last executing test programs: 55.654234254s ago: executing program 1 (id=3668): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x100, 0x0, 0x0, 0xe4, 0x0, 0x2, 0xe4, 0x40}) 55.557543813s ago: executing program 1 (id=3671): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r1, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x4ba346f6d29095b8, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 55.32291614s ago: executing program 1 (id=3673): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r0, &(0x7f0000000140)='attr/prev\x00') 54.270617332s ago: executing program 1 (id=3684): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 54.020366317s ago: executing program 1 (id=3686): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x10000800, 0x0, 0xff, 0x1}, 0x20) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet(r0, &(0x7f0000004ec0)=[{{&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000002900)=[{&(0x7f0000000140)="eb", 0x1}], 0x1}}], 0x1, 0x20000005) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x4}, 0x8) 53.401853619s ago: executing program 1 (id=3692): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) fchdir(r0) capset(&(0x7f0000002100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0xa, 0x3, 0xfffffff9, 0x200800}) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) 53.037686772s ago: executing program 32 (id=3692): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) fchdir(r0) capset(&(0x7f0000002100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0xa, 0x3, 0xfffffff9, 0x200800}) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) 29.148229088s ago: executing program 4 (id=3944): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000001000)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 28.885674332s ago: executing program 4 (id=3949): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2, 0x0, 0x100000000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 28.846961973s ago: executing program 4 (id=3951): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x8000, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x4000010, 0x0, 0x0, 0x1}, {0x2, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000300)={0x0, 0x8, 0x0, 0x8, 0x0, 0x10001, 0x5, 0x5, 0x1, 0x1, 0x2, 0x2}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000080)="a1", 0x1}) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) 28.65844498s ago: executing program 4 (id=3954): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x232) 27.748699021s ago: executing program 4 (id=3967): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}, 0x5657f6ca}], 0x1, 0x40000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 27.374304255s ago: executing program 4 (id=3972): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 27.06794607s ago: executing program 33 (id=3972): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') open_by_handle_at(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 4.413859349s ago: executing program 2 (id=4194): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x102030405060708, {0x0, 0x1}, 0xff}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) 4.241316074s ago: executing program 2 (id=4196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0xfff}}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) 4.176828038s ago: executing program 6 (id=4197): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x58}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 4.119942946s ago: executing program 6 (id=4199): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x3}], 0x1, 0x1a6, 0x0, 0x0, 0x0, 0x25}) 4.020810603s ago: executing program 2 (id=4200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0xffffffff, 0x4, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 3.825435074s ago: executing program 6 (id=4206): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbac0}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)='\tJ', 0x2, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x4, 0x6, @multicast}, 0x14) 3.781259271s ago: executing program 2 (id=4207): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, 0x0, 0x0) 3.721520818s ago: executing program 6 (id=4209): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000140), 0x10, 0x0, 0x1, 0x0, 0x0, 0x84844}, 0x20004001) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0}}], 0x1, 0x4880) r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4}) 3.342949416s ago: executing program 3 (id=4217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 3.257378994s ago: executing program 3 (id=4218): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 2.338767569s ago: executing program 3 (id=4223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.259508705s ago: executing program 6 (id=4225): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2.092099878s ago: executing program 3 (id=4227): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)="f1", 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.031066955s ago: executing program 3 (id=4228): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) waitid(0x1, r0, 0x0, 0x2, 0x0) wait4(0x0, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.937870542s ago: executing program 0 (id=4229): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="738d"], 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004300), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008300)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18, 0x0, 0x9, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.885467738s ago: executing program 0 (id=4230): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) read(r0, &(0x7f0000000240)=""/177, 0xb1) 1.70297565s ago: executing program 3 (id=4231): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 934.079708ms ago: executing program 0 (id=4232): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close(0x3) 789.657052ms ago: executing program 0 (id=4235): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x0, 0x351d4d5b9375e359}, 0x14}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x200000c4) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd43, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0xc8850) 767.397863ms ago: executing program 0 (id=4237): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x81d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x44}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 652.959815ms ago: executing program 0 (id=4239): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0xc, 0x4, "ea57bb76"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0xc, 0x4, "32e90f04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x20, 0x16, 0x25, "4b25f5b1c89ecb86c429f8b99eed2b8de501003ade1072446f126510b10a1bce52d0ab5fc6"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) 540.288427ms ago: executing program 5 (id=4241): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) rseq(0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000fc0)={0x48}) 486.034383ms ago: executing program 5 (id=4242): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a000000010000000000000104"], 0x0, 0x8e}, 0x28) r0 = socket$inet6(0xa, 0x3, 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @mcast1, 0x48f}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000000000002900000002"], 0x28}}], 0x1, 0x4000000) 441.899322ms ago: executing program 2 (id=4243): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 441.57883ms ago: executing program 5 (id=4244): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 359.94921ms ago: executing program 2 (id=4245): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000740)={0x0, 0x1, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x800000000000c}) 137.741889ms ago: executing program 5 (id=4246): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x844029887f7181fa, 0x27) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) 49.616676ms ago: executing program 5 (id=4247): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) 41.846014ms ago: executing program 5 (id=4248): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffe, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea802e2b7fb0000e60101000000e491a6c2006dbd97970000000000000000008c1d719e00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00000000000000ffe300000000000000000400", "f4bd0000008019000000050000000000000000000000000000d900", [0x80000000008, 0x2]}}) 0s ago: executing program 6 (id=4249): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="977774604b7e"}, @IFLA_IFALIAS={0x14, 0x14, 'team0\x00'}, @IFLA_PHYS_PORT_ID={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) kernel console output (not intermixed with test programs): 1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 327.296963][ T44] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.296998][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.636371][ T10] usb 3-1: USB disconnect, device number 45 [ 327.953952][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3342'. [ 328.045444][ T5685] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 328.070519][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3344'. [ 328.155561][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.156154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.196369][ T5685] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 328.197880][ T5685] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.197908][ T5685] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.197929][ T5685] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.197975][ T5685] usb 4-1: config 0 interface 0 has no altsetting 0 [ 328.198006][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.204653][ T5685] usb 4-1: config 0 descriptor?? [ 328.225832][ T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 328.320772][ T44] gud 2-1:1.0: USB-1: Failed to add properties (ret=-71) [ 328.320821][ T44] gud 2-1:1.0: Failed to get connectors (error=-71) [ 328.320835][ T44] gud 2-1:1.0: probe with driver gud failed with error -71 [ 328.352969][ T44] usb 2-1: USB disconnect, device number 50 [ 328.376420][ T10] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 328.377002][ T10] usb 5-1: config 0 has no interfaces? [ 328.378976][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.378998][ T10] usb 5-1: Product: syz [ 328.379010][ T10] usb 5-1: Manufacturer: syz [ 328.379023][ T10] usb 5-1: SerialNumber: syz [ 328.381440][ T10] usb 5-1: config 0 descriptor?? [ 328.445378][ T1704] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 328.593094][ T44] usb 5-1: USB disconnect, device number 58 [ 328.597932][ T1704] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 328.599025][ T1704] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 328.599066][ T1704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.599090][ T1704] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.599111][ T1704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.599134][ T1704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.600003][ T1704] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 328.600042][ T1704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.600065][ T1704] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.600088][ T1704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.600110][ T1704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.600981][ T1704] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 328.601018][ T1704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.601041][ T1704] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.601062][ T1704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.601085][ T1704] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.607161][ T1704] usb 3-1: string descriptor 0 read error: -22 [ 328.607278][ T1704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.642214][ T1704] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 328.690653][ T5685] input: HID 17ef:6047 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:6047.0036/input/input74 [ 328.788959][ T5685] lenovo 0003:17EF:6047.0036: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 328.844286][ T1704] usb 4-1: USB disconnect, device number 52 [ 328.883275][T13747] fido_id[13747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 329.195318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.195711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.225521][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 329.378172][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.379695][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.379722][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.379742][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.379780][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.406373][ T10] usb 2-1: config 0 descriptor?? [ 329.854660][ T10] plantronics 0003:047F:FFFF.0037: reserved main item tag 0xd [ 329.881673][ T10] plantronics 0003:047F:FFFF.0037: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 330.073029][ T10] usb 2-1: USB disconnect, device number 51 [ 330.235439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.235865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.375354][ T5685] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 330.518435][T13795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3364'. [ 330.518460][T13795] netlink: 'syz.3.3364': attribute type 7 has an invalid length. [ 330.518467][T13795] netlink: 'syz.3.3364': attribute type 8 has an invalid length. [ 330.518474][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3364'. [ 330.526569][ T5685] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 330.527169][ T5685] usb 5-1: config 0 has no interfaces? [ 330.529346][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.529368][ T5685] usb 5-1: Product: syz [ 330.529381][ T5685] usb 5-1: Manufacturer: syz [ 330.529393][ T5685] usb 5-1: SerialNumber: syz [ 330.535065][ T5685] usb 5-1: config 0 descriptor?? [ 330.778429][ T10] usb 5-1: USB disconnect, device number 59 [ 330.907170][T13815] ip_tables: iptables: counters copy to user failed while replacing table [ 330.961280][ T5678] usb 3-1: USB disconnect, device number 46 [ 331.275306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.276164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.491966][T13839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.491984][T13839] IPv6: NLM_F_CREATE should be set when creating new route [ 331.492012][T13839] IPv6: NLM_F_CREATE should be set when creating new route [ 331.493055][T13839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.896955][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 331.896972][ T30] audit: type=1326 audit(1791319044.273:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13858 comm="syz.0.3393" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbeadd9e199 code=0x0 [ 331.936344][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 331.937265][ T5614] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 332.085315][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 332.086252][ T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 332.086594][ T5614] usb 4-1: New USB device found, idVendor=0518, idProduct=0002, bcdDevice= 0.00 [ 332.087229][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 332.087251][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 332.088504][ T5614] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 332.088531][ T5614] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 332.088600][ T5614] usb 4-1: config 0 interface 0 has no altsetting 0 [ 332.088630][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.090358][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.090379][ T10] usb 5-1: Product: syz [ 332.090392][ T10] usb 5-1: Manufacturer: syz [ 332.090404][ T10] usb 5-1: SerialNumber: syz [ 332.091939][ T5614] usb 4-1: config 0 descriptor?? [ 332.250971][T13862] input: syz0 as /devices/virtual/input/input76 [ 332.315522][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.315775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.342222][ T10] usb 5-1: Limiting number of CPorts to U8_MAX [ 332.515564][ T5614] input: HID 0518:0002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0518:0002.0038/input/input77 [ 332.627875][ T5614] ezkey 0003:0518:0002.0038: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 0518:0002] on usb-dummy_hcd.3-1/input0 [ 332.760989][ T5685] usb 4-1: USB disconnect, device number 53 [ 332.791979][T13875] fido_id[13875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 333.169855][ C0] usb 5-1: short message received [ 333.355356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.355698][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.387179][ T5685] usb 5-1: USB disconnect, device number 60 [ 333.387207][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 333.387260][ C0] usb 5-1: failed to resubmit arpc in-urb: -19 [ 333.387300][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 333.387340][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 333.387379][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 333.387419][ C0] usb 5-1: failed to resubmit in-urb: -19 [ 333.393513][ T5685] usb 5-1: failed to send ARPC request 4: -19 [ 333.393586][ T5685] usb 5-1: failed to execute ARPC: -19 [ 333.393600][ T5685] usb 5-1: failed to flush cport 0: -19 [ 333.393615][ T5685] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 333.393746][ T5685] usb 5-1: failed to send ARPC request 2: -19 [ 333.413472][ T5685] usb 5-1: failed to execute ARPC: -19 [ 333.413492][ T5685] usb 5-1: failed to quiesce cport 0: -19 (0) [ 333.413510][ T5685] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 333.413649][ T5685] usb 5-1: failed to send ARPC request 3: -19 [ 333.413714][ T5685] usb 5-1: failed to execute ARPC: -19 [ 333.413728][ T5685] usb 5-1: failed to clear cport 0: -19 [ 333.413741][ T5685] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 333.881784][ T30] audit: type=1800 audit(1791319046.253:273): pid=13917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3416" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 333.977338][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 334.107480][T13929] loop3: detected capacity change from 0 to 7 [ 334.125311][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 334.126131][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 334.127384][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.127411][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.127445][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.128908][T13929] Dev loop3: unable to read RDB block 7 [ 334.128945][T13929] loop3: unable to read partition table [ 334.129058][T13929] loop3: partition table beyond EOD, truncated [ 334.129078][T13929] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 334.134477][ T10] usb 2-1: config 0 descriptor?? [ 334.222942][ T10] hub 2-1:0.0: USB hub found [ 334.395462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.413617][ T10] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 334.485351][ T5614] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 334.636019][ T5614] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.637445][ T5614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.637464][ T5614] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.637475][ T5614] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 334.637499][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.646494][ T5614] usb 5-1: config 0 descriptor?? [ 334.833268][ T10] hid-generic 0003:046D:C31C.0039: item fetching failed at offset 0/1 [ 334.846606][ T10] hid-generic 0003:046D:C31C.0039: probe with driver hid-generic failed with error -22 [ 334.992889][T13963] loop3: detected capacity change from 0 to 7 [ 335.005358][T13963] Dev loop3: unable to read RDB block 7 [ 335.005398][T13963] loop3: unable to read partition table [ 335.005580][T13963] loop3: partition table beyond EOD, truncated [ 335.005611][T13963] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 335.081428][ T5614] plantronics 0003:047F:FFFF.003A: reserved main item tag 0xd [ 335.105656][ T5614] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 335.156150][ T44] usb 2-1: USB disconnect, device number 52 [ 335.339725][T13977] net_ratelimit: 1 callbacks suppressed [ 335.339745][T13977] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 335.340415][T13977] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 335.341266][T13977] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 335.341717][T13977] openvswitch: netlink: Missing key (keys=d0, expected=40280) [ 335.378396][ T44] usb 5-1: USB disconnect, device number 61 [ 335.435381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.436172][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.151930][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057b2dc00: rx timeout, send abort [ 336.475514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.475833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.650307][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888058c42800: rx timeout, send abort [ 336.652010][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057b2dc00: abort rx timeout. Force session deactivation [ 336.826435][ T44] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 336.980550][ T44] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 336.982532][ T44] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 336.982558][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 337.029656][ T44] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 337.029682][ T44] usb 3-1: Product: syz [ 337.029696][ T44] usb 3-1: Manufacturer: syz [ 337.029709][ T44] usb 3-1: SerialNumber: syz [ 337.033052][ T44] usb 3-1: config 0 descriptor?? [ 337.118814][ T44] usb 3-1: selecting invalid altsetting 0 [ 337.150382][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888058c42800: abort rx timeout. Force session deactivation [ 337.341222][ T44] usb 3-1: USB disconnect, device number 47 [ 337.398817][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.518511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.519566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.717635][T14052] netlink: 'syz.1.3468': attribute type 16 has an invalid length. [ 337.717657][T14052] netlink: 'syz.1.3468': attribute type 17 has an invalid length. [ 338.240274][T14086] netlink: 'syz.2.3479': attribute type 1 has an invalid length. [ 338.240305][T14086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3479'. [ 338.265565][T14086] bridge0: port 1(team0) entered disabled state [ 339.113056][T14116] kvm: MWAIT instruction emulated as NOP! [ 339.587991][T14150] input: syz1 as /devices/virtual/input/input79 [ 339.874353][T14166] netlink: 'syz.2.3511': attribute type 2 has an invalid length. [ 339.917806][T14166] : entered promiscuous mode [ 340.328844][T14177] netlink: 'syz.4.3516': attribute type 1 has an invalid length. [ 340.626977][ T5614] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 340.635697][ C1] net_ratelimit: 5 callbacks suppressed [ 340.635716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.636013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.778865][ T5614] usb 5-1: unable to get BOS descriptor or descriptor too short [ 340.778915][ T5614] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 340.781908][ T5614] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.781930][ T5614] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.784752][ T5614] usb 5-1: string descriptor 0 read error: -22 [ 340.784877][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.860152][ T5614] usb 5-1: selecting invalid altsetting 1 [ 340.860828][ T5614] usb 5-1: unit 6 not found! [ 341.417331][ T1704] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 341.567826][ T1704] usb 3-1: Using ep0 maxpacket: 8 [ 341.569493][ T1704] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 341.571582][ T1704] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 341.571625][ T1704] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.571637][ T1704] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.571651][ T1704] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.571680][ T1704] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.571703][ T1704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.663008][ T5614] usb 5-1: 2:0: broken mixer GET_CUR (0/238/1 => 0) [ 341.675359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.675896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.820668][ T1704] usb 3-1: usb_control_msg returned -32 [ 341.820721][ T1704] usbtmc 3-1:16.0: can't read capabilities [ 341.945362][ T5678] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 342.018168][ T5614] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 342.024068][ T5614] usb 5-1: USB disconnect, device number 62 [ 342.095990][ T5678] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 342.096943][ T5678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.098737][ T5678] usb 2-1: config 0 descriptor?? [ 342.185336][ T5685] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 342.243178][T14253] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 342.307372][ T5678] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 342.336093][ T5685] usb 4-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=8c.d0 [ 342.338117][ T5685] usb 4-1: config 4 has an invalid interface number: 12 but max is 0 [ 342.338141][ T5685] usb 4-1: config 4 has no interface number 0 [ 342.338168][ T5685] usb 4-1: config 4 interface 12 has no altsetting 0 [ 342.341070][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.341091][ T5685] usb 4-1: Product: syz [ 342.341099][ T5685] usb 4-1: Manufacturer: syz [ 342.341106][ T5685] usb 4-1: SerialNumber: syz [ 342.393902][ T44] usb 3-1: USB disconnect, device number 48 [ 342.544077][ T5678] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 342.544134][ T5678] [drm] Initialized udl on minor 1 [ 342.560900][T14243] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in; [ 342.560900][T14243] program syz.3.3541 not setting count and/or reply_len properly [ 342.583920][ T5685] cdc_acm 4-1:4.12: Zero length descriptor references [ 342.583972][ T5685] cdc_acm 4-1:4.12: probe with driver cdc_acm failed with error -22 [ 342.601402][ T5685] usb 4-1: USB disconnect, device number 54 [ 342.715567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.716125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.892588][T14280] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3556'. [ 342.893027][T14280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3556'. [ 343.755324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.755884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.005429][ T5685] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 344.158080][ T5685] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.162689][ T5685] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.162756][ T5685] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 344.172985][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.173009][ T5685] usb 1-1: Product: syz [ 344.173021][ T5685] usb 1-1: Manufacturer: syz [ 344.173033][ T5685] usb 1-1: SerialNumber: syz [ 344.193446][ T5685] cdc_mbim 1-1:1.0: skipping garbage [ 344.388530][T14315] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 344.585310][ T1704] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 344.605277][ T5614] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 344.735917][ T1704] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 344.737068][ T1704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.739514][ T1704] usb 4-1: config 0 descriptor?? [ 344.743620][ T1704] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 344.775268][ T5614] usb 5-1: Using ep0 maxpacket: 32 [ 344.776128][ T5614] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 344.780742][ T5614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.780763][ T5614] usb 5-1: Product: syz [ 344.780775][ T5614] usb 5-1: Manufacturer: syz [ 344.780788][ T5614] usb 5-1: SerialNumber: syz [ 344.787632][ T5614] usb 5-1: config 0 descriptor?? [ 344.799916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.800164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.198049][ T5614] airspy 5-1:0.0: Board ID: 00 [ 345.198066][ T5614] airspy 5-1:0.0: Firmware version: [ 345.248865][T14315] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 345.249289][ T5685] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 345.251526][ T5685] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 345.262472][ T5685] wwan wwan0: port wwan0mbim0 attached [ 345.298620][ T5685] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, aa:0a:89:0f:6d:1e [ 345.454191][ T9] usb 1-1: USB disconnect, device number 51 [ 345.459378][ T9] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 345.544151][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 345.564487][ T1704] gspca_stv06xx: I2C: Read error writing address: -71 [ 345.584656][ T1704] usb 4-1: USB disconnect, device number 55 [ 345.821227][ T5614] airspy 5-1:0.0: usb_control_msg() failed -71 request 12 [ 345.835495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.836196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.844681][ T5614] airspy 5-1:0.0: Registered as swradio24 [ 345.844701][ T5614] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 345.850848][ T5614] usb 5-1: USB disconnect, device number 63 [ 346.035403][ T1704] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 346.183153][T14357] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 346.187234][ T1704] usb 3-1: Using ep0 maxpacket: 8 [ 346.191350][ T1704] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 346.195830][ T1704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.195876][ T1704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.198462][ T1704] usb 3-1: config 0 descriptor?? [ 346.211163][ T1704] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 346.248104][T14357] bond1: (slave lo): Enslaving as an active interface with an up link [ 346.250752][T14357] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 346.446755][T14368] input: syz0 as /devices/virtual/input/input80 [ 346.697437][ T44] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 346.744597][T14380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.846340][ T44] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 346.847880][ T44] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 346.847904][ T44] usb 5-1: config 1 has no interface number 0 [ 346.851041][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.851065][ T44] usb 5-1: Product: syz [ 346.851079][ T44] usb 5-1: Manufacturer: syz [ 346.851094][ T44] usb 5-1: SerialNumber: syz [ 346.880637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.880905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.923118][ T44] usb 5-1: 3:0 : does not exist [ 346.923146][ T44] usb 5-1: 3:0 : does not exist [ 347.195023][ T9] usb 5-1: USB disconnect, device number 64 [ 347.246686][ T1704] gspca_vc032x: reg_r err -71 [ 347.246756][ T1704] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 347.259988][ T1704] usb 3-1: USB disconnect, device number 49 [ 347.596436][ T5678] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 347.596680][ T5678] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 347.598769][ T6087] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.600629][ T6087] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.605347][ T5678] usb 2-1: USB disconnect, device number 53 [ 347.653816][ T6087] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 347.878779][T14409] input: syz0 as /devices/virtual/input/input81 [ 347.915289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.915971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.031305][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3600'. [ 348.421315][T14435] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3610'. [ 348.427503][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 348.512900][T14439] input: syz1 as /devices/virtual/input/input82 [ 348.606410][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 348.609801][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.609854][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.611999][ T9] usb 1-1: config 0 descriptor?? [ 348.829880][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 348.829983][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 348.843569][ T9] usb 1-1: USB disconnect, device number 52 [ 348.955519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.956350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.246030][ T5614] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 349.285285][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 349.398111][ T5614] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 349.399106][ T5614] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 349.399134][ T5614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 349.399157][ T5614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 349.399177][ T5614] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 349.399214][ T5614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.401994][ T5614] usb 2-1: config 0 descriptor?? [ 349.461201][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 349.462412][ T9] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.462440][ T9] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.462463][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 349.462513][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.469351][ T9] usb 1-1: config 0 descriptor?? [ 349.591934][T14470] input: syz1 as /devices/virtual/input/input83 [ 349.817486][ T5614] plantronics 0003:047F:FFFF.003B: ignoring exceeding usage max [ 349.844466][ T5614] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 349.963012][T14486] input: syz1 as /devices/virtual/input/input84 [ 349.990228][ T9] hid-picolcd 0003:04D8:F002.003C: No report with id 0xf3 found [ 349.990252][ T9] hid-picolcd 0003:04D8:F002.003C: No report with id 0xf4 found [ 349.995314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.339752][ T5678] usb 1-1: USB disconnect, device number 53 [ 350.435270][ T6087] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 350.585259][ T6087] usb 4-1: Using ep0 maxpacket: 16 [ 350.585774][ T6087] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 350.586890][ T6087] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.586917][ T6087] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.586937][ T6087] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 350.586975][ T6087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.589235][ T6087] usb 4-1: config 0 descriptor?? [ 350.944229][T14509] input: syz1 as /devices/virtual/input/input86 [ 350.950238][T14507] input: syz0 as /devices/virtual/input/input85 [ 351.035476][ C1] net_ratelimit: 1 callbacks suppressed [ 351.035495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.036074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.081322][ T6087] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003D/input/input87 [ 351.132025][ T6087] microsoft 0003:045E:07DA.003D: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 351.236397][ T5678] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 351.340945][ T6087] usb 4-1: USB disconnect, device number 56 [ 351.386622][ T5678] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.387700][ T5678] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 351.387728][ T5678] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 351.387762][ T5678] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.387798][ T5678] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 351.389679][ T5678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.389701][ T5678] usb 5-1: Product: syz [ 351.389714][ T5678] usb 5-1: Manufacturer: syz [ 351.389727][ T5678] usb 5-1: SerialNumber: syz [ 351.395041][T14511] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 351.572762][T14527] netlink: 'syz.0.3649': attribute type 11 has an invalid length. [ 351.614606][T14511] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 351.845079][ T44] usb 2-1: USB disconnect, device number 54 [ 352.075462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.076294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.231930][T14511] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 352.363619][T14548] kvm: user requested TSC rate below hardware speed [ 352.434706][ T5678] cdc_ncm 5-1:1.0: failed to get mac address [ 352.435117][ T5678] cdc_ncm 5-1:1.0: bind() failure [ 352.465328][ T5678] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 352.466119][ T5678] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 352.468089][ T5678] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 352.484245][ T5678] usb 5-1: USB disconnect, device number 65 [ 352.915275][ T44] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 352.949173][T14580] bridge2: entered promiscuous mode [ 352.949229][T14580] bridge2: entered allmulticast mode [ 353.065432][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 353.066267][ T44] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 353.067506][ T44] usb 3-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 353.067529][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.067547][ T44] usb 3-1: config 1 has no interface number 0 [ 353.067583][ T44] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 353.067719][ T44] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 353.067744][ T44] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 353.071494][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.071516][ T44] usb 3-1: Product: syz [ 353.071530][ T44] usb 3-1: Manufacturer: syz [ 353.071543][ T44] usb 3-1: SerialNumber: syz [ 353.120176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.132135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.254714][ T30] audit: type=1326 audit(1791319065.623:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14587 comm="syz.1.3673" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f035fd9e199 code=0x0 [ 353.774053][ T44] usb 3-1: USB disconnect, device number 50 [ 354.155465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.156108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.608962][ T30] audit: type=1326 audit(1791319066.973:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.0.3689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeadd9e199 code=0x7ffc0000 [ 354.609011][ T30] audit: type=1326 audit(1791319066.983:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.0.3689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeadd9e199 code=0x7ffc0000 [ 354.609048][ T30] audit: type=1326 audit(1791319066.983:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.0.3689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeadd9e199 code=0x7ffc0000 [ 354.609097][ T30] audit: type=1326 audit(1791319066.983:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.0.3689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbeadd9e199 code=0x7ffc0000 [ 354.667972][T14627] xt_hashlimit: size too large, truncated to 1048576 [ 354.718758][T13077] vlan2 (unregistering): left allmulticast mode [ 354.718779][T13077] syz_tun (unregistering): left allmulticast mode [ 354.718796][T13077] vlan2 (unregistering): left promiscuous mode [ 354.718807][T13077] syz_tun (unregistering): left promiscuous mode [ 354.718883][T13077] bridge0: port 3(vlan2) entered disabled state [ 354.730352][ T30] audit: type=1326 audit(1791319067.093:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.0.3689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbeadd5e9ce code=0x7ffc0000 [ 354.730398][ T30] audit: type=1326 audit(1791319067.093:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.0.3689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbeadd5e9ce code=0x7ffc0000 [ 354.730433][ T30] audit: type=1326 audit(1791319067.103:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.0.3689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbeadd5e9ce code=0x7ffc0000 [ 354.730469][ T30] audit: type=1326 audit(1791319067.103:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.0.3689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbeadd5e9ce code=0x7ffc0000 [ 354.730545][ T30] audit: type=1326 audit(1791319067.103:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14620 comm="syz.0.3689" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbeadd5e9ce code=0x7ffc0000 [ 354.886565][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 355.049111][ T10] usb 3-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 355.054145][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.054174][ T10] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.054197][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 355.054221][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.110552][ T10] usb 3-1: config 0 descriptor?? [ 355.195619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.195891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.373326][ T7128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.373362][ T7128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 355.562930][T14635] xt_hashlimit: size too large, truncated to 1048576 [ 355.589085][ T10] input: HID 12ba:0100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:12BA:0100.003E/input/input88 [ 355.634647][ T7128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.634703][ T7128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 355.689039][ T10] sony 0003:12BA:0100.003E: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 12ba:0100] on usb-dummy_hcd.2-1/input0 [ 356.009409][ T4935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.012821][ T4935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.031647][ T4935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.034176][ T4935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.052190][ T4935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.089989][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.090361][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.090675][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.126189][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.126890][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.235494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.236456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.477174][ T7128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.477211][ T7128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 356.565310][T14557] syz.0.3661 (14557) used greatest stack depth: 18264 bytes left [ 356.637656][ T7128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.637690][ T7128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 356.947811][T14667] bridge_slave_1: entered allmulticast mode [ 357.018428][T14667] bridge_slave_1: left allmulticast mode [ 357.124255][ T7128] veth0: left allmulticast mode [ 357.124329][ T7128] veth0: left promiscuous mode [ 357.126624][ T7128] bridge0: port 5(veth0) entered disabled state [ 357.158819][ T7128] team0: left allmulticast mode [ 357.158840][ T7128] team_slave_0: left allmulticast mode [ 357.158879][ T7128] team_slave_1: left allmulticast mode [ 357.193545][ T7128] team0: left promiscuous mode [ 357.193567][ T7128] team_slave_0: left promiscuous mode [ 357.193785][ T7128] team_slave_1: left promiscuous mode [ 357.194952][ T7128] bridge0: port 4(team0) entered disabled state [ 357.221175][ T7128] bridge_slave_1: left allmulticast mode [ 357.221200][ T7128] bridge_slave_1: left promiscuous mode [ 357.221366][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.232098][ T7128] bridge_slave_0: left allmulticast mode [ 357.232120][ T7128] bridge_slave_0: left promiscuous mode [ 357.232289][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.275794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.276922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.456618][ T5614] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 357.550761][ T7128] team0: Port device bridge1 removed [ 357.571830][ T7128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.588497][ T7128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.592868][ T7128] bond0 (unregistering): Released all slaves [ 357.610851][ T5614] usb 4-1: Using ep0 maxpacket: 16 [ 357.611459][ T5614] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 357.614315][ T5614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.614342][ T5614] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 357.614380][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.617818][ T6087] usb 3-1: USB disconnect, device number 51 [ 357.680473][ T5614] usb 4-1: config 0 descriptor?? [ 357.690302][ T7128] bond1 (unregistering): (slave veth3): Releasing backup interface [ 357.690327][ T7128] veth3: left promiscuous mode [ 357.708043][ T7128] bond1 (unregistering): Released all slaves [ 357.821497][T14689] ip6gre1: entered promiscuous mode [ 357.821522][T14689] ip6gre1: entered allmulticast mode [ 357.885699][ T7128] tipc: Disabling bearer [ 357.885978][ T7128] tipc: Disabling bearer [ 357.886148][ T7128] tipc: Left network mode [ 358.116255][ T5614] HID 045e:07da: Invalid code 65791 type 1 [ 358.140185][ T5614] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003F/input/input89 [ 358.157089][ T4935] Bluetooth: hci0: command tx timeout [ 358.169616][ T5614] microsoft 0003:045E:07DA.003F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 358.246074][ T6087] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 358.316389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.316925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.335719][T14644] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.335850][T14644] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.336036][T14644] bridge_slave_0: entered allmulticast mode [ 358.341307][T14644] bridge_slave_0: entered promiscuous mode [ 358.352647][T14644] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.352764][T14644] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.352901][T14644] bridge_slave_1: entered allmulticast mode [ 358.361591][T14644] bridge_slave_1: entered promiscuous mode [ 358.397191][ T6087] usb 5-1: Using ep0 maxpacket: 8 [ 358.398059][ T6087] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.401487][ T6087] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 358.401534][ T6087] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 358.401559][ T6087] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 358.401582][ T6087] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 358.401627][ T6087] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 358.401649][ T6087] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.401688][ T6087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.559945][T14644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.563077][T14644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.690045][ T6087] usb 5-1: usb_control_msg returned -32 [ 358.690105][ T6087] usbtmc 5-1:16.0: can't read capabilities [ 358.829375][T14644] team0: Port device team_slave_0 added [ 358.840742][T14644] team0: Port device team_slave_1 added [ 358.934885][ T6087] usb 4-1: USB disconnect, device number 57 [ 358.986165][T14644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.986181][T14644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.986204][T14644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.994884][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 359.031724][T14644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.031741][T14644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.031769][T14644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.116493][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 359.121016][T14726] usbtmc 5-1:16.0: Unable to send data, error -71 [ 359.121646][T14726] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 359.131223][ T5678] usb 5-1: USB disconnect, device number 66 [ 359.299939][ T7128] hsr_slave_0: left promiscuous mode [ 359.302493][ T7128] hsr_slave_1: left promiscuous mode [ 359.307735][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.307778][ T7128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.314477][ T7128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.314498][ T7128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.355463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.356257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.424887][ T7128] veth1_macvtap: left promiscuous mode [ 359.424966][ T7128] veth0_macvtap: left promiscuous mode [ 359.426866][ T7128] veth1_vlan: left promiscuous mode [ 359.427059][ T7128] veth0_vlan: left promiscuous mode [ 360.040464][T14762] ip_tables: iptables: counters copy to user failed while replacing table [ 360.151848][ T7128] team0 (unregistering): Port device team_slave_1 removed [ 360.182085][ T7128] team0 (unregistering): Port device team_slave_0 removed [ 360.235544][ T4935] Bluetooth: hci0: command tx timeout [ 360.396443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.437415][T14644] hsr_slave_0: entered promiscuous mode [ 360.438367][T14644] hsr_slave_1: entered promiscuous mode [ 361.435607][ C1] net_ratelimit: 1 callbacks suppressed [ 361.435627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.436559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.437669][T14644] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 361.447604][T14644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.448872][T14644] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 361.477370][T14644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.481687][T14644] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 361.499138][T14644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.500448][T14644] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 361.524539][T14644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.606310][T14829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.662870][T14644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.686611][T14644] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.710719][ T7128] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.710821][ T7128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.721832][ T7128] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.721934][ T7128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.778379][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 361.834530][T14644] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.834598][T14644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.978596][T14644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.084823][T14644] veth0_vlan: entered promiscuous mode [ 362.096396][ T5614] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 362.103782][T14644] veth1_vlan: entered promiscuous mode [ 362.157310][T14644] veth0_macvtap: entered promiscuous mode [ 362.162982][T14644] veth1_macvtap: entered promiscuous mode [ 362.198755][T14644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.214936][T14644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.267165][ T286] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.267210][ T286] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.267243][ T286] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.267274][ T286] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.286276][ T5614] usb 1-1: Using ep0 maxpacket: 32 [ 362.316911][ T4935] Bluetooth: hci0: command tx timeout [ 362.324535][T14834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.324935][T14834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.336955][T14834] sg_write: data in/out 475148/136 bytes for SCSI command 0x0-- guessing data in; [ 362.336955][T14834] program syz.0.3739 not setting count and/or reply_len properly [ 362.369016][ T5614] usb 1-1: unable to get BOS descriptor or descriptor too short [ 362.369067][ T5614] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a18, bcdDevice= 0.00 [ 362.373813][ T5614] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 362.373844][ T5614] usb 1-1: can't read configurations, error -71 [ 362.475510][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.476297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.527671][ T286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.527691][ T286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.545803][ T5678] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 362.587660][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.587680][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.695429][ T5678] usb 4-1: Using ep0 maxpacket: 16 [ 362.696124][ T5678] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 362.697434][ T5678] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.697465][ T5678] usb 4-1: config 0 interface 0 has no altsetting 0 [ 362.702781][ T5678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.702807][ T5678] usb 4-1: Product: syz [ 362.702820][ T5678] usb 4-1: Manufacturer: syz [ 362.702834][ T5678] usb 4-1: SerialNumber: syz [ 362.725443][ T5678] usb 4-1: config 0 descriptor?? [ 362.893522][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 363.103449][ T5678] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input90 [ 363.304340][T14880] vcan0: tx address claim with dlc 0 [ 363.325826][ T5678] rc_core: IR keymap rc-imon-pad not found [ 363.325869][ T5678] Registered IR keymap rc-empty [ 363.325968][ T5678] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 363.326007][ T5678] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 363.459370][ T5678] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 363.482321][ T5678] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input91 [ 363.491626][ T5678] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:58> initialized [ 363.515704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.516122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.702753][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 363.713581][ T9] usb 4-1: USB disconnect, device number 58 [ 363.845322][T13429] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 363.995912][T13429] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 363.996897][T13429] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 363.996939][T13429] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.149892][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 364.218566][T13429] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 364.263985][T13429] wwan wwan0: port wwan0qmi0 attached [ 364.396158][ T4935] Bluetooth: hci0: command tx timeout [ 364.471254][ C0] wdm_int_callback: 2 callbacks suppressed [ 364.471280][ C0] qmi_wwan 5-1:1.0: nonzero urb status received: -71 [ 364.471298][ C0] wdm_int_callback: 2 callbacks suppressed [ 364.471312][ C0] qmi_wwan 5-1:1.0: wdm_int_callback - 0 bytes [ 364.473034][ C0] qmi_wwan 5-1:1.0: nonzero urb status received: -71 [ 364.473057][ C0] qmi_wwan 5-1:1.0: wdm_int_callback - 0 bytes [ 364.473257][ C0] qmi_wwan 5-1:1.0: nonzero urb status received: -71 [ 364.473274][ C0] qmi_wwan 5-1:1.0: wdm_int_callback - 0 bytes [ 364.473489][ C0] qmi_wwan 5-1:1.0: nonzero urb status received: -71 [ 364.473508][ C0] qmi_wwan 5-1:1.0: wdm_int_callback - 0 bytes [ 364.473725][ C0] qmi_wwan 5-1:1.0: nonzero urb status received: -71 [ 364.473744][ C0] qmi_wwan 5-1:1.0: wdm_int_callback - 0 bytes [ 364.473963][ C0] qmi_wwan 5-1:1.0: nonzero urb status received: -71 [ 364.473982][ C0] qmi_wwan 5-1:1.0: wdm_int_callback - 0 bytes [ 364.474208][ C0] qmi_wwan 5-1:1.0: nonzero urb status received: -71 [ 364.474227][ C0] qmi_wwan 5-1:1.0: wdm_int_callback - 0 bytes [ 364.474488][ C0] qmi_wwan 5-1:1.0: nonzero urb status received: -71 [ 364.474506][ C0] qmi_wwan 5-1:1.0: wdm_int_callback - 0 bytes [ 364.474718][ C0] qmi_wwan 5-1:1.0: nonzero urb status received: -71 [ 364.474736][ C0] qmi_wwan 5-1:1.0: wdm_int_callback - 0 bytes [ 364.474942][ C0] qmi_wwan 5-1:1.0: nonzero urb status received: -71 [ 364.474959][ C0] qmi_wwan 5-1:1.0: wdm_int_callback - 0 bytes [ 364.555464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.556150][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.672993][T13429] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 6a:b9:be:ee:b0:7f [ 364.697331][T13429] usb 5-1: USB disconnect, device number 67 [ 364.721013][T13429] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 364.817616][T13429] wwan wwan0: port wwan0qmi0 disconnected [ 365.010575][T14929] input: syz0 as /devices/virtual/input/input92 [ 365.067594][T14931] hsr0: entered promiscuous mode [ 365.080298][T14931] hsr_slave_0: left promiscuous mode [ 365.085085][T14931] hsr_slave_1: left promiscuous mode [ 365.108622][T14931] hsr0 (unregistering): left promiscuous mode [ 365.295511][T14933] netlink: 'syz.2.3763': attribute type 4 has an invalid length. [ 365.345770][T14933] netlink: 'syz.2.3763': attribute type 4 has an invalid length. [ 365.560293][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 365.560310][ T30] audit: type=1326 audit(1791319077.933:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.2.3766" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcffb19e199 code=0x0 [ 365.596857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.597400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.639449][ T30] audit: type=1326 audit(1791319078.013:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14944 comm="syz.4.3768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d3f9e199 code=0x7ffc0000 [ 365.639711][ T30] audit: type=1326 audit(1791319078.013:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14944 comm="syz.4.3768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d3f9e199 code=0x7ffc0000 [ 365.644945][ T30] audit: type=1326 audit(1791319078.013:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14944 comm="syz.4.3768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d3f9e199 code=0x7ffc0000 [ 365.645612][ T30] audit: type=1326 audit(1791319078.013:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14944 comm="syz.4.3768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d3f9e199 code=0x7ffc0000 [ 365.647103][ T30] audit: type=1326 audit(1791319078.023:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14944 comm="syz.4.3768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f90d3f9e199 code=0x7ffc0000 [ 365.694693][T13429] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 365.835003][ T30] audit: type=1326 audit(1791319078.203:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14944 comm="syz.4.3768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d3f9e199 code=0x7ffc0000 [ 365.837246][ T30] audit: type=1326 audit(1791319078.213:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14944 comm="syz.4.3768" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d3f9e199 code=0x7ffc0000 [ 365.916058][T13429] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 365.917120][T13429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.917149][T13429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.917170][T13429] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 365.917209][T13429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.925357][T13429] usb 4-1: config 0 descriptor?? [ 366.420024][T13429] plantronics 0003:047F:FFFF.0040: ignoring exceeding usage max [ 366.448294][T13429] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 366.630105][ T5685] usb 4-1: USB disconnect, device number 59 [ 366.635437][ C1] net_ratelimit: 2 callbacks suppressed [ 366.635456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.636137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.735003][T14975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3776'. [ 367.443450][ T30] audit: type=1326 audit(1791319079.813:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14992 comm="syz.2.3783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcffb19e199 code=0x0 [ 367.639888][T15006] tipc: New replicast peer: 172.20.20.187 [ 367.643125][T15006] tipc: Enabled bearer , priority 10 [ 367.675376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.676945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.715429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.716015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.953931][T15068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3809'. [ 368.954628][T15068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3809'. [ 369.755280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.755558][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.186468][T15116] netlink: 'syz.2.3828': attribute type 4 has an invalid length. [ 370.795308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.796100][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.136231][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 371.296926][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 371.298037][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.298080][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.303232][ T9] usb 6-1: config 0 descriptor?? [ 371.532962][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 371.533029][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 371.559445][ T9] usb 6-1: USB disconnect, device number 2 [ 371.568543][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3841'. [ 371.568565][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3841'. [ 371.695512][ T5678] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 371.835393][ C1] net_ratelimit: 1 callbacks suppressed [ 371.835414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.835720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.860486][ T5678] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 371.867006][ T5678] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 371.867046][ T5678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.055277][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 372.124090][ T5678] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 372.159044][ T5678] wwan wwan0: port wwan0qmi0 attached [ 372.236872][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 372.237830][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 372.244074][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.244116][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.284271][ T9] usb 6-1: config 0 descriptor?? [ 372.297520][ T9] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 372.309128][ T9] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 372.347289][ C1] wdm_int_callback: 50 callbacks suppressed [ 372.347314][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 372.347331][ C1] wdm_int_callback: 50 callbacks suppressed [ 372.347346][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 372.348961][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 372.348986][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 372.349184][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 372.349203][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 372.349392][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 372.349411][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 372.349615][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 372.349635][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 372.349858][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 372.349878][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 372.350105][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 372.350123][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 372.350344][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 372.350364][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 372.350588][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 372.350608][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 372.350829][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 372.350844][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 372.507173][ T5678] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 2a:dc:14:f8:b2:4e [ 372.527634][ T5678] usb 4-1: USB disconnect, device number 60 [ 372.527795][ C0] qmi_wwan 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 372.552571][ T5678] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 372.607281][T15187] netlink: 'syz.2.3854': attribute type 20 has an invalid length. [ 372.607304][T15187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3854'. [ 372.635489][ T5678] wwan wwan0: port wwan0qmi0 disconnected [ 372.697658][T15187] netlink: 'syz.2.3854': attribute type 20 has an invalid length. [ 372.697676][T15187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3854'. [ 372.729561][ T9] usb 6-1: USB disconnect, device number 3 [ 372.731380][ T9] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 372.875432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.875844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.991133][ T30] audit: type=1326 audit(1791319085.363:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.0.3858" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbeadd9e199 code=0x0 [ 373.351990][T15212] ip_tables: iptables: counters copy to user failed while replacing table [ 373.384255][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3865'. [ 373.532548][T15221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3868'. [ 373.825717][T13429] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 373.915290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.915554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.997652][T13429] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 374.000407][T13429] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 374.000431][T13429] usb 5-1: config 0 has no interface number 0 [ 374.000469][T13429] usb 5-1: config 0 interface 41 has no altsetting 0 [ 374.002565][T13429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.002587][T13429] usb 5-1: Product: syz [ 374.002601][T13429] usb 5-1: Manufacturer: syz [ 374.002614][T13429] usb 5-1: SerialNumber: syz [ 374.034670][T15236] syzkaller1: entered allmulticast mode [ 374.068067][T13429] usb 5-1: config 0 descriptor?? [ 374.614956][T15253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.614974][T15253] IPv6: NLM_F_CREATE should be set when creating new route [ 374.628790][T15253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.758488][T15261] syz_tun: entered allmulticast mode [ 374.793644][T15261] pim6reg: entered allmulticast mode [ 374.807610][T15261] pim6reg: left allmulticast mode [ 374.807716][T15261] syz_tun: left allmulticast mode [ 374.955353][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.956496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.168584][T15272] syzkaller1: entered promiscuous mode [ 375.168629][T15272] syzkaller1: entered allmulticast mode [ 375.291533][T13429] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 375.291563][T13429] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 375.291770][T13429] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 375.330959][T13429] usb 5-1: USB disconnect, device number 68 [ 375.421134][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3891'. [ 375.421167][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3891'. [ 375.995489][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.205747][T15317] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3903'. [ 376.316108][T15329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3906'. [ 376.317007][T15329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3906'. [ 376.319460][T15329] netlink: 'syz.0.3906': attribute type 32 has an invalid length. [ 376.319479][T15329] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3906'. [ 376.895288][ T5614] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 377.035417][ C1] net_ratelimit: 2 callbacks suppressed [ 377.035436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.036014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.060527][ T5614] usb 6-1: Using ep0 maxpacket: 8 [ 377.074529][ T5614] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 377.089340][ T5614] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.089385][ T5614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.107136][ T5614] usb 6-1: config 0 descriptor?? [ 377.364163][ T5614] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 377.929041][ T6087] usb 6-1: USB disconnect, device number 4 [ 378.063367][T15412] blktrace: Concurrent blktraces are not allowed on sg0 [ 378.075350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.075631][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.197315][T13429] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 378.356098][T13429] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 378.357201][T13429] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 378.357230][T13429] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 59391, setting to 1024 [ 378.357254][T13429] usb 1-1: config 0 interface 0 has no altsetting 0 [ 378.359810][T13429] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 378.359834][T13429] usb 1-1: Product: syz [ 378.359847][T13429] usb 1-1: Manufacturer: syz [ 378.359861][T13429] usb 1-1: SerialNumber: syz [ 378.365741][T13429] usb 1-1: config 0 descriptor?? [ 378.387938][T15407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 378.453349][T13429] usb 1-1: selecting invalid altsetting 0 [ 378.479821][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.479873][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.692543][T15407] usb 1-1: BOGUS urb xfer, pipe 0 != type 1 [ 378.753155][T13429] usb 1-1: USB disconnect, device number 56 [ 378.758794][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.759128][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.759436][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.759767][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.760071][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.760390][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.770464][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.770775][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.771116][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.778563][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.784995][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.785474][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.785815][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.786144][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 378.786470][T15407] usb 1-1: cannot submit urb 0, error -19: no device [ 379.115372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.115649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.725277][T13429] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 379.875325][T13429] usb 4-1: Using ep0 maxpacket: 8 [ 379.876130][T13429] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 379.879780][T13429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.879802][T13429] usb 4-1: Product: syz [ 379.879812][T13429] usb 4-1: Manufacturer: syz [ 379.879819][T13429] usb 4-1: SerialNumber: syz [ 379.883435][T13429] usb 4-1: config 0 descriptor?? [ 379.930010][T13429] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 380.087517][T15496] veth0: entered promiscuous mode [ 380.088365][T15496] __nla_validate_parse: 2 callbacks suppressed [ 380.088381][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'. [ 380.093195][T15496] veth0 (unregistering): left promiscuous mode [ 380.155355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.156153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.382986][T15503] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 380.784865][T15516] netlink: 'syz.5.3969': attribute type 16 has an invalid length. [ 380.784887][T15516] netlink: 'syz.5.3969': attribute type 17 has an invalid length. [ 381.068538][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.068574][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.131174][T13429] gspca_sonixj: reg_w1 err -71 [ 381.174802][T13429] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 381.187317][T13429] usb 4-1: USB disconnect, device number 61 [ 381.195495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.195895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.225583][ T5614] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 381.288124][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.288157][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.396029][ T5614] usb 1-1: Using ep0 maxpacket: 16 [ 381.396678][ T5614] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 381.398718][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.398749][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.400081][ T5614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.400110][ T5614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 381.400132][ T5614] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 381.400169][ T5614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.488869][ T5614] usb 1-1: config 0 descriptor?? [ 381.566908][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.573014][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.585788][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.610540][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.616751][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.619741][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.619770][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.933893][T15539] program syz.2.3978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.951083][ T5614] nintendo 0003:057E:2019.0041: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 382.002120][T15544] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 382.235443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.235761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.368531][ T5614] nintendo 0003:057E:2019.0041: Failed to set baudrate (ret=-71), continuing anyway [ 382.393934][ T5614] nintendo 0003:057E:2019.0041: Failed handshake; ret=-71 [ 382.393958][ T5614] nintendo 0003:057E:2019.0041: Failed to initialize controller; ret=-71 [ 382.453046][ T5614] nintendo 0003:057E:2019.0041: probe - fail = -71 [ 382.453284][ T5614] nintendo 0003:057E:2019.0041: probe with driver nintendo failed with error -71 [ 382.522606][ T5614] usb 1-1: USB disconnect, device number 57 [ 382.550238][ T64] vlan3: left promiscuous mode [ 382.550684][ T64] bridge0: port 4(vlan3) entered disabled state [ 382.597789][ T64] vlan2: left allmulticast mode [ 382.597806][ T64] dummy0: left allmulticast mode [ 382.634296][ T64] vlan2: left promiscuous mode [ 382.634318][ T64] dummy0: left promiscuous mode [ 382.637663][ T64] bridge0: port 3(vlan2) entered disabled state [ 382.645312][ T6087] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 382.666660][ T64] bridge_slave_1: left allmulticast mode [ 382.666678][ T64] bridge_slave_1: left promiscuous mode [ 382.668960][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.688919][ T64] bridge_slave_0: left promiscuous mode [ 382.689095][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.797627][ T6087] usb 4-1: Using ep0 maxpacket: 16 [ 382.799631][ T6087] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 382.804300][ T6087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.804321][ T6087] usb 4-1: Product: syz [ 382.804334][ T6087] usb 4-1: Manufacturer: syz [ 382.804347][ T6087] usb 4-1: SerialNumber: syz [ 382.813702][ T6087] usb 4-1: config 0 descriptor?? [ 382.852065][ T6087] usb 4-1: selecting invalid altsetting 1 [ 382.852086][ T6087] technisat-usb2: could not set alternate setting to 0 [ 383.074744][ T6087] technisat-usb2: firmware version: 0.0 [ 383.074789][ T6087] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 383.110703][T15577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.111792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.122745][T15577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.123426][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.125274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.137425][T15577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.275363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.275834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.384509][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.418328][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.422388][ T64] bond0 (unregistering): Released all slaves [ 383.449676][ T64] bond1 (unregistering): Released all slaves [ 383.484262][ T64] bond2 (unregistering): (slave lo): Releasing backup interface [ 383.487692][ T64] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 383.494016][ T6087] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 383.494710][ T6087] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 383.494760][ T6087] usb 4-1: media controller created [ 383.494810][ T6087] technisat-usb2: i2c-error: out failed 53 = -22 [ 383.494854][ T6087] dvb-usb: MAC address reading failed. [ 383.497911][ T64] bond2 (unregistering): Released all slaves [ 383.552930][ T6087] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 383.566040][ T64] bond3 (unregistering): Released all slaves [ 383.672331][ T6087] DVB: Unable to find symbol stv090x_attach() [ 383.697712][ T44] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 383.742675][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 383.758272][ T4935] Bluetooth: hci2: command tx timeout [ 383.855997][ T44] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 383.857543][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.857571][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.858771][ T44] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 383.858793][ T44] usb 6-1: Manufacturer: syz [ 383.885354][ T64] tipc: Disabling bearer [ 383.885488][ T64] tipc: Disabling bearer [ 383.885592][ T64] tipc: Left network mode [ 383.890765][ T44] usb 6-1: config 0 descriptor?? [ 384.160450][ T64] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 384.178058][ T6087] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 384.181596][T15554] technisat-usb2: i2c RX buffer can't exceed 62 bytes (dev 0x00) [ 384.181613][T15554] technisat-usb2: i2c-error: out failed 00 = -22 [ 384.216919][ T64] batman_adv: batadv0: Removing interface: ipvlan2 [ 384.246394][T15607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.249035][T15531] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.249193][T15531] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.249340][T15531] bridge_slave_0: entered allmulticast mode [ 384.251033][T15531] bridge_slave_0: entered promiscuous mode [ 384.254799][T15531] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.254896][T15531] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.255015][T15531] bridge_slave_1: entered allmulticast mode [ 384.299581][T15531] bridge_slave_1: entered promiscuous mode [ 384.365459][ T6087] rc_core: IR keymap rc-technisat-usb2 not found [ 384.365478][ T6087] Registered IR keymap rc-empty [ 384.369332][ T6087] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 384.380695][ T6087] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input93 [ 384.383996][ T6087] dvb-usb: schedule remote query interval to 100 msecs. [ 384.392681][ T6087] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 384.425042][ T6087] usb 4-1: USB disconnect, device number 62 [ 384.592376][T15619] netlink: 'syz.2.3995': attribute type 1 has an invalid length. [ 384.623011][T15531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.692789][ T6087] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 384.782313][ T44] input: syz Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0042/input/input94 [ 384.795422][T15619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.816164][T15531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.852819][ T44] input: syz Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0042/input/input95 [ 384.893868][ T44] input: syz Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0042/input/input96 [ 384.907741][T15622] bond1: (slave gretap0): making interface the new active one [ 384.917300][T15622] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 384.930023][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 384.969955][ T44] input: syz Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0042/input/input97 [ 385.008240][T15531] team0: Port device team_slave_0 added [ 385.011226][T15531] team0: Port device team_slave_1 added [ 385.046431][ T44] uclogic 0003:256C:006D.0042: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 385.065027][ T44] usb 6-1: USB disconnect, device number 5 [ 385.230060][T15635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.232515][ T64] hsr_slave_0: left promiscuous mode [ 385.257544][ T64] hsr_slave_1: left promiscuous mode [ 385.258534][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.258554][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.294879][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.294901][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.317578][T15634] fido_id[15634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 385.364865][ T64] veth1_macvtap: left promiscuous mode [ 385.364903][ T64] veth0_macvtap: left promiscuous mode [ 385.380960][ T64] veth1_vlan: left promiscuous mode [ 385.381040][ T64] veth0_vlan: left promiscuous mode [ 385.835554][ T4935] Bluetooth: hci2: command tx timeout [ 385.920874][ T64] team0 (unregistering): Port device team_slave_1 removed [ 385.940231][ T64] team0 (unregistering): Port device team_slave_0 removed [ 386.499751][T15670] dummy0: entered promiscuous mode [ 386.518056][T15670] gretap0: entered promiscuous mode [ 386.519186][T15670] gretap0: left promiscuous mode [ 386.522425][T15670] dummy0: left promiscuous mode [ 386.569929][T15531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.569946][T15531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.569970][T15531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.574285][T15531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.574300][T15531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.574324][T15531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.891913][T15531] hsr_slave_0: entered promiscuous mode [ 386.896804][T15531] hsr_slave_1: entered promiscuous mode [ 386.897561][T15531] debugfs: 'hsr0' already exists in 'hsr' [ 386.897580][T15531] Cannot create hsr debugfs directory [ 387.166540][ T64] IPVS: stop unused estimator thread 0... [ 387.225671][ T5685] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 387.389264][ T5685] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 387.390441][ T5685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.390470][ T5685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.390491][ T5685] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 387.390529][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.393212][ T5685] usb 1-1: config 0 descriptor?? [ 387.435441][ C1] net_ratelimit: 6 callbacks suppressed [ 387.435459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.437405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.553523][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 387.594706][ T44] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 387.606186][ T10] psmouse serio6: Failed to reset mouse on : -5 [ 387.647317][ T44] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 387.822161][ T5685] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 387.822197][ T5685] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 387.832092][ T5685] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 387.832126][ T5685] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 387.832152][ T5685] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 387.832177][ T5685] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 387.832201][ T5685] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 387.832226][ T5685] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 387.832251][ T5685] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 387.868345][ T5685] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 387.915708][ T4935] Bluetooth: hci2: command tx timeout [ 387.933143][T15531] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 387.965003][T15531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.970679][T15531] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 388.023494][T15531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.024265][T15531] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 388.056872][T15531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.059119][T15531] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 388.083940][ T5614] usb 1-1: USB disconnect, device number 58 [ 388.101093][T15531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.287757][T15531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.323168][T15531] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.338179][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.338282][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.364102][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.364161][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.475319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.476047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.543187][T15531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.613381][T15531] veth0_vlan: entered promiscuous mode [ 388.631159][T15531] veth1_vlan: entered promiscuous mode [ 388.709778][T15531] veth0_macvtap: entered promiscuous mode [ 388.748298][T15531] veth1_macvtap: entered promiscuous mode [ 388.787093][T15531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.793760][T15531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.808391][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 388.810754][T15745] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4029'. [ 388.848533][ T286] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.848688][ T286] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.934077][ T7128] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.934412][ T7128] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.034542][ T1468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.034562][ T1468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.092816][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.092838][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.515392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.515681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.530587][T15777] netlink: 'syz.6.4039': attribute type 1 has an invalid length. [ 389.998820][ T5617] Bluetooth: hci2: command tx timeout [ 390.555530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.556035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.834011][T15825] netlink: 'syz.3.4056': attribute type 3 has an invalid length. [ 390.834033][T15825] netlink: 'syz.3.4056': attribute type 6 has an invalid length. [ 390.834045][T15825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4056'. [ 390.909720][T15827] netlink: 'syz.5.4057': attribute type 22 has an invalid length. [ 390.909743][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4057'. [ 390.937255][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 390.939471][T15827] netlink: 'syz.5.4057': attribute type 22 has an invalid length. [ 390.939489][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4057'. [ 390.956088][ T286] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.957719][ T286] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.957755][ T286] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.957785][ T286] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.017118][T15830] netlink: 'syz.3.4058': attribute type 4 has an invalid length. [ 391.076935][T15833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4060'. [ 391.088460][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 391.090659][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 391.097287][T15835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4061'. [ 391.100560][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 391.133648][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 391.133674][ T9] usb 7-1: Product: syz [ 391.133687][ T9] usb 7-1: Manufacturer: syz [ 391.133701][ T9] usb 7-1: SerialNumber: syz [ 391.159419][ T9] usb 7-1: config 0 descriptor?? [ 391.161020][T15821] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 391.163963][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 391.163986][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 391.383119][T15849] netlink: 'syz.5.4068': attribute type 25 has an invalid length. [ 391.383135][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4068'. [ 391.383261][T15849] netlink: 'syz.5.4068': attribute type 25 has an invalid length. [ 391.383270][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4068'. [ 391.395506][ T10] misc userio: Buffer overflowed, userio client isn't keeping up [ 391.475668][ T1704] usb 7-1: USB disconnect, device number 2 [ 391.595306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.595694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.906134][ T1704] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 392.068210][ T1704] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 392.069215][ T1704] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 392.071298][ T1704] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 392.071322][ T1704] usb 7-1: Product: syz [ 392.071336][ T1704] usb 7-1: Manufacturer: syz [ 392.071350][ T1704] usb 7-1: SerialNumber: syz [ 392.074232][ T1704] usb 7-1: config 0 descriptor?? [ 392.074997][T15821] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 392.102222][T15865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4075'. [ 392.104952][ T1704] hub 7-1:0.0: bad descriptor, ignoring hub [ 392.104978][ T1704] hub 7-1:0.0: probe with driver hub failed with error -5 [ 392.226650][T15871] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4077'. [ 392.372273][T15879] ªªªªª#: renamed from vlan0 (while UP) [ 392.409262][ T6087] usb 7-1: USB disconnect, device number 3 [ 392.471495][ T10] input: PS/2 Generic Mouse as /devices/serio6/input/input98 [ 392.635643][ C1] net_ratelimit: 1 callbacks suppressed [ 392.635666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.636189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.685329][ T10] psmouse serio6: Failed to enable mouse on [ 393.145285][ T5685] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 393.308086][ T5685] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 393.309011][ T5685] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.309039][ T5685] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.309076][ T5685] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.314008][ T5685] usb 7-1: config 0 descriptor?? [ 393.325961][ T6087] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 393.479678][ T6087] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 393.483115][ T6087] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 393.483139][ T6087] usb 6-1: config 0 has no interface number 0 [ 393.483164][ T6087] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 393.483224][ T6087] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 393.483247][ T6087] usb 6-1: config 0 interface 255 has no altsetting 0 [ 393.483279][ T6087] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.499542][ T6087] usb 6-1: config 0 descriptor?? [ 393.532762][ T6087] cp210x 6-1:0.255: cp210x converter detected [ 393.637849][T15922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.675360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.676425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.809801][ T5685] hid_parser_main: 6 callbacks suppressed [ 393.809850][ T5685] playstation 0003:054C:0DF2.0045: unknown main item tag 0x0 [ 393.809880][ T5685] playstation 0003:054C:0DF2.0045: unknown main item tag 0x0 [ 393.809906][ T5685] playstation 0003:054C:0DF2.0045: unknown main item tag 0x0 [ 393.809931][ T5685] playstation 0003:054C:0DF2.0045: unknown main item tag 0x0 [ 393.809955][ T5685] playstation 0003:054C:0DF2.0045: unknown main item tag 0x0 [ 393.823450][ T5685] playstation 0003:054C:0DF2.0045: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 393.856283][ T1704] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 393.920185][ T6087] cp210x 6-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 394.026099][ T1704] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 394.027163][ T1704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.030283][ T1704] usb 4-1: config 0 descriptor?? [ 394.121441][ T6087] cp210x 6-1:0.255: GPIO initialisation failed: -19 [ 394.130021][ T6087] usb 6-1: cp210x converter now attached to ttyUSB0 [ 394.167681][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 394.239272][ T1704] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 394.323825][ T6087] usb 6-1: USB disconnect, device number 6 [ 394.328455][ T6087] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 394.329021][ T6087] cp210x 6-1:0.255: device disconnected [ 394.346174][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 394.346933][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 394.348265][ T10] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 394.348291][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 394.348348][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.351434][ T10] usb 1-1: config 0 descriptor?? [ 394.425449][ T5685] playstation 0003:054C:0DF2.0045: Failed to retrieve feature with reportID 5: -71 [ 394.425475][ T5685] playstation 0003:054C:0DF2.0045: Failed to retrieve DualSense calibration info: -71 [ 394.425525][ T5685] playstation 0003:054C:0DF2.0045: Failed to get calibration data from DualSense [ 394.425541][ T5685] playstation 0003:054C:0DF2.0045: Failed to create dualsense. [ 394.433496][ T5685] playstation 0003:054C:0DF2.0045: probe with driver playstation failed with error -71 [ 394.442992][ T5685] usb 7-1: USB disconnect, device number 4 [ 394.503582][ T1704] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 394.503606][ T1704] [drm] Initialized udl on minor 1 [ 394.715322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.715786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.955644][ T5685] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 395.106624][ T5685] usb 3-1: Using ep0 maxpacket: 16 [ 395.107267][ T5685] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 395.108375][ T5685] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.108403][ T5685] usb 3-1: config 0 interface 0 has no altsetting 0 [ 395.110553][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.110576][ T5685] usb 3-1: Product: syz [ 395.110590][ T5685] usb 3-1: Manufacturer: syz [ 395.110603][ T5685] usb 3-1: SerialNumber: syz [ 395.123696][ T5685] usb 3-1: config 0 descriptor?? [ 395.183511][ T10] corsair-psu 0003:1B1C:1C09.0046: unknown main item tag 0x0 [ 395.183565][ T10] corsair-psu 0003:1B1C:1C09.0046: unknown main item tag 0x0 [ 395.183593][ T10] corsair-psu 0003:1B1C:1C09.0046: unknown main item tag 0x0 [ 395.183618][ T10] corsair-psu 0003:1B1C:1C09.0046: unknown main item tag 0x0 [ 395.183644][ T10] corsair-psu 0003:1B1C:1C09.0046: unknown main item tag 0x0 [ 395.228543][ T10] corsair-psu 0003:1B1C:1C09.0046: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 395.347081][ T5685] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input99 [ 395.355763][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 395.526985][ T9] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 395.528306][ T9] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 395.528330][ T9] usb 6-1: config 1 has no interface number 0 [ 395.532529][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.532551][ T9] usb 6-1: Product: syz [ 395.532604][ T9] usb 6-1: Manufacturer: syz [ 395.532619][ T9] usb 6-1: SerialNumber: syz [ 395.545500][ T10] corsair-psu 0003:1B1C:1C09.0046: unable to initialize device (-110) [ 395.553675][ T9] usb 6-1: 3:1 : does not exist [ 395.553694][ T9] usb 6-1: 3:2 : does not exist [ 395.588182][ T10] corsair-psu 0003:1B1C:1C09.0046: probe with driver corsair-psu failed with error -110 [ 395.610647][ T10] usb 1-1: USB disconnect, device number 59 [ 395.745299][ T5685] rc_core: IR keymap rc-imon-pad not found [ 395.745318][ T5685] Registered IR keymap rc-empty [ 395.745415][ T5685] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 395.745432][ T5685] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 395.755574][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.762033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.811167][ T5685] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 395.828661][ T5685] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input100 [ 395.831656][ T5685] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:52> initialized [ 396.188964][T15971] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 396.194645][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 396.198395][T13429] usb 3-1: USB disconnect, device number 52 [ 396.293727][T15974] __nla_validate_parse: 1 callbacks suppressed [ 396.293746][T15974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4117'. [ 396.380226][ T10] usb 6-1: USB disconnect, device number 7 [ 396.795325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.795596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.022466][T16000] tipc: Started in network mode [ 397.022489][T16000] tipc: Node identity 1001001, cluster identity 4711 [ 397.022502][T16000] tipc: Node number set to 16781313 [ 397.044379][T16000] tipc: Enabled bearer , priority 0 [ 397.167608][T16004] netlink: 'syz.5.4130': attribute type 4 has an invalid length. [ 397.311933][T16012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4133'. [ 397.348083][T13429] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 397.382886][T16015] input: syz1 as /devices/virtual/input/input101 [ 397.517169][T13429] usb 7-1: Using ep0 maxpacket: 8 [ 397.518853][T13429] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 397.520463][T13429] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 397.520510][T13429] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.520532][T13429] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.520579][T13429] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.520601][T13429] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.520640][T13429] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.737261][T13429] usb 7-1: usb_control_msg returned -32 [ 397.737307][T13429] usbtmc 7-1:16.0: can't read capabilities [ 397.835282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.835724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.422120][T16045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.474967][T16048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4147'. [ 398.519480][T16046] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 398.728109][ T6087] usb 7-1: USB disconnect, device number 5 [ 398.875276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.875549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.516770][ T1704] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 399.531165][ T1704] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 399.556822][ T1704] usb 4-1: USB disconnect, device number 63 [ 399.631005][ T5614] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 399.915300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.915659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.955569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.955810][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.510949][ T1704] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 401.666462][ T1704] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.668470][ T1704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.668500][ T1704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.668520][ T1704] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.668559][ T1704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.673880][ T1704] usb 1-1: config 0 descriptor?? [ 401.995444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.996134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.122841][ T1704] plantronics 0003:047F:FFFF.0047: reserved main item tag 0xd [ 402.149977][ T1704] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 402.305530][ T5678] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 402.429076][T13429] usb 1-1: USB disconnect, device number 60 [ 402.456203][ T5678] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.459876][ T5678] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 402.459906][ T5678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 402.459931][ T5678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 402.459953][ T5678] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.459994][ T5678] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.499352][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 402.538518][ T5678] usb 6-1: config 0 descriptor?? [ 402.567492][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 403.030920][ T5678] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 403.036792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.049461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.066264][ T30] audit: type=1326 audit(1791319115.433:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.2.4185" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcffb19e199 code=0x0 [ 403.144754][T16207] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.157824][T16206] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 403.696420][T16220] input: syz1 as /devices/virtual/input/input104 [ 403.794034][ T30] audit: type=1326 audit(1791319116.163:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.6.4191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85899e199 code=0x7ffc0000 [ 403.794171][ T30] audit: type=1326 audit(1791319116.163:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.6.4191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85899e199 code=0x7ffc0000 [ 403.819650][ T30] audit: type=1326 audit(1791319116.173:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.6.4191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe85899e199 code=0x7ffc0000 [ 403.819699][ T30] audit: type=1326 audit(1791319116.173:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.6.4191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85899e199 code=0x7ffc0000 [ 403.819737][ T30] audit: type=1326 audit(1791319116.173:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.6.4191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85899e199 code=0x7ffc0000 [ 403.819774][ T30] audit: type=1326 audit(1791319116.173:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.6.4191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe85899e199 code=0x7ffc0000 [ 403.819811][ T30] audit: type=1326 audit(1791319116.173:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.6.4191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85899e199 code=0x7ffc0000 [ 403.819848][ T30] audit: type=1326 audit(1791319116.173:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.6.4191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85899e199 code=0x7ffc0000 [ 403.819886][ T30] audit: type=1326 audit(1791319116.173:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16221 comm="syz.6.4191" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe85899e199 code=0x7ffc0000 [ 403.846420][T16224] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4192'. [ 404.029331][ T5678] usb 6-1: USB disconnect, device number 8 [ 404.075334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.075750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.114594][T16228] vcan0: tx address claim with broadcast sa [ 404.173065][T16230] ip_tables: iptables: counters copy to user failed while replacing table [ 404.238021][T16234] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4197'. [ 404.885722][ T5678] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 404.907853][ T5685] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 404.945600][ T6087] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 405.028373][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4217'. [ 405.035281][ T5678] usb 1-1: Using ep0 maxpacket: 32 [ 405.036074][ T5678] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 405.037116][ T5678] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 405.037138][ T5678] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 405.037157][ T5678] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 405.037198][ T5678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 405.037217][ T5678] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 405.037238][ T5678] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 405.037302][ T5678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.045865][ T5678] usb 1-1: config 0 descriptor?? [ 405.056336][ T5685] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 405.057765][ T5685] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 405.057787][ T5685] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 405.057844][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.073359][ T5685] usb 3-1: probing VID:PID(0424:012C) [ 405.082489][ T5685] usb 3-1: vub300 testing BULK IN EndPoint(0) 81 [ 405.082534][ T5685] usb 3-1: vub300 testing BULK OUT EndPoint(1) 02 [ 405.082552][ T5685] usb 3-1: vub300 testing BULK IN EndPoint(2) 83 [ 405.082568][ T5685] usb 3-1: vub300 testing BULK OUT EndPoint(3) 04 [ 405.082589][ T5685] usb 3-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 405.104338][ T6087] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 405.106191][ T6087] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 405.106219][ T6087] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 405.106240][ T6087] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 405.111660][ T6087] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 405.111683][ T6087] usb 7-1: Product: syz [ 405.111697][ T6087] usb 7-1: Manufacturer: syz [ 405.115291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.115659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.260061][ T5678] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 405.333966][T16259] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 405.334064][T16259] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 405.344136][ T6087] dvb_ttusb_budget: ttusb_init_controller: error [ 405.344155][ T6087] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 405.392417][ T6087] DVB: Unable to find symbol cx22700_attach() [ 405.433257][ T6087] DVB: Unable to find symbol tda10046_attach() [ 405.433273][ T6087] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 405.489868][ T6087] usb 1-1: USB disconnect, device number 61 [ 405.507128][ T5685] usb 3-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 405.510894][ T6087] usblp0: removed [ 405.554272][T16259] dvb_ttusb_budget: failed urb submission (0: err = -90)! [ 405.556683][ T44] usb 7-1: USB disconnect, device number 6 [ 405.707808][ T5685] usb 3-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 405.964432][T16287] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 406.155399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.155735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.375365][T13429] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 406.445887][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 406.526691][T13429] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 406.527664][T13429] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 406.527690][T13429] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.527728][T13429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.606385][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 406.606932][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 406.607939][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.611473][ T10] usb 7-1: config 0 descriptor?? [ 406.617205][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 406.733270][T13429] usb 6-1: GET_CAPABILITIES returned 0 [ 406.733305][T13429] usbtmc 6-1:16.0: can't read capabilities [ 406.938136][ T5678] usb 6-1: USB disconnect, device number 9 [ 406.965485][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 407.127925][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 407.129736][ T9] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 407.130917][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.132856][ T9] usb 4-1: config 0 descriptor?? [ 407.139085][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 407.342950][ T5685] usb 3-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 407.389854][ T6087] usb 3-1: USB disconnect, device number 53 [ 407.477745][ T6087] USB vub300 remote SDIO host controller[0] now disconnected [ 407.594235][T16330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4235'. [ 407.668115][T16334] netlink: 'syz.0.4237': attribute type 18 has an invalid length. [ 407.668137][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4237'. [ 407.681514][T16334] netlink: 'syz.0.4237': attribute type 18 has an invalid length. [ 407.681535][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4237'. [ 407.695365][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.695407][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.695438][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.695496][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.822179][ T10] gspca_sonixj: reg_w1 err -71 [ 407.837183][ T10] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 407.842159][ T10] usb 7-1: USB disconnect, device number 7 [ 408.005635][ T6087] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 408.175608][ T6087] usb 1-1: Using ep0 maxpacket: 32 [ 408.176335][ T6087] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 408.177290][ T6087] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 408.177312][ T6087] usb 1-1: config 0 has no interface number 0 [ 408.179218][ T6087] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.179241][ T6087] usb 1-1: Product: syz [ 408.179254][ T6087] usb 1-1: Manufacturer: syz [ 408.179268][ T6087] usb 1-1: SerialNumber: syz [ 408.182165][ T6087] usb 1-1: config 0 descriptor?? [ 408.238682][ C1] net_ratelimit: 2 callbacks suppressed [ 408.238700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.243967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.295350][ T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 408.352814][ T9] gspca_vc032x: reg_w err -71 [ 408.352849][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352860][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352869][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352878][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352886][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352896][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352904][ ** replaying previous printk message ** [ 408.352904][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352912][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352921][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352928][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352937][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352945][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352952][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352960][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352968][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352976][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352983][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352992][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.353000][ T9] gspca_vc032x: Unknown sensor... [ 408.353066][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 408.364807][ T9] usb 4-1: USB disconnect, device number 64 [ 408.395503][ C0] [ 408.437945][T16358] loop4: detected capacity change from 0 to 7 [ 408.485718][T16358] Dev loop4: unable to read RDB block 7 [ 408.485761][T16358] loop4: unable to read partition table [ 408.485985][T16358] loop4: partition table beyond EOD, truncated [ 408.486003][T16358] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 408.520922][ C0] ============================= [ 408.525835][ C0] WARNING: suspicious RCU usage [ 408.530703][ C0] syzkaller #0 Tainted: G L [ 408.536736][ C0] ----------------------------- [ 408.541584][ C0] kernel/sched/core.c:9226 Illegal context switch in RCU-sched read-side critical section! [ 408.551625][ C0] [ 408.551625][ C0] other info that might help us debug this: [ 408.551625][ C0] [ 408.561913][ C0] [ 408.561913][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 408.570052][ C0] locks held by syz-executor/15531: 9, last CPU#0: [ 408.576604][ C0] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 408.585411][ C0] #1: ffff888055318f80 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 408.594510][ C0] #2: ffff88801b09a800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 408.603856][ C0] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 408.613418][ C0] #4: ffff88805a0687f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 408.623946][ C0] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 408.633499][ C0] #6: ffff88807a7b57f8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 408.643840][ C0] #7: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 408.653290][ C0] #8: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 408.663820][ C0] [ 408.663820][ C0] stack backtrace: [ 408.669768][ C0] CPU: 0 UID: 0 PID: 15531 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 408.680865][ C0] Tainted: [L]=SOFTLOCKUP [ 408.685187][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.695429][ C0] Call Trace: [ 408.698719][ C0] [ 408.701558][ C0] dump_stack_lvl+0xe8/0x150 [ 408.706154][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 408.711519][ C0] __might_resched+0xbb/0x4c0 [ 408.716210][ C0] ? __cancel_work_sync+0x5c/0x110 [ 408.721324][ C0] __cancel_work_sync+0x6d/0x110 [ 408.726268][ C0] mmc_free_host+0x19/0x40 [ 408.730703][ C0] call_timer_fn+0x18d/0x5f0 [ 408.735295][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 408.741968][ C0] ? call_timer_fn+0xd5/0x5f0 [ 408.746655][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 408.751775][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 408.756976][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 408.763657][ C0] __run_timer_base+0x652/0x8b0 [ 408.768515][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 408.773882][ C0] ? ktime_get+0x1f5/0x220 [ 408.778290][ C0] ? lapic_next_event+0x11/0x20 [ 408.783142][ C0] run_timer_softirq+0xb7/0x170 [ 408.788003][ C0] handle_softirqs+0x226/0x860 [ 408.792771][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 408.797541][ C0] __irq_exit_rcu+0xcb/0x220 [ 408.802127][ C0] irq_exit_rcu+0x9/0x30 [ 408.806369][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 408.812013][ C0] [ 408.814940][ C0] [ 408.817865][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 408.823944][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 408.825351][ T5685] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 408.836740][ C0] Code: ff ff ff e8 30 ee 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 47 38 da [ 408.856338][ C0] RSP: 0018:ffffc90003707210 EFLAGS: 00000292 [ 408.862402][ C0] RAX: 63821aca10f44000 RBX: 0000000000000000 RCX: 8000000000000003 [ 408.870363][ C0] RDX: 000000006b994bdf RSI: ffffffff8e69fd9a RDI: ffffffff8c6dad80 [ 408.878330][ C0] RBP: ffff8880771e8000 R08: ffffffff82441dba R09: 0000000000000000 [ 408.886309][ C0] R10: dffffc0000000000 R11: ffffed100f01d5bd R12: ffffffff8ed5c960 [ 408.894271][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 408.902259][ C0] ? pfn_valid+0xba/0x490 [ 408.906603][ C0] ? pfn_valid+0xba/0x490 [ 408.910939][ C0] pfn_valid+0xd6/0x490 [ 408.915100][ C0] ? pfn_valid+0xba/0x490 [ 408.919436][ C0] page_table_check_set+0x25/0x530 [ 408.924558][ C0] copy_pmd_range+0x4adc/0x5c10 [ 408.929416][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 408.934887][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 408.940071][ C0] ? do_syscall_64+0x166/0x520 [ 408.944854][ C0] ? __lock_acquire+0x747/0x2de0 [ 408.949791][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 408.954995][ C0] copy_page_range+0xc82/0x1290 [ 408.959854][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 408.965140][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 408.972078][ C0] dup_mmap+0xf17/0x1dc0 [ 408.976332][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 408.981002][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 408.986041][ C0] ? lock_acquire+0x115/0x350 [ 408.990719][ C0] copy_mm+0x115/0x480 [ 408.994791][ C0] copy_process+0x1e79/0x4400 [ 408.999463][ C0] ? __lock_acquire+0x747/0x2de0 [ 409.004401][ C0] ? copy_process+0xd16/0x4400 [ 409.009181][ C0] ? __pfx_copy_process+0x10/0x10 [ 409.014239][ C0] kernel_clone+0x2d7/0x940 [ 409.018756][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 409.023799][ C0] __x64_sys_clone+0x1b6/0x230 [ 409.028570][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 409.033875][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 409.039163][ C0] do_syscall_64+0x166/0x520 [ 409.043756][ C0] ? trace_irq_disable+0x3b/0x140 [ 409.048772][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.054835][ C0] ? clear_bhb_loop+0x70/0xc0 [ 409.059509][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.065391][ C0] RIP: 0033:0x7fe8589c6c12 [ 409.069818][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 409.089410][ C0] RSP: 002b:00007fe858d4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 409.097818][ C0] RAX: ffffffffffffffda RBX: 00007fe858d4fc60 RCX: 00007fe8589c6c12 [ 409.105781][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 409.113739][ C0] RBP: 00007fe858d4fdec R08: 0000000000000000 R09: 0000000000000001 [ 409.121701][ C0] R10: 000055556606e7d0 R11: 0000000000000246 R12: 0000000000000001 [ 409.129660][ C0] R13: 00000000000927c0 R14: 00000000000639c9 R15: 00007fe858d4fe40 [ 409.137636][ C0] [ 409.140812][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 409.140828][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15531, name: syz-executor [ 409.140846][ C0] preempt_count: 103, expected: 0 [ 409.140856][ C0] RCU nest depth: 2, expected: 0 [ 409.140865][ C0] locks held by syz-executor/15531: 9, last CPU#0: [ 409.140880][ C0] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 409.140945][ C0] #1: ffff888055318f80 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 409.140998][ C0] #2: ffff88801b09a800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 409.141057][ C0] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 409.141119][ C0] #4: ffff88805a0687f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 409.141185][ C0] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 409.141248][ C0] #6: ffff88807a7b57f8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 409.141311][ C0] #7: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 409.141370][ C0] #8: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 409.141431][ C0] Preemption disabled at: [ 409.141438][ C0] [<0000000000000000>] 0x0 [ 409.141464][ C0] CPU: 0 UID: 0 PID: 15531 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 409.141492][ C0] Tainted: [L]=SOFTLOCKUP [ 409.141501][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.141514][ C0] Call Trace: [ 409.141522][ C0] [ 409.141530][ C0] dump_stack_lvl+0xe8/0x150 [ 409.141563][ C0] __might_resched+0x36a/0x4c0 [ 409.141611][ C0] __cancel_work_sync+0x6d/0x110 [ 409.141647][ C0] mmc_free_host+0x19/0x40 [ 409.141676][ C0] call_timer_fn+0x18d/0x5f0 [ 409.141705][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 409.141730][ C0] ? call_timer_fn+0xd5/0x5f0 [ 409.141758][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 409.141798][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.141828][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 409.141856][ C0] __run_timer_base+0x652/0x8b0 [ 409.141897][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 409.141928][ C0] ? ktime_get+0x1f5/0x220 [ 409.141953][ C0] ? lapic_next_event+0x11/0x20 [ 409.141984][ C0] run_timer_softirq+0xb7/0x170 [ 409.142012][ C0] handle_softirqs+0x226/0x860 [ 409.142045][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 409.142082][ C0] __irq_exit_rcu+0xcb/0x220 [ 409.142112][ C0] irq_exit_rcu+0x9/0x30 [ 409.142139][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 409.142171][ C0] [ 409.142178][ C0] [ 409.142188][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.142213][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 409.142238][ C0] Code: ff ff ff e8 30 ee 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 47 38 da [ 409.142258][ C0] RSP: 0018:ffffc90003707210 EFLAGS: 00000292 [ 409.142277][ C0] RAX: 63821aca10f44000 RBX: 0000000000000000 RCX: 8000000000000003 [ 409.142294][ C0] RDX: 000000006b994bdf RSI: ffffffff8e69fd9a RDI: ffffffff8c6dad80 [ 409.142312][ C0] RBP: ffff8880771e8000 R08: ffffffff82441dba R09: 0000000000000000 [ 409.142328][ C0] R10: dffffc0000000000 R11: ffffed100f01d5bd R12: ffffffff8ed5c960 [ 409.142345][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 409.142367][ C0] ? pfn_valid+0xba/0x490 [ 409.142400][ C0] ? pfn_valid+0xba/0x490 [ 409.142429][ C0] pfn_valid+0xd6/0x490 [ 409.142455][ C0] ? pfn_valid+0xba/0x490 [ 409.142480][ C0] page_table_check_set+0x25/0x530 [ 409.142508][ C0] copy_pmd_range+0x4adc/0x5c10 [ 409.142545][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 409.142582][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 409.142607][ C0] ? do_syscall_64+0x166/0x520 [ 409.142647][ C0] ? __lock_acquire+0x747/0x2de0 [ 409.142677][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 409.142717][ C0] copy_page_range+0xc82/0x1290 [ 409.142765][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 409.142799][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 409.142830][ C0] dup_mmap+0xf17/0x1dc0 [ 409.142870][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 409.142893][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 409.142939][ C0] ? lock_acquire+0x115/0x350 [ 409.142979][ C0] copy_mm+0x115/0x480 [ 409.143011][ C0] copy_process+0x1e79/0x4400 [ 409.143037][ C0] ? __lock_acquire+0x747/0x2de0 [ 409.143071][ C0] ? copy_process+0xd16/0x4400 [ 409.143116][ C0] ? __pfx_copy_process+0x10/0x10 [ 409.143158][ C0] kernel_clone+0x2d7/0x940 [ 409.143195][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 409.143245][ C0] __x64_sys_clone+0x1b6/0x230 [ 409.143281][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 409.143329][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 409.143362][ C0] do_syscall_64+0x166/0x520 [ 409.143394][ C0] ? trace_irq_disable+0x3b/0x140 [ 409.143418][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.143441][ C0] ? clear_bhb_loop+0x70/0xc0 [ 409.143468][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.143490][ C0] RIP: 0033:0x7fe8589c6c12 [ 409.143511][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 409.143531][ C0] RSP: 002b:00007fe858d4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 409.143553][ C0] RAX: ffffffffffffffda RBX: 00007fe858d4fc60 RCX: 00007fe8589c6c12 [ 409.143570][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 409.143583][ C0] RBP: 00007fe858d4fdec R08: 0000000000000000 R09: 0000000000000001 [ 409.143603][ C0] R10: 000055556606e7d0 R11: 0000000000000246 R12: 0000000000000001 [ 409.143618][ C0] R13: 00000000000927c0 R14: 00000000000639c9 R15: 00007fe858d4fe40 [ 409.143650][ C0] [ 409.143840][ C0] [ 409.195987][ T5685] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 409.197319][ T5685] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.197345][ T5685] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.197401][ T5685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.285354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.285691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.346709][ T5685] usb 6-1: config 0 descriptor?? [ 409.577943][ T6087] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 409.577993][ T6087] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 409.579962][ T6087] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 409.580258][ T6087] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 409.583847][ T6087] usb 1-1: USB disconnect, device number 62 [ 409.767807][ T5685] cm6533_jd 0003:0D8C:0022.0049: unknown main item tag 0x0 [ 409.767919][ T5685] cm6533_jd 0003:0D8C:0022.0049: unknown main item tag 0x0 [ 409.775736][ T5685] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0049/input/input105 [ 409.797757][ T5685] cm6533_jd 0003:0D8C:0022.0049: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 409.870779][ C0] ============================= [ 409.875681][ C0] WARNING: suspicious RCU usage [ 409.880536][ C0] syzkaller #0 Tainted: G W L [ 409.886578][ C0] ----------------------------- [ 409.891428][ C0] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 409.903465][ C0] [ 409.903465][ C0] other info that might help us debug this: [ 409.903465][ C0] [ 409.913724][ C0] [ 409.913724][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 409.921833][ C0] locks held by syz-executor/15531: 9, last CPU#0: [ 409.928373][ C0] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 409.937176][ C0] #1: ffff888055318f80 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 409.946289][ C0] #2: ffff88801b09a800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 409.955592][ C0] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 409.965101][ C0] #4: ffff88805a0687f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 409.975646][ C0] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 409.985139][ C0] #6: ffff88807a7b57f8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 409.995506][ C0] #7: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 410.004881][ C0] #8: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 410.015339][ C0] [ 410.015339][ C0] stack backtrace: [ 410.021225][ C0] CPU: 0 UID: 0 PID: 15531 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 410.032325][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 410.037500][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.047550][ C0] Call Trace: [ 410.050815][ C0] [ 410.053644][ C0] dump_stack_lvl+0xe8/0x150 [ 410.058221][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 410.063577][ C0] __synchronize_srcu+0x157/0x2f0 [ 410.068586][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 410.074109][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.079142][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 410.084968][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 410.090534][ C0] ? synchronize_srcu+0x20a/0x260 [ 410.095557][ C0] wakeup_source_unregister+0x129/0x3f0 [ 410.101107][ C0] mmc_host_classdev_release+0x47/0x100 [ 410.106655][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 410.112824][ C0] device_release+0xc4/0x1f0 [ 410.117440][ C0] kobject_put+0x222/0x550 [ 410.121855][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 410.126629][ C0] call_timer_fn+0x18d/0x5f0 [ 410.131237][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 410.137924][ C0] ? call_timer_fn+0xd5/0x5f0 [ 410.142619][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 410.147746][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.152965][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 410.159664][ C0] __run_timer_base+0x652/0x8b0 [ 410.164540][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 410.169912][ C0] ? ktime_get+0x1f5/0x220 [ 410.174326][ C0] ? lapic_next_event+0x11/0x20 [ 410.179176][ C0] run_timer_softirq+0xb7/0x170 [ 410.184027][ C0] handle_softirqs+0x226/0x860 [ 410.188787][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 410.193552][ C0] __irq_exit_rcu+0xcb/0x220 [ 410.198223][ C0] irq_exit_rcu+0x9/0x30 [ 410.202460][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 410.208091][ C0] [ 410.211008][ C0] [ 410.213924][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 410.219898][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 410.225178][ C0] Code: ff ff ff e8 30 ee 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 47 38 da [ 410.244782][ C0] RSP: 0018:ffffc90003707210 EFLAGS: 00000292 [ 410.250849][ C0] RAX: 63821aca10f44000 RBX: 0000000000000000 RCX: 8000000000000003 [ 410.258814][ C0] RDX: 000000006b994bdf RSI: ffffffff8e69fd9a RDI: ffffffff8c6dad80 [ 410.266774][ C0] RBP: ffff8880771e8000 R08: ffffffff82441dba R09: 0000000000000000 [ 410.274738][ C0] R10: dffffc0000000000 R11: ffffed100f01d5bd R12: ffffffff8ed5c960 [ 410.282708][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 410.290683][ C0] ? pfn_valid+0xba/0x490 [ 410.295021][ C0] ? pfn_valid+0xba/0x490 [ 410.299352][ C0] pfn_valid+0xd6/0x490 [ 410.303506][ C0] ? pfn_valid+0xba/0x490 [ 410.307835][ C0] page_table_check_set+0x25/0x530 [ 410.312949][ C0] copy_pmd_range+0x4adc/0x5c10 [ 410.317807][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 410.323276][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 410.325533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.335416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.344530][ C0] ? do_syscall_64+0x166/0x520 [ 410.349317][ C0] ? __lock_acquire+0x747/0x2de0 [ 410.354253][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 410.359454][ C0] copy_page_range+0xc82/0x1290 [ 410.364315][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 410.369599][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 410.376536][ C0] dup_mmap+0xf17/0x1dc0 [ 410.380783][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 410.385450][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.390483][ C0] ? lock_acquire+0x115/0x350 [ 410.395166][ C0] copy_mm+0x115/0x480 [ 410.399239][ C0] copy_process+0x1e79/0x4400 [ 410.403909][ C0] ? __lock_acquire+0x747/0x2de0 [ 410.408850][ C0] ? copy_process+0xd16/0x4400 [ 410.413630][ C0] ? __pfx_copy_process+0x10/0x10 [ 410.418662][ C0] kernel_clone+0x2d7/0x940 [ 410.423171][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 410.428205][ C0] __x64_sys_clone+0x1b6/0x230 [ 410.432969][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 410.438265][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 410.443546][ C0] do_syscall_64+0x166/0x520 [ 410.448137][ C0] ? trace_irq_disable+0x3b/0x140 [ 410.453153][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.459206][ C0] ? clear_bhb_loop+0x70/0xc0 [ 410.463875][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.469755][ C0] RIP: 0033:0x7fe8589c6c12 [ 410.474161][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 410.493756][ C0] RSP: 002b:00007fe858d4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 410.502161][ C0] RAX: ffffffffffffffda RBX: 00007fe858d4fc60 RCX: 00007fe8589c6c12 [ 410.510119][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 410.518082][ C0] RBP: 00007fe858d4fdec R08: 0000000000000000 R09: 0000000000000001 [ 410.526061][ C0] R10: 000055556606e7d0 R11: 0000000000000246 R12: 0000000000000001 [ 410.534027][ C0] R13: 00000000000927c0 R14: 00000000000639c9 R15: 00007fe858d4fe40 [ 410.542005][ C0] [ 410.545088][ C0] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1472 [ 410.545101][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15531, name: syz-executor [ 410.545116][ C0] preempt_count: 103, expected: 0 [ 410.545126][ C0] RCU nest depth: 2, expected: 0 [ 410.545167][ C0] locks held by syz-executor/15531: 9, last CPU#0: [ 410.545182][ C0] #0: ffffffff8ee36650 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x480 [ 410.545242][ C0] #1: ffff888055318f80 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 410.545290][ C0] #2: ffff88801b09a800 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 410.545339][ C0] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 410.545394][ C0] #4: ffff88805a0687f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 410.545463][ C0] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 410.545526][ C0] #6: ffff88807a7b57f8 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6fb/0x5c10 [ 410.545589][ C0] #7: ffffffff8ed5c960 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 410.545649][ C0] #8: ffffc90000007cc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 410.545711][ C0] Preemption disabled at: [ 410.545718][ C0] [<0000000000000000>] 0x0 [ 410.545746][ C0] CPU: 0 UID: 0 PID: 15531 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 410.545778][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 410.545787][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.545801][ C0] Call Trace: [ 410.545810][ C0] [ 410.545819][ C0] dump_stack_lvl+0xe8/0x150 [ 410.545853][ C0] __might_resched+0x36a/0x4c0 [ 410.545893][ C0] __synchronize_srcu+0x1a1/0x2f0 [ 410.545921][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 410.545944][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.545987][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 410.546018][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 410.546054][ C0] ? synchronize_srcu+0x20a/0x260 [ 410.546081][ C0] wakeup_source_unregister+0x129/0x3f0 [ 410.546115][ C0] mmc_host_classdev_release+0x47/0x100 [ 410.546147][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 410.546174][ C0] device_release+0xc4/0x1f0 [ 410.546210][ C0] kobject_put+0x222/0x550 [ 410.546234][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 410.546270][ C0] call_timer_fn+0x18d/0x5f0 [ 410.546300][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 410.546324][ C0] ? call_timer_fn+0xd5/0x5f0 [ 410.546352][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 410.546391][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.546420][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 410.546444][ C0] __run_timer_base+0x652/0x8b0 [ 410.546485][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 410.546516][ C0] ? ktime_get+0x1f5/0x220 [ 410.546540][ C0] ? lapic_next_event+0x11/0x20 [ 410.546568][ C0] run_timer_softirq+0xb7/0x170 [ 410.546596][ C0] handle_softirqs+0x226/0x860 [ 410.546630][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 410.546666][ C0] __irq_exit_rcu+0xcb/0x220 [ 410.546697][ C0] irq_exit_rcu+0x9/0x30 [ 410.546724][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 410.546755][ C0] [ 410.546762][ C0] [ 410.546771][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 410.546795][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 410.546815][ C0] Code: ff ff ff e8 30 ee 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 47 38 da [ 410.546834][ C0] RSP: 0018:ffffc90003707210 EFLAGS: 00000292 [ 410.546853][ C0] RAX: 63821aca10f44000 RBX: 0000000000000000 RCX: 8000000000000003 [ 410.546869][ C0] RDX: 000000006b994bdf RSI: ffffffff8e69fd9a RDI: ffffffff8c6dad80 [ 410.546884][ C0] RBP: ffff8880771e8000 R08: ffffffff82441dba R09: 0000000000000000 [ 410.546899][ C0] R10: dffffc0000000000 R11: ffffed100f01d5bd R12: ffffffff8ed5c960 [ 410.546915][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 410.546936][ C0] ? pfn_valid+0xba/0x490 [ 410.546968][ C0] ? pfn_valid+0xba/0x490 [ 410.546996][ C0] pfn_valid+0xd6/0x490 [ 410.547028][ C0] ? pfn_valid+0xba/0x490 [ 410.547057][ C0] page_table_check_set+0x25/0x530 [ 410.547091][ C0] copy_pmd_range+0x4adc/0x5c10 [ 410.547130][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 410.547166][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 410.547183][ C0] ? do_syscall_64+0x166/0x520 [ 410.547221][ C0] ? __lock_acquire+0x747/0x2de0 [ 410.547245][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 410.547282][ C0] copy_page_range+0xc82/0x1290 [ 410.547328][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 410.547363][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 410.547394][ C0] dup_mmap+0xf17/0x1dc0 [ 410.547428][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 410.547451][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 410.547492][ C0] ? lock_acquire+0x115/0x350 [ 410.547523][ C0] copy_mm+0x115/0x480 [ 410.547549][ C0] copy_process+0x1e79/0x4400 [ 410.547571][ C0] ? __lock_acquire+0x747/0x2de0 [ 410.547598][ C0] ? copy_process+0xd16/0x4400 [ 410.547633][ C0] ? __pfx_copy_process+0x10/0x10 [ 410.547665][ C0] kernel_clone+0x2d7/0x940 [ 410.547694][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 410.547731][ C0] __x64_sys_clone+0x1b6/0x230 [ 410.547759][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 410.547796][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 410.547822][ C0] do_syscall_64+0x166/0x520 [ 410.547847][ C0] ? trace_irq_disable+0x3b/0x140 [ 410.547866][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.547884][ C0] ? clear_bhb_loop+0x70/0xc0 [ 410.547905][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.547922][ C0] RIP: 0033:0x7fe8589c6c12 [ 410.547938][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 410.547953][ C0] RSP: 002b:00007fe858d4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 410.547971][ C0] RAX: ffffffffffffffda RBX: 00007fe858d4fc60 RCX: 00007fe8589c6c12 [ 410.547984][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 410.547995][ C0] RBP: 00007fe858d4fdec R08: 0000000000000000 R09: 0000000000000001 [ 410.548007][ C0] R10: 000055556606e7d0 R11: 0000000000000246 R12: 0000000000000001 [ 410.548023][ C0] R13: 00000000000927c0 R14: 00000000000639c9 R15: 00007fe858d4fe40 [ 410.548048][ C0] [ 410.548063][ C0] ODEBUG: object ffffc90000007a80 is NOT on stack ffffc90003700000, but annotated. [ 410.548618][ C0] ------------[ cut here ]------------ [ 410.548627][ C0] 1 [ 410.548635][ C0] WARNING: lib/debugobjects.c:672 at __debug_object_init+0x2c4/0x3c0, CPU#0: syz-executor/15531 [ 411.210351][ C0] Modules linked in: [ 411.214251][ C0] CPU: 0 UID: 0 PID: 15531 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 411.225359][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 411.230545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.240587][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 411.246487][ C0] Code: fe 06 cc 41 ff c7 44 89 3d e9 0c e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 2d 5f 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 67 6d 0a 3b 05 7f [ 411.266091][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 411.272156][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 63821aca10f44000 [ 411.280121][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 411.288080][ C0] RBP: ffff8880771e8020 R08: 0000000000000100 R09: 1ffffffff1ed22f4 [ 411.296041][ C0] R10: dffffc0000000000 R11: fffffbfff1ed22f5 R12: ffff8880782ed8d8 [ 411.304005][ C0] R13: ffff8880583ebc40 R14: dffffc0000000000 R15: 0000000000000001 [ 411.311994][ C0] FS: 000055556606e500(0000) GS:ffff888124cc6000(0000) knlGS:0000000000000000 [ 411.320912][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.327486][ C0] CR2: 00007fe8597556c8 CR3: 000000004c84a000 CR4: 00000000003526f0 [ 411.335448][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000063235cd5 [ 411.343411][ C0] DR3: 0000000000007000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 411.351368][ C0] Call Trace: [ 411.354639][ C0] [ 411.357484][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 411.363030][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 411.368049][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 411.373587][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 411.378632][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 411.384435][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 411.389978][ C0] ? synchronize_srcu+0x20a/0x260 [ 411.394996][ C0] wakeup_source_unregister+0x129/0x3f0 [ 411.395288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.400340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.416604][ C0] mmc_host_classdev_release+0x47/0x100 [ 411.422149][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 411.428298][ C0] device_release+0xc4/0x1f0 [ 411.432887][ C0] kobject_put+0x222/0x550 [ 411.437294][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 411.442058][ C0] call_timer_fn+0x18d/0x5f0 [ 411.446642][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 411.453306][ C0] ? call_timer_fn+0xd5/0x5f0 [ 411.457974][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 411.463086][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.468276][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 411.474944][ C0] __run_timer_base+0x652/0x8b0 [ 411.479801][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 411.485178][ C0] ? ktime_get+0x1f5/0x220 [ 411.489587][ C0] ? lapic_next_event+0x11/0x20 [ 411.494433][ C0] run_timer_softirq+0xb7/0x170 [ 411.499277][ C0] handle_softirqs+0x226/0x860 [ 411.504040][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 411.508808][ C0] __irq_exit_rcu+0xcb/0x220 [ 411.513392][ C0] irq_exit_rcu+0x9/0x30 [ 411.517631][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 411.523262][ C0] [ 411.526180][ C0] [ 411.529100][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 411.535076][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 411.540349][ C0] Code: ff ff ff e8 30 ee 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 47 38 da [ 411.559943][ C0] RSP: 0018:ffffc90003707210 EFLAGS: 00000292 [ 411.566004][ C0] RAX: 63821aca10f44000 RBX: 0000000000000000 RCX: 8000000000000003 [ 411.573964][ C0] RDX: 000000006b994bdf RSI: ffffffff8e69fd9a RDI: ffffffff8c6dad80 [ 411.581927][ C0] RBP: ffff8880771e8000 R08: ffffffff82441dba R09: 0000000000000000 [ 411.589887][ C0] R10: dffffc0000000000 R11: ffffed100f01d5bd R12: ffffffff8ed5c960 [ 411.597847][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 411.605811][ C0] ? pfn_valid+0xba/0x490 [ 411.610147][ C0] ? pfn_valid+0xba/0x490 [ 411.614472][ C0] pfn_valid+0xd6/0x490 [ 411.618619][ C0] ? pfn_valid+0xba/0x490 [ 411.622959][ C0] page_table_check_set+0x25/0x530 [ 411.628084][ C0] copy_pmd_range+0x4adc/0x5c10 [ 411.632958][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 411.638434][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 411.643630][ C0] ? do_syscall_64+0x166/0x520 [ 411.648405][ C0] ? __lock_acquire+0x747/0x2de0 [ 411.653354][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 411.658559][ C0] copy_page_range+0xc82/0x1290 [ 411.663448][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 411.668750][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 411.675784][ C0] dup_mmap+0xf17/0x1dc0 [ 411.680043][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 411.684716][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 411.689755][ C0] ? lock_acquire+0x115/0x350 [ 411.694440][ C0] copy_mm+0x115/0x480 [ 411.698509][ C0] copy_process+0x1e79/0x4400 [ 411.703186][ C0] ? __lock_acquire+0x747/0x2de0 [ 411.708128][ C0] ? copy_process+0xd16/0x4400 [ 411.712907][ C0] ? __pfx_copy_process+0x10/0x10 [ 411.717939][ C0] kernel_clone+0x2d7/0x940 [ 411.722446][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 411.727484][ C0] __x64_sys_clone+0x1b6/0x230 [ 411.732249][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 411.737543][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 411.742832][ C0] do_syscall_64+0x166/0x520 [ 411.747421][ C0] ? trace_irq_disable+0x3b/0x140 [ 411.752437][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.758492][ C0] ? clear_bhb_loop+0x70/0xc0 [ 411.763162][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.769042][ C0] RIP: 0033:0x7fe8589c6c12 [ 411.773447][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 411.793044][ C0] RSP: 002b:00007fe858d4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 411.801458][ C0] RAX: ffffffffffffffda RBX: 00007fe858d4fc60 RCX: 00007fe8589c6c12 [ 411.809424][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 411.817384][ C0] RBP: 00007fe858d4fdec R08: 0000000000000000 R09: 0000000000000001 [ 411.825341][ C0] R10: 000055556606e7d0 R11: 0000000000000246 R12: 0000000000000001 [ 411.833298][ C0] R13: 00000000000927c0 R14: 00000000000639c9 R15: 00007fe858d4fe40 [ 411.841271][ C0] [ 411.844300][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 411.851571][ C0] CPU: 0 UID: 0 PID: 15531 Comm: syz-executor Tainted: G W L syzkaller #0 PREEMPT(full) [ 411.862671][ C0] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 411.867845][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.877885][ C0] Call Trace: [ 411.881153][ C0] [ 411.883983][ C0] vpanic+0x56d/0xa60 [ 411.887968][ C0] ? __pfx__printk+0x10/0x10 [ 411.892550][ C0] ? __pfx_vpanic+0x10/0x10 [ 411.897049][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 411.902336][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 411.907535][ C0] panic+0xc5/0xd0 [ 411.911253][ C0] ? __pfx_panic+0x10/0x10 [ 411.915679][ C0] __warn+0x315/0x4c0 [ 411.919663][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 411.924948][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 411.930225][ C0] __report_bug+0x276/0x570 [ 411.934728][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 411.940013][ C0] ? __pfx___report_bug+0x10/0x10 [ 411.945033][ C0] ? __wake_up_klogd+0xf0/0x130 [ 411.949892][ C0] ? vprintk_emit+0x4ee/0x560 [ 411.954578][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 411.959602][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 411.964628][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 411.969911][ C0] report_bug+0x16b/0x220 [ 411.974244][ C0] ? __debug_object_init+0x2c4/0x3c0 [ 411.979538][ C0] ? __debug_object_init+0x2c6/0x3c0 [ 411.984826][ C0] handle_bug+0x9c/0x200 [ 411.989066][ C0] exc_invalid_op+0x1a/0x50 [ 411.993564][ C0] asm_exc_invalid_op+0x1a/0x20 [ 411.998405][ C0] RIP: 0010:__debug_object_init+0x2c4/0x3c0 [ 412.004301][ C0] Code: fe 06 cc 41 ff c7 44 89 3d e9 0c e8 15 48 c7 c1 80 b6 6d 8c 48 c7 c7 e0 b6 6d 8c 84 c0 48 0f 45 f9 48 89 de e8 2d 5f 3c fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 4f 1c 00 00 8b 05 81 67 6d 0a 3b 05 7f [ 412.023904][ C0] RSP: 0018:ffffc900000079b8 EFLAGS: 00010046 [ 412.029979][ C0] RAX: 0000000000000050 RBX: ffffc90000007a80 RCX: 63821aca10f44000 [ 412.037944][ C0] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 412.045909][ C0] RBP: ffff8880771e8020 R08: 0000000000000100 R09: 1ffffffff1ed22f4 [ 412.053873][ C0] R10: dffffc0000000000 R11: fffffbfff1ed22f5 R12: ffff8880782ed8d8 [ 412.061835][ C0] R13: ffff8880583ebc40 R14: dffffc0000000000 R15: 0000000000000001 [ 412.069820][ C0] ? __debug_object_init+0x2c3/0x3c0 [ 412.075109][ C0] ? __init_swait_queue_head+0xa8/0x150 [ 412.080653][ C0] __synchronize_srcu+0x1d5/0x2f0 [ 412.085675][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 412.091216][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 412.096248][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 412.102052][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 412.107589][ C0] ? synchronize_srcu+0x20a/0x260 [ 412.112607][ C0] wakeup_source_unregister+0x129/0x3f0 [ 412.118150][ C0] mmc_host_classdev_release+0x47/0x100 [ 412.123694][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 412.129844][ C0] device_release+0xc4/0x1f0 [ 412.134436][ C0] kobject_put+0x222/0x550 [ 412.138844][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 412.143610][ C0] call_timer_fn+0x18d/0x5f0 [ 412.148195][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 412.154859][ C0] ? call_timer_fn+0xd5/0x5f0 [ 412.159530][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 412.164644][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.169834][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 412.176499][ C0] __run_timer_base+0x652/0x8b0 [ 412.181352][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 412.186720][ C0] ? ktime_get+0x1f5/0x220 [ 412.191128][ C0] ? lapic_next_event+0x11/0x20 [ 412.195973][ C0] run_timer_softirq+0xb7/0x170 [ 412.200820][ C0] handle_softirqs+0x226/0x860 [ 412.205582][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 412.210344][ C0] __irq_exit_rcu+0xcb/0x220 [ 412.214926][ C0] irq_exit_rcu+0x9/0x30 [ 412.219162][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 412.224791][ C0] [ 412.227710][ C0] [ 412.230627][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 412.236600][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 412.241880][ C0] Code: ff ff ff e8 30 ee 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 38 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 47 38 da [ 412.261474][ C0] RSP: 0018:ffffc90003707210 EFLAGS: 00000292 [ 412.267537][ C0] RAX: 63821aca10f44000 RBX: 0000000000000000 RCX: 8000000000000003 [ 412.275498][ C0] RDX: 000000006b994bdf RSI: ffffffff8e69fd9a RDI: ffffffff8c6dad80 [ 412.283457][ C0] RBP: ffff8880771e8000 R08: ffffffff82441dba R09: 0000000000000000 [ 412.291423][ C0] R10: dffffc0000000000 R11: ffffed100f01d5bd R12: ffffffff8ed5c960 [ 412.299382][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 412.307356][ C0] ? pfn_valid+0xba/0x490 [ 412.311690][ C0] ? pfn_valid+0xba/0x490 [ 412.316014][ C0] pfn_valid+0xd6/0x490 [ 412.320167][ C0] ? pfn_valid+0xba/0x490 [ 412.324492][ C0] page_table_check_set+0x25/0x530 [ 412.329602][ C0] copy_pmd_range+0x4adc/0x5c10 [ 412.334457][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 412.339922][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 412.345109][ C0] ? do_syscall_64+0x166/0x520 [ 412.349880][ C0] ? __lock_acquire+0x747/0x2de0 [ 412.354813][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 412.360012][ C0] copy_page_range+0xc82/0x1290 [ 412.364872][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 412.370155][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 412.377084][ C0] dup_mmap+0xf17/0x1dc0 [ 412.381330][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 412.385998][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 412.391033][ C0] ? lock_acquire+0x115/0x350 [ 412.395715][ C0] copy_mm+0x115/0x480 [ 412.399787][ C0] copy_process+0x1e79/0x4400 [ 412.404460][ C0] ? __lock_acquire+0x747/0x2de0 [ 412.409397][ C0] ? copy_process+0xd16/0x4400 [ 412.414171][ C0] ? __pfx_copy_process+0x10/0x10 [ 412.419199][ C0] kernel_clone+0x2d7/0x940 [ 412.423704][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 412.428746][ C0] __x64_sys_clone+0x1b6/0x230 [ 412.433517][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 412.438813][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 412.444098][ C0] do_syscall_64+0x166/0x520 [ 412.448688][ C0] ? trace_irq_disable+0x3b/0x140 [ 412.453703][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.459764][ C0] ? clear_bhb_loop+0x70/0xc0 [ 412.464433][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.470315][ C0] RIP: 0033:0x7fe8589c6c12 [ 412.474721][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 412.494317][ C0] RSP: 002b:00007fe858d4fc60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 412.502728][ C0] RAX: ffffffffffffffda RBX: 00007fe858d4fc60 RCX: 00007fe8589c6c12 [ 412.510707][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 412.518673][ C0] RBP: 00007fe858d4fdec R08: 0000000000000000 R09: 0000000000000001 [ 412.526663][ C0] R10: 000055556606e7d0 R11: 0000000000000246 R12: 0000000000000001 [ 412.534635][ C0] R13: 00000000000927c0 R14: 00000000000639c9 R15: 00007fe858d4fe40 [ 412.542621][ C0] [ 412.545904][ C0] Kernel Offset: disabled [ 412.550219][ C0] Rebooting in 86400 seconds..