last executing test programs: 7m45.439797042s ago: executing program 4 (id=388): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 7m45.149224902s ago: executing program 4 (id=390): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x800, @local, 0x9}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000140)) 7m43.70951221s ago: executing program 4 (id=411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425aee3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x21) 7m43.620051828s ago: executing program 4 (id=413): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) 7m42.634259482s ago: executing program 4 (id=418): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x461f, @private=0xa010100}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000001c0)=0xff, 0x4) 7m42.279988164s ago: executing program 4 (id=420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xeeee8000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, {0x1, 0xddccb000, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, {0x118004, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x4}, {0x1000, 0x0, 0xd, 0x8, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0xeeef0000, 0x8, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x10000, 0xb, 0x0, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4, 0x1}, {0xd000, 0x41000, 0x3, 0x82, 0xfc, 0x10, 0x4, 0xe}, {0x0, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x0, 0x10, 0x1000000000000001, 0x9000, 0x900, [0x0, 0xfffffffffffffffc, 0x2, 0x5]}) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 7m41.903144377s ago: executing program 32 (id=420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xeeee8000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, {0x1, 0xddccb000, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, {0x118004, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x4}, {0x1000, 0x0, 0xd, 0x8, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0xeeef0000, 0x8, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x10000, 0xb, 0x0, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4, 0x1}, {0xd000, 0x41000, 0x3, 0x82, 0xfc, 0x10, 0x4, 0xe}, {0x0, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x0, 0x10, 0x1000000000000001, 0x9000, 0x900, [0x0, 0xfffffffffffffffc, 0x2, 0x5]}) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 7m6.535673488s ago: executing program 1 (id=701): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) 7m4.72035398s ago: executing program 1 (id=713): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x737, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 7m4.340749163s ago: executing program 1 (id=718): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x1ff, 0x42) syz_io_uring_setup(0x4504, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x100002, 0xef}, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x2, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x800, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0xa, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0x8, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0xffffffff, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x1000, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7m4.278489438s ago: executing program 1 (id=720): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 7m3.277802005s ago: executing program 1 (id=728): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) 7m2.819852427s ago: executing program 1 (id=737): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(r0) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) poll(&(0x7f00000002c0)=[{r0, 0x80ad}], 0x1, 0x2) 7m2.31142528s ago: executing program 33 (id=737): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close(r0) r1 = socket(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) poll(&(0x7f00000002c0)=[{r0, 0x80ad}], 0x1, 0x2) 1m39.914456057s ago: executing program 0 (id=3779): syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0003"], 0xfdef) 1m39.496655051s ago: executing program 0 (id=3783): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendmsg$inet(r1, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x404c0c4) 1m39.367838288s ago: executing program 0 (id=3785): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 1m39.120013479s ago: executing program 0 (id=3787): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x62) 1m38.886073271s ago: executing program 0 (id=3788): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x6) 1m38.420647661s ago: executing program 0 (id=3789): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1, 0x21840, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 1m37.713940888s ago: executing program 34 (id=3789): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1, 0x21840, 0x2000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 50.351851478s ago: executing program 7 (id=4160): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000005c0)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{}, {}]}) 50.189878918s ago: executing program 7 (id=4162): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0, 0x120) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) 48.998265664s ago: executing program 7 (id=4172): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000640)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 48.820034937s ago: executing program 7 (id=4175): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00') 48.682582103s ago: executing program 7 (id=4176): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000372000/0x2000)=nil, 0x2000) mlock2(&(0x7f00003f3000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 48.411797674s ago: executing program 7 (id=4178): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000001d00)=[{&(0x7f0000000540)='1', 0x1}, {0x0}], 0x2) 47.954676935s ago: executing program 35 (id=4178): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000001d00)=[{&(0x7f0000000540)='1', 0x1}, {0x0}], 0x2) 42.602121174s ago: executing program 5 (id=4234): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9c", 0x3}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20044880) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x51}], 0x1}, 0x0) 42.373767464s ago: executing program 5 (id=4236): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xa0000000}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x4}}, 0x20) 42.10735505s ago: executing program 5 (id=4237): r0 = socket(0x1, 0x5, 0x0) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x8201, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80002000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000004}) 41.936249302s ago: executing program 5 (id=4239): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00') 41.691678749s ago: executing program 5 (id=4241): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) fcntl$setsig(r0, 0xa, 0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 41.379817464s ago: executing program 5 (id=4243): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 40.741130537s ago: executing program 36 (id=4243): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 4.508693864s ago: executing program 2 (id=4568): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0) 4.430023668s ago: executing program 2 (id=4571): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000079102800000000007b0000ff0000000095007400000000005d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 4.226997939s ago: executing program 2 (id=4575): r0 = gettid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) timer_settime(r2, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1.93213332s ago: executing program 3 (id=4605): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) unshare(0x8040480) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000000c0)="4789d3aefc1a4d0334", 0x9}, {&(0x7f0000002600)="782ee097da", 0x5}], 0x23, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) 1.93193359s ago: executing program 8 (id=4606): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0x1) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close(0x4) 1.930945077s ago: executing program 9 (id=4615): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 1.800225457s ago: executing program 3 (id=4607): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) 1.779487415s ago: executing program 6 (id=4608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.633501683s ago: executing program 8 (id=4609): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900"], 0x7) 1.57634842s ago: executing program 3 (id=4610): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.502739087s ago: executing program 6 (id=4611): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000300)=""/104, 0x68}], 0x2}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="127d589163267e4b0eda2e4186729989fdd2e24baac09a37b374a16c27a136d37e08121d3864d655", 0x28}, {&(0x7f0000000380)="c9d9a10108979adc78d18e770debf3b9ffff35b65ab08a4f14980d8d02", 0x1d}], 0x2}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 1.08075714s ago: executing program 2 (id=4612): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="100001800400048008"], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 927.584794ms ago: executing program 8 (id=4613): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x63efd2067515ec1) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) 905.330349ms ago: executing program 2 (id=4614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x10}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xb000, 0xdddd0000, 0x0, 0xf0, 0x40, 0xfd, 0x5, 0xd4, 0x0, 0x4, 0xa, 0x6}, {0xffff1000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x8, 0x5, 0x2, 0x3, 0xca}, {0xeeee0000, 0x9000, 0xb, 0x0, 0x2, 0x3, 0x4, 0x1, 0x8c, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x6, 0x3, 0x76, 0x1}, {0x100000, 0x50000, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6e, 0x1, 0xfb, 0x4, 0x80, 0x4, 0xfc}, {0x6000, 0x2000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x57, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xdddd0000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x9, 0x0, 0xeeef0000, [0x4, 0x2, 0x80000008, 0x8]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000480)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x0, 0x6, 0xd310, 0xb}]}) 833.687086ms ago: executing program 9 (id=4616): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0xeeeed000, 0x2000, &(0x7f0000455000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000740)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 647.983478ms ago: executing program 8 (id=4617): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 647.714295ms ago: executing program 2 (id=4618): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/139, 0x8b}, {0x0}], 0x2}, 0x10000) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="127d589163267e4b0eda2e4186729989fdd2e24baac09a37b374a16c27a1", 0x1e}, {&(0x7f00000003c0)="c9d9a10108979adc78d18e770debf3b9caf235b65ab08a7ad91d86db2d8ff2a0a6151cf0313af5", 0x27}], 0x2}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 601.298533ms ago: executing program 9 (id=4619): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 505.528294ms ago: executing program 6 (id=4620): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 395.976872ms ago: executing program 8 (id=4621): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}}}}, 0x36) 394.371067ms ago: executing program 9 (id=4622): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x1, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40048c7) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 364.495945ms ago: executing program 3 (id=4623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r2], 0x0) 291.956009ms ago: executing program 6 (id=4624): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r4], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x432f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 218.789098ms ago: executing program 3 (id=4625): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001840)="f78d9ca38fff48dabe52163448412ba802bb1646004a4ac07b24389144eae07cb47554cd52a0f67eff26511c964ecc278122178465ec2c074de497507558cd9314ece62936273c0becb8581ac598f1d37d0ae264899227603263af9ac7436bddbb113e528fd2a77a3a9a9f5df41a80e4312bfff0edbbbe09f9f6dff77a02983e6d71defd44c4709562be83238eb95719969655945627c4522a0a181eeb1ab125d74fb17a7d3045ae6a71d9d36f437f7d9209242abe64acaf8c6fc88cde8a33995eac6b272bdc0e991d0a591778deddd084cc977e734a952372f03c8a00", 0xdd}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000001740)="e8700e444d50a969ff67347cff6127e6ef12ee380b271482a4975a52c1ab9b8b4db3945d1032005eabe97f4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1e9563853c5e892962c80f158cb43e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704f3da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef452ccee26d7b48241847bf9e343ef4674c45e2a085060f1100000000", 0xce}, {&(0x7f0000000540)="44a00c9c217c31d4ba445650962dbd8437428e9d66fa254a22fb8e52e751d398f67146c1c21b9e0a96748b256b05d0b8afd52d506a6c0d28b1926108bda2fc5e5ce26fc54686a7390282fede6d6b9631e73ce6401f71a622a882d64a444dc77012139aa7c5bda361c365b432062abf11", 0x70}, {&(0x7f0000001940)="acdd65f956b2757bfa58207e21229db64163c879c39374596e603b7ed8391cba5c90ecb0361a5bc775387782bae0aaee7048fe9e308a4a4840f5336fc0dd3997f027642bca9488fce42bdc29b8892cdcd4d72f4bba35f861ea0fc7d1e7afe220a0bb39c66b026aecc556f5b9d19132c45c69b81bc1292e8259", 0x79}, {&(0x7f00000019c0)="46c105eff41c0fdbc8b9cc268a6d2d28b541766f66f90f3aa3bead58fca2d48282fb260cb8b1c618f3db5ea54238ccdb928d8e2e197e5599fd344c5e2243dbca9efa985c83fd7a7cf9493d194b7edc5fd60da98d49eb2eb96e180b78b8425ea62c30406abe387ded627a92e2bf64848732654045c2c2b9f74efecb67654bd5fe3fa2f4aa54f3d61c334847f310e8479d2f879996be131c4a664e786203e2ab", 0x9f}], 0x6, 0x0, 0x0, 0x20000001}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 218.573351ms ago: executing program 9 (id=4626): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x356e, &(0x7f0000000180)={0x0, 0x7be7, 0x40, 0x2, 0x1c}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 132.404412ms ago: executing program 6 (id=4627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000", @ANYRES32], 0x50) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 39.907468ms ago: executing program 3 (id=4628): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r2, 0x2, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) 28.508734ms ago: executing program 6 (id=4629): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7fff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x80, 0x4}, 0x3d, [0x6, 0xc95b, 0x9, 0x8, 0x85, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xc86, 0x5f, 0xa, 0x0, 0x7, 0xd4, 0x8, 0x4, 0x100, 0x7, 0x2007, 0x7, 0x3, 0x3c57, 0x1, 0x24, 0x2adc, 0x800, 0x1f461e2c, 0x3, 0x3, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8000, 0x642, 0x7, 0xa, 0x0, 0x71, 0x1, 0xe, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x9, 0x0, 0x80, 0x2000, 0x4, 0x6, 0x400008c0, 0x4, 0x1, 0x40], [0x10080007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0x2d, 0x2bf, 0x6c9, 0x1ff, 0x0, 0x3, 0x0, 0x7, 0x2, 0x1c, 0xe, 0x313, 0x78, 0xea4, 0x9e, 0x4, 0x4, 0xd, 0x4, 0x410, 0x1, 0x6, 0x400401, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x101, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0xfffffffa, 0x9, 0x7, 0x5, 0x0, 0x10003, 0x7, 0x5e0176bd, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x8, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x5, 0x1, 0x5, 0x9, 0xfffffdfa, 0x7fdfffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x5, 0x0, 0x4001ef, 0x9, 0x8, 0x88, 0x3, 0x10000009, 0x3e6, 0xb, 0x3ff, 0x2, 0x60002, 0xf, 0x7, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0xffffffff, 0xa5, 0x7, 0x6, 0x8, 0x4, 0x54fe12da, 0x5, 0x5, 0xffffffff, 0x400000, 0xfff7fff9, 0x10000000, 0x1, 0x5, 0x8, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x6, 0xfffffffc, 0x6, 0x938, 0x6, 0x6, 0x4051bf, 0x5, 0xb, 0x1ff, 0x6, 0x87, 0x407, 0x7, 0x104, 0x80000000, 0x1, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x0, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x2, 0xfffffffe, 0x80000003, 0x405, 0x8, 0xff, 0x103, 0xfffffff1, 0x10002, 0xa, 0x8, 0x100, 0x9602, 0xb, 0x2, 0x800, 0x6, 0x1000101, 0x10000, 0x2, 0x8, 0x2b91, 0xffffffff, 0x8, 0x9, 0x1, 0x6c0b, 0x83a0, 0x1, 0x5, 0xb1c, 0x1, 0x8, 0x1000, 0xffffffff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 20.50802ms ago: executing program 8 (id=4630): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r2, @ANYBLOB="0800db"], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 0s ago: executing program 9 (id=4631): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009740)=[{&(0x7f0000000b80)={0x500, 0x3f, 0x22d, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x4, 0xf3}, @nested={0xb9, 0xbb, 0x0, 0x1, [@typed={0x14, 0x23, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x2e}, @nested={0x4, 0x81}, @generic="673bf83c1bd94c9281e72e4583a3734cbcc6a6b451a4fda1f6183474077eef3451870476788e6c13cc0fc3d3d7eabc581fac186b72de6864c895d48bc9d35e55c40a98ef4a62b755e8b0202b70190235c4000ba3f9aa219d1224cf498edd735a0b45fefcdf906e8141cdc1c10a2779435cd4f2a851045a721f226bf5c6d2f5e3683592684e662fbd5b8e305c49", @nested={0x4, 0x68}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x369, 0x13b, 0x0, 0x1, [@nested={0x4, 0x2c}, @generic="663f98afc4124dfaedba25ebf2c36a3fa72791579cf441690ce5bfea5221bae40c040c7ab837dbc407f1b975c472472ea9015939a219c09fa9c0bde7b3c730de91fb907b3b38e1f9cbd79157367bc82a05c9637d8089cdf4f935cb0d0811453c000954ee964bafce9abae2bd0628f1661c8e6b37f5a70153e322d77d8069", @nested={0x2bd, 0x155, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @pid}, @generic="9f27587af031fa4834efed1fca5a8ae0b7f91e8501ef4affad0af00e21299dacdf1d20ce04b2402242e211cc22cd96597e4744727e9f9bfe46cace1f54a63c18172bd2a0ca39f22d6473110b9165dc9adaa71d4b31fbe0a1313362aa13accfaf23d95f8744df2042d157c8ab1ef56ff7bb30003c4ad87edf962d82925662c72ff191759dced7c357f10abbdcadbd4f72a00c907de5684fc17537444b9f17afb6d4402ab37a3d6fae25c40d0952b08b10a5162356eac21fa532ff2c7b14f13055f0", @nested={0x1f0, 0x166, 0x0, 0x1, [@nested={0x189, 0x140, 0x0, 0x1, [@nested={0x4, 0x12b}, @typed={0x4, 0xd3}, @typed={0x8, 0x4d, 0x0, 0x0, @fd}, @generic="232da66cf2f54b14b4bca03ded55", @generic="022f25ad54a4ff0f9d066d6c8088c53cbe8247d46bbd087b15ce6a1717abaaf10ed12d062d516324404218867c03dd550e15bedacfeda2efcb0e7a0a18ed6cebada03085a807876cda5a2ccbef4b254b04bea560021a874c462c11f10198d5d817dbdc", @generic="eb60febd8ab1d78cdd1900b0bd74629fe65abec5739565d53937f19b1612aead3dff6e4bda7fc017fba40577f98b1bce1c59aa88f43451f3d2d26fdad2a4649a3d397b1fa82263385188d8c42cfebac33ab561974f70dcc7aef0c87f4083fba4ec42ffd232b952c8a90feea1f44592c7063dddb17e66f2abe670d239889979458730f252de7f4b2623d04703a17024a9e6100eab38cdfd197bd61c5c0564753262d90e372ef9bee5a94987a998ec518e8a205a5e6e360dab27a85830f7d1a80e36725a7e0ea87afcd31f95d371555fa842941e887607739bcd37e0eeccb7f955ee913aca", @nested={0x4, 0x3d}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x54, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x55, 0x145, 0x0, 0x1, [@nested={0x4, 0x108}, @nested={0x4, 0x115}, @nested={0x4, 0x6d}, @nested={0x4, 0x83}, @nested={0x4, 0x92}, @generic="e60ed74a64388e37a9a304220d87b42866c6a07f5481aeaf1f2ab2adf7f6c65b1b5a9bfe470a68e8b1c95d83e37e936ebfd7a027293c005025ee36d753"]}, @typed={0x8, 0x34, 0x0, 0x0, @pid}]}]}, @generic="44aef74d5de93f6df06de488caf9efca1255d5dbc7881eddb8a87e81c054ac06ac7a4b"]}, @generic="56654540a80ae4fa1c01d76d89b959b62f092ffb9ae8c49794d2dc25ae602307d047b420aba01a9b47d8867f02a9f9241a1e2b98c89a3ccef16eef8ec88015f37e406f4bbc1d5bdba70cadfcb599e88c6410b70fe3e5e23a07858a7de20f35c83c5eacd9aa1f7e0e0cfcec0616d646871cb2f00d75967748c12965fe6224a2d0100af51ca204665dd582083ada23e9687ccac5eac2d46330c5268520ac0e14e8e0e65d3c1f26f61241007a80644450dcacbac5f7a46e2c0af1e5dac48710ce1d58"]}, 0x500}], 0x1, 0x0, 0x0, 0x4000007}, 0x20004800) kernel console output (not intermixed with test programs): miscuous mode [ 512.365964][T15096] vxcan0: left promiscuous mode [ 512.378599][T15096] vxcan1: left promiscuous mode [ 512.384187][T15096] veth0: left promiscuous mode [ 512.390559][T15096] veth1: left promiscuous mode [ 512.399419][T15096] wg0: left promiscuous mode [ 512.405750][T15096] wg1: left promiscuous mode [ 512.411701][T15096] wg2: left promiscuous mode [ 512.417436][T15096] veth0_to_bridge: left promiscuous mode [ 512.424580][T15096] veth1_to_bridge: left promiscuous mode [ 512.432499][T15096] veth0_to_bond: left promiscuous mode [ 512.439609][T15096] veth1_to_bond: left promiscuous mode [ 512.446603][T15096] veth0_to_team: left promiscuous mode [ 512.470631][T15096] team_slave_0: left promiscuous mode [ 512.487904][T15110] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3703'. [ 512.498076][T15096] veth1_to_team: left promiscuous mode [ 512.524141][T15096] team_slave_1: left promiscuous mode [ 512.545853][T15096] veth0_to_batadv: left promiscuous mode [ 512.555288][T15096] batadv_slave_0: left promiscuous mode [ 512.562077][T15096] veth1_to_batadv: left promiscuous mode [ 512.568508][T15111] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3703'. [ 512.579292][T15096] batadv_slave_1: left promiscuous mode [ 512.587619][T15096] xfrm0: left promiscuous mode [ 512.596132][T15096] veth0_to_hsr: left promiscuous mode [ 512.605842][T15096] hsr_slave_0: left promiscuous mode [ 512.611978][T15096] veth1_to_hsr: left promiscuous mode [ 512.618211][T15096] hsr_slave_1: left promiscuous mode [ 512.629615][T15096] veth1_vlan: left promiscuous mode [ 512.636077][T15096] veth0_vlan: left promiscuous mode [ 512.643257][T15096] veth0_vlan: entered promiscuous mode [ 512.652657][T15096] veth1_vlan: entered promiscuous mode [ 512.664935][T15096] veth1_macvtap: left promiscuous mode [ 512.688629][T15096] veth0_macvtap: left promiscuous mode [ 512.695399][T15096] veth0_macvtap: entered promiscuous mode [ 512.715217][T15096] veth1_macvtap: entered promiscuous mode [ 512.721744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.730220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.739136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.747588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.784167][T15096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.796566][T15096] bridge0: port 3(vlan2) entered blocking state [ 512.805070][T15096] bridge0: port 3(vlan2) entered forwarding state [ 512.817882][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'. [ 512.859499][T15096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.868825][T15096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.878574][T15096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.910710][ T8775] bridge0: port 3(vlan2) entered disabled state [ 512.929846][T15110] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.937681][T15110] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.006985][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.035557][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.116536][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.150329][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.262784][ T8775] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 513.324096][ T8775] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 513.347579][T15127] netlink: 'syz.3.3710': attribute type 1 has an invalid length. [ 513.400142][T15127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.447972][T12162] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 513.552155][T15133] bond1: (slave geneve2): making interface the new active one [ 513.590349][T15133] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 513.614455][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.652487][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.681947][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.720737][ T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.160090][ T13] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 514.238477][T12162] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.558125][T12162] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 515.199095][ T753] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 515.387878][T12162] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 515.568579][T12162] usb 7-1: Using ep0 maxpacket: 32 [ 515.605014][T12162] usb 7-1: config 0 has no interfaces? [ 515.621573][T12162] usb 7-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 515.660728][T12162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.694381][T12162] usb 7-1: Product: syz [ 515.718765][T12162] usb 7-1: Manufacturer: syz [ 515.726694][T12162] usb 7-1: SerialNumber: syz [ 515.752635][T12162] usb 7-1: config 0 descriptor?? [ 515.762713][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3737'. [ 516.048533][T12166] usb 7-1: USB disconnect, device number 47 [ 516.464096][T15212] loop3: detected capacity change from 0 to 7 [ 516.546613][T15212] Dev loop3: unable to read RDB block 7 [ 516.577207][T15212] loop3: AHDI p1 p2 [ 516.594771][T15212] loop3: partition table partially beyond EOD, truncated [ 516.611833][T15212] loop3: p1 size 150995200 extends beyond EOD, truncated [ 516.735049][ T5640] udevd[5640]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 517.171760][T15228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.210998][T15228] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.258369][T15228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.333943][T15228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.357312][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 517.357333][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 517.378961][T15228] veth1_vlan: left promiscuous mode [ 517.385928][T15228] veth0_vlan: left promiscuous mode [ 517.392978][T15228] veth0_vlan: entered promiscuous mode [ 517.405383][T15228] veth1_vlan: entered promiscuous mode [ 517.435140][T15228] veth1_macvtap: left promiscuous mode [ 517.451373][T15228] veth0_macvtap: left promiscuous mode [ 517.462538][T15228] veth0_macvtap: entered promiscuous mode [ 517.471799][T15228] veth1_macvtap: entered promiscuous mode [ 517.486612][T15228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.505280][T15228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.514771][T15228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.526750][T15228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.545321][T15228] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 517.554753][T15228] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 517.565689][T15228] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 517.596163][T12166] team_slave_1: entered promiscuous mode [ 517.636617][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.643954][ T79] bridge0: port 1(bridge_slave_0) entered listening state [ 517.686361][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.693608][ T79] bridge0: port 2(bridge_slave_1) entered listening state [ 517.819635][ T8771] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.847348][ T8771] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.881110][ T8771] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.010919][ T8771] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.167326][T12166] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 518.338069][T12166] usb 1-1: Using ep0 maxpacket: 8 [ 518.353646][T12166] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 518.375563][T12166] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 518.409000][T12166] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 518.433019][T12166] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 518.466113][T12166] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 518.477381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.485901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.494424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.502981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.536497][T12166] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 518.554026][T12166] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 518.566038][T12166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.668900][T15263] IPVS: set_ctl: invalid protocol: 255 100.1.1.0:20003 [ 518.755640][T15279] [U]  [ 518.758915][T15279] [U] K{ [ 518.773973][T15279] [U] t 1ŠFfˊ`GJgo/mC [ 518.795100][T15279] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 518.821625][T15279] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 518.837514][T12166] usb 1-1: usb_control_msg returned -32 [ 518.849574][T12166] usbtmc 1-1:16.0: can't read capabilities [ 518.876557][T15279] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 518.935426][T15279] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 518.971069][T15279] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 518.983423][T15279] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 518.995947][T15279] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 519.129622][T15279] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 519.138758][T15279] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 519.167554][T15279] [U] 22Ʃx?0;3u [ 519.176644][T15279] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 519.247857][T15279] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 519.267151][T15279] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 519.287754][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 519.297230][T15279] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 519.303680][T15279] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 519.317363][T15279] [U] ec [ 519.320557][T15279] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 519.398513][T15278] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 519.613651][T15294] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 519.815033][T12171] usb 1-1: USB disconnect, device number 62 [ 519.874742][T15303] fuse: No fuse device found [ 520.598716][T15313] bridge0: port 3(erspan0) entered blocking state [ 520.618508][T15313] bridge0: port 3(erspan0) entered disabled state [ 520.636584][T15313] erspan0: entered allmulticast mode [ 520.661143][T15313] erspan0: entered promiscuous mode [ 520.683004][T15313] bridge0: port 3(erspan0) entered blocking state [ 520.689689][T15313] bridge0: port 3(erspan0) entered forwarding state [ 520.711136][T15315] erspan0: left allmulticast mode [ 520.741100][T15315] erspan0: left promiscuous mode [ 520.770554][T15315] bridge0: port 3(erspan0) entered disabled state [ 521.377602][T12171] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 521.580967][T12171] usb 3-1: Using ep0 maxpacket: 8 [ 521.598209][T12171] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 521.623583][T12171] usb 3-1: config 0 has no interface number 0 [ 521.641018][T12171] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 521.680017][T12171] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 521.716968][T12171] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 521.754255][T12171] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 521.788955][T12171] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 521.813584][T12171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.844278][T12171] usb 3-1: config 0 descriptor?? [ 521.886340][T12171] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 522.125135][T12176] usb 3-1: USB disconnect, device number 62 [ 522.131336][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 522.198290][T12176] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 522.492808][ T8771] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.537234][ T8771] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.576141][ T8771] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 34859 - 0 [ 522.993504][ T8771] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.068554][ T8771] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.133572][ T8771] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 34859 - 0 [ 523.345571][ T8771] team0: Port device netdevsim1 removed [ 523.390004][T12162] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 523.399821][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 523.414128][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 523.422520][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 523.435482][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 523.445552][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 523.457277][ T8771] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.467889][ T8771] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.478613][ T8771] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 34859 - 0 [ 523.600794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.609530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.618054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.626506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.649249][T12162] usb 6-1: unable to get BOS descriptor or descriptor too short [ 523.663182][T12162] usb 6-1: not running at top speed; connect to a high speed hub [ 523.672440][ T8771] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 523.685145][T12162] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 523.694392][T12162] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 523.703456][ T8771] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.714424][T12162] usb 6-1: config 14 has no interface number 0 [ 523.721614][ T8771] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.732666][T12162] usb 6-1: config 14 has no interface number 1 [ 523.739404][ T8771] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 34859 - 0 [ 523.750134][T12162] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 523.764874][T12162] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 523.781649][T12162] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 523.795320][T12162] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.817556][T12162] usb 6-1: config 14 interface 57 has no altsetting 0 [ 523.841369][T12162] usb 6-1: config 14 interface 228 has no altsetting 0 [ 523.850927][T12162] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 523.860684][T12162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.886542][T12162] usb 6-1: Product: syz [ 523.895943][T12162] usb 6-1: Manufacturer: syz [ 523.903054][T12162] usb 6-1: SerialNumber: syz [ 523.917272][T12174] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 524.080715][T12174] usb 4-1: config 0 has no interfaces? [ 524.101267][T12174] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.124374][T12174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.153514][T12174] usb 4-1: Product: syz [ 524.176882][T12174] usb 4-1: Manufacturer: syz [ 524.206976][T12174] usb 4-1: SerialNumber: syz [ 524.255971][T12174] usb 4-1: config 0 descriptor?? [ 524.344924][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3797'. [ 524.376089][T12162] legousbtower 6-1:14.57: interrupt endpoints not found [ 524.450169][ T8771] bridge_slave_1: left allmulticast mode [ 524.482581][ T8771] bridge_slave_1: left promiscuous mode [ 524.491663][T12174] usb 4-1: USB disconnect, device number 67 [ 524.512148][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.553327][ T8771] bridge_slave_0: left allmulticast mode [ 524.564932][ T8771] bridge_slave_0: left promiscuous mode [ 524.579820][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.769171][T12162] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 524.790997][T12162] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 525.060610][ T8771] bond0 (unregistering): left promiscuous mode [ 525.077134][ T8771] bond_slave_0: left promiscuous mode [ 525.087564][ T8771] bond_slave_1: left promiscuous mode [ 525.105546][ T8771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.143953][ T8771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.185913][ T8771] bond0 (unregistering): Released all slaves [ 525.412584][ T5292] 8021q: adding VLAN 0 to HW filter on device eth9 [ 525.435258][ T8771] tipc: Left network mode [ 525.599043][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 525.612453][ T5637] Bluetooth: hci3: command tx timeout [ 525.805181][T15392] syzkaller1: entered promiscuous mode [ 525.835675][T15392] syzkaller1: entered allmulticast mode [ 526.078687][T15340] usb 6-1: LEGO USB Tower reset control request failed [ 526.193927][T12162] usb 6-1: USB disconnect, device number 56 [ 526.213897][T12162] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 526.542238][T15347] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.558728][T15347] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.566107][T15347] bridge_slave_0: entered allmulticast mode [ 526.581207][T15347] bridge_slave_0: entered promiscuous mode [ 526.671027][T15347] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.696126][T15347] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.722457][T15347] bridge_slave_1: entered allmulticast mode [ 526.746476][T15347] bridge_slave_1: entered promiscuous mode [ 526.774554][ T8771] batadv0: left promiscuous mode [ 526.801345][ T8771] dummy0: left promiscuous mode [ 526.873489][ T8771] hsr_slave_0: left promiscuous mode [ 526.896923][ T8771] hsr_slave_1: left promiscuous mode [ 526.921678][ T8771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.939261][ T8771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.962148][ T8771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.984033][ T8771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.050847][ T8771] veth1_macvtap: left promiscuous mode [ 527.065677][ T8771] veth0_macvtap: left promiscuous mode [ 527.497387][T12171] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 527.527751][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 527.667218][T12171] usb 4-1: Using ep0 maxpacket: 8 [ 527.679744][ T5637] Bluetooth: hci3: command tx timeout [ 527.696176][T12171] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 527.705022][T12171] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 527.715286][T12171] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 527.726341][T12171] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 527.738602][T12171] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 527.749274][T12171] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 527.763736][T12171] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 527.777254][T12171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.023852][T12171] usb 4-1: usb_control_msg returned -32 [ 528.034063][ T8771] team0 (unregistering): Port device team_slave_1 removed [ 528.041884][T12171] usbtmc 4-1:16.0: can't read capabilities [ 528.092133][T15440] loop7: detected capacity change from 0 to 16384 [ 528.145215][T15440] loop7: detected capacity change from 16384 to 16383 [ 528.502534][ T5292] 8021q: adding VLAN 0 to HW filter on device eth10 [ 528.516040][T15436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3813'. [ 528.547974][T15347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.573530][T15347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.678024][T15347] team0: Port device team_slave_0 added [ 528.695704][T15347] team0: Port device team_slave_1 added [ 528.717378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.726018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.734628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.743144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.803169][T15452] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 528.850432][T15347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.884031][T15347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.961975][T15347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.994786][T15347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.007080][T12171] usb 4-1: USB disconnect, device number 68 [ 529.034237][T15347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.135466][T15347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.219151][ T8771] IPVS: stop unused estimator thread 0... [ 529.335840][T15347] hsr_slave_0: entered promiscuous mode [ 529.359636][T15347] hsr_slave_1: entered promiscuous mode [ 529.475480][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3824'. [ 529.653856][T15471] tipc: Started in network mode [ 529.670549][T15471] tipc: Node identity ac14140f, cluster identity 4711 [ 529.698633][T15471] tipc: Enabled bearer , priority 10 [ 529.767419][ T5637] Bluetooth: hci3: command tx timeout [ 530.579919][T12176] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 530.712384][ T5292] 8021q: adding VLAN 0 to HW filter on device eth11 [ 530.742985][T15347] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 530.759518][T12176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.784961][T12176] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.802189][T15347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.809431][T12176] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 530.809491][T12176] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 530.809518][T12176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.844706][T12176] usb 3-1: config 0 descriptor?? [ 530.881914][T12162] tipc: Node number set to 2886997007 [ 530.899986][T15347] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 530.927346][T15347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.936075][T15347] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 530.962389][T15347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.973074][T15347] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 530.992088][T15347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.333137][T12176] plantronics 0003:047F:FFFF.007C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 531.349634][T15347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.422271][T15347] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.454044][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.461378][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.528651][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.535903][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.639149][T12166] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 531.794176][T15347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.808612][T12166] usb 6-1: Using ep0 maxpacket: 8 [ 531.820598][T12166] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.837519][ T5637] Bluetooth: hci3: command tx timeout [ 531.853037][T12166] usb 6-1: config 0 has no interfaces? [ 531.860558][T12166] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 531.870457][T12166] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.886148][T12166] usb 6-1: config 0 descriptor?? [ 531.936150][T15347] veth0_vlan: entered promiscuous mode [ 532.005878][T15347] veth1_vlan: entered promiscuous mode [ 532.118262][T15347] veth0_macvtap: entered promiscuous mode [ 532.152417][T15347] veth1_macvtap: entered promiscuous mode [ 532.225793][T15347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.266180][T15347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.329833][ T753] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.350858][ T753] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.383497][ T5292] 8021q: adding VLAN 0 to HW filter on device eth12 [ 532.396183][ T753] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.414580][ T753] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.433383][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3843'. [ 532.732608][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.763963][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.876541][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.901317][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.281784][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 533.289204][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 533.392954][T12159] usb 3-1: USB disconnect, device number 63 [ 534.367271][T12158] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 534.381213][T12166] usb 6-1: USB disconnect, device number 57 [ 534.487384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.495789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.504371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.512749][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.557973][T12158] usb 3-1: Using ep0 maxpacket: 32 [ 534.582357][T12158] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 534.606697][T12158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.662510][T12158] usb 3-1: config 0 descriptor?? [ 534.688645][T12158] gspca_main: sunplus-2.14.0 probing 041e:400b [ 534.977791][T12166] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 535.167153][T12166] usb 6-1: Using ep0 maxpacket: 16 [ 535.180687][T12166] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 535.193500][T12166] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 535.225827][T12166] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 535.269637][T12166] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.291121][T12166] usb 6-1: Product: syz [ 535.299912][T12166] usb 6-1: Manufacturer: syz [ 535.311139][T12166] usb 6-1: SerialNumber: syz [ 535.333541][T12166] usb 6-1: config 0 descriptor?? [ 535.349223][T12164] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 535.364425][T15603] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.3861'. [ 535.377849][T12166] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 535.403864][T12164] hid-generic 0000:0000:0000.007D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 535.415407][T12166] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 535.653004][T15608] loop7: detected capacity change from 0 to 16384 [ 535.717782][T15608] loop7: detected capacity change from 16384 to 16383 [ 535.904168][T12158] gspca_sunplus: reg_w_riv err -71 [ 535.925552][T12158] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 535.958309][T12158] usb 3-1: USB disconnect, device number 64 [ 535.991785][T12166] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 536.015330][T12166] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 536.250308][T12166] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 536.278115][T12166] em28xx 6-1:0.0: No AC97 audio processor [ 536.316597][T12166] usb 6-1: USB disconnect, device number 58 [ 536.336377][T12166] em28xx 6-1:0.0: Disconnecting em28xx [ 536.402358][T12166] em28xx 6-1:0.0: Freeing device [ 536.565721][T15620] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3867'. [ 536.658071][T15622] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3867'. [ 536.719869][T15620] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 536.733762][T15620] bond2 (unregistering): Released all slaves [ 536.865184][T15622] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 536.882307][T15622] bond2 (unregistering): Released all slaves [ 537.037439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.212347][T15643] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.3877'. [ 538.301967][ T30] audit: type=1326 audit(1780719734.047:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15680 comm="syz.5.3892" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f7901c code=0x0 [ 538.765971][T15692] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.901176][T15699] netlink: 'syz.3.3900': attribute type 4 has an invalid length. [ 538.950594][T15699] netlink: 'syz.3.3900': attribute type 4 has an invalid length. [ 538.968176][ T30] audit: type=1800 audit(1780719734.707:635): pid=15704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3903" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 539.028574][T15706] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 539.387199][T12166] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 539.579512][T12166] usb 4-1: Using ep0 maxpacket: 8 [ 539.601648][T12166] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 539.627741][T12166] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 539.640802][T12166] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.671788][T12166] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.697309][T12166] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.716757][T12166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.955546][T12166] usb 4-1: GET_CAPABILITIES returned 0 [ 539.968854][T12166] usbtmc 4-1:16.0: can't read capabilities [ 540.158398][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 540.170400][T12171] usb 4-1: USB disconnect, device number 69 [ 540.237424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.246053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.254622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.263132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.271628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.280202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.288179][T12166] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 540.289595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.392453][ T30] audit: type=1800 audit(1780719736.137:636): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3917" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 540.457469][T12166] usb 6-1: Using ep0 maxpacket: 32 [ 540.477023][T12166] usb 6-1: config 1 has an invalid interface number: 224 but max is 2 [ 540.496767][T12166] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.511394][T12166] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 540.520882][T12166] usb 6-1: config 1 has no interface number 0 [ 540.527547][T12166] usb 6-1: too many endpoints for config 1 interface 224 altsetting 255: 255, using maximum allowed: 30 [ 540.545293][T12166] usb 6-1: config 1 interface 224 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 540.561818][T12166] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 94, changing to 7 [ 540.576075][T12166] usb 6-1: config 1 interface 224 has no altsetting 0 [ 540.586526][T12166] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 540.596610][T12166] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.607870][T12166] usb 6-1: Product: syz [ 540.612577][T12166] usb 6-1: Manufacturer: syz [ 540.620708][T12166] usb 6-1: SerialNumber: syz [ 540.654260][T12166] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor [ 540.670419][T12166] usb 6-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 540.684867][T12166] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 540.881327][T12158] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 540.937530][T12158] hid-generic 0000:0000:0000.007E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 541.023183][T12166] usb 6-1: USB disconnect, device number 59 [ 541.385410][ T30] audit: type=1326 audit(1780719737.127:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15759 comm="syz.2.3926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707f01c code=0x0 [ 541.696872][T15771] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3930'. [ 542.237524][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 542.830782][T15804] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3944'. [ 542.918396][T15806] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3944'. [ 542.962977][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3946'. [ 543.000270][T15804] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 543.010982][T12166] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 543.058587][T15804] bond1 (unregistering): Released all slaves [ 543.197140][T12166] usb 3-1: Using ep0 maxpacket: 8 [ 543.204402][T12166] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 543.212793][T12166] usb 3-1: config 0 has no interface number 0 [ 543.219402][T12166] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 543.232244][T12166] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 543.244284][T12166] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 543.256033][T12166] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 543.269634][T12166] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 543.281291][T15806] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 543.289969][T12166] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.316914][T12166] usb 3-1: config 0 descriptor?? [ 543.323176][T15806] bond1 (unregistering): Released all slaves [ 543.355632][T12166] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 544.071201][T12176] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 544.263146][T12176] usb 7-1: Using ep0 maxpacket: 32 [ 544.283943][T12176] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 544.314109][T12176] usb 7-1: config 0 interface 0 has no altsetting 0 [ 544.342510][T12176] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 544.363000][T12176] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.391429][T12176] usb 7-1: config 0 descriptor?? [ 544.798673][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 544.838335][T12177] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 545.007338][T12177] usb 6-1: Using ep0 maxpacket: 16 [ 545.022005][T12177] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 545.048247][T12177] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.065360][T12177] usb 6-1: Product: syz [ 545.082604][T12177] usb 6-1: Manufacturer: syz [ 545.105424][T12177] usb 6-1: SerialNumber: syz [ 545.123628][T12177] usb 6-1: config 0 descriptor?? [ 545.154516][T12177] gspca_main: spca508-2.14.0 probing 041e:4018 [ 545.226435][T12176] corsair-cpro 0003:1B1C:0C10.007F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0 [ 545.372633][T12177] gspca_spca508: reg_read err -32 [ 545.393397][T12177] gspca_spca508: reg_read err -32 [ 545.414141][T12177] gspca_spca508: reg_read err -32 [ 545.446856][T12177] gspca_spca508: reg_read err -32 [ 545.613560][T12176] corsair-cpro 0003:1B1C:0C10.007F: probe with driver corsair-cpro failed with error -71 [ 545.625298][T12162] usb 3-1: USB disconnect, device number 65 [ 545.658175][T12162] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 545.690098][T12176] usb 7-1: USB disconnect, device number 48 [ 545.698072][T12177] gspca_spca508: reg write: error -71 [ 545.718537][T12177] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 545.754099][T12177] usb 6-1: USB disconnect, device number 60 [ 545.997341][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.005942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.014567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.023075][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.490234][T15889] netlink: 'syz.2.3968': attribute type 1 has an invalid length. [ 546.686461][T15889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 546.891279][T15897] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 547.594080][T15924] loop7: detected capacity change from 0 to 5 [ 547.747989][T15924] loop7: detected capacity change from 5 to 0 [ 548.280032][T12177] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 548.449380][T12177] usb 8-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 548.489246][T12177] usb 8-1: config 1 interface 0 has no altsetting 0 [ 548.511143][T12177] usb 8-1: string descriptor 0 read error: -22 [ 548.520661][T12177] usb 8-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.40 [ 548.537408][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 548.541982][T12177] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.637339][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.644649][ C0] bridge0: topology change detected, propagating [ 548.651533][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.658807][ C0] bridge0: topology change detected, propagating [ 548.757467][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 548.772805][ T9] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 548.805468][ T9] usb 6-1: config 0 has no interface number 0 [ 548.828387][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 548.865270][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.890062][ T9] usb 6-1: Product: syz [ 548.913491][ T9] usb 6-1: Manufacturer: syz [ 548.925639][ T9] usb 6-1: SerialNumber: syz [ 548.947406][ T9] usb 6-1: config 0 descriptor?? [ 549.020951][T12177] gembird 0003:11FF:3331.0080: unknown main item tag 0x0 [ 549.040559][T12177] gembird 0003:11FF:3331.0080: unknown main item tag 0x0 [ 549.060660][T12177] gembird 0003:11FF:3331.0080: unknown main item tag 0x0 [ 549.080401][T12177] gembird 0003:11FF:3331.0080: unknown main item tag 0x0 [ 549.098665][T12177] gembird 0003:11FF:3331.0080: unknown main item tag 0x0 [ 549.118849][T12177] gembird 0003:11FF:3331.0080: unknown main item tag 0x0 [ 549.143277][T12177] gembird 0003:11FF:3331.0080: unknown main item tag 0x0 [ 549.162654][T12177] gembird 0003:11FF:3331.0080: unknown main item tag 0x0 [ 549.181548][T12177] gembird 0003:11FF:3331.0080: unknown main item tag 0x0 [ 549.202238][T12177] gembird 0003:11FF:3331.0080: unknown main item tag 0x0 [ 549.208233][T12171] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 549.343409][T12177] gembird 0003:11FF:3331.0080: hidraw0: USB HID v0.01 Device [HID 11ff:3331] on usb-dummy_hcd.7-1/input0 [ 549.393007][T12171] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 549.413860][T12177] usb 8-1: USB disconnect, device number 2 [ 549.427440][T12171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.480555][T12171] usb 3-1: config 0 descriptor?? [ 549.522772][T12171] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 549.592879][T15958] fido_id[15958]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 549.915314][T12171] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 550.213700][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 550.248785][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 550.280875][ T9] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 550.315741][ T9] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 550.366495][ T9] usb 6-1: USB disconnect, device number 61 [ 550.526907][T12171] gspca_cpia1: usb_control_msg 05, error -71 [ 550.543501][T12171] cpia1 3-1:0.0: unexpected systemstate: 00 [ 550.568476][T12171] usb 3-1: USB disconnect, device number 66 [ 550.861169][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3992'. [ 550.888849][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3992'. [ 551.287912][T12158] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 551.460614][T12158] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 551.497127][T12158] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 551.512118][T12158] usb 6-1: Product: syz [ 551.537424][T12158] usb 6-1: config 0 descriptor?? [ 551.558507][T12158] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 551.598249][T12158] usb 6-1: Detected FT232H [ 551.757361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.765865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.774399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.782965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.795791][T12158] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 552.243770][T12158] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 552.470306][T12177] usb 6-1: USB disconnect, device number 62 [ 552.521863][T12177] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 552.559686][T12177] ftdi_sio 6-1:0.0: device disconnected [ 553.667141][T12177] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 553.854548][T12177] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 553.877378][T12177] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.892493][T12177] usb 7-1: Product: syz [ 553.896811][T12177] usb 7-1: Manufacturer: syz [ 553.910069][T12177] usb 7-1: SerialNumber: syz [ 553.941528][T12177] usb 7-1: config 0 descriptor?? [ 553.950634][ T30] audit: type=1804 audit(1780719749.687:638): pid=16030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4015" name="/newroot/833/file1" dev="tmpfs" ino=4270 res=1 errno=0 [ 554.049604][T16032] netlink: 'syz.7.4016': attribute type 3 has an invalid length. [ 554.243589][T12177] usb 7-1: USB disconnect, device number 49 [ 554.570747][T12171] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 554.747876][T12171] usb 6-1: Using ep0 maxpacket: 16 [ 554.762286][T12171] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 554.778863][T12171] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.797547][T12171] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.818648][T12171] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.828101][T12171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.840123][T12171] usb 6-1: Product: syz [ 554.857508][T12171] usb 6-1: Manufacturer: syz [ 554.864750][T12171] usb 6-1: SerialNumber: syz [ 554.910972][T12171] usb 6-1: 0:2 : does not exist [ 555.228649][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059e57000: rx timeout, send abort [ 555.487242][ T9] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 555.639006][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 555.657139][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 555.677295][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 555.689485][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 555.707261][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.727131][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.728876][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059e54800: rx timeout, send abort [ 555.743798][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059e57000: abort rx timeout. Force session deactivation [ 555.758176][ T9] usb 7-1: config 0 descriptor?? [ 555.771552][T16051] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 556.141035][T12171] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 556.196750][T16051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.231484][T16051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.243648][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059e54800: abort rx timeout. Force session deactivation [ 556.282847][ T9] plantronics 0003:047F:FFFF.0081: reserved main item tag 0xd [ 556.317491][T12171] usb 6-1: USB disconnect, device number 63 [ 556.351803][ T9] plantronics 0003:047F:FFFF.0081: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 556.427506][T12174] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 556.445849][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.560703][T12166] usb 7-1: USB disconnect, device number 50 [ 556.634564][T16064] fido_id[16064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 556.636797][T12174] usb 4-1: config 0 has no interfaces? [ 556.676929][T12174] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 556.697221][T12174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.711582][T12174] usb 4-1: config 0 descriptor?? [ 556.877364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.885959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.894519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.903074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.956150][T16069] netlink: 'syz.5.4031': attribute type 12 has an invalid length. [ 557.113510][T12162] usb 4-1: USB disconnect, device number 70 [ 557.875652][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4039'. [ 557.947494][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4039'. [ 558.623853][T16115] netlink: 212344 bytes leftover after parsing attributes in process `syz.7.4052'. [ 559.617271][T12162] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 559.818252][T12162] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 559.846500][T12162] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 559.870451][T12162] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 559.892532][T12162] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 559.924157][T12162] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 559.963427][T12162] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 559.983253][T12162] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 559.999686][T12162] usb 7-1: Product: syz [ 560.012898][T12162] usb 7-1: Manufacturer: syz [ 560.040718][T12162] cdc_wdm 7-1:1.0: skipping garbage [ 560.050412][T12162] cdc_wdm 7-1:1.0: skipping garbage [ 560.064284][T12162] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 560.073862][T12162] cdc_wdm 7-1:1.0: Unknown control protocol [ 560.414531][ T30] audit: type=1326 audit(1780719756.157:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16165 comm="syz.7.4074" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705f01c code=0x0 [ 560.460107][T12162] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 560.505871][T12177] usb 7-1: USB disconnect, device number 51 [ 560.621383][T12162] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 560.638134][T12162] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.648426][T16172] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 560.657868][T12162] usb 4-1: Product: syz [ 560.662197][T12162] usb 4-1: Manufacturer: syz [ 560.666845][T12162] usb 4-1: SerialNumber: syz [ 560.685370][T12162] usb 4-1: config 0 descriptor?? [ 560.923733][T12162] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 561.292977][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4081'. [ 561.556922][T12162] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 561.612145][T12162] usb 4-1: USB disconnect, device number 71 [ 561.622710][ T30] audit: type=1326 audit(1780719757.367:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.2.4087" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 561.684371][ T30] audit: type=1326 audit(1780719757.367:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.2.4087" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 561.734126][ T30] audit: type=1326 audit(1780719757.417:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.2.4087" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 561.760131][ T30] audit: type=1326 audit(1780719757.417:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.2.4087" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 561.796584][ T30] audit: type=1326 audit(1780719757.417:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.2.4087" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 561.846131][ T30] audit: type=1326 audit(1780719757.417:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.2.4087" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 561.873296][ T30] audit: type=1326 audit(1780719757.417:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.2.4087" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 561.948218][ T30] audit: type=1326 audit(1780719757.417:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.2.4087" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 561.973783][ T30] audit: type=1326 audit(1780719757.427:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16192 comm="syz.2.4087" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 562.287628][T12174] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 562.474615][T12174] usb 6-1: Using ep0 maxpacket: 16 [ 562.495880][T12174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.534661][T12174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.547271][T12174] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 562.561307][T12174] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 562.570932][T12174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.595328][T12174] usb 6-1: config 0 descriptor?? [ 562.647421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.655975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.664515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.673110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.003596][T16236] netlink: 762 bytes leftover after parsing attributes in process `syz.7.4102'. [ 563.013694][T16236] bridge: RTM_NEWNEIGH with unconfigured vlan 149 on bridge0 [ 563.037167][T12174] microsoft 0003:045E:07DA.0082: ignoring exceeding usage max [ 563.064651][T12174] hid_parser_main: 2981 callbacks suppressed [ 563.064687][T12174] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 563.093173][T12174] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 563.107926][T12174] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 563.123042][T12174] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 563.147265][T12174] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 563.167312][T12174] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 563.177143][T12174] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 563.191280][T12174] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 563.220282][T12174] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 563.240184][T12174] microsoft 0003:045E:07DA.0082: unknown main item tag 0x0 [ 563.264370][T16239] netlink: 'syz.6.4104': attribute type 1 has an invalid length. [ 563.307630][T12174] microsoft 0003:045E:07DA.0082: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 563.319149][T12174] microsoft 0003:045E:07DA.0082: no inputs found [ 563.325832][T12174] microsoft 0003:045E:07DA.0082: could not initialize ff, continuing anyway [ 563.368513][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.375044][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.531389][T16239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 563.625936][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4108'. [ 563.642977][T12174] usb 6-1: USB disconnect, device number 64 [ 563.662089][T16245] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 563.737966][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4108'. [ 563.788331][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4108'. [ 564.016751][T16262] loop5: detected capacity change from 0 to 7 [ 564.032469][T16262] Dev loop5: unable to read RDB block 7 [ 564.047365][T16262] loop5: unable to read partition table [ 564.054913][T16262] loop5: partition table beyond EOD, truncated [ 564.061781][T16262] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 564.219702][T12176] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 564.411980][T12176] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 564.430869][T12176] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.447912][T12158] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 564.455908][T12176] usb 8-1: Product: syz [ 564.464375][T12176] usb 8-1: Manufacturer: syz [ 564.472793][T12176] usb 8-1: SerialNumber: syz [ 564.503453][T12176] usb 8-1: config 0 descriptor?? [ 564.629517][T12158] usb 3-1: Using ep0 maxpacket: 16 [ 564.645428][T12158] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 564.680642][T12158] usb 3-1: config 0 interface 0 has no altsetting 0 [ 564.708130][T12158] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 564.740644][T12158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.767533][T12176] usb 8-1: USB disconnect, device number 3 [ 564.772212][T12174] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 564.773716][T12158] usb 3-1: Product: syz [ 564.773737][T12158] usb 3-1: Manufacturer: syz [ 564.773754][T12158] usb 3-1: SerialNumber: syz [ 564.816657][T12158] usb 3-1: config 0 descriptor?? [ 565.009402][T12174] usb 6-1: config 0 has no interfaces? [ 565.017217][T12174] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 565.029024][T12174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.051705][T12174] usb 6-1: config 0 descriptor?? [ 565.114859][T12158] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input91 [ 565.407232][T12158] rc_core: IR keymap rc-imon-pad not found [ 565.413649][T12158] Registered IR keymap rc-empty [ 565.419893][T12158] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 565.431244][T12158] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 565.476131][T12177] usb 6-1: USB disconnect, device number 65 [ 565.545187][T12158] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 565.574329][T12158] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input92 [ 565.616262][T12158] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:67> initialized [ 565.906865][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 565.918246][T12158] usb 3-1: USB disconnect, device number 67 [ 566.078890][T16304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4129'. [ 566.254166][T16304] vxlan0: entered promiscuous mode [ 566.267842][ T753] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.280870][ T753] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.291040][ T753] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.300325][ T753] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.387290][T12176] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 566.477339][T12171] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 566.537297][T12176] usb 4-1: Using ep0 maxpacket: 8 [ 566.550592][T12176] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 566.575395][T12176] usb 4-1: config 0 has no interface number 0 [ 566.588163][T12176] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 566.599685][T12176] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 566.612976][T12176] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 566.630076][T12176] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 566.643508][T12176] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 566.654300][T12176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.657776][T12171] usb 8-1: Using ep0 maxpacket: 8 [ 566.672227][T12176] usb 4-1: config 0 descriptor?? [ 566.677432][T12171] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 566.677470][T12171] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 566.677497][T12171] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 566.677523][T12171] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.677568][T12171] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 566.677594][T12171] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.767472][T12176] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 566.887447][ T9] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 566.940167][T12171] usb 8-1: GET_CAPABILITIES returned 0 [ 566.957838][T12171] usbtmc 8-1:16.0: can't read capabilities [ 567.051667][ T9] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 567.067357][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.085783][ T9] usb 3-1: Product: syz [ 567.095415][ T9] usb 3-1: Manufacturer: syz [ 567.100713][ T9] usb 3-1: SerialNumber: syz [ 567.109510][ T9] usb 3-1: config 0 descriptor?? [ 567.365255][ T9] usb 3-1: USB disconnect, device number 68 [ 568.007582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.047199][ T9] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 568.186059][T16339] netlink: 'syz.2.4144': attribute type 3 has an invalid length. [ 568.219976][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.236172][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.248577][ T9] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 568.258446][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.275114][ T9] usb 7-1: config 0 descriptor?? [ 568.317509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.326488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.335211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.343746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.357783][T12171] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 568.523467][T12171] usb 6-1: config 1 interface 0 has no altsetting 0 [ 568.545015][T12171] usb 6-1: string descriptor 0 read error: -22 [ 568.557248][T12171] usb 6-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 568.577354][T12171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.723748][ T9] cp2112 0003:10C4:EA90.0083: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 568.906224][ T9] cp2112 0003:10C4:EA90.0083: error requesting version [ 568.946885][ T9] cp2112 0003:10C4:EA90.0083: probe with driver cp2112 failed with error -32 [ 568.983346][ T9] usb 7-1: USB disconnect, device number 52 [ 569.021985][T12171] hid_parser_main: 3 callbacks suppressed [ 569.022010][T12171] hid_mf 0003:0079:1801.0084: unknown main item tag 0x0 [ 569.042415][T12176] usb 4-1: USB disconnect, device number 72 [ 569.061372][T12171] hid_mf 0003:0079:1801.0084: unknown main item tag 0x0 [ 569.072237][T12158] usb 8-1: USB disconnect, device number 4 [ 569.104106][T12171] hid_mf 0003:0079:1801.0084: unknown main item tag 0x0 [ 569.118381][T12176] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 569.141266][T12171] hid_mf 0003:0079:1801.0084: unknown main item tag 0x0 [ 569.169208][T12171] hid_mf 0003:0079:1801.0084: unknown main item tag 0x0 [ 569.187368][T12171] hid_mf 0003:0079:1801.0084: unknown main item tag 0x0 [ 569.203950][T12171] hid_mf 0003:0079:1801.0084: unknown main item tag 0x0 [ 569.216283][T12171] hid_mf 0003:0079:1801.0084: unknown main item tag 0x0 [ 569.225272][T12171] hid_mf 0003:0079:1801.0084: unknown main item tag 0x0 [ 569.235475][T12171] hid_mf 0003:0079:1801.0084: unknown main item tag 0x0 [ 569.346147][T12171] hid_mf 0003:0079:1801.0084: hidraw0: USB HID vf.ff Device [HID 0079:1801] on usb-dummy_hcd.5-1/input0 [ 569.359504][T12171] hid_mf 0003:0079:1801.0084: Invalid report, this should never happen! [ 569.380936][T12171] hid_mf 0003:0079:1801.0084: Force feedback init failed. [ 569.435050][T12171] usb 6-1: USB disconnect, device number 66 [ 569.477605][T16352] fido_id[16352]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 569.774339][T16362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4153'. [ 570.040181][T16370] netlink: 'syz.5.4155': attribute type 1 has an invalid length. [ 570.090126][T16370] netlink: 'syz.5.4155': attribute type 6 has an invalid length. [ 570.116691][T16370] netlink: 'syz.5.4155': attribute type 3 has an invalid length. [ 570.252920][T16378] input: syz0 as /devices/virtual/input/input93 [ 570.858414][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 570.887198][T12171] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 570.956540][T16402] kvm: apic: phys broadcast and lowest prio [ 571.017611][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 571.024768][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 571.036355][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 571.052088][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 571.062400][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.090742][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 571.113947][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.129217][T12171] usb 4-1: unable to get BOS descriptor or descriptor too short [ 571.151012][T12171] usb 4-1: no configurations [ 571.165077][T12171] usb 4-1: can't read configurations, error -22 [ 571.326002][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 571.326048][ T30] audit: type=1326 audit(1780719767.067:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.5.4170" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7901c code=0x7ffc0000 [ 571.358049][ T30] audit: type=1326 audit(1780719767.067:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.5.4170" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7901c code=0x7ffc0000 [ 571.389926][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 571.395667][ T30] audit: type=1326 audit(1780719767.087:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.5.4170" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7f7901c code=0x7ffc0000 [ 571.421351][ T9] usbtmc 7-1:16.0: can't read capabilities [ 571.435399][ T30] audit: type=1326 audit(1780719767.087:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.5.4170" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7901c code=0x7ffc0000 [ 571.461625][ T30] audit: type=1326 audit(1780719767.087:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.5.4170" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7901c code=0x7ffc0000 [ 571.518311][ T30] audit: type=1326 audit(1780719767.087:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.5.4170" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f7901c code=0x7ffc0000 [ 571.558649][ T30] audit: type=1326 audit(1780719767.087:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.5.4170" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7901c code=0x7ffc0000 [ 571.618514][ T30] audit: type=1326 audit(1780719767.087:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.5.4170" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7901c code=0x7ffc0000 [ 571.634995][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 571.645213][ T30] audit: type=1326 audit(1780719767.087:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.5.4170" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f7901c code=0x7ffc0000 [ 571.689869][T12174] usb 7-1: USB disconnect, device number 53 [ 571.771860][ T30] audit: type=1326 audit(1780719767.087:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16407 comm="syz.5.4170" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f7901c code=0x7ffc0000 [ 571.809490][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 571.969614][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 571.979299][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.996397][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 572.043570][ T9] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 572.055389][ T9] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 572.073450][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 572.089916][ T9] usb 6-1: config 1 interface 1 has no altsetting 0 [ 572.104562][ T9] usb 6-1: string descriptor 0 read error: -22 [ 572.111764][ T9] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 572.123264][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.944922][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 572.964853][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 572.979090][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 572.989272][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 573.001761][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 573.503459][ T9] usb 6-1: USB disconnect, device number 67 [ 573.523288][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4187'. [ 573.598420][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 573.614042][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4187'. [ 573.685781][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4187'. [ 574.098483][T16433] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.113750][T16433] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.121347][T16433] bridge_slave_0: entered allmulticast mode [ 574.136675][T16433] bridge_slave_0: entered promiscuous mode [ 574.157439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.162231][T16433] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.166680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.181232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.189943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.196946][T16433] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.224193][T16433] bridge_slave_1: entered allmulticast mode [ 574.264728][T16433] bridge_slave_1: entered promiscuous mode [ 574.390486][T16433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.438787][T16433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.530568][T16433] team0: Port device team_slave_0 added [ 574.541244][T16433] team0: Port device team_slave_1 added [ 574.649321][T16433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.681933][T16433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.741438][T16433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.808886][T16433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.843519][T16433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.911955][T16433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.117525][ T5637] Bluetooth: hci3: command tx timeout [ 575.307999][T16433] hsr_slave_0: entered promiscuous mode [ 575.321530][T16433] hsr_slave_1: entered promiscuous mode [ 575.335310][T16433] debugfs: 'hsr0' already exists in 'hsr' [ 575.341789][T16433] Cannot create hsr debugfs directory [ 575.350585][T16495] syzkaller1: entered promiscuous mode [ 575.359329][T16495] syzkaller1: entered allmulticast mode [ 576.182685][T16520] input: syz0 as /devices/virtual/input/input94 [ 576.256395][T16526] netlink: 'syz.3.4218': attribute type 6 has an invalid length. [ 576.265821][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4218'. [ 576.449964][T16433] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 576.486891][T16433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 576.505789][T16433] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 576.559881][T16433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 576.594836][T16433] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 576.644690][T16433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 576.679383][T16433] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 576.725368][T16433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 576.875443][T16550] loop4: detected capacity change from 0 to 2640 [ 576.914058][ T5640] Buffer I/O error on dev loop4, logical block 0, async page read [ 577.016725][T16550] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 577.032222][T16433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.040438][T16550] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 577.040806][T16554] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 577.078746][T16550] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 577.107514][T16433] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.115955][T16550] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 577.157624][T16550] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 577.166548][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.173911][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.198866][ T5637] Bluetooth: hci3: command tx timeout [ 577.219192][T16550] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 577.260313][T16550] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 577.269121][T16550] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 577.275103][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.284725][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.589567][T16433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.597525][T12174] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 577.712825][T16433] veth0_vlan: entered promiscuous mode [ 577.748077][T16433] veth1_vlan: entered promiscuous mode [ 577.768082][T12174] usb 7-1: Using ep0 maxpacket: 8 [ 577.787583][T12174] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 577.827544][T12174] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 577.856923][T12174] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.881781][T16433] veth0_macvtap: entered promiscuous mode [ 577.892783][T12174] usb 7-1: config 0 descriptor?? [ 577.922819][T16433] veth1_macvtap: entered promiscuous mode [ 577.984077][T16433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.030398][T16433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.098627][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.131077][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.147378][T12174] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 578.181015][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.218498][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.534830][ T753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.570570][ T753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.742746][ T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.748482][T12174] usb 7-1: USB disconnect, device number 54 [ 578.772065][ T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.892440][T12177] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 579.087244][T12177] usb 3-1: Using ep0 maxpacket: 32 [ 579.099727][T12177] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 579.121327][T12166] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 579.147692][T12177] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 579.159059][T12177] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 579.183587][T12177] usb 3-1: Product: syz [ 579.196332][T12177] usb 3-1: Manufacturer: syz [ 579.210389][T12177] usb 3-1: SerialNumber: syz [ 579.232417][T12177] usb 3-1: config 0 descriptor?? [ 579.253045][T16585] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 579.277432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.280871][T12177] hub 3-1:0.0: bad descriptor, ignoring hub [ 579.286715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.300227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.308723][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.317867][T12177] hub 3-1:0.0: probe with driver hub failed with error -5 [ 579.318384][ T5637] Bluetooth: hci3: command tx timeout [ 579.333026][T12166] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 579.341622][T12166] usb 4-1: config 0 has no interface number 0 [ 579.348036][T12166] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 579.387420][T12166] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 579.406260][T12166] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 579.418581][T12166] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 579.431612][T12166] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 579.498127][T12177] usb 3-1: USB disconnect, device number 69 [ 579.520914][T12166] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 579.565843][T12166] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 579.591560][ T753] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.607275][T12166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.659123][T12166] usb 4-1: config 0 descriptor?? [ 579.681594][T16589] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 579.711303][T16589] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 579.744328][T12166] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 579.841352][ T753] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.998351][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 580.033172][ T753] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.058136][T12177] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 580.101826][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 580.114932][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 580.124610][T16602] kvm: apic: phys broadcast and lowest prio [ 580.134162][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 580.154250][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 580.168063][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 580.230890][ T753] bridge0: port 3(vlan2) entered disabled state [ 580.260822][T12177] usb 3-1: Using ep0 maxpacket: 32 [ 580.272021][T12177] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 580.304490][ T753] vlan2 (unregistering): left allmulticast mode [ 580.312324][ T753] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 580.324422][ T753] vlan2 (unregistering): left promiscuous mode [ 580.332796][T12177] usb 3-1: string descriptor 0 read error: -22 [ 580.340230][ T753] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 580.349079][T12177] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 580.363406][ T753] bridge0: port 3(vlan2) entered disabled state [ 580.375292][T12177] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 580.388670][T12177] usb 3-1: config 0 descriptor?? [ 580.415040][T16585] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 580.436915][T12177] hub 3-1:0.0: bad descriptor, ignoring hub [ 580.447659][ T753] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.461196][T12177] hub 3-1:0.0: probe with driver hub failed with error -5 [ 580.560889][T12177] usb 4-1: USB disconnect, device number 75 [ 580.612119][T12177] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 580.746018][T16610] syzkaller1: entered promiscuous mode [ 580.752116][T16610] syzkaller1: entered allmulticast mode [ 580.798006][T12176] usb 3-1: USB disconnect, device number 70 [ 581.361181][ T5642] Bluetooth: hci3: command tx timeout [ 581.705948][ T753] bond0: left promiscuous mode [ 581.726857][ T753] bond_slave_0: left promiscuous mode [ 581.748365][ T753] bond_slave_1: left promiscuous mode [ 581.773287][ T753] bridge0: port 4(bond0) entered disabled state [ 581.792891][ T753] bridge_slave_1: left promiscuous mode [ 581.805386][ T753] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.833136][ T753] bridge_slave_0: left promiscuous mode [ 581.850198][ T753] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.229271][ T753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.238142][ T5642] Bluetooth: hci0: command tx timeout [ 582.251910][ T753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.262234][ T753] bond0 (unregistering): Released all slaves [ 582.274285][T16638] netlink: 'syz.6.4254': attribute type 12 has an invalid length. [ 582.282368][T16638] netlink: 'syz.6.4254': attribute type 29 has an invalid length. [ 582.290381][T16638] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4254'. [ 582.299669][T16638] netlink: 51 bytes leftover after parsing attributes in process `syz.6.4254'. [ 582.309179][T16641] netlink: 'syz.6.4254': attribute type 12 has an invalid length. [ 582.317408][T16641] netlink: 'syz.6.4254': attribute type 29 has an invalid length. [ 582.325375][T16641] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4254'. [ 582.335724][T16641] netlink: 51 bytes leftover after parsing attributes in process `syz.6.4254'. [ 582.350728][ T5292] 8021q: adding VLAN 0 to HW filter on device eth13 [ 582.489985][T12177] hid_parser_main: 4000 callbacks suppressed [ 582.490008][T12177] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 582.504992][ T753] tipc: Left network mode [ 582.543256][T12177] hid-generic 0000:0000:0000.0085: hidraw0: HID v0.00 Device [syz1] on syz0 [ 583.101027][T16603] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.118024][T16603] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.133321][T16603] bridge_slave_0: entered allmulticast mode [ 583.151457][T16603] bridge_slave_0: entered promiscuous mode [ 583.213547][ T753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.231565][ T753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.250680][ T753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.277302][ T753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.335643][ T753] veth1_macvtap: left promiscuous mode [ 583.352128][ T753] veth0_macvtap: left promiscuous mode [ 583.366839][ T753] veth1_vlan: left promiscuous mode [ 583.382351][ T753] veth0_vlan: left promiscuous mode [ 584.317264][ T5642] Bluetooth: hci0: command tx timeout [ 584.545917][ T753] team0 (unregistering): Port device team_slave_1 removed [ 584.599587][ T753] team0 (unregistering): Port device team_slave_0 removed [ 584.916903][T16603] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.929007][T16603] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.944407][T16603] bridge_slave_1: entered allmulticast mode [ 584.973342][T16603] bridge_slave_1: entered promiscuous mode [ 585.030537][ T5292] 8021q: adding VLAN 0 to HW filter on device eth14 [ 585.216373][T16603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.251901][T16603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.419186][T16603] team0: Port device team_slave_0 added [ 585.455454][T16603] team0: Port device team_slave_1 added [ 585.594535][T16603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.614414][T16603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.661652][T16603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.677531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.686101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.694697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.749877][T16603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.794224][T16603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.892454][T16603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.963127][ T753] IPVS: stop unused estimator thread 0... [ 586.397715][ T5642] Bluetooth: hci0: command tx timeout [ 586.623732][T16603] hsr_slave_0: entered promiscuous mode [ 586.642115][T16603] hsr_slave_1: entered promiscuous mode [ 586.653552][T16603] debugfs: 'hsr0' already exists in 'hsr' [ 586.668815][T16603] Cannot create hsr debugfs directory [ 586.880745][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4283'. [ 586.921347][T16750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4283'. [ 587.038499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.277585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.286041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.294593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.303092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.311517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.319954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.526675][ T5292] 8021q: adding VLAN 0 to HW filter on device eth15 [ 588.213010][T16603] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 588.241214][T16603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.263500][T16603] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 588.294022][T16603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 588.318827][T16603] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 588.350944][T16603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 588.375633][T16603] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 588.404421][T16603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 588.477473][ T5642] Bluetooth: hci0: command tx timeout [ 588.710770][T16603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.798975][T16603] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.874996][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.882335][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.943066][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.950396][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.214608][T16603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.380869][T16603] veth0_vlan: entered promiscuous mode [ 589.408079][ T5292] 8021q: adding VLAN 0 to HW filter on device eth16 [ 589.451189][T16603] veth1_vlan: entered promiscuous mode [ 589.553317][T16603] veth0_macvtap: entered promiscuous mode [ 589.586313][T16603] veth1_macvtap: entered promiscuous mode [ 589.655781][T16603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.713183][T16603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.764627][ T753] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.796867][ T753] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.839853][ T753] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.867213][ T753] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.267200][ T8771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.287507][ T8771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.412740][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.436167][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.750414][T16863] loop4: detected capacity change from 0 to 2640 [ 590.786329][T16863] buffer_io_error: 322 callbacks suppressed [ 590.786455][T16863] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 590.801448][ C0] net_ratelimit: 40 callbacks suppressed [ 590.801471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.801833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.802394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.802750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.850683][T16863] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 590.859625][T16863] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 590.868933][T16863] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 590.908084][T16863] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 590.951761][T16863] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 590.994500][T16863] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 591.027286][T16863] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 591.055023][T16863] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 591.075956][T16863] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 592.390417][T16898] loop4: detected capacity change from 0 to 2640 [ 592.709618][T16908] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4334'. [ 593.236508][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4341'. [ 593.260903][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4341'. [ 593.284725][T16922] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4341'. [ 593.329011][ T5700] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 593.498003][ T5700] usb 7-1: Using ep0 maxpacket: 32 [ 593.526233][ T5700] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 593.569026][ T5700] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 593.591073][ T5700] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 593.614009][ T5700] usb 7-1: Product: syz [ 593.626610][ T5700] usb 7-1: Manufacturer: syz [ 593.639689][ T5700] usb 7-1: SerialNumber: syz [ 593.673163][ T5700] usb 7-1: config 0 descriptor?? [ 593.691421][T16917] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 593.712322][ T5700] hub 7-1:0.0: bad descriptor, ignoring hub [ 593.739655][ T5700] hub 7-1:0.0: probe with driver hub failed with error -5 [ 594.208592][T16949] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4350'. [ 594.387208][T16917] usb 7-1: reset high-speed USB device number 55 using dummy_hcd [ 594.566513][T16917] usb 7-1: device firmware changed [ 594.580806][T12177] usb 7-1: USB disconnect, device number 55 [ 594.739927][T12177] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 594.907134][T12177] usb 7-1: Using ep0 maxpacket: 32 [ 594.924650][T12177] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 594.942885][T12177] usb 7-1: string descriptor 0 read error: -22 [ 594.957002][T12177] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 594.983528][T12177] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 595.026104][T12177] usb 7-1: config 0 descriptor?? [ 595.057990][T16945] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 595.077240][T12176] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 595.091245][T12177] hub 7-1:0.0: bad descriptor, ignoring hub [ 595.103082][T12177] hub 7-1:0.0: probe with driver hub failed with error -5 [ 595.257576][T12176] usb 3-1: Using ep0 maxpacket: 32 [ 595.270745][T12176] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 595.278186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.287631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.288817][T12176] usb 3-1: config 0 has no interface number 0 [ 595.296930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.310615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.331822][T12176] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 595.373769][T12176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.399985][T12176] usb 3-1: Product: syz [ 595.413241][T12176] usb 3-1: Manufacturer: syz [ 595.428808][T12176] usb 3-1: SerialNumber: syz [ 595.460405][T12176] usb 3-1: config 0 descriptor?? [ 595.549199][T12177] usb 7-1: USB disconnect, device number 56 [ 596.225264][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 596.225286][ T30] audit: type=1326 audit(1780719791.967:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16997 comm="syz.9.4369" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704f01c code=0x0 [ 596.273730][T16998] netlink: 67 bytes leftover after parsing attributes in process `syz.3.4368'. [ 596.506689][ T30] audit: type=1326 audit(1780719792.247:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17003 comm="syz.3.4371" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f2601c code=0x0 [ 596.508448][T12176] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 596.734364][T12176] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 596.751028][T12176] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 596.766392][T12176] usb 3-1: USB disconnect, device number 71 [ 597.397904][ T5700] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 597.578236][ T5700] usb 7-1: Using ep0 maxpacket: 16 [ 597.592413][ T5700] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.622103][ T5700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 597.640512][ T5700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 597.650595][ T5700] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 597.660587][ T5700] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.675458][ T5700] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 597.688650][ T5700] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 597.696725][ T5700] usb 7-1: Manufacturer: syz [ 597.712613][ T5700] usb 7-1: config 0 descriptor?? [ 597.797190][T12176] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 597.970826][T12176] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 597.993510][T12176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.018916][T12176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.034315][T17031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 598.050538][T12176] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 598.087513][T12176] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 598.105623][T12176] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 598.107428][ T5700] rc_core: IR keymap rc-hauppauge not found [ 598.116136][T12176] usb 4-1: Manufacturer: syz [ 598.140317][ T5700] Registered IR keymap rc-empty [ 598.145634][ T5700] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 598.149405][T12176] usb 4-1: config 0 descriptor?? [ 598.167319][ T5700] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 598.198411][ T5700] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 598.225518][ T5700] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input95 [ 598.258185][ T5700] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 598.277299][ T5700] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 598.297278][ T5700] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 598.317716][ T5700] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 598.337268][ T5700] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 598.373289][ T5700] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 598.411085][ T5700] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 598.448482][ T5700] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 598.497567][ T5700] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 598.537195][ T5700] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 598.570506][ T5700] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 598.586654][ T5700] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 598.591771][T12176] appleir 0003:05AC:8243.0086: unknown main item tag 0x0 [ 598.614132][T12176] appleir 0003:05AC:8243.0086: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 598.618875][ T5700] usb 7-1: USB disconnect, device number 57 [ 599.070196][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4392'. [ 599.082790][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4392'. [ 599.094708][T17058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4392'. [ 599.472311][T12177] usb 4-1: USB disconnect, device number 76 [ 599.573342][T17072] xt_policy: too many policy elements [ 599.916945][T17081] netlink: 'syz.9.4400': attribute type 3 has an invalid length. [ 600.857836][T12172] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 600.867162][T12177] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 601.027172][T12177] usb 3-1: device descriptor read/64, error -71 [ 601.037490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.046072][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.054629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.063181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.094262][T12172] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.116721][T12172] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 601.141120][T12172] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.152574][T12164] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 601.179833][T12172] usb 10-1: config 0 descriptor?? [ 601.215349][T12172] pwc: Askey VC010 type 2 USB webcam detected. [ 601.307854][T12177] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 601.319537][T12164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.349975][T12164] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 601.380037][T12164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.419909][T12164] usb 4-1: config 0 descriptor?? [ 601.488534][T12177] usb 3-1: device descriptor read/64, error -71 [ 601.623473][T12177] usb usb3-port1: attempt power cycle [ 601.629176][T12172] pwc: recv_control_msg error -32 req 02 val 2b00 [ 601.656379][T12172] pwc: recv_control_msg error -32 req 02 val 2700 [ 601.678514][T12164] usbhid 4-1:0.0: can't add hid device: -71 [ 601.688018][T12172] pwc: recv_control_msg error -32 req 02 val 2c00 [ 601.698980][T12164] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 601.725130][T12164] usb 4-1: USB disconnect, device number 77 [ 601.924002][T12172] pwc: recv_control_msg error -71 req 04 val 1300 [ 601.943699][T12172] pwc: recv_control_msg error -71 req 04 val 1400 [ 601.959436][T12172] pwc: recv_control_msg error -71 req 02 val 2000 [ 601.974996][T12172] pwc: recv_control_msg error -71 req 02 val 2100 [ 601.989521][T12177] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 601.993457][T12172] pwc: recv_control_msg error -71 req 04 val 1500 [ 602.015906][T12172] pwc: recv_control_msg error -71 req 02 val 2500 [ 602.030343][T12172] pwc: recv_control_msg error -71 req 02 val 2400 [ 602.046458][T12172] pwc: recv_control_msg error -71 req 02 val 2600 [ 602.057808][T12177] usb 3-1: device descriptor read/8, error -71 [ 602.062811][T12172] pwc: recv_control_msg error -71 req 02 val 2900 [ 602.079799][T12172] pwc: recv_control_msg error -71 req 02 val 2800 [ 602.101637][T12172] pwc: recv_control_msg error -71 req 04 val 1100 [ 602.129241][T12172] pwc: recv_control_msg error -71 req 04 val 1200 [ 602.173209][T12172] pwc: Registered as video103. [ 602.195370][T12172] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input96 [ 602.214857][T12172] usb 10-1: USB disconnect, device number 2 [ 602.221305][T12164] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 602.298022][T12177] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 602.318962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.339247][T12177] usb 3-1: device descriptor read/8, error -71 [ 602.377169][T12164] usb 4-1: Using ep0 maxpacket: 32 [ 602.406112][T12164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.449494][T12164] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 602.468609][T12177] usb usb3-port1: unable to enumerate USB device [ 602.485917][T12164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.553342][T12164] usb 4-1: config 0 descriptor?? [ 602.582448][T12164] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 602.630712][T12164] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 602.825943][T12164] usb 4-1: USB disconnect, device number 78 [ 602.846654][T12164] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 603.289401][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4420'. [ 605.523398][T17252] fuse: Bad value for 'fd' [ 605.747231][ T5700] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 605.877529][ T30] audit: type=1326 audit(1780719801.627:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.2.4457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 605.920776][ T5700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.954615][ T5700] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 605.957556][ T30] audit: type=1326 audit(1780719801.647:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.2.4457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 606.001779][ T5700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.042295][ T5700] usb 7-1: config 0 descriptor?? [ 606.045356][ T30] audit: type=1326 audit(1780719801.647:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.2.4457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 606.103518][ T30] audit: type=1326 audit(1780719801.647:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.2.4457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 606.134281][ T30] audit: type=1326 audit(1780719801.647:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.2.4457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 606.288168][ T5700] usbhid 7-1:0.0: can't add hid device: -71 [ 606.289762][ T30] audit: type=1326 audit(1780719801.647:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.2.4457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 606.316814][ T5700] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 606.376955][ T5700] usb 7-1: USB disconnect, device number 58 [ 606.412157][ T30] audit: type=1326 audit(1780719801.647:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.2.4457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 606.515333][ T30] audit: type=1326 audit(1780719801.647:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.2.4457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 606.574547][ T30] audit: type=1326 audit(1780719801.647:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.2.4457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 606.603475][ T30] audit: type=1326 audit(1780719801.647:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17267 comm="syz.2.4457" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 606.798939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.807626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.816246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.825416][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.911099][ T5700] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 607.090021][ T5700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 607.112037][ T5700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 607.133485][ T5700] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 607.143933][ T5700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.173684][ T5700] usb 7-1: config 0 descriptor?? [ 607.181215][T17251] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 607.268523][T12164] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 607.277138][T12172] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 607.440107][T12172] usb 10-1: Using ep0 maxpacket: 8 [ 607.455131][T12164] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 607.483028][T12172] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 607.493293][T12164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.503337][T12172] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.529574][T12164] usb 3-1: config 0 descriptor?? [ 607.539450][T12172] usb 10-1: Product: syz [ 607.562789][T12172] usb 10-1: Manufacturer: syz [ 607.574956][T12172] usb 10-1: SerialNumber: syz [ 607.595452][T12172] usb 10-1: config 0 descriptor?? [ 607.626499][ T5700] hid-steam 0003:28DE:1102.0087: unknown main item tag 0x0 [ 607.662953][ T5700] hid-steam 0003:28DE:1102.0087: unknown main item tag 0x0 [ 607.684193][ T5700] hid-steam 0003:28DE:1102.0087: unknown main item tag 0x0 [ 607.702104][ T5700] hid-steam 0003:28DE:1102.0087: unknown main item tag 0x0 [ 607.717776][ T5700] hid-steam 0003:28DE:1102.0087: unknown main item tag 0x0 [ 607.725653][ T5700] hid-steam 0003:28DE:1102.0087: unknown main item tag 0x0 [ 607.742285][ T5700] hid-steam 0003:28DE:1102.0087: unknown main item tag 0x0 [ 607.753294][ T5700] hid-steam 0003:28DE:1102.0087: item fetching failed at offset 10/235 [ 607.780827][ T5700] hid-steam 0003:28DE:1102.0087: steam_probe:parse of hid interface failed [ 607.790149][ T5700] hid-steam 0003:28DE:1102.0087: probe with driver hid-steam failed with error -22 [ 607.830473][ T5700] usb 7-1: USB disconnect, device number 59 [ 607.836720][T12172] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 608.646357][T12172] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 608.684096][T12172] usb 10-1: USB disconnect, device number 3 [ 608.796899][T12164] usb 3-1: Cannot set autoneg [ 608.817388][T12164] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 608.870774][T12164] usb 3-1: USB disconnect, device number 76 [ 609.460289][T17344] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4490'. [ 609.527200][T12164] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 609.602761][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 609.699627][T12164] usb 10-1: Using ep0 maxpacket: 16 [ 609.737538][T12164] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 609.757674][T12164] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 609.774040][T12164] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 609.783137][T12164] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 609.792929][T12164] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 609.802360][T12164] usb 10-1: config 0 has no interface number 0 [ 609.811909][T12164] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 609.824574][T12164] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 609.835257][T12164] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 609.849535][T12164] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.863321][T12164] usb 10-1: config 0 interface 125 has no altsetting 0 [ 609.870346][T12164] usb 10-1: config 0 interface 125 has no altsetting 2 [ 609.879649][T12164] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 609.890019][T12164] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.898236][T12164] usb 10-1: Product: syz [ 609.902633][T12164] usb 10-1: Manufacturer: syz [ 609.907406][T12164] usb 10-1: SerialNumber: syz [ 609.918384][T12164] usb 10-1: config 0 descriptor?? [ 609.942985][T12164] usb 10-1: selecting invalid altsetting 2 [ 610.427239][T17372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.973112][T12158] usb 10-1: USB disconnect, device number 4 [ 611.002989][T17397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4511'. [ 611.015156][T17397] netlink: 'syz.3.4511': attribute type 7 has an invalid length. [ 611.026254][T17397] netlink: 'syz.3.4511': attribute type 8 has an invalid length. [ 611.045139][T17397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4511'. [ 611.101565][T17397] erspan0: entered promiscuous mode [ 611.111693][T17397] gretap0: entered promiscuous mode [ 611.138619][T17397] debugfs: 'hsr0' already exists in 'hsr' [ 611.150689][T17397] Cannot create hsr debugfs directory [ 611.917376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.264779][T17429] vcan0: tx drop: invalid da for name 0x4000000000000000 [ 612.514344][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058215400: rx timeout, send abort [ 613.014482][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058214800: rx timeout, send abort [ 613.023124][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058215400: abort rx timeout. Force session deactivation [ 613.522983][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058214800: abort rx timeout. Force session deactivation [ 613.662523][T17454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4545'. [ 613.942422][T17462] netlink: 'syz.8.4537': attribute type 1 has an invalid length. [ 613.996756][T17462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 614.111653][T17462] bond1: (slave geneve2): making interface the new active one [ 614.156003][T17462] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 614.781231][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4548'. [ 614.962938][T17499] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4551'. [ 615.016872][T17501] input: syz0 as /devices/virtual/input/input97 [ 615.037420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.045981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.054515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.063112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.071744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.080307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.088824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.097352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.105827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.514023][T17554] sit1: entered allmulticast mode [ 616.900386][T17573] loop9: detected capacity change from 0 to 2640 [ 616.920310][T17573] buffer_io_error: 652 callbacks suppressed [ 616.920330][T17573] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.940364][T12174] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 616.955269][T17573] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.966343][T17573] Buffer I/O error on dev loop9, logical block 0, async page read [ 616.995700][T17577] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 617.005189][T17573] loop9: unable to read partition table [ 617.024836][T17573] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 617.038651][T17578] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 617.061108][T17577] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 617.097330][T12174] usb 7-1: Using ep0 maxpacket: 8 [ 617.106437][T17577] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 617.119840][T12174] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 617.130251][T12174] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 617.144145][T17577] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 617.153166][T12174] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 617.167831][T17577] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 617.177790][T12174] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.193367][T17577] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 617.205723][T12174] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 617.225368][T12174] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.464711][T12174] usb 7-1: GET_CAPABILITIES returned 0 [ 617.482035][T12174] usbtmc 7-1:16.0: can't read capabilities [ 617.708949][T12158] usb 7-1: USB disconnect, device number 60 [ 618.114358][T17608] Invalid argument reading file caps for ./file0 [ 618.311452][T17616] input: syz0 as /devices/virtual/input/input98 [ 618.769577][T12174] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 618.811952][T12174] hid-generic 0000:0000:0000.0088: hidraw0: HID v0.00 Device [syz1] on syz0 [ 618.957516][ C0] net_ratelimit: 212 callbacks suppressed [ 618.957538][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.972024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.980535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.116453][T17639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.383816][T17668] syzkaller1: entered promiscuous mode [ 620.412408][T17668] syzkaller1: entered allmulticast mode [ 620.643627][T17684] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 620.724772][T17687] [ 620.727191][T17687] ===================================================== [ 620.734218][T17687] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 620.741835][T17687] syzkaller #0 Tainted: G L [ 620.747836][T17687] ----------------------------------------------------- [ 620.754835][T17687] syz.6.4629/17687 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 620.762677][T17687] ffff8880774f5e88 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 620.771698][T17687] [ 620.771698][T17687] and this task is already holding: [ 620.779142][T17687] ffff88802bbc6230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 620.788914][T17687] which would create a new lock dependency: [ 620.794834][T17687] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 620.802978][T17687] [ 620.802978][T17687] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 620.812475][T17687] (&dev->event_lock#2){..-.}-{3:3} [ 620.812522][T17687] [ 620.812522][T17687] ... which became SOFTIRQ-irq-safe at: [ 620.825488][T17687] lock_acquire+0x106/0x350 [ 620.830141][T17687] _raw_spin_lock_irqsave+0x40/0x60 [ 620.835511][T17687] input_event+0x71/0xc0 [ 620.839869][T17687] xpad360_process_packet+0x1fe/0xdc0 [ 620.845440][T17687] xpad_irq_in+0x14b7/0x2540 [ 620.850148][T17687] __usb_hcd_giveback_urb+0x376/0x540 [ 620.855683][T17687] dummy_timer+0xbc0/0x4650 [ 620.860368][T17687] __hrtimer_run_queues+0x3c0/0xa20 [ 620.865681][T17687] hrtimer_run_softirq+0x17a/0x240 [ 620.870904][T17687] handle_softirqs+0x22a/0x840 [ 620.875793][T17687] __irq_exit_rcu+0xca/0x220 [ 620.880490][T17687] irq_exit_rcu+0x9/0x30 [ 620.884838][T17687] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 620.890667][T17687] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 620.896796][T17687] finish_task_switch+0x427/0xbe0 [ 620.901940][T17687] __schedule+0x1829/0x5740 [ 620.906558][T17687] schedule+0x164/0x360 [ 620.910848][T17687] schedule_preempt_disabled+0x13/0x30 [ 620.916424][T17687] rwsem_down_write_slowpath+0x883/0x1080 [ 620.922452][T17687] down_write+0x1bc/0x200 [ 620.926887][T17687] kernfs_remove_by_name_ns+0x4e/0x140 [ 620.932500][T17687] sysfs_remove_group+0xfc/0x2e0 [ 620.937549][T17687] sysfs_remove_groups+0x54/0xb0 [ 620.942594][T17687] device_remove_attrs+0x1cb/0x280 [ 620.947909][T17687] device_del+0x51f/0x8f0 [ 620.952342][T17687] unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 620.959021][T17687] ops_undo_list+0x3d3/0x940 [ 620.963824][T17687] cleanup_net+0x56b/0x800 [ 620.968402][T17687] process_scheduled_works+0xb5d/0x1860 [ 620.974060][T17687] worker_thread+0xa53/0xfc0 [ 620.978752][T17687] kthread+0x389/0x470 [ 620.983028][T17687] ret_from_fork+0x514/0xb70 [ 620.987882][T17687] ret_from_fork_asm+0x1a/0x30 [ 620.992779][T17687] [ 620.992779][T17687] to a SOFTIRQ-irq-unsafe lock: [ 620.999861][T17687] (tasklist_lock){.+.+}-{3:3} [ 620.999890][T17687] [ 620.999890][T17687] ... which became SOFTIRQ-irq-unsafe at: [ 621.012686][T17687] ... [ 621.012765][T17687] lock_acquire+0x106/0x350 [ 621.019968][T17687] _raw_read_lock+0x36/0x50 [ 621.024591][T17687] __do_wait+0xde/0x740 [ 621.029003][T17687] do_wait+0x1e7/0x510 [ 621.033219][T17687] kernel_wait+0xd6/0x1c0 [ 621.037669][T17687] call_usermodehelper_exec_work+0xbe/0x230 [ 621.043781][T17687] process_scheduled_works+0xb5d/0x1860 [ 621.049439][T17687] worker_thread+0xa53/0xfc0 [ 621.054143][T17687] kthread+0x389/0x470 [ 621.058331][T17687] ret_from_fork+0x514/0xb70 [ 621.063027][T17687] ret_from_fork_asm+0x1a/0x30 [ 621.067906][T17687] [ 621.067906][T17687] other info that might help us debug this: [ 621.067906][T17687] [ 621.078175][T17687] Chain exists of: [ 621.078175][T17687] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 621.078175][T17687] [ 621.091249][T17687] Possible interrupt unsafe locking scenario: [ 621.091249][T17687] [ 621.099663][T17687] CPU0 CPU1 [ 621.105154][T17687] ---- ---- [ 621.110701][T17687] lock(tasklist_lock); [ 621.114972][T17687] local_irq_disable(); [ 621.121742][T17687] lock(&dev->event_lock#2); [ 621.129037][T17687] lock(&new->fa_lock); [ 621.135818][T17687] [ 621.139341][T17687] lock(&dev->event_lock#2); [ 621.144338][T17687] [ 621.144338][T17687] *** DEADLOCK *** [ 621.144338][T17687] [ 621.152623][T17687] 6 locks held by syz.6.4629/17687: [ 621.157929][T17687] #0: ffff88802bbd1110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 621.167178][T17687] #1: ffff88802bbc6230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 621.177406][T17687] #2: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 621.187278][T17687] #3: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 621.196906][T17687] #4: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00 [ 621.207146][T17687] #5: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 621.216249][T17687] [ 621.216249][T17687] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 621.226676][T17687] -> (&dev->event_lock#2){..-.}-{3:3} { [ 621.232356][T17687] IN-SOFTIRQ-W at: [ 621.236458][T17687] lock_acquire+0x106/0x350 [ 621.242640][T17687] _raw_spin_lock_irqsave+0x40/0x60 [ 621.249514][T17687] input_event+0x71/0xc0 [ 621.255522][T17687] xpad360_process_packet+0x1fe/0xdc0 [ 621.262575][T17687] xpad_irq_in+0x14b7/0x2540 [ 621.269061][T17687] __usb_hcd_giveback_urb+0x376/0x540 [ 621.276112][T17687] dummy_timer+0xbc0/0x4650 [ 621.282291][T17687] __hrtimer_run_queues+0x3c0/0xa20 [ 621.289162][T17687] hrtimer_run_softirq+0x17a/0x240 [ 621.295961][T17687] handle_softirqs+0x22a/0x840 [ 621.302397][T17687] __irq_exit_rcu+0xca/0x220 [ 621.308665][T17687] irq_exit_rcu+0x9/0x30 [ 621.314580][T17687] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 621.321893][T17687] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 621.329547][T17687] finish_task_switch+0x427/0xbe0 [ 621.336335][T17687] __schedule+0x1829/0x5740 [ 621.342516][T17687] schedule+0x164/0x360 [ 621.348438][T17687] schedule_preempt_disabled+0x13/0x30 [ 621.355577][T17687] rwsem_down_write_slowpath+0x883/0x1080 [ 621.362986][T17687] down_write+0x1bc/0x200 [ 621.368990][T17687] kernfs_remove_by_name_ns+0x4e/0x140 [ 621.376138][T17687] sysfs_remove_group+0xfc/0x2e0 [ 621.382752][T17687] sysfs_remove_groups+0x54/0xb0 [ 621.389372][T17687] device_remove_attrs+0x1cb/0x280 [ 621.396181][T17687] device_del+0x51f/0x8f0 [ 621.402177][T17687] unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 621.410349][T17687] ops_undo_list+0x3d3/0x940 [ 621.416627][T17687] cleanup_net+0x56b/0x800 [ 621.422717][T17687] process_scheduled_works+0xb5d/0x1860 [ 621.429930][T17687] worker_thread+0xa53/0xfc0 [ 621.436188][T17687] kthread+0x389/0x470 [ 621.441930][T17687] ret_from_fork+0x514/0xb70 [ 621.448191][T17687] ret_from_fork_asm+0x1a/0x30 [ 621.454642][T17687] INITIAL USE at: [ 621.458554][T17687] lock_acquire+0x106/0x350 [ 621.464643][T17687] _raw_spin_lock_irqsave+0x40/0x60 [ 621.471437][T17687] input_inject_event+0xa4/0x330 [ 621.477963][T17687] kbd_led_trigger_activate+0xbc/0x100 [ 621.485114][T17687] led_trigger_set+0x535/0x960 [ 621.491521][T17687] led_trigger_set_default+0x260/0x2a0 [ 621.498570][T17687] led_classdev_register_ext+0x787/0x9c0 [ 621.505788][T17687] input_leds_connect+0x517/0x790 [ 621.512502][T17687] input_register_device+0xce0/0x1140 [ 621.519561][T17687] atkbd_connect+0x71e/0xa10 [ 621.525812][T17687] serio_driver_probe+0x82/0xb0 [ 621.532321][T17687] really_probe+0x267/0xaf0 [ 621.538553][T17687] __driver_probe_device+0x1ef/0x380 [ 621.545773][T17687] driver_probe_device+0x4f/0x240 [ 621.552473][T17687] __driver_attach+0x34c/0x640 [ 621.558841][T17687] bus_for_each_dev+0x23b/0x2c0 [ 621.565392][T17687] serio_handle_event+0x1af/0xf80 [ 621.572104][T17687] process_scheduled_works+0xb5d/0x1860 [ 621.579355][T17687] worker_thread+0xa53/0xfc0 [ 621.585625][T17687] kthread+0x389/0x470 [ 621.591372][T17687] ret_from_fork+0x514/0xb70 [ 621.597564][T17687] ret_from_fork_asm+0x1a/0x30 [ 621.603945][T17687] } [ 621.606550][T17687] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 621.615716][T17687] [ 621.615716][T17687] the dependencies between the lock to be acquired [ 621.615732][T17687] and SOFTIRQ-irq-unsafe lock: [ 621.629310][T17687] -> (tasklist_lock){.+.+}-{3:3} { [ 621.634748][T17687] HARDIRQ-ON-R at: [ 621.638932][T17687] lock_acquire+0x106/0x350 [ 621.645741][T17687] _raw_read_lock+0x36/0x50 [ 621.652371][T17687] __do_wait+0xde/0x740 [ 621.658567][T17687] do_wait+0x1e7/0x510 [ 621.664668][T17687] kernel_wait+0xd6/0x1c0 [ 621.671029][T17687] call_usermodehelper_exec_work+0xbe/0x230 [ 621.679043][T17687] process_scheduled_works+0xb5d/0x1860 [ 621.686609][T17687] worker_thread+0xa53/0xfc0 [ 621.693218][T17687] kthread+0x389/0x470 [ 621.699314][T17687] ret_from_fork+0x514/0xb70 [ 621.705921][T17687] ret_from_fork_asm+0x1a/0x30 [ 621.712715][T17687] SOFTIRQ-ON-R at: [ 621.716906][T17687] lock_acquire+0x106/0x350 [ 621.723457][T17687] _raw_read_lock+0x36/0x50 [ 621.730082][T17687] __do_wait+0xde/0x740 [ 621.736348][T17687] do_wait+0x1e7/0x510 [ 621.742440][T17687] kernel_wait+0xd6/0x1c0 [ 621.748806][T17687] call_usermodehelper_exec_work+0xbe/0x230 [ 621.756726][T17687] process_scheduled_works+0xb5d/0x1860 [ 621.764380][T17687] worker_thread+0xa53/0xfc0 [ 621.771076][T17687] kthread+0x389/0x470 [ 621.777187][T17687] ret_from_fork+0x514/0xb70 [ 621.783819][T17687] ret_from_fork_asm+0x1a/0x30 [ 621.790618][T17687] INITIAL USE at: [ 621.794710][T17687] lock_acquire+0x106/0x350 [ 621.801236][T17687] _raw_write_lock_irq+0x3d/0x50 [ 621.808176][T17687] copy_process+0x2b4c/0x4440 [ 621.814786][T17687] kernel_clone+0x2d7/0x940 [ 621.821223][T17687] user_mode_thread+0x110/0x180 [ 621.828188][T17687] rest_init+0x23/0x300 [ 621.834282][T17687] start_kernel+0x38a/0x3e0 [ 621.840794][T17687] x86_64_start_reservations+0x24/0x30 [ 621.848325][T17687] x86_64_start_kernel+0x143/0x1c0 [ 621.855379][T17687] common_startup_64+0x13e/0x147 [ 621.862343][T17687] INITIAL READ USE at: [ 621.866866][T17687] lock_acquire+0x106/0x350 [ 621.873737][T17687] _raw_read_lock+0x36/0x50 [ 621.880623][T17687] __do_wait+0xde/0x740 [ 621.887152][T17687] do_wait+0x1e7/0x510 [ 621.893598][T17687] kernel_wait+0xd6/0x1c0 [ 621.900298][T17687] call_usermodehelper_exec_work+0xbe/0x230 [ 621.908568][T17687] process_scheduled_works+0xb5d/0x1860 [ 621.916478][T17687] worker_thread+0xa53/0xfc0 [ 621.923470][T17687] kthread+0x389/0x470 [ 621.929923][T17687] ret_from_fork+0x514/0xb70 [ 621.936886][T17687] ret_from_fork_asm+0x1a/0x30 [ 621.944018][T17687] } [ 621.946707][T17687] ... key at: [] tasklist_lock+0x18/0x40 [ 621.954687][T17687] ... acquired at: [ 621.958677][T17687] _raw_read_lock+0x36/0x50 [ 621.963386][T17687] send_sigio+0x101/0x370 [ 621.967925][T17687] dnotify_handle_event+0x169/0x440 [ 621.973440][T17687] fsnotify+0x1831/0x1ae0 [ 621.978010][T17687] path_openat+0x15c2/0x3860 [ 621.982804][T17687] do_file_open+0x23e/0x4a0 [ 621.987510][T17687] do_sys_openat2+0x113/0x200 [ 621.992385][T17687] __ia32_compat_sys_openat+0x131/0x160 [ 621.998133][T17687] __do_fast_syscall_32+0x23e/0x6f0 [ 622.003541][T17687] do_fast_syscall_32+0x33/0x70 [ 622.008624][T17687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 622.015161][T17687] [ 622.017504][T17687] -> (&f_owner->lock){....}-{3:3} { [ 622.022840][T17687] INITIAL USE at: [ 622.026855][T17687] lock_acquire+0x106/0x350 [ 622.033208][T17687] _raw_write_lock_irq+0x3d/0x50 [ 622.039907][T17687] __f_setown+0x67/0x370 [ 622.045916][T17687] fcntl_dirnotify+0x3f9/0x6a0 [ 622.052531][T17687] do_fcntl+0x77e/0x1a20 [ 622.058536][T17687] do_compat_fcntl64+0x51e/0x7e0 [ 622.065236][T17687] __do_fast_syscall_32+0x23e/0x6f0 [ 622.072203][T17687] do_fast_syscall_32+0x33/0x70 [ 622.078846][T17687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 622.086946][T17687] INITIAL READ USE at: [ 622.091387][T17687] lock_acquire+0x106/0x350 [ 622.098179][T17687] _raw_read_lock_irqsave+0x48/0x60 [ 622.105666][T17687] send_sigio+0x38/0x370 [ 622.112115][T17687] dnotify_handle_event+0x169/0x440 [ 622.119515][T17687] fsnotify+0x1831/0x1ae0 [ 622.126054][T17687] fsnotify_mkdir+0x121/0x180 [ 622.132943][T17687] vfs_mkdir+0x45e/0x630 [ 622.139403][T17687] filename_mkdirat+0x285/0x510 [ 622.146473][T17687] __se_sys_mkdirat+0x35/0x150 [ 622.153529][T17687] __do_fast_syscall_32+0x23e/0x6f0 [ 622.161013][T17687] do_fast_syscall_32+0x33/0x70 [ 622.168066][T17687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 622.176687][T17687] } [ 622.179328][T17687] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 622.188680][T17687] ... acquired at: [ 622.192591][T17687] _raw_read_lock_irqsave+0x48/0x60 [ 622.198009][T17687] send_sigio+0x38/0x370 [ 622.202450][T17687] kill_fasync+0x24d/0x4d0 [ 622.207066][T17687] sock_wake_async+0x137/0x160 [ 622.212124][T17687] sock_def_readable+0x3c1/0x550 [ 622.217370][T17687] queue_oob+0x45e/0x4f0 [ 622.221875][T17687] unix_stream_sendmsg+0xcb1/0xe80 [ 622.227185][T17687] ____sys_sendmsg+0x972/0x9f0 [ 622.232226][T17687] ___sys_sendmsg+0x2a5/0x360 [ 622.237097][T17687] __sys_sendmmsg+0x2e7/0x4e0 [ 622.241969][T17687] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 622.247713][T17687] __do_fast_syscall_32+0x23e/0x6f0 [ 622.253107][T17687] do_fast_syscall_32+0x33/0x70 [ 622.258186][T17687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 622.264711][T17687] [ 622.267051][T17687] -> (&new->fa_lock){....}-{3:3} { [ 622.272206][T17687] INITIAL USE at: [ 622.276111][T17687] lock_acquire+0x106/0x350 [ 622.282196][T17687] _raw_write_lock_irq+0x3d/0x50 [ 622.288718][T17687] fasync_remove_entry+0xf1/0x1c0 [ 622.295337][T17687] lease_modify+0x4f7/0x6c0 [ 622.301427][T17687] locks_remove_file+0x5f0/0xf70 [ 622.307985][T17687] __fput+0x3ae/0xa60 [ 622.313563][T17687] task_work_run+0x1d9/0x270 [ 622.319919][T17687] exit_to_user_mode_loop+0x193/0x680 [ 622.326874][T17687] __do_fast_syscall_32+0x45b/0x6f0 [ 622.333664][T17687] do_fast_syscall_32+0x33/0x70 [ 622.340186][T17687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 622.348103][T17687] INITIAL READ USE at: [ 622.352456][T17687] lock_acquire+0x106/0x350 [ 622.359061][T17687] _raw_read_lock_irqsave+0x48/0x60 [ 622.366282][T17687] kill_fasync+0x199/0x4d0 [ 622.372729][T17687] sock_wake_async+0x137/0x160 [ 622.379526][T17687] sk_wake_async+0x184/0x280 [ 622.386223][T17687] mptcp_destroy_common+0x15c/0x330 [ 622.393509][T17687] mptcp_disconnect+0x240/0x7f0 [ 622.400430][T17687] inet_shutdown+0x1c4/0x390 [ 622.407137][T17687] __ia32_sys_shutdown+0x13f/0x1a0 [ 622.414264][T17687] __do_fast_syscall_32+0x23e/0x6f0 [ 622.421482][T17687] do_fast_syscall_32+0x33/0x70 [ 622.428349][T17687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 622.436697][T17687] } [ 622.439213][T17687] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 622.447931][T17687] ... acquired at: [ 622.451751][T17687] _raw_read_lock_irqsave+0x48/0x60 [ 622.457164][T17687] kill_fasync+0x199/0x4d0 [ 622.461787][T17687] mousedev_notify_readers+0x6f1/0xc00 [ 622.467446][T17687] mousedev_event+0x602/0x1320 [ 622.472498][T17687] input_handle_events_default+0xd4/0x1a0 [ 622.478419][T17687] input_pass_values+0x288/0x890 [ 622.483553][T17687] input_event_dispose+0x330/0x6b0 [ 622.488867][T17687] input_inject_event+0x1dc/0x330 [ 622.494183][T17687] evdev_write+0x325/0x4c0 [ 622.498793][T17687] vfs_write+0x29a/0xb90 [ 622.503234][T17687] ksys_write+0x150/0x270 [ 622.507763][T17687] __do_fast_syscall_32+0x23e/0x6f0 [ 622.513157][T17687] do_fast_syscall_32+0x33/0x70 [ 622.518215][T17687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 622.524740][T17687] [ 622.527086][T17687] [ 622.527086][T17687] stack backtrace: [ 622.533009][T17687] CPU: 0 UID: 0 PID: 17687 Comm: syz.6.4629 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.533035][T17687] Tainted: [L]=SOFTLOCKUP [ 622.533042][T17687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 622.533062][T17687] Call Trace: [ 622.533070][T17687] [ 622.533139][T17687] dump_stack_lvl+0xe8/0x150 [ 622.533189][T17687] __lock_acquire+0x2a94/0x2cf0 [ 622.533217][T17687] ? kill_fasync+0x199/0x4d0 [ 622.533271][T17687] lock_acquire+0x106/0x350 [ 622.533289][T17687] ? kill_fasync+0x199/0x4d0 [ 622.533321][T17687] _raw_read_lock_irqsave+0x48/0x60 [ 622.533350][T17687] ? kill_fasync+0x199/0x4d0 [ 622.533376][T17687] kill_fasync+0x199/0x4d0 [ 622.533403][T17687] ? kill_fasync+0x53/0x4d0 [ 622.533430][T17687] mousedev_notify_readers+0x6f1/0xc00 [ 622.533472][T17687] ? mousedev_notify_readers+0x2c/0xc00 [ 622.533503][T17687] mousedev_event+0x602/0x1320 [ 622.533533][T17687] input_handle_events_default+0xd4/0x1a0 [ 622.533556][T17687] ? input_pass_values+0x8d/0x890 [ 622.533571][T17687] input_pass_values+0x288/0x890 [ 622.533591][T17687] ? input_handle_event+0x70c/0xf30 [ 622.533617][T17687] input_event_dispose+0x330/0x6b0 [ 622.533643][T17687] input_inject_event+0x1dc/0x330 [ 622.533668][T17687] ? input_inject_event+0xb5/0x330 [ 622.533693][T17687] evdev_write+0x325/0x4c0 [ 622.533711][T17687] ? __lock_acquire+0x6b5/0x2cf0 [ 622.533731][T17687] ? __pfx_evdev_write+0x10/0x10 [ 622.533750][T17687] ? bpf_lsm_file_permission+0x9/0x20 [ 622.533793][T17687] ? security_file_permission+0x75/0x260 [ 622.533863][T17687] ? rw_verify_area+0x255/0x4d0 [ 622.533894][T17687] ? __pfx_evdev_write+0x10/0x10 [ 622.533912][T17687] vfs_write+0x29a/0xb90 [ 622.533942][T17687] ? __pfx_vfs_write+0x10/0x10 [ 622.533968][T17687] ? __fget_files+0x2a/0x420 [ 622.533992][T17687] ? __fget_files+0x2a/0x420 [ 622.534013][T17687] ? __fget_files+0x3a0/0x420 [ 622.534034][T17687] ? __fget_files+0x2a/0x420 [ 622.534059][T17687] ksys_write+0x150/0x270 [ 622.534086][T17687] ? __pfx_ksys_write+0x10/0x10 [ 622.534116][T17687] __do_fast_syscall_32+0x23e/0x6f0 [ 622.534137][T17687] ? do_fast_syscall_32+0x33/0x70 [ 622.534156][T17687] ? lockdep_hardirqs_on+0x7a/0x110 [ 622.534173][T17687] ? asm_int80_emulation+0x1a/0x20 [ 622.534191][T17687] ? do_int80_emulation+0x29f/0x550 [ 622.534211][T17687] ? trace_irq_disable+0x3b/0x140 [ 622.534244][T17687] do_fast_syscall_32+0x33/0x70 [ 622.534264][T17687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 622.534286][T17687] RIP: 0023:0xf703f01c [ 622.534311][T17687] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 622.534353][T17687] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 622.534372][T17687] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 622.534387][T17687] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 622.534398][T17687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 622.534409][T17687] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 622.534420][T17687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 622.534438][T17687] [ 624.798676][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.805092][ T1316] ieee802154 phy1 wpan1: encryption failed: -22