last executing test programs: 9m57.07161717s ago: executing program 2 (id=40413): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @local}, 0x14) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)='H', 0x1}], 0x1) 9m57.01381364s ago: executing program 2 (id=40414): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0x7) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x11) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 9m56.875917086s ago: executing program 2 (id=40415): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 9m56.742069405s ago: executing program 2 (id=40416): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 9m55.828349983s ago: executing program 2 (id=40417): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 9m55.546252731s ago: executing program 2 (id=40418): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3e, {0x0, 0x0, 0xa000003, 0x0, 0x4, 0xdbd1}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 9m55.05489739s ago: executing program 32 (id=40418): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3e, {0x0, 0x0, 0xa000003, 0x0, 0x4, 0xdbd1}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 9m52.476873542s ago: executing program 0 (id=40443): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9m52.116430781s ago: executing program 0 (id=40446): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "2455981120b3cab5b50000000000004000", [0x0, 0x400]}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 9m51.750169762s ago: executing program 0 (id=40449): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9m51.577692233s ago: executing program 0 (id=40451): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 9m50.596731032s ago: executing program 0 (id=40458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) 9m49.910272435s ago: executing program 0 (id=40464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x2, 0x13, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xa}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x20, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 9m49.308762326s ago: executing program 33 (id=40464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x2, 0x13, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xa}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x20, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 6m52.641075708s ago: executing program 4 (id=42010): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) set_mempolicy(0x3, &(0x7f0000000000)=0xfff, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 6m52.052702332s ago: executing program 4 (id=42019): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) 6m51.815683898s ago: executing program 4 (id=42023): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f00001ef000/0x4000)=nil, 0x4000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 6m50.748306894s ago: executing program 4 (id=42033): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 6m49.779626179s ago: executing program 4 (id=42037): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8f) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000180)='rw\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 6m49.18831437s ago: executing program 4 (id=42043): write(0xffffffffffffffff, &(0x7f00000001c0)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4397001a39662", 0x25) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 6m48.55604852s ago: executing program 34 (id=42043): write(0xffffffffffffffff, &(0x7f00000001c0)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4397001a39662", 0x25) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 1m30.576424141s ago: executing program 7 (id=42928): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) 1m29.523386913s ago: executing program 7 (id=42933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000036000000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r1) close(0x3) 1m28.60606837s ago: executing program 7 (id=42949): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xb0, 0x0, 0x3, [{{0x0, 0x3, 0x8000000000000001, 0x8, 0xe4aa, 0xd858, {0x5, 0x7, 0x0, 0x7fffffff, 0x7, 0x7, 0xa, 0xc, 0x3ae, 0x4000, 0x7fff, 0x0, 0x0, 0x7, 0x3}}, {0x6, 0xd72, 0x1, 0xc, '\xd2'}}]}, 0x0, 0x0, 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1m28.461568737s ago: executing program 7 (id=42952): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(r0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x220) 1m28.355086072s ago: executing program 7 (id=42954): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 1m28.005887032s ago: executing program 7 (id=42957): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) 1m27.617681219s ago: executing program 35 (id=42957): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) 5.674494777s ago: executing program 8 (id=43571): unshare(0x26020480) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.431645262s ago: executing program 8 (id=43575): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/158, 0x9e}], 0x1}, 0x0) 5.252586624s ago: executing program 8 (id=43579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000580)="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", 0x300}], 0x1) 5.137611221s ago: executing program 6 (id=43580): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000980)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 5.002425649s ago: executing program 1 (id=43583): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e1f, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 4.870011012s ago: executing program 1 (id=43585): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x4000}, {r0, 0x100}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x4, 0x29dc5, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 4.417930199s ago: executing program 3 (id=43591): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) setrlimit(0xf, &(0x7f00000000c0)={0x1, 0x3}) timer_settime(r0, 0x1, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 4.261887046s ago: executing program 8 (id=43592): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4.220484022s ago: executing program 3 (id=43593): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0xffec, 0x40880, &(0x7f0000000440)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 4.163817576s ago: executing program 8 (id=43594): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x180004) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 4.038040635s ago: executing program 3 (id=43596): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_enter(r1, 0x0, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) 3.977148182s ago: executing program 1 (id=43597): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 3.882045527s ago: executing program 1 (id=43598): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.880727872s ago: executing program 3 (id=43599): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010003bd7000f9dbdf255500000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0xc050}, 0x810) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) 3.80071034s ago: executing program 1 (id=43600): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) 3.671351947s ago: executing program 3 (id=43601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1, 0x9, 0x10000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 3.313172247s ago: executing program 3 (id=43602): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001080)={0x14, 0x0, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, 0x0, 0x0}, 0x0) 1.91758602s ago: executing program 6 (id=43611): r0 = memfd_create(&(0x7f0000000280)='-E\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2va}knh\x02\x00)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xdde)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN.%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$inet_mptcp(0x2, 0x1, 0x106) dup(r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.785817036s ago: executing program 6 (id=43612): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) 1.609256061s ago: executing program 6 (id=43613): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) recvmmsg$unix(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0) 1.326477934s ago: executing program 6 (id=43614): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af0", 0x9f}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000640)=""/227, 0xe3}], 0x2}, 0x0) 1.202028937s ago: executing program 6 (id=43615): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffc, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0xa, 0x6c}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, 0x0, 0x0) 1.091435325s ago: executing program 8 (id=43616): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000001100)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000200)={0x40, 0x17}, 0x0, 0x0}) 500.841774ms ago: executing program 5 (id=43618): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="ebe3a0e961837b796cfd1647e2080000000000000080b3720022205e81f4a7f71c197baae1efd7e8004a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4e}, {&(0x7f00000006c0)="e8710e444d50a969ff678371e3214aeee71dee3819271482a4975a52c18b9b8b4db3945d1032005eabe97b4dc33a47d3a158da98255ccdd4c15eb6c9857345444d8456d30026b433a2efdd5b00186f35cdcdb93a4722bf356a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892", 0x72}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 447.862396ms ago: executing program 5 (id=43619): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feffe7d5b2a4f9810fc5c81195554cdc"], 0xc8) dup3(r1, r0, 0x0) 378.985966ms ago: executing program 5 (id=43620): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beefff5d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9ca38fff48f3be52163448412ba8", 0xc45e158d1a96cd32}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x9cde14b4b725c073}], 0x1, 0x448d4) recvmmsg(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/109, 0x6d}, {&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000640)=""/218, 0xda}, {&(0x7f0000000740)=""/113, 0x71}, {&(0x7f00000007c0)=""/97, 0x61}], 0x5}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x8000}], 0x2, 0x40000000, 0x0) 311.495157ms ago: executing program 5 (id=43621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0xa980000000000000, 0x10000, 0xe7, 0x0, 0x12}) 81.487604ms ago: executing program 5 (id=43622): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0x1, 0x36, 0xc1b0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x1b0, 0xfffffffffffffffd}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) 25.019216ms ago: executing program 5 (id=43623): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x804a, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10012, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x106, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) mount$fuse(0x0, 0x0, 0x0, 0x10001, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 0s ago: executing program 1 (id=43624): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x6}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000002980)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): to relocate VQ 0x0 after dequeue, screwing up backlog [ 3225.848987][T21819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3226.239879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3227.280947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3228.323648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3229.366932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3230.304943][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3230.313339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3230.413727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3230.944795][T16716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3231.455622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3232.465579][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3233.507812][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3234.548552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3235.590566][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3236.065950][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3236.074451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3236.640394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3236.717820][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3237.704331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3238.746148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3238.797111][T29157] Bluetooth: hci2: command 0x0406 tx timeout [ 3239.838391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3240.881245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3241.840389][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3241.848999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3241.924336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3242.490851][T16716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3242.967011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3244.009935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3245.054964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3246.099841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3247.143906][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3247.584925][T16716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3247.593289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3248.145930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3248.233365][T21819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3249.197880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3250.246303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3251.291943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3252.339242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3252.704880][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3252.713309][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3253.382894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3253.985206][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3254.390393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3255.433833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3256.477280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3257.519993][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3258.478907][ T9275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3258.487273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3258.564232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3259.025210][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3259.608276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3260.651445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3261.697430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3262.743468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3263.787168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3264.225051][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3264.233210][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3264.241537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3264.876340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3265.929107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3266.972129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3268.013999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3269.057047][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3269.985128][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3269.993379][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3270.001752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3270.064886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3271.108238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3272.150028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3272.586552][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 3272.593022][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 3273.193774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3274.238386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3275.106939][T16716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3275.115591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3275.280206][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3275.745158][T16716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3276.325152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3277.370131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3278.412688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3279.455840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3280.499631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3280.865477][ T1861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3280.873828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3281.504856][T16716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3281.544384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3282.631704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3283.673351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3284.716608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3285.760001][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3286.629391][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3286.637802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3286.801731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3287.280501][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3287.843774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3288.886848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3289.928944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3290.973483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3292.017186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3292.409189][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3292.417692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3293.027745][ T1861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3293.060373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3294.104489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3295.194105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3296.237031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3297.279549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3297.546005][ T1861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3297.554445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3298.346271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3298.789120][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3299.440174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3300.481978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3301.524184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3302.569872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3303.266468][T16716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3303.274864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3303.613759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3303.904956][T16716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3304.658521][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3305.702021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3306.746204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3307.832903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3308.877708][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3309.051398][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3309.059999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3309.664920][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3309.919831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3310.966352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3312.011082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3313.054923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3314.096644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3314.184357][ T1861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3314.192905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3315.139798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3315.443938][ T1861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3316.181814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3317.224890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3318.313651][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3319.356612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3319.905499][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3319.913851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3320.406046][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3321.186459][ T1861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3321.457484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3322.502629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3323.545061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3324.633945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3325.665052][ T1861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3325.673567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3325.686627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3326.340293][T21819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3326.731598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3327.780860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3328.824282][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3329.824951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3330.874785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3331.424933][T21819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3331.433291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3331.924937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3332.065644][ T1861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3332.969174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3334.017133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3334.028225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3334.029104][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 3334.043734][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 3335.105245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3336.146360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3336.544797][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3336.553114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3337.185003][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3337.196185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3338.238097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3339.279559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3340.321409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3341.363962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3342.407392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3342.944989][T16716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3343.450631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3344.496661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3345.539889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3346.151866][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3346.160447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3346.585109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3347.674168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3348.705227][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3348.720024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3349.764867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3350.823376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3351.216306][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3351.224756][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3351.826166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3352.872498][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3353.826522][ T1861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3353.913160][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3354.956471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3356.000751][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3356.395263][T21819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3356.403693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3357.043735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3358.086393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3359.127794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3359.585991][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3360.080935][T23042] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 3360.172767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3360.454886][T23042] usb 4-1: Using ep0 maxpacket: 16 [ 3360.727962][T23042] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3360.738399][T23042] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3361.095555][T29245] netlink: 27 bytes leftover after parsing attributes in process `syz.7.42203'. [ 3361.112809][T23042] usb 4-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 3361.121991][T23042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3361.130028][T23042] usb 4-1: Product: syz [ 3361.134277][T23042] usb 4-1: Manufacturer: syz [ 3361.138910][T23042] usb 4-1: SerialNumber: syz [ 3361.172049][T23042] usb 4-1: config 0 descriptor?? [ 3361.202357][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3361.502037][T29192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3361.511388][T29192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3361.528413][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3361.537195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3361.576603][T29192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3361.601360][T29192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3361.640698][T23042] usb 4-1: USB disconnect, device number 87 [ 3362.224206][ T5724] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 3362.267486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3362.485853][T29315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42223'. [ 3362.520837][T20443] hid-generic 0000:0000:0000.00EA: unknown main item tag 0x0 [ 3362.541817][T20443] hid-generic 0000:0000:0000.00EA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3362.888276][ T5724] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 3362.896619][ T5724] usb 4-1: config 0 has no interface number 0 [ 3362.903298][ T5724] usb 4-1: config 0 interface 229 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 10 [ 3362.914502][ T5724] usb 4-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3363.026124][ T5724] usb 4-1: string descriptor 0 read error: -71 [ 3363.032514][ T5724] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 3363.041616][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3363.055808][ T5724] usb 4-1: config 0 descriptor?? [ 3363.072310][ T5724] usb 4-1: can't set config #0, error -71 [ 3363.079826][ T5724] usb 4-1: USB disconnect, device number 88 [ 3363.350912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3364.054980][T29379] tipc: Started in network mode [ 3364.060008][T29379] tipc: Node identity b67d3793433f, cluster identity 4711 [ 3364.067408][T29379] tipc: Enabled bearer , priority 0 [ 3364.145853][T29372] tipc: Disabling bearer [ 3364.418623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3364.632165][T29409] binder: 29406:29409 ioctl 4018620d 0 returned -22 [ 3364.714101][T21819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3365.202726][T29424] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.42250'. [ 3365.454929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3366.472174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3367.266618][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3367.275009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3367.507990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3368.577056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3368.835418][T29513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42269'. [ 3369.354496][ T5256] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 3369.516644][ T5256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3369.547847][ T5256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3369.571431][ T5256] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3369.602619][ T5256] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3369.617154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3369.624875][ T5256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3369.666516][ T5256] usb 4-1: config 0 descriptor?? [ 3370.054540][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 3370.054631][ T30] audit: type=1326 audit(1779822236.567:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29561 comm="syz.1.42277" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707f01c code=0x0 [ 3370.163731][ T5256] plantronics 0003:047F:FFFF.00EB: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 3370.508291][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3370.645220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3370.807303][ C1] plantronics 0003:047F:FFFF.00EB: hid_field_extract() called with n (132) > 32! (swapper/1) [ 3371.033115][ T5256] usb 4-1: USB disconnect, device number 89 [ 3371.707238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3372.272029][T23042] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 3372.525442][T29675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.42304'. [ 3372.536624][T29675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.42304'. [ 3372.661972][T23042] usb 4-1: Using ep0 maxpacket: 8 [ 3372.785396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3372.820464][T29689] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.42308'. [ 3373.068177][T16716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3373.076921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3373.304706][T23042] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3373.313833][T23042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3373.323156][T23042] usb 4-1: Product: syz [ 3373.327396][T23042] usb 4-1: Manufacturer: syz [ 3373.332038][T23042] usb 4-1: SerialNumber: syz [ 3373.364853][T29711] netlink: 'syz.7.42315': attribute type 1 has an invalid length. [ 3373.375538][T23042] usb 4-1: config 0 descriptor?? [ 3373.514980][T29711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3373.717849][T23042] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3373.843788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3374.374506][T20443] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 3374.528789][T20443] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 3374.538897][T20443] usb 6-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 3374.548308][T20443] usb 6-1: Product: syz [ 3374.552558][T20443] usb 6-1: Manufacturer: syz [ 3374.557715][T20443] usb 6-1: SerialNumber: syz [ 3374.566504][T20443] usb 6-1: config 0 descriptor?? [ 3374.584448][T20443] ch341 6-1:0.0: ch341-uart converter detected [ 3374.892558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3374.940438][T23042] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3374.952894][T23042] usb 4-1: USB disconnect, device number 90 [ 3374.987370][ C0] ip6_tunnel: ip6tnl8 xmit: Local address not yet configured! [ 3375.298079][T29800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3375.700077][T20443] ch341-uart ttyUSB0: break control not supported, using simulated break [ 3375.720894][T29817] kvm: apic: phys broadcast and lowest prio [ 3375.733429][T20443] usb 6-1: ch341-uart converter now attached to ttyUSB0 [ 3375.759368][T20443] usb 6-1: USB disconnect, device number 25 [ 3375.794111][T29287] udevd[29287]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 3375.805530][T20443] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 3375.833661][T20443] ch341 6-1:0.0: device disconnected [ 3375.921786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3376.256139][ T1861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3376.350536][T29853] xt_policy: too many policy elements [ 3376.718127][T29866] input: syz0 as /devices/virtual/input/input334 [ 3376.987969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3377.226868][T29897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3377.250386][T29897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3377.299802][T29897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3377.334379][T29897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3377.932637][T29925] netlink: 28 bytes leftover after parsing attributes in process `syz.7.42367'. [ 3377.956594][T29925] netlink: 28 bytes leftover after parsing attributes in process `syz.7.42367'. [ 3378.379877][T23042] hid-generic 0000:0000:0000.00EC: unknown main item tag 0x0 [ 3378.394915][T23042] hid-generic 0000:0000:0000.00EC: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3378.644774][ T5256] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 3378.804456][ T5256] usb 6-1: Using ep0 maxpacket: 8 [ 3378.816097][ T5256] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 3378.833246][ T5256] usb 6-1: config 179 has no interface number 0 [ 3378.850416][ T5256] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3378.875522][ T5256] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 3378.905381][ T5256] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3378.926736][ T5256] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 3378.954376][ T5256] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3378.984979][ T5256] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 3378.999338][ T5256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3379.030780][T29944] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3379.140010][ C0] net_ratelimit: 4 callbacks suppressed [ 3379.140033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3379.238411][T29966] netlink: 'syz.7.42376': attribute type 11 has an invalid length. [ 3379.246555][T29966] netem: change failed [ 3379.368157][ T5256] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input335 [ 3379.794106][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880374de400: rx timeout, send abort [ 3379.813309][T23042] usb 6-1: USB disconnect, device number 26 [ 3379.813317][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 3379.813436][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3380.165024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3380.306400][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a6a9400: rx timeout, send abort [ 3380.815865][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a6a9400: abort rx timeout. Force session deactivation [ 3381.207897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3381.972399][T30083] binder: 30079:30083 ioctl c0306201 80000480 returned -14 [ 3382.010529][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3382.236432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3382.593420][T30118] netlink: 'syz.1.42400': attribute type 8 has an invalid length. [ 3382.902240][ T30] audit: type=1326 audit(1779822249.417:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30131 comm="syz.1.42405" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707f01c code=0x0 [ 3382.953188][T30135] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.42406'. [ 3382.966254][T30137] netlink: 4 bytes leftover after parsing attributes in process `syz.7.42404'. [ 3383.309760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3383.600792][T30164] tls_set_device_offload_rx: netdev not found [ 3383.871406][ T30] audit: type=1800 audit(1779822250.387:2382): pid=30169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42417" name="bus" dev="tmpfs" ino=43555 res=0 errno=0 [ 3384.406696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3384.544449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3384.557304][T21819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3384.565807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3384.977616][T30230] input: syz0 as /devices/virtual/input/input336 [ 3384.996665][T30233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42434'. [ 3385.044649][T30233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42434'. [ 3385.156039][T23076] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 3385.430305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3385.524185][T23076] usb 4-1: Using ep0 maxpacket: 16 [ 3385.582564][T30263] loop5: detected capacity change from 0 to 7 [ 3385.590219][T30263] Dev loop5: unable to read RDB block 7 [ 3385.596629][T30263] loop5: unable to read partition table [ 3385.602563][T30263] loop5: partition table beyond EOD, truncated [ 3385.621638][T30263] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3385.800084][T23076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3385.811004][T23076] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3385.820768][T23076] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3385.833582][T23076] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3385.861268][T30274] bridge1: entered promiscuous mode [ 3385.866562][T30274] bridge1: entered allmulticast mode [ 3385.873858][T23076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3385.886654][T23076] usb 4-1: config 0 descriptor?? [ 3386.060157][T30288] tipc: Cannot configure node identity twice [ 3386.390520][T30306] kvm: user requested TSC rate below hardware speed [ 3386.477214][T23076] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.00ED/input/input337 [ 3386.504913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3386.606140][T23076] microsoft 0003:045E:07DA.00ED: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 3386.741217][ T5256] usb 4-1: USB disconnect, device number 91 [ 3386.848623][T30330] sctp: [Deprecated]: syz.5.42460 (pid 30330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3386.848623][T30330] Use struct sctp_sack_info instead [ 3387.094156][T30344] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 3387.120476][T30344] bond1: (slave lo): Enslaving as an active interface with an up link [ 3387.131813][T30344] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 3387.624737][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3387.763950][ T140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3388.159039][T30419] netlink: 'syz.3.42478': attribute type 1 has an invalid length. [ 3388.246649][T30419] gretap3: entered allmulticast mode [ 3388.261929][T30419] bond10: (slave gretap3): making interface the new active one [ 3388.279863][T30419] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 3388.592743][T30471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42483'. [ 3388.621485][T30471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42483'. [ 3388.646385][T30471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42483'. [ 3388.712315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3389.104838][T30499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42492'. [ 3389.130851][T30499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42492'. [ 3389.511958][T30520] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.42501'. [ 3389.545205][T23042] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 3389.585249][ T1861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3389.593766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3389.784835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3389.922865][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805414c000: rx timeout, send abort [ 3389.931659][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805414c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 3390.253246][T23042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3390.264419][T23042] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3390.273511][T23042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3390.300311][T23042] usb 4-1: config 0 descriptor?? [ 3390.852479][T23042] usbhid 4-1:0.0: can't add hid device: -71 [ 3390.858551][T23042] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3390.874981][T23042] usb 4-1: USB disconnect, device number 92 [ 3390.895626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3391.070969][T30577] syzkaller1: entered promiscuous mode [ 3391.077249][T30577] syzkaller1: entered allmulticast mode [ 3391.090948][T23076] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 3391.310771][T23042] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 3391.447563][T23076] usb 6-1: Using ep0 maxpacket: 32 [ 3391.671753][T23042] usb 4-1: Using ep0 maxpacket: 16 [ 3391.714109][T23076] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 3391.722280][T23076] usb 6-1: config 0 has no interface number 0 [ 3391.742654][T23076] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3391.765812][T23076] usb 6-1: config 0 interface 89 has no altsetting 0 [ 3391.939430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3391.949222][T23042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3391.960182][T23042] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 3391.969312][T23042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3391.990169][T23042] usb 4-1: config 0 descriptor?? [ 3392.169765][T23076] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 3392.178872][T23076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3392.186901][T23076] usb 6-1: Product: syz [ 3392.191083][T23076] usb 6-1: Manufacturer: syz [ 3392.195723][T23076] usb 6-1: SerialNumber: syz [ 3392.256161][T23076] usb 6-1: config 0 descriptor?? [ 3392.303070][T23042] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 3392.317328][T23042] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input338 [ 3392.334908][T23024] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 3392.353326][T23076] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 3392.362937][T23076] em28xx 6-1:0.89: Video interface 89 found: [ 3392.402677][T23042] usb 4-1: USB disconnect, device number 93 [ 3392.440282][ C0] powermate: config urb returned -71 [ 3392.445675][ C0] powermate: usb_submit_urb(config) failed [ 3392.497396][T23024] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 3392.516045][T23024] usb 2-1: config 0 has no interface number 0 [ 3392.525691][T23024] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 3392.537658][T23024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3392.548687][T23024] usb 2-1: Product: syz [ 3392.562317][T23024] usb 2-1: Manufacturer: syz [ 3392.569282][T23024] usb 2-1: SerialNumber: syz [ 3392.579779][T23024] usb 2-1: config 0 descriptor?? [ 3392.590407][T23024] usb 2-1: selecting invalid altsetting 1 [ 3392.601281][T23024] dvb_ttusb_budget: ttusb_init_controller: error [ 3392.609489][T23024] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 3392.688232][T23024] DVB: Unable to find symbol stv0299_attach() [ 3392.766393][T23024] DVB: Unable to find symbol tda8083_attach() [ 3392.773951][T23024] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 3392.796666][T30610] m920x_read = error: -19 [ 3392.897507][T23024] usb 2-1: USB disconnect, device number 90 [ 3392.974082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3393.066272][T23076] em28xx 6-1:0.89: unknown em28xx chip ID (64) [ 3393.226054][ T30] audit: type=1326 audit(1779822259.747:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30677 comm="syz.6.42534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70af01c code=0x0 [ 3393.353413][T30686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42536'. [ 3393.522159][T30690] netlink: 'syz.1.42537': attribute type 1 has an invalid length. [ 3393.546199][T16717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3393.590226][T23076] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 3393.599570][T23076] em28xx 6-1:0.89: board has no eeprom [ 3393.610796][T30686] tipc: Resetting bearer [ 3393.771629][T23076] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 3393.778935][T23076] em28xx 6-1:0.89: analog set to bulk mode. [ 3393.786438][T30695] em28xx 6-1:0.89: Registering V4L2 extension [ 3393.802224][T23076] usb 6-1: USB disconnect, device number 27 [ 3393.825408][T23076] em28xx 6-1:0.89: Disconnecting em28xx [ 3393.936750][T30695] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 3393.943777][T30695] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 3394.005735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3394.016953][T30695] em28xx 6-1:0.89: No AC97 audio processor [ 3394.054845][T30695] usb 6-1: Decoder not found [ 3394.059519][T30695] em28xx 6-1:0.89: failed to create media graph [ 3394.065912][T30695] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 3394.145391][T30695] em28xx 6-1:0.89: Registering snapshot button... [ 3394.155632][T30695] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input339 [ 3394.209111][T30695] em28xx 6-1:0.89: Remote control support is not available for this card. [ 3394.245934][T23076] em28xx 6-1:0.89: Closing input extension [ 3394.251857][T23076] em28xx 6-1:0.89: Deregistering snapshot button [ 3394.339243][T23076] em28xx 6-1:0.89: Freeing device [ 3394.627336][T16716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3394.636005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3394.940157][T30686] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 3395.029449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3395.087907][T30686] veth1_vlan: left allmulticast mode [ 3395.101631][T30690] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 3395.245380][ T1861] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3395.314421][ T1861] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3395.366479][ T1861] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3395.420736][ T1861] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3395.443175][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 3395.449732][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 3395.491547][ T1861] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3395.514507][ T1861] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3395.553544][ T1861] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3395.577077][ T1861] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3396.086062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3396.704619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3396.726102][T30802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3396.750537][T30802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3396.762121][T30802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3396.824022][T30802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3396.890625][T30802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3398.179691][T30847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42574'. [ 3398.616303][T30719] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 3398.774529][ T9850] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 3398.926610][ T9850] usb 4-1: Using ep0 maxpacket: 16 [ 3398.948101][ T9850] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 3398.976952][ T9850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3399.009698][ T9850] usb 4-1: Product: syz [ 3399.026480][ T9850] usb 4-1: Manufacturer: syz [ 3399.042243][ T9850] usb 4-1: SerialNumber: syz [ 3399.076004][ T9850] usb 4-1: config 0 descriptor?? [ 3399.109746][ T9850] usb 4-1: selecting invalid altsetting 1 [ 3399.129377][ T9850] technisat-usb2: could not set alternate setting to 0 [ 3399.307713][ T9850] technisat-usb2: firmware version: 0.0 [ 3399.335781][ T9850] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 3399.656623][T30719] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 3399.665760][T30719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3399.673801][T30719] usb 2-1: Product: syz [ 3399.678005][T30719] usb 2-1: Manufacturer: syz [ 3399.682634][T30719] usb 2-1: SerialNumber: syz [ 3399.692058][T30719] usb 2-1: config 0 descriptor?? [ 3399.723034][ T9850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3399.743833][ T9850] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 3399.754367][T22491] net_ratelimit: 6 callbacks suppressed [ 3399.754389][T22491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3399.768581][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3399.788332][ T9850] usb 4-1: media controller created [ 3399.802287][ T9850] technisat-usb2: i2c-error: out failed 53 = -22 [ 3399.821157][ T9850] dvb-usb: MAC address reading failed. [ 3399.861087][ T9850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3399.980461][ T9850] DVB: Unable to find symbol stv090x_attach() [ 3400.119850][ T9850] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 3400.227274][ T9850] rc_core: IR keymap rc-technisat-usb2 not found [ 3400.234075][ T9850] Registered IR keymap rc-empty [ 3400.249194][ T9850] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 3400.265355][ T9850] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input340 [ 3400.281477][ T9850] dvb-usb: schedule remote query interval to 100 msecs. [ 3400.325296][ T9850] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 3400.344225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3400.370206][ T9850] usb 4-1: USB disconnect, device number 94 [ 3400.460986][ T9850] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 3401.223040][T30719] usb 2-1: unexpected transceiver, part 0x00 version 0x27 [ 3401.296542][T30980] tls_set_device_offload: netdev not found [ 3401.361475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3401.495672][T30719] usb 2-1: Firmware version (0.0) predates our first public release. [ 3401.503844][T30719] usb 2-1: Please update to version 0.2 or newer [ 3401.539712][T30719] usb 2-1: atusb_probe: initialization failed, error = -19 [ 3401.553915][T30719] usb 2-1: USB disconnect, device number 91 [ 3402.395346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3402.836437][T31032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.42621'. [ 3403.075662][T31056] netlink: 'syz.7.42626': attribute type 10 has an invalid length. [ 3403.083648][T31056] netlink: 40 bytes leftover after parsing attributes in process `syz.7.42626'. [ 3403.155462][T31056] dummy0: entered promiscuous mode [ 3403.161732][T31056] bridge0: port 3(dummy0) entered blocking state [ 3403.168250][T31056] bridge0: port 3(dummy0) entered disabled state [ 3403.175079][T31056] dummy0: entered allmulticast mode [ 3403.202402][T31056] bridge0: port 3(dummy0) entered blocking state [ 3403.208932][T31056] bridge0: port 3(dummy0) entered forwarding state [ 3403.430513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3403.644745][ T9850] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 3403.807206][ T9850] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3403.837688][ T9850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3403.851326][T30744] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 3403.873934][ T9850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3403.897189][ T9850] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3403.925612][ T9850] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3403.945258][ T9850] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3403.958327][ T9850] usb 6-1: Manufacturer: syz [ 3403.969051][ T9850] usb 6-1: config 0 descriptor?? [ 3404.037712][T30744] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 3404.057361][T30744] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 3404.080665][T30744] usb 4-1: config 0 has no interface number 0 [ 3404.096597][T30744] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 3404.107211][T30744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3404.116773][T30744] usb 4-1: Product: syz [ 3404.121109][T30744] usb 4-1: Manufacturer: syz [ 3404.128782][T30744] usb 4-1: SerialNumber: syz [ 3404.143892][T30744] usb 4-1: config 0 descriptor?? [ 3404.387422][T21819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3404.429610][ T9850] appleir 0003:05AC:8243.00EE: unknown main item tag 0x0 [ 3404.497576][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3404.502548][ T9850] appleir 0003:05AC:8243.00EE: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 3404.644371][T30744] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 3404.676494][T30744] uvcvideo 4-1:0.64: No valid video chain found. [ 3404.717095][T30744] usb 4-1: USB disconnect, device number 95 [ 3406.362880][T31216] syzkaller1: entered promiscuous mode [ 3406.368791][T31216] syzkaller1: entered allmulticast mode [ 3406.680325][T30719] usb 6-1: USB disconnect, device number 28 [ 3406.793560][ T30] audit: type=1326 audit(1779822273.307:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31242 comm="syz.3.42675" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f2901c code=0x0 [ 3407.065285][T31256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.42678'. [ 3407.078183][T31256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.42678'. [ 3408.946731][T30719] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 3409.399099][T31376] netlink: 'syz.6.42707': attribute type 1 has an invalid length. [ 3409.413947][T30719] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 3409.449396][T31376] bond1: entered promiscuous mode [ 3409.472804][T31376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3409.569433][T31410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3409.577264][T31410] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 3409.589435][T31410] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 3409.606149][T30719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3409.615122][T30719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3409.626075][T30719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3409.638658][T31410] bond1: (slave ip6gre1): making interface the new active one [ 3409.654827][ T5724] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 3409.662619][T31410] ip6gre1: entered promiscuous mode [ 3409.675275][T31410] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 3409.792862][T30719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3409.801944][T30719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3409.812939][T30719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3409.977642][T30719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3409.986622][T30719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3409.997529][T30719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3410.080172][ T5724] usb 6-1: Using ep0 maxpacket: 16 [ 3410.139192][T31431] netlink: 'syz.7.42715': attribute type 2 has an invalid length. [ 3410.148049][T31431] netlink: 8 bytes leftover after parsing attributes in process `syz.7.42715'. [ 3410.174401][T30719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3410.183377][T30719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3410.194279][T30719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3410.356269][T30719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3410.365290][T30719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3410.376207][T30719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3410.383247][ T5724] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3410.410854][ T5724] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 3410.420853][ T5724] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 3410.430547][ T5724] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 3410.547757][T30719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3410.557121][T30719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3410.573373][T30719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3410.641189][ T5724] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3410.650314][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3410.658355][ T5724] usb 6-1: SerialNumber: syz [ 3410.692614][T31368] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3410.700111][T31368] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3410.734847][T30719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3410.743830][T30719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3410.754736][T30719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3410.762889][ T5724] hub 6-1:1.0: bad descriptor, ignoring hub [ 3410.769051][ T5724] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3410.924845][T30719] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3410.924909][T30719] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3410.924942][T30719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3411.065130][ T5724] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 3411.116599][ T5724] usb 6-1: USB disconnect, device number 29 [ 3411.302464][T30719] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3411.311603][T30719] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3411.320021][T30719] usb 2-1: Product: syz [ 3411.324223][T30719] usb 2-1: Manufacturer: syz [ 3411.328852][T30719] usb 2-1: SerialNumber: syz [ 3411.336698][T30719] usb 2-1: config 0 descriptor?? [ 3411.450656][T30719] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 3411.567008][ T5724] usb 2-1: USB disconnect, device number 92 [ 3411.588425][ T5724] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 3411.820666][T30719] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 3412.470926][T30719] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3412.482016][T30719] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 3412.492845][T30719] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 3412.608586][T30719] usb 6-1: string descriptor 0 read error: -71 [ 3412.614844][T30719] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3412.623932][T30719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3412.750231][T30719] usb 6-1: can't set config #1, error -71 [ 3412.757728][T30719] usb 6-1: USB disconnect, device number 30 [ 3413.328710][T31546] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.42745'. [ 3413.516461][T31556] kvm: user requested TSC rate below hardware speed [ 3413.818800][T31574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42755'. [ 3413.840217][T31574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42755'. [ 3413.851569][T31574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42755'. [ 3414.177017][T31591] vivid-006: disconnect [ 3414.186345][T31590] vivid-006: reconnect [ 3414.325288][T30744] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 3414.496492][T30744] usb 2-1: Using ep0 maxpacket: 8 [ 3414.510186][T30744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3414.533892][T30744] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3414.552904][T30744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3414.588037][T30744] usb 2-1: config 0 descriptor?? [ 3414.656010][T31614] vlan5: entered allmulticast mode [ 3414.661216][T31614] bond0: entered allmulticast mode [ 3414.681976][T31614] netlink: 14 bytes leftover after parsing attributes in process `syz.3.42767'. [ 3414.712893][T31614] bond0 (unregistering): Released all slaves [ 3414.729340][T30719] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 3414.898030][T30744] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3414.984730][T31639] : entered promiscuous mode [ 3415.061644][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880506ae000: rx timeout, send abort [ 3415.070420][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880506ae000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 3415.122186][T30719] usb 6-1: Using ep0 maxpacket: 8 [ 3415.144040][T31586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3415.183505][T31586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3415.393717][T30719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3415.404802][T30719] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3415.413902][T30719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3415.423650][T30744] usb 2-1: USB disconnect, device number 93 [ 3415.460364][T30719] usb 6-1: config 0 descriptor?? [ 3415.677153][T31667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.42772'. [ 3415.691981][T31667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.42772'. [ 3415.703299][T31667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.42772'. [ 3415.817019][T30719] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3415.946266][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 3416.288334][T30719] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0 [ 3416.323529][T30719] hid-generic 0000:0000:0000.00EF: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3416.390289][T30744] usb 6-1: USB disconnect, device number 31 [ 3417.836386][T30719] hid-generic 0000:0000:0000.00F0: unknown main item tag 0x0 [ 3417.845923][T30719] hid-generic 0000:0000:0000.00F0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3418.124538][T30742] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 3418.285907][T30742] usb 2-1: Using ep0 maxpacket: 32 [ 3418.298947][T30742] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 3418.318408][T30742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3418.360369][T30742] usb 2-1: config 0 descriptor?? [ 3418.427498][T30742] gspca_main: sunplus-2.14.0 probing 041e:400b [ 3418.909941][T31799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.42802'. [ 3419.231176][T31810] netlink: 4 bytes leftover after parsing attributes in process `syz.7.42805'. [ 3419.270873][T31810] netlink: 72 bytes leftover after parsing attributes in process `syz.7.42805'. [ 3419.617431][T30742] gspca_sunplus: reg_w_riv err -71 [ 3419.623600][T30742] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 3419.676872][T30742] usb 2-1: USB disconnect, device number 94 [ 3419.864092][T31840] netlink: 'syz.5.42812': attribute type 2 has an invalid length. [ 3419.875347][T31840] netlink: 16 bytes leftover after parsing attributes in process `syz.5.42812'. [ 3420.839735][T31882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42823'. [ 3420.854156][T31880] netlink: 'syz.5.42824': attribute type 8 has an invalid length. [ 3421.683996][T31929] tls_set_device_offload_rx: netdev not found [ 3422.873814][T31967] kvm: user requested TSC rate below hardware speed [ 3424.579888][T32038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.42863'. [ 3424.595659][T32038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.42863'. [ 3425.295053][T32069] netlink: 28 bytes leftover after parsing attributes in process `syz.6.42874'. [ 3425.378661][T32069] netlink: 28 bytes leftover after parsing attributes in process `syz.6.42874'. [ 3425.929908][T32108] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 3426.037263][T32108] bond12: (slave lo): Enslaving as an active interface with an up link [ 3426.064122][T32108] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 3426.095199][T32131] syzkaller1: entered promiscuous mode [ 3426.115220][T32131] syzkaller1: entered allmulticast mode [ 3426.992432][T32169] bridge2: entered promiscuous mode [ 3426.998050][T32169] bridge2: entered allmulticast mode [ 3427.303048][T32186] netlink: 24 bytes leftover after parsing attributes in process `syz.6.42901'. [ 3427.817475][T32186] bridge0: port 3(vlan2) entered disabled state [ 3427.824012][T32186] bridge0: port 2(bridge_slave_1) entered disabled state [ 3427.838608][T32186] bridge0: port 1(bridge_slave_0) entered disabled state [ 3428.451882][T30704] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 3428.665182][T32186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3428.691975][T32186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3428.941026][T30048] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3428.973450][T30048] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3429.012770][T30048] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3429.039702][T30048] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3429.103687][T30704] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3429.114762][T30704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3429.135483][T30704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3429.220297][T30704] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3429.437420][T30704] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3429.446548][T30704] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3429.454667][T30704] usb 2-1: Manufacturer: syz [ 3429.530372][T30704] usb 2-1: config 0 descriptor?? [ 3429.538112][T32235] bridge0: port 2(bridge_slave_1) entered disabled state [ 3429.927308][T30738] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0 [ 3429.977398][T30738] hid-generic 0000:0000:0000.00F1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3430.190421][T30704] appleir 0003:05AC:8243.00F2: unknown main item tag 0x0 [ 3430.214772][T30704] appleir 0003:05AC:8243.00F2: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 3430.440948][T32272] netlink: 24 bytes leftover after parsing attributes in process `syz.5.42927'. [ 3430.566009][T32272] bridge0: port 3(vlan0) entered disabled state [ 3430.572671][T32272] bridge0: port 2(bridge_slave_1) entered disabled state [ 3430.580047][T32272] bridge0: port 1(bridge_slave_0) entered disabled state [ 3430.703989][T32272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3430.731750][T32272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3430.793421][T30687] usb 2-1: USB disconnect, device number 95 [ 3430.904481][ T140] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3430.917054][ T140] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 44325 - 0 [ 3430.930161][ T140] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3430.954533][ T140] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 44325 - 0 [ 3430.986627][ T140] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3431.004441][ T140] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 44325 - 0 [ 3431.018641][ T140] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3431.043741][ T140] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 44325 - 0 [ 3431.070112][T32295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.42929'. [ 3433.696636][T29157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3433.720124][T29157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3433.740484][T29157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3433.753339][T29157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3433.788587][T29157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3434.427667][T32526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.42969'. [ 3434.438632][T32526] netlink: 'syz.5.42969': attribute type 14 has an invalid length. [ 3434.568050][T32526] vxlan0: entered promiscuous mode [ 3434.666124][T16716] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3434.687840][T32426] bridge0: port 1(bridge_slave_0) entered blocking state [ 3434.702890][T32426] bridge0: port 1(bridge_slave_0) entered disabled state [ 3434.725256][T32426] bridge_slave_0: entered allmulticast mode [ 3434.744051][T32426] bridge_slave_0: entered promiscuous mode [ 3434.766990][T16716] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3434.784006][T32426] bridge0: port 2(bridge_slave_1) entered blocking state [ 3434.807431][T32426] bridge0: port 2(bridge_slave_1) entered disabled state [ 3434.825725][T32426] bridge_slave_1: entered allmulticast mode [ 3434.847697][T32426] bridge_slave_1: entered promiscuous mode [ 3434.868823][T16716] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3434.930930][T16716] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3435.009825][T32426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3435.037992][T32426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3435.052867][T32576] usb usb8: usbfs: process 32576 (syz.3.42972) did not claim interface 0 before use [ 3435.129039][T32426] team0: Port device team_slave_0 added [ 3435.139880][T32426] team0: Port device team_slave_1 added [ 3435.284018][T32426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3435.291036][T32426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3435.334768][T32614] openvswitch: netlink: Actions may not be safe on all matching packets [ 3435.424788][T32426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3435.495279][T32426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3435.502357][T32426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3435.573539][T32426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3435.842583][T32426] hsr_slave_0: entered promiscuous mode [ 3435.850669][T32426] hsr_slave_1: entered promiscuous mode [ 3435.880036][T32426] debugfs: 'hsr0' already exists in 'hsr' [ 3435.885855][T32426] Cannot create hsr debugfs directory [ 3435.904625][ T6927] Bluetooth: hci2: command tx timeout [ 3436.444835][T32426] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3436.455943][T32426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3436.465748][T32426] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3436.488782][T32426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3436.497067][T32426] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3436.508311][T32426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3436.516969][T32426] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3436.590019][T32426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3436.798861][T32426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3436.842286][T32426] 8021q: adding VLAN 0 to HW filter on device team0 [ 3436.879646][T16716] bridge0: port 1(bridge_slave_0) entered blocking state [ 3436.887100][T16716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3436.936865][T16716] bridge0: port 2(bridge_slave_1) entered blocking state [ 3436.944086][T16716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3437.008201][ T30] audit: type=1326 audit(1779822303.527:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32757 comm="syz.3.42987" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f2901c code=0x0 [ 3437.100477][T32760] Invalid argument reading file caps for ./file0 [ 3437.252331][T32426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3437.406420][T32426] veth0_vlan: entered promiscuous mode [ 3437.469825][T32426] veth1_vlan: entered promiscuous mode [ 3437.553249][T32426] veth0_macvtap: entered promiscuous mode [ 3437.581823][T32426] veth1_macvtap: entered promiscuous mode [ 3437.628331][T32426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3437.640615][T32426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3437.679913][T16717] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3437.704090][T16717] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3437.729157][T16717] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3437.757420][T16717] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3437.984669][ T6927] Bluetooth: hci2: command tx timeout [ 3438.164401][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3438.172397][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3438.205840][ T328] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.42999'. [ 3438.362747][T21819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3438.370644][T21819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3439.756521][T30738] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 3439.909309][T31449] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 3439.936731][T30738] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3439.947831][T30738] usb 2-1: string descriptor 0 read error: -22 [ 3439.964518][T30738] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.40 [ 3439.981171][T30738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3440.066882][ T6927] Bluetooth: hci2: command tx timeout [ 3440.077525][T31449] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3440.123675][T31449] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3440.145569][T31449] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3440.156556][T31449] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3440.179014][T31449] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3440.192165][T31449] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3440.206507][T31449] usb 6-1: config 0 descriptor?? [ 3440.511369][T30738] elecom 0003:056E:00FC.00F3: unknown main item tag 0x0 [ 3440.540117][T30738] elecom 0003:056E:00FC.00F3: unknown main item tag 0x0 [ 3440.584328][T30738] elecom 0003:056E:00FC.00F3: unknown main item tag 0x0 [ 3440.603724][T30738] elecom 0003:056E:00FC.00F3: unknown main item tag 0x0 [ 3440.625644][T30738] elecom 0003:056E:00FC.00F3: unknown main item tag 0x0 [ 3440.632752][T30738] elecom 0003:056E:00FC.00F3: unknown main item tag 0x0 [ 3440.641058][T30738] elecom 0003:056E:00FC.00F3: unknown main item tag 0x0 [ 3440.648610][T30738] elecom 0003:056E:00FC.00F3: unknown main item tag 0x0 [ 3440.657423][T30738] elecom 0003:056E:00FC.00F3: unknown main item tag 0x0 [ 3440.665763][T30738] elecom 0003:056E:00FC.00F3: unknown main item tag 0x0 [ 3440.687604][T31449] plantronics 0003:047F:FFFF.00F4: ignoring exceeding usage max [ 3440.787394][T31449] plantronics 0003:047F:FFFF.00F4: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 3440.878698][T30738] elecom 0003:056E:00FC.00F3: hidraw1: USB HID vff.7f Device [HID 056e:00fc] on usb-dummy_hcd.1-1/input0 [ 3440.974389][T30738] usb 2-1: USB disconnect, device number 96 [ 3441.124815][ T430] fido_id[430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 3441.340391][T30703] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 3442.144545][ T6927] Bluetooth: hci2: command tx timeout [ 3442.240423][ T495] netlink: 'syz.1.43040': attribute type 4 has an invalid length. [ 3442.248845][ T495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43040'. [ 3442.359913][T30703] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 3442.369063][T30703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3442.377096][T30703] usb 4-1: Product: syz [ 3442.381304][T30703] usb 4-1: Manufacturer: syz [ 3442.385950][T30703] usb 4-1: SerialNumber: syz [ 3442.410426][T30703] usb 4-1: config 0 descriptor?? [ 3442.500668][T30703] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 3442.896200][T30738] usb 6-1: USB disconnect, device number 32 [ 3443.016625][ T519] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3443.934537][T30738] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 3444.058518][T30703] gspca_stk1135: reg_w 0xd err -71 [ 3444.064902][T30703] gspca_stk1135: serial bus timeout: status=0x00 [ 3444.071293][T30703] gspca_stk1135: Sensor write failed [ 3444.076650][T30703] gspca_stk1135: serial bus timeout: status=0x00 [ 3444.083019][T30703] gspca_stk1135: Sensor write failed [ 3444.088372][T30703] gspca_stk1135: serial bus timeout: status=0x00 [ 3444.094749][T30703] gspca_stk1135: Sensor read failed [ 3444.100886][T30738] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3444.100922][T30738] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3444.100950][T30738] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3444.106734][T30738] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 3444.106770][T30738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 3444.106794][T30738] usb 2-1: Product: syz [ 3444.106812][T30738] usb 2-1: Manufacturer: syz [ 3444.106830][T30738] usb 2-1: SerialNumber: syz [ 3444.158284][ T577] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.43055'. [ 3444.240089][T30703] gspca_stk1135: serial bus timeout: status=0x00 [ 3444.246656][T30703] gspca_stk1135: Sensor read failed [ 3444.269691][T30703] gspca_stk1135: Detected sensor type unknown (0x0) [ 3444.276470][T30703] gspca_stk1135: serial bus timeout: status=0x00 [ 3444.283003][T30703] gspca_stk1135: Sensor read failed [ 3444.288270][T30703] gspca_stk1135: serial bus timeout: status=0x00 [ 3444.294634][T30703] gspca_stk1135: Sensor read failed [ 3444.300436][T30703] gspca_stk1135: serial bus timeout: status=0x00 [ 3444.320706][T30703] gspca_stk1135: Sensor write failed [ 3444.326112][T30703] gspca_stk1135: serial bus timeout: status=0x00 [ 3444.332492][T30703] gspca_stk1135: Sensor write failed [ 3444.337904][T30703] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 3444.348907][T30703] usb 4-1: USB disconnect, device number 96 [ 3444.399501][T30738] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 97 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3444.766851][ T598] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3445.215054][T30703] usb 2-1: USB disconnect, device number 97 [ 3445.225627][T30703] usblp0: removed [ 3445.684970][T31449] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 3445.850694][T31449] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3445.866938][T31449] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 3445.892824][T30703] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 3445.895184][T31449] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3445.914927][T31449] usb 6-1: config 0 descriptor?? [ 3445.938900][T31449] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 3446.265158][T30703] usb 2-1: Using ep0 maxpacket: 32 [ 3446.290013][T30738] usb 6-1: USB disconnect, device number 33 [ 3446.543630][T30703] usb 2-1: config 0 has no interfaces? [ 3446.803255][ T726] Invalid argument reading file caps for ./file0 [ 3446.913458][T30703] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3446.922581][T30703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3446.930613][T30703] usb 2-1: Product: syz [ 3446.937222][T30703] usb 2-1: Manufacturer: syz [ 3446.941878][T30703] usb 2-1: SerialNumber: syz [ 3446.983231][T30703] usb 2-1: config 0 descriptor?? [ 3447.842979][ T747] netlink: 51 bytes leftover after parsing attributes in process `syz.6.43081'. [ 3447.901054][T30738] usb 2-1: USB disconnect, device number 98 [ 3449.107942][ T791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43092'. [ 3449.141580][ T791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43092'. [ 3449.159198][ T791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43092'. [ 3449.416593][ T800] netlink: 51 bytes leftover after parsing attributes in process `syz.1.43094'. [ 3449.610234][ T803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.43095'. [ 3449.984515][T31449] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 3450.019853][ T803] bond_slave_0: left promiscuous mode [ 3450.025342][ T803] bond_slave_1: left promiscuous mode [ 3450.144520][T31449] usb 6-1: Using ep0 maxpacket: 8 [ 3450.157171][T31449] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3450.185458][T31449] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3450.227223][T31449] usb 6-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 3450.282737][T31449] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3450.298030][T31449] usb 6-1: string descriptor 0 read error: -22 [ 3450.305234][T31449] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 3450.317437][T31449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3450.437497][T30687] hid_parser_main: 4007 callbacks suppressed [ 3450.437524][T30687] hid-generic 0000:0000:0000.00F5: unknown main item tag 0x0 [ 3450.506685][T30687] hid-generic 0000:0000:0000.00F5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3450.822470][T31449] zydacron 0003:13EC:0006.00F6: unknown main item tag 0x0 [ 3450.841467][T31449] zydacron 0003:13EC:0006.00F6: unknown main item tag 0x0 [ 3450.849623][T31449] zydacron 0003:13EC:0006.00F6: unknown main item tag 0x0 [ 3450.857816][T31449] zydacron 0003:13EC:0006.00F6: unknown main item tag 0x0 [ 3450.870059][T31449] zydacron 0003:13EC:0006.00F6: unknown main item tag 0x0 [ 3450.893847][T31449] zydacron 0003:13EC:0006.00F6: unknown main item tag 0x0 [ 3450.907561][T31449] zydacron 0003:13EC:0006.00F6: unknown main item tag 0x0 [ 3450.919446][T31449] zydacron 0003:13EC:0006.00F6: unknown main item tag 0x0 [ 3450.929637][T31449] zydacron 0003:13EC:0006.00F6: unknown main item tag 0x0 [ 3451.041076][T31449] zydacron 0003:13EC:0006.00F6: hidraw1: USB HID v17.99 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0 [ 3451.076132][T31449] usb 6-1: USB disconnect, device number 34 [ 3451.188153][ T850] fido_id[850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 3451.729401][ T869] netlink: 14 bytes leftover after parsing attributes in process `syz.6.43101'. [ 3452.199428][T16716] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3452.229929][T16716] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3452.270191][T16716] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 38220 - 0 [ 3452.306428][T16716] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3452.345753][T16716] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3452.387948][T16716] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 38220 - 0 [ 3452.446963][ T864] vlan3: entered allmulticast mode [ 3452.452174][ T864] bond0: entered allmulticast mode [ 3452.457339][ T864] bond_slave_0: entered allmulticast mode [ 3452.463112][ T864] bond_slave_1: entered allmulticast mode [ 3452.567766][ T869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3452.596610][ T869] bond_slave_0: left allmulticast mode [ 3452.619171][ T869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3452.645169][ T869] bond_slave_1: left allmulticast mode [ 3452.662995][ T869] bond0 (unregistering): Released all slaves [ 3452.728974][T16716] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3452.751955][T16716] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3452.773482][T16716] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 38220 - 0 [ 3452.843512][T16716] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3452.852479][T16716] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3452.869828][T16716] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 38220 - 0 [ 3452.965340][T30740] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 3453.136365][T30740] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3453.147407][T30740] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 3453.157088][T30740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3453.188262][T30740] usb 4-1: config 0 descriptor?? [ 3453.210636][T30740] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 3453.346171][T30703] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 3453.575834][T30740] usb 4-1: USB disconnect, device number 97 [ 3453.723712][T30703] usb 6-1: Using ep0 maxpacket: 16 [ 3453.999946][T30703] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3454.010155][T30703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3454.021171][T30703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3454.030862][T30703] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3454.060554][T30703] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3454.238183][T30703] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3454.247309][T30703] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3454.255334][T30703] usb 6-1: Manufacturer: syz [ 3454.265766][T30703] usb 6-1: config 0 descriptor?? [ 3454.867287][T30703] rc_core: IR keymap rc-hauppauge not found [ 3454.873271][T30703] Registered IR keymap rc-empty [ 3454.878300][T30703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3454.926701][T30703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3455.003181][T30703] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 3455.017207][T30703] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input341 [ 3455.035440][T30703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3455.103967][T30703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3455.150246][T30703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3455.204313][T30703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3455.247568][T30703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3455.292885][T30703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3455.335793][T30703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3455.381674][T30703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3455.426125][T30703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3455.473604][T30703] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3455.518055][T30740] hid_parser_main: 4006 callbacks suppressed [ 3455.518082][T30740] hid-generic 0000:0000:0000.00F7: unknown main item tag 0x0 [ 3455.532423][T30703] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3455.543733][T30703] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3455.558754][T30740] hid-generic 0000:0000:0000.00F7: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3455.579122][T30703] usb 6-1: USB disconnect, device number 35 [ 3456.154473][T30741] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 3456.316310][T30741] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3456.316339][T30741] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 3456.316361][T30741] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 3456.316384][T30741] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3456.316416][T30741] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3456.316434][T30741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3456.320208][T30741] usb 6-1: config 0 descriptor?? [ 3456.321165][ T1081] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3456.739062][T30741] plantronics 0003:047F:FFFF.00F8: unknown main item tag 0x0 [ 3456.769773][T30741] plantronics 0003:047F:FFFF.00F8: unknown main item tag 0x0 [ 3456.800203][T30741] plantronics 0003:047F:FFFF.00F8: unknown main item tag 0x0 [ 3456.831352][T30741] plantronics 0003:047F:FFFF.00F8: unknown main item tag 0x0 [ 3456.860209][T30741] plantronics 0003:047F:FFFF.00F8: unknown main item tag 0x0 [ 3456.872731][T30741] plantronics 0003:047F:FFFF.00F8: unknown main item tag 0x0 [ 3456.886582][T30741] plantronics 0003:047F:FFFF.00F8: unknown main item tag 0x0 [ 3456.899947][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 3456.907584][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 3456.917406][T30741] plantronics 0003:047F:FFFF.00F8: unknown main item tag 0x0 [ 3456.934800][T30741] plantronics 0003:047F:FFFF.00F8: unknown main item tag 0x0 [ 3456.990251][T30741] plantronics 0003:047F:FFFF.00F8: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 3457.101796][T30707] usb 6-1: USB disconnect, device number 36 [ 3457.182569][ T1115] fido_id[1115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 3457.616650][T30741] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 3457.798145][T30741] usb 2-1: Using ep0 maxpacket: 8 [ 3457.816299][T30741] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 3457.829276][T30741] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3457.907361][T30741] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3457.931284][T30741] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3457.956365][T30741] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3457.982625][T30741] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3458.035800][T30741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3458.286070][T30741] usb 2-1: usb_control_msg returned -32 [ 3458.293029][T30741] usbtmc 2-1:16.0: can't read capabilities [ 3458.917043][T30741] usb 2-1: USB disconnect, device number 99 [ 3459.433997][ T1196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.43146'. [ 3459.446449][ T1196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.43146'. [ 3459.464056][ T1196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.43146'. [ 3463.156034][T30707] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 3463.498871][T30707] usb 4-1: Using ep0 maxpacket: 32 [ 3463.786166][T30707] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 3463.794426][T30707] usb 4-1: config 0 has no interface number 0 [ 3463.800733][T30707] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3463.843680][ T1424] input: syz0 as /devices/virtual/input/input342 [ 3463.877475][ T1416] kvm: user requested TSC rate below hardware speed [ 3464.151303][T30707] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 3464.160436][T30707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3464.168478][T30707] usb 4-1: Product: syz [ 3464.172683][T30707] usb 4-1: Manufacturer: syz [ 3464.177330][T30707] usb 4-1: SerialNumber: syz [ 3464.213959][T30707] usb 4-1: config 0 descriptor?? [ 3464.298835][T30707] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 3464.308712][T30707] em28xx 4-1:0.132: Video interface 132 found: [ 3464.785923][ T1467] vlan1: entered allmulticast mode [ 3464.791149][ T1467] bond0: entered allmulticast mode [ 3464.809469][T30707] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 3464.824754][ T1467] bond_slave_0: entered allmulticast mode [ 3464.826950][ T1476] netlink: 14 bytes leftover after parsing attributes in process `syz.5.43189'. [ 3464.848469][ T1467] bond_slave_1: entered allmulticast mode [ 3464.965318][ T1476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3464.976346][ T1476] bond_slave_0: left allmulticast mode [ 3464.987279][ T1476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3465.028169][ T1483] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.43190'. [ 3465.054043][ T1483] netlink: Unknown conntrack attr (0) [ 3465.060913][ T1476] bond_slave_1: left allmulticast mode [ 3465.067012][ T1476] bond0 (unregistering): Released all slaves [ 3465.660211][T30707] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 3465.668934][T30707] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 3465.675522][T30707] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 3465.802065][T30707] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 3465.809982][T30707] em28xx 4-1:0.132: analog set to bulk mode. [ 3465.816332][T22907] em28xx 4-1:0.132: Registering V4L2 extension [ 3465.855799][T30707] usb 4-1: USB disconnect, device number 98 [ 3465.863852][T30707] em28xx 4-1:0.132: Disconnecting em28xx [ 3466.095925][ T1528] netlink: 8 bytes leftover after parsing attributes in process `syz.8.43197'. [ 3466.431092][T22907] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 3466.457207][T22907] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 3466.464406][T22907] em28xx 4-1:0.132: No AC97 audio processor [ 3466.478565][T22907] usb 4-1: Decoder not found [ 3466.483693][T22907] em28xx 4-1:0.132: failed to create media graph [ 3466.505246][T22907] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 3466.621093][T22907] em28xx 4-1:0.132: Remote control support is not available for this card. [ 3466.643300][T30707] em28xx 4-1:0.132: Closing input extension [ 3466.757434][T30707] em28xx 4-1:0.132: Freeing device [ 3466.893782][ T1563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43204'. [ 3466.912616][ T1582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.43206'. [ 3466.917116][ T1563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43204'. [ 3466.967510][ T1587] netlink: 14 bytes leftover after parsing attributes in process `syz.1.43203'. [ 3466.995879][ T1570] vlan0: entered allmulticast mode [ 3467.011548][ T1570] bond0: entered allmulticast mode [ 3467.030792][ T1570] bond_slave_0: entered allmulticast mode [ 3467.043315][ T1570] bond_slave_1: entered allmulticast mode [ 3467.049146][ T1570] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 3467.056229][ T1570] dummy0: entered allmulticast mode [ 3467.087361][ T1582] tipc: Enabling of bearer rejected, failed to enable media [ 3467.240403][ T1587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3467.251250][ T1587] bond_slave_0: left allmulticast mode [ 3467.279882][ T1587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3467.295468][ T1587] bond_slave_1: left allmulticast mode [ 3467.318371][ T1587] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 3467.328322][ T1587] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 3467.361903][ T1587] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 3467.371362][ T1587] dummy0: left allmulticast mode [ 3467.376938][ T1587] bond0 (unregistering): Released all slaves [ 3467.711579][ T1616] batadv_slave_1: entered promiscuous mode [ 3467.719651][ T1615] batadv_slave_1: left promiscuous mode [ 3468.004168][ T1623] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.43215'. [ 3468.427543][ T1638] netlink: 27 bytes leftover after parsing attributes in process `syz.5.43219'. [ 3468.874072][T22907] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 3469.505297][T22907] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 3469.513740][T22907] usb 6-1: config 150 has no interface number 0 [ 3469.520268][T22907] usb 6-1: config 150 interface 204 has no altsetting 0 [ 3469.857589][T22907] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 3469.866743][T22907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3469.874753][T22907] usb 6-1: Product: syz [ 3469.878953][T22907] usb 6-1: Manufacturer: syz [ 3469.883583][T22907] usb 6-1: SerialNumber: syz [ 3470.166095][T22907] xr_serial 6-1:150.204: xr_serial converter detected [ 3471.037436][T22907] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 3471.043878][T22907] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 3471.066298][T22907] usb 6-1: USB disconnect, device number 37 [ 3471.082187][T22907] xr_serial 6-1:150.204: device disconnected [ 3471.667096][ T1695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43232'. [ 3471.704314][ T1695] bridge_slave_0: default FDB implementation only supports local addresses [ 3471.763070][ T1695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43232'. [ 3471.778257][ T1695] bridge_slave_0: default FDB implementation only supports local addresses [ 3471.973172][ T1705] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 3472.366572][ T1718] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.43237'. [ 3473.463760][ T1754] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 3473.814395][T30741] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 3473.834516][T31450] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 3473.966330][T30741] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3473.984907][T30741] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3473.998250][T31450] usb 2-1: Using ep0 maxpacket: 8 [ 3474.016248][T30741] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3474.028207][T31450] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3474.038780][T30741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3474.047046][T31450] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3474.069818][T31450] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3474.104444][T31450] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3474.145924][T31450] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3474.165067][T31450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3474.298161][T30741] usb 6-1: usb_control_msg returned -32 [ 3474.308172][T30741] usbtmc 6-1:16.0: can't read capabilities [ 3474.416373][T31450] usb 2-1: GET_CAPABILITIES returned 0 [ 3474.433367][T31450] usbtmc 2-1:16.0: can't read capabilities [ 3474.515651][ T1799] netlink: 'syz.3.43261': attribute type 1 has an invalid length. [ 3474.560372][ T1799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3474.653454][T30707] usb 2-1: USB disconnect, device number 100 [ 3475.010350][T31450] usb 6-1: USB disconnect, device number 38 [ 3476.026552][ T1892] debugfs: 'netdev:syzkaller0' already exists in 'phy165' [ 3476.454304][T31450] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 3476.607153][T31450] usb 6-1: Using ep0 maxpacket: 8 [ 3476.619135][T31450] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 3476.633179][T31450] usb 6-1: config 0 has no interface number 0 [ 3476.641381][T31450] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3476.670853][T31450] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3476.703581][T31450] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3476.726406][T31450] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3476.764884][T31450] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3476.779954][T31450] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3476.799635][T31450] usb 6-1: config 0 descriptor?? [ 3476.833314][T31450] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3478.007693][ T1972] bridge3: entered promiscuous mode [ 3478.465491][ T9850] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 3478.638118][ T9850] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3478.657910][ T9850] usb 4-1: config 1 interface 0 has no altsetting 0 [ 3478.676682][ T9850] usb 4-1: string descriptor 0 read error: -22 [ 3478.691844][ T9850] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 3478.715529][ T9850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3479.237396][T30707] usb 6-1: USB disconnect, device number 39 [ 3479.247463][T30707] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 3479.335212][ T9850] hid_parser_main: 6 callbacks suppressed [ 3479.335280][ T9850] glorious 0003:22D4:1503.00F9: unknown main item tag 0x0 [ 3479.377803][ T9850] glorious 0003:22D4:1503.00F9: unknown main item tag 0x0 [ 3479.402004][ T9850] glorious 0003:22D4:1503.00F9: unknown main item tag 0x0 [ 3479.441282][ T9850] glorious 0003:22D4:1503.00F9: unknown main item tag 0x0 [ 3479.476952][ T9850] glorious 0003:22D4:1503.00F9: unknown main item tag 0x0 [ 3479.502423][ T9850] glorious 0003:22D4:1503.00F9: unknown main item tag 0x0 [ 3479.523624][ T9850] glorious 0003:22D4:1503.00F9: unknown main item tag 0x0 [ 3479.543502][ T9850] glorious 0003:22D4:1503.00F9: unknown main item tag 0x0 [ 3479.561013][ T9850] glorious 0003:22D4:1503.00F9: unknown main item tag 0x0 [ 3479.574381][ T9850] glorious 0003:22D4:1503.00F9: unknown main item tag 0x0 [ 3479.722545][ T9850] glorious 0003:22D4:1503.00F9: hidraw0: USB HID vff.7f Device [Glorious Model I] on usb-dummy_hcd.3-1/input0 [ 3479.764549][ T9850] usb 4-1: USB disconnect, device number 99 [ 3479.866634][ T2034] fido_id[2034]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 3480.213760][ T2052] pim6reg1: entered promiscuous mode [ 3480.223668][ T2052] pim6reg1: entered allmulticast mode [ 3482.014392][ T2118] hsr0: entered promiscuous mode [ 3482.021122][ T2118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.43339'. [ 3482.084627][ T2118] hsr_slave_0: left promiscuous mode [ 3482.132420][ T2118] hsr_slave_1: left promiscuous mode [ 3482.199716][ T2118] hsr0 (unregistering): left promiscuous mode [ 3483.281577][ T30] audit: type=1326 audit(1779822349.797:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2170 comm="syz.3.43354" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f2901c code=0x0 [ 3484.467920][T22907] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 3484.985401][ T2234] loop3: detected capacity change from 0 to 7 [ 3484.993879][ T2234] Dev loop3: unable to read RDB block 7 [ 3484.999547][ T2234] loop3: unable to read partition table [ 3485.005472][ T2234] loop3: partition table beyond EOD, truncated [ 3485.049515][ T2234] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 3485.163850][T22907] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3485.174757][T22907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3485.213765][T22907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3485.223592][T22907] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3485.397020][T22907] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3485.406169][T22907] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3485.414301][T22907] usb 6-1: Manufacturer: syz [ 3485.443882][T22907] usb 6-1: config 0 descriptor?? [ 3486.096731][T22907] hid_parser_main: 4007 callbacks suppressed [ 3486.096769][T22907] appleir 0003:05AC:8243.00FA: unknown main item tag 0x0 [ 3486.113995][ T2269] kvm: apic: phys broadcast and lowest prio [ 3486.141003][T22907] appleir 0003:05AC:8243.00FA: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 3487.067075][T22907] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 3487.100964][T30706] usb 6-1: USB disconnect, device number 40 [ 3487.442447][T22907] usb 2-1: Using ep0 maxpacket: 32 [ 3487.717702][T22907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3487.728709][T22907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3487.738513][T22907] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3487.747603][T22907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3487.814583][T22907] usb 2-1: config 0 descriptor?? [ 3488.392993][T22907] savu 0003:1E7D:2D5A.00FB: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 3488.567882][T30703] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 3488.654685][T22907] usb 2-1: USB disconnect, device number 101 [ 3489.203611][T30703] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3489.212398][T30703] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3489.222691][T30703] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3489.233995][T30703] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3489.258681][T30703] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3489.394813][ T2409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.43392'. [ 3489.537616][T30703] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3489.546768][T30703] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3489.554823][T30703] usb 6-1: Product: syz [ 3489.559044][T30703] usb 6-1: Manufacturer: syz [ 3489.629857][T30703] cdc_wdm 6-1:1.0: skipping garbage [ 3489.635152][T30703] cdc_wdm 6-1:1.0: skipping garbage [ 3489.643414][T30703] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 3489.649466][T30703] cdc_wdm 6-1:1.0: Unknown control protocol [ 3490.163758][ T30] audit: type=1326 audit(1779822356.677:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2446 comm="syz.3.43402" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f2901c code=0x0 [ 3490.191488][T30741] usb 6-1: USB disconnect, device number 41 [ 3490.198705][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 3490.207095][ C0] wdm_int_callback: 130 callbacks suppressed [ 3490.207123][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3490.219841][ C0] wdm_int_callback: 130 callbacks suppressed [ 3490.219862][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3490.232034][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3490.840260][T22907] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 3491.206716][T22907] usb 2-1: Using ep0 maxpacket: 8 [ 3491.294522][T30741] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 3491.446588][T30741] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3491.457593][T30741] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3491.468623][T30741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3491.480603][T22907] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 3491.488882][T22907] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3491.498644][T22907] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3491.513074][T22907] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 3491.538045][T22907] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 3491.548221][T22907] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3491.561752][T22907] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3491.571969][T22907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3491.617200][T30741] usb 6-1: config 0 descriptor?? [ 3491.635614][T30741] pwc: Askey VC010 type 2 USB webcam detected. [ 3491.968328][T22907] usb 2-1: usb_control_msg returned -32 [ 3491.974137][T22907] usbtmc 2-1:16.0: can't read capabilities [ 3492.043457][T30741] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3492.053832][T30741] pwc: recv_control_msg error -32 req 02 val 2700 [ 3492.062646][T30741] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3492.284026][T30741] pwc: recv_control_msg error -71 req 04 val 1300 [ 3492.301141][T30741] pwc: recv_control_msg error -71 req 04 val 1400 [ 3492.311077][T30741] pwc: recv_control_msg error -71 req 02 val 2000 [ 3492.319190][T30741] pwc: recv_control_msg error -71 req 02 val 2100 [ 3492.338734][T30741] pwc: recv_control_msg error -71 req 04 val 1500 [ 3492.354600][T30741] pwc: recv_control_msg error -71 req 02 val 2500 [ 3492.364466][T30741] pwc: recv_control_msg error -71 req 02 val 2400 [ 3492.377010][T30741] pwc: recv_control_msg error -71 req 02 val 2600 [ 3492.400886][T30741] pwc: recv_control_msg error -71 req 02 val 2900 [ 3492.410358][T30741] pwc: recv_control_msg error -71 req 02 val 2800 [ 3492.426800][T30741] pwc: recv_control_msg error -71 req 04 val 1100 [ 3492.437333][T30741] pwc: recv_control_msg error -71 req 04 val 1200 [ 3492.458757][T30741] pwc: Registered as video103. [ 3492.472106][T30741] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input344 [ 3492.503252][T30741] usb 6-1: USB disconnect, device number 42 [ 3492.916622][ T2590] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 3493.108290][T30741] usb 2-1: USB disconnect, device number 102 [ 3493.204301][ T2633] syzkaller1: entered promiscuous mode [ 3493.209957][ T2633] syzkaller1: entered allmulticast mode [ 3493.753114][ T2666] netlink: 'syz.5.43426': attribute type 13 has an invalid length. [ 3495.786183][T30707] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 3496.410961][T29157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3496.432762][T29157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3496.442483][T29157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3496.456331][T29157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3496.471670][T30707] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3496.481835][T30707] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3496.490739][T30707] usb 2-1: config 1 has no interface number 0 [ 3496.496875][T30707] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3496.535345][T29157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3496.882430][T30707] usb 2-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40 [ 3496.891565][T30707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3496.899602][T30707] usb 2-1: Product: syz [ 3496.903816][T30707] usb 2-1: Manufacturer: syz [ 3496.910819][T30707] usb 2-1: SerialNumber: syz [ 3497.064105][T30707] cdc_ncm 2-1:1.1: skipping garbage [ 3497.069404][T30707] usb 2-1: selecting invalid altsetting 1 [ 3498.209834][T30707] cdc_ncm 2-1:1.1: SET_NTB_FORMAT failed [ 3498.257754][T30707] usb 2-1: selecting invalid altsetting 1 [ 3498.263610][T30707] cdc_ncm 2-1:1.1: bind() failure [ 3498.280439][T30707] usb 2-1: USB disconnect, device number 103 [ 3498.338729][ T2967] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3918892086 (125404546752 ns) > initial count (95458267904 ns). Using initial count to start timer. [ 3498.593011][ T2807] bridge0: port 1(bridge_slave_0) entered blocking state [ 3498.613917][ T2807] bridge0: port 1(bridge_slave_0) entered disabled state [ 3498.634381][ T6927] Bluetooth: hci4: command tx timeout [ 3498.664705][ T2807] bridge_slave_0: entered allmulticast mode [ 3498.697928][ T2807] bridge_slave_0: entered promiscuous mode [ 3498.713119][ T2807] bridge0: port 2(bridge_slave_1) entered blocking state [ 3498.721279][ T2807] bridge0: port 2(bridge_slave_1) entered disabled state [ 3498.728800][ T2807] bridge_slave_1: entered allmulticast mode [ 3498.746118][ T2807] bridge_slave_1: entered promiscuous mode [ 3499.023474][T30048] pimreg: left allmulticast mode [ 3499.040145][T30048] dvmrp4: left allmulticast mode [ 3499.146339][ T3046] netlink: 'syz.1.43466': attribute type 30 has an invalid length. [ 3499.642823][T22907] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 3500.017985][T30048] bond10 (unregistering): (slave gretap3): Releasing active interface [ 3500.271209][T22907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3500.282218][T22907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3500.292096][T22907] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3500.305029][T22907] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3500.390012][T22907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3500.442863][T22907] usb 6-1: config 0 descriptor?? [ 3500.704773][ T6927] Bluetooth: hci4: command tx timeout [ 3501.036737][T22907] plantronics 0003:047F:FFFF.00FC: unknown main item tag 0x4 [ 3501.048746][T22907] plantronics 0003:047F:FFFF.00FC: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 3501.443017][T30048] bond1 (unregistering): Released all slaves [ 3501.460911][T30048] bond2 (unregistering): Released all slaves [ 3501.487870][T30048] bond3 (unregistering): Released all slaves [ 3501.509975][T30048] bond4 (unregistering): Released all slaves [ 3501.546104][T30048] bond5 (unregistering): Released all slaves [ 3501.567846][T30048] bond6 (unregistering): Released all slaves [ 3501.609511][T30048] bond7 (unregistering): Released all slaves [ 3501.649940][T30048] bond8 (unregistering): Released all slaves [ 3501.671134][T30048] bond9 (unregistering): Released all slaves [ 3501.715486][T30048] bond10 (unregistering): Released all slaves [ 3501.751106][T30048] bond0 (unregistering): Released all slaves [ 3501.854067][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 3501.866519][ T3077] netlink: 'syz.6.43472': attribute type 1 has an invalid length. [ 3501.877773][ T3077] netlink: 'syz.6.43472': attribute type 2 has an invalid length. [ 3501.886781][ T3077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.43472'. [ 3501.930614][ T2807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3501.989953][ T2807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3502.034627][T30048] hma(sha224): left promiscuous mode [ 3502.207480][T30048] : left promiscuous mode [ 3502.258685][ T2807] team0: Port device team_slave_0 added [ 3502.299710][ T2807] team0: Port device team_slave_1 added [ 3502.372450][T30048] tipc: Disabling bearer [ 3502.377903][T30048] tipc: Disabling bearer [ 3502.397001][T30048] tipc: Left network mode [ 3502.490370][ T2807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3502.497445][ T2807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3502.545175][ T2807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3502.724468][ T2807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3502.742083][ T2807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3502.790523][ T6927] Bluetooth: hci4: command tx timeout [ 3502.824758][ T2807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3503.059852][T22907] usb 6-1: USB disconnect, device number 43 [ 3503.097945][ T2807] hsr_slave_0: entered promiscuous mode [ 3503.104880][ T2807] hsr_slave_1: entered promiscuous mode [ 3503.457243][T30048] IPVS: stopping master sync thread 17716 ... [ 3503.578389][ T3276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43483'. [ 3503.681099][ T3282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43483'. [ 3504.789588][ T5289] 8021q: adding VLAN 0 to HW filter on device eth10 [ 3504.866662][ T6927] Bluetooth: hci4: command tx timeout [ 3506.233662][ T2807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3506.262067][ T2807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3506.300796][ T2807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3506.308845][ T3416] input: syz0 as /devices/virtual/input/input345 [ 3506.327400][ T2807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3506.360289][ T2807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3506.380709][ T2807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3506.408573][ T2807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3506.495945][ T2807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3506.764456][T31450] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 3506.961370][T31450] usb 2-1: Using ep0 maxpacket: 16 [ 3506.987522][T31450] usb 2-1: config 5 has an invalid interface number: 118 but max is 2 [ 3506.998537][T31450] usb 2-1: config 5 has an invalid interface number: 3 but max is 2 [ 3507.015920][T31450] usb 2-1: config 5 has an invalid interface number: 241 but max is 2 [ 3507.026725][ T2807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3507.066017][T31450] usb 2-1: config 5 has an invalid interface number: 89 but max is 2 [ 3507.110804][T31450] usb 2-1: config 5 has an invalid interface number: 223 but max is 2 [ 3507.149149][T31450] usb 2-1: config 5 has 5 interfaces, different from the descriptor's value: 3 [ 3507.179016][T31450] usb 2-1: config 5 has no interface number 0 [ 3507.197591][T31450] usb 2-1: config 5 has no interface number 1 [ 3507.205434][ T2807] 8021q: adding VLAN 0 to HW filter on device team0 [ 3507.220734][T31450] usb 2-1: config 5 has no interface number 2 [ 3507.220786][T31450] usb 2-1: config 5 has no interface number 4 [ 3507.220878][T31450] usb 2-1: config 5 interface 3 altsetting 120 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3507.220910][T31450] usb 2-1: too many endpoints for config 5 interface 241 altsetting 114: 36, using maximum allowed: 30 [ 3507.220951][T31450] usb 2-1: config 5 interface 241 altsetting 114 has 1 endpoint descriptor, different from the interface descriptor's value: 36 [ 3507.220997][T31450] usb 2-1: config 5 interface 89 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 32 [ 3507.221024][T31450] usb 2-1: config 5 interface 89 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 3507.221051][T31450] usb 2-1: config 5 interface 89 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 3507.221081][T31450] usb 2-1: too many endpoints for config 5 interface 223 altsetting 214: 149, using maximum allowed: 30 [ 3507.221126][T31450] usb 2-1: config 5 interface 223 altsetting 214 has 1 endpoint descriptor, different from the interface descriptor's value: 149 [ 3507.221157][T31450] usb 2-1: config 5 interface 118 has no altsetting 0 [ 3507.221178][T31450] usb 2-1: config 5 interface 3 has no altsetting 0 [ 3507.221199][T31450] usb 2-1: config 5 interface 241 has no altsetting 0 [ 3507.221220][T31450] usb 2-1: config 5 interface 89 has no altsetting 0 [ 3507.221241][T31450] usb 2-1: config 5 interface 223 has no altsetting 0 [ 3507.232897][T31450] usb 2-1: New USB device found, idVendor=1410, idProduct=a013, bcdDevice=e7.1f [ 3507.441009][T22491] bridge0: port 1(bridge_slave_0) entered blocking state [ 3507.448318][T22491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3507.467942][T22491] bridge0: port 2(bridge_slave_1) entered blocking state [ 3507.475227][T22491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3507.552246][T31450] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3507.658226][ T2807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3507.710993][T31450] usb 2-1: Product: syz [ 3507.715414][T31450] usb 2-1: Manufacturer: syz [ 3507.725390][T31450] usb 2-1: SerialNumber: syz [ 3507.943881][ T2807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3508.078140][T31450] usb 2-1: unknown number of interfaces: 5 [ 3508.165790][T31450] usb 2-1: USB disconnect, device number 104 [ 3508.513438][ T3507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.43512'. [ 3509.808193][ T3530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.43520'. [ 3509.818237][ T3530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.43520'. [ 3511.411181][ T3536] netlink: 80 bytes leftover after parsing attributes in process `syz.5.43521'. [ 3511.462306][ T3536] netlink: 80 bytes leftover after parsing attributes in process `syz.5.43521'. [ 3511.494414][ T2807] veth0_vlan: entered promiscuous mode [ 3511.567953][ T2807] veth1_vlan: entered promiscuous mode [ 3511.744748][ T2807] veth0_macvtap: entered promiscuous mode [ 3511.832980][ T2807] veth1_macvtap: entered promiscuous mode [ 3511.865751][ T2807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3511.880547][ T2807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3511.923975][T21819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3511.970093][T21819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3512.020324][T21819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3512.049860][ T3548] binder: 3546:3548 ioctl 40046205 0 returned -22 [ 3512.061411][T21819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3512.439650][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3512.448252][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3512.637290][ T3571] syzkaller1: entered promiscuous mode [ 3512.648576][ T3571] syzkaller1: entered allmulticast mode [ 3512.690468][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3512.743363][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3512.990509][ T3587] bridge4: entered promiscuous mode [ 3513.003487][ T3594] input: syz1 as /devices/virtual/input/input346 [ 3513.010228][ T3587] bridge4: entered allmulticast mode [ 3513.725395][T30048] IPVS: stop unused estimator thread 0... [ 3514.535051][ T3659] kernel read not supported for file /$@ (pid: 3659 comm: syz.1.43558) [ 3514.586549][ T30] audit: type=1800 audit(1779822381.057:2388): pid=3659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.43558" name="$@" dev="mqueue" ino=429507 res=0 errno=0 [ 3515.462355][ T3717] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.43574'. [ 3517.099553][ T3795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43599'. [ 3517.408109][T22907] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 3517.966607][T30706] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 3518.060810][T22907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3518.071760][T22907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3518.081548][T22907] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3518.086975][ T3823] netlink: 72 bytes leftover after parsing attributes in process `syz.5.43605'. [ 3518.094469][T22907] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3518.094501][T22907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3518.218580][T22907] usb 2-1: config 0 descriptor?? [ 3518.250647][ T3826] netlink: 48 bytes leftover after parsing attributes in process `syz.5.43606'. [ 3518.318928][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 3518.326148][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 3518.441603][ T3831] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.43608'. [ 3518.691579][T30706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3518.702528][T30706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3518.841211][T22907] plantronics 0003:047F:FFFF.00FD: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3518.880159][T30706] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3518.888542][T30741] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 3518.889261][T30706] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3518.889287][T30706] usb 4-1: Manufacturer: syz [ 3518.912669][T30706] usb 4-1: config 0 descriptor?? [ 3519.127503][T30741] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 3519.154750][T30741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3519.178074][T30741] usb 6-1: Product: syz [ 3519.182356][T30741] usb 6-1: Manufacturer: syz [ 3519.194948][T30741] usb 6-1: SerialNumber: syz [ 3519.214882][T30741] usb 6-1: config 0 descriptor?? [ 3519.508370][T30741] usb 6-1: USB disconnect, device number 44 [ 3520.203174][T30706] uclogic 0003:256C:006D.00FE: interface is invalid, ignoring [ 3520.246639][ C0] plantronics 0003:047F:FFFF.00FD: usb_submit_urb(ctrl) failed: -1 [ 3520.418061][T30741] usb 4-1: USB disconnect, device number 100 [ 3520.892245][ T3921] [ 3520.894626][ T3921] ===================================================== [ 3520.901661][ T3921] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 3520.909329][ T3921] syzkaller #0 Tainted: G L [ 3520.915357][ T3921] ----------------------------------------------------- [ 3520.922407][ T3921] syz.5.43623/3921 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 3520.930477][ T3921] ffff88807bc17018 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 3520.939278][ T3921] [ 3520.939278][ T3921] and this task is already holding: [ 3520.946668][ T3921] ffff88802bfda230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 3520.956594][ T3921] which would create a new lock dependency: [ 3520.962508][ T3921] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 3520.970543][ T3921] [ 3520.970543][ T3921] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 3520.980024][ T3921] (&dev->event_lock#2){..-.}-{3:3} [ 3520.980068][ T3921] [ 3520.980068][ T3921] ... which became SOFTIRQ-irq-safe at: [ 3520.993097][ T3921] lock_acquire+0x106/0x350 [ 3520.997746][ T3921] _raw_spin_lock_irqsave+0x40/0x60 [ 3521.003202][ T3921] input_inject_event+0xa4/0x330 [ 3521.008269][ T3921] kd_sound_helper+0x101/0x210 [ 3521.013233][ T3921] input_handler_for_each_handle+0x101/0x1c0 [ 3521.019338][ T3921] call_timer_fn+0x192/0x5e0 [ 3521.024043][ T3921] __run_timer_base+0x652/0x8b0 [ 3521.029011][ T3921] run_timer_softirq+0xb7/0x170 [ 3521.033972][ T3921] handle_softirqs+0x22a/0x840 [ 3521.038859][ T3921] __irq_exit_rcu+0xca/0x220 [ 3521.043560][ T3921] irq_exit_rcu+0x9/0x30 [ 3521.047913][ T3921] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3521.053732][ T3921] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3521.059847][ T3921] console_flush_all+0x801/0xb20 [ 3521.064908][ T3921] console_unlock+0xd1/0x1c0 [ 3521.069611][ T3921] vprintk_emit+0x485/0x560 [ 3521.074228][ T3921] dev_vprintk_emit+0x355/0x420 [ 3521.079234][ T3921] dev_printk_emit+0xee/0x140 [ 3521.084025][ T3921] _dev_info+0x11e/0x180 [ 3521.088415][ T3921] usb_disconnect+0xdd/0x990 [ 3521.093231][ T3921] hub_event+0x1cc9/0x4f30 [ 3521.097764][ T3921] process_scheduled_works+0xb5d/0x1860 [ 3521.103424][ T3921] worker_thread+0xa53/0xfc0 [ 3521.108123][ T3921] kthread+0x389/0x470 [ 3521.112307][ T3921] ret_from_fork+0x514/0xb70 [ 3521.117007][ T3921] ret_from_fork_asm+0x1a/0x30 [ 3521.121905][ T3921] [ 3521.121905][ T3921] to a SOFTIRQ-irq-unsafe lock: [ 3521.128960][ T3921] (tasklist_lock){.+.+}-{3:3} [ 3521.128993][ T3921] [ 3521.128993][ T3921] ... which became SOFTIRQ-irq-unsafe at: [ 3521.141749][ T3921] ... [ 3521.141816][ T3921] lock_acquire+0x106/0x350 [ 3521.149042][ T3921] _raw_read_lock+0x36/0x50 [ 3521.153725][ T3921] __do_wait+0xde/0x740 [ 3521.158023][ T3921] do_wait+0x1e7/0x510 [ 3521.162227][ T3921] kernel_wait+0xd6/0x1c0 [ 3521.166676][ T3921] call_usermodehelper_exec_work+0xbe/0x230 [ 3521.172681][ T3921] process_scheduled_works+0xb5d/0x1860 [ 3521.178335][ T3921] worker_thread+0xa53/0xfc0 [ 3521.183039][ T3921] kthread+0x389/0x470 [ 3521.187241][ T3921] ret_from_fork+0x514/0xb70 [ 3521.191947][ T3921] ret_from_fork_asm+0x1a/0x30 [ 3521.196828][ T3921] [ 3521.196828][ T3921] other info that might help us debug this: [ 3521.196828][ T3921] [ 3521.207120][ T3921] Chain exists of: [ 3521.207120][ T3921] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 3521.207120][ T3921] [ 3521.220195][ T3921] Possible interrupt unsafe locking scenario: [ 3521.220195][ T3921] [ 3521.228559][ T3921] CPU0 CPU1 [ 3521.233942][ T3921] ---- ---- [ 3521.239355][ T3921] lock(tasklist_lock); [ 3521.243625][ T3921] local_irq_disable(); [ 3521.250401][ T3921] lock(&dev->event_lock#2); [ 3521.257717][ T3921] lock(&new->fa_lock); [ 3521.264592][ T3921] [ 3521.268127][ T3921] lock(&dev->event_lock#2); [ 3521.273489][ T3921] [ 3521.273489][ T3921] *** DEADLOCK *** [ 3521.273489][ T3921] [ 3521.281707][ T3921] 6 locks held by syz.5.43623/3921: [ 3521.286928][ T3921] #0: ffff88802c142110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 3521.296197][ T3921] #1: ffff88802bfda230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 3521.306343][ T3921] #2: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 3521.316141][ T3921] #3: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 3521.325749][ T3921] #4: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00 [ 3521.335896][ T3921] #5: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 3521.344989][ T3921] [ 3521.344989][ T3921] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 3521.355409][ T3921] -> (&dev->event_lock#2){..-.}-{3:3} { [ 3521.361029][ T3921] IN-SOFTIRQ-W at: [ 3521.365118][ T3921] lock_acquire+0x106/0x350 [ 3521.371301][ T3921] _raw_spin_lock_irqsave+0x40/0x60 [ 3521.378182][ T3921] input_inject_event+0xa4/0x330 [ 3521.384801][ T3921] kd_sound_helper+0x101/0x210 [ 3521.391252][ T3921] input_handler_for_each_handle+0x101/0x1c0 [ 3521.398927][ T3921] call_timer_fn+0x192/0x5e0 [ 3521.405203][ T3921] __run_timer_base+0x652/0x8b0 [ 3521.411725][ T3921] run_timer_softirq+0xb7/0x170 [ 3521.418248][ T3921] handle_softirqs+0x22a/0x840 [ 3521.424693][ T3921] __irq_exit_rcu+0xca/0x220 [ 3521.430984][ T3921] irq_exit_rcu+0x9/0x30 [ 3521.436918][ T3921] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3521.444237][ T3921] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3521.451888][ T3921] console_flush_all+0x801/0xb20 [ 3521.458508][ T3921] console_unlock+0xd1/0x1c0 [ 3521.464782][ T3921] vprintk_emit+0x485/0x560 [ 3521.470958][ T3921] dev_vprintk_emit+0x355/0x420 [ 3521.477482][ T3921] dev_printk_emit+0xee/0x140 [ 3521.483830][ T3921] _dev_info+0x11e/0x180 [ 3521.489783][ T3921] usb_disconnect+0xdd/0x990 [ 3521.496067][ T3921] hub_event+0x1cc9/0x4f30 [ 3521.502162][ T3921] process_scheduled_works+0xb5d/0x1860 [ 3521.509379][ T3921] worker_thread+0xa53/0xfc0 [ 3521.515651][ T3921] kthread+0x389/0x470 [ 3521.521426][ T3921] ret_from_fork+0x514/0xb70 [ 3521.527686][ T3921] ret_from_fork_asm+0x1a/0x30 [ 3521.534214][ T3921] INITIAL USE at: [ 3521.538197][ T3921] lock_acquire+0x106/0x350 [ 3521.544290][ T3921] _raw_spin_lock_irqsave+0x40/0x60 [ 3521.551095][ T3921] input_inject_event+0xa4/0x330 [ 3521.557686][ T3921] kbd_led_trigger_activate+0xbc/0x100 [ 3521.564745][ T3921] led_trigger_set+0x535/0x960 [ 3521.571161][ T3921] led_trigger_set_default+0x260/0x2a0 [ 3521.578217][ T3921] led_classdev_register_ext+0x787/0x9c0 [ 3521.585524][ T3921] input_leds_connect+0x517/0x790 [ 3521.592144][ T3921] input_register_device+0xce0/0x1140 [ 3521.599124][ T3921] atkbd_connect+0x71e/0xa10 [ 3521.605309][ T3921] serio_driver_probe+0x82/0xb0 [ 3521.611787][ T3921] really_probe+0x267/0xaf0 [ 3521.617976][ T3921] __driver_probe_device+0x1ef/0x380 [ 3521.624854][ T3921] driver_probe_device+0x4f/0x240 [ 3521.631477][ T3921] __driver_attach+0x34c/0x640 [ 3521.637840][ T3921] bus_for_each_dev+0x23b/0x2c0 [ 3521.644281][ T3921] serio_handle_event+0x1af/0xf80 [ 3521.650898][ T3921] process_scheduled_works+0xb5d/0x1860 [ 3521.658036][ T3921] worker_thread+0xa53/0xfc0 [ 3521.664222][ T3921] kthread+0x389/0x470 [ 3521.669904][ T3921] ret_from_fork+0x514/0xb70 [ 3521.676095][ T3921] ret_from_fork_asm+0x1a/0x30 [ 3521.682464][ T3921] } [ 3521.685020][ T3921] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 3521.694213][ T3921] [ 3521.694213][ T3921] the dependencies between the lock to be acquired [ 3521.694227][ T3921] and SOFTIRQ-irq-unsafe lock: [ 3521.707800][ T3921] -> (tasklist_lock){.+.+}-{3:3} { [ 3521.713136][ T3921] HARDIRQ-ON-R at: [ 3521.717316][ T3921] lock_acquire+0x106/0x350 [ 3521.723848][ T3921] _raw_read_lock+0x36/0x50 [ 3521.730378][ T3921] __do_wait+0xde/0x740 [ 3521.736564][ T3921] do_wait+0x1e7/0x510 [ 3521.742657][ T3921] kernel_wait+0xd6/0x1c0 [ 3521.749016][ T3921] call_usermodehelper_exec_work+0xbe/0x230 [ 3521.756956][ T3921] process_scheduled_works+0xb5d/0x1860 [ 3521.764528][ T3921] worker_thread+0xa53/0xfc0 [ 3521.771139][ T3921] kthread+0x389/0x470 [ 3521.777278][ T3921] ret_from_fork+0x514/0xb70 [ 3521.783891][ T3921] ret_from_fork_asm+0x1a/0x30 [ 3521.790678][ T3921] SOFTIRQ-ON-R at: [ 3521.794863][ T3921] lock_acquire+0x106/0x350 [ 3521.801405][ T3921] _raw_read_lock+0x36/0x50 [ 3521.807966][ T3921] __do_wait+0xde/0x740 [ 3521.814171][ T3921] do_wait+0x1e7/0x510 [ 3521.820288][ T3921] kernel_wait+0xd6/0x1c0 [ 3521.826651][ T3921] call_usermodehelper_exec_work+0xbe/0x230 [ 3521.834572][ T3921] process_scheduled_works+0xb5d/0x1860 [ 3521.842146][ T3921] worker_thread+0xa53/0xfc0 [ 3521.848766][ T3921] kthread+0x389/0x470 [ 3521.854868][ T3921] ret_from_fork+0x514/0xb70 [ 3521.861482][ T3921] ret_from_fork_asm+0x1a/0x30 [ 3521.868274][ T3921] INITIAL USE at: [ 3521.872367][ T3921] lock_acquire+0x106/0x350 [ 3521.878803][ T3921] _raw_write_lock_irq+0x3d/0x50 [ 3521.885697][ T3921] copy_process+0x2b4c/0x4440 [ 3521.892308][ T3921] kernel_clone+0x2d7/0x940 [ 3521.898752][ T3921] user_mode_thread+0x110/0x180 [ 3521.905543][ T3921] rest_init+0x23/0x300 [ 3521.911652][ T3921] start_kernel+0x38a/0x3e0 [ 3521.918243][ T3921] x86_64_start_reservations+0x24/0x30 [ 3521.925722][ T3921] x86_64_start_kernel+0x143/0x1c0 [ 3521.932791][ T3921] common_startup_64+0x13e/0x147 [ 3521.939900][ T3921] INITIAL READ USE at: [ 3521.944442][ T3921] lock_acquire+0x106/0x350 [ 3521.951337][ T3921] _raw_read_lock+0x36/0x50 [ 3521.958225][ T3921] __do_wait+0xde/0x740 [ 3521.964777][ T3921] do_wait+0x1e7/0x510 [ 3521.971221][ T3921] kernel_wait+0xd6/0x1c0 [ 3521.977930][ T3921] call_usermodehelper_exec_work+0xbe/0x230 [ 3521.986199][ T3921] process_scheduled_works+0xb5d/0x1860 [ 3521.994115][ T3921] worker_thread+0xa53/0xfc0 [ 3522.001082][ T3921] kthread+0x389/0x470 [ 3522.007550][ T3921] ret_from_fork+0x514/0xb70 [ 3522.014531][ T3921] ret_from_fork_asm+0x1a/0x30 [ 3522.021666][ T3921] } [ 3522.024359][ T3921] ... key at: [] tasklist_lock+0x18/0x40 [ 3522.032482][ T3921] ... acquired at: [ 3522.036604][ T3921] _raw_read_lock+0x36/0x50 [ 3522.041354][ T3921] send_sigio+0x101/0x370 [ 3522.045905][ T3921] dnotify_handle_event+0x169/0x440 [ 3522.051376][ T3921] fsnotify+0x1831/0x1ae0 [ 3522.055954][ T3921] path_openat+0x15c2/0x3860 [ 3522.060794][ T3921] do_file_open+0x23e/0x4a0 [ 3522.065537][ T3921] do_sys_openat2+0x113/0x200 [ 3522.070415][ T3921] __ia32_compat_sys_openat+0x131/0x160 [ 3522.076164][ T3921] __do_fast_syscall_32+0x229/0x6e0 [ 3522.081559][ T3921] do_fast_syscall_32+0x33/0x70 [ 3522.086605][ T3921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3522.093140][ T3921] [ 3522.095487][ T3921] -> (&f_owner->lock){....}-{3:3} { [ 3522.100810][ T3921] INITIAL USE at: [ 3522.104809][ T3921] lock_acquire+0x106/0x350 [ 3522.111084][ T3921] _raw_write_lock_irq+0x3d/0x50 [ 3522.117805][ T3921] __f_setown+0x67/0x370 [ 3522.123822][ T3921] generic_setlease+0xacf/0xfd0 [ 3522.130481][ T3921] do_fcntl_add_lease+0x35e/0x470 [ 3522.137273][ T3921] fcntl_setlease+0x123/0x180 [ 3522.143718][ T3921] do_fcntl+0x8b3/0x1a20 [ 3522.149729][ T3921] do_compat_fcntl64+0x51e/0x7e0 [ 3522.156534][ T3921] __do_fast_syscall_32+0x229/0x6e0 [ 3522.163516][ T3921] do_fast_syscall_32+0x33/0x70 [ 3522.170133][ T3921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3522.178233][ T3921] INITIAL READ USE at: [ 3522.182675][ T3921] lock_acquire+0x106/0x350 [ 3522.189373][ T3921] _raw_read_lock_irqsave+0x48/0x60 [ 3522.196783][ T3921] send_sigio+0x38/0x370 [ 3522.203227][ T3921] dnotify_handle_event+0x169/0x440 [ 3522.210622][ T3921] fsnotify+0x1831/0x1ae0 [ 3522.217161][ T3921] fsnotify_xattr+0x1a3/0x200 [ 3522.224052][ T3921] vfs_fileattr_set+0xa34/0xc90 [ 3522.231140][ T3921] ioctl_fssetxattr+0x213/0x280 [ 3522.238263][ T3921] do_vfs_ioctl+0x900/0x1530 [ 3522.245068][ T3921] __ia32_compat_sys_ioctl+0x572/0x950 [ 3522.252747][ T3921] __do_fast_syscall_32+0x229/0x6e0 [ 3522.260161][ T3921] do_fast_syscall_32+0x33/0x70 [ 3522.267230][ T3921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3522.275761][ T3921] } [ 3522.278364][ T3921] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 3522.287424][ T3921] ... acquired at: [ 3522.291335][ T3921] _raw_read_lock_irqsave+0x48/0x60 [ 3522.296751][ T3921] send_sigio+0x38/0x370 [ 3522.301218][ T3921] kill_fasync+0x24d/0x4d0 [ 3522.305860][ T3921] sock_wake_async+0x137/0x160 [ 3522.310931][ T3921] sk_wake_async+0x184/0x280 [ 3522.315827][ T3921] unix_release_sock+0x74f/0xc80 [ 3522.320968][ T3921] unix_release+0x92/0xd0 [ 3522.325498][ T3921] sock_close+0xc3/0x240 [ 3522.330002][ T3921] __fput+0x44f/0xa60 [ 3522.334184][ T3921] task_work_run+0x1d9/0x270 [ 3522.338981][ T3921] exit_to_user_mode_loop+0xf3/0x4d0 [ 3522.344475][ T3921] __do_fast_syscall_32+0x446/0x6e0 [ 3522.349903][ T3921] do_fast_syscall_32+0x33/0x70 [ 3522.355044][ T3921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3522.361573][ T3921] [ 3522.363912][ T3921] -> (&new->fa_lock){....}-{3:3} { [ 3522.369072][ T3921] INITIAL USE at: [ 3522.372986][ T3921] lock_acquire+0x106/0x350 [ 3522.379084][ T3921] _raw_write_lock_irq+0x3d/0x50 [ 3522.385624][ T3921] fasync_remove_entry+0xf1/0x1c0 [ 3522.392348][ T3921] lease_modify+0x4f7/0x6c0 [ 3522.398475][ T3921] locks_remove_file+0x5f0/0xf70 [ 3522.405029][ T3921] __fput+0x3ae/0xa60 [ 3522.410628][ T3921] task_work_run+0x1d9/0x270 [ 3522.416823][ T3921] exit_to_user_mode_loop+0xf3/0x4d0 [ 3522.423698][ T3921] __do_fast_syscall_32+0x446/0x6e0 [ 3522.430491][ T3921] do_fast_syscall_32+0x33/0x70 [ 3522.437014][ T3921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3522.444939][ T3921] INITIAL READ USE at: [ 3522.449296][ T3921] lock_acquire+0x106/0x350 [ 3522.455912][ T3921] _raw_read_lock_irqsave+0x48/0x60 [ 3522.463147][ T3921] kill_fasync+0x199/0x4d0 [ 3522.469590][ T3921] fuse_dev_queue_req+0x249/0x2c0 [ 3522.476677][ T3921] fuse_simple_background+0xc66/0x1040 [ 3522.484159][ T3921] fuse_send_init+0x3ec/0x740 [ 3522.490865][ T3921] get_tree_nodev+0xbb/0x150 [ 3522.497487][ T3921] fuse_get_tree+0x295/0x3b0 [ 3522.504101][ T3921] vfs_get_tree+0x92/0x2a0 [ 3522.510545][ T3921] do_new_mount+0x341/0xd30 [ 3522.517124][ T3921] __se_sys_mount+0x31d/0x420 [ 3522.523836][ T3921] __do_fast_syscall_32+0x229/0x6e0 [ 3522.531062][ T3921] do_fast_syscall_32+0x33/0x70 [ 3522.537934][ T3921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3522.546375][ T3921] } [ 3522.548945][ T3921] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 3522.557696][ T3921] ... acquired at: [ 3522.561516][ T3921] _raw_read_lock_irqsave+0x48/0x60 [ 3522.566922][ T3921] kill_fasync+0x199/0x4d0 [ 3522.571542][ T3921] mousedev_notify_readers+0x6f1/0xc00 [ 3522.577209][ T3921] mousedev_event+0x602/0x1320 [ 3522.582178][ T3921] input_handle_events_default+0xd4/0x1a0 [ 3522.588093][ T3921] input_pass_values+0x288/0x890 [ 3522.593225][ T3921] input_event_dispose+0x330/0x6b0 [ 3522.598537][ T3921] input_inject_event+0x1dc/0x330 [ 3522.603765][ T3921] evdev_write+0x325/0x4c0 [ 3522.608384][ T3921] vfs_write+0x29a/0xb90 [ 3522.612829][ T3921] ksys_write+0x150/0x270 [ 3522.617371][ T3921] __do_fast_syscall_32+0x229/0x6e0 [ 3522.622775][ T3921] do_fast_syscall_32+0x33/0x70 [ 3522.627830][ T3921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3522.634357][ T3921] [ 3522.636694][ T3921] [ 3522.636694][ T3921] stack backtrace: [ 3522.642627][ T3921] CPU: 0 UID: 0 PID: 3921 Comm: syz.5.43623 Tainted: G L syzkaller #0 PREEMPT(full) [ 3522.642656][ T3921] Tainted: [L]=SOFTLOCKUP [ 3522.642663][ T3921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3522.642680][ T3921] Call Trace: [ 3522.642693][ T3921] [ 3522.642829][ T3921] dump_stack_lvl+0xe8/0x150 [ 3522.642874][ T3921] __lock_acquire+0x2a94/0x2cf0 [ 3522.642904][ T3921] ? kill_fasync+0x199/0x4d0 [ 3522.642960][ T3921] lock_acquire+0x106/0x350 [ 3522.642979][ T3921] ? kill_fasync+0x199/0x4d0 [ 3522.643011][ T3921] _raw_read_lock_irqsave+0x48/0x60 [ 3522.643040][ T3921] ? kill_fasync+0x199/0x4d0 [ 3522.643066][ T3921] kill_fasync+0x199/0x4d0 [ 3522.643096][ T3921] ? kill_fasync+0x53/0x4d0 [ 3522.643123][ T3921] mousedev_notify_readers+0x6f1/0xc00 [ 3522.643159][ T3921] ? mousedev_notify_readers+0x2c/0xc00 [ 3522.643190][ T3921] mousedev_event+0x602/0x1320 [ 3522.643219][ T3921] input_handle_events_default+0xd4/0x1a0 [ 3522.643242][ T3921] ? input_pass_values+0x8d/0x890 [ 3522.643258][ T3921] input_pass_values+0x288/0x890 [ 3522.643278][ T3921] ? input_handle_event+0x70c/0xf30 [ 3522.643305][ T3921] input_event_dispose+0x330/0x6b0 [ 3522.643331][ T3921] input_inject_event+0x1dc/0x330 [ 3522.643356][ T3921] ? input_inject_event+0xb5/0x330 [ 3522.643381][ T3921] evdev_write+0x325/0x4c0 [ 3522.643399][ T3921] ? __lock_acquire+0x6b5/0x2cf0 [ 3522.643420][ T3921] ? __pfx_evdev_write+0x10/0x10 [ 3522.643439][ T3921] ? bpf_lsm_file_permission+0x9/0x20 [ 3522.643475][ T3921] ? security_file_permission+0x75/0x260 [ 3522.643542][ T3921] ? rw_verify_area+0x255/0x4d0 [ 3522.643568][ T3921] ? __pfx_evdev_write+0x10/0x10 [ 3522.643586][ T3921] vfs_write+0x29a/0xb90 [ 3522.643616][ T3921] ? __pfx_vfs_write+0x10/0x10 [ 3522.643642][ T3921] ? __fget_files+0x2a/0x420 [ 3522.643666][ T3921] ? __fget_files+0x2a/0x420 [ 3522.643687][ T3921] ? __fget_files+0x3a0/0x420 [ 3522.643709][ T3921] ? __fget_files+0x2a/0x420 [ 3522.643734][ T3921] ksys_write+0x150/0x270 [ 3522.643761][ T3921] ? __pfx_ksys_write+0x10/0x10 [ 3522.643791][ T3921] __do_fast_syscall_32+0x229/0x6e0 [ 3522.643812][ T3921] ? do_fast_syscall_32+0x33/0x70 [ 3522.643830][ T3921] ? lockdep_hardirqs_on+0x7a/0x110 [ 3522.643847][ T3921] ? asm_int80_emulation+0x1a/0x20 [ 3522.643864][ T3921] ? do_int80_emulation+0x286/0x530 [ 3522.643883][ T3921] ? trace_irq_disable+0x3b/0x140 [ 3522.643917][ T3921] do_fast_syscall_32+0x33/0x70 [ 3522.643937][ T3921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3522.643966][ T3921] RIP: 0023:0xf6fff01c [ 3522.643990][ T3921] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 3522.644029][ T3921] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 3522.644070][ T3921] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 3522.644083][ T3921] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 3522.644095][ T3921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3522.644106][ T3921] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3522.644117][ T3921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3522.644135][ T3921] [ 3523.195436][T30744] usb 2-1: USB disconnect, device number 105