last executing test programs: 18m27.485020025s ago: executing program 3 (id=1610): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0200001900010025bd70000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000084010500"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 18m27.322818146s ago: executing program 3 (id=1611): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) semctl$GETPID(0x0, 0x4, 0xb, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x501001, 0x4) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x40) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc881, 0xc000, 0x0, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x71e7, 0x7721, 0x33, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, 0x0, 0x0) 18m25.397402333s ago: executing program 3 (id=1613): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="89070404a4", 0x5) 18m25.220637818s ago: executing program 3 (id=1615): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$binfmt_misc(r3, &(0x7f0000000b00), 0x91) splice(r2, 0x0, r1, 0x0, 0x9, 0x1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@deltclass={0x54, 0x29, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0x8, 0x5}, {0xf}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @TCA_RATE={0x6, 0x5, {0xc, 0x8}}]}, 0x54}}, 0x48001) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 18m24.972779713s ago: executing program 3 (id=1619): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r2, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=""/164, 0xa4}, 0x3}], 0x1, 0x45833af92e4b38ff, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000002140)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}, 0x50) read$FUSE(r4, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) open_by_handle_at(r5, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000001"], 0xfeffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x2, 0xff, 0x0, 0xffff, 0xd330}, 0x20) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) 18m24.793839281s ago: executing program 3 (id=1620): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000003440)=""/4103, 0x7000, 0x30520cf7f25f0c64, 0x0, 0x0}) 18m24.328923619s ago: executing program 32 (id=1620): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000003440)=""/4103, 0x7000, 0x30520cf7f25f0c64, 0x0, 0x0}) 11m58.937240488s ago: executing program 5 (id=3702): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x208, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0xffffff00, 'veth0\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x89, 0x6, 0x14}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x6, 0x3, 'pptp\x00', {0x760}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10000, 0x2, 'syz1\x00', {0xe0000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x7b1e, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) r8 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) unshare(0x22020600) fcntl$notify(r8, 0x402, 0x8000003d) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f0000000080)='v', 0x1}], 0x1, 0x5405, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xe1596000) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r10, &(0x7f0000000200)=[{&(0x7f0000001380)=""/129, 0x81}], 0x1, 0x0, 0x4, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 11m57.768532778s ago: executing program 5 (id=3706): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 11m57.449693415s ago: executing program 5 (id=3707): syz_emit_ethernet(0x1de, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd605adf000000000000020000000000000000000000000000fe8000000000000000000000003f00aa2234c204"], 0x0) 11m57.179414856s ago: executing program 5 (id=3708): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x108, &(0x7f0000000340)={0x0, 0xc69e, 0x800, 0x40000, 0xfd}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x33, 0x0, 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) fchdir(r5) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r7 = fspick(r6, &(0x7f00000000c0)='.\x00', 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x42, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r8, 0x4010e501, 0x0) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') syz_io_uring_setup(0x315b, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x0) syz_usb_connect(0x3, 0xa8, &(0x7f0000000040)=ANY=[@ANYRESHEX=r9], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 11m54.010710164s ago: executing program 5 (id=3715): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000001600)={0x9, 0xa, 0x3, 0x0, 0x4e}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x2f8, 0x3a8, 0x3a8, 0x2f8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x228, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg2\x00', {0x8, 0x103, 0x33, 0x100000, 0x20000a, 0x80001, 0x7fffffff, 0x0, 0x90, 0xe0}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0xffff00, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'bridge_slave_1\x00', 'xfrm0\x00', {}, {0xff}, 0x67, 0xb7, 0x4, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x70}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000040)={0x36, 0x7, 0x4, 0x9, 0x1, 0x80}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) 11m52.287509212s ago: executing program 5 (id=3721): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) socket$igmp6(0xa, 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) (async, rerun: 32) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x80) r4 = dup3(r3, r2, 0x80000) read(r4, &(0x7f0000000100)=""/213, 0xd5) (async) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfdef) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, 0x0) (async) getsockopt$inet6_mtu(r5, 0x29, 0x17, 0x0, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r9, 0xc0884123, &(0x7f0000000080)) (async) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000ff7f00010325bd70000400ffff0500000008000300", @ANYRES32=0x0, @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) (async, rerun: 32) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) (rerun: 32) sendmsg$inet6(r5, &(0x7f0000001cc0)={&(0x7f0000000000)={0xa, 0x4e24, 0x9, @empty, 0x40}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000200)="86c6c9a420677a895d2e6428d7b530baea4683c33e0ceebddab635cdff38b8faf1da21", 0x23}, {&(0x7f0000000240)="b3403b9f724b27d80e1581af2ec29f756763ee78a7ebe37c66277a023b0199db0129b7a78f083a1ff6429f87ad4c45895d45be2cb788f74a370744709f076474415dd991687be6ffe3405e6f12d63bb0caf528bb54d0c21190", 0x59}, {&(0x7f00000002c0)="de86960f5dd9375831a44c6312bfcc5b43c9824fa27d10ac36c856204e8cd8fa901778def8c54d478409a89c91a66ccc32ef59ace8d07ad9643383eb0dfd79", 0x3f}, {&(0x7f0000000300)="3c948a2e8908ee38b9f382576dd4eee349a91775063e3b", 0x17}, {&(0x7f00000003c0)="a9bc7b75f0ae61b14094cd87d7e112161a7a7cc3be8487137148f0b3cfdea9f5ae80ae6de95c664a9a3f1ff043dfcbf4d5ae65c2bd460a82e5183f37", 0x3c}], 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"/4918], 0x12b8}, 0x40000) (async) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000, 0x28}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 11m51.446867087s ago: executing program 33 (id=3721): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) socket$igmp6(0xa, 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) (async, rerun: 32) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r2, 0x80) r4 = dup3(r3, r2, 0x80000) read(r4, &(0x7f0000000100)=""/213, 0xd5) (async) read$watch_queue(r4, &(0x7f0000001d40)=""/4095, 0xfdef) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, 0x0) (async) getsockopt$inet6_mtu(r5, 0x29, 0x17, 0x0, &(0x7f00000001c0)) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r9, 0xc0884123, &(0x7f0000000080)) (async) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000ff7f00010325bd70000400ffff0500000008000300", @ANYRES32=0x0, @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) (async, rerun: 32) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) (rerun: 32) sendmsg$inet6(r5, &(0x7f0000001cc0)={&(0x7f0000000000)={0xa, 0x4e24, 0x9, @empty, 0x40}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000200)="86c6c9a420677a895d2e6428d7b530baea4683c33e0ceebddab635cdff38b8faf1da21", 0x23}, {&(0x7f0000000240)="b3403b9f724b27d80e1581af2ec29f756763ee78a7ebe37c66277a023b0199db0129b7a78f083a1ff6429f87ad4c45895d45be2cb788f74a370744709f076474415dd991687be6ffe3405e6f12d63bb0caf528bb54d0c21190", 0x59}, {&(0x7f00000002c0)="de86960f5dd9375831a44c6312bfcc5b43c9824fa27d10ac36c856204e8cd8fa901778def8c54d478409a89c91a66ccc32ef59ace8d07ad9643383eb0dfd79", 0x3f}, {&(0x7f0000000300)="3c948a2e8908ee38b9f382576dd4eee349a91775063e3b", 0x17}, {&(0x7f00000003c0)="a9bc7b75f0ae61b14094cd87d7e112161a7a7cc3be8487137148f0b3cfdea9f5ae80ae6de95c664a9a3f1ff043dfcbf4d5ae65c2bd460a82e5183f37", 0x3c}], 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"/4918], 0x12b8}, 0x40000) (async) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000, 0x28}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.510824078s ago: executing program 4 (id=8044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c000100706879736465760046000300"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 3.362104005s ago: executing program 4 (id=8046): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB="080004"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) 3.143447804s ago: executing program 4 (id=8047): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r0, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xfffffffe}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280027}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000400)='`', 0x1}], 0x1}}], 0x1, 0x10005) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x8001, 0xff00}, 0x8) 3.016869132s ago: executing program 0 (id=8049): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) sendmsg$nl_route(r0, 0x0, 0x2000c000) 2.967053358s ago: executing program 0 (id=8050): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff2bbd700001dcdf25000000", @ANYRES32=0x0, @ANYBLOB="01000000230800004800128009000100766c616e0000000038000280060001"], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff2bbd", @ANYRES32=0x0, @ANYBLOB="01000000230800004800128009000100766c616e000000003800028006000100030000001c0004"], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40000) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.832261936s ago: executing program 0 (id=8051): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/175, 0xaf}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x40000001}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, 0x0, 0x2000c8c0) 2.768853945s ago: executing program 4 (id=8053): socket$packet(0x11, 0x2, 0x300) accept(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_FFBIT(r5, 0x4004556b, 0x3b) 2.651380538s ago: executing program 2 (id=8055): pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) splice(r0, 0x0, r3, 0x0, 0x20000000000002, 0x2) 2.288162285s ago: executing program 2 (id=8057): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) 2.163245183s ago: executing program 2 (id=8059): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 1.989663725s ago: executing program 2 (id=8060): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) sendmsg$nl_route(r0, 0x0, 0x2000c000) 1.841578924s ago: executing program 0 (id=8062): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) accept4(r0, 0x0, 0x0, 0x0) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 1.814215571s ago: executing program 2 (id=8064): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), 0x0}, 0x20) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x28, 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 1.732371622s ago: executing program 0 (id=8066): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0xfffffffffffffffc, 0x200, 0x4a, 0x28, 0x80000005, 0x1}) 1.618552589s ago: executing program 1 (id=8067): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 1.522533568s ago: executing program 1 (id=8069): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x82, 0x2, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x1, 0xce, 0x5}, @mptcp=@remove_addr={0x1e, 0x3, 0x8}]}}}}}}}}, 0x0) 1.434076224s ago: executing program 1 (id=8070): socket(0x6, 0x5, 0x2) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'fo\x00', 0x14, 0x0, 0x807f}, 0x2c) 1.316430392s ago: executing program 6 (id=8071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0a010300000000000000000100fffd0900"], 0xcc}}, 0x0) 1.215160681s ago: executing program 1 (id=8072): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/175, 0xaf}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x40000001}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, 0x0, 0x2000c8c0) 1.172370024s ago: executing program 6 (id=8073): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x2, {0x0, 0x1, 0x3}, 0xfd}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x3, {}, 0x1}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$can_j1939(r5, 0x0, 0x44) 1.120828929s ago: executing program 4 (id=8074): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x22020600) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) 1.076215682s ago: executing program 4 (id=8075): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) 1.062782947s ago: executing program 6 (id=8076): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000004280)=[{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000240)="ac93155843a0a7f962", 0x9}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x800) 836.505601ms ago: executing program 6 (id=8077): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="8c7f93a965", 0xfffffe47}], 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000740)=0x103, 0x4) 784.375955ms ago: executing program 0 (id=8078): r0 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x6) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(0x0, 0x8, 0x140) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f00000001c0)) 773.215959ms ago: executing program 6 (id=8079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 495.963939ms ago: executing program 6 (id=8080): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 234.577476ms ago: executing program 1 (id=8081): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x82, 0x2, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x1, 0xce, 0x5}, @mptcp=@remove_addr={0x1e, 0x3, 0x8}]}}}}}}}}, 0x0) 64.143884ms ago: executing program 2 (id=8082): socket$unix(0x1, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=8083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x14000851}, 0x20040040) kernel console output (not intermixed with test programs): Identified as PCTV tripleStick (292e) (card=94) [ 1366.431528][T24830] em28xx 3-1:0.0: dvb set to bulk mode. [ 1366.444417][T24832] em28xx 3-1:0.0: Binding DVB extension [ 1366.592465][T16447] usb 3-1: USB disconnect, device number 106 [ 1366.600205][T27274] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-19) [ 1366.618662][T16447] em28xx 3-1:0.0: Disconnecting em28xx [ 1366.667882][T24832] em28xx 3-1:0.0: Registering input extension [ 1366.679753][T16447] em28xx 3-1:0.0: Closing input extension [ 1366.743370][T16447] em28xx 3-1:0.0: Freeing device [ 1367.464886][T16447] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1367.624979][T16447] usb 3-1: Using ep0 maxpacket: 8 [ 1367.631799][T16447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.643348][T16447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.653524][T16447] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1367.667039][T16447] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1367.676319][T16447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.687033][T16447] usb 3-1: config 0 descriptor?? [ 1368.181678][T27345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6632'. [ 1368.304945][T16447] usbhid 3-1:0.0: can't add hid device: -71 [ 1368.324124][T16447] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1368.358829][T16447] usb 3-1: USB disconnect, device number 107 [ 1368.710658][ T7932] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 1368.836916][ T30] audit: type=1326 audit(1780291977.547:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27348 comm="syz.4.6634" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d3bb9ce59 code=0x0 [ 1368.863549][T27360] kAFS: unable to lookup cell 'ÿ' [ 1368.890521][ T7932] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 1368.900290][ T7932] usb 1-1: config 0 has no interface number 0 [ 1368.907756][ T7932] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1368.927226][T27362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6637'. [ 1368.948787][ T7932] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1368.961138][T27363] netlink: 47 bytes leftover after parsing attributes in process `syz.6.6635'. [ 1368.970326][ T7932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.980069][ T7932] usb 1-1: Product: syz [ 1368.984595][ T7932] usb 1-1: Manufacturer: syz [ 1368.994950][T27363] netlink: 47 bytes leftover after parsing attributes in process `syz.6.6635'. [ 1368.996102][ T7932] usb 1-1: SerialNumber: syz [ 1369.028991][ T7932] usb 1-1: config 0 descriptor?? [ 1369.041821][T27347] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1369.119205][ T7932] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, be:88:a8:d6:cf:b9 [ 1369.455061][ T7927] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1369.619277][ T7927] usb 3-1: Using ep0 maxpacket: 8 [ 1369.653093][ T7927] usb 3-1: config 6 has an invalid interface number: 213 but max is 1 [ 1369.682744][ T7927] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.710097][ T7927] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 1369.722712][T27384] overlayfs: missing 'lowerdir' [ 1369.729225][ T7927] usb 3-1: config 6 has no interface number 0 [ 1369.740930][ T7927] usb 3-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1369.752923][ T7927] usb 3-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1369.765797][ T7927] usb 3-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1369.779430][ T7927] usb 3-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1369.795504][ T7927] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 1369.812170][ T7927] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1369.820873][ T7927] usb 3-1: Manufacturer: syz [ 1369.826790][ T7927] usb 3-1: SerialNumber: syz [ 1370.086191][ T7927] em28xx 3-1:6.213: New device syz @ 480 Mbps (eb1a:e357, interface 213, class 213) [ 1370.111211][ T7927] em28xx 3-1:6.213: Audio interface 213 found (Vendor Class) [ 1370.173146][T24830] usb 1-1: USB disconnect, device number 83 [ 1370.196268][T24830] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 1370.205835][ T7927] em28xx 3-1:6.213: unknown em28xx chip ID (0) [ 1370.223905][ T7927] em28xx 3-1:6.213: Config register raw data: 0xfffffffb [ 1370.237957][ T7927] em28xx 3-1:6.213: AC97 chip type couldn't be determined [ 1370.247694][ T7927] em28xx 3-1:6.213: No AC97 audio processor [ 1370.264450][T27394] xt_hashlimit: overflow, try lower: 36939/0 [ 1370.271535][ T7927] usb 3-1: USB disconnect, device number 108 [ 1370.282170][ T7927] em28xx 3-1:6.213: Disconnecting em28xx [ 1370.305433][ T7927] em28xx 3-1:6.213: Freeing device [ 1371.193148][T27433] netlink: 388 bytes leftover after parsing attributes in process `syz.0.6649'. [ 1371.422653][T27444] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1371.675285][ T30] audit: type=1326 audit(1780291980.377:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27443 comm="syz.0.6652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1371.727025][T27452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6652'. [ 1371.737872][ T30] audit: type=1326 audit(1780291980.387:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27443 comm="syz.0.6652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1371.805299][ T30] audit: type=1326 audit(1780291980.417:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27443 comm="syz.0.6652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1371.871220][ T30] audit: type=1326 audit(1780291980.417:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27443 comm="syz.0.6652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1371.910548][ T30] audit: type=1326 audit(1780291980.417:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27443 comm="syz.0.6652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1371.989913][ T30] audit: type=1326 audit(1780291980.417:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27443 comm="syz.0.6652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1372.096981][ T30] audit: type=1326 audit(1780291980.417:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27443 comm="syz.0.6652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1372.253495][ T30] audit: type=1326 audit(1780291980.417:6261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27443 comm="syz.0.6652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1372.355212][ T30] audit: type=1326 audit(1780291980.417:6262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27443 comm="syz.0.6652" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1373.360015][T20472] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.369437][T20472] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.409121][T27483] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6655'. [ 1373.493389][T20472] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.553538][T20472] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.579222][T27522] xt_hashlimit: overflow, try lower: 36939/0 [ 1374.837374][T27527] vlan3: entered promiscuous mode [ 1374.852226][T27527] dummy0: entered promiscuous mode [ 1374.959071][T27535] FAULT_INJECTION: forcing a failure. [ 1374.959071][T27535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1375.005052][T27535] CPU: 0 UID: 0 PID: 27535 Comm: syz.0.6670 Tainted: G L syzkaller #0 PREEMPT(full) [ 1375.005087][T27535] Tainted: [L]=SOFTLOCKUP [ 1375.005096][T27535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1375.005110][T27535] Call Trace: [ 1375.005119][T27535] [ 1375.005128][T27535] dump_stack_lvl+0xe8/0x150 [ 1375.005162][T27535] should_fail_ex+0x412/0x560 [ 1375.005193][T27535] _copy_to_user+0x31/0xb0 [ 1375.005222][T27535] simple_read_from_buffer+0xe1/0x170 [ 1375.005256][T27535] proc_fail_nth_read+0x1bb/0x230 [ 1375.005288][T27535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1375.005320][T27535] ? rw_verify_area+0x2a6/0x4d0 [ 1375.005348][T27535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1375.005376][T27535] vfs_read+0x20c/0xa70 [ 1375.005411][T27535] ? __pfx___mutex_lock+0x10/0x10 [ 1375.005448][T27535] ? __pfx_vfs_read+0x10/0x10 [ 1375.005478][T27535] ? __fget_files+0x2a/0x420 [ 1375.005508][T27535] ? __fget_files+0x3a0/0x420 [ 1375.005531][T27535] ? __fget_files+0x2a/0x420 [ 1375.005564][T27535] ksys_read+0x150/0x270 [ 1375.005597][T27535] ? __pfx_ksys_read+0x10/0x10 [ 1375.005631][T27535] ? __secure_computing+0xe1/0x2a0 [ 1375.005656][T27535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.005679][T27535] do_syscall_64+0x174/0x580 [ 1375.005699][T27535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.005720][T27535] ? clear_bhb_loop+0x40/0x90 [ 1375.005745][T27535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.005765][T27535] RIP: 0033:0x7f9e44f5d68e [ 1375.005785][T27535] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1375.005802][T27535] RSP: 002b:00007f9e45e5ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1375.005829][T27535] RAX: ffffffffffffffda RBX: 00007f9e45e606c0 RCX: 00007f9e44f5d68e [ 1375.005844][T27535] RDX: 000000000000000f RSI: 00007f9e45e600a0 RDI: 0000000000000004 [ 1375.005858][T27535] RBP: 00007f9e45e60090 R08: 0000000000000000 R09: 0000000000000000 [ 1375.005870][T27535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1375.005882][T27535] R13: 00007f9e45216038 R14: 00007f9e45215fa0 R15: 00007f9e4533fa48 [ 1375.005915][T27535] [ 1377.093944][T27571] bond6: entered promiscuous mode [ 1377.100054][T27571] bond6: entered allmulticast mode [ 1377.107339][T27571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1377.761833][T27582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6685'. [ 1377.799332][T27582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1377.807350][T27585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6686'. [ 1377.820672][T27582] openvswitch: netlink: Message has 1 unknown bytes. [ 1377.827903][T27582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1377.870175][T27585] bridge_slave_1: left allmulticast mode [ 1377.881564][T27585] bridge_slave_1: left promiscuous mode [ 1377.898437][T27585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.943316][T27590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1378.716289][T27609] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6691'. [ 1379.077396][T27613] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6694'. [ 1379.099643][T27613] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6694'. [ 1379.427720][T27628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.473280][T27628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.517375][T27629] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6696'. [ 1380.614122][T27645] bond7: entered promiscuous mode [ 1381.694088][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1381.694109][ T30] audit: type=1326 audit(1780291990.397:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27654 comm="syz.1.6707" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f9ce59 code=0x0 [ 1382.383350][T27685] input: syz1 as /devices/virtual/input/input204 [ 1382.630311][T27701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6719'. [ 1382.999093][T27716] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6722'. [ 1383.039947][T27716] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1383.645597][T27720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6723'. [ 1384.254610][ T30] audit: type=1326 audit(1780291992.957:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.6721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1384.315285][ T30] audit: type=1326 audit(1780291992.997:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.6721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1384.353289][ T30] audit: type=1326 audit(1780291992.997:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.6721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1384.386254][ T30] audit: type=1326 audit(1780291992.997:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.6721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1384.440152][ T30] audit: type=1326 audit(1780291992.997:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.6721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1384.504925][ T30] audit: type=1326 audit(1780291992.997:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.6721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1384.583744][ T30] audit: type=1326 audit(1780291992.997:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.6721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1384.650028][ T30] audit: type=1326 audit(1780291992.997:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.6721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1384.686823][ T30] audit: type=1326 audit(1780291992.997:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.1.6721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1385.184429][T27741] fuse: Bad value for 'fd' [ 1385.665069][T24831] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1385.806997][T27745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6730'. [ 1385.818685][T24831] usb 3-1: Using ep0 maxpacket: 32 [ 1385.828161][T24831] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1385.852571][T24831] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1385.881215][T24831] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1385.895079][T24831] usb 3-1: config 14 has no interface number 0 [ 1385.901563][T24831] usb 3-1: config 14 has no interface number 1 [ 1385.911061][T24831] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1385.930844][T24831] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1385.946154][T24831] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1385.959051][T24831] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1385.972158][T24831] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1385.989896][T24831] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1386.004804][T24831] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1386.011718][T24831] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1386.031402][T24831] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1386.041781][T24831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.051063][T24831] usb 3-1: Product: syz [ 1386.056305][T24831] usb 3-1: Manufacturer: syz [ 1386.061213][T24831] usb 3-1: SerialNumber: syz [ 1386.122907][T27749] netlink: 124 bytes leftover after parsing attributes in process `syz.1.6732'. [ 1387.173311][T27761] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6736'. [ 1387.183313][T27761] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6736'. [ 1387.196951][T27761] FAULT_INJECTION: forcing a failure. [ 1387.196951][T27761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1387.210257][T27761] CPU: 0 UID: 0 PID: 27761 Comm: syz.1.6736 Tainted: G L syzkaller #0 PREEMPT(full) [ 1387.210280][T27761] Tainted: [L]=SOFTLOCKUP [ 1387.210303][T27761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1387.210317][T27761] Call Trace: [ 1387.210325][T27761] [ 1387.210334][T27761] dump_stack_lvl+0xe8/0x150 [ 1387.210365][T27761] should_fail_ex+0x412/0x560 [ 1387.210398][T27761] _copy_to_user+0x31/0xb0 [ 1387.210433][T27761] simple_read_from_buffer+0xe1/0x170 [ 1387.210466][T27761] proc_fail_nth_read+0x1bb/0x230 [ 1387.210489][T27761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1387.210510][T27761] ? rw_verify_area+0x2a6/0x4d0 [ 1387.210531][T27761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1387.210552][T27761] vfs_read+0x20c/0xa70 [ 1387.210578][T27761] ? __pfx_vfs_read+0x10/0x10 [ 1387.210601][T27761] ? do_sys_openat2+0x14c/0x200 [ 1387.210617][T27761] ? kmem_cache_free+0x182/0x650 [ 1387.210650][T27761] ksys_read+0x150/0x270 [ 1387.210672][T27761] ? __pfx_ksys_read+0x10/0x10 [ 1387.210699][T27761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.210715][T27761] do_syscall_64+0x174/0x580 [ 1387.210730][T27761] ? trace_irq_disable+0x3b/0x140 [ 1387.210752][T27761] ? clear_bhb_loop+0x40/0x90 [ 1387.210770][T27761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.210785][T27761] RIP: 0033:0x7f5a11f5d68e [ 1387.210799][T27761] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1387.210812][T27761] RSP: 002b:00007f5a12dfffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1387.210827][T27761] RAX: ffffffffffffffda RBX: 00007f5a12e006c0 RCX: 00007f5a11f5d68e [ 1387.210839][T27761] RDX: 000000000000000f RSI: 00007f5a12e000a0 RDI: 0000000000000005 [ 1387.210848][T27761] RBP: 00007f5a12e00090 R08: 0000000000000000 R09: 0000000000000000 [ 1387.210858][T27761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1387.210866][T27761] R13: 00007f5a12216038 R14: 00007f5a12215fa0 R15: 00007f5a1233fa48 [ 1387.210900][T27761] [ 1387.653163][T27769] netlink: 388 bytes leftover after parsing attributes in process `syz.4.6738'. [ 1387.839144][T27773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6741'. [ 1388.573285][T24831] legousbtower 3-1:14.57: interrupt endpoints not found [ 1388.644874][T24831] legousbtower 3-1:14.228: get version request failed: -71 [ 1388.706305][T24831] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 1388.793823][T24831] usb 3-1: USB disconnect, device number 109 [ 1389.421014][T27809] netlink: 388 bytes leftover after parsing attributes in process `syz.0.6751'. [ 1389.571453][T27816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6753'. [ 1390.031929][T27829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6757'. [ 1390.050412][T27830] xt_hashlimit: overflow, try lower: 36939/0 [ 1390.450275][T27842] netlink: 2168 bytes leftover after parsing attributes in process `syz.1.6761'. [ 1390.535970][T27843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6761'. [ 1390.734103][T27845] netlink: 388 bytes leftover after parsing attributes in process `syz.6.6762'. [ 1391.033510][T27849] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6764'. [ 1391.374855][T24831] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1391.550581][T24831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1391.585809][T24831] usb 1-1: not running at top speed; connect to a high speed hub [ 1391.619935][T24831] usb 1-1: config 12 has an invalid interface number: 104 but max is 0 [ 1391.649769][T24831] usb 1-1: config 12 has no interface number 0 [ 1391.655734][T27860] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6768'. [ 1391.672975][T24831] usb 1-1: config 12 interface 104 altsetting 9 has an endpoint descriptor with address 0x1F, changing to 0xF [ 1391.712460][T24831] usb 1-1: config 12 interface 104 has no altsetting 0 [ 1391.741107][T24831] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=e6.f3 [ 1391.769381][T24831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.798344][T24831] usb 1-1: Product: syz [ 1391.812358][T24831] usb 1-1: Manufacturer: syz [ 1391.828819][T24831] usb 1-1: SerialNumber: syz [ 1391.989658][T27864] xt_hashlimit: overflow, try lower: 36939/0 [ 1392.249838][T27868] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6770'. [ 1392.417020][T27872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.432172][T27872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.564127][T27878] netlink: 388 bytes leftover after parsing attributes in process `syz.2.6774'. [ 1393.125238][T14600] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1393.155340][T27892] xt_hashlimit: overflow, try lower: 36939/0 [ 1393.284799][T14600] usb 3-1: Using ep0 maxpacket: 32 [ 1393.292443][T14600] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1393.301094][T14600] usb 3-1: config 0 has no interface number 0 [ 1393.309799][T14600] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1393.325222][T14600] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1393.340970][T14600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.349630][T14600] usb 3-1: Product: syz [ 1393.353926][T14600] usb 3-1: Manufacturer: syz [ 1393.358865][T14600] usb 3-1: SerialNumber: syz [ 1393.370443][T14600] usb 3-1: config 0 descriptor?? [ 1393.791859][T27884] usb usb7: usbfs: process 27884 (syz.2.6776) did not claim interface 0 before use [ 1393.900152][T14600] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1393.936309][T14600] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1393.958274][T14600] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1393.976825][T14600] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1394.014560][T14600] usb 3-1: USB disconnect, device number 110 [ 1394.032769][T24831] usbserial_generic 1-1:12.104: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1394.072939][T24831] usbserial_generic 1-1:12.104: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1394.132982][T24831] usbserial_generic 1-1:12.104: generic converter detected [ 1394.169981][T24831] usb 1-1: generic converter now attached to ttyUSB0 [ 1394.202337][T24831] usb 1-1: USB disconnect, device number 84 [ 1394.260318][T24831] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1394.290412][T24831] usbserial_generic 1-1:12.104: device disconnected [ 1394.331707][T27911] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1394.401978][T27911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1394.426243][T14600] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1394.594818][T14600] usb 3-1: Using ep0 maxpacket: 16 [ 1394.615294][T14600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.634718][T14600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.656627][T14600] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1394.683287][T14600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.716662][T14600] usb 3-1: config 0 descriptor?? [ 1394.864941][T24831] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1395.044833][T24831] usb 1-1: Using ep0 maxpacket: 16 [ 1395.057540][T24831] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1395.076549][T24831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.101570][T24831] usb 1-1: config 0 has no interface number 0 [ 1395.119707][T24831] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1395.144237][T24831] usb 1-1: config 0 interface 35 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1395.172211][T14600] apple 0003:05AC:024B.004C: unknown global tag 0xe [ 1395.195949][T14600] apple 0003:05AC:024B.004C: item 0 1 1 14 parsing failed [ 1395.202412][T24831] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1395.217112][T14600] apple 0003:05AC:024B.004C: parse failed [ 1395.220069][T24831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.233936][T14600] apple 0003:05AC:024B.004C: probe with driver apple failed with error -22 [ 1395.242410][T24831] usb 1-1: Product: syz [ 1395.249210][T24831] usb 1-1: Manufacturer: syz [ 1395.254418][T24831] usb 1-1: SerialNumber: syz [ 1395.275791][T24831] usb 1-1: config 0 descriptor?? [ 1395.299744][T24831] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1395.312685][T24831] nokiaca42v2 ttyUSB0: required endpoint is missing [ 1395.351326][T24831] usb 3-1: USB disconnect, device number 111 [ 1395.499103][T27916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.515612][T27916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.538089][T14600] usb 1-1: USB disconnect, device number 85 [ 1395.557733][T14600] cypress_m8 1-1:0.35: device disconnected [ 1396.404761][T24831] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1396.412515][T18619] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1396.574903][T18619] usb 3-1: Using ep0 maxpacket: 16 [ 1396.582450][T24831] usb 1-1: too many configurations: 33, using maximum allowed: 8 [ 1396.604324][T18619] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1396.645597][T18619] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1396.654312][T24831] usb 1-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1396.664870][T24831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.673185][T24831] usb 1-1: Product: syz [ 1396.678391][T24831] usb 1-1: Manufacturer: syz [ 1396.683292][T24831] usb 1-1: SerialNumber: syz [ 1396.689686][T18619] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1396.704769][T18619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.715241][T18619] usb 3-1: Product: syz [ 1396.720486][T24831] usb 1-1: config 0 descriptor?? [ 1396.726652][T18619] usb 3-1: Manufacturer: syz [ 1396.731561][T18619] usb 3-1: SerialNumber: syz [ 1396.741037][T24831] go7007-loader 1-1:0.0: can't handle multiple config [ 1396.751761][T18619] usb 3-1: config 0 descriptor?? [ 1396.757092][T24831] go7007-loader 1-1:0.0: probe failed [ 1396.944556][T24831] usb 1-1: USB disconnect, device number 86 [ 1396.992034][T18619] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input205 [ 1397.173606][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1397.374604][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1397.386796][T18619] imon:send_packet: packet tx failed (-71) [ 1397.404951][T18619] imon 3-1:0.0: panel buttons/knobs setup failed [ 1397.514922][T18619] rc_core: IR keymap rc-imon-pad not found [ 1397.549126][T18619] Registered IR keymap rc-empty [ 1397.568734][T18619] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1397.597839][T18619] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1397.620089][T18619] imon:send_packet: packet tx failed (-71) [ 1397.654828][T18619] imon 3-1:0.0: remote input dev register failed [ 1397.677305][T18619] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1397.723223][T18619] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1397.736167][T18619] imon:imon_probe: failed to initialize context! [ 1397.740281][T27966] xt_hashlimit: overflow, try lower: 36939/0 [ 1397.748863][T18619] imon 3-1:0.0: unable to register, err -19 [ 1397.768860][T18619] usb 3-1: USB disconnect, device number 112 [ 1398.023848][T27980] __nla_validate_parse: 2 callbacks suppressed [ 1398.023869][T27980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1398.060352][T27980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1398.072613][T27980] netlink: 'syz.2.6810': attribute type 15 has an invalid length. [ 1398.083763][T27980] netlink: 'syz.2.6810': attribute type 18 has an invalid length. [ 1398.296954][T27992] tipc: Enabled bearer , priority 0 [ 1398.622715][T27991] tipc: Disabling bearer [ 1399.539931][T28013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6818'. [ 1399.652579][T28013] syz_tun (unregistering): left allmulticast mode [ 1400.445094][T18619] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1400.625906][T18619] usb 3-1: Using ep0 maxpacket: 8 [ 1400.636808][T18619] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1400.655101][T18619] usb 3-1: config 179 has no interface number 0 [ 1400.661577][T18619] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1400.684735][T18619] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1400.704771][T18619] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1400.724734][T18619] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1400.746956][T18619] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1400.765606][T18619] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1400.781400][T18619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.793707][T28027] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1401.038932][T18619] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input207 [ 1401.275974][T27457] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1401.447944][T27457] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1401.471514][T27457] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1401.489129][T27457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.511080][T27457] usb 1-1: config 0 descriptor?? [ 1401.521137][T18619] usb 3-1: USB disconnect, device number 113 [ 1401.521200][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1401.535548][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1401.936422][T27457] pantherlord 0003:0F30:0111.004D: item fetching failed at offset 2/40 [ 1401.945837][T27457] pantherlord 0003:0F30:0111.004D: parse failed [ 1401.952264][T27457] pantherlord 0003:0F30:0111.004D: probe with driver pantherlord failed with error -22 [ 1402.139110][T27457] usb 1-1: USB disconnect, device number 87 [ 1402.284345][T28077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6839'. [ 1402.437756][T28082] fuse: Unknown parameter 'fKF¶[Ø­ýí‚Óí*1¢H€ajíáz7½¨o½ …Ù-«šny' [ 1402.484748][T28082] [U]  [ 1402.487575][T28082] [U] K{‘ [ 1402.490610][T28082] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 1402.497604][T28082] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 1402.513176][T28082] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 1402.564543][T28082] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 1402.629214][T28082] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 1402.694712][T28082] [U] ܾ˜4b`Ë—HôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 1402.706924][T28082] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 1402.718497][T28082] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`Ʀ\ [ 1402.913014][T28082] [U] M¢Xîâ"ä{;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 1402.989440][T28082] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 1402.995670][T27457] usb 3-1: Using ep0 maxpacket: 16 [ 1403.003306][T28082] [U] 22½“Æ©Ðû©x?0;3u± [ 1403.057253][T27457] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 1403.077089][T27457] usb 3-1: config 0 has no interface number 0 [ 1403.089524][T27457] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.103219][T28082] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 1403.106329][T27457] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1403.129750][T28082] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 1403.129775][T28082] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 1403.129788][T28082] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 1403.129803][T28082] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 1403.129817][T28082] [U] ¹ ec [ 1403.129831][T28082] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 1403.229930][T27457] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.244852][T27457] usb 3-1: Product: syz [ 1403.254950][T27457] usb 3-1: Manufacturer: syz [ 1403.266425][T27457] usb 3-1: SerialNumber: syz [ 1403.315000][T27457] usb 3-1: config 0 descriptor?? [ 1403.359848][T27457] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1403.465064][T18619] IPVS: starting estimator thread 0... [ 1403.486302][T28097] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6844'. [ 1403.564868][T28098] IPVS: using max 40 ests per chain, 96000 per kthread [ 1403.625233][T20471] usb 3-1: Failed to submit usb control message: -71 [ 1403.625761][T27457] usb 3-1: USB disconnect, device number 114 [ 1403.686101][T20471] usb 3-1: unable to send the bmi data to the device: -71 [ 1403.724835][T20471] usb 3-1: unable to get target info from device [ 1403.741916][T20471] usb 3-1: could not get target info (-71) [ 1403.760409][T20471] usb 3-1: could not probe fw (-71) [ 1404.159757][T28082] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 1404.359147][T28106] FAULT_INJECTION: forcing a failure. [ 1404.359147][T28106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1404.414875][T28106] CPU: 1 UID: 0 PID: 28106 Comm: syz.6.6847 Tainted: G L syzkaller #0 PREEMPT(full) [ 1404.414910][T28106] Tainted: [L]=SOFTLOCKUP [ 1404.414918][T28106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1404.414931][T28106] Call Trace: [ 1404.414939][T28106] [ 1404.414948][T28106] dump_stack_lvl+0xe8/0x150 [ 1404.414978][T28106] should_fail_ex+0x412/0x560 [ 1404.415007][T28106] _copy_from_iter+0x1d3/0x1670 [ 1404.415033][T28106] ? rcu_is_watching+0x15/0xb0 [ 1404.415066][T28106] ? __pfx__copy_from_iter+0x10/0x10 [ 1404.415097][T28106] ? netlink_sendmsg+0x650/0xb40 [ 1404.415129][T28106] ? skb_put+0x11b/0x210 [ 1404.415164][T28106] netlink_sendmsg+0x6c0/0xb40 [ 1404.415204][T28106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1404.415249][T28106] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1404.415283][T28106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1404.415315][T28106] ____sys_sendmsg+0x972/0x9f0 [ 1404.415336][T28106] ? __might_fault+0xaf/0x130 [ 1404.415373][T28106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1404.415404][T28106] ? import_iovec+0x73/0xa0 [ 1404.415433][T28106] ___sys_sendmsg+0x2a5/0x360 [ 1404.415452][T28106] ? __lock_acquire+0x6b5/0x2cf0 [ 1404.415480][T28106] ? __pfx____sys_sendmsg+0x10/0x10 [ 1404.415537][T28106] ? __fget_files+0x2a/0x420 [ 1404.415562][T28106] ? __fget_files+0x3a0/0x420 [ 1404.415596][T28106] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1404.415620][T28106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1404.415650][T28106] ? __pfx_ksys_write+0x10/0x10 [ 1404.415690][T28106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.415712][T28106] do_syscall_64+0x174/0x580 [ 1404.415735][T28106] ? trace_irq_disable+0x3b/0x140 [ 1404.415765][T28106] ? clear_bhb_loop+0x40/0x90 [ 1404.415792][T28106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.415813][T28106] RIP: 0033:0x7ff359f9ce59 [ 1404.415832][T28106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1404.415849][T28106] RSP: 002b:00007ff35ae1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1404.415871][T28106] RAX: ffffffffffffffda RBX: 00007ff35a215fa0 RCX: 00007ff359f9ce59 [ 1404.415886][T28106] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1404.415901][T28106] RBP: 00007ff35ae1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1404.415914][T28106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.415926][T28106] R13: 00007ff35a216038 R14: 00007ff35a215fa0 R15: 00007ff35a33fa48 [ 1404.415958][T28106] [ 1404.686131][T28110] fuse: Bad value for 'fd' [ 1405.316079][T28129] xt_hl: Unknown TTL match mode: 255 [ 1405.669782][T20471] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.681981][T20471] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.703045][T20471] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.715493][T20471] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1406.986664][T28174] netlink: 'syz.2.6868': attribute type 1 has an invalid length. [ 1407.011072][T28174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6868'. [ 1407.264815][T14600] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1407.323368][T28180] fuse: Bad value for 'fd' [ 1407.398927][T28184] netlink: 'syz.1.6871': attribute type 11 has an invalid length. [ 1407.408379][T28184] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6871'. [ 1407.425468][T14600] usb 1-1: Using ep0 maxpacket: 32 [ 1407.436153][T14600] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1407.450175][T14600] usb 1-1: config 0 has no interface number 0 [ 1407.468202][T14600] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1407.482958][T14600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.494849][T28186] ÿÿÿÿÿÿ: renamed from dummy0 [ 1407.500927][T14600] usb 1-1: Product: syz [ 1407.512325][T14600] usb 1-1: Manufacturer: syz [ 1407.520619][T14600] usb 1-1: SerialNumber: syz [ 1407.533749][T14600] usb 1-1: config 0 descriptor?? [ 1407.552599][T14600] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1408.045484][T28209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1408.125737][T14600] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1408.142334][T14600] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1408.145169][T18619] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1408.163514][T28215] binder: 28214:28215 ioctl c0306201 0 returned -14 [ 1408.233396][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1408.233415][ T30] audit: type=1326 audit(1780292016.937:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.6.6881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff359f9ce59 code=0x0 [ 1408.285483][ T30] audit: type=1326 audit(1780292016.987:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.6.6881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff359f9ce59 code=0x7ffc0000 [ 1408.291649][T28215] binder: 28214:28215 ioctl c0306201 0 returned -14 [ 1408.312037][ T30] audit: type=1326 audit(1780292016.997:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.6.6881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff359f9ce59 code=0x7ffc0000 [ 1408.341485][ T30] audit: type=1326 audit(1780292016.997:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.6.6881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff359f9ce59 code=0x7ffc0000 [ 1408.342999][T18619] usb 3-1: Using ep0 maxpacket: 32 [ 1408.374558][T28176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.383309][ T30] audit: type=1326 audit(1780292016.997:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.6.6881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff359f9ce59 code=0x7ffc0000 [ 1408.410252][T28176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.418672][T18619] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1408.418964][ T30] audit: type=1326 audit(1780292016.997:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.6.6881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff359f9ce59 code=0x7ffc0000 [ 1408.428283][T18619] usb 3-1: config 0 has no interface number 0 [ 1408.460458][T18619] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1408.470579][T18619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.480876][T28176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.493048][T28176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.503114][ T30] audit: type=1326 audit(1780292016.997:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.6.6881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff359f9ce59 code=0x7ffc0000 [ 1408.503733][T18619] usb 3-1: Product: syz [ 1408.532438][T18619] usb 3-1: Manufacturer: syz [ 1408.539012][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1408.540393][T24831] usb 1-1: USB disconnect, device number 88 [ 1408.557365][T18619] usb 3-1: SerialNumber: syz [ 1408.575084][ T30] audit: type=1326 audit(1780292016.997:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.6.6881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff359f9ce59 code=0x7ffc0000 [ 1408.603815][T18619] usb 3-1: config 0 descriptor?? [ 1408.613651][T18619] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1408.638459][T24831] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1408.656039][T18619] usb 3-1: selecting invalid altsetting 1 [ 1408.663240][ T30] audit: type=1326 audit(1780292016.997:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.6.6881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff359f9cbc2 code=0x7ffc0000 [ 1408.690349][T18619] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1408.700160][T24831] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1408.718779][T18619] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1408.730458][T28220] syzkaller0: entered promiscuous mode [ 1408.738580][T24831] quatech2 1-1:0.51: device disconnected [ 1408.745156][ T30] audit: type=1326 audit(1780292016.997:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28214 comm="syz.6.6881" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff359f9cc57 code=0x7ffc0000 [ 1408.749101][T28220] syzkaller0: entered allmulticast mode [ 1408.774261][T18619] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1408.785678][T18619] usb 3-1: media controller created [ 1408.819304][T18619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1408.932506][T28228] fuse: Bad value for 'fd' [ 1408.954600][T28228] binder: 28227:28228 ioctl c018620c 200000000240 returned -22 [ 1409.056639][T28229] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6875'. [ 1409.506571][T28245] netlink: 'syz.4.6890': attribute type 12 has an invalid length. [ 1410.381030][T28267] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.6896'. [ 1410.392944][T28267] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1411.176935][T18619] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1411.265663][T18619] usb 3-1: USB disconnect, device number 115 [ 1411.370228][T28274] gtp0: left allmulticast mode [ 1411.376832][T28274] bridge1: left allmulticast mode [ 1411.382448][T28274] vlan2: left allmulticast mode [ 1411.387788][T28274] bond1: left allmulticast mode [ 1411.393186][T28274] macvlan2: left allmulticast mode [ 1411.664988][T18474] Bluetooth: hci2: command 0x0c1a tx timeout [ 1411.665837][T28243] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1412.401175][T28243] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1412.407403][T28243] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1412.421106][T28248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.432803][T28248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.456960][T28248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.472430][T28248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.654815][T18619] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1412.804825][T18619] usb 3-1: device descriptor read/64, error -71 [ 1413.076175][T18619] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1413.097409][T28295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6907'. [ 1413.110026][T28295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.124785][T28295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.224839][T18619] usb 3-1: device descriptor read/64, error -71 [ 1413.335081][T18619] usb usb3-port1: attempt power cycle [ 1413.345183][T14600] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1413.515185][T14600] usb 1-1: Using ep0 maxpacket: 8 [ 1413.524799][T14600] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1413.534252][T14600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.542582][T14600] usb 1-1: Product: syz [ 1413.550364][T14600] usb 1-1: Manufacturer: syz [ 1413.555699][T14600] usb 1-1: SerialNumber: syz [ 1413.563617][T14600] usb 1-1: config 0 descriptor?? [ 1413.577975][T14600] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1413.674765][T18619] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1413.695506][T18619] usb 3-1: device descriptor read/8, error -71 [ 1413.744956][T18474] Bluetooth: hci5: command 0x0c1a tx timeout [ 1413.934780][T18619] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1413.955589][T18619] usb 3-1: device descriptor read/8, error -71 [ 1414.065450][T18619] usb usb3-port1: unable to enumerate USB device [ 1414.177204][T14600] gspca_sonixj: reg_r err -32 [ 1414.182269][T14600] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 1414.464826][T18474] Bluetooth: hci0: command 0x0419 tx timeout [ 1414.546076][T14600] usb 1-1: USB disconnect, device number 89 [ 1414.844852][T18619] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1414.994741][T18619] usb 3-1: Using ep0 maxpacket: 16 [ 1415.002085][T18619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.013446][T18619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.023332][T18619] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1415.036841][T18619] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1415.046154][T18619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.056872][T18619] usb 3-1: config 0 descriptor?? [ 1415.513578][T28302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6910'. [ 1415.537339][T28320] fuse: Bad value for 'fd' [ 1415.544062][T28302] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1415.569487][T18619] input: HID 0955:7214 Haptics as /devices/virtual/input/input208 [ 1415.626573][T18619] shield 0003:0955:7214.004E: Registered Thunderstrike controller [ 1415.635754][T18619] shield 0003:0955:7214.004E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1415.779628][T18618] shield 0003:0955:7214.004E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1415.793384][T24831] usb 3-1: USB disconnect, device number 120 [ 1415.813977][T18618] shield 0003:0955:7214.004E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1415.836653][T18618] shield 0003:0955:7214.004E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1415.856982][T18618] shield 0003:0955:7214.004E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1416.265269][T28336] lo: Caught tx_queue_len zero misconfig [ 1416.271436][T28338] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6922'. [ 1416.281682][T28338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6922'. [ 1416.354230][T28336] syzkaller0: entered promiscuous mode [ 1416.383391][T28336] syzkaller0: entered allmulticast mode [ 1416.800836][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6922'. [ 1417.099350][T28363] xt_hashlimit: overflow, try lower: 36939/0 [ 1417.155527][T28365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.184079][T28365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.403199][T18618] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1417.575924][T18618] usb 1-1: no configurations [ 1417.580880][T18618] usb 1-1: can't read configurations, error -22 [ 1417.704778][T18618] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1417.875763][T18618] usb 1-1: no configurations [ 1417.880622][T18618] usb 1-1: can't read configurations, error -22 [ 1417.887815][T18618] usb usb1-port1: attempt power cycle [ 1418.224885][T18618] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1418.274979][T18618] usb 1-1: no configurations [ 1418.279822][T18618] usb 1-1: can't read configurations, error -22 [ 1418.424774][T18618] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1418.446125][T18618] usb 1-1: no configurations [ 1418.450943][T18618] usb 1-1: can't read configurations, error -22 [ 1418.458373][T18618] usb usb1-port1: unable to enumerate USB device [ 1420.425301][T28373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6932'. [ 1420.638063][T28376] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1420.664971][T28376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1420.705179][T28376] netlink: 31 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1420.732840][T28376] netlink: 'syz.0.6933': attribute type 2 has an invalid length. [ 1420.768203][T28376] netlink: 31 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1421.392314][T28344] kthread_run failed with err -4 [ 1421.408175][T28347] syzkaller0: entered allmulticast mode [ 1421.648248][T28399] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6938'. [ 1421.994316][T28406] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1422.329006][T28415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6944'. [ 1422.590101][T28421] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6945'. [ 1423.027235][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.036104][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.112779][T28435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6948'. [ 1423.138658][T28435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6948'. [ 1423.150400][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1423.150418][ T30] audit: type=1800 audit(1780292031.867:6363): pid=28437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6950" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1423.444833][T14600] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1423.535822][T28441] ucma_write: process 734 (syz.0.6952) changed security contexts after opening file descriptor, this is not allowed. [ 1423.555379][T28441] caif0: tun_chr_ioctl cmd 2147767521 [ 1423.605008][T14600] usb 3-1: Using ep0 maxpacket: 16 [ 1423.612272][T14600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.623788][T14600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.633741][T14600] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1423.647334][T14600] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1423.656554][T14600] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.671121][T14600] usb 3-1: config 0 descriptor?? [ 1423.794757][T24816] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1423.949667][T24816] usb 1-1: config 2 has an invalid interface number: 228 but max is 0 [ 1423.964789][T24816] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.977389][T24816] usb 1-1: config 2 has no interface number 0 [ 1423.987614][T24816] usb 1-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1424.014801][T24816] usb 1-1: config 2 interface 228 has no altsetting 0 [ 1424.024201][T24816] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1424.044927][T24816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.065036][T24816] usb 1-1: Product: syz [ 1424.069358][T24816] usb 1-1: Manufacturer: syz [ 1424.074014][T24816] usb 1-1: SerialNumber: syz [ 1424.089785][T14600] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1424.118088][T14600] microsoft 0003:045E:07DA.004F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1424.139623][T14600] microsoft 0003:045E:07DA.004F: no inputs found [ 1424.147628][T14600] microsoft 0003:045E:07DA.004F: could not initialize ff, continuing anyway [ 1424.287836][T18618] usb 3-1: USB disconnect, device number 121 [ 1424.318180][T24816] ims_pcu 1-1:2.228: probe with driver ims_pcu failed with error -22 [ 1424.354045][T24816] usb 1-1: USB disconnect, device number 94 [ 1424.796568][T28461] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1424.988910][T28466] input: syz1 as /devices/virtual/input/input210 [ 1427.005013][T18618] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1427.165780][T18618] usb 1-1: Using ep0 maxpacket: 8 [ 1427.175527][T18618] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1427.187594][T18618] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1427.204555][T18618] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1427.224857][T18618] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1427.234985][T18618] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1427.248208][T24831] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1427.263061][T18618] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1427.294791][T18618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.442173][T24831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.461318][T24831] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1427.479818][T24831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.517101][T18618] usb 1-1: GET_CAPABILITIES returned 0 [ 1427.526245][T24831] usb 3-1: config 0 descriptor?? [ 1427.539359][T18618] usbtmc 1-1:16.0: can't read capabilities [ 1427.556748][T24831] pwc: Askey VC010 type 2 USB webcam detected. [ 1427.694360][T28509] input: syz1 as /devices/virtual/input/input211 [ 1427.760391][T18618] usb 1-1: USB disconnect, device number 95 [ 1427.771827][T24831] pwc: send_video_command error -71 [ 1427.783830][T24831] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1427.811123][T24831] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1427.863849][T24831] usb 3-1: USB disconnect, device number 122 [ 1428.018305][T28511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6975'. [ 1428.051906][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6975'. [ 1428.072845][T28512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1428.100550][T28511] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1428.335012][T24831] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1428.486456][T24831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.496839][T24831] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1428.505967][T24831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.516262][T24831] usb 3-1: config 0 descriptor?? [ 1428.527037][T24831] pwc: Askey VC010 type 2 USB webcam detected. [ 1428.674837][T24816] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1428.824824][T24816] usb 1-1: Using ep0 maxpacket: 16 [ 1428.832732][T24816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.843194][T24816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1428.854237][T24816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1428.864160][T24816] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1428.874896][T24816] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1428.890238][T24816] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1428.900506][T24816] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1428.916223][T24816] usb 1-1: Manufacturer: syz [ 1428.924272][T24831] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1428.934813][T24816] usb 1-1: config 0 descriptor?? [ 1428.940083][T24831] pwc: recv_control_msg error -32 req 02 val 2700 [ 1428.956286][T24831] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1428.964181][T24831] pwc: recv_control_msg error -32 req 04 val 1000 [ 1428.975217][T24831] pwc: recv_control_msg error -32 req 04 val 1300 [ 1428.982845][T24831] pwc: recv_control_msg error -32 req 04 val 1400 [ 1428.992086][T24831] pwc: recv_control_msg error -32 req 02 val 2000 [ 1428.999676][T24831] pwc: recv_control_msg error -32 req 02 val 2100 [ 1429.009928][T28529] netlink: 'syz.1.6981': attribute type 1 has an invalid length. [ 1429.053364][T28529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1429.099718][T28531] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1429.125745][T28529] veth0_virt_wifi: entered promiscuous mode [ 1429.149929][T28529] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 1429.174955][T28529] bond4: (slave veth0_virt_wifi): Releasing active interface [ 1429.244861][T24816] rc_core: IR keymap rc-hauppauge not found [ 1429.252489][T24816] Registered IR keymap rc-empty [ 1429.266876][T24816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1429.294834][T24816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1429.336039][T24816] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1429.351463][T24816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input212 [ 1429.367384][T24816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1429.374978][T24831] pwc: recv_control_msg error -71 req 04 val 1500 [ 1429.387594][T24831] pwc: recv_control_msg error -71 req 02 val 2500 [ 1429.394904][T24816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1429.395678][T24831] pwc: recv_control_msg error -71 req 02 val 2400 [ 1429.409205][T24831] pwc: recv_control_msg error -71 req 02 val 2600 [ 1429.416262][T24831] pwc: recv_control_msg error -71 req 02 val 2900 [ 1429.423316][T24831] pwc: recv_control_msg error -71 req 02 val 2800 [ 1429.425946][T24816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1429.437579][T24831] pwc: recv_control_msg error -71 req 04 val 1100 [ 1429.444558][T24831] pwc: recv_control_msg error -71 req 04 val 1200 [ 1429.454911][T24816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1429.463828][T24831] pwc: Registered as video103. [ 1429.473162][T24831] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input213 [ 1429.475973][T24816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1429.502746][T24831] usb 3-1: USB disconnect, device number 123 [ 1429.535024][T24816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1429.565451][T24816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1429.596892][T24816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1429.634871][T24816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1429.654886][T24816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1429.677338][T24816] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1429.686613][T24816] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1430.344816][T24816] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1430.496906][T24816] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1430.506702][T24816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.519012][T24816] usb 3-1: config 0 descriptor?? [ 1431.324218][T28580] fuse: Bad value for 'fd' [ 1431.446200][T24831] usb 1-1: USB disconnect, device number 96 [ 1431.964754][T24831] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1432.136867][T24831] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1432.149697][T24831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.161190][T24831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.172051][T24831] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1432.195033][T24831] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1432.214890][T24831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.227370][T24831] usb 1-1: config 0 descriptor?? [ 1432.584119][T28608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7010'. [ 1432.660073][T24831] plantronics 0003:047F:FFFF.0050: reserved main item tag 0xd [ 1432.699880][T24831] plantronics 0003:047F:FFFF.0050: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1432.753626][T24816] usb 3-1: Cannot set autoneg [ 1432.774004][T24816] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1432.808541][T24816] usb 3-1: USB disconnect, device number 124 [ 1432.872816][T24831] usb 1-1: USB disconnect, device number 97 [ 1433.325244][T28637] xt_hashlimit: size too large, truncated to 1048576 [ 1433.894746][T18618] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1434.065276][T18618] usb 1-1: Using ep0 maxpacket: 32 [ 1434.076775][T18618] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1434.089886][T18618] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1434.099403][T18618] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1434.109158][T18618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1434.119194][T18618] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1434.131647][T18618] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1434.145256][T18618] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1434.154377][T18618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.167911][T18618] usb 1-1: config 0 descriptor?? [ 1434.204836][T24816] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1434.367383][T24816] usb 3-1: not running at top speed; connect to a high speed hub [ 1434.380707][T24816] usb 3-1: config 6 has an invalid interface number: 101 but max is 0 [ 1434.389362][T24816] usb 3-1: config 6 has no interface number 0 [ 1434.396261][T24816] usb 3-1: config 6 interface 101 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1434.407599][T24816] usb 3-1: config 6 interface 101 has no altsetting 0 [ 1434.418020][T24816] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=9d.63 [ 1434.427333][T24816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.437623][T18618] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 98 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1434.444919][T24816] usb 3-1: Product: syz [ 1434.452584][T24816] usb 3-1: Manufacturer: syz [ 1434.460172][T24816] usb 3-1: SerialNumber: syz [ 1434.478358][T28662] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1434.630406][T18618] usb 1-1: USB disconnect, device number 98 [ 1434.644527][T18618] usblp1: removed [ 1434.707540][T24816] uvcvideo 3-1:6.101: Found UVC 0.00 device syz (8086:0b03) [ 1434.716930][T24816] uvcvideo 3-1:6.101: No valid video chain found. [ 1434.742907][T24816] usb 3-1: USB disconnect, device number 125 [ 1440.429945][T28745] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1441.023931][T28785] netlink: 'syz.0.7087': attribute type 6 has an invalid length. [ 1441.201837][T28790] usb usb5-port1: device 5-1 not suspended yet [ 1441.213361][T28790] usb usb5: usbfs: process 28790 (syz.0.7089) did not claim interface 0 before use [ 1442.244818][T18618] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1442.265317][T24816] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1442.405480][T18618] usb 1-1: Using ep0 maxpacket: 16 [ 1442.412643][T18618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.426171][T18618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.439446][T18618] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1442.453687][T24816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.453724][T18618] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1442.474706][T18618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.485209][T24816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.496487][T18618] usb 1-1: config 0 descriptor?? [ 1442.506764][T24816] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1442.534898][T24816] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1442.549375][T24816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.586343][T24816] usb 3-1: config 0 descriptor?? [ 1442.927769][T18618] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1442.937635][T18618] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1442.947806][T18618] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1442.956045][T18618] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1442.963980][T18618] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1442.972596][T18618] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1442.981035][T18618] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1442.988779][T18618] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1442.997359][T18618] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1443.006282][T18618] microsoft 0003:045E:07DA.0051: unknown main item tag 0x0 [ 1443.033992][T24816] plantronics 0003:047F:FFFF.0052: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1443.052687][T18618] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0051/input/input215 [ 1443.188830][T18618] microsoft 0003:045E:07DA.0051: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1443.234827][T18618] usb 3-1: USB disconnect, device number 126 [ 1443.353809][T24816] usb 1-1: USB disconnect, device number 99 [ 1443.398156][T28844] fido_id[28844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1443.949455][T28852] binder: 28851:28852 ioctl c0306201 0 returned -14 [ 1444.154761][T18618] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1444.286291][ T30] audit: type=1326 audit(1780292052.997:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28860 comm="syz.0.7117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1444.344778][ T30] audit: type=1326 audit(1780292052.997:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28860 comm="syz.0.7117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1444.350169][T18618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.394806][ T30] audit: type=1326 audit(1780292053.037:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28860 comm="syz.0.7117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1444.413556][T18618] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1444.453090][T18618] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1444.472556][T18618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.493988][T18618] usb 3-1: config 0 descriptor?? [ 1444.510785][T18618] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1444.678374][ T30] audit: type=1326 audit(1780292053.387:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28860 comm="syz.0.7117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1444.718514][ T30] audit: type=1326 audit(1780292053.387:6368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28860 comm="syz.0.7117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1444.771392][ T30] audit: type=1326 audit(1780292053.387:6369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28860 comm="syz.0.7117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1444.823054][ T30] audit: type=1326 audit(1780292053.417:6370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28860 comm="syz.0.7117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1444.849906][ T30] audit: type=1326 audit(1780292053.417:6371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28860 comm="syz.0.7117" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1446.903972][T24816] usb 3-1: USB disconnect, device number 127 [ 1447.105112][T18618] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1447.244770][T18618] usb 1-1: device descriptor read/64, error -71 [ 1447.484757][T18618] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1447.624765][T18618] usb 1-1: device descriptor read/64, error -71 [ 1447.654806][T24816] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1447.673521][T28935] xt_hashlimit: max too large, truncated to 1048576 [ 1447.745175][T18618] usb usb1-port1: attempt power cycle [ 1447.816511][T24816] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1447.844740][T24816] usb 3-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1447.874741][T24816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1447.882942][T24816] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 1447.904760][T24816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.927083][T24816] usb 3-1: config 0 descriptor?? [ 1447.933015][T28933] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1448.104804][T18618] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1448.125443][T18618] usb 1-1: device descriptor read/8, error -71 [ 1448.363890][T24816] hid_parser_main: 11 callbacks suppressed [ 1448.363914][T24816] isku 0003:1E7D:3264.0053: unknown main item tag 0x2 [ 1448.364971][T18618] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1448.383677][T24816] isku 0003:1E7D:3264.0053: unknown main item tag 0x0 [ 1448.401785][T24816] isku 0003:1E7D:3264.0053: unknown main item tag 0x0 [ 1448.414769][T24816] isku 0003:1E7D:3264.0053: unknown main item tag 0x0 [ 1448.431913][T24816] isku 0003:1E7D:3264.0053: unknown main item tag 0x0 [ 1448.436392][T18618] usb 1-1: device descriptor read/8, error -71 [ 1448.444839][T24816] isku 0003:1E7D:3264.0053: unknown main item tag 0x0 [ 1448.462489][T24816] isku 0003:1E7D:3264.0053: unknown main item tag 0x0 [ 1448.473617][T24816] isku 0003:1E7D:3264.0053: unknown main item tag 0x0 [ 1448.483593][T24816] isku 0003:1E7D:3264.0053: unknown main item tag 0x0 [ 1448.490731][T24816] isku 0003:1E7D:3264.0053: unknown main item tag 0x0 [ 1448.503505][T24816] isku 0003:1E7D:3264.0053: hidraw0: USB HID v3.ff Device [HID 1e7d:3264] on usb-dummy_hcd.2-1/input0 [ 1448.562864][T24831] usb 3-1: USB disconnect, device number 2 [ 1448.572514][T18618] usb usb1-port1: unable to enumerate USB device [ 1448.628131][T28944] fido_id[28944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1449.239395][T28963] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1450.238138][T28997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7174'. [ 1450.265203][T24831] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1450.424842][T24831] usb 1-1: Using ep0 maxpacket: 8 [ 1450.435881][T24831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1450.451890][T24831] usb 1-1: config 4 interface 0 has no altsetting 0 [ 1450.466887][T24831] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1450.479775][T24831] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1450.502991][T24831] usb 1-1: Manufacturer: syz [ 1450.517704][T24831] usb 1-1: SerialNumber: syz [ 1450.757577][T24831] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1450.784095][T24831] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1450.805176][T24831] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1450.814114][T24831] usb 1-1: media controller created [ 1450.844812][T24831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1450.881964][T24831] zl10353_read_register: readreg error (reg=127, ret==0) [ 1450.959212][T24831] usb 1-1: USB disconnect, device number 104 [ 1453.476214][T29068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7204'. [ 1453.531800][T29068] geneve2: entered promiscuous mode [ 1453.542475][T29068] geneve2: entered allmulticast mode [ 1453.561118][T27823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1453.574899][T24816] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1453.598355][T27823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1453.624037][T27823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1453.643882][T27823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1453.754727][T24816] usb 1-1: Using ep0 maxpacket: 8 [ 1453.775935][T24816] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 1453.806260][T24816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.824773][T24816] usb 1-1: Product: syz [ 1453.836170][T24816] usb 1-1: Manufacturer: syz [ 1453.849290][T24816] usb 1-1: SerialNumber: syz [ 1454.084614][T24816] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1454.102767][T24816] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1454.231745][T24816] usb 1-1: USB disconnect, device number 105 [ 1456.262822][T29134] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7230'. [ 1456.566122][T29145] binder: 29143:29145 ioctl c0306201 0 returned -14 [ 1457.766685][T29180] fuse: Bad value for 'user_id' [ 1457.784739][T29180] fuse: Bad value for 'user_id' [ 1458.024738][T24831] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1458.197366][T24831] usb 1-1: Using ep0 maxpacket: 32 [ 1458.210712][T24831] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1458.234726][T24831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.261271][T24831] usb 1-1: config 0 descriptor?? [ 1458.280515][T24831] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1458.937557][T29224] C: renamed from veth1_to_team [ 1458.948815][T29225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7270'. [ 1458.949302][T29224] netlink: 'syz.4.7271': attribute type 1 has an invalid length. [ 1458.965909][T29224] netlink: 'syz.4.7271': attribute type 2 has an invalid length. [ 1458.973920][T29224] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1459.004805][T24816] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1459.086417][T24831] gspca_vc032x: reg_w err -71 [ 1459.096748][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.105988][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.116981][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.124823][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.135064][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.144866][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.155087][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.162065][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.174929][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.175004][T24816] usb 3-1: Using ep0 maxpacket: 16 [ 1459.181918][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.202542][T24816] usb 3-1: config 0 has no interfaces? [ 1459.205085][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.213718][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.221527][T24816] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1459.224870][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.240258][T24816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.249408][T24816] usb 3-1: Product: syz [ 1459.252669][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.261003][T24816] usb 3-1: Manufacturer: syz [ 1459.264949][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.274737][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.285163][T24816] usb 3-1: SerialNumber: syz [ 1459.285431][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.305208][T24831] gspca_vc032x: I2c Bus Busy Wait 00 [ 1459.314701][T24831] gspca_vc032x: Unknown sensor... [ 1459.326479][T24831] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1459.331110][T24816] usb 3-1: config 0 descriptor?? [ 1459.356826][T24831] usb 1-1: USB disconnect, device number 106 [ 1459.560334][T24831] usb 3-1: USB disconnect, device number 3 [ 1460.908790][T24578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1460.929284][T24578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1460.938157][T24578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1460.949908][T24578] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1460.958460][T24578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1461.228787][T29271] fuse: Bad value for 'fd' [ 1461.676569][T29282] usb usb1: usbfs: process 29282 (syz.2.7293) did not claim interface 0 before use [ 1461.921953][T29264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.943029][T29264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.972729][T29264] bridge_slave_0: entered allmulticast mode [ 1462.012494][T29264] bridge_slave_0: entered promiscuous mode [ 1462.038398][T29264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.046329][T29264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.055303][T29264] bridge_slave_1: entered allmulticast mode [ 1462.063753][T29264] bridge_slave_1: entered promiscuous mode [ 1462.131171][T29264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.171118][T29264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1462.234835][ T30] audit: type=1326 audit(1780292070.937:6372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.2.7295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b1b9ce59 code=0x7ffc0000 [ 1462.262859][T29299] fuse: Bad value for 'fd' [ 1462.288628][T29264] team0: Port device team_slave_0 added [ 1462.293260][ T30] audit: type=1326 audit(1780292070.977:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.2.7295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b1b9ce59 code=0x7ffc0000 [ 1462.320610][T29264] team0: Port device team_slave_1 added [ 1462.354705][ T30] audit: type=1326 audit(1780292070.977:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.2.7295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b1b9ce59 code=0x7ffc0000 [ 1462.410306][ T30] audit: type=1326 audit(1780292070.977:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.2.7295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f45b1b9ce59 code=0x7ffc0000 [ 1462.454870][ T30] audit: type=1326 audit(1780292070.977:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.2.7295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b1b9ce59 code=0x7ffc0000 [ 1462.500871][ T30] audit: type=1326 audit(1780292070.977:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.2.7295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b1b9ce59 code=0x7ffc0000 [ 1462.556994][T29264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1462.557010][ T30] audit: type=1326 audit(1780292070.977:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.2.7295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b1b9ce59 code=0x7ffc0000 [ 1462.575309][T29264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.653735][ T30] audit: type=1326 audit(1780292070.977:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.2.7295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b1b9ce59 code=0x7ffc0000 [ 1462.693761][ T30] audit: type=1326 audit(1780292070.977:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.2.7295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f45b1b9ce59 code=0x7ffc0000 [ 1462.719670][T29264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1462.732433][ T30] audit: type=1326 audit(1780292070.977:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29287 comm="syz.2.7295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45b1b9ce59 code=0x7ffc0000 [ 1462.782165][T29264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1462.808891][T29264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1462.884560][T29264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1463.024777][T24578] Bluetooth: hci4: command tx timeout [ 1463.043489][T29264] hsr_slave_0: entered promiscuous mode [ 1463.052192][T29264] hsr_slave_1: entered promiscuous mode [ 1463.060254][T29264] debugfs: 'hsr0' already exists in 'hsr' [ 1463.066443][T29264] Cannot create hsr debugfs directory [ 1464.104821][T24831] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1464.271548][T24831] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1464.313169][T24831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.332977][T24831] usb 3-1: Product: syz [ 1464.344792][T24831] usb 3-1: Manufacturer: syz [ 1464.351043][T24831] usb 3-1: SerialNumber: syz [ 1464.382856][T24831] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1464.427265][T18618] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1464.509255][T29331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7311'. [ 1464.786863][T29264] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1464.809641][T29264] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1464.831453][T29264] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1464.857755][T29264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1464.877977][T29264] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1464.908295][T24831] usb 3-1: USB disconnect, device number 4 [ 1464.928805][T29264] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1464.957440][T29264] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1464.988219][T29264] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1465.104874][T24578] Bluetooth: hci4: command tx timeout [ 1465.277582][T29264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.310192][T29264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.323397][T19524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.330686][T19524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1465.347184][T20471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.354396][T20471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1465.504990][T18618] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1465.524458][T18618] ath9k_htc: Failed to initialize the device [ 1465.538313][T29352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7316'. [ 1465.550130][T24831] usb 3-1: ath9k_htc: USB layer deinitialized [ 1465.606555][T29264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1465.665891][T29264] veth0_vlan: entered promiscuous mode [ 1465.681187][T29264] veth1_vlan: entered promiscuous mode [ 1465.733043][T29264] veth0_macvtap: entered promiscuous mode [ 1465.752871][T29264] veth1_macvtap: entered promiscuous mode [ 1465.781064][T29264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1465.801746][T29264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1465.824389][T27823] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.844147][T27823] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.865683][T24831] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1465.897186][T27823] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.928989][T27823] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.045167][T24831] usb 3-1: Using ep0 maxpacket: 32 [ 1466.079191][T24831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.097681][T24831] usb 3-1: config 0 has no interfaces? [ 1466.106438][T24831] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1466.112247][T20471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.116299][T24831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.142491][T24831] usb 3-1: Product: syz [ 1466.152060][T24831] usb 3-1: Manufacturer: syz [ 1466.160883][T20471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.162206][T24831] usb 3-1: SerialNumber: syz [ 1466.200165][T24831] usb 3-1: config 0 descriptor?? [ 1466.261781][T20471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.287883][T20471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1467.062788][T29376] fuse: Bad value for 'fd' [ 1467.184915][T24578] Bluetooth: hci4: command tx timeout [ 1467.550831][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 1467.550851][ T30] audit: type=1326 audit(1780292076.257:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29385 comm="syz.0.7330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1467.597466][ T30] audit: type=1326 audit(1780292076.287:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29385 comm="syz.0.7330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1467.623336][ T30] audit: type=1326 audit(1780292076.287:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29385 comm="syz.0.7330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1467.649045][ T30] audit: type=1326 audit(1780292076.287:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29385 comm="syz.0.7330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1467.674767][ T30] audit: type=1326 audit(1780292076.287:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29385 comm="syz.0.7330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1467.700634][ T30] audit: type=1326 audit(1780292076.287:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29385 comm="syz.0.7330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1467.754848][ T30] audit: type=1326 audit(1780292076.287:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29385 comm="syz.0.7330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1467.789876][ T30] audit: type=1326 audit(1780292076.287:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29385 comm="syz.0.7330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1467.818975][ T30] audit: type=1326 audit(1780292076.287:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29385 comm="syz.0.7330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1467.847627][ T30] audit: type=1326 audit(1780292076.287:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29385 comm="syz.0.7330" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1468.497736][T29399] macsec1: entered promiscuous mode [ 1468.503020][T29399] bond0: entered promiscuous mode [ 1468.509020][T29399] bond_slave_0: entered promiscuous mode [ 1468.515006][T29399] bond_slave_1: entered promiscuous mode [ 1468.521409][T29399] macsec1: entered allmulticast mode [ 1468.527094][T29399] bond0: entered allmulticast mode [ 1468.533050][T24831] usb 3-1: USB disconnect, device number 5 [ 1468.542710][T29399] bond_slave_0: entered allmulticast mode [ 1468.548910][T29399] bond_slave_1: entered allmulticast mode [ 1468.564232][T29399] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1468.578216][T29399] bond0: left allmulticast mode [ 1468.592588][T29399] bond_slave_0: left allmulticast mode [ 1468.617369][T29399] bond_slave_1: left allmulticast mode [ 1468.622952][T29399] bond0: left promiscuous mode [ 1468.628455][T29399] bond_slave_0: left promiscuous mode [ 1468.634150][T29399] bond_slave_1: left promiscuous mode [ 1469.264832][T24578] Bluetooth: hci4: command tx timeout [ 1471.557716][T29508] kernel profiling enabled (shift: 6) [ 1471.957432][T29529] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1472.347140][T29550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7403'. [ 1472.456538][T29554] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7405'. [ 1472.507669][T29554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7405'. [ 1472.794880][T29569] netlink: 'syz.6.7412': attribute type 1 has an invalid length. [ 1472.819241][T29569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7412'. [ 1472.905678][T29569] team0: Port device team_slave_0 removed [ 1475.190421][ T30] kauditd_printk_skb: 214 callbacks suppressed [ 1475.190443][ T30] audit: type=1326 audit(1780292083.897:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.4.7444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3bb9ce59 code=0x7ffc0000 [ 1475.265243][ T30] audit: type=1326 audit(1780292083.937:6670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.4.7444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3bb9ce59 code=0x7ffc0000 [ 1475.324796][ T30] audit: type=1326 audit(1780292083.947:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.4.7444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3bb9ce59 code=0x7ffc0000 [ 1475.354844][T18618] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1475.394709][ T30] audit: type=1326 audit(1780292083.947:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.4.7444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3bb9ce59 code=0x7ffc0000 [ 1475.458746][ T30] audit: type=1326 audit(1780292083.947:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29640 comm="syz.4.7444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6d3bb9ce59 code=0x7ffc0000 [ 1475.486917][T27457] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1475.525318][T18618] usb 1-1: Using ep0 maxpacket: 32 [ 1475.532552][T18618] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.555439][ T30] audit: type=1326 audit(1780292083.977:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29644 comm="syz.1.7446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1475.602751][T18618] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.628782][T18618] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1475.646510][ T30] audit: type=1326 audit(1780292083.977:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29644 comm="syz.1.7446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1475.674711][T18618] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1475.684281][T27457] usb 3-1: config 4 has an invalid interface number: 89 but max is 0 [ 1475.703411][T27457] usb 3-1: config 4 has no interface number 0 [ 1475.704910][T18618] usb 1-1: Product: syz [ 1475.730604][T27457] usb 3-1: config 4 interface 89 has no altsetting 0 [ 1475.738606][T18618] usb 1-1: Manufacturer: syz [ 1475.753769][ T30] audit: type=1326 audit(1780292084.007:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29644 comm="syz.1.7446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1475.767511][T27457] usb 3-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=7a.af [ 1475.806838][T18618] hub 1-1:4.0: USB hub found [ 1475.838284][T27457] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.849207][T29656] fuseblk: Bad value for 'fd' [ 1475.866374][ T30] audit: type=1326 audit(1780292084.007:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29644 comm="syz.1.7446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1475.877101][T27457] usb 3-1: Product: syz [ 1475.938693][T27457] usb 3-1: Manufacturer: syz [ 1475.951719][T27457] usb 3-1: SerialNumber: syz [ 1475.960503][ T30] audit: type=1326 audit(1780292084.007:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29644 comm="syz.1.7446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a11f9ce59 code=0x7ffc0000 [ 1476.006615][T18618] hub 1-1:4.0: 2 ports detected [ 1476.021721][T18618] hub 1-1:4.0: insufficient power available to use all downstream ports [ 1476.220302][T18618] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 1476.220302][T27457] quatech2 3-1:4.89: Quatech 2nd gen USB to Serial Driver converter detected [ 1476.252348][T27457] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1476.278992][T18618] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 1476.282422][T27457] quatech2 3-1:4.89: probe with driver quatech2 failed with error -71 [ 1476.337493][T18618] usb 1-1: USB disconnect, device number 107 [ 1476.349415][T27457] usb 3-1: USB disconnect, device number 6 [ 1477.095030][T18618] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1477.254741][T18618] usb 3-1: Using ep0 maxpacket: 16 [ 1477.266201][T18618] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1477.289605][T18618] usb 3-1: config 128 has an invalid interface number: 32 but max is 0 [ 1477.304784][T18618] usb 3-1: config 128 has no interface number 0 [ 1477.319927][T18618] usb 3-1: config 128 interface 32 has no altsetting 0 [ 1477.339423][T18618] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=64.7e [ 1477.358045][T18618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.376315][T18618] usb 3-1: Product: syz [ 1477.383988][T18618] usb 3-1: Manufacturer: syz [ 1477.392618][T18618] usb 3-1: SerialNumber: syz [ 1477.644153][T18618] usb 3-1: USB disconnect, device number 7 [ 1478.121513][T29738] binder: 29736:29738 ioctl c0306201 200000000080 returned -14 [ 1478.608132][T29769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7502'. [ 1479.275643][T29796] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7514'. [ 1481.389231][T29883] fuse: Bad value for 'fd' [ 1483.666385][T29960] program syz.2.7591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1484.466464][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.474324][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.591041][T29993] program syz.0.7605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1485.543900][T30019] program syz.2.7616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1487.242284][T30075] program syz.0.7642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1487.581419][T30088] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7638'. [ 1488.710435][T24578] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1489.181089][T30165] netlink: 'syz.6.7682': attribute type 1 has an invalid length. [ 1489.340927][T30172] program syz.6.7684 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1490.388461][T30223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7695'. [ 1490.696577][T30234] sctp: [Deprecated]: syz.4.7713 (pid 30234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1490.696577][T30234] Use struct sctp_sack_info instead [ 1490.878610][T30238] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7715'. [ 1491.773336][T18474] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1491.789540][T18474] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1491.798752][T18474] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1491.813990][T18474] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1491.829643][T18474] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1493.059258][T30265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.066715][T30265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.074024][T30265] bridge_slave_0: entered allmulticast mode [ 1493.082535][T30265] bridge_slave_0: entered promiscuous mode [ 1493.092148][T30265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.099732][T30265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.108162][T30265] bridge_slave_1: entered allmulticast mode [ 1493.116699][T30265] bridge_slave_1: entered promiscuous mode [ 1493.194354][T30265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1493.230386][T30265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.359701][T30265] team0: Port device team_slave_0 added [ 1493.399545][T30265] team0: Port device team_slave_1 added [ 1493.409494][T30326] program syz.0.7749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1493.460212][T30265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1493.469024][T30265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1493.495889][T30265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1493.509003][T30265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1493.516332][T30265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1493.544264][T30265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1493.759052][T30265] hsr_slave_0: entered promiscuous mode [ 1493.777376][T30265] hsr_slave_1: entered promiscuous mode [ 1493.785824][T30265] debugfs: 'hsr0' already exists in 'hsr' [ 1493.803882][T30265] Cannot create hsr debugfs directory [ 1493.905558][T24578] Bluetooth: hci1: command tx timeout [ 1494.630085][T30366] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7765'. [ 1494.920276][T30265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1494.927317][T24812] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 1494.938405][T30265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1494.948371][T30265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1494.958545][T30265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1494.967161][T30265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1494.977785][T30265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1494.986053][T30265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1494.996137][T30265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1495.079612][T30265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.097729][T24812] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1495.106422][T24812] usb 3-1: config 0 has no interface number 0 [ 1495.115980][T30265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.128686][T24812] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1495.141145][T24812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.144495][T12533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.152033][T24812] usb 3-1: Product: syz [ 1495.156607][T12533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.161052][T24812] usb 3-1: Manufacturer: syz [ 1495.172804][T24812] usb 3-1: SerialNumber: syz [ 1495.190456][T24812] usb 3-1: config 0 descriptor?? [ 1495.198306][T27821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.205560][T27821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.216737][T24812] usb 3-1: selecting invalid altsetting 1 [ 1495.225878][T24812] dvb_ttusb_budget: ttusb_init_controller: error [ 1495.232387][T24812] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1495.348387][T24812] DVB: Unable to find symbol stv0299_attach() [ 1495.387632][T30265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1495.445241][T24812] DVB: Unable to find symbol tda8083_attach() [ 1495.465827][T24812] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1495.491535][T24812] usb 3-1: USB disconnect, device number 8 [ 1495.498292][T30265] veth0_vlan: entered promiscuous mode [ 1495.553467][T30265] veth1_vlan: entered promiscuous mode [ 1495.630610][T30265] veth0_macvtap: entered promiscuous mode [ 1495.652073][T30265] veth1_macvtap: entered promiscuous mode [ 1495.681910][T30265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.705509][T30265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.738476][T12533] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.748616][T12533] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.765977][T12533] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.775819][T12533] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.967201][T12533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.985058][T24578] Bluetooth: hci1: command tx timeout [ 1496.009308][T12533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.078821][T19524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.088945][T19524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.115977][T30401] tipc: Cannot configure node identity twice [ 1496.457580][T18474] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1496.481317][T18474] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1496.495705][T18474] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1496.507884][T18474] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1496.517232][T18474] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1496.711160][T30420] program syz.4.7784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1496.901827][T30428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7787'. [ 1496.913329][T30428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7787'. [ 1497.302536][T30417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.312364][T30417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.323136][T30417] bridge_slave_0: entered allmulticast mode [ 1497.334072][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1497.334087][ T30] audit: type=1326 audit(1780292106.047:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30432 comm="syz.0.7789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1497.334133][T30417] bridge_slave_0: entered promiscuous mode [ 1497.362895][ T30] audit: type=1326 audit(1780292106.057:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30432 comm="syz.0.7789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1497.405533][T30417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.421157][ T30] audit: type=1326 audit(1780292106.057:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30432 comm="syz.0.7789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e44f9e6c7 code=0x7ffc0000 [ 1497.425850][T30417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.457716][ T30] audit: type=1326 audit(1780292106.057:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30432 comm="syz.0.7789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9e44f5d68e code=0x7ffc0000 [ 1497.483725][ T30] audit: type=1326 audit(1780292106.057:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30432 comm="syz.0.7789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9e44f5d68e code=0x7ffc0000 [ 1497.493172][T30417] bridge_slave_1: entered allmulticast mode [ 1497.516315][ T30] audit: type=1326 audit(1780292106.107:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30432 comm="syz.0.7789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9e44f5d68e code=0x7ffc0000 [ 1497.543307][ T30] audit: type=1326 audit(1780292106.107:6718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30432 comm="syz.0.7789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9e44f5d68e code=0x7ffc0000 [ 1497.560412][T30417] bridge_slave_1: entered promiscuous mode [ 1497.577495][ T30] audit: type=1326 audit(1780292106.117:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30432 comm="syz.0.7789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1497.607368][ T30] audit: type=1326 audit(1780292106.117:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30432 comm="syz.0.7789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1497.634575][ T30] audit: type=1326 audit(1780292106.127:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30432 comm="syz.0.7789" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f9e44f9ce59 code=0x7ffc0000 [ 1497.692400][T30442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7791'. [ 1497.716449][T30442] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7791'. [ 1497.734440][T30417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1497.771115][T30417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1497.882595][T30417] team0: Port device team_slave_0 added [ 1497.913626][T30417] team0: Port device team_slave_1 added [ 1497.990227][T30417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1498.014777][T30417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.065263][T30417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1498.085641][T24578] Bluetooth: hci1: command tx timeout [ 1498.094981][T30417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1498.114955][T30417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1498.168854][T30417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1498.312622][T30417] hsr_slave_0: entered promiscuous mode [ 1498.326160][T30417] hsr_slave_1: entered promiscuous mode [ 1498.339373][T30417] debugfs: 'hsr0' already exists in 'hsr' [ 1498.345418][T30417] Cannot create hsr debugfs directory [ 1498.604584][T30453] program syz.0.7794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1498.619252][T30417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1498.630262][T24578] Bluetooth: hci3: command tx timeout [ 1498.753015][T30417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1498.950819][T30417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1499.102231][T30417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1499.180592][T30479] program syz.6.7804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1499.362048][T30417] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1499.372379][T30417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1499.380734][T30417] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1499.390678][T30417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1499.399165][T30417] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1499.409750][T30417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1499.418256][T30417] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1499.427988][T30417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1499.514453][T30417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.536490][T30417] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.551209][T19526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.558459][T19526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.575824][T12536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.583114][T12536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.663642][T30417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1499.713148][T30417] veth0_vlan: entered promiscuous mode [ 1499.728300][T30417] veth1_vlan: entered promiscuous mode [ 1499.764030][T30417] veth0_macvtap: entered promiscuous mode [ 1499.775509][T30417] veth1_macvtap: entered promiscuous mode [ 1499.798965][T30417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1499.816537][T30417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1499.839016][T27821] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.867517][T27821] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.901154][T27821] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.920957][T27821] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.145654][T24578] Bluetooth: hci1: command tx timeout [ 1500.423693][T12533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.452585][T12533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.470543][T30504] usb usb8: usbfs: process 30504 (syz.0.7812) did not claim interface 0 before use [ 1500.491797][T30506] binder_alloc: 30505: pid 30505 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1500.583413][T20471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.613253][T20471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.705362][T24578] Bluetooth: hci3: command tx timeout [ 1501.385320][T24811] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1501.559626][T24811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.597223][T24811] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1501.619031][T24811] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1501.643772][T24811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.670985][T24811] usb 2-1: config 0 descriptor?? [ 1501.684201][T30557] input: syz0 as /devices/virtual/input/input216 [ 1501.703051][T24811] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1501.718935][T24811] dvb-usb: bulk message failed: -22 (3/0) [ 1501.737303][T24811] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1501.776050][T24811] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1501.808577][T24811] usb 2-1: media controller created [ 1501.827574][T24811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1501.862582][T24811] dvb-usb: bulk message failed: -22 (6/0) [ 1501.889591][T24811] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1501.947670][T24811] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input217 [ 1501.993124][T24811] dvb-usb: schedule remote query interval to 150 msecs. [ 1502.011939][T24811] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1502.132490][T14600] usb 2-1: USB disconnect, device number 53 [ 1502.222779][T14600] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1502.785090][T24578] Bluetooth: hci3: command tx timeout [ 1503.297836][T30592] program syz.0.7848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1504.161807][T30623] program syz.1.7861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1504.865403][T24578] Bluetooth: hci3: command tx timeout [ 1505.622397][T30648] bridge0: port 3(syz_tun) entered blocking state [ 1505.641508][T30648] bridge0: port 3(syz_tun) entered disabled state [ 1505.667514][T30648] syz_tun: entered allmulticast mode [ 1505.688666][T30648] syz_tun: entered promiscuous mode [ 1505.699512][T30651] program syz.6.7874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1505.711595][T30648] bridge0: port 3(syz_tun) entered blocking state [ 1505.718267][T30648] bridge0: port 3(syz_tun) entered forwarding state [ 1506.046662][T30661] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7878'. [ 1507.496140][T30716] ipvlan2: entered allmulticast mode [ 1507.519030][T30716] veth0_vlan: entered allmulticast mode [ 1509.763351][T30791] tipc: Started in network mode [ 1509.780156][T30791] tipc: Node identity 4, cluster identity 4711 [ 1509.796033][T30791] tipc: Node number set to 4 [ 1510.594060][T30817] af_packet: tpacket_rcv: packet too big, clamped from 65546 to 32638. macoff=82 [ 1510.629288][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 1510.650449][T24578] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1512.460383][T30884] usb usb8: check_ctrlrecip: process 30884 (syz.4.7973) requesting ep 01 but needs 81 [ 1512.503862][T30884] usb usb8: usbfs: process 30884 (syz.4.7973) did not claim interface 0 before use [ 1512.526766][T30886] fuse: Bad value for 'fd' [ 1513.105389][T24811] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1513.280425][T24811] usb 2-1: config 64 has an invalid interface number: 182 but max is 0 [ 1513.313548][T24811] usb 2-1: config 64 has no interface number 0 [ 1513.340505][T24811] usb 2-1: config 64 interface 182 has no altsetting 0 [ 1513.357985][T24811] usb 2-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=d3.46 [ 1513.373563][T24811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.383403][T24811] usb 2-1: Product: syz [ 1513.393234][T24811] usb 2-1: Manufacturer: syz [ 1513.399129][T24811] usb 2-1: SerialNumber: syz [ 1513.414855][T24811] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1513.656199][T24811] r8152-cfgselector 2-1: USB disconnect, device number 54 [ 1514.613866][T24831] hid_parser_main: 8 callbacks suppressed [ 1514.613889][T24831] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 1514.667576][T24831] hid-generic 0000:0000:0000.0054: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1516.722027][T31009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8021'. [ 1516.888227][T31011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8022'. [ 1518.084117][T31039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8033'. [ 1518.787019][T31056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8039'. [ 1519.565534][T31075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8044'. [ 1519.756577][T31078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8046'. [ 1520.734719][T31110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8056'. [ 1520.949989][T31116] tipc: Cannot configure node identity twice [ 1521.383741][T31129] netlink: 'syz.6.8065': attribute type 29 has an invalid length. [ 1521.722241][T24816] IPVS: starting estimator thread 0... [ 1521.825193][T31147] IPVS: using max 31 ests per chain, 74400 per kthread [ 1523.129324][T31183] [ 1523.131750][T31183] ============================================ [ 1523.137935][T31183] WARNING: possible recursive locking detected [ 1523.144135][T31183] syzkaller #0 Tainted: G L [ 1523.150140][T31183] -------------------------------------------- [ 1523.156312][T31183] syz.2.8082/31183 is trying to acquire lock: [ 1523.162403][T31183] ffffffff8f3d6230 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1523.172787][T31183] [ 1523.172787][T31183] but task is already holding lock: [ 1523.180180][T31183] ffffffff8f3d6230 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1523.190423][T31183] [ 1523.190423][T31183] other info that might help us debug this: [ 1523.198510][T31183] Possible unsafe locking scenario: [ 1523.198510][T31183] [ 1523.205985][T31183] CPU0 [ 1523.209285][T31183] ---- [ 1523.212583][T31183] lock(qp_broker_list.mutex); [ 1523.217478][T31183] lock(qp_broker_list.mutex); [ 1523.222367][T31183] [ 1523.222367][T31183] *** DEADLOCK *** [ 1523.222367][T31183] [ 1523.230541][T31183] May be due to missing lock nesting notation [ 1523.230541][T31183] [ 1523.238902][T31183] 1 lock held by syz.2.8082/31183: [ 1523.244048][T31183] #0: ffffffff8f3d6230 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 1523.254810][T31183] [ 1523.254810][T31183] stack backtrace: [ 1523.260750][T31183] CPU: 1 UID: 0 PID: 31183 Comm: syz.2.8082 Tainted: G L syzkaller #0 PREEMPT(full) [ 1523.260779][T31183] Tainted: [L]=SOFTLOCKUP [ 1523.260786][T31183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1523.260802][T31183] Call Trace: [ 1523.260812][T31183] [ 1523.260820][T31183] dump_stack_lvl+0xe8/0x150 [ 1523.260845][T31183] print_deadlock_bug+0x279/0x290 [ 1523.260869][T31183] __lock_acquire+0x253f/0x2cf0 [ 1523.260893][T31183] ? is_bpf_text_address+0x292/0x2b0 [ 1523.260911][T31183] ? is_bpf_text_address+0x26/0x2b0 [ 1523.260928][T31183] ? kernel_text_address+0xa5/0xe0 [ 1523.260952][T31183] ? __kernel_text_address+0xd/0x30 [ 1523.260977][T31183] ? vmci_qp_broker_detach+0x117/0xf20 [ 1523.261000][T31183] lock_acquire+0x106/0x350 [ 1523.261015][T31183] ? vmci_qp_broker_detach+0x117/0xf20 [ 1523.261043][T31183] __mutex_lock+0x1a3/0x1550 [ 1523.261064][T31183] ? vmci_qp_broker_detach+0x117/0xf20 [ 1523.261088][T31183] ? kasan_save_track+0x4f/0x80 [ 1523.261110][T31183] ? kasan_save_track+0x3e/0x80 [ 1523.261131][T31183] ? kasan_save_free_info+0x46/0x50 [ 1523.261149][T31183] ? __kasan_slab_free+0x5c/0x80 [ 1523.261172][T31183] ? kfree+0x1c5/0x640 [ 1523.261192][T31183] ? vmci_ctx_put+0x5ef/0xc40 [ 1523.261208][T31183] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1523.261224][T31183] ? vmci_datagram_dispatch+0x450/0xc60 [ 1523.261240][T31183] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 1523.261261][T31183] ? vmci_host_close+0x98/0x160 [ 1523.261281][T31183] ? vmci_qp_broker_detach+0x117/0xf20 [ 1523.261302][T31183] ? exit_to_user_mode_loop+0x193/0x680 [ 1523.261319][T31183] ? __pfx___mutex_lock+0x10/0x10 [ 1523.261343][T31183] vmci_qp_broker_detach+0x117/0xf20 [ 1523.261369][T31183] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1523.261391][T31183] ? kasan_quarantine_put+0xbb/0x1f0 [ 1523.261412][T31183] ? lockdep_hardirqs_on+0x7a/0x110 [ 1523.261429][T31183] ? kfree+0x1c5/0x640 [ 1523.261448][T31183] ? vmci_ctx_put+0x5ef/0xc40 [ 1523.261462][T31183] ? vmci_ctx_put+0x141/0xc40 [ 1523.261478][T31183] vmci_ctx_put+0x64e/0xc40 [ 1523.261492][T31183] ? __pfx___schedule+0x10/0x10 [ 1523.261516][T31183] ? vmci_ctx_put+0x141/0xc40 [ 1523.261532][T31183] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1523.261548][T31183] ? preempt_schedule_thunk+0x16/0x30 [ 1523.261571][T31183] ? preempt_schedule_common+0x82/0xd0 [ 1523.261600][T31183] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 1523.261619][T31183] vmci_datagram_dispatch+0x450/0xc60 [ 1523.261639][T31183] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1523.261660][T31183] vmci_qp_broker_detach+0x8dd/0xf20 [ 1523.261687][T31183] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1523.261715][T31183] ? kasan_quarantine_put+0xbb/0x1f0 [ 1523.261739][T31183] ? kfree+0x1c5/0x640 [ 1523.261757][T31183] ? vmci_ctx_put+0x5ef/0xc40 [ 1523.261771][T31183] ? vmci_ctx_put+0x141/0xc40 [ 1523.261787][T31183] vmci_ctx_put+0x64e/0xc40 [ 1523.261803][T31183] ? vmci_ctx_put+0x141/0xc40 [ 1523.261819][T31183] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1523.261841][T31183] vmci_host_close+0x98/0x160 [ 1523.261861][T31183] ? __pfx_vmci_host_close+0x10/0x10 [ 1523.261883][T31183] __fput+0x44f/0xa60 [ 1523.261907][T31183] task_work_run+0x1d9/0x270 [ 1523.261930][T31183] ? __pfx_task_work_run+0x10/0x10 [ 1523.261956][T31183] exit_to_user_mode_loop+0x193/0x680 [ 1523.261971][T31183] ? rcu_is_watching+0x15/0xb0 [ 1523.261990][T31183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.262007][T31183] do_syscall_64+0x353/0x580 [ 1523.262024][T31183] ? clear_bhb_loop+0x40/0x90 [ 1523.262042][T31183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.262058][T31183] RIP: 0033:0x7f45b1b9ce59 [ 1523.262075][T31183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.262089][T31183] RSP: 002b:00007f45b2a95028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1523.262114][T31183] RAX: 0000000000000000 RBX: 00007f45b1e16090 RCX: 00007f45b1b9ce59 [ 1523.262126][T31183] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 1523.262138][T31183] RBP: 00007f45b1c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1523.262148][T31183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1523.262159][T31183] R13: 00007f45b1e16128 R14: 00007f45b1e16090 R15: 00007f45b1f3fa48 [ 1523.262178][T31183]