last executing test programs: 31.174017004s ago: executing program 1 (id=1012): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f00000075c0)={&(0x7f0000001080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000074c0)=[{&(0x7f00000001c0)="7f", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), 0x19}, 0x0) 31.027990037s ago: executing program 1 (id=1014): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 30.827895085s ago: executing program 1 (id=1020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0400", "0d07080d7f4fcf0000e8ffffff00", '\x00', "8657e2b7e43b34e4"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 30.319040441s ago: executing program 1 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000680003"], 0x4c}}, 0x0) 19.934843589s ago: executing program 1 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000680003"], 0x4c}}, 0x0) 11.588242674s ago: executing program 1 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000680003"], 0x4c}}, 0x0) 9.202964719s ago: executing program 4 (id=1118): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x7d, &(0x7f0000000280)={r2}, 0x8) 8.325928008s ago: executing program 4 (id=1122): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e3c9, [{{0x9, 0x2, 0xfffffffffffffdb1}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "4356a6b3", {0x1, 0x8a, 0x5, 0x2, 0x97}}) syz_usb_connect(0x1, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="0c00004e1526fa18c11320433a"]) 6.196225871s ago: executing program 3 (id=1127): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001600)="4ad1ff49ca613b35c12b8bb8475c8e54bea495ec5746b2dd1fa94347faf077cfaf8cb654dcc1e9178075265e1d450f52d3642c7cb01ce8adff2cd2df5ebab60627b9b27b3a00a0412e248d51b3265ab1f5c3b1e9c605fc66326381d582e829dbddb3c18fda82b21862200d94cc16ecc0ca6f", 0x72}, {&(0x7f0000003100)="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", 0xc87}], 0x2}}], 0x1, 0x9200000004004880) r7 = dup3(r3, r2, 0x0) recvmmsg$unix(r7, &(0x7f0000001780)=[{{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000001880)}}], 0x1, 0x74a081c1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x18, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0x0, 0x9, 0x2}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}]}}]}, 0x48}}, 0x0) epoll_create1(0x0) syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) 5.504433273s ago: executing program 3 (id=1128): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000), 0x80) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket(0x11, 0x800000003, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/rpc\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESHEX=r1], 0x20) 5.227699718s ago: executing program 3 (id=1129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 5.223129659s ago: executing program 4 (id=1130): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a", 0x3, 0x40000, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000001480)=""/4096, 0x24) 5.09574958s ago: executing program 4 (id=1131): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) creat(&(0x7f0000001180)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket(0x200000100000011, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa03e, 0x0, &(0x7f0000006680)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27}, &(0x7f00000002c0), &(0x7f0000000300)) 4.728135143s ago: executing program 3 (id=1132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440), 0x24}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)={0x2c4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2a4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x29d, 0x1, "d433dc4f3d4a51473536f24d81ac21c0debc86f0b87921158a71343ed8d09ba1e3dd6821ada8f0c9246b94ba058d5867cfc7e36216bc1335e5f505c1e0a542823474519e1be3eedc6ca2f871defd0a3bcadb6062701b133ce4ad58fb9df35800aecb5140170a165c84b590a1c98e44e638bf4cb1072ecda32f80fba1da846c1a2267887a3bc7aeca25387e15d18f80a5fef779e39c73f883a22eda91bc26f479bff2ccc181be08da9ec1df6a3291c5e5d5b36bdcea5ee657098880bd1e28b0ff29ace9fe5861142a666d63be4df581aba492df90082407cf67b5396a2fd701c7211312fc23f8c68d770caeebf8286e62b066b1c40944d4647f633c70892f8106aa32f7338fd84ea916fdfed8ca200a773b6ea60ace348fec7cc53eba7f55459179b20e6f5a9d871207366b5eb8f49103a49437797c2e752b3bb71c08b65c75206d8898fc8c17712d908486137c735b57032a16c721b8c0b436b90e7179b4544f21fc2a39e19752004d0564d5c6c3abbab03f4feddf1a61088be824f5bdef233711f159a2284a6e93c3838754f8817fd5c7572dcc1c025fa09f7f9a2b6d023bba6d4b2a69aa0564177a608151d414411b68e254389162e35f84a9925cb24af22e8a1bfa4ec5d4e37857f8848cac23632d06bbd18dbd1ec83dba5c2512845f9dc276c1fbd022ee55cdbcb44399e7801a286b8854e0f29c97c094a046f0fb17e8c9aeb7f5488574702b12362017a7e301887cc79e3bf9566c9ea2d69f7638d4c057dc55e7ac5b402e6f6dc60a804b965a691866fd023c2f248347b54fd1c33245e1efaa778a68599f0a9f815630ea08d87ae236ec756ef1e01d9bc60ea94982082f8ae07a531172fff6ea29068f1e9a74330ca8ede2b303addd7281433da561648f981961fd95cfe485741fa22a831656f2fff454705e3b805488"}]}]}, 0x2c4}}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 4.486430595s ago: executing program 3 (id=1134): sched_setscheduler(0x0, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000380)={'c', ' *:* ', 'w\x00'}, 0x8) 4.127157307s ago: executing program 4 (id=1136): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010800fa7010081304236036b601e2020109021b0001000000000904bf00017a9ec00009058205000000"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6666, 0x8802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 4.10087426s ago: executing program 3 (id=1137): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.002332309s ago: executing program 0 (id=1139): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='notify_on_release\x00', 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x6a) 3.952569063s ago: executing program 2 (id=1140): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x3, 0x0, 0x0, "f759ca14860e00", '\x00\x00\v\x00', "03000500", "f859ad13", ["ff954991066edcf5d7cc00", "c2248c084fcfc02000000008", '\x00', "00103a071fa0fcd900"]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x300}}}}}}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x0, 0x268, 0xa, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x1d}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x2, 0x2, 0x4}) read$FUSE(r6, &(0x7f0000000380)={0x2020}, 0x2020) setrlimit(0x0, &(0x7f0000000180)={0x9, 0x1000000000000000}) 3.86806986s ago: executing program 0 (id=1141): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001000000000000000000100000000c0007"], 0x28}], 0x1, 0x0, 0x0, 0x40}, 0x0) 3.647925611s ago: executing program 0 (id=1142): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="3200030007"], 0xd) 2.628592813s ago: executing program 0 (id=1143): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000), 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket(0x11, 0x800000003, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/rpc\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) 2.3280179s ago: executing program 2 (id=1144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) ioprio_set$pid(0x1, r0, 0x3) ioctl$USBDEVFS_CONTROL(r3, 0x80045519, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, 0x0, 0x0, 0x0, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r4 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r4, 0x0, 0x400000000000000, 0x7) 2.32783332s ago: executing program 0 (id=1145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 1.401148864s ago: executing program 0 (id=1146): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b702000014000000b7030000000000f785000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) r7 = dup(r2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x3, [], [0x72cb]}}) 1.394917414s ago: executing program 2 (id=1147): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa20080045000028000000000002907800000000ffffb5ff11e090780000000062ea00000000000000000000fdb180122d8ac26525546b55d17eb8363198b8f0fdd84435a31c3a0d14a8ebd4eb7705a8b8d1937733b7dff8fb2098fc9c20484c06905b04ef877c30566c7b85e18d98164b3eb572a1c00def2641ab4c2b"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) recvmsg(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1}, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x5100, 0x0) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000f, 0x40a2012, r0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000080)) 919.933577ms ago: executing program 2 (id=1148): open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000280)={0x4, 0x1, 0x54, 0xb, 0xc, 0xa}) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84a03, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 397.397894ms ago: executing program 4 (id=1149): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x20008000) pipe2$watch_queue(0x0, 0x80) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000540)={0x0, 0x0, 0xc5b, 0xf}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000880)=""/4096) pipe(0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x6) read(r2, 0x0, 0x2006) r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d000100000000090400000503000000092100000001220500090581034000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) read$hidraw(r4, 0x0, 0xd00) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x87, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0x205a) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) 179.471334ms ago: executing program 2 (id=1150): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000600000914000200fe8800000000000000000000000000010f000700756e636f6e66696e656400001400030000000000000200000000ffff000003"], 0x4c}, 0x2, 0x34005}, 0x0) 0s ago: executing program 2 (id=1151): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): syz.2.895: couldn't read orphan inode 12 (err -117) [ 374.522844][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 374.536096][ T3754] usb 5-1: Using ep0 maxpacket: 32 [ 374.543092][ T7380] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,noacl,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 374.792949][ T3754] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 374.802067][ T3754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.810360][ T13] usb 1-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 374.820719][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 374.843365][ T3754] usb 5-1: config 0 descriptor?? [ 374.849221][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 105, changing to 7 [ 374.860592][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24686, setting to 1024 [ 374.871864][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.916842][ T3752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.959072][ T3754] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 375.063458][ T13] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 375.100921][ T13] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 375.186769][ T13] usb 1-1: Manufacturer: syz [ 375.252277][ T13] usb 1-1: config 0 descriptor?? [ 375.439995][ T4645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.528089][ T3747] usb 1-1: USB disconnect, device number 26 [ 375.577037][ T7374] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.578925][ T4645] usb 5-1: USB disconnect, device number 41 [ 376.523350][ T4645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.553755][ T4645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.953161][ T3747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.356440][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.363151][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.603432][ T3616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.456427][ T7398] loop3: detected capacity change from 0 to 512 [ 382.532829][ T26] audit: type=1326 audit(1726810865.643:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1d2f7ef9 code=0x7ffc0000 [ 382.602521][ T7400] loop1: detected capacity change from 0 to 32768 [ 382.614428][ T4645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.699874][ T3747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.708551][ T3748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.772687][ T26] audit: type=1326 audit(1726810865.643:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1d2f7ef9 code=0x7ffc0000 [ 382.956544][ T26] audit: type=1326 audit(1726810865.683:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2c1d2f7ef9 code=0x7ffc0000 [ 382.997022][ T7412] loop4: detected capacity change from 0 to 8 [ 383.023388][ T26] audit: type=1326 audit(1726810865.683:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c1d2f7f33 code=0x7ffc0000 [ 383.072142][ T7414] loop1: detected capacity change from 0 to 64 [ 383.121448][ T26] audit: type=1326 audit(1726810867.913:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2c1d2f69df code=0x7ffc0000 [ 383.122409][ T7414] hfs: unable to change iocharset [ 383.229841][ T7414] hfs: unable to parse mount options [ 383.241112][ T26] audit: type=1326 audit(1726810868.383:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2c1d2f7f87 code=0x7ffc0000 [ 383.264083][ T3747] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 383.327401][ T26] audit: type=1326 audit(1726810868.383:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c1d2f6890 code=0x7ffc0000 [ 383.443048][ T26] audit: type=1326 audit(1726810868.383:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c1d2f7afb code=0x7ffc0000 [ 383.571041][ T26] audit: type=1326 audit(1726810868.403:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2c1d2f6b8a code=0x7ffc0000 [ 383.592773][ T3616] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 383.642882][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.691218][ T26] audit: type=1326 audit(1726810868.403:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7389 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2c1d2f6b8a code=0x7ffc0000 [ 383.713998][ T3747] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 383.723338][ T3747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.742068][ T3747] usb 4-1: config 0 descriptor?? [ 383.782809][ T4645] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 383.852836][ T3616] usb 3-1: Using ep0 maxpacket: 16 [ 383.949593][ T7402] loop0: detected capacity change from 0 to 32768 [ 383.973017][ T3616] usb 3-1: config 0 has no interfaces? [ 383.978737][ T7427] loop4: detected capacity change from 0 to 512 [ 384.017125][ T7427] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 384.017125][ T7427] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 384.017125][ T7427] [ 384.035485][ T4645] usb 2-1: Using ep0 maxpacket: 32 [ 384.041217][ T7427] EXT4-fs (loop4): Test dummy encryption mode enabled [ 384.060382][ T7427] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.907: inline data xattr refers to an external xattr inode [ 384.153125][ T3616] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 384.162538][ T4645] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 384.194787][ T3616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.203858][ T4645] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.221465][ T7427] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.907: couldn't read orphan inode 12 (err -117) [ 384.236288][ T3616] usb 3-1: Product: syz [ 384.240516][ T3616] usb 3-1: Manufacturer: syz [ 384.243815][ T3747] gs_usb 4-1:0.0: Couldn't get device config: (err=-71) [ 384.252096][ T3747] gs_usb: probe of 4-1:0.0 failed with error -71 [ 384.253384][ T7427] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,noacl,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 384.270179][ T3747] usb 4-1: USB disconnect, device number 28 [ 384.285566][ T4645] usb 2-1: config 0 descriptor?? [ 384.296170][ T3616] usb 3-1: SerialNumber: syz [ 384.308537][ T3616] usb 3-1: config 0 descriptor?? [ 384.374180][ T144] ERROR: (device loop0): diWrite: ixpxd invalid [ 384.374180][ T144] [ 384.421308][ T144] ERROR: (device loop0): remounting filesystem as read-only [ 384.431440][ T144] ERROR: (device loop0): txCommit: [ 384.431440][ T144] [ 384.459966][ T144] jfs_write_inode: jfs_commit_inode failed! [ 384.514667][ T4645] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 384.675670][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.848140][ T7432] loop2: detected capacity change from 0 to 512 [ 385.031469][ T7432] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 385.092901][ T7432] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038 (0x7fffffff) [ 385.127524][ T7425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.128982][ T4645] usb 2-1: USB disconnect, device number 43 [ 385.319827][ T3616] usb 3-1: USB disconnect, device number 25 [ 385.477062][ T7447] IPv6: sit1: Disabled Multicast RS [ 385.523056][ T6907] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 385.671457][ T7451] netlink: 32 bytes leftover after parsing attributes in process `syz.2.912'. [ 385.713753][ T3754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.721966][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.772769][ T6907] usb 4-1: Using ep0 maxpacket: 8 [ 385.777980][ T4650] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 385.902996][ T6907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.932742][ T6907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.972735][ T6907] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 385.984153][ T7440] loop0: detected capacity change from 0 to 32768 [ 386.002231][ T6907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.033201][ T4650] usb 5-1: Using ep0 maxpacket: 8 [ 386.054538][ T6907] usb 4-1: config 0 descriptor?? [ 386.330852][ T7443] input input42: cannot allocate more than FF_MAX_EFFECTS effects [ 386.376708][ T7462] loop1: detected capacity change from 0 to 128 [ 386.462656][ T7462] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 387.147375][ T4650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.219430][ T4650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.336447][ T4650] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 387.407091][ T4650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.545252][ T4650] usb 5-1: config 0 descriptor?? [ 387.563721][ T26] kauditd_printk_skb: 418 callbacks suppressed [ 387.563739][ T26] audit: type=1326 audit(1726810873.333:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f623a73fea7 code=0x7ffc0000 [ 387.626132][ T3579] sysv_free_block: trying to free block not in datazone [ 387.641822][ T3579] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 387.670913][ T7464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 387.685416][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.715900][ T26] audit: type=1326 audit(1726810873.333:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f623a6e4879 code=0x7ffc0000 [ 387.755385][ T7464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 387.833952][ T26] audit: type=1326 audit(1726810873.333:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f623a748ef9 code=0x7ffc0000 [ 387.981428][ T7448] input input44: cannot allocate more than FF_MAX_EFFECTS effects [ 387.995688][ T7466] device syz_tun entered promiscuous mode [ 388.015864][ T26] audit: type=1326 audit(1726810873.383:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f623a73fea7 code=0x7ffc0000 [ 388.088082][ T7470] netlink: 32 bytes leftover after parsing attributes in process `syz.1.918'. [ 388.202030][ T7466] device batadv_slave_0 entered promiscuous mode [ 388.707703][ T7466] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 388.754185][ T3754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.776255][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.792678][ T7466] Cannot create hsr debugfs directory [ 388.803207][ T26] audit: type=1326 audit(1726810873.383:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f623a6e4879 code=0x7ffc0000 [ 388.862757][ T6907] usbhid 4-1:0.0: can't add hid device: -71 [ 388.870021][ T6907] usbhid: probe of 4-1:0.0 failed with error -71 [ 389.099752][ T7475] loop1: detected capacity change from 0 to 512 [ 389.115221][ T26] audit: type=1326 audit(1726810873.383:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f623a748ef9 code=0x7ffc0000 [ 389.140852][ T6907] usb 4-1: USB disconnect, device number 29 [ 389.752932][ T7486] FAULT_INJECTION: forcing a failure. [ 389.752932][ T7486] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 389.757414][ T7488] loop3: detected capacity change from 0 to 512 [ 389.782890][ T7475] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 389.782890][ T7475] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 389.782890][ T7475] [ 389.794303][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.828680][ T26] audit: type=1326 audit(1726810873.383:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f623a73fea7 code=0x7ffc0000 [ 389.853509][ T7486] CPU: 0 PID: 7486 Comm: syz.0.922 Not tainted 5.15.167-syzkaller #0 [ 389.861805][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 389.871875][ T7486] Call Trace: [ 389.875172][ T7486] [ 389.878126][ T7486] dump_stack_lvl+0x1e3/0x2d0 [ 389.882958][ T7486] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 389.883338][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'. [ 389.888613][ T7486] ? panic+0x860/0x860 [ 389.901484][ T7486] should_fail+0x38a/0x4c0 [ 389.905943][ T7486] prepare_alloc_pages+0x1db/0x5b0 [ 389.911090][ T7486] __alloc_pages+0x14f/0x700 [ 389.915722][ T7486] ? __rmqueue_pcplist+0x2030/0x2030 [ 389.921039][ T7486] ? count_memcg_event_mm+0x385/0x3e0 [ 389.926481][ T7486] ? _raw_spin_unlock+0x24/0x40 [ 389.931366][ T7486] ? remove_device_exclusive_entry+0xbf0/0xbf0 [ 389.937549][ T7486] alloc_pages_vma+0x39a/0x800 [ 389.942347][ T7486] handle_mm_fault+0x2f49/0x5960 [ 389.947334][ T7486] ? numa_migrate_prep+0x1a0/0x1a0 [ 389.952512][ T7486] ? vmacache_find+0x23c/0x590 [ 389.957306][ T7486] exc_page_fault+0x271/0x700 [ 389.962015][ T7486] asm_exc_page_fault+0x22/0x30 [ 389.966922][ T7486] RIP: 0033:0x7fa5c2cf6c23 [ 389.971352][ T7486] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 389.990980][ T7486] RSP: 002b:00007fa5c12aa4a0 EFLAGS: 00010202 [ 389.997074][ T7486] RAX: 0000000000008000 RBX: 00007fa5c12aa540 RCX: 00007fa5b8e6a000 [ 390.005064][ T7486] RDX: 00007fa5c12aa6e0 RSI: 0000000000000003 RDI: 00007fa5c12aa5e0 [ 390.013058][ T7486] RBP: 0000000000000094 R08: 0000000000000006 R09: 0000000000000025 [ 390.021049][ T7486] R10: 0000000000000028 R11: 00007fa5c12aa540 R12: 0000000000000001 [ 390.029036][ T7486] R13: 00007fa5c2eb9f00 R14: 0000000000000001 R15: 00007fa5c12aa5e0 [ 390.037049][ T7486] [ 390.057422][ T7475] EXT4-fs (loop1): Test dummy encryption mode enabled [ 390.068866][ T7488] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 390.112747][ T7486] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 390.132807][ T26] audit: type=1326 audit(1726810873.383:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f623a6e4879 code=0x7ffc0000 [ 390.133847][ T7475] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.920: inline data xattr refers to an external xattr inode [ 390.169599][ T7488] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 390.218953][ T7475] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.920: couldn't read orphan inode 12 (err -117) [ 390.242303][ T7486] loop0: detected capacity change from 0 to 1764 [ 390.249269][ T7488] EXT4-fs (loop3): group descriptors corrupted! [ 390.270252][ T7475] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,noacl,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 390.363734][ T7486] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 390.403282][ T26] audit: type=1326 audit(1726810873.383:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f623a748ef9 code=0x7ffc0000 [ 390.522109][ T7499] loop2: detected capacity change from 0 to 1024 [ 390.535463][ T7486] ISOFS: unable to read i-node block [ 390.540943][ T7486] isofs_fill_super: get root inode failed [ 390.600109][ T26] audit: type=1326 audit(1726810873.393:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.4.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f623a73fea7 code=0x7ffc0000 [ 391.309205][ T7499] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 391.320734][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.389235][ T7499] EXT4-fs (loop2): invalid journal inode [ 391.592775][ T4650] usbhid 5-1:0.0: can't add hid device: -71 [ 391.598798][ T4650] usbhid: probe of 5-1:0.0 failed with error -71 [ 391.653430][ T4650] usb 5-1: USB disconnect, device number 42 [ 391.742885][ T7499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.926'. [ 391.926440][ T3748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.935694][ T3752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.064082][ T7520] loop3: detected capacity change from 0 to 128 [ 392.071134][ T23] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 392.200786][ T7520] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 392.983176][ T7523] loop2: detected capacity change from 0 to 256 [ 393.046288][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.094405][ T7523] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 393.132378][ T7523] exFAT-fs (loop2): hint_cluster is invalid (17) [ 393.174978][ T26] kauditd_printk_skb: 80 callbacks suppressed [ 393.174994][ T26] audit: type=1800 audit(1726810878.963:957): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.931" name="file1" dev="loop2" ino=1048643 res=0 errno=0 [ 393.252572][ T5651] sysv_free_block: trying to free block not in datazone [ 393.282996][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 393.300017][ T5651] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 393.312794][ T3748] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 393.402964][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.452424][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.502778][ T23] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 393.542404][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.574627][ T23] usb 1-1: config 0 descriptor?? [ 393.616706][ T7528] loop3: detected capacity change from 0 to 4096 [ 393.690666][ T7512] loop4: detected capacity change from 0 to 40427 [ 393.732951][ T3748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 393.750618][ T3748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 393.771886][ T7512] F2FS-fs (loop4): invalid crc value [ 393.779428][ T3748] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 393.795136][ T3748] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 393.805190][ T3748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.816097][ T7515] input input46: cannot allocate more than FF_MAX_EFFECTS effects [ 393.826653][ T3748] usb 2-1: config 0 descriptor?? [ 393.836667][ T7528] ntfs: volume version 3.1. [ 393.843931][ T7512] F2FS-fs (loop4): Found nat_bits in checkpoint [ 393.913028][ T7524] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 394.014061][ T7512] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 394.113815][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.130508][ T7512] F2FS-fs (loop4): Corrupted max_depth of 3: 4294967295 [ 394.326452][ T7530] loop2: detected capacity change from 0 to 32768 [ 394.355541][ T7524] udc-core: couldn't find an available UDC or it's busy [ 394.374619][ T7524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 394.407172][ T3748] aureal 0003:0755:2626.000E: unknown main item tag 0x6 [ 394.442899][ T7530] ERROR: (device loop2): diWrite: ixpxd invalid [ 394.442899][ T7530] [ 394.451560][ T3748] aureal 0003:0755:2626.000E: report_id 29495 is invalid [ 394.471806][ T3748] aureal 0003:0755:2626.000E: item 0 2 1 8 parsing failed [ 394.482997][ T7530] ERROR: (device loop2): remounting filesystem as read-only [ 394.503075][ T3748] aureal: probe of 0003:0755:2626.000E failed with error -22 [ 394.532756][ T7530] ERROR: (device loop2): txCommit: [ 394.532756][ T7530] [ 394.994126][ T3754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.047219][ T7537] loop4: detected capacity change from 0 to 4096 [ 395.139548][ T7540] loop0: detected capacity change from 0 to 2048 [ 395.146651][ T23] usbhid 1-1:0.0: can't add hid device: -71 [ 395.154450][ T23] usbhid: probe of 1-1:0.0 failed with error -71 [ 395.219444][ T23] usb 1-1: USB disconnect, device number 27 [ 395.336482][ T7540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.404756][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.503947][ T7537] ntfs: volume version 3.1. [ 395.768908][ T7543] loop2: detected capacity change from 0 to 512 [ 395.850783][ T7543] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 395.850783][ T7543] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 395.850783][ T7543] [ 395.920292][ T7543] EXT4-fs (loop2): Test dummy encryption mode enabled [ 395.967389][ T7543] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.937: inline data xattr refers to an external xattr inode [ 396.050114][ T7543] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.937: couldn't read orphan inode 12 (err -117) [ 396.101293][ T7543] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,noacl,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 396.102767][ T23] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 396.333618][ T3754] usb 2-1: USB disconnect, device number 44 [ 397.170302][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.376817][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 398.290406][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.362000][ T7570] loop0: detected capacity change from 0 to 8 [ 398.382890][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.493325][ T7572] FAULT_INJECTION: forcing a failure. [ 398.493325][ T7572] name failslab, interval 1, probability 0, space 0, times 0 [ 398.523095][ T23] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 398.529019][ T3752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.564847][ T23] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 398.585101][ T7572] CPU: 1 PID: 7572 Comm: syz.2.946 Not tainted 5.15.167-syzkaller #0 [ 398.593222][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 398.603289][ T7572] Call Trace: [ 398.606588][ T7572] [ 398.609540][ T7572] dump_stack_lvl+0x1e3/0x2d0 [ 398.614250][ T7572] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 398.619912][ T7572] ? panic+0x860/0x860 [ 398.624021][ T7572] ? __might_sleep+0xc0/0xc0 [ 398.628630][ T7572] ? __kmalloc_node+0x199/0x390 [ 398.633502][ T7572] should_fail+0x38a/0x4c0 [ 398.637938][ T7572] should_failslab+0x5/0x20 [ 398.642457][ T7572] slab_pre_alloc_hook+0x53/0xc0 [ 398.647410][ T7572] __kmalloc+0x6e/0x300 [ 398.651582][ T7572] ? kdf_alloc+0xa2/0x170 [ 398.655942][ T7572] kdf_alloc+0xa2/0x170 [ 398.660120][ T7572] __keyctl_dh_compute+0x529/0xf10 [ 398.665264][ T7572] ? keyctl_get_persistent+0x780/0x780 [ 398.670762][ T7572] ? __might_fault+0xb8/0x110 [ 398.675476][ T7572] ? __might_fault+0xb4/0x110 [ 398.680181][ T7572] keyctl_dh_compute+0x103/0x150 [ 398.685139][ T7572] ? keyctl_dh_compute_kdf+0x640/0x640 [ 398.690629][ T7572] __se_sys_keyctl+0x5e9/0x9a0 [ 398.695421][ T7572] ? __x64_sys_keyctl+0xc0/0xc0 [ 398.700294][ T7572] ? read_lock_is_recursive+0x10/0x10 [ 398.705686][ T7572] ? __context_tracking_exit+0x4c/0x80 [ 398.711169][ T7572] ? __lock_acquire+0x1ff0/0x1ff0 [ 398.716222][ T7572] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 398.722229][ T7572] ? print_irqtrace_events+0x210/0x210 [ 398.727707][ T7572] ? vtime_user_exit+0x2d1/0x400 [ 398.732676][ T7572] ? syscall_enter_from_user_mode+0x2e/0x240 [ 398.738703][ T7572] ? lockdep_hardirqs_on+0x94/0x130 [ 398.744011][ T7572] ? __x64_sys_keyctl+0x1c/0xc0 [ 398.748885][ T7572] do_syscall_64+0x3b/0xb0 [ 398.753313][ T7572] ? clear_bhb_loop+0x15/0x70 [ 398.758002][ T7572] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 398.763913][ T7572] RIP: 0033:0x7f85cbed1ef9 [ 398.768351][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.788060][ T7572] RSP: 002b:00007f85ca34a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 398.796502][ T7572] RAX: ffffffffffffffda RBX: 00007f85cc089f80 RCX: 00007f85cbed1ef9 [ 398.804495][ T7572] RDX: 0000000020001400 RSI: 0000000020000000 RDI: 0000000000000017 [ 398.812483][ T7572] RBP: 00007f85ca34a090 R08: 0000000020000140 R09: 0000000000000000 [ 398.820472][ T7572] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 398.828581][ T7572] R13: 0000000000000000 R14: 00007f85cc089f80 R15: 00007ffe77c6b6c8 [ 398.836594][ T7572] [ 398.893735][ T23] usb 4-1: Manufacturer: syz [ 398.913902][ T23] usb 4-1: config 0 descriptor?? [ 398.941799][ T7577] loop3: detected capacity change from 0 to 512 [ 398.950757][ T7578] loop1: detected capacity change from 0 to 16 [ 399.035570][ T23] usb 4-1: can't set config #0, error -71 [ 399.194345][ T23] usb 4-1: USB disconnect, device number 30 [ 399.249715][ T7578] erofs: (device loop1): mounted with root inode @ nid 36. [ 399.262260][ T7577] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 399.407616][ T7580] loop2: detected capacity change from 0 to 2048 [ 399.433368][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.448925][ T7577] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 399.483379][ T7577] EXT4-fs (loop3): 1 truncate cleaned up [ 399.489246][ T7577] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 399.521121][ T7580] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.619334][ T26] audit: type=1326 audit(1726810885.403:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623a748ef9 code=0x7ffc0000 [ 399.682665][ T26] audit: type=1326 audit(1726810885.433:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f623a748ef9 code=0x7ffc0000 [ 399.762956][ T26] audit: type=1326 audit(1726810885.433:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623a748ef9 code=0x7ffc0000 [ 399.839419][ T26] audit: type=1326 audit(1726810885.433:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f623a748ef9 code=0x7ffc0000 [ 399.863696][ T26] audit: type=1326 audit(1726810885.433:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623a748ef9 code=0x7ffc0000 [ 399.906469][ T26] audit: type=1326 audit(1726810885.433:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f623a748ef9 code=0x7ffc0000 [ 399.949291][ T26] audit: type=1326 audit(1726810885.433:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623a748ef9 code=0x7ffc0000 [ 399.999729][ T7597] loop3: detected capacity change from 0 to 4096 [ 400.017465][ T26] audit: type=1326 audit(1726810885.433:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f623a748ef9 code=0x7ffc0000 [ 400.045448][ T26] audit: type=1326 audit(1726810885.433:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f623a748ef9 code=0x7ffc0000 [ 400.068784][ T26] audit: type=1326 audit(1726810885.433:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7589 comm="syz.4.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f623a748ef9 code=0x7ffc0000 [ 400.107039][ T7597] ntfs: volume version 3.1. [ 400.458251][ T7601] loop3: detected capacity change from 0 to 2048 [ 400.503899][ T7592] loop4: detected capacity change from 0 to 32768 [ 400.513961][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.606537][ T7603] loop2: detected capacity change from 0 to 128 [ 400.686923][ T7603] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 401.384198][ T7601] NILFS (loop3): invalid segment: Inconsistency found [ 401.403150][ T3649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.461582][ T7601] NILFS (loop3): trying rollback from an earlier position [ 401.553349][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.574271][ T7601] NILFS (loop3): recovery complete [ 401.581557][ T7592] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 401.612996][ T3752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.733470][ T7608] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.764730][ T4430] sysv_free_block: trying to free block not in datazone [ 401.777135][ T7592] (syz.4.952,7592,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value [ 401.796648][ T4430] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 401.822285][ T7607] loop1: detected capacity change from 0 to 4096 [ 402.014078][ T5053] ocfs2: Unmounting device (7,4) on (node local) [ 402.105874][ T7613] loop2: detected capacity change from 0 to 2048 [ 402.117509][ T7607] loop1: detected capacity change from 0 to 4096 [ 402.174084][ T7613] UDF-fs: bad mount option "gid=00000000000000000000ÿÿÿÿÿÿÿÿ" or missing value [ 402.412863][ T4656] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 402.549388][ T7607] ntfs: volume version 3.1. [ 402.595438][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.599003][ T3649] hid (null): global environment stack underflow [ 402.672997][ T4656] usb 4-1: Using ep0 maxpacket: 16 [ 402.794316][ T4656] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.883932][ T4656] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 402.886186][ T3649] hid-generic 0003:0004:0000.000F: global environment stack underflow [ 402.901537][ T4656] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 402.910541][ T4656] usb 4-1: Manufacturer: syz [ 402.934082][ T4656] usb 4-1: config 0 descriptor?? [ 402.981201][ T3649] hid-generic 0003:0004:0000.000F: item 0 4 1 11 parsing failed [ 402.995468][ T3649] hid-generic: probe of 0003:0004:0000.000F failed with error -22 [ 403.179092][ T4650] usb 4-1: USB disconnect, device number 31 [ 403.204368][ T7631] loop2: detected capacity change from 0 to 2048 [ 403.269245][ T7631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.344549][ T3649] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 403.435641][ T7624] loop4: detected capacity change from 0 to 40427 [ 403.486657][ T7624] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 403.501895][ T7624] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 403.519632][ T7624] F2FS-fs (loop4): Found nat_bits in checkpoint [ 403.561778][ T7624] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 403.569394][ T7624] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 403.581626][ T7624] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 403.592426][ T7624] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 403.601835][ T7624] mmap: syz.4.963 (7624): VmData 37474304 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 403.602720][ T3649] usb 2-1: Using ep0 maxpacket: 16 [ 403.638883][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.782920][ T3649] usb 2-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 403.963202][ T3649] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 404.207952][ T7648] loop3: detected capacity change from 0 to 512 [ 404.300405][ T7649] netlink: 32 bytes leftover after parsing attributes in process `syz.2.970'. [ 404.802932][ T3649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.899269][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.957939][ T7648] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 405.153620][ T7648] EXT4-fs (loop3): 1 orphan inode deleted [ 405.159509][ T7648] EXT4-fs (loop3): 1 truncate cleaned up [ 405.165685][ T7648] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 405.441934][ T3649] usb 2-1: Product: syz [ 405.446221][ T3649] usb 2-1: Manufacturer: syz [ 405.450836][ T3649] usb 2-1: SerialNumber: syz [ 405.457359][ T3649] usb 2-1: config 0 descriptor?? [ 405.566019][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.585674][ T3649] usb 2-1: can't set config #0, error -71 [ 405.593765][ T3649] usb 2-1: USB disconnect, device number 45 [ 405.727701][ T7657] loop1: detected capacity change from 0 to 512 [ 405.784543][ T7660] loop3: detected capacity change from 0 to 512 [ 405.849121][ T7657] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 405.878072][ T7660] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 405.930046][ T7657] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 405.952843][ T4650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.961734][ T7657] EXT4-fs (loop1): 1 truncate cleaned up [ 405.980852][ T7657] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 406.005771][ T7660] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 406.070376][ T7660] EXT4-fs (loop3): 1 truncate cleaned up [ 406.076700][ T7660] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 407.456975][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.506071][ T13] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 407.578974][ T7680] loop3: detected capacity change from 0 to 2048 [ 407.604585][ T3649] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 407.650992][ T7686] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 407.680002][ T7680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.763525][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 407.792376][ T7689] loop1: detected capacity change from 0 to 1799 [ 407.882976][ T3649] usb 5-1: Using ep0 maxpacket: 16 [ 407.902983][ T13] usb 3-1: config 0 interface 0 altsetting 102 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.914178][ T13] usb 3-1: config 0 interface 0 altsetting 102 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.924465][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.931369][ T13] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 407.955535][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.965720][ T13] usb 3-1: config 0 descriptor?? [ 407.992739][ T4656] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 408.013006][ T3649] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.031608][ T3649] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.042928][ T4650] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 408.147792][ T3649] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 408.156887][ T3649] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 408.169633][ T3649] usb 5-1: Manufacturer: syz [ 408.178512][ T3649] usb 5-1: config 0 descriptor?? [ 408.182795][ T4656] usb 4-1: device descriptor read/64, error -71 [ 408.282839][ T4650] usb 2-1: Using ep0 maxpacket: 8 [ 408.438053][ T6907] usb 5-1: USB disconnect, device number 43 [ 408.462943][ T4656] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 408.513317][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.562897][ T4650] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 408.572104][ T4650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.582960][ T4650] usb 2-1: Product: syz [ 408.587167][ T4650] usb 2-1: Manufacturer: syz [ 408.591749][ T4650] usb 2-1: SerialNumber: syz [ 408.600238][ T4650] usb 2-1: config 0 descriptor?? [ 408.606172][ T3754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.652796][ T4656] usb 4-1: device descriptor read/64, error -71 [ 408.695612][ T7670] loop2: detected capacity change from 0 to 4096 [ 408.772960][ T4656] usb usb4-port1: attempt power cycle [ 408.846663][ T7690] udc-core: couldn't find an available UDC or it's busy [ 408.863203][ T7690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 408.882789][ T4650] usb read operation failed. (-32) [ 408.912953][ T13] usb 3-1: string descriptor 0 read error: -71 [ 408.958436][ T13] uclogic 0003:5543:004D.0010: failed retrieving string descriptor #200: -71 [ 408.968597][ T13] uclogic 0003:5543:004D.0010: failed retrieving pen parameters: -71 [ 408.994953][ T13] uclogic 0003:5543:004D.0010: failed probing pen v2 parameters: -71 [ 409.003579][ T13] uclogic 0003:5543:004D.0010: failed probing parameters: -71 [ 409.011088][ T13] uclogic: probe of 0003:5543:004D.0010 failed with error -71 [ 409.021083][ T13] usb 3-1: USB disconnect, device number 26 [ 409.093325][ T7691] iso9660: Corrupted directory entry in block 298 of inode 1920 [ 409.122883][ T4650] usb write operation failed. (-71) [ 409.143765][ T4650] usb write operation failed. (-71) [ 409.163011][ T4650] usb write operation failed. (-71) [ 409.168303][ T4650] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 409.182749][ T4656] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 409.202165][ T4650] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 409.212114][ T4650] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 409.272924][ T4656] usb 4-1: device descriptor read/8, error -71 [ 409.362824][ T3754] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 409.510903][ T7700] FAULT_INJECTION: forcing a failure. [ 409.510903][ T7700] name failslab, interval 1, probability 0, space 0, times 0 [ 409.536179][ T7700] CPU: 0 PID: 7700 Comm: syz.2.988 Not tainted 5.15.167-syzkaller #0 [ 409.542851][ T4656] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 409.544301][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 409.544318][ T7700] Call Trace: [ 409.559967][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.561957][ T7700] [ 409.576253][ T7700] dump_stack_lvl+0x1e3/0x2d0 [ 409.580973][ T7700] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 409.586611][ T7700] ? panic+0x860/0x860 [ 409.590716][ T7700] ? __might_sleep+0xc0/0xc0 [ 409.595351][ T7700] ? netlink_insert+0xcac/0x1280 [ 409.600395][ T7700] should_fail+0x38a/0x4c0 [ 409.604844][ T7700] should_failslab+0x5/0x20 [ 409.609375][ T7700] slab_pre_alloc_hook+0x53/0xc0 [ 409.614353][ T7700] kmem_cache_alloc_node+0x49/0x2c0 [ 409.619580][ T7700] ? __alloc_skb+0xdd/0x590 [ 409.624225][ T7700] __alloc_skb+0xdd/0x590 [ 409.628559][ T7700] netlink_sendmsg+0x6f8/0xd60 [ 409.633426][ T7700] ? netlink_getsockopt+0x5b0/0x5b0 [ 409.638653][ T7700] ? aa_sock_msg_perm+0x91/0x150 [ 409.642990][ T4656] usb 4-1: device descriptor read/8, error -71 [ 409.643615][ T7700] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 409.655035][ T7700] ? security_socket_sendmsg+0x7d/0xa0 [ 409.660514][ T7700] ? netlink_getsockopt+0x5b0/0x5b0 [ 409.665728][ T7700] ____sys_sendmsg+0x59e/0x8f0 [ 409.670511][ T7700] ? iovec_from_user+0x300/0x390 [ 409.675460][ T7700] ? __sys_sendmsg_sock+0x30/0x30 [ 409.680521][ T7700] ___sys_sendmsg+0x252/0x2e0 [ 409.685210][ T7700] ? __sys_sendmsg+0x260/0x260 [ 409.690105][ T7700] ? __fdget+0x191/0x220 [ 409.694365][ T7700] __se_sys_sendmsg+0x19a/0x260 [ 409.699248][ T7700] ? __x64_sys_sendmsg+0x80/0x80 [ 409.704202][ T7700] ? syscall_enter_from_user_mode+0x2e/0x240 [ 409.710197][ T7700] ? lockdep_hardirqs_on+0x94/0x130 [ 409.715400][ T7700] ? syscall_enter_from_user_mode+0x2e/0x240 [ 409.721433][ T7700] do_syscall_64+0x3b/0xb0 [ 409.725865][ T7700] ? clear_bhb_loop+0x15/0x70 [ 409.730535][ T7700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 409.736435][ T7700] RIP: 0033:0x7f85cbed1ef9 [ 409.740889][ T7700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.760568][ T7700] RSP: 002b:00007f85ca34a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.765371][ T4656] usb usb4-port1: unable to enumerate USB device [ 409.769004][ T7700] RAX: ffffffffffffffda RBX: 00007f85cc089f80 RCX: 00007f85cbed1ef9 [ 409.769026][ T7700] RDX: 0000000000000004 RSI: 0000000020000100 RDI: 0000000000000007 [ 409.769040][ T7700] RBP: 00007f85ca34a090 R08: 0000000000000000 R09: 0000000000000000 [ 409.769055][ T7700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.769068][ T7700] R13: 0000000000000000 R14: 00007f85cc089f80 R15: 00007ffe77c6b6c8 [ 409.769098][ T7700] [ 409.897290][ T6431] device syz_tun left promiscuous mode [ 409.958979][ T7706] netlink: 'syz.1.989': attribute type 29 has an invalid length. [ 409.991878][ T7706] netlink: 'syz.1.989': attribute type 29 has an invalid length. [ 410.006051][ T7708] netlink: 'syz.2.990': attribute type 29 has an invalid length. [ 410.015005][ T7709] netlink: 'syz.1.989': attribute type 29 has an invalid length. [ 410.026659][ T7706] netlink: 'syz.1.989': attribute type 29 has an invalid length. [ 410.036895][ T7708] netlink: 'syz.2.990': attribute type 29 has an invalid length. [ 410.049765][ T7706] netlink: 'syz.1.989': attribute type 29 has an invalid length. [ 410.059138][ T3754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.075381][ T7708] netlink: 'syz.2.990': attribute type 29 has an invalid length. [ 410.082691][ T3754] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 410.096273][ T3754] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 410.128316][ T442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.141112][ T3754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.161046][ T3754] usb 5-1: config 0 descriptor?? [ 410.240306][ T442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.344065][ T7702] chnl_net:caif_netlink_parms(): no params data found [ 410.422218][ T442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.570902][ T442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.593153][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.632405][ T7739] netlink: 'syz.2.1002': attribute type 29 has an invalid length. [ 410.684355][ T7742] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1003'. [ 410.703988][ T7742] netlink: 'syz.3.1003': attribute type 8 has an invalid length. [ 410.804262][ T7702] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.819872][ T3754] usbhid 5-1:0.0: can't add hid device: -71 [ 410.841976][ T7702] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.846634][ T3754] usbhid: probe of 5-1:0.0 failed with error -71 [ 410.874019][ T3754] usb 5-1: USB disconnect, device number 44 [ 410.889782][ T7702] device bridge_slave_0 entered promiscuous mode [ 410.921325][ T7702] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.953846][ T7702] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.962122][ T7702] device bridge_slave_1 entered promiscuous mode [ 411.009898][ T3649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.167507][ T7702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.230721][ T7702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.358083][ T7772] process 'syz.2.1017' launched './file0' with NULL argv: empty string added [ 411.486024][ T7702] team0: Port device team_slave_0 added [ 411.546355][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 411.546370][ T26] audit: type=1326 audit(1726810897.333:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.4.1019" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f623a748ef9 code=0x0 [ 411.633571][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.643660][ T3649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.793603][ T6907] Bluetooth: hci5: command 0x0409 tx timeout [ 411.814803][ T7702] team0: Port device team_slave_1 added [ 411.905202][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.920443][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.981366][ T7702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.004992][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.019891][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.056814][ T7702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.173210][ T7702] device hsr_slave_0 entered promiscuous mode [ 412.183384][ T7702] device hsr_slave_1 entered promiscuous mode [ 412.190342][ T7702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.198804][ T7702] Cannot create hsr debugfs directory [ 412.662845][ T6907] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 412.673296][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.726987][ T7804] chnl_net:caif_netlink_parms(): no params data found [ 412.872690][ T3748] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 412.884028][ T442] device batadv_slave_0 left promiscuous mode [ 412.901403][ T442] device hsr_slave_0 left promiscuous mode [ 412.922736][ T6907] usb 5-1: Using ep0 maxpacket: 16 [ 412.928687][ T442] device hsr_slave_1 left promiscuous mode [ 412.936456][ T442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.944118][ T442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.952331][ T442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.962025][ T442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.970204][ T442] device bridge_slave_1 left promiscuous mode [ 412.976889][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.988233][ T442] device bridge_slave_0 left promiscuous mode [ 413.002911][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.020469][ T442] device veth1_macvtap left promiscuous mode [ 413.033709][ T442] device veth0_macvtap left promiscuous mode [ 413.039918][ T442] device veth1_vlan left promiscuous mode [ 413.052904][ T442] device veth0_vlan left promiscuous mode [ 413.082947][ T6907] usb 5-1: unable to get BOS descriptor or descriptor too short [ 413.172850][ T6907] usb 5-1: config 8 has an invalid interface number: 249 but max is 0 [ 413.190666][ T6907] usb 5-1: config 8 has no interface number 0 [ 413.197492][ T6907] usb 5-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 413.218234][ T6907] usb 5-1: config 8 interface 249 has no altsetting 0 [ 413.258946][ T442] team0 (unregistering): Port device team_slave_1 removed [ 413.273940][ T442] team0 (unregistering): Port device team_slave_0 removed [ 413.289246][ T442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.304502][ T442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.383006][ T6907] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 413.392105][ T6907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.392994][ T442] bond0 (unregistering): Released all slaves [ 413.401213][ T6907] usb 5-1: Product: syz [ 413.410644][ T6907] usb 5-1: Manufacturer: syz [ 413.415627][ T6907] usb 5-1: SerialNumber: syz [ 413.502893][ T3748] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 413.512213][ T3748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.520648][ T3748] usb 3-1: Product: syz [ 413.524963][ T3748] usb 3-1: Manufacturer: syz [ 413.529660][ T3748] usb 3-1: SerialNumber: syz [ 413.537490][ T3748] usb 3-1: config 0 descriptor?? [ 413.595218][ T3748] ch341 3-1:0.0: ch341-uart converter detected [ 413.618402][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.626189][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.635685][ T7804] device bridge_slave_0 entered promiscuous mode [ 413.660924][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.696329][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.736128][ T7804] device bridge_slave_1 entered promiscuous mode [ 413.743655][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.778015][ T7804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.783481][ T6907] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 413.803106][ T3748] usb 3-1: failed to receive control message: -71 [ 413.809713][ T3748] ch341-uart: probe of ttyUSB0 failed with error -71 [ 413.854893][ T3748] usb 3-1: USB disconnect, device number 27 [ 413.867844][ T7804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.873296][ T4653] Bluetooth: hci5: command 0x041b tx timeout [ 413.885002][ T3748] ch341 3-1:0.0: device disconnected [ 413.899698][ T6907] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 413.932942][ T6907] dib0700: firmware download failed at 7 with -71 [ 413.952308][ T6907] usb 5-1: USB disconnect, device number 45 [ 414.007775][ T7804] team0: Port device team_slave_0 added [ 414.014872][ T7702] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.042135][ T7804] team0: Port device team_slave_1 added [ 414.049048][ T7702] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.092139][ T7702] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 414.112221][ T7702] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.136677][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.143947][ T6908] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 414.153547][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.180424][ T7804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.222765][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.240043][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.272690][ T6907] Bluetooth: hci1: command 0x0409 tx timeout [ 414.302700][ T7804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.392749][ T6908] usb 4-1: Using ep0 maxpacket: 8 [ 414.476294][ T7804] device hsr_slave_0 entered promiscuous mode [ 414.514344][ T6908] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 138, changing to 11 [ 414.533350][ T6908] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 414.570391][ T6908] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 414.594548][ T7804] device hsr_slave_1 entered promiscuous mode [ 414.616038][ T7804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.632939][ T7804] Cannot create hsr debugfs directory [ 414.673859][ T3748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.753022][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.761809][ T6908] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.781237][ T6908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.800179][ T6908] usb 4-1: Product: syz [ 414.810345][ T6908] usb 4-1: Manufacturer: syz [ 414.816902][ T7871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.822869][ T6908] usb 4-1: SerialNumber: syz [ 414.826511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.895516][ T7873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.934913][ T7873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.031975][ T7702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.092257][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 415.114502][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 415.152065][ T7702] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.162994][ T6908] cdc_ncm 4-1:1.0: bind() failure [ 415.187262][ T6908] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 415.187611][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 415.204426][ T6908] cdc_ncm 4-1:1.1: bind() failure [ 415.212755][ T3748] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 415.224277][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 415.231584][ T6908] usb 4-1: USB disconnect, device number 36 [ 415.276642][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.283852][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.356979][ T7804] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.391094][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 415.404112][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 415.424229][ T3748] usb 5-1: device descriptor read/64, error -71 [ 415.440641][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 415.463628][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.470840][ T4320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.501900][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 415.531536][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 415.582108][ T7804] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.671185][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 415.702647][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 415.712949][ T3748] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 415.732297][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 415.767595][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 415.793546][ T6907] net_ratelimit: 4 callbacks suppressed [ 415.793563][ T6907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.798096][ T3584] Bluetooth: hci2: unknown advertising packet type: 0x07 [ 415.831656][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 415.834222][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 415.849624][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 415.850350][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 415.853975][ T7702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 415.886839][ T7804] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.902782][ T3748] usb 5-1: device descriptor read/64, error -71 [ 415.904749][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 415.953237][ T6908] Bluetooth: hci5: command 0x040f tx timeout [ 416.032945][ T3748] usb usb5-port1: attempt power cycle [ 416.045196][ T7804] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.093226][ T3584] Bluetooth: hci2: unknown advertising packet type: 0x07 [ 416.105236][ T7903] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.259053][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.283348][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.293215][ T7702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.314687][ T7804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 416.352851][ T4653] Bluetooth: hci1: command 0x041b tx timeout [ 416.389999][ T7804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 416.406658][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 416.432836][ T6908] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 416.448661][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 416.463074][ T3748] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 416.532269][ T7804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 416.556181][ T7804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 416.580891][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 416.593129][ T3748] usb 5-1: device descriptor read/8, error -71 [ 416.609770][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 416.625959][ T7702] device veth0_vlan entered promiscuous mode [ 416.649778][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 416.658771][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 416.685601][ T7702] device veth1_vlan entered promiscuous mode [ 416.725306][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 416.831200][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 416.840130][ T6908] usb 3-1: No LPM exit latency info found, disabling LPM. [ 416.862996][ T6907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.873043][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 416.884495][ T7702] device veth0_macvtap entered promiscuous mode [ 416.901120][ T3748] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 416.915286][ T7702] device veth1_macvtap entered promiscuous mode [ 416.927302][ T7804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.944108][ T6908] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x1 is Bulk; changing to Interrupt [ 416.959027][ T7702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.970436][ T7702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.981651][ T7702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.983183][ T6908] usb 3-1: config 1 interface 0 has no altsetting 0 [ 417.010157][ T7702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.023846][ T3748] usb 5-1: device descriptor read/8, error -71 [ 417.029132][ T7702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.067856][ T7702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.080609][ T7702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.100652][ T7702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.128192][ T7702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.139102][ T7702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.151007][ T7702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.153020][ T3748] usb usb5-port1: unable to enumerate USB device [ 417.161793][ T7702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.182765][ T7702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.202704][ T7702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.229885][ T7702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.250121][ T7702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.272729][ T7702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.282563][ T7702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.294665][ T7702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.311861][ T7702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.319845][ T7915] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 417.327090][ T7915] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 417.341297][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 417.352420][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 417.360933][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 417.373278][ T6908] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 417.383649][ T7915] vhci_hcd vhci_hcd.0: Device attached [ 417.389861][ T6908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.398904][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 417.407448][ T6908] usb 3-1: Product: à¡  [ 417.414574][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 417.420614][ T7917] vhci_hcd: connection closed [ 417.422689][ T6908] usb 3-1: Manufacturer: á°‰ [ 417.432142][ T144] vhci_hcd: stop threads [ 417.433238][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 417.450050][ T144] vhci_hcd: release socket [ 417.456801][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 417.464955][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.465942][ T144] vhci_hcd: disconnect device [ 417.477597][ T7906] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 417.488603][ T7804] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.503681][ T7702] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.512437][ T7702] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.532695][ T7702] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.541700][ T7702] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.582893][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 417.592434][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 417.602062][ T3769] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.609189][ T3769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.618006][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 417.627289][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.636267][ T3769] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.643421][ T3769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.651463][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 417.660705][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 417.680144][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 417.723471][ T3748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.731378][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 417.749393][ T7875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.771880][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 417.779986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.807024][ T7875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.807600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.808206][ T7875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.808623][ T7875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.833798][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 417.834685][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 417.835469][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 417.877409][ T4653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.902361][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 417.903072][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 417.903520][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 417.903945][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.919375][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 417.990154][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.990228][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.992789][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 418.119854][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.176144][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.186212][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 418.193120][ T3616] Bluetooth: hci5: command 0x0419 tx timeout [ 418.200212][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.200386][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.227435][ T7804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.329036][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 418.329673][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 418.560769][ T3616] Bluetooth: hci1: command 0x040f tx timeout [ 418.601570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 418.602352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 418.603281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 418.603840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 418.605738][ T7804] device veth0_vlan entered promiscuous mode [ 418.611470][ T7804] device veth1_vlan entered promiscuous mode [ 418.681254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 418.681870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 418.682444][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 418.683194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 418.688013][ T7804] device veth0_macvtap entered promiscuous mode [ 418.697567][ T7804] device veth1_macvtap entered promiscuous mode [ 418.707867][ T7943] loop0: detected capacity change from 0 to 4096 [ 418.778778][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 418.779605][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 418.790899][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.790923][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.790936][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.790951][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.790967][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.790982][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.790997][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.791012][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.791026][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.791057][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.792562][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.827656][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 418.834732][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 418.836845][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.836866][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.836893][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.836908][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.836921][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.836936][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.836949][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.836963][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.836976][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.836991][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.837004][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.837019][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.838638][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.838904][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 418.840155][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 418.846176][ T7804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.891575][ T7943] ntfs: volume version 3.1. [ 418.915916][ T7804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.124222][ T7804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.124263][ T7804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.385060][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.411753][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.413815][ T6908] usb 3-1: USB disconnect, device number 28 [ 419.488386][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 419.529659][ T1202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.551477][ T1202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.596211][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 419.988297][ T7962] mmap: syz.2.1060 (7962) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 420.281769][ T442] device hsr_slave_0 left promiscuous mode [ 420.377492][ T7968] can: request_module (can-proto-0) failed. [ 420.398874][ T442] device hsr_slave_1 left promiscuous mode [ 420.410974][ T442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.430635][ T442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.458205][ T442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.465919][ T442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.485114][ T442] device veth1_macvtap left promiscuous mode [ 420.491324][ T442] device veth0_macvtap left promiscuous mode [ 420.499001][ T442] device veth1_vlan left promiscuous mode [ 420.518338][ T442] device veth0_vlan left promiscuous mode [ 420.554537][ T7974] usb usb8: usbfs: process 7974 (syz.4.1066) did not claim interface 0 before use [ 420.897596][ T3747] net_ratelimit: 167 callbacks suppressed [ 420.897617][ T3747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.336650][ T442] team0 (unregistering): Port device team_slave_1 removed [ 421.358099][ T6908] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 421.367437][ T4653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.387818][ T442] team0 (unregistering): Port device team_slave_0 removed [ 421.451339][ T442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.491462][ T442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.642942][ T6908] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 421.713048][ T442] bond0 (unregistering): Released all slaves [ 421.723152][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.740536][ T6908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 421.750046][ T6908] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 421.764898][ T6908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 421.779710][ T7972] validate_nla: 2 callbacks suppressed [ 421.779729][ T7972] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 421.827398][ T7972] team0: Port device netdevsim0 added [ 421.853667][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.873011][ T6908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 421.939205][ T6908] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 421.966159][ T6908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 422.052930][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.079663][ T6908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.112808][ T6908] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.125906][ T6908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 422.202920][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.223046][ T6908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.232009][ T6908] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.252866][ T3754] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 422.269927][ T6908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 422.398341][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.419837][ T6908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.447879][ T6908] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.487856][ T6908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 422.507402][ T6907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.591690][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.619659][ T6908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.650486][ T6908] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.673607][ T3754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.681338][ T6908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 422.722758][ T3754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.733129][ T3754] usb 3-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 422.742186][ T3754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.753138][ T3754] usb 3-1: config 0 descriptor?? [ 422.762845][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.792671][ T6908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.801600][ T6908] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.900585][ T6908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 422.913435][ T3649] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 423.012920][ T6908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.032700][ T6908] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 423.041663][ T6908] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 423.073365][ T6908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 423.142195][ T8001] chnl_net:caif_netlink_parms(): no params data found [ 423.192747][ T3649] usb 1-1: Using ep0 maxpacket: 16 [ 423.233307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.243223][ T6908] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 423.252297][ T6908] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 423.269235][ T3754] ntrig 0003:1B96:0012.0011: hidraw0: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.2-1/input0 [ 423.302736][ T6908] usb 4-1: Product: syz [ 423.306985][ T6908] usb 4-1: Manufacturer: syz [ 423.311628][ T6908] usb 4-1: SerialNumber: syz [ 423.372994][ T6908] usb 4-1: config 0 descriptor?? [ 423.389300][ T8001] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.397790][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.407368][ T8001] device bridge_slave_0 entered promiscuous mode [ 423.414737][ T6908] yurex 4-1:0.0: Could not find endpoints [ 423.416770][ T8001] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.428411][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.438403][ T8001] device bridge_slave_1 entered promiscuous mode [ 423.476444][ T3754] usb 3-1: USB disconnect, device number 29 [ 423.512991][ T3649] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 423.528453][ T3649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.555406][ T3649] usb 1-1: Product: syz [ 423.559832][ T3649] usb 1-1: Manufacturer: syz [ 423.567654][ T3649] usb 1-1: SerialNumber: syz [ 423.583296][ T3649] usb 1-1: config 0 descriptor?? [ 423.589875][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.616666][ T8001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.637945][ T3649] usb 1-1: selecting invalid altsetting 1 [ 423.649414][ T8001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.662709][ T3649] technisat-usb2: could not set alternate setting to 0 [ 423.723718][ T23] usb 4-1: USB disconnect, device number 37 [ 423.772193][ T8001] team0: Port device team_slave_0 added [ 423.801587][ T8001] team0: Port device team_slave_1 added [ 423.842711][ T3649] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 423.873383][ T3649] usb 1-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 423.886074][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.903523][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.910646][ T3649] usb 1-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 423.962818][ T8001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.005529][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.012514][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.026471][ T3754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.122642][ T8001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.254889][ T8001] device hsr_slave_0 entered promiscuous mode [ 424.299200][ T8001] device hsr_slave_1 entered promiscuous mode [ 424.332990][ T8001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.345039][ T8001] Cannot create hsr debugfs directory [ 424.592864][ T6908] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 424.602532][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.624015][ T8001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.743443][ T8001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.762783][ T3740] Bluetooth: hci1: command 0x0409 tx timeout [ 424.847658][ T8001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.934925][ T8001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.993070][ T4653] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 425.113017][ T6908] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 425.132347][ T6908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.149921][ T8001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 425.156960][ T6908] usb 4-1: Product: syz [ 425.161151][ T6908] usb 4-1: Manufacturer: syz [ 425.177192][ T6908] usb 4-1: SerialNumber: syz [ 425.192446][ T8001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 425.201066][ T6908] r8152-cfgselector 4-1: config 0 descriptor?? [ 425.211017][ T8001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 425.223997][ T8001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 425.232970][ T4653] usb 3-1: Using ep0 maxpacket: 32 [ 425.353112][ T4653] usb 3-1: config 0 has no interfaces? [ 425.383047][ T8001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.416016][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.442004][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.467908][ T6908] r8152-cfgselector 4-1: Unknown version 0x0000 [ 425.478821][ T8001] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.498303][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.508419][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.520060][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.527219][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.535429][ T4653] usb 3-1: New USB device found, idVendor=0cde, idProduct=001a, bcdDevice=21.32 [ 425.552403][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.569525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.579897][ T4653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.584933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.596053][ T4653] usb 3-1: Product: syz [ 425.596076][ T4653] usb 3-1: Manufacturer: syz [ 425.596094][ T4653] usb 3-1: SerialNumber: syz [ 425.613786][ T4653] usb 3-1: config 0 descriptor?? [ 425.628212][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.635525][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.643785][ T4645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.671437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 425.684303][ T6908] r8152-cfgselector 4-1: Unknown version 0x0000 [ 425.690797][ T6908] r8152-cfgselector 4-1: bad CDC descriptors [ 425.703867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 425.725820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 425.734134][ T6908] r8152-cfgselector 4-1: Unknown version 0x0000 [ 425.757739][ T6908] r8152-cfgselector 4-1: USB disconnect, device number 38 [ 425.778478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 425.787494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 425.797184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 425.806284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 425.818721][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 425.828638][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 425.857131][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 425.866277][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 425.878575][ T4656] usb 3-1: USB disconnect, device number 30 [ 425.887509][ T8001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 425.922925][ T4653] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 426.008371][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.017421][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.041231][ T8001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.064288][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 426.079509][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.109655][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 426.124441][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.136453][ T8001] device veth0_vlan entered promiscuous mode [ 426.150391][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 426.160074][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 426.172818][ T4653] usb 5-1: Using ep0 maxpacket: 16 [ 426.180678][ T8001] device veth1_vlan entered promiscuous mode [ 426.246203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 426.252146][ T8027] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1082'. [ 426.254947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 426.296257][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 426.302919][ T4653] usb 5-1: config 5 has an invalid interface number: 53 but max is 0 [ 426.312556][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.320823][ T4653] usb 5-1: config 5 has no interface number 0 [ 426.328671][ T4653] usb 5-1: config 5 interface 53 altsetting 7 has an invalid endpoint with address 0xEB, skipping [ 426.347352][ T4653] usb 5-1: config 5 interface 53 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 426.358526][ T4653] usb 5-1: config 5 interface 53 has no altsetting 0 [ 426.375381][ T8001] device veth0_macvtap entered promiscuous mode [ 426.387516][ T8001] device veth1_macvtap entered promiscuous mode [ 426.397359][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1083'. [ 426.417301][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.438814][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.459099][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.470351][ T4656] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 426.475982][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.488747][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.499678][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.509855][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.520587][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.536308][ T4653] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=f6.d7 [ 426.539885][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.556205][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.565907][ T4653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.568648][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.584132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 426.589992][ T4653] usb 5-1: Product: syz [ 426.593670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 426.603135][ T4653] usb 5-1: Manufacturer: syz [ 426.603159][ T4653] usb 5-1: SerialNumber: syz [ 426.622366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 426.631622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 426.643207][ T8021] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 426.650235][ T8021] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 426.665020][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.676650][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.685107][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.700177][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.710890][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.727351][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.739918][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.754320][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.772698][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.783312][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.793979][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.804295][ T8001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.815017][ T8001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.826723][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.842769][ T3740] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 426.842899][ T4656] usb 3-1: config index 0 descriptor too short (expected 441, got 18) [ 426.854287][ T3754] Bluetooth: hci1: command 0x041b tx timeout [ 426.859657][ T4656] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 426.865856][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 426.874846][ T4656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.902424][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 426.907140][ T4656] usb 3-1: config 0 descriptor?? [ 426.918439][ T8001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.928036][ T8001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.937391][ T8001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.947981][ T8001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.965327][ T4653] hdpvr 5-1:5.53: Could not find bulk-in endpoint [ 426.971810][ T4653] hdpvr: probe of 5-1:5.53 failed with error -12 [ 426.982451][ T4656] pwc: Askey VC010 type 2 USB webcam detected. [ 426.999570][ T4653] usb 5-1: USB disconnect, device number 50 [ 427.094180][ T3748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.113576][ T3740] usb 4-1: Using ep0 maxpacket: 16 [ 427.132543][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.142506][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.163029][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 427.184026][ T4656] pwc: send_video_command error -71 [ 427.199144][ T4656] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 427.208558][ T4656] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 427.215986][ T4320] device hsr_slave_0 left promiscuous mode [ 427.225511][ T4656] usb 3-1: USB disconnect, device number 31 [ 427.231909][ T4320] device hsr_slave_1 left promiscuous mode [ 427.243041][ T3740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7 [ 427.254265][ T3740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024 [ 427.267059][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.274911][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.283793][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.291243][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.299487][ T4320] device bridge_slave_1 left promiscuous mode [ 427.306133][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.315560][ T4320] device bridge_slave_0 left promiscuous mode [ 427.321744][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.336667][ T4320] device veth1_macvtap left promiscuous mode [ 427.343673][ T4320] device veth0_macvtap left promiscuous mode [ 427.349744][ T4320] device veth1_vlan left promiscuous mode [ 427.356231][ T4320] device veth0_vlan left promiscuous mode [ 427.453035][ T3740] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 427.472374][ T3740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.491935][ T3740] usb 4-1: Product: syz [ 427.497761][ T3740] usb 4-1: Manufacturer: syz [ 427.504390][ T3740] usb 4-1: SerialNumber: syz [ 427.522674][ T3740] usb 4-1: config 0 descriptor?? [ 427.676425][ T4320] team0 (unregistering): Port device team_slave_1 removed [ 427.692179][ T4320] team0 (unregistering): Port device team_slave_0 removed [ 427.707818][ T4320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.716741][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.732543][ T4320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.802851][ T4656] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 427.829628][ T8031] udc-core: couldn't find an available UDC or it's busy [ 427.837398][ T8031] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 427.850597][ T4320] bond0 (unregistering): Released all slaves [ 427.912755][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.921085][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.957832][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 428.172841][ T4656] usb 3-1: config index 0 descriptor too short (expected 441, got 18) [ 428.183366][ T8044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.191748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.201403][ T4656] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 428.211558][ T4656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.228393][ T4656] usb 3-1: config 0 descriptor?? [ 428.275456][ T4656] pwc: Askey VC010 type 2 USB webcam detected. [ 428.291397][ T8047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.310007][ T8047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.318633][ T8047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.330404][ T8047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.339362][ T8047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.388166][ T6907] usb 4-1: USB disconnect, device number 39 [ 428.455460][ T4656] pwc: send_video_command error -71 [ 428.465528][ T4656] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 428.488680][ T4656] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 428.521225][ T4656] usb 3-1: USB disconnect, device number 32 [ 428.662797][ T3748] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 429.012871][ T6907] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 429.083132][ T3748] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 429.102671][ T3748] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 429.243786][ T3748] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 429.262699][ T3748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 429.270803][ T3748] usb 5-1: SerialNumber: syz [ 429.323905][ T8049] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 429.382757][ T6907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.402680][ T6907] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 429.411760][ T6907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.449135][ T6907] usb 4-1: config 0 descriptor?? [ 429.495025][ T6907] pwc: Askey VC010 type 2 USB webcam detected. [ 429.570895][ T8049] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 429.712993][ T6907] pwc: send_video_command error -71 [ 429.718250][ T6907] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 429.732696][ T6907] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 429.752884][ T6907] usb 4-1: USB disconnect, device number 40 [ 430.049906][ T3748] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 430.302804][ T6907] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 430.672969][ T6907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.704593][ T6907] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 430.714205][ T4656] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 430.739414][ T6907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.761703][ T6907] usb 4-1: config 0 descriptor?? [ 430.825503][ T13] usb 5-1: USB disconnect, device number 51 [ 430.830154][ T6907] pwc: Askey VC010 type 2 USB webcam detected. [ 430.839731][ T13] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 430.962889][ T4656] usb 3-1: Using ep0 maxpacket: 32 [ 431.083005][ T4656] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 431.091420][ T4656] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 431.138169][ T4656] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 431.182821][ T4656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 431.192519][ T4656] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 431.234192][ T4656] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 431.252722][ T6907] pwc: recv_control_msg error -32 req 02 val 2b00 [ 431.292761][ T6907] pwc: recv_control_msg error -32 req 02 val 2700 [ 431.327668][ T4656] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 431.342742][ T6907] pwc: recv_control_msg error -32 req 02 val 2c00 [ 431.380895][ T4656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.389481][ T6907] pwc: recv_control_msg error -32 req 04 val 1000 [ 431.399763][ T8113] chnl_net:caif_netlink_parms(): no params data found [ 431.445102][ T6907] pwc: recv_control_msg error -32 req 04 val 1300 [ 431.493421][ T4656] usb 3-1: config 0 descriptor?? [ 431.503376][ T6907] pwc: recv_control_msg error -32 req 04 val 1400 [ 431.543422][ T6907] pwc: recv_control_msg error -32 req 02 val 2000 [ 431.583471][ T6907] pwc: recv_control_msg error -32 req 02 val 2100 [ 431.623256][ T6907] pwc: recv_control_msg error -32 req 04 val 1500 [ 431.672782][ T6907] pwc: recv_control_msg error -32 req 02 val 2500 [ 431.713073][ T6907] pwc: recv_control_msg error -32 req 02 val 2400 [ 431.721190][ T8113] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.755095][ T4656] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 431.762820][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.809239][ T8113] device bridge_slave_0 entered promiscuous mode [ 431.855273][ T8113] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.862382][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.904007][ T8113] device bridge_slave_1 entered promiscuous mode [ 431.953105][ T4656] net_ratelimit: 9 callbacks suppressed [ 431.953123][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.974385][ T6907] pwc: recv_control_msg error -71 req 02 val 2900 [ 432.012729][ T6907] pwc: recv_control_msg error -71 req 02 val 2800 [ 432.015581][ T3740] usb 3-1: USB disconnect, device number 33 [ 432.028104][ T8113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.042730][ T6907] pwc: recv_control_msg error -71 req 04 val 1100 [ 432.063069][ T6907] pwc: recv_control_msg error -71 req 04 val 1200 [ 432.067482][ T3740] usblp0: removed [ 432.077322][ T6907] pwc: Registered as video71. [ 432.095098][ T8113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.127375][ T6907] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input50 [ 432.208183][ T6907] usb 4-1: USB disconnect, device number 41 [ 432.295971][ T8113] team0: Port device team_slave_0 added [ 432.355446][ T8113] team0: Port device team_slave_1 added [ 432.379515][ T8113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.386598][ T8113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.413199][ T8113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.427517][ T8113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.434632][ T8113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.478372][ T8113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.667268][ T8113] device hsr_slave_0 entered promiscuous mode [ 432.682017][ T8113] device hsr_slave_1 entered promiscuous mode [ 432.695640][ T8113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.711483][ T8113] Cannot create hsr debugfs directory [ 432.912702][ T23] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 432.918472][ T8113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.931238][ T3740] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 433.001509][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.008006][ T3748] Bluetooth: hci1: command 0x0409 tx timeout [ 433.035243][ T8113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.109437][ T8113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.152773][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 433.178584][ T3748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.202828][ T3740] usb 3-1: Using ep0 maxpacket: 8 [ 433.210950][ T8113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.343091][ T3740] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 433.360981][ T3740] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.414219][ T3740] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 433.432807][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 433.441426][ T3740] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 433.445168][ T23] usb 4-1: no configurations [ 433.468490][ T8113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 433.482151][ T23] usb 4-1: can't read configurations, error -22 [ 433.483380][ T3740] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 433.511782][ T3740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.538566][ T8113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 433.555319][ T8113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 433.578480][ T8113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 433.591867][ T3740] usbtmc 3-1:16.0: bulk endpoints not found [ 433.772066][ T8113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.803724][ T26] audit: type=1326 audit(1726810919.593:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.2.1115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85cbed1ef9 code=0x0 [ 433.819373][ T8113] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.867009][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.878017][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.927728][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 433.961784][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.987182][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.994353][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.011780][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.033109][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.053071][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 434.062227][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 434.113067][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.120226][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.137800][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 434.152376][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.184075][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 434.214644][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.233553][ T3754] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 434.257325][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.289940][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.311658][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.340640][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 434.368163][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 434.414952][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 434.429711][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 434.456267][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 434.572979][ T3754] usb 5-1: too many configurations: 201, using maximum allowed: 8 [ 434.663294][ T3754] usb 5-1: config index 0 descriptor too short (expected 64945, got 72) [ 434.683166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.782876][ T3754] usb 5-1: config index 1 descriptor too short (expected 64945, got 72) [ 434.902985][ T3754] usb 5-1: config index 2 descriptor too short (expected 64945, got 72) [ 434.937247][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 434.945595][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 434.971274][ T8113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.012950][ T3754] usb 5-1: config index 3 descriptor too short (expected 64945, got 72) [ 435.074981][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.081349][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 435.101014][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 435.113501][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 435.122894][ T3754] usb 5-1: config index 4 descriptor too short (expected 64945, got 72) [ 435.199668][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 435.213184][ T3754] usb 5-1: config index 5 descriptor too short (expected 64945, got 72) [ 435.228622][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 435.309977][ T8113] device veth0_vlan entered promiscuous mode [ 435.333202][ T3754] usb 5-1: config index 6 descriptor too short (expected 64945, got 72) [ 435.406829][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 435.419335][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 435.443677][ T3754] usb 5-1: config index 7 descriptor too short (expected 64945, got 72) [ 435.502014][ T8113] device veth1_vlan entered promiscuous mode [ 435.683272][ T3754] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 435.782386][ T3754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.886276][ T3754] usb 5-1: Product: syz [ 435.890926][ T3754] usb 5-1: Manufacturer: syz [ 435.896435][ T3754] usb 5-1: SerialNumber: syz [ 435.914912][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 435.964992][ T3754] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 436.021963][ T8113] device veth0_macvtap entered promiscuous mode [ 436.043499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 436.090793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.113253][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.253395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 436.263597][ T3740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.668924][ T8113] device veth1_macvtap entered promiscuous mode [ 436.739428][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.760579][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.779187][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.790243][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.814849][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.825645][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.836124][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.846928][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.857265][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.867865][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.890727][ T8113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.903020][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.973202][ T13] usb 5-1: USB disconnect, device number 52 [ 436.987666][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.002988][ T3754] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 437.022013][ T13] usb 5-1: ath9k_htc: USB layer deinitialized [ 437.057758][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.100564][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.111670][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.152829][ T3747] Bluetooth: hci1: command 0x040f tx timeout [ 437.161168][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.186447][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.199727][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.338670][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.353770][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.366518][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.383113][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.395847][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.420401][ T8113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.459283][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 437.472520][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 437.510955][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 437.521237][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 437.539315][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 437.569090][ T8238] netlink: 'syz.3.1132': attribute type 6 has an invalid length. [ 437.605206][ T8113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.621705][ T8113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.632352][ T8113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.644977][ T3752] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 437.677025][ T3752] Bluetooth: hci5: Injecting HCI hardware error event [ 437.695435][ T8113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.733193][ T3584] Bluetooth: hci5: hardware error 0x00 [ 437.868177][ T4656] usb 3-1: USB disconnect, device number 34 [ 438.181839][ T5735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.192864][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.201073][ T5735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.300325][ T3675] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 438.385499][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 438.399482][ T8257] Cannot find set identified by id 0 to match [ 438.402868][ T4645] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 438.531521][ T3754] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 438.546146][ T3675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.580559][ T3675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.600273][ T3740] Bluetooth: hci1: command 0x0419 tx timeout [ 439.644399][ T3740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.656385][ T1202] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 439.772680][ T3754] usb 4-1: Using ep0 maxpacket: 8 [ 439.801395][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.809586][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.820090][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.826527][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.855105][ T4320] device hsr_slave_0 left promiscuous mode [ 439.864065][ T4320] device hsr_slave_1 left promiscuous mode [ 439.885670][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.910918][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.928227][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.939656][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.962172][ T4320] device bridge_slave_1 left promiscuous mode [ 439.978051][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.991742][ T4320] device bridge_slave_0 left promiscuous mode [ 440.004992][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.041894][ T4320] device veth1_macvtap left promiscuous mode [ 440.048795][ T4320] device veth0_macvtap left promiscuous mode [ 440.064007][ T4320] device veth1_vlan left promiscuous mode [ 440.072063][ T4320] device veth0_vlan left promiscuous mode [ 440.093682][ T3754] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 440.104425][ T3754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.113133][ T4645] usb 5-1: Using ep0 maxpacket: 8 [ 440.115313][ T3754] usb 4-1: Product: syz [ 440.124143][ T3754] usb 4-1: Manufacturer: syz [ 440.128985][ T3754] usb 4-1: SerialNumber: syz [ 440.144861][ T3754] usb 4-1: config 0 descriptor?? [ 440.473637][ T4645] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 440.487335][ T4645] usb 5-1: config 0 has no interface number 0 [ 440.497737][ T4645] usb 5-1: config 0 interface 191 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.662922][ T4645] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 440.686394][ T4645] usb 5-1: New USB device strings: Mfr=1, Product=226, SerialNumber=2 [ 440.696038][ T3754] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 440.713028][ T4320] team0 (unregistering): Port device team_slave_1 removed [ 440.736209][ T4645] usb 5-1: Product: syz [ 440.747411][ T4645] usb 5-1: Manufacturer: syz [ 440.752220][ T4645] usb 5-1: SerialNumber: syz [ 440.780346][ T4645] usb 5-1: config 0 descriptor?? [ 440.833115][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.845621][ T4645] em28xx 5-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 440.863966][ T4645] em28xx 5-1:0.191: Video interface 191 found: isoc [ 441.015458][ T4320] team0 (unregistering): Port device team_slave_0 removed [ 441.036437][ T4320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.051569][ T8249] udc-core: couldn't find an available UDC or it's busy [ 441.063084][ T8249] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 441.071020][ T4320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.182812][ T4645] em28xx 5-1:0.191: unknown em28xx chip ID (0) [ 441.206337][ T4320] bond0 (unregistering): Released all slaves [ 441.425768][ T8277] tipc: Started in network mode [ 441.430681][ T8277] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 441.438371][ T8277] tipc: Enabled bearer , priority 10 [ 441.448218][ T4645] em28xx 5-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 441.450585][ T8278] tipc: Resetting bearer [ 441.476883][ T4645] em28xx 5-1:0.191: board has no eeprom [ 441.843096][ T4645] em28xx 5-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 441.860898][ T4645] em28xx 5-1:0.191: analog set to isoc mode. [ 441.889030][ T4645] usb 5-1: USB disconnect, device number 53 [ 441.908831][ T4645] em28xx 5-1:0.191: Disconnecting em28xx [ 441.920087][ T4653] em28xx 5-1:0.191: Registering V4L2 extension [ 441.949055][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.034882][ T3740] Bluetooth: hci3: command 0x1407 tx timeout [ 442.101177][ T4653] em28xx 5-1:0.191: Config register raw data: 0xffffffed [ 442.107412][ T8278] tipc: Disabling bearer [ 442.142501][ T4653] em28xx 5-1:0.191: AC97 chip type couldn't be determined [ 442.163871][ T4653] em28xx 5-1:0.191: No AC97 audio processor [ 442.247535][ T4653] usb 5-1: Decoder not found [ 442.252188][ T4653] em28xx 5-1:0.191: failed to create media graph [ 442.265573][ T4653] em28xx 5-1:0.191: V4L2 device video71 deregistered [ 442.281165][ T4653] em28xx 5-1:0.191: Remote control support is not available for this card. [ 442.282256][ T8299] ================================================================== [ 442.291158][ T4645] em28xx 5-1:0.191: Closing input extension [ 442.298688][ T8299] BUG: KASAN: use-after-free in v4l2_fh_open+0xc7/0x430 [ 442.298726][ T8299] Read of size 8 at addr ffff88806265c900 by task v4l_id/8299 [ 442.298744][ T8299] [ 442.298751][ T8299] CPU: 0 PID: 8299 Comm: v4l_id Not tainted 5.15.167-syzkaller #0 [ 442.298771][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 442.298784][ T8299] Call Trace: [ 442.298794][ T8299] [ 442.298804][ T8299] dump_stack_lvl+0x1e3/0x2d0 [ 442.298840][ T8299] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 442.356292][ T8299] ? _printk+0xd1/0x120 [ 442.360463][ T8299] ? __wake_up_klogd+0xcc/0x100 [ 442.365420][ T8299] ? panic+0x860/0x860 [ 442.369488][ T8299] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 442.374960][ T8299] print_address_description+0x63/0x3b0 [ 442.380508][ T8299] ? v4l2_fh_open+0xc7/0x430 [ 442.385117][ T8299] kasan_report+0x16b/0x1c0 [ 442.389619][ T8299] ? v4l2_fh_open+0xc7/0x430 [ 442.394215][ T8299] v4l2_fh_open+0xc7/0x430 [ 442.398637][ T8299] em28xx_v4l2_open+0x15d/0xa10 [ 442.403590][ T8299] v4l2_open+0x228/0x360 [ 442.407864][ T8299] chrdev_open+0x54a/0x630 [ 442.412280][ T8299] ? cd_forget+0x160/0x160 [ 442.416699][ T8299] ? do_raw_spin_unlock+0x137/0x8b0 [ 442.421899][ T8299] ? fsnotify_perm+0x47b/0x590 [ 442.426668][ T8299] ? cd_forget+0x160/0x160 [ 442.431082][ T8299] do_dentry_open+0x807/0xfb0 [ 442.435771][ T8299] path_openat+0x2705/0x2f20 [ 442.440386][ T8299] ? do_filp_open+0x460/0x460 [ 442.445084][ T8299] do_filp_open+0x21c/0x460 [ 442.449591][ T8299] ? vfs_tmpfile+0x2e0/0x2e0 [ 442.454198][ T8299] ? _raw_spin_unlock+0x24/0x40 [ 442.459047][ T8299] ? alloc_fd+0x598/0x630 [ 442.463384][ T8299] do_sys_openat2+0x13b/0x4f0 [ 442.468067][ T8299] ? do_sys_open+0x220/0x220 [ 442.472667][ T8299] __x64_sys_openat+0x243/0x290 [ 442.477517][ T8299] ? __ia32_sys_open+0x270/0x270 [ 442.482454][ T8299] ? syscall_enter_from_user_mode+0x2e/0x240 [ 442.488437][ T8299] ? lockdep_hardirqs_on+0x94/0x130 [ 442.493638][ T8299] ? syscall_enter_from_user_mode+0x2e/0x240 [ 442.499621][ T8299] do_syscall_64+0x3b/0xb0 [ 442.504038][ T8299] ? clear_bhb_loop+0x15/0x70 [ 442.508718][ T8299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.514630][ T8299] RIP: 0033:0x7f97cb12a9a4 [ 442.519050][ T8299] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 442.538659][ T8299] RSP: 002b:00007ffda45e2ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 442.547075][ T8299] RAX: ffffffffffffffda RBX: 00007ffda45e2cf8 RCX: 00007f97cb12a9a4 [ 442.555077][ T8299] RDX: 0000000000000000 RSI: 00007ffda45e3f1e RDI: 00000000ffffff9c [ 442.563048][ T8299] RBP: 00007ffda45e3f1e R08: 0000000000000000 R09: 0000000000000000 [ 442.571032][ T8299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.579266][ T8299] R13: 00007ffda45e2d10 R14: 000055b811fdf670 R15: 00007f97cb573a80 [ 442.587251][ T8299] [ 442.590266][ T8299] [ 442.592587][ T8299] The buggy address belongs to the page: [ 442.598238][ T8299] page:ffffea0001899700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6265c [ 442.608386][ T8299] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 442.615499][ T8299] raw: 00fff00000000000 ffffea0001e53208 ffff8880b91409b0 0000000000000000 [ 442.624080][ T8299] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 442.632652][ T8299] page dumped because: kasan: bad access detected [ 442.639080][ T8299] page_owner tracks the page as freed [ 442.644437][ T8299] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x102800(GFP_NOWAIT|__GFP_NOWARN|__GFP_HARDWALL), pid 8296, ts 442325800438, free_ts 442325805159 [ 442.660858][ T8299] get_page_from_freelist+0x322a/0x33c0 [ 442.666407][ T8299] __alloc_pages+0x272/0x700 [ 442.670992][ T8299] stack_depot_save+0x319/0x440 [ 442.675842][ T8299] kasan_set_track+0x62/0x80 [ 442.680432][ T8299] kasan_set_free_info+0x1f/0x40 [ 442.685363][ T8299] ____kasan_slab_free+0xd8/0x120 [ 442.690381][ T8299] slab_free_freelist_hook+0xdd/0x160 [ 442.695751][ T8299] kfree+0xf1/0x270 [ 442.699560][ T8299] __vunmap+0x977/0xa20 [ 442.703712][ T8299] kvm_arch_free_memslot+0xea/0x150 [ 442.708908][ T8299] kvm_set_memslot+0x1351/0x1af0 [ 442.713841][ T8299] __kvm_set_memory_region+0x876/0x1060 [ 442.719383][ T8299] __x86_set_memory_region+0x4d1/0x800 [ 442.724837][ T8299] kvm_arch_destroy_vm+0x95/0x6c0 [ 442.729859][ T8299] kvm_put_kvm+0xdf0/0x1840 [ 442.734356][ T8299] kvm_vm_release+0x42/0x50 [ 442.738857][ T8299] page last free stack trace: [ 442.743528][ T8299] free_unref_page_prepare+0xc34/0xcf0 [ 442.749003][ T8299] free_unref_page+0x95/0x2d0 [ 442.753684][ T8299] stack_depot_save+0x3ef/0x440 [ 442.758536][ T8299] kasan_set_track+0x62/0x80 [ 442.763152][ T8299] kasan_set_free_info+0x1f/0x40 [ 442.768085][ T8299] ____kasan_slab_free+0xd8/0x120 [ 442.773109][ T8299] slab_free_freelist_hook+0xdd/0x160 [ 442.778482][ T8299] kfree+0xf1/0x270 [ 442.782286][ T8299] __vunmap+0x977/0xa20 [ 442.786437][ T8299] kvm_arch_free_memslot+0xea/0x150 [ 442.791631][ T8299] kvm_set_memslot+0x1351/0x1af0 [ 442.796564][ T8299] __kvm_set_memory_region+0x876/0x1060 [ 442.802104][ T8299] __x86_set_memory_region+0x4d1/0x800 [ 442.807561][ T8299] kvm_arch_destroy_vm+0x95/0x6c0 [ 442.812582][ T8299] kvm_put_kvm+0xdf0/0x1840 [ 442.817086][ T8299] kvm_vm_release+0x42/0x50 [ 442.821587][ T8299] [ 442.823901][ T8299] Memory state around the buggy address: [ 442.829534][ T8299] ffff88806265c800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 442.837590][ T8299] ffff88806265c880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 442.845648][ T8299] >ffff88806265c900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 442.853787][ T8299] ^ [ 442.857846][ T8299] ffff88806265c980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 442.865990][ T8299] ffff88806265ca00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 442.874043][ T8299] ================================================================== [ 442.882092][ T8299] Disabling lock debugging due to kernel taint [ 442.890375][ T3748] tipc: Node number set to 10005162 [ 442.902439][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.910952][ T8299] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 442.918171][ T8299] CPU: 0 PID: 8299 Comm: v4l_id Tainted: G B 5.15.167-syzkaller #0 [ 442.927393][ T8299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 442.937549][ T8299] Call Trace: [ 442.940846][ T8299] [ 442.943801][ T8299] dump_stack_lvl+0x1e3/0x2d0 [ 442.948511][ T8299] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 442.954180][ T8299] ? panic+0x860/0x860 [ 442.958292][ T8299] ? rcu_is_watching+0x11/0xa0 [ 442.963089][ T8299] ? preempt_schedule_common+0xa6/0xd0 [ 442.968584][ T8299] panic+0x318/0x860 [ 442.972510][ T8299] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 442.978678][ T8299] ? check_panic_on_warn+0x1d/0xa0 [ 442.983831][ T8299] ? fb_is_primary_device+0xd0/0xd0 [ 442.989075][ T8299] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 442.994821][ T4656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.995090][ T8299] ? _raw_spin_unlock+0x40/0x40 [ 443.007994][ T8299] check_panic_on_warn+0x7e/0xa0 [ 443.012965][ T8299] ? v4l2_fh_open+0xc7/0x430 [ 443.017585][ T8299] end_report+0x6d/0xf0 [ 443.021767][ T8299] kasan_report+0x18e/0x1c0 [ 443.026346][ T8299] ? v4l2_fh_open+0xc7/0x430 [ 443.030971][ T8299] v4l2_fh_open+0xc7/0x430 [ 443.035403][ T8299] em28xx_v4l2_open+0x15d/0xa10 [ 443.040384][ T8299] v4l2_open+0x228/0x360 [ 443.044867][ T8299] chrdev_open+0x54a/0x630 [ 443.049373][ T8299] ? cd_forget+0x160/0x160 [ 443.053807][ T8299] ? do_raw_spin_unlock+0x137/0x8b0 [ 443.059054][ T8299] ? fsnotify_perm+0x47b/0x590 [ 443.063858][ T8299] ? cd_forget+0x160/0x160 [ 443.068271][ T8299] do_dentry_open+0x807/0xfb0 [ 443.072968][ T8299] path_openat+0x2705/0x2f20 [ 443.077584][ T8299] ? do_filp_open+0x460/0x460 [ 443.082276][ T8299] do_filp_open+0x21c/0x460 [ 443.086783][ T8299] ? vfs_tmpfile+0x2e0/0x2e0 [ 443.091389][ T8299] ? _raw_spin_unlock+0x24/0x40 [ 443.096255][ T8299] ? alloc_fd+0x598/0x630 [ 443.100611][ T8299] do_sys_openat2+0x13b/0x4f0 [ 443.105309][ T8299] ? do_sys_open+0x220/0x220 [ 443.109934][ T8299] __x64_sys_openat+0x243/0x290 [ 443.114793][ T8299] ? __ia32_sys_open+0x270/0x270 [ 443.119751][ T8299] ? syscall_enter_from_user_mode+0x2e/0x240 [ 443.125735][ T8299] ? lockdep_hardirqs_on+0x94/0x130 [ 443.130952][ T8299] ? syscall_enter_from_user_mode+0x2e/0x240 [ 443.137044][ T8299] do_syscall_64+0x3b/0xb0 [ 443.141464][ T8299] ? clear_bhb_loop+0x15/0x70 [ 443.146134][ T8299] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 443.152023][ T8299] RIP: 0033:0x7f97cb12a9a4 [ 443.156447][ T8299] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83 [ 443.176089][ T8299] RSP: 002b:00007ffda45e2ae0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 443.184518][ T8299] RAX: ffffffffffffffda RBX: 00007ffda45e2cf8 RCX: 00007f97cb12a9a4 [ 443.192515][ T8299] RDX: 0000000000000000 RSI: 00007ffda45e3f1e RDI: 00000000ffffff9c [ 443.200589][ T8299] RBP: 00007ffda45e3f1e R08: 0000000000000000 R09: 0000000000000000 [ 443.208579][ T8299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.216568][ T8299] R13: 00007ffda45e2d10 R14: 000055b811fdf670 R15: 00007f97cb573a80 [ 443.224571][ T8299] [ 443.227868][ T8299] Kernel Offset: disabled [ 443.232219][ T8299] Rebooting in 86400 seconds..