [ 247.465971][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.465995][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 247.466016][ C1] Code: ff ff ff e8 40 dc 3f 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 e7 f0 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 07 23 da [ 247.466034][ C1] RSP: 0018:ffffc90004867210 EFLAGS: 00000292 [ 247.466052][ C1] RAX: debc2c9cc5bad500 RBX: 0000000000000000 RCX: 8000000000000003 [ 247.466068][ C1] RDX: 00000000e98138db RSI: ffffffff8e6fac39 RDI: ffffffff8c6d8b80 [ 247.466083][ C1] RBP: ffff88801cf2be80 R08: 3300000000000000 R09: 0000000000000000 [ 247.466098][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 247.466113][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 247.466141][ C1] ? pfn_valid+0xba/0x490 [ 247.466164][ C1] pfn_valid+0xd6/0x490 [ 247.466184][ C1] ? pfn_valid+0xba/0x490 [ 247.466208][ C1] page_table_check_set+0x25/0x530 [ 247.466241][ C1] copy_pmd_range+0x4adc/0x5c10 [ 247.466292][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 247.466332][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 247.466367][ C1] ? __lock_acquire+0x6df/0x2e50 [ 247.466394][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 247.466427][ C1] copy_page_range+0xc82/0x1290 [ 247.466467][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 247.466496][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 247.466522][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 247.466555][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 247.466592][ C1] dup_mmap+0xf17/0x1dc0 [ 247.466637][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 247.466667][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 247.466708][ C1] ? lock_acquire+0x115/0x350 [ 247.466743][ C1] copy_mm+0x11a/0x480 [ 247.466772][ C1] ? copy_process+0xd3c/0x43e0 [ 247.466802][ C1] copy_process+0x1e75/0x43e0 [ 247.466829][ C1] ? __lock_acquire+0x6df/0x2e50 [ 247.466855][ C1] ? copy_process+0xd3c/0x43e0 [ 247.466899][ C1] ? __pfx_copy_process+0x10/0x10 [ 247.466937][ C1] kernel_clone+0x2d7/0x940 [ 247.466964][ C1] ? cgroup1_freezing+0x20/0x350 [ 247.466997][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 247.467044][ C1] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 247.467070][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 247.467107][ C1] ? exc_page_fault+0x6a/0xc0 [ 247.467145][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 247.467236][ C1] ? do_fast_syscall_32+0x33/0x70 [ 247.467278][ C1] ? irqentry_exit+0x10f/0x910 [ 247.467305][ C1] ? trace_irq_disable+0x3b/0x140 [ 247.467330][ C1] do_fast_syscall_32+0x33/0x70 [ 247.467360][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.467392][ C1] RIP: 0023:0xf7f270ec [ 247.467412][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 247.467430][ C1] RSP: 002b:00000000f750fc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 247.467452][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 247.467468][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056ba94e8 [ 247.467480][ C1] RBP: 00000000f750fcb4 R08: 0000000000000000 R09: 0000000000000000 [ 247.467493][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 247.467506][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.467534][ C1] [ 247.469180][ C1] ODEBUG: object ffffc90000a18a80 is NOT on stack ffffc90004860000, but annotated. [ 247.469872][ C1] ------------[ cut here ]------------ [ 247.469880][ C1] 1 [ 247.469890][ C1] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#1: syz-executor/8160 [ 248.189098][ C1] Modules linked in: [ 248.193029][ C1] CPU: 1 UID: 0 PID: 8160 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 248.204936][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 248.210333][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.220845][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 248.226799][ C1] Code: fd 06 cc 41 ff c7 44 89 3d 49 d6 e8 15 48 c7 c1 80 94 6d 8c 48 c7 c7 e0 94 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 1d cb 3e fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 01 90 6f 0a 3b 05 ff [ 248.246678][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 248.252750][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: debc2c9cc5bad500 [ 248.261270][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 248.269371][ C1] RBP: ffff88801cf2bea0 R08: 0000000000000100 R09: 0000000000080000 [ 248.278066][ C1] R10: 0000000000008000 R11: ffffffff8ec362b8 R12: ffff88801fb5d670 [ 248.286140][ C1] R13: ffff888079c1a460 R14: dffffc0000000000 R15: 0000000000000001 [ 248.294583][ C1] FS: 0000000000000000(0000) GS:ffff888124de0000(0063) knlGS:0000000056ba9480 [ 248.304485][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 248.312151][ C1] CR2: 00000000f7f8a190 CR3: 000000007bf90000 CR4: 00000000003526f0 [ 248.321058][ C1] Call Trace: [ 248.324447][ C1] [ 248.327325][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 248.333300][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 248.338634][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 248.344362][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 248.349701][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 248.355636][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 248.361228][ C1] ? synchronize_srcu+0x20a/0x260 [ 248.366253][ C1] wakeup_source_unregister+0x129/0x3f0 [ 248.371837][ C1] mmc_host_classdev_release+0x47/0x100 [ 248.377526][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 248.384045][ C1] device_release+0xc4/0x1f0 [ 248.388661][ C1] kobject_put+0x222/0x550 [ 248.393116][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 248.397930][ C1] call_timer_fn+0x18d/0x5f0 [ 248.402552][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 248.409320][ C1] ? call_timer_fn+0xd5/0x5f0 [ 248.414099][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 248.419397][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.424591][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 248.431262][ C1] __run_timer_base+0x652/0x8b0 [ 248.436140][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 248.441509][ C1] ? ktime_get+0x1f5/0x220 [ 248.445913][ C1] ? lapic_next_event+0x11/0x20 [ 248.450756][ C1] run_timer_softirq+0xb7/0x170 [ 248.455703][ C1] handle_softirqs+0x226/0x860 [ 248.460492][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 248.465528][ C1] __irq_exit_rcu+0xcb/0x220 [ 248.470153][ C1] irq_exit_rcu+0x9/0x30 [ 248.474400][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 248.480053][ C1] [ 248.483076][ C1] [ 248.485999][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.492088][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 248.497387][ C1] Code: ff ff ff e8 40 dc 3f 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 e7 f0 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 07 23 da [ 248.517001][ C1] RSP: 0018:ffffc90004867210 EFLAGS: 00000292 [ 248.523100][ C1] RAX: debc2c9cc5bad500 RBX: 0000000000000000 RCX: 8000000000000003 [ 248.531080][ C1] RDX: 00000000e98138db RSI: ffffffff8e6fac39 RDI: ffffffff8c6d8b80 [ 248.539274][ C1] RBP: ffff88801cf2be80 R08: 3300000000000000 R09: 0000000000000000 [ 248.547250][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 248.555525][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 248.563521][ C1] ? pfn_valid+0xba/0x490 [ 248.567947][ C1] pfn_valid+0xd6/0x490 [ 248.572217][ C1] ? pfn_valid+0xba/0x490 [ 248.576563][ C1] page_table_check_set+0x25/0x530 [ 248.581770][ C1] copy_pmd_range+0x4adc/0x5c10 [ 248.586646][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 248.592155][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 248.597394][ C1] ? __lock_acquire+0x6df/0x2e50 [ 248.602361][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 248.607583][ C1] copy_page_range+0xc82/0x1290 [ 248.612463][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 248.617755][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 248.623236][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 248.630178][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 248.636797][ C1] dup_mmap+0xf17/0x1dc0 [ 248.641081][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 248.645919][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 248.650970][ C1] ? lock_acquire+0x115/0x350 [ 248.655680][ C1] copy_mm+0x11a/0x480 [ 248.659776][ C1] ? copy_process+0xd3c/0x43e0 [ 248.664641][ C1] copy_process+0x1e75/0x43e0 [ 248.669334][ C1] ? __lock_acquire+0x6df/0x2e50 [ 248.674318][ C1] ? copy_process+0xd3c/0x43e0 [ 248.679113][ C1] ? __pfx_copy_process+0x10/0x10 [ 248.684176][ C1] kernel_clone+0x2d7/0x940 [ 248.688949][ C1] ? cgroup1_freezing+0x20/0x350 [ 248.693907][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 248.698987][ C1] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 248.704900][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 248.711616][ C1] ? exc_page_fault+0x6a/0xc0 [ 248.716740][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 248.721947][ C1] ? do_fast_syscall_32+0x33/0x70 [ 248.727058][ C1] ? irqentry_exit+0x10f/0x910 [ 248.731820][ C1] ? trace_irq_disable+0x3b/0x140 [ 248.737921][ C1] do_fast_syscall_32+0x33/0x70 [ 248.742883][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.749237][ C1] RIP: 0023:0xf7f270ec [ 248.753394][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 248.773827][ C1] RSP: 002b:00000000f750fc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 248.783097][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 248.791430][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056ba94e8 [ 248.799501][ C1] RBP: 00000000f750fcb4 R08: 0000000000000000 R09: 0000000000000000 [ 248.807553][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 248.815511][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.823747][ C1] [ 248.826879][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 248.834284][ C1] CPU: 1 UID: 0 PID: 8160 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 248.845330][ C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 248.850521][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.861187][ C1] Call Trace: [ 248.864504][ C1] [ 248.867343][ C1] vpanic+0x56d/0xa60 [ 248.871359][ C1] ? __pfx__printk+0x10/0x10 [ 248.875976][ C1] ? __pfx_vpanic+0x10/0x10 [ 248.880755][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 248.886063][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 248.891799][ C1] panic+0xc5/0xd0 [ 248.895566][ C1] ? __pfx_panic+0x10/0x10 [ 248.900364][ C1] __warn+0x315/0x4c0 [ 248.904441][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 248.910021][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 248.915754][ C1] __report_bug+0x276/0x570 [ 248.920282][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 248.925585][ C1] ? __pfx___report_bug+0x10/0x10 [ 248.930736][ C1] ? __wake_up_klogd+0xf0/0x130 [ 248.935714][ C1] ? vprintk_emit+0x4ee/0x560 [ 248.940430][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 248.945997][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 248.951048][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 248.956696][ C1] report_bug+0x16b/0x220 [ 248.961046][ C1] ? __debug_object_init+0x2c4/0x3c0 [ 248.966465][ C1] ? __debug_object_init+0x2c6/0x3c0 [ 248.971956][ C1] handle_bug+0x9c/0x200 [ 248.976342][ C1] exc_invalid_op+0x1a/0x50 [ 248.980880][ C1] asm_exc_invalid_op+0x1a/0x20 [ 248.985771][ C1] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 248.991682][ C1] Code: fd 06 cc 41 ff c7 44 89 3d 49 d6 e8 15 48 c7 c1 80 94 6d 8c 48 c7 c7 e0 94 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 1d cb 3e fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 01 90 6f 0a 3b 05 ff [ 249.011379][ C1] RSP: 0018:ffffc90000a189b8 EFLAGS: 00010046 [ 249.017629][ C1] RAX: 0000000000000050 RBX: ffffc90000a18a80 RCX: debc2c9cc5bad500 [ 249.025701][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 249.033671][ C1] RBP: ffff88801cf2bea0 R08: 0000000000000100 R09: 0000000000080000 [ 249.041902][ C1] R10: 0000000000008000 R11: ffffffff8ec362b8 R12: ffff88801fb5d670 [ 249.049890][ C1] R13: ffff888079c1a460 R14: dffffc0000000000 R15: 0000000000000001 [ 249.057893][ C1] ? __debug_object_init+0x2c3/0x3c0 [ 249.063204][ C1] ? __init_swait_queue_head+0xa8/0x150 [ 249.068950][ C1] __synchronize_srcu+0x1d5/0x2f0 [ 249.073985][ C1] ? __pfx___synchronize_srcu+0x10/0x10 [ 249.079534][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 249.084923][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 249.091451][ C1] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 249.097013][ C1] ? synchronize_srcu+0x20a/0x260 [ 249.102129][ C1] wakeup_source_unregister+0x129/0x3f0 [ 249.107690][ C1] mmc_host_classdev_release+0x47/0x100 [ 249.113278][ C1] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 249.119469][ C1] device_release+0xc4/0x1f0 [ 249.124075][ C1] kobject_put+0x222/0x550 [ 249.128679][ C1] ? mmc_pwrseq_free+0x86/0xa0 [ 249.133542][ C1] call_timer_fn+0x18d/0x5f0 [ 249.138158][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 249.144870][ C1] ? call_timer_fn+0xd5/0x5f0 [ 249.149571][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 249.154692][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 249.160166][ C1] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 249.166845][ C1] __run_timer_base+0x652/0x8b0 [ 249.171704][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 249.177093][ C1] ? ktime_get+0x1f5/0x220 [ 249.181502][ C1] ? lapic_next_event+0x11/0x20 [ 249.186445][ C1] run_timer_softirq+0xb7/0x170 [ 249.191400][ C1] handle_softirqs+0x226/0x860 [ 249.196165][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 249.201106][ C1] __irq_exit_rcu+0xcb/0x220 [ 249.205881][ C1] irq_exit_rcu+0x9/0x30 [ 249.210379][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 249.216044][ C1] [ 249.219054][ C1] [ 249.222067][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.228050][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 249.233350][ C1] Code: ff ff ff e8 40 dc 3f 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 e7 f0 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 07 23 da [ 249.252985][ C1] RSP: 0018:ffffc90004867210 EFLAGS: 00000292 [ 249.259224][ C1] RAX: debc2c9cc5bad500 RBX: 0000000000000000 RCX: 8000000000000003 [ 249.267390][ C1] RDX: 00000000e98138db RSI: ffffffff8e6fac39 RDI: ffffffff8c6d8b80 [ 249.275628][ C1] RBP: ffff88801cf2be80 R08: 3300000000000000 R09: 0000000000000000 [ 249.283620][ C1] R10: 0000000000000000 R11: ffffffff8ed5c7a0 R12: ffffffff8ed5c7a0 [ 249.291607][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 249.299640][ C1] ? pfn_valid+0xba/0x490 [ 249.304100][ C1] pfn_valid+0xd6/0x490 [ 249.308266][ C1] ? pfn_valid+0xba/0x490 [ 249.312607][ C1] page_table_check_set+0x25/0x530 [ 249.317753][ C1] copy_pmd_range+0x4adc/0x5c10 [ 249.322671][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 249.328160][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 249.333542][ C1] ? __lock_acquire+0x6df/0x2e50 [ 249.338503][ C1] ? mas_wr_store_type+0xf80/0x1980 [ 249.343746][ C1] copy_page_range+0xc82/0x1290 [ 249.348818][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 249.354112][ C1] ? __rb_insert_augmented+0x2ad/0x6d0 [ 249.359570][ C1] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 249.366531][ C1] ? __mapping_rmap_tree_augment_rotate+0x16e/0x1a0 [ 249.373342][ C1] dup_mmap+0xf17/0x1dc0 [ 249.377648][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 249.382359][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 249.387756][ C1] ? lock_acquire+0x115/0x350 [ 249.392450][ C1] copy_mm+0x11a/0x480 [ 249.396526][ C1] ? copy_process+0xd3c/0x43e0 [ 249.401311][ C1] copy_process+0x1e75/0x43e0 [ 249.406229][ C1] ? __lock_acquire+0x6df/0x2e50 [ 249.411269][ C1] ? copy_process+0xd3c/0x43e0 [ 249.416077][ C1] ? __pfx_copy_process+0x10/0x10 [ 249.421198][ C1] kernel_clone+0x2d7/0x940 [ 249.425697][ C1] ? cgroup1_freezing+0x20/0x350 [ 249.430650][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 249.435871][ C1] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 249.441759][ C1] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 249.448179][ C1] ? exc_page_fault+0x6a/0xc0 [ 249.452878][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 249.458283][ C1] ? do_fast_syscall_32+0x33/0x70 [ 249.463326][ C1] ? irqentry_exit+0x10f/0x910 [ 249.468295][ C1] ? trace_irq_disable+0x3b/0x140 [ 249.473322][ C1] do_fast_syscall_32+0x33/0x70 [ 249.478177][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.484506][ C1] RIP: 0023:0xf7f270ec [ 249.488581][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 249.508379][ C1] RSP: 002b:00000000f750fc80 EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 249.516804][ C1] RAX: ffffffffffffffda RBX: 0000000001200011 RCX: 0000000000000000 [ 249.524869][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000056ba94e8 [ 249.533104][ C1] RBP: 00000000f750fcb4 R08: 0000000000000000 R09: 0000000000000000 [ 249.541175][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 249.549147][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.557139][ C1] [ 249.560509][ C1] Kernel Offset: disabled [ 249.564831][ C1] Rebooting in 86400 seconds..