last executing test programs: 3m45.364375163s ago: executing program 1 (id=604): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) 3m45.364177651s ago: executing program 1 (id=605): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000007631cc91000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc048) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140005800800024000000000080001"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4044194) 3m45.30367565s ago: executing program 1 (id=608): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) r0 = socket(0x1e, 0x4, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) 3m45.303342875s ago: executing program 1 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m45.257400185s ago: executing program 1 (id=612): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f0000000080)) 3m45.024980663s ago: executing program 1 (id=620): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x0) 3m44.972238329s ago: executing program 32 (id=620): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r1, 0x0) 2m0.033912823s ago: executing program 0 (id=3185): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000140)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, 0x0) 2m0.033297277s ago: executing program 0 (id=3186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000002c00)={@broadcast, @multicast, @void, {@x25={0x805, {0x2, 0x8, 0x23}}}}, 0x0) 1m59.98199082s ago: executing program 0 (id=3187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) 1m59.980587005s ago: executing program 0 (id=3188): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) 1m59.914808982s ago: executing program 0 (id=3189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 1m59.791653652s ago: executing program 0 (id=3191): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 1m44.764625942s ago: executing program 33 (id=3191): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x84200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 1.737071251s ago: executing program 5 (id=6032): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xfffffffffffffffb) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.543481059s ago: executing program 5 (id=6036): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000fe000000000000000800040001", 0x21) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) 1.536626731s ago: executing program 5 (id=6037): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x77632d15402b7bcf) r1 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r0}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1.379868447s ago: executing program 5 (id=6038): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) getuid() getgid() syz_fuse_handle_req(r0, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f0000004200)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004280), 0x2000, &(0x7f0000006280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.379731803s ago: executing program 5 (id=6039): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) 1.379600512s ago: executing program 5 (id=6040): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 863.42247ms ago: executing program 2 (id=6043): r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_pwait2(r0, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x20000005}) 723.691531ms ago: executing program 2 (id=6047): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$UHID_INPUT(r1, 0x0, 0x0) 722.684525ms ago: executing program 3 (id=6048): r0 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xe7f, 0xe876, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)='F', 0x1) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 660.301554ms ago: executing program 2 (id=6050): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x6, 0x7}, 0xff, {0x0, 0x7f}, 0x0, 0x2}) 551.992289ms ago: executing program 2 (id=6052): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 379.975686ms ago: executing program 4 (id=6055): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001a00)=[{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000680)="81b465d61b8908fb0c44f41ab91c29cc26842768ecc80d31687d7c695001ccc29055aa52b02e87cfcd1b64e508d440892a49acd98db8af998fae4a67fd476b806544aa1315ed5206b5bfb14f560b9f8fe10df2c4d266c140567287ed2847e3b64fab967547becab138ec3dfebc65b0a43ad2f8f2f933563ba6bc57ee627fdc6c3e9147068a2ed5cb005fc51a3881025b1cb8ce611e9af8ff2a51bb156e7434640421ba9f05e4ad2c79430cb9e705c517036829b9db1efa56aca1bd5afafd8c39833cab10fe6a3d4b82bfb45749dc8d01554f8dd01beb04a764e92a8f00f9572122fea08dde88223c", 0xe8}, {&(0x7f0000000180)="8d2f7958b18b0f52c9c532be1605a305ea3451ed1f3fab8ecfb96cb74cbc31ab2e289305cd2d627a5e372d6d8f6f56110fb4", 0x32}, {&(0x7f0000000780)="d777375f14f084f6e81d70f963a48538d3f66a9ca01219924daf3ff5eb94f588932483b342a4238af9ca0929832fc1492f1cd503f804aa631e6506de6e1934b6cf0d00ac3a060abdfbc196605946f2155ce0121e1fad33a32fe1e9293525305543b53aba35b6e087e7193fac81648ec9ae9b21e8e9cee770b9b2acbed11b0788ba27072c756ccf53e0c48de20bb8ea0c2c43d83c71566d865d4786e626353e6f64fe99bd8653fdbecda8fbb42c2be197", 0xb0}, {&(0x7f0000000cc0)="72390de9b96ab2b518ba3ff746bd7811f838c436ac7b3b9edf25ce89f08544b5d3cae4d1f4af04a08dfe8fa4ff7fc2bf4fa9cb59bfc547d41eca15d37aed29e0c6d8707290006daa9b1acd078e074df306d77032b73647a9", 0x58}, {&(0x7f00000002c0)="b8c3b91ffa3b08a6729b45424cd6da78415df093f1dc8fa37b24965e3309982029d5cd75a10fd9ea1930cdee99bd", 0x2e}], 0x5, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 379.743799ms ago: executing program 4 (id=6056): getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x15, "f9808039360bcc2b16d413871108db2bf1b8e11467"}, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 329.188207ms ago: executing program 4 (id=6057): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) openat$cdrom(0xffffff9c, 0x0, 0x200, 0x0) clock_gettime(0xa, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f0000000300)=0x2, 0x5, 0x2, 0x0, &(0x7f0000000100)=0x2, 0xfffffffd) 167.955838ms ago: executing program 4 (id=6058): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x5, 0x5, 0xffffffff, 0x7}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x490, 0x0, 0xfffffffffffffffb}]}) 167.597848ms ago: executing program 2 (id=6059): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x0, 0x0}, 0x10) 166.573759ms ago: executing program 3 (id=6060): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0xf5d, &(0x7f0000001b40)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @gre={{0xb, 0x4, 0x0, 0x8, 0xf47, 0x67, 0x0, 0x1, 0x2f, 0x0, @empty, @broadcast, {[@generic={0x88, 0x2}, @end, @timestamp_addr={0x44, 0x14, 0xb7, 0x1, 0x4, [{@loopback, 0x5}, {@multicast1, 0x400}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xeca, 0x2, [], "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"}, {0x1, 0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x0, {{0x4, 0x1, 0x7, 0x2, 0x1, 0x1, 0x7, 0x6a}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x3, {{0xe, 0x2, 0x7, 0x1, 0x1, 0x0, 0x7, 0xb}, 0x2, {0x10001, 0x40, 0x0, 0x4, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "691fd43d8cf148edbce62ad604"}}}}}}, 0x0) 95.193437ms ago: executing program 2 (id=6061): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x7, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x5, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x10140, 0x0) 91.642539ms ago: executing program 4 (id=6062): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setuid(0xee01) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x0, r2}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) 88.418959ms ago: executing program 3 (id=6063): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0x834}, 0x1, 0x0, 0x0, 0x4000080}, 0xc004) accept4$ax25(r1, 0x0, 0x0, 0x80800) 17.876011ms ago: executing program 3 (id=6064): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4940}, 0x24008890) 17.595616ms ago: executing program 4 (id=6065): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000002c0)={0x4, "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"}) 17.364637ms ago: executing program 3 (id=6066): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x210a, r1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=6067): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0, r1}, 0xc) kernel console output (not intermixed with test programs): 003 syscall=267 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 183.012144][ T40] audit: type=1326 audit(1765475405.131:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.4.3227" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 183.020682][ T40] audit: type=1326 audit(1765475405.131:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.4.3227" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 183.944991][ T6120] hid_parser_main: 28 callbacks suppressed [ 183.945005][ T6120] hid-generic 0000:0000:0000.0008: unknown main item tag 0x1 [ 183.950634][ T6120] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 183.953290][ T6120] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 183.956930][ T6120] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 183.964456][ T6120] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 183.968610][ T6120] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 183.971903][ T6120] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 183.975061][ T6120] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 183.978290][ T6120] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 183.980812][ T6120] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 183.986449][ T6120] hid-generic 0000:0000:0000.0008: hidraw0: HID v8.00 Device [syz0] on syz0 [ 184.566405][T13230] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.154969][ T6120] hid-generic 000B:0003:0004.0009: hidraw0: HID v0.00 Device [syz1] on syz1 [ 185.638643][ T29] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 185.789857][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 185.793144][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 185.797769][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.803278][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 185.808082][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 185.813918][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 185.817123][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 185.821743][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.826590][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 185.831949][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 185.838355][ T29] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 185.841561][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 185.846288][ T29] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.851668][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 185.856264][ T29] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 185.864447][ T29] usb 8-1: string descriptor 0 read error: -22 [ 185.867164][ T29] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 185.871241][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.879886][ T29] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 186.101940][ T6025] usb 8-1: USB disconnect, device number 16 [ 186.164946][T13304] syzkaller1: entered promiscuous mode [ 186.166903][T13304] syzkaller1: entered allmulticast mode [ 187.665823][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3335'. [ 187.765331][T13374] hsr_slave_0: left promiscuous mode [ 187.768818][T13374] hsr_slave_1: left promiscuous mode [ 188.088550][ T29] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 188.258815][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 188.262755][ T29] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 188.266221][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.271982][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.276152][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.280479][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.285594][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 188.289972][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.478135][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 188.500736][ T29] usb 7-1: usb_control_msg returned -32 [ 188.502585][ T29] usbtmc 7-1:16.0: can't read capabilities [ 188.628172][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 188.632584][ T10] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 188.635943][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.639547][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.642452][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 188.646252][ T10] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 188.648941][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.652727][ T10] usb 9-1: config 0 descriptor?? [ 189.070719][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5013.000A/input/input27 [ 189.141844][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5013.000A/input/input28 [ 189.204249][ T10] kye 0003:0458:5013.000A: input,hiddev1,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 189.267000][ T6120] usb 9-1: USB disconnect, device number 9 [ 190.557539][T13458] input: syz1 as /devices/virtual/input/input30 [ 190.857856][ T10] usb 7-1: USB disconnect, device number 13 [ 191.318261][ T6032] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 191.469696][ T6032] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 191.472607][ T6032] usb 9-1: config 0 has no interface number 0 [ 191.474831][ T6032] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 191.481163][ T6032] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 191.484806][ T6032] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 191.489321][ T6032] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 191.492304][ T6032] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 191.495212][ T6032] usb 9-1: Product: syz [ 191.496771][ T6032] usb 9-1: SerialNumber: syz [ 191.499912][ T6032] usb 9-1: config 0 descriptor?? [ 191.503242][ T6032] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 191.506249][ T6032] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input31 [ 191.690682][T13497] syzkaller1: entered promiscuous mode [ 191.692562][T13497] syzkaller1: entered allmulticast mode [ 191.716906][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 191.805161][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3394'. [ 191.810708][T13501] tipc: Enabling of bearer rejected, already enabled [ 191.993160][ T6120] usb 9-1: USB disconnect, device number 10 [ 191.993159][ C2] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 191.997406][ C2] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 192.002205][ T6120] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 192.190340][T13518] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3401'. [ 192.193915][T13517] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3401'. [ 192.738279][ T6120] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 193.119597][T13532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.124416][T13532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.140405][ T6120] usb 8-1: unable to get BOS descriptor or descriptor too short [ 193.144216][ T6120] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 193.155561][ T6120] usb 8-1: can't read configurations, error -71 [ 193.405822][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3436'. [ 193.508992][T13602] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3441'. [ 193.605954][T13612] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3446'. [ 194.438435][ T6120] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 194.457985][T13659] pimreg: entered allmulticast mode [ 194.588325][ T6120] usb 7-1: Using ep0 maxpacket: 8 [ 194.592611][ T6120] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 194.596088][ T6120] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.600434][ T6120] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.604482][ T6120] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.608956][ T6120] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.615271][ T6120] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.619186][ T6120] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.758445][ T29] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 194.908973][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 194.913430][ T29] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 194.916978][ T29] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 194.921218][ T29] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 194.925078][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.929254][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 194.932831][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 194.936832][ T29] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 194.941174][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 194.946263][T13665] ip6erspan0: entered promiscuous mode [ 194.946643][ T29] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 194.951999][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.957122][ T29] usb 9-1: config 0 descriptor?? [ 194.959861][T13661] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 195.041732][T13667] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3472'. [ 195.171816][ T29] usblp 9-1:0.0: usblp1: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 195.372425][ T29] usb 9-1: USB disconnect, device number 11 [ 195.376288][ T29] usblp1: removed [ 195.390133][T13683] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3479'. [ 195.393494][T13683] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3479'. [ 195.396342][T13683] netlink: 'syz.3.3479': attribute type 6 has an invalid length. [ 195.399674][T13683] netlink: 'syz.3.3479': attribute type 5 has an invalid length. [ 195.402211][T13683] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3479'. [ 195.698441][ T29] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 195.849686][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.853573][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.856534][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.860743][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.863922][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.869381][ T29] usb 8-1: config 0 descriptor?? [ 195.987052][ T5956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.993030][ T5956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.995820][ T5956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.001043][ T5956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.004948][ T5956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.012055][ T5949] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.014737][ T5949] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.017319][ T5949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.021821][ T5949] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.024737][ T5949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.042021][T13691] ip6_vti0 speed is unknown, defaulting to 1000 [ 196.224944][T13691] chnl_net:caif_netlink_parms(): no params data found [ 196.285602][ T29] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 196.301941][T13691] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.304379][T13691] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.306772][T13691] bridge_slave_0: entered allmulticast mode [ 196.310092][T13691] bridge_slave_0: entered promiscuous mode [ 196.314031][T13691] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.316415][T13691] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.318828][T13691] bridge_slave_1: entered allmulticast mode [ 196.321551][T13691] bridge_slave_1: entered promiscuous mode [ 196.336831][T13691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.341341][T13691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.357254][T13691] team0: Port device team_slave_0 added [ 196.361317][T13691] team0: Port device team_slave_1 added [ 196.374344][T13691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.376530][T13691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.385615][T13691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.389981][T13691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.392291][T13691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.400933][T13691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.423304][T13691] hsr_slave_0: entered promiscuous mode [ 196.425606][T13691] hsr_slave_1: entered promiscuous mode [ 196.427777][T13691] debugfs: 'hsr0' already exists in 'hsr' [ 196.429814][T13691] Cannot create hsr debugfs directory [ 196.481053][ T29] usb 8-1: USB disconnect, device number 19 [ 196.510184][T13691] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 196.515079][T13691] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.519442][T13691] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.523639][T13691] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.542623][T13691] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.545880][T13691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.549532][T13691] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.552434][T13691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.585193][T13691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.598134][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.604419][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.617265][T13691] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.625725][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.628125][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.634025][ T3823] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.636464][ T3823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.761666][T13691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.896237][T13691] veth0_vlan: entered promiscuous mode [ 196.906301][T13691] veth1_vlan: entered promiscuous mode [ 196.913845][T13740] Invalid argument reading file caps for ./file0 [ 196.921492][T13691] veth0_macvtap: entered promiscuous mode [ 196.925494][T13691] veth1_macvtap: entered promiscuous mode [ 196.934857][T13691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.944310][T13691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.950236][ T1142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.953756][ T1142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.957864][ T1142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.964539][ T1142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.992584][ T3823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.995109][ T3823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.012302][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.019651][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.129284][T13755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3500'. [ 197.151460][T13759] syzkaller1: entered promiscuous mode [ 197.153444][T13759] syzkaller1: entered allmulticast mode [ 197.227753][ T6120] usb 7-1: USB disconnect, device number 14 [ 197.808633][ T6025] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 197.967461][ T6025] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.973546][ T6025] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 197.977347][ T6025] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.990214][ T6025] usb 7-1: config 0 descriptor?? [ 198.098570][ T5949] Bluetooth: hci4: command tx timeout [ 198.202481][ T6025] usbhid 7-1:0.0: can't add hid device: -71 [ 198.205532][ T6025] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 198.211332][ T6025] usb 7-1: USB disconnect, device number 15 [ 198.390569][T13840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.432345][T13840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.659306][ T5745] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 198.828656][ T5745] usb 7-1: Using ep0 maxpacket: 32 [ 198.832913][ T5745] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.837436][ T5745] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 198.841290][ T5745] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.846437][ T5745] usb 7-1: config 0 descriptor?? [ 198.851099][ T5745] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 198.857857][ T5745] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 198.983482][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.059869][ T6120] usb 7-1: USB disconnect, device number 16 [ 199.063045][ T6120] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 199.413236][T13867] netlink: 'syz.5.3551': attribute type 1 has an invalid length. [ 199.415851][T13867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3551'. [ 199.574659][ T5745] hid_parser_main: 45 callbacks suppressed [ 199.574679][ T5745] hid-generic 000B:0003:0004.000C: unknown main item tag 0x0 [ 199.580618][ T5745] hid-generic 000B:0003:0004.000C: unknown main item tag 0x0 [ 199.584465][ T5745] hid-generic 000B:0003:0004.000C: unknown main item tag 0x0 [ 199.588668][ T5745] hid-generic 000B:0003:0004.000C: unknown main item tag 0x0 [ 199.591922][ T5745] hid-generic 000B:0003:0004.000C: unknown main item tag 0x0 [ 199.595112][ T5745] hid-generic 000B:0003:0004.000C: unknown main item tag 0x0 [ 199.598271][ T5745] hid-generic 000B:0003:0004.000C: unknown main item tag 0x0 [ 199.601584][ T5745] hid-generic 000B:0003:0004.000C: unknown main item tag 0x0 [ 199.604801][ T5745] hid-generic 000B:0003:0004.000C: unknown main item tag 0x0 [ 199.608084][ T5745] hid-generic 000B:0003:0004.000C: unknown main item tag 0x0 [ 199.612746][ T5745] hid-generic 000B:0003:0004.000C: hidraw0: HID v0.00 Device [syz1] on syz1 [ 199.684939][T13877] team0 (unregistering): Port device team_slave_0 removed [ 199.692289][T13877] team0 (unregistering): Port device team_slave_1 removed [ 200.179812][ T5949] Bluetooth: hci4: command tx timeout [ 200.408554][ T6120] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 200.490752][T13892] netlink: 360 bytes leftover after parsing attributes in process `syz.3.3561'. [ 200.580062][ T6120] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.583686][ T6120] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.587889][ T6120] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.592599][ T6120] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.593337][T13897] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3562'. [ 200.595556][ T6120] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.600561][T13894] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3562'. [ 200.603274][ T6120] usb 9-1: config 0 descriptor?? [ 201.021653][ T6120] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 201.298690][ T29] usb 9-1: USB disconnect, device number 12 [ 201.631086][T13940] sit0: entered promiscuous mode [ 201.636685][T13940] netlink: 'syz.5.3583': attribute type 1 has an invalid length. [ 201.640030][T13940] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3583'. [ 201.689499][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3585'. [ 201.701195][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3585'. [ 201.928950][T13955] bridge0: port 1(syz_tun) entered blocking state [ 201.933187][T13955] bridge0: port 1(syz_tun) entered forwarding state [ 201.943199][T13955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.027143][T13955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.217973][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3602'. [ 202.221131][T13984] netlink: 'syz.3.3602': attribute type 1 has an invalid length. [ 202.227793][T13986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3603'. [ 202.233238][ T75] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.235810][ T75] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.238426][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3603'. [ 202.243141][ T75] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.246877][ T75] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.260095][ T5949] Bluetooth: hci4: command tx timeout [ 203.143478][T14014] hsr_slave_0: left promiscuous mode [ 203.296682][T14024] batadv_slave_1: entered promiscuous mode [ 203.302277][T14022] batadv_slave_1: left promiscuous mode [ 203.317016][ T40] kauditd_printk_skb: 1585 callbacks suppressed [ 203.317033][ T40] audit: type=1326 audit(1765475681.505:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.3.3621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 203.349580][ T40] audit: type=1326 audit(1765475681.505:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.3.3621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 203.368690][ T40] audit: type=1326 audit(1765475681.535:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.3.3621" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 203.379650][ T40] audit: type=1326 audit(1765475681.535:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.3.3621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 203.394541][ T40] audit: type=1326 audit(1765475681.535:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.3.3621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 203.403871][ T40] audit: type=1326 audit(1765475681.535:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.3.3621" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 203.414473][ T40] audit: type=1326 audit(1765475681.535:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.3.3621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 203.422523][ T40] audit: type=1326 audit(1765475681.535:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.3.3621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 203.430173][ T40] audit: type=1326 audit(1765475681.535:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.3.3621" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 203.438698][ T40] audit: type=1326 audit(1765475681.535:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14026 comm="syz.3.3621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 203.517630][T14042] tunl0: Caught tx_queue_len zero misconfig [ 203.618656][T14048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.656414][T14048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.058629][ T6025] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 204.222231][ T6025] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 204.231615][ T6025] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.237634][ T6025] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 204.242338][ T6025] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 204.245719][ T6025] usb 7-1: Manufacturer: syz [ 204.250685][ T6025] usb 7-1: config 0 descriptor?? [ 204.318783][ T6025] rc_core: IR keymap rc-hauppauge not found [ 204.321139][ T6025] Registered IR keymap rc-empty [ 204.323778][ T6025] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 204.330275][ T6025] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input32 [ 204.338744][ T5949] Bluetooth: hci4: command tx timeout [ 204.478574][ T34] usb 7-1: USB disconnect, device number 17 [ 204.632133][T14120] netlink: 'syz.5.3663': attribute type 4 has an invalid length. [ 204.635615][T14120] __nla_validate_parse: 2 callbacks suppressed [ 204.635631][T14120] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3663'. [ 204.969021][ T29] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 205.130619][ T29] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 205.132969][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 205.136543][ T29] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.146642][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.150425][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 205.160063][ T29] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 205.162456][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 205.165968][ T29] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.178602][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.182128][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 205.186489][ T29] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 205.188971][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 205.192476][ T29] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 205.196282][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.208662][ T29] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 205.221195][ T29] usb 10-1: string descriptor 0 read error: -22 [ 205.223226][ T29] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 205.226055][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.242000][ T29] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 205.521032][ T6025] usb 10-1: USB disconnect, device number 2 [ 205.549771][T14160] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3681'. [ 205.596584][T14168] atomic_op ffff88806e74e998 conn xmit_atomic 0000000000000000 [ 205.683551][T14176] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.758563][T14176] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.831357][T14176] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.927026][T14176] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.041383][ T1142] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.052274][ T1142] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.060396][ T1142] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.068100][ T1142] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.528832][ T34] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 206.689893][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.693436][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.696721][ T34] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.702928][ T34] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.708836][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.715724][ T34] usb 10-1: config 0 descriptor?? [ 207.085971][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3723'. [ 207.128841][ T34] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 207.381375][ T10] usb 10-1: USB disconnect, device number 3 [ 207.438826][ T34] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 207.555217][T14289] pim6reg1: entered promiscuous mode [ 207.557083][T14289] pim6reg1: entered allmulticast mode [ 207.598778][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 207.603515][ T34] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 207.606649][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.609312][ T34] usb 9-1: Product: syz [ 207.610687][ T34] usb 9-1: Manufacturer: syz [ 207.612414][ T34] usb 9-1: SerialNumber: syz [ 207.616096][ T34] usb 9-1: config 0 descriptor?? [ 207.826206][ T34] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 207.830748][ T34] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 207.835442][ T34] usb 9-1: USB disconnect, device number 13 [ 207.844242][ T10] kernel write not supported for file /vbi1 (pid: 10 comm: kworker/0:1) [ 207.928422][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3748'. [ 207.932186][T14301] netlink: 'syz.2.3748': attribute type 30 has an invalid length. [ 207.939561][ T30] block nbd0: Possible stuck request ffff888026948000: control (read@0,1024B). Runtime 150 seconds [ 207.943462][ T30] block nbd0: Possible stuck request ffff888026948200: control (read@1024,1024B). Runtime 150 seconds [ 207.945045][ T1179] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.947078][ T30] block nbd0: Possible stuck request ffff888026948400: control (read@2048,1024B). Runtime 150 seconds [ 207.947107][ T30] block nbd0: Possible stuck request ffff888026948600: control (read@3072,1024B). Runtime 150 seconds [ 207.950632][ T1179] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.950666][ T1179] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.950693][ T1179] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.963070][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3748'. [ 207.971878][T14301] netlink: 'syz.2.3748': attribute type 30 has an invalid length. [ 208.265148][T14322] sit0: Caught tx_queue_len zero misconfig [ 208.346706][T14329] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3761'. [ 208.624860][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3772'. [ 208.628593][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3772'. [ 208.999285][T14390] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3791'. [ 209.063660][T14404] netlink: 'syz.2.3796': attribute type 4 has an invalid length. [ 209.248784][ T7595] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 209.276636][T14423] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3804'. [ 209.400922][ T7595] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 209.403353][ T7595] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 209.406589][ T7595] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.430019][T14428] 9pnet: p9_errstr2errno: server reported unknown error [ 209.459462][ T7595] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 209.462961][ T7595] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 209.467300][ T7595] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 209.469808][ T7595] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 209.473626][ T7595] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.477233][ T7595] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 209.481188][ T7595] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 209.485436][ T7595] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 209.487973][ T7595] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 209.491649][ T7595] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.495357][ T7595] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 209.499163][ T7595] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 209.505056][ T7595] usb 9-1: string descriptor 0 read error: -22 [ 209.507143][ T7595] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 209.510740][ T7595] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.516623][ T7595] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 210.032056][ T6025] usb 9-1: USB disconnect, device number 14 [ 210.402956][T14482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3829'. [ 210.818092][T14509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3840'. [ 211.135730][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 211.135747][ T40] audit: type=1326 audit(1765475689.324:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14524 comm="syz.2.3848" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705d579 code=0x0 [ 211.142926][T14532] pim6reg1: entered promiscuous mode [ 211.150048][T14532] pim6reg1: entered allmulticast mode [ 211.349619][T14545] tun0: tun_chr_ioctl cmd 1074025675 [ 211.351545][T14545] tun0: persist enabled [ 211.353824][T14545] tun0: tun_chr_ioctl cmd 1074025675 [ 211.355661][T14545] tun0: persist enabled [ 211.972123][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3867'. [ 212.231152][ T6120] libceph: connect (1)[c::]:6789 error -101 [ 212.233633][ T6120] libceph: mon0 (1)[c::]:6789 connect error [ 212.274752][T14579] ceph: No mds server is up or the cluster is laggy [ 212.429024][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.261947][T14640] random: crng reseeded on system resumption [ 213.493619][T14654] bridge1: entered promiscuous mode [ 213.619192][ T6120] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 213.768941][ T6120] usb 9-1: Using ep0 maxpacket: 16 [ 213.773922][ T6120] usb 9-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 213.776805][ T6120] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.780219][ T6120] usb 9-1: Product: syz [ 213.781634][ T6120] usb 9-1: Manufacturer: syz [ 213.783339][ T6120] usb 9-1: SerialNumber: syz [ 213.787094][ T6120] usb 9-1: config 0 descriptor?? [ 213.791698][ T6120] as10x_usb: device has been detected [ 213.793863][ T6120] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 213.799099][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 213.803899][ T6120] usb 9-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 213.817734][ T6120] as10x_usb: error during firmware upload part1 [ 213.820436][ T6120] Registered device Sky IT Digital Key (green led) [ 213.835434][T14675] Invalid argument reading file caps for ./file0 [ 213.950283][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 213.953260][ T24] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 213.956828][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.960524][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 213.964194][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 213.969098][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.972196][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.975158][ T24] usb 7-1: Product: syz [ 213.976882][ T24] usb 7-1: Manufacturer: syz [ 213.981358][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 213.983147][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 213.986119][ T24] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 213.988051][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 213.996533][T14649] random: crng reseeded on system resumption [ 214.005382][ T6120] usb 9-1: USB disconnect, device number 15 [ 214.011310][T14686] sit0: entered promiscuous mode [ 214.014365][ T6120] Unregistered device Sky IT Digital Key (green led) [ 214.015010][T14686] netlink: 'syz.3.3914': attribute type 1 has an invalid length. [ 214.015034][ T6120] as10x_usb: device has been disconnected [ 214.017240][T14686] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3914'. [ 216.011432][ T40] audit: type=1326 audit(1765475694.204:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 216.018825][ T40] audit: type=1326 audit(1765475694.204:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 216.029250][ T40] audit: type=1326 audit(1765475694.204:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 216.036318][ T40] audit: type=1326 audit(1765475694.204:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 216.043464][ T40] audit: type=1326 audit(1765475694.204:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 216.050304][ T40] audit: type=1326 audit(1765475694.204:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 216.057069][ T40] audit: type=1326 audit(1765475694.204:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 216.064056][ T40] audit: type=1326 audit(1765475694.204:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 216.071128][ T40] audit: type=1326 audit(1765475694.204:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 216.419042][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 216.419054][ T40] audit: type=1804 audit(1765475694.604:4209): pid=14814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3970" name="/newroot/126/file1" dev="tmpfs" ino=662 res=1 errno=0 [ 216.574062][ T10] usb 7-1: USB disconnect, device number 18 [ 216.644156][T14822] input: syz0 as /devices/virtual/input/input33 [ 216.667014][T14825] netlink: 'syz.5.3975': attribute type 13 has an invalid length. [ 216.887928][T14836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3980'. [ 216.892914][T14836] netlink: 'syz.3.3980': attribute type 20 has an invalid length. [ 216.896169][T14836] netlink: 'syz.3.3980': attribute type 21 has an invalid length. [ 217.663966][T14870] Invalid ELF header magic: != ELF [ 217.725174][T14876] team_slave_1: Caught tx_queue_len zero misconfig [ 217.776207][T14884] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4001'. [ 217.784426][ T40] audit: type=1326 audit(1765475695.974:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.4.3999" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64579 code=0x0 [ 217.875448][T14889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4003'. [ 218.020859][T14903] lo: Caught tx_queue_len zero misconfig [ 218.419634][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.501168][T14936] tap0: tun_chr_ioctl cmd 1074025675 [ 218.502983][T14936] tap0: persist enabled [ 218.505348][T14936] tap0: tun_chr_ioctl cmd 1074025675 [ 218.507349][T14936] tap0: persist disabled [ 219.049148][ T5949] block nbd5: Receive control failed (result -107) [ 219.091443][T14969] block nbd5: shutting down sockets [ 219.428362][T15013] syzkaller1: entered promiscuous mode [ 219.431411][T15013] syzkaller1: entered allmulticast mode [ 219.470033][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.756892][T15040] tunl0: Caught tx_queue_len zero misconfig [ 219.783180][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.859661][T15052] vxcan0: tx address claim with different name [ 219.912647][T15058] pim6reg: entered allmulticast mode [ 219.917930][T15058] pim6reg: left allmulticast mode [ 220.499718][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.934195][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4092'. [ 221.172389][T15119] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4102'. [ 221.206828][T15122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.211089][T15122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.214539][T15122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.218910][T15122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.223094][T15122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.226569][T15122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.374690][T15143] netlink: 'syz.5.4111': attribute type 11 has an invalid length. [ 221.454237][T15156] sit0: Caught tx_queue_len zero misconfig [ 221.480517][T15161] geneve2: entered promiscuous mode [ 221.550318][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 221.671652][T15189] netlink: 'syz.3.4136': attribute type 13 has an invalid length. [ 221.953808][T15222] random: crng reseeded on system resumption [ 221.999366][T15228] netlink: 'syz.4.4153': attribute type 13 has an invalid length. [ 222.527642][T15256] geneve3: entered promiscuous mode [ 222.611682][ T40] audit: type=1326 audit(1765475700.804:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.5.4169" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 222.619325][ T40] audit: type=1326 audit(1765475700.804:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.5.4169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 222.628186][ T40] audit: type=1326 audit(1765475700.804:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.5.4169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 222.637641][ T40] audit: type=1326 audit(1765475700.804:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.5.4169" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 222.647751][ T40] audit: type=1326 audit(1765475700.804:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.5.4169" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 222.656873][ T40] audit: type=1326 audit(1765475700.804:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.5.4169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 222.665918][ T40] audit: type=1326 audit(1765475700.804:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.5.4169" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 222.675186][ T40] audit: type=1326 audit(1765475700.804:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.5.4169" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 222.682640][ T40] audit: type=1326 audit(1765475700.804:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.5.4169" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706d598 code=0x7ffc0000 [ 222.689710][ T40] audit: type=1326 audit(1765475700.804:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15261 comm="syz.5.4169" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d579 code=0x7ffc0000 [ 222.771735][T15273] lo: Caught tx_queue_len zero misconfig [ 222.833773][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4176'. [ 222.892796][T15286] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4179'. [ 223.291240][T15320] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 223.621423][ T3779] net_ratelimit: 29 callbacks suppressed [ 223.621442][ T3779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.630898][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.636654][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.793730][T15295] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 223.797061][T15295] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 223.805942][T15295] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 224.659489][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.928940][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4213'. [ 224.933348][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4213'. [ 225.069388][ T5956] Bluetooth: hci4: command 0x0c1a tx timeout [ 225.127763][ T7595] libceph: connect (1)[c::]:6789 error -22 [ 225.131689][ T7595] libceph: mon0 (1)[c::]:6789 connect error [ 225.141972][T15382] lo: Caught tx_queue_len zero misconfig [ 225.175910][T15378] ceph: No mds server is up or the cluster is laggy [ 225.295040][T15395] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 225.308995][T15395] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4227'. [ 225.699454][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.860099][ T5956] Bluetooth: hci5: command 0x1003 tx timeout [ 225.860674][ T1179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.861312][ T5949] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 225.869879][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.874296][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.449451][T15455] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40 [ 226.745041][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.766942][T15480] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4266'. [ 227.149583][ T5949] Bluetooth: hci4: command 0x0c1a tx timeout [ 227.249339][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 227.409423][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 227.413491][ T10] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 227.417053][ T10] usb 10-1: config 0 has no interface number 0 [ 227.419835][ T10] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.424650][ T10] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 227.430385][ T10] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.434950][ T10] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 227.440273][ T10] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 227.444140][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.449697][ T10] usb 10-1: config 0 descriptor?? [ 227.456333][ T10] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 227.661078][ T7595] usb 10-1: USB disconnect, device number 4 [ 227.664957][ T7595] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 228.210309][ T10] libceph: connect (1)[c::]:6789 error -22 [ 228.213305][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 228.244356][T15525] ceph: No mds server is up or the cluster is laggy [ 228.373453][T15547] trusted_key: syz.3.4294 sent an empty control message without MSG_MORE. [ 228.679227][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 228.679240][ T40] audit: type=1326 audit(1765475706.864:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15579 comm="syz.5.4310" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706d579 code=0x0 [ 228.744441][T15595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4318'. [ 228.903248][ T6025] net_ratelimit: 115 callbacks suppressed [ 228.903263][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.921135][T15614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4325'. [ 228.924463][T15614] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4325'. [ 228.928076][T15614] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4325'. [ 229.219490][ T5949] Bluetooth: hci4: command 0x0c1a tx timeout [ 229.505900][ T10] libceph: connect (1)[c::]:6789 error -101 [ 229.512793][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 229.539656][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.554983][T15630] ceph: No mds server is up or the cluster is laggy [ 229.661921][T15648] input: syz1 as /devices/virtual/input/input34 [ 229.664268][T15648] input: failed to attach handler leds to device input34, error: -6 [ 229.814933][T15665] kvm: user requested TSC rate below hardware speed [ 230.235236][ T40] audit: type=1326 audit(1765475708.424:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.2.4364" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 230.244349][ T40] audit: type=1326 audit(1765475708.424:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.2.4364" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 230.258758][ T40] audit: type=1326 audit(1765475708.424:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.2.4364" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 230.266612][ T40] audit: type=1326 audit(1765475708.424:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.2.4364" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 230.273684][ T40] audit: type=1326 audit(1765475708.424:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.2.4364" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 230.281126][ T40] audit: type=1326 audit(1765475708.424:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.2.4364" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 230.288381][ T40] audit: type=1326 audit(1765475708.424:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.2.4364" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 230.296554][ T40] audit: type=1326 audit(1765475708.424:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.2.4364" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 230.303651][ T40] audit: type=1326 audit(1765475708.424:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15699 comm="syz.2.4364" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 230.500290][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4367'. [ 230.593000][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.818403][T15740] syzkaller1: entered promiscuous mode [ 230.820604][T15740] syzkaller1: entered allmulticast mode [ 230.858154][T15751] input: syz0 as /devices/virtual/input/input35 [ 230.929320][T15754] overlayfs: failed to clone lowerpath [ 231.047016][T15768] mac80211_hwsim hwsim12 wlan0: Caught tx_queue_len zero misconfig [ 231.112470][T15774] netlink: 'syz.4.4395': attribute type 4 has an invalid length. [ 231.415172][T15802] ip6_vti0 speed is unknown, defaulting to 1000 [ 231.620247][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.795498][T15817] bond0: Caught tx_queue_len zero misconfig [ 231.950280][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.260412][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.264471][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.280585][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.517119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.643473][T15857] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 232.670112][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.703670][ T29] libceph: connect (1)[c::]:6789 error -22 [ 232.706353][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 232.750071][T15864] ceph: No mds server is up or the cluster is laggy [ 232.808938][T15880] input: syz0 as /devices/virtual/input/input36 [ 232.819667][ T10] kernel write not supported for file /vcs (pid: 10 comm: kworker/0:1) [ 233.066159][T15909] input: syz0 as /devices/virtual/input/input37 [ 233.699968][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.905705][ T1142] Bluetooth: hci5: Frame reassembly failed (-84) [ 233.909700][ T1142] Bluetooth: hci5: Frame reassembly failed (-84) [ 234.740148][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.743803][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.746238][T15942] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 234.746943][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.980026][ T3779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.983366][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.986417][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.989620][ T24] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 235.149678][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 235.153679][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.158075][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.165134][ T24] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 235.168892][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.173476][ T24] usb 9-1: config 0 descriptor?? [ 235.363474][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4480'. [ 235.587485][ T24] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 235.648560][T15982] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4485'. [ 235.654513][T15982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.779847][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.842132][ T29] usb 9-1: USB disconnect, device number 16 [ 235.939697][ T5954] Bluetooth: hci5: command 0x1003 tx timeout [ 235.943723][ T5949] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 236.002114][T15984] loop9: detected capacity change from 0 to 7 [ 236.005623][T15984] Dev loop9: unable to read RDB block 7 [ 236.008113][T15984] loop9: unable to read partition table [ 236.010872][T15984] loop9: partition table beyond EOD, truncated [ 236.012881][T15984] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.019629][ T5954] Bluetooth: hci4: command 0x0c1a tx timeout [ 236.020973][T15984] Dev loop9: unable to read RDB block 7 [ 236.025323][T15984] loop9: unable to read partition table [ 236.028045][T15984] loop9: partition table beyond EOD, truncated [ 236.351290][T15994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4491'. [ 236.598598][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4504'. [ 236.631435][T16021] hsr_slave_0 (unregistering): left promiscuous mode [ 236.732053][T16032] kvm: user requested TSC rate below hardware speed [ 236.819865][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.821418][ T5956] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 236.887795][T16047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4516'. [ 237.676131][T16078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.678470][T16078] IPv6: NLM_F_CREATE should be set when creating new route [ 237.859942][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.020098][ T30] block nbd0: Possible stuck request ffff888026948000: control (read@0,1024B). Runtime 180 seconds [ 238.025300][ T30] block nbd0: Possible stuck request ffff888026948200: control (read@1024,1024B). Runtime 180 seconds [ 238.029150][ T30] block nbd0: Possible stuck request ffff888026948400: control (read@2048,1024B). Runtime 180 seconds [ 238.033286][ T30] block nbd0: Possible stuck request ffff888026948600: control (read@3072,1024B). Runtime 180 seconds [ 238.379836][ T34] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 238.544024][ T34] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 238.547475][ T34] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 238.558736][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 238.567539][ T34] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 238.570498][ T34] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 238.574152][ T34] usb 7-1: Product: syz [ 238.575809][ T34] usb 7-1: Manufacturer: syz [ 238.577558][ T34] usb 7-1: SerialNumber: syz [ 238.580767][ T34] usb 7-1: config 0 descriptor?? [ 238.584367][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 238.586616][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 238.594170][ T34] usb 7-1: selecting invalid altsetting 0 [ 239.184402][T16102] usb 7-1: reset high-speed USB device number 19 using dummy_hcd [ 239.190557][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4560'. [ 239.269741][ T34] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 239.330390][T16102] usb 7-1: device firmware changed [ 239.333166][ T7595] usb 7-1: USB disconnect, device number 19 [ 239.441388][ T34] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 239.445248][ T34] usb 10-1: config 0 interface 0 has no altsetting 0 [ 239.449348][ T34] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 239.452391][ T34] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 239.455002][ T34] usb 10-1: Product: syz [ 239.456387][ T34] usb 10-1: Manufacturer: syz [ 239.457988][ T34] usb 10-1: SerialNumber: syz [ 239.461178][ T34] usb 10-1: config 0 descriptor?? [ 239.465139][ T34] usb 10-1: selecting invalid altsetting 0 [ 239.480349][ T7595] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 239.569181][T16175] autofs: Invalid uid '0x00000000ffffffff' [ 239.639571][ T7595] usb 7-1: unable to get BOS descriptor or descriptor too short [ 239.643256][ T7595] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 239.645640][ T7595] usb 7-1: can't read configurations, error -71 [ 239.674668][ T34] usb 10-1: USB disconnect, device number 5 [ 239.710992][T16180] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 239.844366][T16189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4578'. [ 239.953554][ T1142] net_ratelimit: 2 callbacks suppressed [ 239.953572][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.959977][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.963838][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.169803][T16208] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4587'. [ 240.181749][T16210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.185999][T16210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.188661][T16210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.192567][T16210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.195236][T16210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.198029][T16210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.220487][T16209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.232126][ T40] kauditd_printk_skb: 774 callbacks suppressed [ 240.232139][ T40] audit: type=1326 audit(1765475718.424:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16215 comm="syz.4.4592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 240.242599][ T40] audit: type=1326 audit(1765475718.424:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16215 comm="syz.4.4592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 240.249297][ T40] audit: type=1326 audit(1765475718.434:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16215 comm="syz.4.4592" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 240.256582][ T40] audit: type=1326 audit(1765475718.434:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16215 comm="syz.4.4592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 240.265295][ T40] audit: type=1326 audit(1765475718.434:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16215 comm="syz.4.4592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 240.854436][T16261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4611'. [ 241.078325][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4618'. [ 241.180408][T16285] ip6_vti0 speed is unknown, defaulting to 1000 [ 241.523212][T16327] veth0_to_bridge: entered promiscuous mode [ 241.528543][T16326] veth0_to_bridge: left promiscuous mode [ 241.796561][ T5956] Bluetooth: hci4: command 0x0c1a tx timeout [ 241.812358][T16356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4655'. [ 242.348605][ T6025] kernel write not supported for file [eventfd] (pid: 6025 comm: kworker/2:5) [ 242.389168][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4668'. [ 242.477731][T16395] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 242.881238][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4675'. [ 243.386963][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4689'. [ 243.392712][T16424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4689'. [ 243.395551][T16424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4689'. [ 243.472303][T16432] overlayfs: failed to clone upperpath [ 243.803554][T16453] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4697'. [ 243.989084][T16469] ip6_vti0 speed is unknown, defaulting to 1000 [ 244.070879][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4706'. [ 244.327424][T16482] netlink: 'syz.4.4709': attribute type 21 has an invalid length. [ 244.339981][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 244.490147][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 244.498867][ T10] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 244.506085][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 244.510534][ T10] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.514851][ T10] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.520734][ T10] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.524594][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.734927][ T10] usb 10-1: GET_CAPABILITIES returned 0 [ 244.736870][ T10] usbtmc 10-1:16.0: can't read capabilities [ 244.938213][ T24] usb 10-1: USB disconnect, device number 6 [ 245.140391][ T7595] net_ratelimit: 16 callbacks suppressed [ 245.140404][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.497805][T16522] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 246.180090][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.363534][T16568] __nla_validate_parse: 2 callbacks suppressed [ 246.363547][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4745'. [ 246.535863][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4749'. [ 246.538664][T16577] netlink: 'syz.3.4749': attribute type 6 has an invalid length. [ 246.550045][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4749'. [ 246.610075][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 246.711243][T16587] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 246.761247][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 246.773150][ T10] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.777228][ T10] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 246.781280][ T10] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.786729][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 246.806130][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 246.808988][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.814598][ T10] usb 7-1: Product: syz [ 246.816031][ T10] usb 7-1: Manufacturer: syz [ 246.817921][ T10] usb 7-1: SerialNumber: syz [ 247.140315][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.220089][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.229170][T16612] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 247.248437][T16570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.252542][T16570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.260640][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 247.267352][ T10] usb 7-1: USB disconnect, device number 22 [ 247.276323][T16618] ip6_vti0 speed is unknown, defaulting to 1000 [ 247.276332][ T10] usblp0: removed [ 247.564859][T16623] input: syz1 as /devices/virtual/input/input38 [ 248.161013][ T40] audit: type=1326 audit(1765475726.353:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16649 comm="syz.4.4781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 248.168758][ T40] audit: type=1326 audit(1765475726.353:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16649 comm="syz.4.4781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 248.177999][T16650] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 248.178147][ T40] audit: type=1326 audit(1765475726.363:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16649 comm="syz.4.4781" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 248.180429][T16650] netlink: 'syz.5.4782': attribute type 1 has an invalid length. [ 248.190126][ T40] audit: type=1326 audit(1765475726.363:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16649 comm="syz.4.4781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 248.198147][ T40] audit: type=1326 audit(1765475726.363:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16649 comm="syz.4.4781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 248.207215][ T40] audit: type=1326 audit(1765475726.363:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16649 comm="syz.4.4781" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 248.214526][ T40] audit: type=1326 audit(1765475726.373:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16649 comm="syz.4.4781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 248.221545][ T40] audit: type=1326 audit(1765475726.373:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16649 comm="syz.4.4781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 248.228201][ T40] audit: type=1326 audit(1765475726.373:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16649 comm="syz.4.4781" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 248.235698][ T40] audit: type=1326 audit(1765475726.383:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16649 comm="syz.4.4781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 248.248832][T16655] netlink: 'syz.5.4784': attribute type 1 has an invalid length. [ 248.261331][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.261394][T16655] bond1: entered promiscuous mode [ 248.267097][T16655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.303229][T16655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.305540][T16655] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 248.308732][T16655] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 248.313246][T16655] bond1: (slave gre1): making interface the new active one [ 248.315569][T16655] gre1: entered promiscuous mode [ 248.318000][T16655] bond1: (slave gre1): Enslaving as an active interface with an up link [ 248.456316][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4791'. [ 248.459344][T16670] syz_tun: left allmulticast mode [ 248.461202][T16670] syz_tun: left promiscuous mode [ 248.463305][T16670] bridge0: port 1(syz_tun) entered disabled state [ 248.795048][T16694] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.4801'. [ 248.839182][T16700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4804'. [ 248.978042][T16715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.982078][T16715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.984994][T16715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.990241][T16715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.035817][T16757] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4829'. [ 250.184618][ T24] net_ratelimit: 10 callbacks suppressed [ 250.184636][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.351152][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.683079][T16795] overlayfs: upper fs does not support file handles, falling back to index=off. [ 250.687216][T16795] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 250.912762][T16815] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4853'. [ 251.382006][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.461231][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.492886][T16883] syzkaller1: entered promiscuous mode [ 251.494814][T16883] syzkaller1: entered allmulticast mode [ 251.930385][ T7595] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 252.091294][ T7595] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.100193][ T7595] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.105035][ T7595] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.108389][ T7595] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.318035][ T7595] usb 10-1: GET_CAPABILITIES returned 0 [ 252.320568][ T7595] usbtmc 10-1:16.0: can't read capabilities [ 252.430420][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.519728][ T7595] usb 10-1: USB disconnect, device number 7 [ 252.598664][T16956] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4904'. [ 253.221192][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.460453][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.493183][T17014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4925'. [ 253.496192][T17014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4925'. [ 253.675854][T17032] team_slave_1: Caught tx_queue_len zero misconfig [ 253.830815][ T29] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 253.980270][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 253.983686][ T29] usb 7-1: config 0 interface 0 has no altsetting 0 [ 253.986248][ T29] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 253.989667][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.995428][ T29] usb 7-1: config 0 descriptor?? [ 254.106780][ T6025] IPVS: starting estimator thread 0... [ 254.111139][T17069] tipc: Started in network mode [ 254.112899][T17069] tipc: Node identity ac1414aa, cluster identity 4711 [ 254.115545][T17069] tipc: Enabled bearer , priority 10 [ 254.200211][T17070] IPVS: using max 44 ests per chain, 105600 per kthread [ 254.411988][ T29] hid_parser_main: 23 callbacks suppressed [ 254.412002][ T29] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 254.416307][ T29] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 254.419560][ T29] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 254.422300][ T29] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 254.424590][ T29] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 254.427228][ T29] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 254.510757][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.617011][ T29] usb 7-1: USB disconnect, device number 23 [ 254.694374][T17103] veth1_vlan: Caught tx_queue_len zero misconfig [ 255.230508][ T6025] tipc: Node number set to 2886997162 [ 255.551588][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.570669][T17181] input input39: cannot allocate more than FF_MAX_EFFECTS effects [ 255.794080][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5007'. [ 255.843716][T17207] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5009'. [ 256.260472][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.346993][T17257] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5032'. [ 256.580366][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.673353][T17278] 9p: Unknown uid 00000000004294967295 [ 256.963167][T17305] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5054'. [ 257.187320][T17320] dummy0: Caught tx_queue_len zero misconfig [ 257.244850][T17322] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 257.248460][T17322] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 257.340601][ T6025] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 257.490313][ T6025] usb 9-1: Using ep0 maxpacket: 16 [ 257.494431][ T6025] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.498867][ T6025] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.504352][ T6025] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 257.509842][ T6025] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 257.514069][ T6025] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.519533][ T6025] usb 9-1: config 0 descriptor?? [ 257.622163][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.939215][ T6025] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 257.941934][ T6025] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 257.944317][ T6025] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 257.946716][ T6025] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 257.948994][ T6025] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 257.955784][ T6025] input: HID 0955:7214 Haptics as /devices/virtual/input/input40 [ 257.964773][ T6025] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 257.967931][ T6025] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 257.981492][T17345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5072'. [ 258.139256][ T827] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 258.143164][ T24] usb 9-1: USB disconnect, device number 17 [ 258.147909][ T827] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 258.151963][ T827] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 258.155652][ T827] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 258.660945][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.238110][T17396] io-wq is not configured for unbound workers [ 259.303118][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.700523][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.987243][T17451] ip6_vti0 speed is unknown, defaulting to 1000 [ 260.008069][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5120'. [ 260.012781][T17455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5120'. [ 260.189885][T17473] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5128'. [ 260.331042][T17479] ip6tnl1: entered promiscuous mode [ 260.332829][T17479] ip6tnl1: entered allmulticast mode [ 260.382151][ T24] kernel read not supported for file /sequencer (pid: 24 comm: kworker/2:0) [ 260.433962][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.529187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 260.674912][T17506] ip6_vti0 speed is unknown, defaulting to 1000 [ 260.750789][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.793310][T17517] netlink: 'syz.3.5148': attribute type 83 has an invalid length. [ 261.032107][T17538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.042280][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.045271][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.047918][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.050707][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.053623][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.064444][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.067439][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.070245][T17538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.082330][T17541] netlink: 'syz.3.5157': attribute type 19 has an invalid length. [ 261.526689][T17583] mac80211_hwsim hwsim12 syzkaller0: Caught tx_queue_len zero misconfig [ 262.221567][T17628] Bluetooth: MGMT ver 1.23 [ 262.530951][ T7595] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 262.694165][ T7595] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.698087][ T7595] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.702345][ T7595] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 262.705543][ T7595] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.711695][ T7595] usb 10-1: config 0 descriptor?? [ 263.003235][ C2] vcan0: j1939_tp_rxtimer: 0xffff888012624000: rx timeout, send abort [ 263.008829][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888012624000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 263.119695][ T7595] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 263.122923][ T7595] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 263.127234][ T7595] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:0D8C:0022.0012/input/input41 [ 263.133799][ T7595] cm6533_jd 0003:0D8C:0022.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 263.192772][T17675] ip6_vti0 speed is unknown, defaulting to 1000 [ 263.291574][T17673] infiniband syz0: set active [ 263.296112][T17673] infiniband syz0: added bond_slave_0 [ 263.319912][ T6032] usb 10-1: USB disconnect, device number 8 [ 263.326319][T17673] RDS/IB: syz0: added [ 263.327989][T17673] smc: adding ib device syz0 with port count 1 [ 263.330645][T17673] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 263.470767][ T5956] Bluetooth: hci4: command 0x0c1a tx timeout [ 263.802284][T17702] overlayfs: failed to clone upperpath [ 264.240837][T17704] ip6_vti0 speed is unknown, defaulting to 1000 [ 264.366288][T17736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5243'. [ 264.463250][T17742] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5246'. [ 264.466300][T17742] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5246'. [ 264.469376][T17742] unsupported nlmsg_type 40 [ 264.584991][T17750] netlink: 'syz.4.5248': attribute type 1 has an invalid length. [ 264.587902][T17750] netlink: 'syz.4.5248': attribute type 6 has an invalid length. [ 264.590836][T17750] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5248'. [ 264.626190][T17754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5250'. [ 264.629222][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5250'. [ 264.633095][T17754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5250'. [ 264.897585][T17770] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5257'. [ 265.541320][ T5956] Bluetooth: hci4: command 0x0c1a tx timeout [ 265.940792][ T29] net_ratelimit: 800 callbacks suppressed [ 265.940807][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.115681][T17802] 9pnet_virtio: no channels available for device syz [ 266.343245][T17818] overlayfs: failed to clone lowerpath [ 266.991381][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.031561][T17845] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.5288'. [ 267.163045][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5295'. [ 267.464814][T17876] overlayfs: failed to clone lowerpath [ 267.589912][T17884] overlayfs: failed to clone lowerpath [ 268.020959][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.110819][ T30] block nbd0: Possible stuck request ffff888026948000: control (read@0,1024B). Runtime 210 seconds [ 268.114541][ T30] block nbd0: Possible stuck request ffff888026948200: control (read@1024,1024B). Runtime 210 seconds [ 268.118223][ T30] block nbd0: Possible stuck request ffff888026948400: control (read@2048,1024B). Runtime 210 seconds [ 268.122141][ T30] block nbd0: Possible stuck request ffff888026948600: control (read@3072,1024B). Runtime 210 seconds [ 268.435177][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.721567][ T29] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 268.880727][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 268.884577][ T29] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 268.887383][ T29] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 268.900662][ T29] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.904560][ T29] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.908791][ T29] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.912962][ T29] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.916804][ T29] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 268.921990][ T29] usb 9-1: config 168 interface 0 has no altsetting 0 [ 268.927814][ T29] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 268.930471][ T29] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 268.936117][ T29] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.940026][ T29] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.944100][ T29] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.947917][ T29] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.952268][ T29] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 268.956772][ T29] usb 9-1: config 168 interface 0 has no altsetting 0 [ 268.960721][ T29] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 268.963798][ T29] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 268.968358][ T29] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 268.973760][ T29] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 268.978484][ T29] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 268.984273][ T29] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 268.988702][ T29] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 268.993161][ T29] usb 9-1: config 168 interface 0 has no altsetting 0 [ 268.997933][ T29] usb 9-1: string descriptor 0 read error: -22 [ 269.000318][ T29] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 269.003568][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.010507][ T29] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 269.036322][T17932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.060786][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.216771][ T6032] usb 9-1: USB disconnect, device number 18 [ 269.278543][T17943] netlink: 'syz.3.5334': attribute type 5 has an invalid length. [ 269.550779][ T6120] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 269.700719][ T6120] usb 10-1: Using ep0 maxpacket: 8 [ 269.704020][ T6120] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 269.706760][ T6120] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.709913][ T6120] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.713354][ T6120] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.716514][ T6120] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.724478][ T6120] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.727434][ T6120] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.945365][ T6120] usb 10-1: usb_control_msg returned -32 [ 269.947280][ T6120] usbtmc 10-1:16.0: can't read capabilities [ 270.113131][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.204599][T18002] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 270.491656][T18024] overlayfs: failed to clone lowerpath [ 270.662409][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.795152][T18042] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 271.141112][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.435258][T18061] overlayfs: failed to clone upperpath [ 271.463052][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.674332][T18081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.951245][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.180964][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.314078][ T7595] usb 10-1: USB disconnect, device number 9 [ 272.646063][T18117] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.920790][ T34] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 273.019190][T18135] vlan2: entered allmulticast mode [ 273.021252][T18135] macvtap0: entered allmulticast mode [ 273.023238][T18135] veth0_macvtap: entered allmulticast mode [ 273.070786][ T34] usb 10-1: Using ep0 maxpacket: 16 [ 273.073735][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.077319][ T34] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.080403][ T34] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 273.084597][ T34] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 273.087544][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.092579][ T34] usb 10-1: config 0 descriptor?? [ 273.221082][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.507244][ T34] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 273.509530][ T34] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 273.512106][ T34] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 273.514256][ T34] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 273.516418][ T34] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 273.520282][ T34] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 273.535744][ T34] shield 0003:0955:7214.0013: Registered Thunderstrike controller [ 273.538461][ T34] shield 0003:0955:7214.0013: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 273.707586][T18119] netlink: 'syz.5.5412': attribute type 2 has an invalid length. [ 273.710632][T18119] __nla_validate_parse: 1 callbacks suppressed [ 273.710642][T18119] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5412'. [ 273.717598][ T6013] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 273.718416][ T24] usb 10-1: USB disconnect, device number 10 [ 273.721293][ T6013] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 273.721390][ T6013] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 273.733597][ T6013] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 273.791152][ T7595] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 273.950921][ T6032] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 273.950946][ T7595] usb 7-1: Using ep0 maxpacket: 8 [ 273.957415][ T7595] usb 7-1: config 0 interface 0 has no altsetting 0 [ 273.959745][ T7595] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 273.963458][ T7595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.967653][ T7595] usb 7-1: config 0 descriptor?? [ 274.108805][ T6032] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 274.111243][ T6032] usb 9-1: can't read configurations, error -71 [ 274.261044][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.378451][ T7595] mcp2221 0003:04D8:00DD.0014: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 274.503015][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.579347][ T7595] usb 7-1: USB disconnect, device number 24 [ 274.705035][T18183] wireguard: wg0: Could not create IPv4 socket [ 275.020022][T18208] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.057590][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5452'. [ 275.062265][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5452'. [ 275.096485][T18208] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.156460][T18208] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.219117][T18208] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.300996][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.340933][ T1142] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.360516][ T1142] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.398283][ T1142] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.403536][ T1142] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.522317][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.525652][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.617595][T18250] syz_tun: entered allmulticast mode [ 275.628683][T18250] dvmrp8: entered allmulticast mode [ 275.637250][T18249] syz_tun: left allmulticast mode [ 275.790982][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.341219][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.859100][T18289] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5486'. [ 276.892863][T18291] Invalid source name [ 276.894276][T18291] UBIFS error (pid: 18291): cannot open "./file0", error -22 [ 277.190930][ T6032] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 277.340943][ T6032] usb 10-1: Using ep0 maxpacket: 8 [ 277.344210][ T6032] usb 10-1: config 0 interface 0 has no altsetting 0 [ 277.346552][ T6032] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 277.350333][ T6032] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.354719][ T6032] usb 10-1: config 0 descriptor?? [ 277.392873][ T7595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.541489][ T827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.777421][ T6032] mcp2221 0003:04D8:00DD.0015: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 277.977684][ T6032] usb 10-1: USB disconnect, device number 11 [ 278.421438][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.600975][ T29] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 278.730855][T18343] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 278.753327][T18343] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.5509'. [ 278.765768][ T29] usb 9-1: Using ep0 maxpacket: 8 [ 278.769505][ T29] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 278.781684][ T29] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.785729][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 278.789482][ T29] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.792850][ T29] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.796905][ T29] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 278.799841][ T29] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.804623][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 278.804633][ T40] audit: type=1326 audit(1765475757.994:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.2.5513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 278.816746][ T40] audit: type=1326 audit(1765475758.004:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.2.5513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 278.829661][ T40] audit: type=1326 audit(1765475758.014:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.2.5513" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 278.840312][ T40] audit: type=1326 audit(1765475758.014:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.2.5513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 278.849517][ T40] audit: type=1326 audit(1765475758.014:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.2.5513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 278.858049][ T40] audit: type=1326 audit(1765475758.014:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.2.5513" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 278.867226][ T40] audit: type=1326 audit(1765475758.014:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.2.5513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 278.876428][ T40] audit: type=1326 audit(1765475758.014:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.2.5513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 278.886296][ T40] audit: type=1326 audit(1765475758.024:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.2.5513" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 278.896387][ T40] audit: type=1326 audit(1765475758.074:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.2.5513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 278.983705][ T6013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.026900][ T29] usb 9-1: usb_control_msg returned -32 [ 279.029178][ T29] usbtmc 9-1:16.0: can't read capabilities [ 279.461106][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.622264][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.676759][T18401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.680707][T18401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.684821][T18401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.981094][ T6032] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 280.132406][ T6032] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 280.135227][ T6032] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.138284][ T6032] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 280.141590][ T6032] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.146552][ T6032] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 280.149664][ T6032] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 280.152850][ T6032] usb 7-1: Product: syz [ 280.154666][ T6032] usb 7-1: Manufacturer: syz [ 280.158883][ T6032] cdc_wdm 7-1:1.0: skipping garbage [ 280.160854][ T6032] cdc_wdm 7-1:1.0: skipping garbage [ 280.165309][ T6032] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 280.167584][ T6032] cdc_wdm 7-1:1.0: Unknown control protocol [ 280.299396][T18430] netlink: 'syz.5.5550': attribute type 12 has an invalid length. [ 280.302783][T18430] netlink: 'syz.5.5550': attribute type 29 has an invalid length. [ 280.306788][T18430] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5550'. [ 280.313072][T18430] netlink: 59 bytes leftover after parsing attributes in process `syz.5.5550'. [ 280.369985][ T6032] usb 7-1: USB disconnect, device number 25 [ 281.383375][ T29] usb 9-1: USB disconnect, device number 21 [ 281.542799][T18517] overlayfs: failed to clone upperpath [ 281.545151][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5588'. [ 281.552221][T18517] overlayfs: failed to clone lowerpath [ 281.552699][ T29] net_ratelimit: 26 callbacks suppressed [ 281.552709][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.634153][T18530] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5594'. [ 281.690842][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5599'. [ 281.831151][ T29] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 281.981432][ T29] usb 10-1: Using ep0 maxpacket: 32 [ 281.984485][ T29] usb 10-1: config 0 has no interfaces? [ 281.986419][ T29] usb 10-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 281.989874][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.993743][ T29] usb 10-1: config 0 descriptor?? [ 282.203345][ T29] usb 10-1: USB disconnect, device number 12 [ 282.574064][T18566] dummy0: Caught tx_queue_len zero misconfig [ 282.586586][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.634287][T18570] sit0: entered promiscuous mode [ 282.646078][T18570] netlink: 'syz.2.5612': attribute type 1 has an invalid length. [ 282.651181][T18570] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5612'. [ 283.617545][T18609] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 285.951873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.956806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.960699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.141208][ T6013] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 286.292745][ T6013] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.297494][ T6013] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 286.301693][ T6013] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.304592][ T6013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.309212][T18735] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.313422][ T6013] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.518839][ T6013] usb 7-1: USB disconnect, device number 26 [ 287.141699][T18773] netlink: zone id is out of range [ 287.143904][T18773] netlink: zone id is out of range [ 287.146375][T18773] netlink: set zone limit has 8 unknown bytes [ 287.369129][T18798] netlink: zone id is out of range [ 287.371454][T18798] netlink: zone id is out of range [ 287.373856][T18798] netlink: set zone limit has 8 unknown bytes [ 287.420052][T18802] batadv_slave_1: entered promiscuous mode [ 287.424488][T18801] batadv_slave_1: left promiscuous mode [ 287.771258][ T6032] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 287.952988][ T6032] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 287.956222][ T6032] usb 10-1: config 0 interface 0 has no altsetting 0 [ 287.960171][ T6032] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 287.963152][ T6032] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 287.965731][ T6032] usb 10-1: Product: syz [ 287.967411][ T6032] usb 10-1: Manufacturer: syz [ 287.969071][ T6032] usb 10-1: SerialNumber: syz [ 287.972021][ T6032] usb 10-1: config 0 descriptor?? [ 287.976414][ T6032] usb 10-1: selecting invalid altsetting 0 [ 288.189072][ T6032] usb 10-1: USB disconnect, device number 13 [ 288.267529][ T9] libceph: connect (1)[c::]:6789 error -22 [ 288.270216][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 288.534521][ T6032] libceph: connect (1)[c::]:6789 error -22 [ 288.536559][ T6032] libceph: mon0 (1)[c::]:6789 connect error [ 288.790315][T18858] netlink: 'syz.5.5746': attribute type 1 has an invalid length. [ 289.042194][ T6032] libceph: connect (1)[c::]:6789 error -22 [ 289.044600][ T6032] libceph: mon0 (1)[c::]:6789 connect error [ 289.093485][T18820] ceph: No mds server is up or the cluster is laggy [ 289.408148][T18925] overlayfs: failed to clone upperpath [ 289.687756][T18950] dummy0: Caught tx_queue_len zero misconfig [ 290.642854][T19023] kvm: apic: phys broadcast and lowest prio [ 290.645932][T19023] kvm: apic: phys broadcast and lowest prio [ 290.792946][T19032] geneve2: entered promiscuous mode [ 290.794824][T19032] geneve2: entered allmulticast mode [ 291.061833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.064944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.301968][ T29] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 291.324114][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 291.324125][ T40] audit: type=1326 audit(1765475770.514:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19075 comm="syz.3.5845" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x0 [ 291.482852][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.486438][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.489566][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.494080][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.499211][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.503829][ T29] usb 7-1: config 0 descriptor?? [ 291.861659][ T5954] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 291.916575][ T29] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xe [ 291.921784][ T29] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 291.926686][ T29] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 292.172696][ T827] usb 7-1: USB disconnect, device number 27 [ 292.406312][T19132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5870'. [ 292.430128][T19132] bond2: Invalid ad_actor_system MAC address. [ 292.433876][T19132] bond2: option ad_actor_system: invalid value (68719607821) [ 292.440981][T19132] bond2 (unregistering): Released all slaves [ 292.517393][T19141] Invalid ELF header len 5 [ 292.599501][T19149] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 292.603582][T19149] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 292.607870][T19149] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 292.654932][T19155] lo: Caught tx_queue_len zero misconfig [ 292.961535][T19187] vivid-004: disconnect [ 292.967185][T19186] vivid-004: reconnect [ 293.005818][T19189] syzkaller1: entered promiscuous mode [ 293.007645][T19189] syzkaller1: entered allmulticast mode [ 293.081591][ T6032] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 293.251519][ T6032] usb 7-1: Using ep0 maxpacket: 8 [ 293.256020][ T6032] usb 7-1: config 0 interface 0 has no altsetting 0 [ 293.258563][ T6032] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 293.264112][ T6032] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.269167][ T6032] usb 7-1: config 0 descriptor?? [ 293.533415][T19208] netlink: 'syz.5.5905': attribute type 10 has an invalid length. [ 293.536275][T19208] syz_tun: entered promiscuous mode [ 293.542913][T19208] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 293.682230][ T6032] mcp2221 0003:04D8:00DD.0017: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 293.747240][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5910'. [ 293.880615][ T6032] usb 7-1: USB disconnect, device number 28 [ 294.173536][T19235] binder: 19234:19235 ioctl c0306201 800003c0 returned -22 [ 294.262114][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.265911][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.269775][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.381994][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5924'. [ 294.767095][ T34] kernel read not supported for file /input/event2 (pid: 34 comm: kworker/3:0) [ 295.761572][ T6032] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 295.921666][ T6032] usb 10-1: Using ep0 maxpacket: 8 [ 295.924974][ T6032] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.933797][ T6032] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 295.937158][ T6032] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 295.956648][ T6032] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 295.971179][ T6032] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 295.975626][ T6032] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.998623][ T6032] hub 10-1:1.0: bad descriptor, ignoring hub [ 296.002184][ T6032] hub 10-1:1.0: probe with driver hub failed with error -5 [ 296.007099][ T6032] cdc_wdm 10-1:1.0: skipping garbage [ 296.009510][ T6032] cdc_wdm 10-1:1.0: skipping garbage [ 296.020586][ T6032] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 296.022816][ T6032] cdc_wdm 10-1:1.0: Unknown control protocol [ 296.300879][T19380] veth0: entered promiscuous mode [ 296.304593][T19379] veth0: left promiscuous mode [ 296.362295][T12530] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 296.511818][ T6032] usb 10-1: USB disconnect, device number 14 [ 296.523096][T12530] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 296.525870][T12530] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.529531][T12530] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.532651][T12530] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 296.533328][T19386] Invalid ELF header magic: != ELF [ 296.537600][T12530] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.537625][T12530] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.547515][T12530] usb 7-1: config 0 descriptor?? [ 296.770116][T19393] tunl0: Caught tx_queue_len zero misconfig [ 296.839230][T19397] ip6_vti0 speed is unknown, defaulting to 1000 [ 296.883456][ T827] IPVS: starting estimator thread 0... [ 296.960565][T12530] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 296.964844][T12530] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 296.968404][T12530] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 296.973470][T12530] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 296.977099][T12530] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 296.980461][T12530] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 296.981596][T19399] IPVS: using max 44 ests per chain, 105600 per kthread [ 296.983880][T12530] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 296.990174][T12530] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 296.993703][T12530] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 296.997236][T12530] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 297.007416][T12530] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 297.223610][T12530] usb 7-1: USB disconnect, device number 29 [ 297.281694][ T6120] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 297.442195][ T6120] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 297.446429][ T6120] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.450230][ T6120] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.455214][ T6120] usb 10-1: config 0 interface 0 has no altsetting 0 [ 297.459067][ T6120] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.462848][ T6120] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.467402][ T6120] usb 10-1: config 0 interface 0 has no altsetting 0 [ 297.471299][ T6120] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.475423][ T6120] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.480135][ T6120] usb 10-1: config 0 interface 0 has no altsetting 0 [ 297.483918][ T6120] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.487231][ T6120] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.491304][ T6120] usb 10-1: config 0 interface 0 has no altsetting 0 [ 297.494583][ T6120] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.497556][ T6120] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.500979][ T6120] usb 10-1: config 0 interface 0 has no altsetting 0 [ 297.503981][ T6120] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.506828][ T6120] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.510264][ T6120] usb 10-1: config 0 interface 0 has no altsetting 0 [ 297.513183][ T6120] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.515994][ T6120] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.519434][ T6120] usb 10-1: config 0 interface 0 has no altsetting 0 [ 297.522361][ T6120] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 297.525214][ T6120] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 297.528990][ T6120] usb 10-1: config 0 interface 0 has no altsetting 0 [ 297.532975][ T6120] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 297.535933][ T6120] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 297.538632][ T6120] usb 10-1: Product: syz [ 297.540036][ T6120] usb 10-1: Manufacturer: syz [ 297.542152][ T6120] usb 10-1: SerialNumber: syz [ 297.544864][ T6120] usb 10-1: config 0 descriptor?? [ 297.549167][ T6120] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 297.758997][ T6120] usb 10-1: USB disconnect, device number 15 [ 297.763940][ T6120] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 298.178026][T19428] 9p: Bad value for 'wfdno' [ 298.204398][ T30] block nbd0: Possible stuck request ffff888026948000: control (read@0,1024B). Runtime 240 seconds [ 298.208237][ T30] block nbd0: Possible stuck request ffff888026948200: control (read@1024,1024B). Runtime 240 seconds [ 298.213844][ T30] block nbd0: Possible stuck request ffff888026948400: control (read@2048,1024B). Runtime 240 seconds [ 298.218330][ T30] block nbd0: Possible stuck request ffff888026948600: control (read@3072,1024B). Runtime 240 seconds [ 298.390002][T19448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6009'. [ 298.423611][T19451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6010'. [ 298.822788][ T1179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.891655][ T6032] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 298.899987][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6030'. [ 299.053084][ T6032] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 299.056965][ T6032] usb 7-1: config 0 interface 0 has no altsetting 0 [ 299.061030][ T6032] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 299.064367][ T6032] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 299.066957][ T6032] usb 7-1: Product: syz [ 299.068339][ T6032] usb 7-1: Manufacturer: syz [ 299.069861][ T6032] usb 7-1: SerialNumber: syz [ 299.073981][ T6032] usb 7-1: config 0 descriptor?? [ 299.078102][ T6032] usb 7-1: selecting invalid altsetting 0 [ 299.283542][ T827] usb 7-1: USB disconnect, device number 30 [ 299.382246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.462719][ T3823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.561630][ T6120] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 299.732822][ T6120] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 299.743171][ T6120] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.746087][ T6120] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 299.748638][ T6120] usb 10-1: SerialNumber: syz [ 299.832468][T19530] ªªªªªª: renamed from wg2 (while UP) [ 300.314810][T19561] futex_wake_op: syz.4.6057 tries to shift op by -1; fix this program [ 300.377079][ T6120] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 300.725764][ C1] [ 300.725777][ C1] ======================================================== [ 300.725783][ C1] WARNING: possible irq lock inversion dependency detected [ 300.725792][ C1] syzkaller #0 Tainted: G L [ 300.725801][ C1] -------------------------------------------------------- [ 300.725807][ C1] ksoftirqd/1/28 just changed the state of lock: [ 300.725817][ C1] ffff888041bf3230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 300.725879][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 300.725888][ C1] (tasklist_lock){.+.+}-{3:3} [ 300.725904][ C1] [ 300.725904][ C1] [ 300.725904][ C1] and interrupts could create inverse lock ordering between them. [ 300.725904][ C1] [ 300.725912][ C1] [ 300.725912][ C1] other info that might help us debug this: [ 300.725918][ C1] Chain exists of: [ 300.725918][ C1] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 300.725918][ C1] [ 300.725953][ C1] Possible interrupt unsafe locking scenario: [ 300.725953][ C1] [ 300.725959][ C1] CPU0 CPU1 [ 300.725964][ C1] ---- ---- [ 300.725970][ C1] lock(tasklist_lock); [ 300.725982][ C1] local_irq_disable(); [ 300.725988][ C1] lock(&dev->event_lock#2); [ 300.726007][ C1] lock(&client->buffer_lock); [ 300.726020][ C1] [ 300.726024][ C1] lock(&dev->event_lock#2); [ 300.726041][ C1] [ 300.726041][ C1] *** DEADLOCK *** [ 300.726041][ C1] [ 300.726045][ C1] 1 lock held by ksoftirqd/1/28: [ 300.726055][ C1] #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x61/0x270 [ 300.726114][ C1] [ 300.726114][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 300.726129][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 300.726153][ C1] HARDIRQ-ON-R at: [ 300.726164][ C1] lock_acquire+0x179/0x330 [ 300.726180][ C1] _raw_read_lock+0x5f/0x70 [ 300.726198][ C1] __do_wait+0x105/0x890 [ 300.726215][ C1] do_wait+0x21d/0x570 [ 300.726231][ C1] kernel_wait+0x9f/0x160 [ 300.726248][ C1] call_usermodehelper_exec_work+0xf1/0x170 [ 300.726271][ C1] process_one_work+0x9ba/0x1b20 [ 300.726288][ C1] worker_thread+0x6c8/0xf10 [ 300.726306][ C1] kthread+0x3c5/0x780 [ 300.726321][ C1] ret_from_fork+0x983/0xb10 [ 300.726337][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.726362][ C1] SOFTIRQ-ON-R at: [ 300.726372][ C1] lock_acquire+0x179/0x330 [ 300.726381][ C1] _raw_read_lock+0x5f/0x70 [ 300.726397][ C1] __do_wait+0x105/0x890 [ 300.726407][ C1] do_wait+0x21d/0x570 [ 300.726417][ C1] kernel_wait+0x9f/0x160 [ 300.726427][ C1] call_usermodehelper_exec_work+0xf1/0x170 [ 300.726440][ C1] process_one_work+0x9ba/0x1b20 [ 300.726450][ C1] worker_thread+0x6c8/0xf10 [ 300.726461][ C1] kthread+0x3c5/0x780 [ 300.726470][ C1] ret_from_fork+0x983/0xb10 [ 300.726479][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.726494][ C1] INITIAL USE at: [ 300.726500][ C1] lock_acquire+0x179/0x330 [ 300.726508][ C1] _raw_write_lock_irq+0x36/0x50 [ 300.726519][ C1] copy_process+0x4668/0x7430 [ 300.726535][ C1] kernel_clone+0xfc/0x910 [ 300.726549][ C1] user_mode_thread+0xc8/0x110 [ 300.726563][ C1] rest_init+0x23/0x2b0 [ 300.726578][ C1] start_kernel+0x3ef/0x4d0 [ 300.726591][ C1] x86_64_start_reservations+0x18/0x30 [ 300.726603][ C1] x86_64_start_kernel+0x130/0x190 [ 300.726615][ C1] common_startup_64+0x13e/0x148 [ 300.726627][ C1] INITIAL READ USE at: [ 300.726633][ C1] lock_acquire+0x179/0x330 [ 300.726642][ C1] _raw_read_lock+0x5f/0x70 [ 300.726652][ C1] __do_wait+0x105/0x890 [ 300.726661][ C1] do_wait+0x21d/0x570 [ 300.726671][ C1] kernel_wait+0x9f/0x160 [ 300.726681][ C1] call_usermodehelper_exec_work+0xf1/0x170 [ 300.726693][ C1] process_one_work+0x9ba/0x1b20 [ 300.726703][ C1] worker_thread+0x6c8/0xf10 [ 300.726714][ C1] kthread+0x3c5/0x780 [ 300.726722][ C1] ret_from_fork+0x983/0xb10 [ 300.726732][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.726746][ C1] } [ 300.726749][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 300.726771][ C1] ... acquired at: [ 300.726777][ C1] _raw_read_lock+0x5f/0x70 [ 300.726793][ C1] send_sigurg+0xed/0xc80 [ 300.726811][ C1] sk_send_sigurg+0x76/0x360 [ 300.726828][ C1] unix_stream_sendmsg+0xfa3/0x1320 [ 300.726854][ C1] ____sys_sendmsg+0xa5d/0xc30 [ 300.726866][ C1] ___sys_sendmsg+0x134/0x1d0 [ 300.726876][ C1] __sys_sendmmsg+0x2f9/0x420 [ 300.726886][ C1] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 300.726897][ C1] __do_fast_syscall_32+0xe8/0x680 [ 300.726910][ C1] do_fast_syscall_32+0x32/0x80 [ 300.726922][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.726935][ C1] [ 300.726937][ C1] -> (&f_owner->lock){....}-{3:3} { [ 300.726952][ C1] INITIAL USE at: [ 300.726957][ C1] lock_acquire+0x179/0x330 [ 300.726966][ C1] _raw_write_lock_irq+0x36/0x50 [ 300.726977][ C1] __f_setown+0x61/0x3c0 [ 300.726986][ C1] generic_setlease+0xf0f/0x1330 [ 300.727001][ C1] kernel_setlease+0x106/0x140 [ 300.727014][ C1] vfs_setlease+0x1e8/0x280 [ 300.727027][ C1] do_fcntl_add_lease+0x3c4/0x550 [ 300.727041][ C1] fcntl_setlease+0xfc/0x180 [ 300.727056][ C1] do_fcntl+0x153b/0x1660 [ 300.727070][ C1] do_compat_fcntl64+0x367/0x710 [ 300.727082][ C1] __do_fast_syscall_32+0xe8/0x680 [ 300.727095][ C1] do_fast_syscall_32+0x32/0x80 [ 300.727111][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.727127][ C1] INITIAL READ USE at: [ 300.727133][ C1] lock_acquire+0x179/0x330 [ 300.727142][ C1] _raw_read_lock_irqsave+0x74/0x90 [ 300.727153][ C1] send_sigio+0x31/0x3e0 [ 300.727163][ C1] kill_fasync+0x214/0x510 [ 300.727173][ C1] lease_break_callback+0x23/0x30 [ 300.727185][ C1] __break_lease+0x6cd/0x1800 [ 300.727198][ C1] do_dentry_open+0x6e7/0x1590 [ 300.727213][ C1] vfs_open+0x82/0x3f0 [ 300.727223][ C1] path_openat+0x2078/0x3140 [ 300.727238][ C1] do_filp_open+0x20b/0x470 [ 300.727252][ C1] do_sys_openat2+0x11f/0x280 [ 300.727263][ C1] __ia32_compat_sys_openat+0x16d/0x210 [ 300.727275][ C1] __do_fast_syscall_32+0xe8/0x680 [ 300.727288][ C1] do_fast_syscall_32+0x32/0x80 [ 300.727301][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.727314][ C1] } [ 300.727316][ C1] ... key at: [] __key.1+0x0/0x40 [ 300.727328][ C1] ... acquired at: [ 300.727331][ C1] _raw_read_lock_irqsave+0x74/0x90 [ 300.727342][ C1] send_sigio+0x31/0x3e0 [ 300.727351][ C1] kill_fasync+0x214/0x510 [ 300.727361][ C1] lease_break_callback+0x23/0x30 [ 300.727372][ C1] __break_lease+0x6cd/0x1800 [ 300.727384][ C1] do_dentry_open+0x6e7/0x1590 [ 300.727402][ C1] vfs_open+0x82/0x3f0 [ 300.727412][ C1] path_openat+0x2078/0x3140 [ 300.727425][ C1] do_filp_open+0x20b/0x470 [ 300.727439][ C1] do_sys_openat2+0x11f/0x280 [ 300.727449][ C1] __ia32_compat_sys_openat+0x16d/0x210 [ 300.727460][ C1] __do_fast_syscall_32+0xe8/0x680 [ 300.727473][ C1] do_fast_syscall_32+0x32/0x80 [ 300.727485][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.727497][ C1] [ 300.727499][ C1] -> (&new->fa_lock){....}-{3:3} { [ 300.727513][ C1] INITIAL USE at: [ 300.727518][ C1] lock_acquire+0x179/0x330 [ 300.727527][ C1] _raw_write_lock_irq+0x36/0x50 [ 300.727538][ C1] fasync_remove_entry+0xb2/0x1e0 [ 300.727548][ C1] fasync_helper+0xaf/0xd0 [ 300.727558][ C1] lease_modify+0x232/0x500 [ 300.727571][ C1] locks_remove_file+0x29e/0x5c0 [ 300.727585][ C1] __fput+0x351/0xb70 [ 300.727594][ C1] task_work_run+0x150/0x240 [ 300.727605][ C1] exit_to_user_mode_loop+0xfb/0x540 [ 300.727617][ C1] __do_fast_syscall_32+0x4a4/0x680 [ 300.727630][ C1] do_fast_syscall_32+0x32/0x80 [ 300.727645][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.727657][ C1] INITIAL READ USE at: [ 300.727663][ C1] lock_acquire+0x179/0x330 [ 300.727672][ C1] _raw_read_lock_irqsave+0x74/0x90 [ 300.727683][ C1] kill_fasync+0x138/0x510 [ 300.727693][ C1] lease_break_callback+0x23/0x30 [ 300.727704][ C1] __break_lease+0x6cd/0x1800 [ 300.727717][ C1] do_dentry_open+0x6e7/0x1590 [ 300.727732][ C1] vfs_open+0x82/0x3f0 [ 300.727741][ C1] path_openat+0x2078/0x3140 [ 300.727755][ C1] do_filp_open+0x20b/0x470 [ 300.727770][ C1] do_sys_openat2+0x11f/0x280 [ 300.727780][ C1] __ia32_compat_sys_openat+0x16d/0x210 [ 300.727792][ C1] __do_fast_syscall_32+0xe8/0x680 [ 300.727805][ C1] do_fast_syscall_32+0x32/0x80 [ 300.727818][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.727831][ C1] } [ 300.727833][ C1] ... key at: [] __key.0+0x0/0x40 [ 300.727844][ C1] ... acquired at: [ 300.727847][ C1] _raw_read_lock_irqsave+0x74/0x90 [ 300.727857][ C1] kill_fasync+0x138/0x510 [ 300.727867][ C1] evdev_pass_values+0x619/0x9b0 [ 300.727877][ C1] evdev_events+0x1bb/0x390 [ 300.727887][ C1] input_pass_values+0x74e/0x880 [ 300.727897][ C1] input_handle_event+0xf00/0x14d0 [ 300.727908][ C1] input_inject_event+0x1e8/0x3b0 [ 300.727918][ C1] evdev_write+0x2e1/0x440 [ 300.727927][ C1] vfs_write+0x2a0/0x11d0 [ 300.727940][ C1] ksys_write+0x1f8/0x250 [ 300.727953][ C1] __do_fast_syscall_32+0xe8/0x680 [ 300.727966][ C1] do_fast_syscall_32+0x32/0x80 [ 300.727978][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.727990][ C1] [ 300.727992][ C1] -> (&client->buffer_lock){....}-{3:3} { [ 300.728006][ C1] INITIAL USE at: [ 300.728012][ C1] lock_acquire+0x179/0x330 [ 300.728020][ C1] _raw_spin_lock_irq+0x36/0x50 [ 300.728030][ C1] evdev_read+0x4c8/0xbc0 [ 300.728040][ C1] vfs_readv+0x5c1/0x8b0 [ 300.728052][ C1] do_readv+0x28c/0x340 [ 300.728064][ C1] __do_fast_syscall_32+0xe8/0x680 [ 300.728077][ C1] do_fast_syscall_32+0x32/0x80 [ 300.728090][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.728102][ C1] } [ 300.728105][ C1] ... key at: [] __key.88+0x0/0x40 [ 300.728118][ C1] ... acquired at: [ 300.728121][ C1] _raw_spin_lock+0x2e/0x40 [ 300.728130][ C1] evdev_pass_values+0x10e/0x9b0 [ 300.728139][ C1] evdev_events+0x1bb/0x390 [ 300.728149][ C1] input_pass_values+0x74e/0x880 [ 300.728159][ C1] input_handle_event+0xf00/0x14d0 [ 300.728170][ C1] input_inject_event+0x1e8/0x3b0 [ 300.728180][ C1] evdev_write+0x2e1/0x440 [ 300.728189][ C1] vfs_write+0x2a0/0x11d0 [ 300.728202][ C1] ksys_write+0x1f8/0x250 [ 300.728220][ C1] __do_fast_syscall_32+0xe8/0x680 [ 300.728238][ C1] do_fast_syscall_32+0x32/0x80 [ 300.728256][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 300.728277][ C1] [ 300.728280][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 300.728306][ C1] IN-SOFTIRQ-W at: [ 300.728317][ C1] lock_acquire+0x179/0x330 [ 300.728332][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 300.728345][ C1] input_inject_event+0x9f/0x3b0 [ 300.728355][ C1] led_set_brightness+0x217/0x290 [ 300.728366][ C1] led_trigger_event+0xda/0x270 [ 300.728380][ C1] kbd_bh+0x247/0x330 [ 300.728397][ C1] tasklet_action_common+0x254/0x3f0 [ 300.728412][ C1] handle_softirqs+0x219/0x950 [ 300.728425][ C1] run_ksoftirqd+0x3a/0x60 [ 300.728438][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 300.728454][ C1] kthread+0x3c5/0x780 [ 300.728463][ C1] ret_from_fork+0x983/0xb10 [ 300.728472][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.728487][ C1] INITIAL USE at: [ 300.728495][ C1] lock_acquire+0x179/0x330 [ 300.728504][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 300.728515][ C1] input_inject_event+0x9f/0x3b0 [ 300.728528][ C1] led_set_brightness+0x217/0x290 [ 300.728537][ C1] kbd_led_trigger_activate+0xcb/0x110 [ 300.728552][ C1] led_trigger_set+0x59a/0xc50 [ 300.728566][ C1] led_trigger_set_default+0x1e0/0x2e0 [ 300.728579][ C1] led_classdev_register_ext+0x71d/0xa30 [ 300.728590][ C1] input_leds_connect+0x552/0x8e0 [ 300.728605][ C1] input_attach_handler.isra.0+0x176/0x250 [ 300.728615][ C1] input_register_device+0xab9/0x11b0 [ 300.728625][ C1] atkbd_connect+0x5f8/0xa60 [ 300.728639][ C1] serio_driver_probe+0x7f/0xd0 [ 300.728649][ C1] really_probe+0x241/0xb20 [ 300.728658][ C1] __driver_probe_device+0x1de/0x470 [ 300.728667][ C1] driver_probe_device+0x4c/0x1b0 [ 300.728676][ C1] __driver_attach+0x283/0x5e0 [ 300.728684][ C1] bus_for_each_dev+0x13e/0x1d0 [ 300.728698][ C1] serio_handle_event+0x281/0xb30 [ 300.728708][ C1] process_one_work+0x9ba/0x1b20 [ 300.728719][ C1] worker_thread+0x6c8/0xf10 [ 300.728729][ C1] kthread+0x3c5/0x780 [ 300.728737][ C1] ret_from_fork+0x983/0xb10 [ 300.728747][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.728767][ C1] } [ 300.728771][ C1] ... key at: [] __key.7+0x0/0x40 [ 300.728790][ C1] ... acquired at: [ 300.728795][ C1] __lock_acquire+0xc38/0x2890 [ 300.728811][ C1] lock_acquire+0x179/0x330 [ 300.728827][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 300.728845][ C1] input_inject_event+0x9f/0x3b0 [ 300.728856][ C1] led_set_brightness+0x217/0x290 [ 300.728865][ C1] led_trigger_event+0xda/0x270 [ 300.728877][ C1] kbd_bh+0x247/0x330 [ 300.728888][ C1] tasklet_action_common+0x254/0x3f0 [ 300.728905][ C1] handle_softirqs+0x219/0x950 [ 300.728921][ C1] run_ksoftirqd+0x3a/0x60 [ 300.728933][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 300.728948][ C1] kthread+0x3c5/0x780 [ 300.728956][ C1] ret_from_fork+0x983/0xb10 [ 300.728965][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.728979][ C1] [ 300.728982][ C1] [ 300.728982][ C1] stack backtrace: [ 300.728990][ C1] CPU: 1 UID: 0 PID: 28 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.729005][ C1] Tainted: [L]=SOFTLOCKUP [ 300.729009][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 300.729015][ C1] Call Trace: [ 300.729019][ C1] [ 300.729025][ C1] dump_stack_lvl+0x116/0x1f0 [ 300.729038][ C1] print_irq_inversion_bug.part.0+0x212/0x270 [ 300.729083][ C1] mark_lock+0x399/0x9f0 [ 300.729097][ C1] __lock_acquire+0xc38/0x2890 [ 300.729107][ C1] ? __lock_acquire+0x436/0x2890 [ 300.729116][ C1] ? rcu_read_lock_sched_held+0x3e/0x70 [ 300.729134][ C1] lock_acquire+0x179/0x330 [ 300.729143][ C1] ? input_inject_event+0x9f/0x3b0 [ 300.729154][ C1] ? lock_acquire+0x179/0x330 [ 300.729163][ C1] ? find_held_lock+0x2b/0x80 [ 300.729177][ C1] _raw_spin_lock_irqsave+0x3a/0x60 [ 300.729190][ C1] ? input_inject_event+0x9f/0x3b0 [ 300.729201][ C1] input_inject_event+0x9f/0x3b0 [ 300.729212][ C1] ? find_held_lock+0x2b/0x80 [ 300.729224][ C1] ? __pfx_input_leds_brightness_set+0x10/0x10 [ 300.729240][ C1] led_set_brightness+0x217/0x290 [ 300.729251][ C1] led_trigger_event+0xda/0x270 [ 300.729281][ C1] kbd_bh+0x247/0x330 [ 300.729292][ C1] ? rcu_is_watching+0x12/0xc0 [ 300.729307][ C1] tasklet_action_common+0x254/0x3f0 [ 300.729323][ C1] handle_softirqs+0x219/0x950 [ 300.729337][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 300.729352][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 300.729365][ C1] ? smpboot_thread_fn+0x326/0xae0 [ 300.729380][ C1] run_ksoftirqd+0x3a/0x60 [ 300.729396][ C1] smpboot_thread_fn+0x3f7/0xae0 [ 300.729441][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 300.729458][ C1] kthread+0x3c5/0x780 [ 300.729467][ C1] ? __pfx_kthread+0x10/0x10 [ 300.729477][ C1] ? rcu_is_watching+0x12/0xc0 [ 300.729491][ C1] ? __pfx_kthread+0x10/0x10 [ 300.729501][ C1] ret_from_fork+0x983/0xb10 [ 300.729511][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 300.729521][ C1] ? __switch_to+0x7af/0x10d0 [ 300.729535][ C1] ? __pfx_kthread+0x10/0x10 [ 300.729544][ C1] ret_from_fork_asm+0x1a/0x30 [ 300.729562][ C1] [ 300.737259][T19585] overlayfs: failed to clone upperpath [ 300.785835][T12530] usb 10-1: USB disconnect, device number 16 [ 301.437397][T12530] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 302.022388][ T3823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.502088][ T3823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.582425][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.062057][ T1179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.702555][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.343621][ T1058] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog