last executing test programs: 2.319261033s ago: executing program 2 (id=8988): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc048819}, 0x80000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.040424169s ago: executing program 3 (id=8993): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000021c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 2.039913661s ago: executing program 3 (id=8994): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.012376702s ago: executing program 1 (id=8995): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00020000000000000004c1000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x20) r1 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000180)={0xa, 0x0, 0xffff, @private2={0xfc, 0x2, '\x00', 0x91}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000290000003700000089000000000002"], 0x18}}], 0x1, 0x400c0c4) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x3, 0x7, 0x1}) close(r3) r5 = socket(0x2b, 0x1, 0x1) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000400)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.888925271s ago: executing program 1 (id=8996): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) 1.888431638s ago: executing program 1 (id=8997): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) getrlimit(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x9ea27589817d43c7, 0x74, &(0x7f0000000600)=""/116}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r5, 0x8916, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb4, 0x19, 0x1, 0x10000, 0x14000, {{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2f}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xfffffffffffffeff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x3}}, 0xb4}, 0x1, 0x0, 0x0, 0x4080000}, 0x4004) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.816512071s ago: executing program 3 (id=8999): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.659644639s ago: executing program 1 (id=9002): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc048819}, 0x80000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.567770778s ago: executing program 3 (id=9004): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc048819}, 0x80000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000029000000370000003c00000000000000b11552372e9155371dfc5c0208d299e71c1c4b439bc85fd4d8fdfeadfde8336e269ce79a0d36d81571eb05270cfde5edb27578caa8edd4c02206e2295e61e1547869f5e980f3620f77c3c10fecacd17fec3eae710b4d6b2edeadb0c3f7c0e3cee552c0f6d1b219be3e395ec5f1f7a9332587b4a2a51b"], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.380792379s ago: executing program 3 (id=9006): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) 1.380546723s ago: executing program 3 (id=9007): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x1, [{0xfe, 0x80000000}]}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809040000000101200009"], 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0xc, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x200, 0x45c5, 0xc595, 0x7, 0x2, 0x1, 0x0, 0x80000004000000, 0x5], 0x8000000, 0x1000}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f00006e5000/0x1000)=nil, 0x1000, 0xb, 0x10, 0xffffffffffffffff, 0xd243d000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xdc}, 0x0) 1.324267532s ago: executing program 2 (id=9008): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) creat(&(0x7f0000000140)='./file0\x00', 0x34) dup3(r1, 0xffffffffffffffff, 0x6700000000000000) syz_fuse_handle_req(r1, &(0x7f0000008340)="90b70e8c198e3d550c5dd5e5ea85bc10e491ece4dd2adf6920b6c9924bd498131ef1318132ea60e54a0bc0b2f7dbf9be266bedb7995fb8528e1be1ccc340a28a90485e5ee4c4c6a9f452c6207d8aff0fb923b2428b54e6b196957f4dc1846886cf14dccb92ba7aabde1fdfffe886aa09d51a32febd13d50ee2cdb0ef76cd06753b8bbda79a866528abddf8c12ed442a8c989de4e15bfc4178e661deffbbf86c2c70d5f2597ab70917a42bb836b6418f506839eeb12ef89a9a321b11ebe696061016ff0b8f4cc2e8259aef760f4c4bd320e08b99950e0280b1cb82b91e55ed09d5c3b57c4401806455b58e3a6ade4bc70e03f06b5e700ccf4cfaf6cf54bb764aa9bfcb9b4eec271f3e02236737e79d2e16a1e364cd8d30d0369fb9746f58daa4ee418177654ca460e1ab2581a0bfa03151a1c052df1a4d299c7926795ec8ab2d4f12bde23ef79db7364252fe873791d5b45fd73f9665018123c53a65210f53e5713d8eb23840277b57843aad57ef0e54ce0fec0dbbb854331f44e24b0cd833a01d59ebbcdb55363d96f122d90aa238e0fb4a2b3041b5b37354805639db94ebc50c171e067661916665512874442eb1fd435253e3f98914a63b8c511f5d5fa77693355a2b5a4dcb605b9e012049d5d4590ed59ced7323f26b921fa59f5bcf14aabfa6dd9026e41cf896d898e3b2a0389b53a6b9cb8d19092b25fc6593eda84130d89f8c1227347417e9967cd59dda73c3143aa0265240e080cd7786af18c0061bb4f18d8492bab6435ab185de8ed9bc4e8dcbcd36281ee4a8f42aa5db53a945d46714f529888a743498bde29ff3a3e9632e743628e5f138c642f62f68a4dc872ae12548a8c87a3a5246f123990d8cd0522e800bcc84d636b986b42d6f6aa1703043d1280f2c51c6b8e3cb5001c8bc741606dc255552c6da6f1f451dff0d04dae1f57120197c9e1052c880f26e028b85d757473b36cbc4dcbacfbd45f48c8aa71efe912f1d0fa123d298398c4fa7c80034c83655460c87aeb98d369d088d2a3d3801caa01685e9767d2961abc87c9fe9a1434d8bceec132595eef8b788afbb0c650c29991336341220cf51b4ac4a3f3791a9027e4d312fdf1e5a04a858cc23e093ea03362f731539061baced85fb5493370c409b1292a53b781edd6aa4247bd3921233380137b8834a6e826500a9af7053d8577053998549b12f9f8d375b79fe9322ea0f85051d1066d8666d575041faadccc49a1635f94a70f2007582e1e821be93b007611939471864ac35ce2f1ad2c1d20423f719797b53220a34aeca63e9b338b4be645ce07e00b17243a536aeea8f41dcb0b67e8e2f442802f6136d66610714d5f97376e330244f0a6aadd39aef651eda9eead563e433277a748917db682d8eb3e3309b42b535bab01f97bac61b28823cfaf1cc495cdb0d7fab775d6854f5b8515402208d898af7076cfbb751b85fc7601d929c5aea5dbd207101fbe1a5cac6f33dc88b0c803aac6b24f23e907cef6986f0b9537580db25c14c49451fff52ddd9d0c206bfadc250a7c12d446d072738cbfec51a40d3b946c41642b8ead048e3646997881dad3357ac751b11cf4d02cdc31061d5f59dddde5f157627565dbfaf5a593cc0ec4ca52277def45cae26af8a60e62f8ffde23b430a87997764ef49d6d72dbc818dae141114aa2842b3d718276edda46585b6b106d0daf871cdc9cbb49a757930b8d076454b9c03904db89f8720a28e59bdacb6d86c69c54f53cb234636e9cb3c9c1cc80e778c3d458be16ef9b40945f765a1d48ac8bf1cac85a800a9b246778fecac255bffedbe02e34fbc3cf3981fc6fd3849484d0bf9766e70a6e0f67d2d33c03d8287396018c9fc267e012c393a4039c61d613963b22c6bd88eaa099d8692d9e2aa3cc189c8d93eb142906998bce52c458cbb083070e850c20350d1df35092c61a31afb606081f07c895b61b1aac7572c07380005313ef2532715f3f293770efbb98acbd510daba8d59f03a6cfbd20c546b829d2bf360303048e2c2622dd8033840bda80b2138e7c8c7a1473ac741db4ecdb39e5bf5a241470a0236f3e2b185fc8f2764382b3a7c6b96904eb0ab728b39c276bace8debc20c5c4f8e91bbb790c601630e3a88d02215ad377a3df334b7ef4ed2331656a13f4f1a13b828662675766346ce6de5cb8714f9dd5a68c4f5af30c42842135b1463ea648226671f0307218753b2eadf8465d39f817fd152811803650d0bc287e42219b521f45cc48d056f70dd70d11e7837946abb94fb69dfffa4f029e848e7312e247993e46bc94a6eb73c9427f3e7d290a089637e647b9ff37a1ec38bfd6c5227bb437c892a4ca74781c8626d0233d1bbd1bcbe16bd4608f7da117ad7052a20da1d6b33c10c73ab7fdeb51353ca706077677904e1877c6ebbcc7f04d3fac41c1930bc3c1aeeb2e4ff0ea67a28a96dc4ef4404cd12a8c9d85f53daee4cea5f81982c0ae0f97b7197cf305c4a45af2b2c127186bd35be11b999cc190bea97a1fdcf7bec845526bf80e2cc00537c6b690a88477688e15c8debed367d3421b6dfa38552c98452d3a98dd615760fb445a398dcf3718534b4b0ccbfbdf9e3bd783a235f8919d66b4b0deeade001dc89391813d58113693b3a543a2ed9fa398c9d7d9420384e1d021c8b467c1500e007964bda70ea616d3c0422c682b80f8990217a464347918fe09ba83bdd76015833a4c76888a5cc6fa5c37a766d64f301c61f2eafba3a8bc64b9d402feba216e3049fee68d21cadc4cc8de19fe10c89bd43c4a2d1227ab85ae41680a8c06ed77a75447cb498928c1dedb5a61a00f636a67f59e86028166a08cfa61fd8d408eea6c35db51a1ee21c455de55d8dfc2ab2f976491f5b6c5b54492f539624e1da89b1171bd099b6971d23bf2c788acfb07f9eaf720daa518249bd8cd41e03e87c6de17c5cf14c1f1be318350e4624b7a89c20de3221759539430026e06c5192b120f82e36586c490cb084046e8fb5ddecb234f2dfea4752ff94cb819150c9b09220c8a7625904b92a159885d7123a77404d52f362aaafc4e56c97d45b1729e80a0bb2646fb5d019d2d91151431cb04f32730d1abb88e9823dd7b0bc7a407fe5ee3273d2d497563414f620c1a56d4fd4ebcbff2bfbc11c8d4ba0922095d850572d90b1b12b973371bbee36bf6fb67422ef325367e1a6a47fdc0f05382a6cfdabd96893b8a33b9431e4c470b615af17a2f583b5abed8e8f277a15ed51c180dd5ca13e16b3f6a996b2e56035d09bb241e160ef6dabeb37e9ca62c3381272017789762aa8381d46ecfe565f6c5646bc7d67b35abacbcbde89782a0cdc93b696155513e2d1dff96e43e72bf678be389a061dbbcd1b9fd03427d8258115bab3ef6281de402ea05bea729ec97886281f8d4e002dc6428f7715ee6772ae687c2f54e84fed500198a6fb87a3367aa14c9527c6e7d1fdc93aae93155923b9445c5f21ca90411f0c4622df6e7a959712eb00b47f59d027bf115078c79e8222083d5cfbe954d5cbd39567c641f6feb8eca6535c5b1866a720e32b61ea7b133bdec267ab83fa243765f83f5a2f5a3c4bb4c8a290da52aedb2eb2d752e5decdbb001e06359ac9c9d898559a56609bd53ee26b336161d9e66e71db56c7dc017b30545c614482a0b8db64b2289fc07c4670b0edb89c127dc01caa02107d6ef3686f1f02661f8086565a1e1870e5ed7b947f5ab1e1349230180d692aef54ca9f4b7515cc446d8bd0a76ce4376069fabee5594042333ebf23016cffa0ae063c04d876f56a462365ba7e1f429f70c324fa5a9ae376c2541c80dc1e2e33ca1c90b0e6369191a8e6ba8818da1bff830aec1219b7bda2ec14ffa7528601ec307a225e1f6128a44bda65017a98cf217a6521e1b41ab7df4f876329a228cf3640178b2763869d37bd8d346514191b9098fb8bcd44249d11ef27eac67d2152218128dc5d21ed083f092286b89522be034a3d96fac4ee7cb58b460a7695c9048426a6d3bc4c676f784393b89f7a981fad728a4997ffa1ffb412d56771e31c435658dd1fac7b5bb8db5ab637fbd653c55d3db4bf43c7d91524b18dc2860a1c060b96f00d579171c11c42ce91437e2ec15fc47617afff7145b17e965eecc01518cf6f4a245d722d6bb243aac8254da9a50ce79b04825444cd4c16b39b290528db1e7e0a3b5f07272e9a0cd7b92073bdee27a21e03bca75ef4da3bbf0476453479ec33aad301a32f7271924e96dde781266dc6a308fbd69589483189ea92d7cd18463758cca4802c86e73437d75079a3c16631c7bab19204c3225f74751652dd43ba33ae54bf768870ec43a9c83bd5797774f0efa371e434d808e3887c56d044340e7c01dc192cdd1bd9a174aae042695e6c4a689dd265290db2d49eac1f36ab8b3b1f5d055cd3de74575f96df9bb9491472a078274be830246b7c2518e6c6f516aca013837cfed7f71b6a5c479c5e92619051f78bd29673ed047db4a877a1f00a1817a08782e043dda6f6014717c834c7416f2fc67ade230b245e66188841e7abc58a569e6cf17357336ba739e17323314bf46b75cfce51e91fdeaf17d13ddcd8dd7c6cad4f31bd1b4947b79fbbd3396bea562e59c85af361a5b05171984ae721c463f2a7e172dc0fcf6b974458a21a5c99096c53173f7393593b50b8b36ea7e79b82c278a0f833967c0919fc8de07edcd6b51fc06e67243b5cf143511ab1d755a7ef234db2d31ce913e35889f6ff9f75ae63ade38033d4bc6b51149e4d0901af9e83d59001590260bb400903c038423c14369b2a597160f0537f4a6d4ccd0b7a95ab8cc55938e06f3d8df2edae0984f850da371e585b7b8d726164d2dd555316884735a3d849f5fc20983644131fb19d8ca251488734dff7e08c6d732a240b8b101e7edc41c6970e65da8651eeec1734e97a499a564606a808c13e2d340d893ed84c01b307419f6e3bde7fe285ffff3cad43941cacc0776e99df96a45fc0fbf8db247a8bdbe5b6b5b5507876bf41efe4195f78850c2640181682f6b059718d28da9344cb5a4e6e1da020f4813c615cdf89a9968f2ffffd0dc22b1d9041b26a6b10818811639de9a5cdab8811489bd8452c4af81f14586c551aadcdfb51b417d5bcf7304273accabbe093286517e0da67d1664e8722062c24c03fb51f669d8c0c7fc29b5a90d1f25d340d377632b634706b854efeb99e10f952b60a59bdf24d836462b6403b2577452ee70c451546a3cf60f0e508190147b8c0cf34458abe9aecbce9a7be1c65b92757876bf92c73488e2b9835cab471eaf28a8af37d28e3f2b3e4fd0dc6992e3d22026508ca8bd67f2990dfd7d4598b2e93ebe076e784860a17545ddb16fce09e2e649b26ae6c84983d67fafae569fef0eb042b68f0c8a6fdb57e6ffdd5768f7d7383bdbce8337cb2d91d36090499ac377dec4f38c5bf194a2a5bf656d5b0dd1b364589bac9637b2e44b13eeb507c56ff8f561f1d205c2fcdacb92ef2d991e0583bc0b1e216ad6c10a0ef195a4781e74013f7414bebd3cfc875faa3deef8f65ac983dea3c430fd57a62b18f8309c1c50d5f4e775e52281a1bdc6f9ed2f1d1c67724ecbb3001495d67ebf7025636841fd1d2a63385495e16f642433680e6611b6202f8d9c2f48ddcfabf235803f12f8d560ca691e4a8c627edee29a85d8f03a4d118807d689176addc439e1c0b561214bbbf937737e61feefd0760c683a02e4f775f3c12349a07362386b9b596625bdce87ebad21e40d2681fb84bd6d73cbbf10d56c58a7d57dcdfebd73fb80a441b8d278644b1eaf0e5ccbb8b151ef90056291a635c5c21bec5be45f77de012f3a6384ba515ec2e1a9a6f73f9793bbab736330cb4dfce95dc624c13d70c21b3feffd2087ebec7623b982a84eb4423e4a485eff4e034ebc2884d209f422f81230edf7c636ec34b7a8e056a408ae449a0e697ab6adb0ad698a6ee005f382757bde75a4e2b91d2aaa681b5613314e32754c9e34edbc265cea8ad3a388ec7a891cdb2ec8d403242bde9299209d96a71bea294d321da9a19ee08276efaa8597368a7171d14ae33ce9ad72683b43140b6446c468b9969daa69fcc5d3cc3ae5df855de9ca17608481e7067bf589222d0606163b2c804f4400616cb3ac42af63b4081a19baea6f387d1b8f7a63bdf93d0c43d7ea37258bf39eb4d7c66c754e64c6afcf3429b84ccf653c343b644cfc59a4559070fe43456b0403c8a8aaf229cdbf4642124b6271e00d048cf6e835ff18246f9f72a7e7d558c2c6bafa5b84af3a2114d387e40cd6de13f7db17191975aeb488666d3dbeab2b8e88e14ee0923af01c9cf9a2d4d972ac0fa27f6f4c6bbbd18571a314fd7a279ec43c4b153edc602123e3d6ed6b13352d303b1ba8c7cf2be896b87714d1889257e2c8ef0f90f1c6c9af9f4b86469e0712911783030318ad717e8466a78dd94498aef0e9c2073fba028530c8ae0666d6c001e2be92a742305f194793c3fb813790111e174e59c43415628746293402e11aae1eabf9162a2091fe3ae10a5308fcf84054a4a7e54181331ecdf9390b82e0842a123339c45c46c5712eead119202d40918886d4aec68568f4febbb52dcdcb311825e8d6cf2bedae8b2cb90ed15c38de39b5da0ac4e7f27214a514e12b7a5f39a3e076c956273d618b10a5d8ea76b20ca4d612c773fd78ec8db5b7a0d1c279fc89516a8af4d8d2d284d8486d0505a4c0a8f90046930da82b93a0b192111e01138a3b5f0597e72a1464612e1f4c6b61397cec639f7bd0c44de0a9e8650c98bf7f8c9970cf6635fa750e4aadb500fc4cb8bffaa1f2e4090b30e6fa63db4c709261c2595804181b700934fb7c67e3f422fd1dec6d9136302eabe83523c28ccf855cbbf0b0b16ff65bdb304db0945b51ab82b98ea122e8c1afb7c888ab52dc9eeb39e1edc70de228568d98659261f3a1208aed26d70605ff41254ace17b5e879a5af2798047b5ed1f38c6f0a3ae8367d11cc9285d994187e8ea2b6a54573f84194b6f9c9303dc7bd24ffb6ec8f4b06b76dfeee7ba7e23fa58b03115b45ce9136461849d81177146f571d411d26b6e4172d7e0052fa147d1ea69118c6ea94d077e6b2c435efe87c9325cd9b3313597ae776c4d94535bb8947214c2938e9132b2349753057047cb9f07f79d546172624b7c44e076de85161a025171208ec828e73a85b5a3f6aed5d9fdb91a18a0e6055730e569d0e6e97e1793c94ed0be8e87a18215339389434606118c563604af54b1f276724aaff41a336c00a7b7cd4f73263633d9a3c92a43a96322e3b2e30392c20369a29caafce4c9d2bdbbd601498c7ca62216dabb97e49365f5b6dde921336200ab6ce3fe75d3f93e65613b6346eea1798bfea3e7ef0bf39108ddd97b0997cf439d40a9e71157f49f043ccaf269bcde73b971021b46b3f856afc31fb2c5eefbf77d7a0cfadc03d9ad84c1cfdd25383b04846a3e929c93f6bcc31bed1d4bcf008551f679f3fb3cf6f063a72af143fd3d92019a54f0e8ce2c7a9ad5dcf11d389de2fee4b431e777a32dd0c2e8de6e8e99db44e9f72f7dc293472a9ef5a75f287333351545a86fefb06cb6e32531c207f57869991fd14067f0c8da1f61b2b3553dc529d409cd8100525aff86f4cc5578d0a9eb300957965769dabce552832d4f37e1c23373b2f76ae46c619289e097ca9be82f9f382cfc8e9bda65fd63ac8f88ceac87f0eda3defae78e1479090a01fe2bb7dc5a77ff056549b6f17a3c44a8fc0969a514e8b6067b16ff0d81688ea8c37672d1ac2d1ab543dd5d688a95e10193ded7129bee828ba6b81aab4cb49b015d8946e9e6fa44a0c913026485756e509d1957cdacb7d7d4248ce0d83d70445cdfd84bf4fe998dd0671f46ebc2702fb1bf641d80e954c324e316ecbba08a29ea20acff678c75cba32e7d2501f295444cbff171bb4a1998674facfc68b70d9ef466a6de6f8864443029121d466a246ac9607f51b60dec7b99d4ea058b7d9df2e57589d5182f445199101849e853f8672e90e5259a620e8e6db069cb4bdd642abc1489cda7663a2298d168ad768a337ff5ff0b8151f086219b0412651936bbf224310ae3d01b7a20f9e50c73d45a8da85ec3e0922a170a7c0938d14a5ea9477bb7cf323d3348ee1309afee49d2c0747c116ac6e0257e572a0f8f168b193e9bdf7d8e49f0fdfd5786771f0cadc18935d5ce736e24b3cde56018a9f78863afe8bc4d020695567184a6d3d7b595cea1b879ec2c13659caed5bad5c4f61373b6b4d9ec80232d9e83049b871d39b6bfdb635018e6181a69748741cf7cdc01e6c1cfca8c87b485dbf9dca63c5e0c701845d4595df4fbf8d4e97c5f71371985b4716b7868070280fc1b0ec549c65f84db587eab3b835888b9dc513bc94c4de91cd13266f5c87c3a0f81818c510107946a4184c3432f47cee2fd1e9a02494e1f80abbc0577eb77751a71d1c6998bccfc747af96f57620634c7d9e8fb314c300bfad916d3113f6dcbd2337ea0d373138e3fb13c64caffb0f470b70bd58dfe0c4fdc6cb11c46bd52e68f6d9b43a8ab697c888ceb2b584c2ac1e1dba136716e9d2126ca9337c3fa3b3a8f3bccead55250f8f2aff481b8466bbbaa4f378b11fac6c3272730514d629ef511b9c99afeb3226eae09a7c67dbb6745c98d1580323f27e503646664bd923d020163b9281ae27f30875c201067a5ef722283d1b0dab94ed4ad889a31292640e0f77e674cc6807e054824911d27dc24836a40de33a850b30b35658258dbd872c0152f97f46a46614fdbb2257f16e73a37741919e8dc0dfd605b67d07939ea0db74747314ec314568489b5168575f74d2d82f6ed7bab8391586a127dded4e1372e541c2b821b4996285ff33045640655083de0c1ec514d3e6f6b93dbe87944cd586aaad9a4b6e69b82ca0fdca70b423ea4e7058f2657cb1082b3448f0f5c63200add6c0c9b1b8dd2718ba472f1fbb49c655189a7c623a6acbf923a2bbc50ea83af048862413af034a9839b9351cc0442c46368e3c92a054e3bad39e92554b7ac554321038caf4edcf96e394a34d81bc6f0dfe6c3d1c2026ae2e070087d227e3b35f3b73ab598905f0d8655f2765d3c9bdd8fcd293d11cca3f1cc0d0e7dad5b09b3166eec5540e21762d698b59b4ee3f2ec449c716761365858119b7ca1f6db6d063150bf4646d87e05b62fb13e7e25e2d290c3a6b275dc9a0b05f52d7e9c8878394881cc2731fb087cb0e8cda9523d69e0faa547f4ce5922a309825a260de0405489bf6d22ed68e198a0f0672f07c103a0457944ebee05062c3e8615549282c74916c8cc28b224b7850daca3d6716297e7e4b6573de75b89dd5a9277943169706e98d02a7b393734dc60ce9ee6bc01ef0466106de03f4740110634a7da0f1efac221febc9c748381c6c8886541618f799e30e45774eb4c7ff3b401710e3f0356462c9cd1a92422fb5d82e4f1b0b39e29e5852b324cb05f537624b6b74fd8fc31ad97495817e0342b41fb73d37c3904a0c3302bff2e9478c72ac74cfd633d7be6044ffdb48c49e076efa431bbe447d65d9f9a03119a0f95bd2b9e4050da54bf16da40f8107d42f3e1e23f9702454ab10be28a16b56487e5063dd233419971d50d8f0092a9b24b3fa90e552ef1711d3817c47da3a84920eac93d007169911915785af786c807f034999fd1451b8b5befb04a30043477ac537d21a77b8b88b7a880fc04103872777d73d9c08ae7ebaa8661be5f6abc8bc8779690704cb7183b796a59af4fb524d6daca1a10d2ebb32c4dc3e1d7a12514578516451b4797c1b4918a46fa3d8f72f2cdcdfb9836f37cc2db78b7cfc452f54fd0d29d97ae9152ab473d3e7de76c7d4ce4f8e701c80873442bb095168b12722d3e7fd88be4992823d569e3f433b89e6d616235640181d58ef46cb5fb13df869eb4d3675facbede52831c4146c4c8aa2a6e93337190c6be16f09ca6a77a353239f6e5bdef3e14afa044742241667c0656af57ecc697ce807d74b1421b81fa1ae89387baa9d1c0f84c8a4e49152ce9ff11aef07f6cc1afd7c70be8192eae394de49a4f9f850eb3a803c428f8dc0c3b7662a4c02e0a6524edc621898ba14c1506dbaa107d6c2ab0f5cbeaeafb6dbc9d99e4aa104790d76bced93f29bfd2f42b9329ed07089036378e35e386eaaaa3c9e7390f1a13e1bf2e09245c897f0d516b66ce8c9b188e1fcb24d6334a0187fa4f9c3c84ad436c26955d549a4ba34eebd7abb49cf60f1bb99217924efdd283d3179705bf054850f1360ab7ad739ad85bb8a3eaed652636d51fb0e8d53a8952cccd03a99a12664c516d727c7c78916c891179097dd4c7fa38d0afaa48ae23f00f8225766548e121c2aa4db44117a45e4095008f1dca1f39c40afc0c6379014fd00e440b6f733bfc55b618ce9a29d85c36b6f984deca8ebfcdac0496dde639014f1b8c31c68c8f2687540e691fb6a30f9160b36b78e2a2614bfea6b2c3a09a1e5b0e504674a875ac5d9bde3de3af589f1605be84add720b8fa7874d4519a21369afc2bd7b37ce84dbbb1836de63dc6eedf1b763ab620b19f6d47e5a1b5488d8f45c3e2e432666b9375fb75bb47f1997c34760813d3251d80134ec0d6cee3fae30400ae768ea716d2076cbe556620c573b8e76f1c2bf4108ff8b2ea9c41e46dc857cebb61a8d8fd6d3a41d29c519d0a5db5c20cd48c27aa04eda418b9a9bae688c8f66e5df254e69002bc24cb5aedc4af0271bf53e63dd4c5bafade231e350be816ef0271f1532e10bba989f0692964251f569cf8dec6d2e8ab3408abeadb70ad14d0d15828024c1f867bb30523748da33671557317747bbd4b36f442dd4208198b97c762b365b93a2fdc7c1b7415cc2c0865f6f3ce3f52476d55d8687c2cb4858905276d751d33e268d23f70bc6ab8df7fd8d0c62742f1e70163c55796df09c32a558e2b0ae43b26b44b0e173b30f9d9944c9f8cf4bfc286546bc750a6336f5609de5aa2341ab5e4ebd21800007ec6ef0e972a8b7d87474d0995a2a1ec50db694d90207e263fd5cfadf1d74715b0f1bf33ce8d380cb1670d286f2815d66314f4ad51fe9171cf83d0aa3b08b3055cf9d25064bafb53f17090221a4e63c92d7197c699876e592e9ec60bb5a27b96a90d6790bac9efd7179a03307c926f2af27c30e21300271b351324461da085247c47f9be8dda5f3cfffc74e026160ba347748d355be7babbf8a63e6798eb455a819048ae8c26e52cc29f7d352bd8df9475559c2a5c715666fa2ba80d861462925478fb4c7299f627f3dcf18e7d691d56f56bf7fafc0aa742a679893b0fccd50e39ee9b33edb0f70dbd4577156b0dd1c7d54f44d7e48314356a6c201232a9aafffed2755bc853088954c3a06d50a6799a21a551eb3a7eedf865c4f30e9d0388dfb34fba84c3dad69ee7df431793a38c9fa330377316a2cf9e7854dd089e1a70076fef597aa565c1b68f4f971f6b11c7a6f03ffdd30eeb39927ad3780ce07fb4948ea12a8f25b5a35269be8778f651e460046165264c2c62b8c474c4450308f3fc355021f", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0xa921, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.230708953s ago: executing program 2 (id=9009): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.230084301s ago: executing program 0 (id=9010): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) getrlimit(0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000001c0)={0x1, 0x0, [{0x9ea27589817d43c7, 0x74, &(0x7f0000000600)=""/116}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r5, 0x8916, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb4, 0x19, 0x1, 0x10000, 0x14000, {{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2f}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xfffffffffffffeff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x3}}, 0xb4}, 0x1, 0x0, 0x0, 0x4080000}, 0x4004) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.089339807s ago: executing program 2 (id=9011): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x4, 0xc, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 1.088835101s ago: executing program 0 (id=9012): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc048819}, 0x80000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts={{0x18, 0x29, 0x37, {0x3c}}}], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.067006489s ago: executing program 1 (id=9013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.009538929s ago: executing program 2 (id=9014): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc048819}, 0x80000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000029000000370000003c00000000000000b11552372e9155371dfc5c0208d299e71c1c4b439bc85fd4d8fdfeadfde8336e269ce79a0d36d81571eb05270cfde5edb27578caa8edd4c02206e2295e61e1547869f5e980f3620f77c3c10fecacd17fec3eae710b4d6b2edeadb0c3f7c0e3cee552c0f6d1b219be3e395ec5f1f7a9332587b4a2a51b"], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 928.298705ms ago: executing program 0 (id=9015): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0xc044) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 858.128643ms ago: executing program 2 (id=9016): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18040000000000000000000000000000180100002020702500000000002020208dfaf8ff51000000bd"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) move_pages(0xffffffffffffffff, 0x7, &(0x7f0000000000)=[&(0x7f00004ea000/0x1000)=nil, &(0x7f00000da000/0x4000)=nil, &(0x7f000078a000/0x1000)=nil, &(0x7f0000941000/0x1000)=nil, &(0x7f00008fa000/0x2000)=nil, &(0x7f0000784000/0x4000)=nil, &(0x7f000016f000/0x3000)=nil], 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r5 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) 346.779349ms ago: executing program 0 (id=9017): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) creat(&(0x7f0000000140)='./file0\x00', 0x34) dup3(r1, 0xffffffffffffffff, 0x6700000000000000) syz_fuse_handle_req(r1, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0xa921, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 240.47523ms ago: executing program 0 (id=9018): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc048819}, 0x80000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000029000000370000003c00000000000000b11552372e9155371dfc5c0208d299e71c1c4b439bc85fd4d8fdfeadfde8336e269ce79a0d36d81571eb05270cfde5edb27578caa8edd4c02206e2295e61e1547869f5e980f3620f77c3c10fecacd17fec3eae710b4d6b2edeadb0c3f7c0e3cee552c0f6d1b219be3e395ec5f1f7a9332587b4a2a51b"], 0x18}, 0xc044) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 110.505208ms ago: executing program 0 (id=9019): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=9020): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00020000000000000004c1000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r0, 0x0, 0x0}, 0x20) syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000180)={0xa, 0x0, 0xffff, @private2={0xfc, 0x2, '\x00', 0x91}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000290000003700000089000000000002"], 0x18}}], 0x1, 0x400c0c4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f00000000c0)={0x3, 0x7, 0x1}) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): expected cc 0x1001 length: 249 > 9 [ 2263.817589][ T483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2263.822949][ T483] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2264.357226][T18638] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2264.825246][T18638] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.117558][T18638] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.355652][T18638] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.899590][T21158] Bluetooth: hci3: command tx timeout [ 2266.213619][T18638] bridge_slave_1: left allmulticast mode [ 2266.227324][T18638] bridge_slave_1: left promiscuous mode [ 2266.238935][T18638] bridge0: port 2(bridge_slave_1) entered disabled state [ 2266.289021][T18638] bridge_slave_0: left allmulticast mode [ 2266.304022][T18638] bridge_slave_0: left promiscuous mode [ 2266.320504][T18638] bridge0: port 1(bridge_slave_0) entered disabled state [ 2267.286075][T18638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2267.297441][T18638] bond_slave_0: left promiscuous mode [ 2267.327780][T18638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2267.340013][T18638] bond_slave_1: left promiscuous mode [ 2267.358486][T18638] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2267.370199][T18638] dummy0: left promiscuous mode [ 2267.374576][T18638] bond0 (unregistering): Released all slaves [ 2267.979587][T21158] Bluetooth: hci3: command tx timeout [ 2268.014750][T18638] hsr_slave_0: left promiscuous mode [ 2268.034934][T18638] hsr_slave_1: left promiscuous mode [ 2268.049952][T18638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2268.056882][T18638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2268.099951][T18638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2268.109384][T18638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2268.150571][T18638] veth1_macvtap: left promiscuous mode [ 2268.159711][T18638] veth0_macvtap: left promiscuous mode [ 2268.161550][T18638] veth1_vlan: left promiscuous mode [ 2268.177325][T18638] veth0_vlan: left promiscuous mode [ 2269.047578][T18638] team0 (unregistering): Port device team_slave_1 removed [ 2269.111430][T18638] team0 (unregistering): Port device team_slave_0 removed [ 2270.057180][T21158] Bluetooth: hci3: command tx timeout [ 2270.345766][T18638] IPVS: stop unused estimator thread 0... [ 2270.635927][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2271.012833][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 2271.021699][ T1016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2271.026245][ T1016] bridge_slave_0: entered allmulticast mode [ 2271.035436][ T1016] bridge_slave_0: entered promiscuous mode [ 2271.055992][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 2271.061720][ T1016] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.064844][ T1016] bridge_slave_1: entered allmulticast mode [ 2271.069646][ T1016] bridge_slave_1: entered promiscuous mode [ 2271.108048][ T1016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2271.121597][ T1016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2271.170195][ T1016] team0: Port device team_slave_0 added [ 2271.183963][ T1016] team0: Port device team_slave_1 added [ 2271.246179][ T1016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2271.252423][ T1016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2271.264457][ T1016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2271.274060][ T1016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2271.276593][ T1016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2271.286507][ T1016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2271.431629][ T1016] hsr_slave_0: entered promiscuous mode [ 2271.441261][ T1016] hsr_slave_1: entered promiscuous mode [ 2271.458873][ T1016] debugfs: 'hsr0' already exists in 'hsr' [ 2271.473113][ T1016] Cannot create hsr debugfs directory [ 2271.619800][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2272.091152][ T1090] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 2272.098034][ T1090] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2272.147591][T21158] Bluetooth: hci3: command tx timeout [ 2272.573202][ T1016] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2272.581418][ T1016] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2272.584527][ T1016] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2272.588815][ T1016] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2272.592005][ T1016] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2272.608277][ T1016] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2272.612095][ T1016] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2272.626291][ T1016] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2272.712840][ T1016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2272.722883][ T1016] 8021q: adding VLAN 0 to HW filter on device team0 [ 2272.737363][T22262] bridge0: port 1(bridge_slave_0) entered blocking state [ 2272.739779][T22262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2272.752479][T22262] bridge0: port 2(bridge_slave_1) entered blocking state [ 2272.755447][T22262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2273.302791][ T1016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2273.357848][ T1016] veth0_vlan: entered promiscuous mode [ 2273.368162][ T1016] veth1_vlan: entered promiscuous mode [ 2273.394535][ T1016] veth0_macvtap: entered promiscuous mode [ 2273.406852][ T1016] veth1_macvtap: entered promiscuous mode [ 2273.423261][ T1016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2273.431721][ T1016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2273.470968][T30396] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2273.480514][T30396] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2273.486289][T30396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2273.493003][T30396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2273.559913][T22262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2273.569578][T22262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2273.595176][T22262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2273.599565][T22262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2277.497297][ T483] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2277.507844][ T483] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2277.511927][ T483] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2277.525948][ T483] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2277.533997][ T483] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2279.470755][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state [ 2279.490324][ T1203] bridge0: port 1(bridge_slave_0) entered disabled state [ 2279.502288][ T1203] bridge_slave_0: entered allmulticast mode [ 2279.522870][ T1203] bridge_slave_0: entered promiscuous mode [ 2279.561100][ T1203] bridge0: port 2(bridge_slave_1) entered blocking state [ 2279.574563][ T1203] bridge0: port 2(bridge_slave_1) entered disabled state [ 2279.577466][ T483] Bluetooth: hci1: command tx timeout [ 2279.597817][ T1203] bridge_slave_1: entered allmulticast mode [ 2279.617711][ T1203] bridge_slave_1: entered promiscuous mode [ 2279.743176][ T1203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2279.777609][ T1203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2279.967993][ T1203] team0: Port device team_slave_0 added [ 2279.997858][ T1203] team0: Port device team_slave_1 added [ 2280.142541][ T1203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2280.164783][ T1203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2280.175858][ T1203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2280.214511][ T1203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2280.234309][ T1203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2280.272682][ T1203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2280.897643][ T1203] hsr_slave_0: entered promiscuous mode [ 2280.931415][ T1203] hsr_slave_1: entered promiscuous mode [ 2280.937332][ T1203] debugfs: 'hsr0' already exists in 'hsr' [ 2280.950601][ T1203] Cannot create hsr debugfs directory [ 2281.660279][ T483] Bluetooth: hci1: command tx timeout [ 2281.702733][ T1203] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2281.944103][ T1203] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.090712][ T1203] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.210054][ T1203] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.858188][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 2282.860789][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 2282.887994][ T1203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2282.913493][ T1203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2282.920418][ T1203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2282.937586][ T1203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2282.945129][ T1203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2282.970366][ T1203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2282.980233][ T1203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2283.046219][ T1203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2283.431520][ T1203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2283.533900][ T1203] 8021q: adding VLAN 0 to HW filter on device team0 [ 2283.572013][T30181] bridge0: port 1(bridge_slave_0) entered blocking state [ 2283.574170][T30181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2283.615182][T30181] bridge0: port 2(bridge_slave_1) entered blocking state [ 2283.617346][T30181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2283.737303][ T483] Bluetooth: hci1: command tx timeout [ 2284.767725][ T1203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2284.845624][ T1203] veth0_vlan: entered promiscuous mode [ 2284.873937][ T1203] veth1_vlan: entered promiscuous mode [ 2284.949776][ T1203] veth0_macvtap: entered promiscuous mode [ 2284.992789][ T1203] veth1_macvtap: entered promiscuous mode [ 2285.031174][ T1203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2285.053795][ T1203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2285.080571][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.103482][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.118177][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.128753][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.329082][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2285.343351][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2285.416747][T21926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2285.435430][T21926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2285.827498][ T483] Bluetooth: hci1: command tx timeout [ 2288.836761][ T1342] veth0_macvtap: entered allmulticast mode [ 2289.001838][ T1344] syz_tun: entered allmulticast mode [ 2289.828099][ T1348] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2289.830411][ T1348] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2289.871363][ T1348] vhci_hcd vhci_hcd.0: Device attached [ 2290.158744][ T712] usb 44-1: SetAddress Request (2) to port 0 [ 2290.169323][ T712] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2290.270294][ T1350] vhci_hcd: connection reset by peer [ 2290.295247][T30396] vhci_hcd vhci_hcd.3: stop threads [ 2290.304981][ T42] audit: type=1326 audit(1784116908.917:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1353 comm="syz.1.7266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7fc00000 [ 2290.311358][T30396] vhci_hcd vhci_hcd.3: release socket [ 2290.319663][ T42] audit: type=1326 audit(1784116908.937:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1353 comm="syz.1.7266" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffefec code=0x7fc00000 [ 2290.336142][T30396] vhci_hcd vhci_hcd.3: disconnect device [ 2290.339249][ T42] audit: type=1326 audit(1784116908.947:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1353 comm="syz.1.7266" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7fc00000 [ 2290.729593][T21158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2290.747201][T21158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2290.755842][T21158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2290.767422][T21158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2290.770307][T21158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2290.944407][ T1380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7268'. [ 2290.960421][ T1380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2291.020875][ T1380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2291.400297][T18638] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.692626][T18638] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2292.021759][T18638] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2292.185078][ T1416] syz.2.7280 (1416): /proc/1407/oom_adj is deprecated, please use /proc/1407/oom_score_adj instead. [ 2292.233204][T18638] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2292.662499][T18638] bridge_slave_1: left allmulticast mode [ 2292.664392][T18638] bridge_slave_1: left promiscuous mode [ 2292.675758][T18638] bridge0: port 2(bridge_slave_1) entered disabled state [ 2292.687883][T18638] bridge_slave_0: left allmulticast mode [ 2292.703966][T18638] bridge_slave_0: left promiscuous mode [ 2292.705878][T18638] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.867303][T21158] Bluetooth: hci4: command tx timeout [ 2293.134227][T18638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2293.178157][T18638] bond_slave_0: left promiscuous mode [ 2293.195374][T18638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2293.214979][T18638] bond_slave_1: left promiscuous mode [ 2293.229832][T18638] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2293.246132][T18638] dummy0: left promiscuous mode [ 2293.250809][T18638] bond0 (unregistering): Released all slaves [ 2294.937297][T21158] Bluetooth: hci4: command tx timeout [ 2295.257309][ T712] usb 44-1: device descriptor read/8, error -110 [ 2295.693201][ T712] usb usb44-port1: attempt power cycle [ 2296.241118][ T1365] bridge0: port 1(bridge_slave_0) entered blocking state [ 2296.248919][ T1365] bridge0: port 1(bridge_slave_0) entered disabled state [ 2296.256562][ T1365] bridge_slave_0: entered allmulticast mode [ 2296.265139][ T1365] bridge_slave_0: entered promiscuous mode [ 2296.279077][ T712] usb usb44-port1: unable to enumerate USB device [ 2296.285210][ T1365] bridge0: port 2(bridge_slave_1) entered blocking state [ 2296.288318][ T1365] bridge0: port 2(bridge_slave_1) entered disabled state [ 2296.293770][ T1365] bridge_slave_1: entered allmulticast mode [ 2296.300740][ T1365] bridge_slave_1: entered promiscuous mode [ 2296.306474][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2296.345341][ T1365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2296.353009][ T1365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2296.429236][T18638] hsr_slave_0: left promiscuous mode [ 2296.431774][T18638] hsr_slave_1: left promiscuous mode [ 2296.434218][T18638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2296.436898][T18638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2296.440188][T18638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2296.444239][T18638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2296.461299][T18638] veth1_macvtap: left promiscuous mode [ 2296.463959][T18638] veth0_macvtap: left promiscuous mode [ 2296.471053][T18638] veth1_vlan: left promiscuous mode [ 2296.472856][T18638] veth0_vlan: left promiscuous mode [ 2297.090188][T21158] Bluetooth: hci4: command tx timeout [ 2297.681594][T18638] team0 (unregistering): Port device team_slave_1 removed [ 2297.748883][T18638] team0 (unregistering): Port device team_slave_0 removed [ 2298.205165][ T1365] team0: Port device team_slave_0 added [ 2298.260746][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2298.459733][ T1365] team0: Port device team_slave_1 added [ 2298.597906][ T1365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2298.601681][ T1365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2298.671962][ T1365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2298.752395][ T1365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2298.770868][ T1365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2298.807507][ T1365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2298.970273][ T1365] hsr_slave_0: entered promiscuous mode [ 2298.977444][ T1365] hsr_slave_1: entered promiscuous mode [ 2298.985409][ T1365] debugfs: 'hsr0' already exists in 'hsr' [ 2298.993526][ T1365] Cannot create hsr debugfs directory [ 2299.097148][T21158] Bluetooth: hci4: command tx timeout [ 2299.161042][ T1507] ip6t_srh: unknown srh invflags 4000 [ 2299.177279][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2299.577772][T18638] IPVS: stop unused estimator thread 0... [ 2300.629845][ T1527] ip6t_srh: unknown srh invflags 4000 [ 2301.120467][T13471] IPVS: starting estimator thread 0... [ 2301.207260][ T1537] IPVS: using max 43 ests per chain, 103200 per kthread [ 2302.014404][ T1365] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2302.031860][ T1365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2302.046122][ T1365] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2302.361904][ T1365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2302.372492][ T1365] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2302.393324][ T1365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2302.408086][ T1365] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2302.434314][ T1365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2303.109379][ T1365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2303.133966][ T1365] 8021q: adding VLAN 0 to HW filter on device team0 [ 2303.146205][T22262] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.149270][T22262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2303.157695][T22262] bridge0: port 2(bridge_slave_1) entered blocking state [ 2303.160639][T22262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2303.242159][ T1573] netlink: 'syz.2.7309': attribute type 10 has an invalid length. [ 2303.355634][ T1573] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2303.677017][ T1573] bond0: entered promiscuous mode [ 2303.681262][ T1573] bond_slave_0: entered promiscuous mode [ 2303.685457][ T1573] bond_slave_1: entered promiscuous mode [ 2303.688125][ T1573] dummy0: entered promiscuous mode [ 2303.780555][ T1365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2303.826128][ T1365] veth0_vlan: entered promiscuous mode [ 2303.835193][ T1365] veth1_vlan: entered promiscuous mode [ 2303.886798][ T1365] veth0_macvtap: entered promiscuous mode [ 2303.895600][ T1365] veth1_macvtap: entered promiscuous mode [ 2303.920675][ T1365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2303.930530][ T1365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2303.942877][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.949531][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.955679][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2303.961935][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2304.259216][T27010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2304.418320][T27010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2304.508714][T21735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2304.518499][T21735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2306.375187][ T1622] netlink: 'syz.0.7315': attribute type 10 has an invalid length. [ 2306.516664][ T1622] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2306.684026][ T1621] bond0: entered promiscuous mode [ 2306.687435][ T1621] bond_slave_0: entered promiscuous mode [ 2306.693083][ T1621] bond_slave_1: entered promiscuous mode [ 2306.698850][ T1621] dummy0: entered promiscuous mode [ 2307.050821][ T1627] fuse: Bad value for 'group_id' [ 2307.053422][ T1627] fuse: Bad value for 'group_id' [ 2309.076575][ T1639] ip6t_srh: unknown srh invflags 4000 [ 2309.265132][ T1642] ip6t_srh: unknown srh invflags 4000 [ 2309.829700][ T1646] netlink: 'syz.2.7319': attribute type 10 has an invalid length. [ 2310.182981][ T1652] ip6t_srh: unknown srh invflags 4000 [ 2311.161655][T26924] IPVS: starting estimator thread 0... [ 2311.233117][ T1663] ip6t_srh: unknown srh invflags 4000 [ 2311.277707][ T1661] IPVS: using max 41 ests per chain, 98400 per kthread [ 2311.947204][T28113] IPVS: starting estimator thread 0... [ 2312.238596][ T1685] ip6t_srh: unknown srh invflags 4000 [ 2312.338919][ T1670] IPVS: using max 22 ests per chain, 52800 per kthread [ 2313.196728][ T1690] netlink: 'syz.2.7330': attribute type 10 has an invalid length. [ 2313.233288][ T1691] netlink: 'syz.0.7329': attribute type 10 has an invalid length. [ 2315.097150][ T1702] netlink: 'syz.3.7333': attribute type 10 has an invalid length. [ 2315.136201][ T1702] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2315.278277][ T1704] ip6t_srh: unknown srh invflags 4000 [ 2315.582999][ T1705] bond0: entered promiscuous mode [ 2315.586662][ T1705] bond_slave_0: entered promiscuous mode [ 2315.600422][ T1705] bond_slave_1: entered promiscuous mode [ 2315.607305][ T1705] dummy0: entered promiscuous mode [ 2316.120308][ T1714] netlink: 'syz.1.7336': attribute type 10 has an invalid length. [ 2316.147442][ T1714] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2316.680819][ T1719] bond0: entered promiscuous mode [ 2316.682976][ T1719] bond_slave_0: entered promiscuous mode [ 2316.686185][ T1719] bond_slave_1: entered promiscuous mode [ 2316.689125][ T1719] dummy0: entered promiscuous mode [ 2316.794301][ T1728] overlayfs: missing 'lowerdir' [ 2317.625876][ T1739] ip6t_srh: unknown srh invflags 4000 [ 2318.521405][T13471] IPVS: starting estimator thread 0... [ 2318.576007][ T1751] ip6t_srh: unknown srh invflags 4000 [ 2318.628209][ T1750] IPVS: using max 43 ests per chain, 103200 per kthread [ 2319.166658][ T1755] netlink: 'syz.2.7344': attribute type 10 has an invalid length. [ 2321.552761][ T1779] ip6t_srh: unknown srh invflags 4000 [ 2322.332601][ T1784] fuse: Bad value for 'group_id' [ 2322.335200][ T1784] fuse: Bad value for 'group_id' [ 2322.510547][ T1788] netlink: 'syz.0.7353': attribute type 10 has an invalid length. [ 2323.764505][ T1792] fuse: Bad value for 'group_id' [ 2323.766460][ T1792] fuse: Bad value for 'group_id' [ 2325.369580][ T1812] netlink: 'syz.2.7358': attribute type 10 has an invalid length. [ 2326.624519][ T1822] ip6t_srh: unknown srh invflags 4000 [ 2326.674179][ T1828] ip6t_srh: unknown srh invflags 4000 [ 2327.787979][ T1841] netlink: 'syz.2.7365': attribute type 10 has an invalid length. [ 2328.616356][ T1846] fuse: Bad value for 'user_id' [ 2328.619716][ T1846] fuse: Bad value for 'user_id' [ 2329.422085][ T1859] netlink: 'syz.0.7367': attribute type 10 has an invalid length. [ 2329.580120][ T1863] ip6t_srh: unknown srh invflags 4000 [ 2330.124412][ T1867] netlink: 'syz.1.7370': attribute type 10 has an invalid length. [ 2334.997512][ T1918] netlink: 'syz.1.7383': attribute type 10 has an invalid length. [ 2336.438486][ T1931] ip6t_srh: unknown srh invflags 4000 [ 2336.716038][ T1938] netlink: 'syz.1.7387': attribute type 10 has an invalid length. [ 2336.794014][ T1942] netlink: 'syz.0.7388': attribute type 10 has an invalid length. [ 2337.701724][ T1948] netlink: 'syz.2.7389': attribute type 10 has an invalid length. [ 2337.899846][ T1952] netlink: 'syz.3.7390': attribute type 10 has an invalid length. [ 2338.421115][ T1957] netlink: 'syz.1.7391': attribute type 10 has an invalid length. [ 2338.792402][ T1961] fuse: Bad value for 'user_id' [ 2338.795923][ T1961] fuse: Bad value for 'user_id' [ 2340.429159][ T1979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7392'. [ 2342.178620][ T2001] netlink: 'syz.0.7400': attribute type 10 has an invalid length. [ 2343.150610][ T2006] netlink: 'syz.2.7401': attribute type 10 has an invalid length. [ 2343.444299][ T2010] netlink: 'syz.3.7402': attribute type 10 has an invalid length. [ 2344.487761][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.552009][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.940607][ T2023] fuse: Bad value for 'user_id' [ 2344.944854][ T2023] fuse: Bad value for 'user_id' [ 2344.953270][ T2024] netlink: 'syz.2.7405': attribute type 10 has an invalid length. [ 2345.017971][ T2027] netlink: 'syz.1.7408': attribute type 10 has an invalid length. [ 2346.426508][ T483] Bluetooth: hci2: command 0x0406 tx timeout [ 2346.947826][ T2052] ip6t_srh: unknown srh invflags 4000 [ 2347.887626][T21158] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 2347.913054][ T2061] netlink: 'syz.3.7414': attribute type 10 has an invalid length. [ 2347.974642][ T2063] fuse: Unknown parameter 'group_i00000000000000000000' [ 2349.098741][ T2072] netlink: 'syz.3.7416': attribute type 10 has an invalid length. [ 2350.951574][ T2090] fuse: Unknown parameter 'group_i00000000000000000000' [ 2352.805747][ T2106] fuse: Bad value for 'user_id' [ 2352.812177][ T2106] fuse: Bad value for 'user_id' [ 2352.870838][ T2108] overlayfs: missing 'lowerdir' [ 2353.860368][ T2118] netlink: 'syz.3.7425': attribute type 10 has an invalid length. [ 2354.130917][ T2123] fuse: Unknown parameter 'grou00000000000000000000' [ 2355.357225][ T2138] netlink: 'syz.3.7430': attribute type 10 has an invalid length. [ 2356.118229][ T2144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7431'. [ 2356.346997][ T2148] ip6t_srh: unknown srh invflags 4000 [ 2358.952100][ T2171] ip6t_srh: unknown srh invflags 4000 [ 2359.876405][ T2176] fuse: Bad value for 'user_id' [ 2359.878412][ T2176] fuse: Bad value for 'user_id' [ 2361.003351][ T2192] netlink: 'syz.3.7444': attribute type 10 has an invalid length. [ 2361.242507][ T2197] netlink: 'syz.2.7446': attribute type 10 has an invalid length. [ 2363.915944][ T2219] fuse: Unknown parameter 'group_i00000000000000000000' [ 2363.981648][ T2221] fuse: Unknown parameter 'group_i00000000000000000000' [ 2365.102714][ T2237] netlink: 'syz.0.7454': attribute type 10 has an invalid length. [ 2366.574377][ T2256] netlink: 'syz.3.7458': attribute type 10 has an invalid length. [ 2366.788499][ T2265] fuse: Bad value for 'user_id' [ 2366.790168][ T2265] fuse: Bad value for 'user_id' [ 2367.255541][ T2272] ip6t_srh: unknown srh invflags 4000 [ 2368.660010][ T2291] fuse: Unknown parameter 'group_i00000000000000000000' [ 2369.637600][ T2304] fuse: Bad value for 'user_id' [ 2369.639314][ T2304] fuse: Bad value for 'user_id' [ 2369.840487][ T2315] fuse: Unknown parameter 'group_id00000000000000000000' [ 2369.890395][ T2316] netlink: 'syz.1.7473': attribute type 10 has an invalid length. [ 2371.606250][ T2327] overlayfs: missing 'workdir' [ 2372.973004][ T2342] netlink: 'syz.2.7481': attribute type 10 has an invalid length. [ 2373.781570][ T2351] ip6t_srh: unknown srh invflags 4000 [ 2374.149927][ T2360] netlink: 'syz.2.7485': attribute type 10 has an invalid length. [ 2375.547928][ T2373] netlink: 'syz.1.7487': attribute type 10 has an invalid length. [ 2376.851542][ T2385] fuse: Bad value for 'user_id' [ 2376.853308][ T2385] fuse: Bad value for 'user_id' [ 2377.751783][ T2392] netlink: 'syz.0.7493': attribute type 10 has an invalid length. [ 2378.280658][ T2394] fuse: Unknown parameter 'group_id00000000000000000000' [ 2379.322388][ T2407] ip6t_srh: unknown srh invflags 4000 [ 2380.184796][ T2413] fuse: Unknown parameter 'grou00000000000000000000' [ 2381.239077][ T2425] netlink: 'syz.0.7500': attribute type 10 has an invalid length. [ 2382.051388][ T2432] ip6t_srh: unknown srh invflags 4000 [ 2382.490952][ T2439] ip6t_srh: unknown srh invflags 4000 [ 2383.184462][ T2442] netlink: 'syz.0.7503': attribute type 10 has an invalid length. [ 2384.213063][ T2453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7507'. [ 2384.218726][ T2453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2384.290573][ T2457] netlink: 'syz.2.7508': attribute type 10 has an invalid length. [ 2384.291464][ T2456] netlink: 'syz.1.7506': attribute type 10 has an invalid length. [ 2385.247025][ T2453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2385.705051][ T2476] ip6t_srh: unknown srh invflags 4000 [ 2386.619178][ T2486] fuse: Unknown parameter 'group_i00000000000000000000' [ 2386.831816][ T2493] netlink: 'syz.2.7516': attribute type 10 has an invalid length. [ 2387.337266][ T483] Bluetooth: hci3: command 0x0406 tx timeout [ 2387.945715][ T2509] netlink: 'syz.2.7517': attribute type 10 has an invalid length. [ 2387.952372][ T2510] netlink: 'syz.0.7518': attribute type 10 has an invalid length. [ 2387.971038][ T2511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7519'. [ 2392.306956][ T2562] netlink: 'syz.2.7529': attribute type 10 has an invalid length. [ 2393.425527][T21158] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 2393.504070][ T2580] fuse: Unknown parameter 'group_i00000000000000000000' [ 2394.455541][ T2601] fuse: Bad value for 'user_id' [ 2394.460901][ T2602] netlink: 'syz.3.7537': attribute type 10 has an invalid length. [ 2394.464496][ T2601] fuse: Bad value for 'user_id' [ 2395.782347][ T2621] fuse: Unknown parameter 'group_id00000000000000000000' [ 2396.836553][ T2640] netlink: 'syz.1.7546': attribute type 10 has an invalid length. [ 2397.196706][T21158] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 2397.304023][ T2651] netlink: 'syz.3.7547': attribute type 10 has an invalid length. [ 2399.169910][ T2680] fuse: Bad value for 'fd' [ 2402.754307][T21158] Bluetooth: hci1: command 0x0406 tx timeout [ 2405.748867][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.756803][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.777895][ T2762] netlink: 'syz.0.7567': attribute type 10 has an invalid length. [ 2406.043107][ T2766] fuse: Bad value for 'fd' [ 2408.939923][ T2804] ip6t_srh: unknown srh invflags 4000 [ 2409.137412][ T2813] netlink: 'syz.2.7577': attribute type 10 has an invalid length. [ 2410.191339][ T2827] netlink: 'syz.1.7578': attribute type 10 has an invalid length. [ 2410.636995][ T2841] ip6t_srh: unknown srh invflags 4000 [ 2410.682465][ T2842] fuse: Bad value for 'fd' [ 2411.758417][ T2850] fuse: Bad value for 'user_id' [ 2411.760525][ T2850] fuse: Bad value for 'user_id' [ 2411.830117][ T2857] fuse: Bad value for 'rootmode' [ 2412.937257][ T483] Bluetooth: hci4: command 0x0406 tx timeout [ 2413.993470][ T2888] ip6t_srh: unknown srh invflags 4000 [ 2414.595650][ T2896] netlink: 'syz.2.7589': attribute type 10 has an invalid length. [ 2415.727219][ T2914] fuse: Bad value for 'user_id' [ 2415.729033][ T2914] fuse: Bad value for 'user_id' [ 2415.926487][ T2920] fuse: Bad value for 'fd' [ 2415.990188][T18638] bridge_slave_1: left allmulticast mode [ 2415.993319][T18638] bridge_slave_1: left promiscuous mode [ 2415.996356][T18638] bridge0: port 2(bridge_slave_1) entered disabled state [ 2416.007885][T18638] bridge_slave_0: left allmulticast mode [ 2416.010092][T18638] bridge_slave_0: left promiscuous mode [ 2416.012421][T18638] bridge0: port 1(bridge_slave_0) entered disabled state [ 2416.285691][ T2924] netlink: 'syz.1.7593': attribute type 10 has an invalid length. [ 2416.885636][T18638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2416.914708][T18638] bond_slave_0: left promiscuous mode [ 2416.920206][T18638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2416.923523][T18638] bond_slave_1: left promiscuous mode [ 2416.927009][T18638] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2416.931313][T18638] dummy0: left promiscuous mode [ 2416.933340][T18638] bond0 (unregistering): Released all slaves [ 2417.593033][ T2937] fuse: Bad value for 'rootmode' [ 2418.015335][ T2949] fuse: Bad value for 'fd' [ 2418.359328][T18638] hsr_slave_0: left promiscuous mode [ 2418.362897][T18638] hsr_slave_1: left promiscuous mode [ 2418.366599][T18638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2418.370304][T18638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2418.374729][T18638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2418.378729][T18638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2418.388286][T18638] veth1_macvtap: left promiscuous mode [ 2418.390705][T18638] veth0_macvtap: left promiscuous mode [ 2418.393654][T18638] veth1_vlan: left promiscuous mode [ 2418.396258][T18638] veth0_vlan: left promiscuous mode [ 2420.013774][T18638] team0 (unregistering): Port device team_slave_1 removed [ 2420.023043][T18638] team0 (unregistering): Port device team_slave_0 removed [ 2420.223011][ T2976] fuse: Bad value for 'rootmode' [ 2420.392338][ T2987] ip6t_srh: unknown srh invflags 4000 [ 2420.505867][ T2990] ip6t_srh: unknown srh invflags 4000 [ 2421.555682][T18638] IPVS: stop unused estimator thread 0... [ 2422.897754][ T3027] ip6t_srh: unknown srh invflags 4000 [ 2422.994829][ T3036] netlink: 'syz.3.7612': attribute type 10 has an invalid length. [ 2424.234366][ T3052] netlink: 'syz.1.7613': attribute type 10 has an invalid length. [ 2425.263820][ T3063] netlink: 'syz.2.7618': attribute type 10 has an invalid length. [ 2427.380802][ T3085] ip6t_srh: unknown srh invflags 4000 [ 2430.338998][ T3135] netlink: 'syz.0.7632': attribute type 10 has an invalid length. [ 2430.580579][ T3137] fuse: Bad value for 'rootmode' [ 2430.595859][ T3140] fuse: Unknown parameter 'use0x0000000000000004' [ 2431.075857][ T3146] fuse: Unknown parameter 'use0x0000000000000004' [ 2432.206139][ T3156] fuse: Bad value for 'rootmode' [ 2432.668494][ T3164] netlink: 'syz.3.7638': attribute type 10 has an invalid length. [ 2433.584572][ T3180] ip6t_srh: unknown srh invflags 4000 [ 2433.757379][ T3183] netlink: 'syz.1.7641': attribute type 10 has an invalid length. [ 2437.523493][ T3226] fuse: Bad value for 'fd' [ 2437.601466][ T3229] netlink: 'syz.2.7654': attribute type 10 has an invalid length. [ 2437.684416][ T3231] fuse: Bad value for 'rootmode' [ 2438.072098][ T3240] netlink: 'syz.1.7656': attribute type 10 has an invalid length. [ 2439.220088][ T3253] netlink: 'syz.1.7660': attribute type 10 has an invalid length. [ 2439.703808][ T3260] ip6t_srh: unknown srh invflags 4000 [ 2440.720136][ T3267] fuse: Unknown parameter 'user_i0x0000000000000004' [ 2440.748814][ T3272] fuse: Unknown parameter 'user_i0x0000000000000004' [ 2442.279753][ T3289] netlink: 'syz.2.7665': attribute type 10 has an invalid length. [ 2442.489660][ T3295] ip6t_srh: unknown srh invflags 4000 [ 2443.669480][ T3316] ip6t_srh: unknown srh invflags 4000 [ 2444.930947][ T3329] netlink: 'syz.0.7676': attribute type 10 has an invalid length. [ 2445.342737][ T3325] fuse: Bad value for 'fd' [ 2446.339845][ T3336] netlink: 'syz.2.7677': attribute type 10 has an invalid length. [ 2446.636540][ T3342] ip6t_srh: unknown srh invflags 4000 [ 2448.635520][ T3374] netlink: 'syz.2.7682': attribute type 10 has an invalid length. [ 2450.420815][ T3415] ip6t_srh: unknown srh invflags 4000 [ 2451.394397][ T3425] fuse: Bad value for 'fd' [ 2452.058653][ T3432] fuse: Unknown parameter 'use0x0000000000000004' [ 2453.071252][ T3447] fuse: Unknown parameter 'user_i0x0000000000000004' [ 2453.336793][ T3454] netlink: 'syz.3.7699': attribute type 10 has an invalid length. [ 2454.520553][ T3469] ip6t_srh: unknown srh invflags 4000 [ 2455.551384][ T3480] netlink: 'syz.0.7705': attribute type 10 has an invalid length. [ 2455.954683][ T3490] ip6t_srh: unknown srh invflags 4000 [ 2456.894391][ T3499] ip6t_srh: unknown srh invflags 4000 [ 2457.668397][ T3506] fuse: Unknown parameter 'user_id0x0000000000000004' [ 2457.744768][ T3502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7710'. [ 2457.763179][ T3502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2457.835535][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2458.606088][ T3520] netlink: 'syz.1.7713': attribute type 10 has an invalid length. [ 2459.620853][ T3526] netlink: 'syz.3.7714': attribute type 10 has an invalid length. [ 2459.975536][ T3535] ip6t_srh: unknown srh invflags 4000 [ 2460.760331][ T3538] netlink: 'syz.0.7717': attribute type 10 has an invalid length. [ 2460.985980][ T3544] ip6t_srh: unknown srh invflags 4000 [ 2461.300936][ T3549] ip6t_srh: unknown srh invflags 4000 [ 2461.544801][ T3551] fuse: Unknown parameter 'user_id0x0000000000000004' [ 2461.985376][ T3554] fuse: Bad value for 'fd' [ 2462.310078][ T3566] ip6t_srh: unknown srh invflags 4000 [ 2463.492177][ T3575] ip6t_srh: unknown srh invflags 4000 [ 2464.083066][ T3579] netlink: 'syz.1.7725': attribute type 10 has an invalid length. [ 2464.798940][ T3590] ip6t_srh: unknown srh invflags 4000 [ 2465.876523][ T3605] netlink: 'syz.3.7729': attribute type 10 has an invalid length. [ 2465.901048][ T3606] netlink: 'syz.0.7732': attribute type 10 has an invalid length. [ 2467.064594][ T3613] fuse: Bad value for 'fd' [ 2467.183298][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.185936][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.762483][ T3624] ip6t_srh: unknown srh invflags 4000 [ 2468.399829][ T3630] ip6t_srh: unknown srh invflags 4000 [ 2468.829558][ T3635] ip6t_srh: unknown srh invflags 4000 [ 2469.307887][ T3642] ip6t_srh: unknown srh invflags 4000 [ 2469.744472][ T3647] fuse: Unknown parameter 'user_id0x0000000000000004' [ 2470.430575][ T3656] netlink: 'syz.3.7743': attribute type 10 has an invalid length. [ 2471.438030][ T3668] ip6t_srh: unknown srh invflags 4000 [ 2472.694947][ T3682] ip6t_srh: unknown srh invflags 4000 [ 2472.804323][ T3684] fuse: Unknown parameter '00000000000000000004' [ 2473.342827][ T3696] netlink: 'syz.2.7750': attribute type 10 has an invalid length. [ 2473.348864][ T3693] fuse: Bad value for 'rootmode' [ 2473.456531][ T3699] ip6t_srh: unknown srh invflags 4000 [ 2476.400692][ T3718] fuse: Unknown parameter '00000000000000000004' [ 2476.594851][ T3725] ip6t_srh: unknown srh invflags 4000 [ 2477.484600][ T3729] fuse: Unknown parameter '00000000000000000004' [ 2477.564020][ T3732] netlink: 'syz.1.7760': attribute type 10 has an invalid length. [ 2477.883137][ T3740] ip6t_srh: unknown srh invflags 4000 [ 2478.974943][ T3747] ip6t_srh: unknown srh invflags 4000 [ 2479.315199][ T3754] fuse: Bad value for 'fd' [ 2480.705002][ T3770] ip6t_srh: unknown srh invflags 4000 [ 2481.085071][ T3774] netlink: 'syz.2.7766': attribute type 10 has an invalid length. [ 2481.803463][ T3780] netlink: 'syz.3.7769': attribute type 10 has an invalid length. [ 2482.731261][ T3787] ip6t_srh: unknown srh invflags 4000 [ 2482.861181][ T3790] fuse: Unknown parameter 'use0x0000000000000004' [ 2483.182943][ T3796] ip6t_srh: unknown srh invflags 4000 [ 2483.511709][ T3799] netlink: 'syz.0.7773': attribute type 10 has an invalid length. [ 2485.675629][ T3816] netlink: 'syz.2.7777': attribute type 10 has an invalid length. [ 2485.728490][ T3817] ip6t_srh: unknown srh invflags 4000 [ 2486.261583][ T3824] ip6t_srh: unknown srh invflags 4000 [ 2486.980710][ T3828] netlink: 'syz.3.7779': attribute type 10 has an invalid length. [ 2487.045466][ T3829] fuse: Unknown parameter 'user_i0x0000000000000004' [ 2487.353906][ T3835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7780'. [ 2487.431883][ T3838] fuse: Unknown parameter 'fd00000000000000000004' [ 2487.765553][ T3841] fuse: Unknown parameter '00000000000000000004' [ 2488.961628][ T3857] fuse: Bad value for 'fd' [ 2488.963275][ T3858] netlink: 'syz.3.7784': attribute type 10 has an invalid length. [ 2489.040449][ T3860] overlayfs: failed to resolve './bus': -2 [ 2489.818633][ T3870] ip6t_srh: unknown srh invflags 4000 [ 2492.014427][ T3880] fuse: Unknown parameter 'fd00000000000000000004' [ 2492.098912][ T3882] netlink: 'syz.3.7789': attribute type 10 has an invalid length. [ 2492.222485][ T3886] fuse: Unknown parameter '00000000000000000004' [ 2493.862006][ T3910] ip6t_srh: unknown srh invflags 4000 [ 2494.573497][ T3917] netlink: 'syz.1.7796': attribute type 10 has an invalid length. [ 2494.978046][ T3921] fuse: Unknown parameter 'user_i0x0000000000000004' [ 2494.996218][ T3923] fuse: Unknown parameter 'user_id0x0000000000000004' [ 2495.393928][ T3931] netlink: 'syz.3.7797': attribute type 10 has an invalid length. [ 2496.426571][ T3941] ip6t_srh: unknown srh invflags 4000 [ 2496.440520][ T3942] netlink: 'syz.3.7801': attribute type 10 has an invalid length. [ 2497.107999][ T3946] fuse: Unknown parameter '00000000000000000004' [ 2498.216395][ T3958] ip6t_srh: unknown srh invflags 4000 [ 2498.588864][ T3964] ip6t_srh: unknown srh invflags 4000 [ 2498.669308][ T3966] fuse: Unknown parameter '00000000000000000004' [ 2501.076833][ T3986] netlink: 'syz.0.7810': attribute type 10 has an invalid length. [ 2503.438735][ T4021] fuse: Unknown parameter '00000000000000000004' [ 2503.803157][ T4025] fuse: Bad value for 'fd' [ 2505.338963][ T4055] netlink: 'syz.1.7821': attribute type 10 has an invalid length. [ 2506.879987][ T4079] ip6t_srh: unknown srh invflags 4000 [ 2507.417368][ T4081] fuse: Unknown parameter 'fd00000000000000000004' [ 2507.774893][ T4092] ip6t_srh: unknown srh invflags 4000 [ 2507.902100][ T4095] ip6t_srh: unknown srh invflags 4000 [ 2508.907470][ T4105] overlayfs: failed to resolve './bus': -2 [ 2510.876457][ T4138] netlink: 'syz.1.7839': attribute type 10 has an invalid length. [ 2510.964664][ T4140] netlink: 'syz.2.7836': attribute type 10 has an invalid length. [ 2514.053640][ T4180] netlink: 'syz.0.7845': attribute type 10 has an invalid length. [ 2514.868720][ T4194] fuse: Unknown parameter 'fd00000000000000000004' [ 2515.712336][ T4203] netlink: 'syz.0.7850': attribute type 10 has an invalid length. [ 2515.729711][ T4203] bond0: (slave dummy0): Releasing backup interface [ 2515.732983][ T4203] dummy0: left promiscuous mode [ 2517.841324][ T4240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7852'. [ 2517.994576][ T4244] netlink: 'syz.3.7854': attribute type 10 has an invalid length. [ 2518.797434][T28657] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2518.967231][T28657] usb 5-1: Using ep0 maxpacket: 8 [ 2518.978802][T28657] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2518.982643][T28657] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2518.989298][T28657] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2518.997523][T28657] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2519.008073][T28657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.059138][T28657] usb 5-1: config 0 descriptor?? [ 2519.585038][T28657] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 2519.587664][T28657] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 2519.590148][T28657] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 2519.592513][T28657] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 2519.594917][T28657] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 2519.704829][ T4264] netlink: 'syz.2.7859': attribute type 10 has an invalid length. [ 2520.543135][T28657] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 2521.663384][T28657] usb 5-1: USB disconnect, device number 12 [ 2521.971993][ T4303] netlink: 'syz.1.7865': attribute type 10 has an invalid length. [ 2522.113571][ T4305] ip6t_srh: unknown srh invflags 4000 [ 2523.092005][ T4313] netlink: 'syz.3.7866': attribute type 10 has an invalid length. [ 2525.135573][ T4340] netlink: 'syz.1.7874': attribute type 10 has an invalid length. [ 2525.860586][ T4348] overlayfs: missing 'lowerdir' [ 2526.583230][ T4363] overlayfs: missing 'lowerdir' [ 2527.853979][ T4377] netlink: 'syz.0.7881': attribute type 10 has an invalid length. [ 2528.621195][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.623607][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 2528.767243][ T4382] overlayfs: missing 'lowerdir' [ 2528.837234][T21696] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 2528.997151][T21696] usb 7-1: Using ep0 maxpacket: 8 [ 2529.001553][T21696] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2529.007570][T21696] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2529.015873][T21696] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2529.020253][T21696] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2529.026588][T21696] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.036432][T21696] usb 7-1: config 0 descriptor?? [ 2529.550543][T21696] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 2529.560706][T21696] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 2529.565554][T21696] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 2529.568607][T21696] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 2529.571722][T21696] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 2529.575421][T21696] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2529.645698][ T4392] netlink: 'syz.3.7885': attribute type 10 has an invalid length. [ 2530.287705][ T4398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7887'. [ 2530.528992][T21696] usb 7-1: USB disconnect, device number 111 [ 2531.568935][ T4428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7889'. [ 2532.057657][ T5819] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2532.077482][T28657] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2532.090863][ T4434] overlayfs: failed to resolve './bus': -2 [ 2532.217253][ T5819] usb 6-1: Using ep0 maxpacket: 8 [ 2532.517172][T13471] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 2532.652667][T28657] usb 5-1: Using ep0 maxpacket: 8 [ 2532.677241][T13471] usb 7-1: Using ep0 maxpacket: 8 [ 2532.681655][T13471] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2532.686424][T13471] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2532.690924][T13471] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2532.694288][T13471] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2532.698682][T13471] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.704792][T13471] usb 7-1: config 0 descriptor?? [ 2532.901088][T28657] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2532.939440][ T5819] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2532.943611][ T5819] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2532.957208][T28657] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2532.960337][ T5819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2532.962379][ T5819] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2532.965165][T28657] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2532.967325][T28657] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2532.970078][T28657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.973275][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.981245][ T5819] usb 6-1: config 0 descriptor?? [ 2532.983256][T28657] usb 5-1: config 0 descriptor?? [ 2533.035541][T13471] usbhid 7-1:0.0: can't add hid device: -71 [ 2533.039345][T13471] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2533.045156][T13471] usb 7-1: USB disconnect, device number 112 [ 2533.193810][ T4442] netlink: 'syz.3.7894': attribute type 10 has an invalid length. [ 2533.264673][T28657] usbhid 5-1:0.0: can't add hid device: -71 [ 2533.266727][T28657] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2533.287383][T28657] usb 5-1: USB disconnect, device number 13 [ 2533.479989][ T5819] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 2533.490371][ T5819] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 2533.496280][ T5819] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 2533.505552][ T5819] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 2533.508193][ T5819] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 2533.512366][ T5819] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2533.712891][ T610] usb 6-1: USB disconnect, device number 119 [ 2533.954071][ T4449] netlink: 'syz.2.7896': attribute type 10 has an invalid length. [ 2534.984079][ T4460] overlayfs: missing 'lowerdir' [ 2535.159543][ T4463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7897'. [ 2535.286112][ T4465] overlayfs: missing 'workdir' [ 2536.803526][ T4480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7902'. [ 2538.425349][ T4491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7906'. [ 2538.681520][ T4492] netlink: 'syz.3.7907': attribute type 10 has an invalid length. [ 2539.111123][ T4496] netlink: 'syz.0.7908': attribute type 10 has an invalid length. [ 2539.116139][ T4496] dummy0: entered promiscuous mode [ 2539.118802][ T4496] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2539.371402][ T4500] overlayfs: workdir and upperdir must reside under the same mount [ 2539.658570][ T4502] overlayfs: missing 'workdir' [ 2541.076944][ T4517] overlayfs: missing 'workdir' [ 2541.243736][ T4519] overlayfs: missing 'lowerdir' [ 2542.275902][ T4531] netlink: 'syz.1.7915': attribute type 10 has an invalid length. [ 2542.442623][ T4535] netlink: 'syz.0.7917': attribute type 10 has an invalid length. [ 2542.527243][ T5889] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 2542.687741][ T5889] usb 7-1: Using ep0 maxpacket: 8 [ 2542.701055][ T5889] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2542.710276][ T5889] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2542.714049][ T5889] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2542.717401][ T5889] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2542.720804][ T5889] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.740043][ T5889] usb 7-1: config 0 descriptor?? [ 2543.786705][ T4542] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2543.792334][ T4542] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2543.827000][ T5889] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 2543.831805][ T5889] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 2543.836068][ T5889] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 2544.916442][ T5889] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 2544.918986][ T5889] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 2544.933236][ T5889] mcp2221 0003:04D8:00DD.000F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2545.009608][ T5889] usb 7-1: USB disconnect, device number 113 [ 2545.765973][ T4561] netlink: 'syz.3.7922': attribute type 10 has an invalid length. [ 2546.003893][ T4561] bond0: (slave dummy0): Releasing backup interface [ 2546.020226][ T4561] dummy0: left promiscuous mode [ 2547.187533][ T4568] netlink: 'syz.1.7925': attribute type 10 has an invalid length. [ 2547.728460][ T4575] netlink: 'syz.0.7926': attribute type 10 has an invalid length. [ 2547.773654][ T4576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7927'. [ 2548.572379][ T4583] overlayfs: workdir and upperdir must reside under the same mount [ 2548.851410][ T4586] overlayfs: missing 'lowerdir' [ 2549.791983][ T4598] netlink: 'syz.1.7933': attribute type 10 has an invalid length. [ 2551.375121][ T4606] overlayfs: workdir and upperdir must reside under the same mount [ 2552.727918][ T4619] overlayfs: missing 'workdir' [ 2553.731785][ T4625] overlayfs: workdir and upperdir must reside under the same mount [ 2554.867711][ T4664] netlink: 'syz.2.7945': attribute type 10 has an invalid length. [ 2555.741646][ T4669] netlink: 'syz.0.7946': attribute type 10 has an invalid length. [ 2557.130643][ T4681] overlayfs: workdir and upperdir must reside under the same mount [ 2557.837616][ T4691] netlink: 'syz.1.7951': attribute type 10 has an invalid length. [ 2559.177351][T28657] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2559.330213][T28657] usb 5-1: Using ep0 maxpacket: 8 [ 2559.375350][ T4699] netlink: 'syz.1.7953': attribute type 10 has an invalid length. [ 2559.483668][T28657] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2559.485910][ T4702] overlayfs: workdir and upperdir must reside under the same mount [ 2559.487605][T28657] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2559.493330][T28657] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2559.494775][ T4704] overlayfs: workdir and upperdir must reside under the same mount [ 2559.495425][T28657] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2559.501973][T28657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2559.509174][T28657] usb 5-1: config 0 descriptor?? [ 2560.128589][T28657] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 2560.653570][T28657] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 2560.793941][T28657] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 2561.107029][ T4718] netlink: 'syz.3.7957': attribute type 10 has an invalid length. [ 2561.125254][ T4718] dummy0: entered promiscuous mode [ 2561.137336][ T4718] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2561.328972][T28657] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 2561.335590][T28657] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 2561.373889][T28657] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 2561.548564][T28657] usb 5-1: USB disconnect, device number 14 [ 2562.097278][T26924] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2562.130242][T28657] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2562.247221][ T5819] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 2562.277189][T28657] usb 5-1: Using ep0 maxpacket: 8 [ 2562.281419][T28657] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2562.286336][T28657] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2562.291022][T28657] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2562.293903][T28657] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2562.297205][T26924] usb 6-1: Using ep0 maxpacket: 8 [ 2562.298270][T28657] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.305574][T28657] usb 5-1: config 0 descriptor?? [ 2562.309156][T26924] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2562.314181][T26924] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2562.318557][T26924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2562.321626][T26924] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2562.325556][T26924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.361313][T26924] usb 6-1: config 0 descriptor?? [ 2562.397239][ T5819] usb 7-1: Using ep0 maxpacket: 8 [ 2562.402334][ T5819] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2562.407042][ T5819] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2562.411289][ T5819] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2562.414190][ T5819] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2562.418484][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.427824][ T5819] usb 7-1: config 0 descriptor?? [ 2562.796467][T28657] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 2562.801783][T28657] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 2562.805104][T28657] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 2562.808501][T28657] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 2562.812209][T28657] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 2562.816365][T28657] mcp2221 0003:04D8:00DD.0011: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 2562.918617][ T5819] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2563.005582][T21696] usb 5-1: USB disconnect, device number 15 [ 2563.105342][ T610] usb 7-1: USB disconnect, device number 114 [ 2563.269088][T26924] mcp2221 0003:04D8:00DD.0013: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2563.403326][ T4738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7962'. [ 2563.467200][ T5819] usb 6-1: USB disconnect, device number 120 [ 2563.923475][ T4742] netlink: 'syz.0.7963': attribute type 10 has an invalid length. [ 2564.092068][ T4744] overlayfs: workdir and upperdir must reside under the same mount [ 2564.402282][ T4749] overlayfs: workdir and upperdir must reside under the same mount [ 2565.374037][ T4764] netlink: 'syz.1.7970': attribute type 10 has an invalid length. [ 2565.409279][ T4763] overlayfs: workdir and upperdir must reside under the same mount [ 2566.495245][ T4775] netlink: 'syz.2.7972': attribute type 10 has an invalid length. [ 2566.847735][ T4779] overlayfs: workdir and upperdir must reside under the same mount [ 2567.516930][ T4787] overlayfs: workdir and upperdir must reside under the same mount [ 2567.944870][ T4793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7976'. [ 2568.368211][ T4801] overlayfs: workdir and upperdir must reside under the same mount [ 2569.372258][ T4815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7980'. [ 2569.618813][ T4820] netlink: 'syz.2.7981': attribute type 10 has an invalid length. [ 2570.757179][ T1425] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2570.774459][ T4856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7990'. [ 2570.941295][ T1425] usb 5-1: Using ep0 maxpacket: 8 [ 2571.795167][ T1425] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2571.825599][ T1425] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2571.833086][ T1425] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2571.835986][ T1425] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2571.846988][ T1425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2571.853273][ T1425] usb 5-1: config 0 descriptor?? [ 2571.968604][ T4869] overlayfs: workdir and upperdir must reside under the same mount [ 2572.434274][ T1425] hid_parser_main: 10 callbacks suppressed [ 2572.434291][ T1425] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 2572.446881][ T1425] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 2572.451843][ T1425] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 2572.454049][ T1425] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 2572.459293][ T1425] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 2572.462118][ T1425] mcp2221 0003:04D8:00DD.0014: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 2572.905717][ T1425] usb 5-1: USB disconnect, device number 16 [ 2574.009592][ T4891] netlink: 'syz.2.7999': attribute type 10 has an invalid length. [ 2574.034290][ T4892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7998'. [ 2575.138549][ T4898] netlink: 'syz.0.8000': attribute type 10 has an invalid length. [ 2575.253598][ T4884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7997'. [ 2575.257992][ T4884] bridge_slave_1: left allmulticast mode [ 2575.260611][ T4884] bridge_slave_1: left promiscuous mode [ 2575.263197][ T4884] bridge0: port 2(bridge_slave_1) entered disabled state [ 2575.948329][ T4884] bridge_slave_0: left allmulticast mode [ 2575.955220][ T4884] bridge_slave_0: left promiscuous mode [ 2575.959213][ T4884] bridge0: port 1(bridge_slave_0) entered disabled state [ 2576.656560][ T4917] netlink: 'syz.0.8007': attribute type 10 has an invalid length. [ 2576.807175][T31190] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 2576.967248][T31190] usb 7-1: Using ep0 maxpacket: 8 [ 2576.971203][T31190] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2576.974990][T31190] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2576.981031][T31190] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2576.983434][T31190] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2577.002534][T31190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2577.022726][T31190] usb 7-1: config 0 descriptor?? [ 2577.595264][ T4945] netlink: 'syz.1.8008': attribute type 10 has an invalid length. [ 2577.696859][T31190] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 2577.712552][T31190] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 2577.728194][T31190] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 2577.740666][T31190] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 2577.756021][T31190] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 2577.767782][T31190] mcp2221 0003:04D8:00DD.0015: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2577.896151][ T4537] usb 7-1: USB disconnect, device number 115 [ 2578.176952][ T4950] netlink: 'syz.3.8010': attribute type 10 has an invalid length. [ 2579.640023][ T4959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8011'. [ 2579.827807][ T4967] netlink: 'syz.3.8013': attribute type 10 has an invalid length. [ 2581.036109][ T4976] netlink: 'syz.1.8016': attribute type 10 has an invalid length. [ 2581.183747][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8015'. [ 2581.187507][ T4977] bridge_slave_1: left allmulticast mode [ 2581.189852][ T4977] bridge_slave_1: left promiscuous mode [ 2581.193017][ T4977] bridge0: port 2(bridge_slave_1) entered disabled state [ 2581.286531][ T4981] overlayfs: workdir and upperdir must reside under the same mount [ 2582.939394][ T4977] bridge_slave_0: left allmulticast mode [ 2583.153254][ T4977] bridge_slave_0: left promiscuous mode [ 2583.199816][ T4977] bridge0: port 1(bridge_slave_0) entered disabled state [ 2586.335188][ T5036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8024'. [ 2586.339723][ T5036] bridge_slave_1: left allmulticast mode [ 2586.342499][ T5036] bridge_slave_1: left promiscuous mode [ 2586.345638][ T5036] bridge0: port 2(bridge_slave_1) entered disabled state [ 2587.075299][ T5036] bridge_slave_0: left allmulticast mode [ 2587.080162][ T5036] bridge_slave_0: left promiscuous mode [ 2587.087805][ T5036] bridge0: port 1(bridge_slave_0) entered disabled state [ 2589.500682][ T5056] netlink: 'syz.0.8028': attribute type 10 has an invalid length. [ 2589.936952][ T5070] netlink: 'syz.2.8029': attribute type 10 has an invalid length. [ 2590.096082][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.157193][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.097318][ T5068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8030'. [ 2591.665562][ T5080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8032'. [ 2592.771114][ T5085] netlink: 'syz.1.8034': attribute type 10 has an invalid length. [ 2593.782887][ T5103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8037'. [ 2595.100863][ T5089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8035'. [ 2596.230628][ T5152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8042'. [ 2596.493986][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8043'. [ 2596.498451][ T5147] bridge_slave_1: left allmulticast mode [ 2596.501030][ T5147] bridge_slave_1: left promiscuous mode [ 2596.503806][ T5147] bridge0: port 2(bridge_slave_1) entered disabled state [ 2596.518712][ T5147] bridge_slave_0: left allmulticast mode [ 2596.521098][ T5147] bridge_slave_0: left promiscuous mode [ 2596.523413][ T5147] bridge0: port 1(bridge_slave_0) entered disabled state [ 2597.503381][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8046'. [ 2598.167991][ T368] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2598.327376][ T368] usb 6-1: Using ep0 maxpacket: 8 [ 2598.335735][ T368] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2598.343574][ T368] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2598.350929][ T368] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2598.358927][ T368] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2598.368394][ T368] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2598.439088][ T368] usb 6-1: config 0 descriptor?? [ 2599.337527][ T368] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 2599.364379][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8050'. [ 2600.361978][ T368] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 2600.895357][ T368] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 2600.919420][ T368] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 2600.921719][ T368] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 2600.926534][ T368] mcp2221 0003:04D8:00DD.0016: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2601.006983][ T368] usb 6-1: USB disconnect, device number 121 [ 2601.066795][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8049'. [ 2601.495934][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8053'. [ 2602.781488][ T5206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8054'. [ 2602.787348][ T368] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2602.939640][ T5208] netlink: 'syz.2.8056': attribute type 10 has an invalid length. [ 2603.087211][ T368] usb 5-1: Using ep0 maxpacket: 8 [ 2603.094419][ T368] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2603.102938][ T368] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2603.111694][ T368] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2603.114009][ T368] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2603.119721][ T368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.125089][ T368] usb 5-1: config 0 descriptor?? [ 2603.948528][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8058'. [ 2604.865978][ T368] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 2604.967357][ T368] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 2604.969722][ T368] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 2604.971980][ T368] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 2604.974135][ T368] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 2604.976675][ T368] mcp2221 0003:04D8:00DD.0017: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 2605.092070][ T368] usb 5-1: USB disconnect, device number 17 [ 2605.324685][ T5224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8060'. [ 2605.411215][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8061'. [ 2607.539727][ T5249] netlink: 'syz.2.8067': attribute type 10 has an invalid length. [ 2608.682789][ T5268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8069'. [ 2609.625594][ T5274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8075'. [ 2611.018146][ T5302] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8079'. [ 2611.757270][T31190] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2611.908097][ T5318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8085'. [ 2612.330804][T31190] usb 6-1: Using ep0 maxpacket: 8 [ 2612.746756][ T5324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8086'. [ 2612.912282][T31190] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2612.915880][T31190] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2612.918962][T31190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2612.921032][T31190] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2612.923800][T31190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2612.928015][T31190] usb 6-1: config 0 descriptor?? [ 2613.394126][T31190] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 2613.396473][T31190] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 2613.398798][T31190] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 2613.400784][T31190] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 2613.403010][T31190] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 2613.405540][T31190] mcp2221 0003:04D8:00DD.0018: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2613.632560][T21696] usb 6-1: USB disconnect, device number 122 [ 2613.718358][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8090'. [ 2616.043146][ T5370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8099'. [ 2616.889880][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8092'. [ 2617.659643][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8102'. [ 2618.427132][ T5390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8103'. [ 2619.186167][ T5400] netlink: 'syz.2.8106': attribute type 10 has an invalid length. [ 2619.289783][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8107'. [ 2620.336501][ T5411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8108'. [ 2620.415673][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8109'. [ 2621.008843][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8111'. [ 2623.064924][ T5434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8115'. [ 2624.531590][ T5449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8117'. [ 2629.289421][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8129'. [ 2629.956117][ T5526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8131'. [ 2631.888014][ T5560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8138'. [ 2632.436307][ T5564] netlink: 'syz.2.8139': attribute type 10 has an invalid length. [ 2634.442661][ T5596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8145'. [ 2634.807791][ T5604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8147'. [ 2635.463639][ T5617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8149'. [ 2636.337211][ T5189] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 2636.362001][ T5634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8153'. [ 2636.517246][ T5189] usb 7-1: Using ep0 maxpacket: 8 [ 2636.524796][ T5189] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2636.587675][ T5189] usb 7-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2636.660223][ T5189] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2636.666514][ T5189] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2636.809411][ T5189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2636.820433][ T5189] usb 7-1: config 0 descriptor?? [ 2636.842207][ T5189] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2637.130276][ T5644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8155'. [ 2638.468019][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8160'. [ 2639.322643][T28657] usb 7-1: USB disconnect, device number 116 [ 2639.356645][ T5689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8164'. [ 2640.488739][ T5704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8167'. [ 2641.003935][ T5722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8169'. [ 2642.011794][ T5737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8173'. [ 2642.147180][ T5531] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 2642.297244][ T5531] usb 7-1: Using ep0 maxpacket: 8 [ 2642.301823][ T5531] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2642.305265][ T5531] usb 7-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2642.310342][ T5531] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2642.312835][ T5531] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2642.315883][ T5531] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2642.326749][ T5531] usb 7-1: config 0 descriptor?? [ 2642.364103][ T5531] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2642.845556][ T5746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8176'. [ 2643.488026][ T5755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8179'. [ 2643.978412][ T5764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8180'. [ 2644.922423][T28657] usb 7-1: USB disconnect, device number 117 [ 2649.335424][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8193'. [ 2650.442515][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8191'. [ 2650.960164][ T5866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8198'. [ 2651.502228][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.504240][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 2654.266635][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8208'. [ 2657.270156][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8217'. [ 2658.268269][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8220'. [ 2659.845320][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8225'. [ 2660.083140][ T5999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8226'. [ 2663.202760][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8233'. [ 2663.728411][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8237'. [ 2664.930712][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8239'. [ 2666.347400][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8245'. [ 2667.882548][ T6105] netlink: 'syz.1.8249': attribute type 10 has an invalid length. [ 2667.992340][ T6107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8248'. [ 2668.994673][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8252'. [ 2670.197211][ T3284] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2670.367193][ T3284] usb 6-1: Using ep0 maxpacket: 8 [ 2670.372114][ T3284] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2670.376200][ T3284] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2670.380517][ T3284] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2670.383273][ T3284] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2670.387398][ T3284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2670.398759][ T3284] usb 6-1: config 0 descriptor?? [ 2671.079174][ T3284] usbhid 6-1:0.0: can't add hid device: -71 [ 2671.084340][ T3284] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2671.092027][ T3284] usb 6-1: USB disconnect, device number 123 [ 2672.036482][ T6160] netlink: 'syz.1.8260': attribute type 10 has an invalid length. [ 2674.048456][T13471] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2674.203174][T13471] usb 5-1: Using ep0 maxpacket: 8 [ 2674.217330][T13471] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2674.225060][T13471] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2674.229713][T13471] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2674.232546][T13471] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2674.237325][T13471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2674.245075][T13471] usb 5-1: config 0 descriptor?? [ 2674.727574][T13471] usbhid 5-1:0.0: can't add hid device: -71 [ 2674.729575][T13471] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2674.737790][T13471] usb 5-1: USB disconnect, device number 18 [ 2675.105191][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8269'. [ 2675.752541][ T6221] netlink: 'syz.0.8272': attribute type 10 has an invalid length. [ 2679.510006][ T6278] netlink: 'syz.3.8283': attribute type 10 has an invalid length. [ 2679.830913][ T6282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8281'. [ 2681.159047][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8287'. [ 2683.914038][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8293'. [ 2684.426203][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8294'. [ 2685.057797][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8296'. [ 2685.392077][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8297'. [ 2686.684301][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8298'. [ 2687.517390][ T368] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2687.667148][ T368] usb 6-1: Using ep0 maxpacket: 8 [ 2687.670255][ T368] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2687.673748][ T368] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2687.676971][ T368] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2687.679617][ T368] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2687.682481][ T368] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2687.688697][ T368] usb 6-1: config 0 descriptor?? [ 2688.168001][ T368] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 2688.172117][ T368] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 2688.174413][ T368] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 2688.176638][ T368] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 2688.179468][ T368] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 2688.182394][ T368] mcp2221 0003:04D8:00DD.0019: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2688.362623][ T368] usb 6-1: USB disconnect, device number 124 [ 2689.491763][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8308'. [ 2690.411290][ T6415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8311'. [ 2691.148991][ T6425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8313'. [ 2691.987229][ T4537] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2692.139711][ T4537] usb 6-1: Using ep0 maxpacket: 8 [ 2692.143905][ T4537] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2692.148656][ T4537] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2692.160422][ T4537] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2692.166110][ T4537] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2692.178062][ T4537] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2692.182580][ T4537] usb 6-1: config 0 descriptor?? [ 2692.960726][ T4537] usbhid 6-1:0.0: can't add hid device: -71 [ 2692.985741][ T4537] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2693.116384][ T4537] usb 6-1: USB disconnect, device number 125 [ 2694.194880][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8315'. [ 2694.619085][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8323'. [ 2695.689671][ T6488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8326'. [ 2696.027214][T31190] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 2696.217258][T31190] usb 7-1: Using ep0 maxpacket: 8 [ 2696.223012][T31190] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2696.242832][T31190] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2696.251816][T31190] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2696.257313][T31190] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2696.263839][T31190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2696.275473][T31190] usb 7-1: config 0 descriptor?? [ 2696.811168][T31190] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 2696.813863][T31190] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 2696.816077][T31190] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 2696.884538][T31190] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 2696.888024][T31190] mcp2221 0003:04D8:00DD.001A: unknown main item tag 0x0 [ 2696.894877][T31190] mcp2221 0003:04D8:00DD.001A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2697.020082][T31190] usb 7-1: USB disconnect, device number 118 [ 2698.676929][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8338'. [ 2700.489846][ T6552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8341'. [ 2700.892310][ T6555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8342'. [ 2700.981872][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8343'. [ 2702.907217][ T5531] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2703.067256][ T5531] usb 6-1: Using ep0 maxpacket: 8 [ 2703.073926][ T5531] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2703.084960][ T5531] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2703.091971][ T5531] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2703.097406][ T5531] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2703.103597][ T5531] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2703.124111][ T5531] usb 6-1: config 0 descriptor?? [ 2703.964655][ T5531] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 2703.967521][ T5531] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 2703.969781][ T5531] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 2703.972078][ T5531] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 2703.978575][ T5531] mcp2221 0003:04D8:00DD.001B: unknown main item tag 0x0 [ 2703.993626][ T5531] mcp2221 0003:04D8:00DD.001B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2704.123960][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8349'. [ 2704.294496][ T5531] usb 6-1: USB disconnect, device number 126 [ 2705.123080][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8354'. [ 2705.581295][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8356'. [ 2712.948023][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 2712.953527][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 2715.016758][ T6767] fuse: Unknown parameter 'group_id00000000000000000000' [ 2717.701276][T21696] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2717.857222][T21696] usb 6-1: Using ep0 maxpacket: 8 [ 2717.876970][T21696] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2717.881646][T21696] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2717.885871][T21696] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2717.888932][T21696] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2717.892379][T21696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2717.897688][T21696] usb 6-1: config 0 descriptor?? [ 2718.375351][T21696] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 2718.384889][T21696] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 2718.388499][T21696] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 2718.391069][T21696] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 2718.397280][T21696] mcp2221 0003:04D8:00DD.001C: unknown main item tag 0x0 [ 2718.403992][T21696] mcp2221 0003:04D8:00DD.001C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2718.567925][T21696] usb 6-1: USB disconnect, device number 127 [ 2719.227182][ T6838] netlink: 'syz.1.8402': attribute type 10 has an invalid length. [ 2721.957154][ T5819] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2722.107122][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 2722.111989][ T5819] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2722.117525][ T5819] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2722.120669][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2722.122851][ T5819] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2722.125853][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2722.130871][ T5819] usb 5-1: config 0 descriptor?? [ 2722.621237][ T5819] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 2722.630704][ T5819] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 2722.636472][ T5819] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 2722.643626][ T5819] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 2722.649433][ T5819] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 2722.654930][ T5819] mcp2221 0003:04D8:00DD.001D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 2722.822979][ T5819] usb 5-1: USB disconnect, device number 19 [ 2723.517896][ T4537] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2723.687157][ T4537] usb 6-1: Using ep0 maxpacket: 8 [ 2723.690612][ T4537] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2723.698838][ T4537] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2723.707958][ T4537] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2723.714181][ T4537] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2723.719319][ T4537] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2723.730895][ T4537] usb 6-1: config 0 descriptor?? [ 2724.194214][ T4537] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 2724.199789][ T4537] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 2724.202443][ T4537] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 2724.204653][ T4537] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 2724.206919][ T4537] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 2724.210103][ T4537] mcp2221 0003:04D8:00DD.001E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2724.414358][ T368] usb 6-1: USB disconnect, device number 2 [ 2725.440666][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8422'. [ 2727.824264][ T6951] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8426'. [ 2729.149175][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8433'. [ 2732.176429][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8443'. [ 2732.552953][ T7042] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8444'. [ 2732.580549][ T7048] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8445'. [ 2732.727193][ T368] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2732.877173][ T368] usb 5-1: Using ep0 maxpacket: 8 [ 2732.880658][ T368] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2732.884312][ T368] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2732.894892][ T368] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2732.902092][ T368] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2732.910943][ T368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2732.926278][ T368] usb 5-1: config 0 descriptor?? [ 2733.412636][ T368] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 2733.415438][ T368] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 2733.422992][ T368] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 2733.426118][ T368] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 2733.429417][ T368] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 2733.433120][ T368] mcp2221 0003:04D8:00DD.001F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 2733.614121][T28113] usb 5-1: USB disconnect, device number 20 [ 2734.507233][ T4537] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 2734.657219][ T4537] usb 7-1: Using ep0 maxpacket: 8 [ 2734.661427][ T4537] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 2734.664903][ T4537] usb 7-1: config 0 has no interface number 0 [ 2734.668653][ T4537] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2734.672193][ T4537] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2734.675838][ T4537] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2734.679396][ T4537] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 50296, setting to 1024 [ 2734.682824][ T4537] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2734.686862][ T4537] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2734.691080][ T4537] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2734.703831][ T4537] usb 7-1: config 0 descriptor?? [ 2734.713776][ T7071] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2734.732077][ T4537] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2734.949340][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8454'. [ 2735.066609][ T368] usb 7-1: USB disconnect, device number 119 [ 2735.087236][ T368] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 2736.210176][ T7101] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8457'. [ 2737.514067][ T7124] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8463'. [ 2738.267235][ T368] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 2738.417311][ T368] usb 7-1: Using ep0 maxpacket: 8 [ 2738.420673][ T368] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2738.424456][ T368] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2738.427719][ T368] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2738.429792][ T368] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2738.433045][ T368] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2738.443395][ T368] usb 7-1: config 0 descriptor?? [ 2738.577272][T31190] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2738.620002][ T7141] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8468'. [ 2738.727229][T31190] usb 6-1: Using ep0 maxpacket: 8 [ 2738.731294][T31190] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2738.735171][T31190] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2738.739182][T31190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2738.741390][T31190] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2738.744837][T31190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2738.749029][T31190] usb 6-1: config 0 descriptor?? [ 2738.896856][ T368] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 2738.899290][ T368] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 2738.901595][ T368] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 2738.903877][ T368] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 2738.906351][ T368] mcp2221 0003:04D8:00DD.0020: unknown main item tag 0x0 [ 2738.909010][ T368] mcp2221 0003:04D8:00DD.0020: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2739.103893][T13471] usb 7-1: USB disconnect, device number 120 [ 2739.215732][T31190] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 2739.221467][T31190] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 2739.223908][T31190] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 2739.226131][T31190] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 2739.228439][T31190] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 2739.231262][T31190] mcp2221 0003:04D8:00DD.0021: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2739.422915][T31190] usb 6-1: USB disconnect, device number 3 [ 2739.717296][T28113] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2739.867260][T28113] usb 5-1: Using ep0 maxpacket: 8 [ 2739.870446][T28113] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2739.874329][T28113] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2739.877579][T28113] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2739.881022][T28113] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2739.884053][T28113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2739.888355][T28113] usb 5-1: config 0 descriptor?? [ 2739.939696][ T7151] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8470'. [ 2740.067893][ T7156] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8471'. [ 2740.396639][T28113] mcp2221 0003:04D8:00DD.0022: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 2740.592670][T13471] usb 5-1: USB disconnect, device number 21 [ 2740.983897][ T7171] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8474'. [ 2742.106116][ T7191] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8478'. [ 2743.197872][ T7207] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8481'. [ 2743.439644][ T7220] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8486'. [ 2743.446097][ T4537] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 2743.617196][ T4537] usb 7-1: Using ep0 maxpacket: 8 [ 2743.620369][ T4537] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2743.624278][ T4537] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2743.633078][ T4537] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2743.639632][ T4537] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2743.644963][ T4537] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2743.665046][ T4537] usb 7-1: config 0 descriptor?? [ 2744.173804][ T4537] hid_parser_main: 5 callbacks suppressed [ 2744.173822][ T4537] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 2744.180547][ T4537] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 2744.183124][ T4537] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 2744.189806][ T4537] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 2744.201274][ T4537] mcp2221 0003:04D8:00DD.0023: unknown main item tag 0x0 [ 2744.213836][ T4537] mcp2221 0003:04D8:00DD.0023: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2744.354948][T13471] usb 7-1: USB disconnect, device number 121 [ 2745.041620][ T7242] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8490'. [ 2746.856558][ T7266] netlink: 'syz.0.8494': attribute type 10 has an invalid length. [ 2746.919640][ T7267] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8495'. [ 2747.957179][ T3284] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2748.057445][ T4537] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 2748.107146][ T3284] usb 5-1: Using ep0 maxpacket: 8 [ 2748.112440][ T3284] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2748.122275][ T3284] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2748.130141][ T3284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2748.134403][ T3284] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2748.141841][ T3284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2748.155082][ T3284] usb 5-1: config 0 descriptor?? [ 2748.207165][ T4537] usb 7-1: Using ep0 maxpacket: 8 [ 2748.211404][ T4537] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2748.217409][ T4537] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2748.221546][ T4537] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2748.224300][ T4537] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2748.228738][ T4537] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2748.234925][ T4537] usb 7-1: config 0 descriptor?? [ 2748.615423][ T3284] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 2748.617777][ T3284] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 2748.619970][ T3284] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 2748.622209][ T3284] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 2748.624399][ T3284] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 2748.627590][ T3284] mcp2221 0003:04D8:00DD.0024: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 2748.690568][ T4537] mcp2221 0003:04D8:00DD.0025: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2748.814357][ T3284] usb 5-1: USB disconnect, device number 22 [ 2748.905617][ T4537] usb 7-1: USB disconnect, device number 122 [ 2750.146537][ T7309] netlink: 'syz.3.8506': attribute type 10 has an invalid length. [ 2750.245601][ T7310] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8505'. [ 2750.740098][ T7315] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8507'. [ 2751.317688][ T7324] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8508'. [ 2752.037181][T31190] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2752.207145][T31190] usb 6-1: Using ep0 maxpacket: 8 [ 2752.212376][T31190] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2752.220723][T31190] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2752.228920][T31190] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2752.233884][T31190] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2752.237950][T31190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2752.242857][T31190] usb 6-1: config 0 descriptor?? [ 2752.277931][ T7340] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8513'. [ 2752.700129][T31190] hid_parser_main: 5 callbacks suppressed [ 2752.700153][T31190] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 2752.712783][T31190] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 2752.718305][T31190] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 2752.723772][T31190] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 2752.729051][T31190] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 2752.735275][T31190] mcp2221 0003:04D8:00DD.0026: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2752.901095][T26924] usb 6-1: USB disconnect, device number 4 [ 2754.158757][T26924] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2754.308299][T26924] usb 6-1: Using ep0 maxpacket: 8 [ 2754.311796][T26924] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2754.315666][T26924] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2754.319003][T26924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2754.321281][T26924] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2754.327300][T26924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2754.331230][T26924] usb 6-1: config 0 descriptor?? [ 2754.798312][T26924] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 2754.806954][T26924] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 2754.813201][T26924] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 2754.817763][T26924] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 2754.822436][T26924] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 2754.827608][T26924] mcp2221 0003:04D8:00DD.0027: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2755.003079][ T368] usb 6-1: USB disconnect, device number 5 [ 2756.026409][ T7389] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8526'. [ 2757.298741][ T7405] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8530'. [ 2759.237178][ T5819] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 2759.387167][ T5819] usb 7-1: Using ep0 maxpacket: 8 [ 2759.390691][ T5819] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 2759.393654][ T5819] usb 7-1: config 0 has no interface number 0 [ 2759.395349][ T5819] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2759.399895][ T5819] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2759.405356][ T5819] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2759.410078][ T5819] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 50296, setting to 1024 [ 2759.414645][ T5819] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2759.419868][ T5819] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2759.423304][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2759.433430][ T5819] usb 7-1: config 0 descriptor?? [ 2759.435806][ T7433] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2759.446299][ T5819] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2759.694746][ T4537] usb 7-1: USB disconnect, device number 123 [ 2759.712313][ T4537] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 2760.587456][ T7456] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8539'. [ 2761.227437][ T7466] netlink: 'syz.0.8542': attribute type 10 has an invalid length. [ 2762.048617][ T7478] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8544'. [ 2762.145428][ T7482] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8545'. [ 2762.586118][ T7488] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8546'. [ 2763.397358][T28113] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2763.580693][T28113] usb 5-1: Using ep0 maxpacket: 8 [ 2763.587523][T28113] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 2763.590769][T28113] usb 5-1: config 0 has no interface number 0 [ 2763.597147][T28113] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2763.602871][T28113] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2763.617661][T28113] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2763.622734][T28113] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 50296, setting to 1024 [ 2763.628581][T28113] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2763.633318][T28113] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2763.637417][T28113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2763.642800][T28113] usb 5-1: config 0 descriptor?? [ 2763.646551][ T7497] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2763.656979][T28113] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2763.888578][T31190] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 2763.910481][T26924] usb 5-1: USB disconnect, device number 23 [ 2763.916727][T26924] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 2764.057304][T31190] usb 7-1: Using ep0 maxpacket: 8 [ 2764.064128][T31190] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2764.071672][T31190] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2764.078570][T31190] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2764.080557][T31190] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2764.087407][T31190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2764.097611][T31190] usb 7-1: config 0 descriptor?? [ 2764.553195][T31190] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 2764.555435][T31190] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 2764.557629][T31190] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 2764.559692][T31190] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 2764.561788][T31190] mcp2221 0003:04D8:00DD.0028: unknown main item tag 0x0 [ 2764.564224][T31190] mcp2221 0003:04D8:00DD.0028: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2764.730386][ T7513] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8552'. [ 2764.762000][ T5189] usb 7-1: USB disconnect, device number 124 [ 2765.141590][ T7518] netlink: 'syz.1.8553': attribute type 10 has an invalid length. [ 2765.710820][ T7524] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8554'. [ 2770.292742][ T7582] netlink: 'syz.0.8567': attribute type 10 has an invalid length. [ 2772.214759][ T7605] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8572'. [ 2774.378660][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.380759][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 2776.207177][ T712] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 2776.469093][ T712] usb 7-1: Using ep0 maxpacket: 8 [ 2776.472214][ T712] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 2776.474895][ T712] usb 7-1: config 0 has no interface number 0 [ 2776.476720][ T712] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2776.480297][ T712] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2776.483822][ T712] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2776.487437][ T712] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 50296, setting to 1024 [ 2776.490848][ T712] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2776.494853][ T712] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2776.497954][ T712] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2776.501717][ T712] usb 7-1: config 0 descriptor?? [ 2776.504521][ T7662] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2776.510153][ T712] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2776.727036][ T712] usb 7-1: USB disconnect, device number 125 [ 2776.737450][ T712] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 2777.295362][ T7677] netlink: 'syz.1.8589': attribute type 10 has an invalid length. [ 2781.404664][ T7732] netlink: 'syz.1.8602': attribute type 10 has an invalid length. [ 2784.966665][ T7784] netlink: 'syz.0.8614': attribute type 10 has an invalid length. [ 2788.241178][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8625'. [ 2789.049331][ T7842] netlink: 'syz.2.8627': attribute type 10 has an invalid length. [ 2792.139697][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8637'. [ 2795.954381][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8650'. [ 2798.501807][ T7975] netlink: 'syz.0.8657': attribute type 10 has an invalid length. [ 2799.405314][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8660'. [ 2810.838399][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8691'. [ 2812.497357][T28113] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 2812.677232][T28113] usb 7-1: Using ep0 maxpacket: 8 [ 2812.682054][T28113] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2812.686634][T28113] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2812.690604][T28113] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2812.693616][T28113] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2812.697939][T28113] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2812.707701][T28113] usb 7-1: config 0 descriptor?? [ 2813.175027][T28113] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 2813.177429][T28113] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 2813.180057][T28113] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 2813.182533][T28113] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 2813.185248][T28113] mcp2221 0003:04D8:00DD.0029: unknown main item tag 0x0 [ 2813.188469][T28113] mcp2221 0003:04D8:00DD.0029: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2813.373215][T28113] usb 7-1: USB disconnect, device number 126 [ 2835.818964][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 2835.821033][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 2841.167381][T31190] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 2841.317967][T31190] usb 7-1: Using ep0 maxpacket: 8 [ 2841.322268][T31190] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2841.326561][T31190] usb 7-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2841.332440][T31190] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2841.335479][T31190] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2841.341802][T31190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2841.348048][T31190] usb 7-1: config 0 descriptor?? [ 2841.355974][T31190] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2844.076698][T13471] usb 7-1: USB disconnect, device number 127 [ 2852.247469][ T5189] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2852.437148][ T5189] usb 7-1: Using ep0 maxpacket: 8 [ 2852.444324][ T5189] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 2852.448008][ T5189] usb 7-1: config 0 has no interface number 0 [ 2852.450010][ T5189] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2852.453435][ T5189] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2852.458211][ T5189] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2852.461730][ T5189] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2852.465864][ T5189] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2852.469058][ T5189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2852.473118][ T5189] usb 7-1: config 0 descriptor?? [ 2852.481219][ T5189] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2852.683795][ T5189] usb 7-1: USB disconnect, device number 2 [ 2852.706202][ T5189] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 2855.577194][ T5819] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2855.757164][ T5819] usb 6-1: Using ep0 maxpacket: 8 [ 2855.761656][ T5819] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2855.765274][ T5819] usb 6-1: config 0 has no interface number 0 [ 2855.768436][ T5819] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2855.772581][ T5819] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2855.777045][ T5819] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2855.782021][ T5819] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2855.787427][ T5819] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2855.790852][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2855.798445][ T5819] usb 6-1: config 0 descriptor?? [ 2855.819969][ T5819] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2856.028886][ T5819] usb 6-1: USB disconnect, device number 6 [ 2856.046023][ T5819] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2856.341987][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8848'. [ 2856.854132][ T5819] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2857.027349][ T5819] usb 6-1: Using ep0 maxpacket: 8 [ 2857.033035][ T5819] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2857.038345][ T5819] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2857.044139][ T5819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2857.047529][ T5819] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2857.051424][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2857.060235][ T5819] usb 6-1: config 0 descriptor?? [ 2857.088808][ T5819] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2858.062541][ T8786] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 2858.070475][ T8786] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 2859.622603][T26924] usb 6-1: USB disconnect, device number 7 [ 2859.861341][ T8806] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 2859.920416][ T8816] fuse: Bad value for 'fd' [ 2861.797289][ T5189] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2861.957899][ T5189] usb 6-1: Using ep0 maxpacket: 8 [ 2861.962315][ T5189] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 2861.972237][ T5189] usb 6-1: config 0 has no interface number 0 [ 2861.974455][ T5189] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2861.992998][ T5189] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2861.999216][ T5189] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2862.003701][ T5189] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2862.031020][ T5189] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2862.037844][ T5189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2862.046892][ T5189] usb 6-1: config 0 descriptor?? [ 2862.050678][ T8858] netlink: 'syz.3.8884': attribute type 10 has an invalid length. [ 2862.057275][ T5189] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2862.069439][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2862.076685][ T8858] team0: Port device netdevsim1 added [ 2862.272616][T21696] usb 6-1: USB disconnect, device number 8 [ 2862.285953][T21696] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 2862.461406][ T8870] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8887'. [ 2862.870080][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 2862.875938][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 2862.880354][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 2862.884622][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 2862.888374][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 2862.892824][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 2862.896775][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 2862.900425][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 2862.904804][ C2] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 2862.985019][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8890'. [ 2863.210834][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8891'. [ 2865.062058][ T8901] netlink: 'syz.1.8898': attribute type 10 has an invalid length. [ 2867.698352][ T8956] netlink: 'syz.3.8913': attribute type 4 has an invalid length. [ 2867.809563][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8915'. [ 2867.847711][ T8958] netlink: 'syz.2.8915': attribute type 10 has an invalid length. [ 2867.876224][ T8958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2867.891886][ T8958] team0: Port device netdevsim1 added [ 2868.753483][ T8972] netlink: 'syz.3.8919': attribute type 4 has an invalid length. [ 2869.380840][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8922'. [ 2869.733463][ T8995] netlink: 'syz.3.8926': attribute type 4 has an invalid length. [ 2870.102255][ T8999] netlink: 'syz.2.8927': attribute type 4 has an invalid length. [ 2870.458129][ T9003] netlink: 'syz.1.8928': attribute type 10 has an invalid length. [ 2872.328047][T26924] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2872.468181][T26924] usb 7-1: device descriptor read/64, error -71 [ 2872.737403][T26924] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2872.877297][T26924] usb 7-1: device descriptor read/64, error -71 [ 2872.954063][ T9043] netlink: 'syz.3.8941': attribute type 10 has an invalid length. [ 2873.077358][T26924] usb usb7-port1: attempt power cycle [ 2874.227249][T26924] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2874.247973][T26924] usb 7-1: device descriptor read/8, error -71 [ 2874.497377][T26924] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2874.528156][T26924] usb 7-1: device descriptor read/8, error -71 [ 2874.639124][T26924] usb usb7-port1: unable to enumerate USB device [ 2875.604056][ T9079] netlink: 'syz.1.8952': attribute type 10 has an invalid length. [ 2876.287386][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8955'. [ 2876.801383][ T9103] tipc: Started in network mode [ 2876.803588][ T9103] tipc: Node identity c68761c8d619, cluster identity 4711 [ 2876.806756][ T9103] tipc: Enabled bearer , priority 0 [ 2876.812194][ T9103] syzkaller0: entered promiscuous mode [ 2876.814551][ T9103] syzkaller0: entered allmulticast mode [ 2876.823785][ T9102] tipc: Resetting bearer [ 2876.845452][ T9102] tipc: Disabling bearer [ 2877.259056][ T9111] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8964'. [ 2877.507240][T31190] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 2877.659223][T31190] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2877.666127][T31190] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 2877.676222][T31190] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2877.682556][T31190] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 2877.687601][T31190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2877.697317][T31190] usb 7-1: config 0 descriptor?? [ 2877.701485][ T9111] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2878.114621][T31190] hid (null): unknown global tag 0xe [ 2878.117392][T31190] hid (null): unknown global tag 0xe [ 2878.135723][T31190] corsair-psu 0003:1B1C:1C1F.002A: unknown main item tag 0x3 [ 2878.141309][T31190] corsair-psu 0003:1B1C:1C1F.002A: unknown global tag 0xe [ 2878.145660][T31190] corsair-psu 0003:1B1C:1C1F.002A: item 0 1 1 14 parsing failed [ 2878.149574][T31190] corsair-psu 0003:1B1C:1C1F.002A: probe with driver corsair-psu failed with error -22 [ 2878.319239][T21696] usb 7-1: USB disconnect, device number 7 [ 2879.956058][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8982'. [ 2880.007893][ T5819] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2880.157146][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 2880.160867][ T5819] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2880.164296][ T5819] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2880.169430][ T5819] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 2880.173249][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2880.176503][ T5819] usb 5-1: Product: syz [ 2880.178798][ T5819] usb 5-1: Manufacturer: syz [ 2880.180960][ T5819] usb 5-1: SerialNumber: syz [ 2880.555482][ T5819] usb 5-1: USB disconnect, device number 24 [ 2880.576735][ T9165] udevd[9165]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 2880.643919][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8987'. [ 2881.119606][ T9199] fuse: Bad value for 'group_id' [ 2881.121267][ T9199] fuse: Bad value for 'group_id' [ 2881.182712][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8997'. [ 2881.525583][ T9218] syzkaller1: entered promiscuous mode [ 2881.529673][ T9218] syzkaller1: entered allmulticast mode [ 2881.648533][ T9225] fuse: Bad value for 'group_id' [ 2881.650267][ T9225] fuse: Bad value for 'group_id' [ 2881.832654][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9010'. [ 2882.638106][ T9251] fuse: Bad value for 'group_id' [ 2882.640403][ T9251] fuse: Bad value for 'group_id' [ 2882.960058][ T9258] [ 2882.961156][ T9258] ====================================================== [ 2882.963849][ T9258] WARNING: possible circular locking dependency detected [ 2882.966319][ T9258] syzkaller #0 Tainted: G L [ 2882.968958][ T9258] ------------------------------------------------------ [ 2882.971859][ T9258] syz.1.9020/9258 is trying to acquire lock: [ 2882.974174][ T9258] ffff888062348a68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 2882.978605][ T9258] [ 2882.978605][ T9258] but task is already holding lock: [ 2882.981415][ T9258] ffff888062348ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 2882.984971][ T9258] [ 2882.984971][ T9258] which lock already depends on the new lock. [ 2882.984971][ T9258] [ 2882.988921][ T9258] [ 2882.988921][ T9258] the existing dependency chain (in reverse order) is: [ 2882.992334][ T9258] [ 2882.992334][ T9258] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 2882.995286][ T9258] lock_acquire+0x1b9/0x370 [ 2882.997273][ T9258] lock_sock_nested+0x41/0xf0 [ 2882.999325][ T9258] smc_listen_out+0x1f5/0x4b0 [ 2883.001336][ T9258] smc_listen_work+0x767/0x50e0 [ 2883.003443][ T9258] process_one_work+0xa23/0x1940 [ 2883.005542][ T9258] worker_thread+0x5ef/0xe50 [ 2883.007524][ T9258] kthread+0x370/0x450 [ 2883.009311][ T9258] ret_from_fork+0x72b/0xd50 [ 2883.011309][ T9258] ret_from_fork_asm+0x1a/0x30 [ 2883.013438][ T9258] [ 2883.013438][ T9258] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 2883.017683][ T9258] check_prev_add+0xeb/0xe60 [ 2883.019694][ T9258] __lock_acquire+0x136c/0x1a40 [ 2883.021863][ T9258] lock_acquire+0x1b9/0x370 [ 2883.023864][ T9258] __flush_work+0x4de/0xcb0 [ 2883.025798][ T9258] cancel_work_sync+0xd1/0xf0 [ 2883.027796][ T9258] smc_clcsock_release+0x5f/0xe0 [ 2883.029777][ T9258] __smc_release+0x5c2/0x880 [ 2883.031694][ T9258] smc_close_non_accepted+0xda/0x200 [ 2883.034005][ T9258] smc_close_active+0x4ff/0x1070 [ 2883.036139][ T9258] __smc_release+0x634/0x880 [ 2883.038098][ T9258] smc_release+0x1fc/0x620 [ 2883.039958][ T9258] __sock_release+0xb3/0x260 [ 2883.041953][ T9258] sock_close+0x1c/0x30 [ 2883.043766][ T9258] __fput+0x3ff/0xb50 [ 2883.045401][ T9258] task_work_run+0x150/0x240 [ 2883.046880][ T9258] exit_to_user_mode_loop+0x1d8/0x6f0 [ 2883.049088][ T9258] __do_fast_syscall_32+0x701/0x970 [ 2883.051265][ T9258] do_fast_syscall_32+0x32/0x70 [ 2883.053357][ T9258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2883.056032][ T9258] [ 2883.056032][ T9258] other info that might help us debug this: [ 2883.056032][ T9258] [ 2883.059644][ T9258] Possible unsafe locking scenario: [ 2883.059644][ T9258] [ 2883.061869][ T9258] CPU0 CPU1 [ 2883.063491][ T9258] ---- ---- [ 2883.065059][ T9258] lock(sk_lock-AF_SMC/1); [ 2883.066440][ T9258] lock((work_completion)(&new_smc->smc_listen_work)); [ 2883.069192][ T9258] lock(sk_lock-AF_SMC/1); [ 2883.071235][ T9258] lock((work_completion)(&new_smc->smc_listen_work)); [ 2883.073300][ T9258] [ 2883.073300][ T9258] *** DEADLOCK *** [ 2883.073300][ T9258] [ 2883.075682][ T9258] 3 locks held by syz.1.9020/9258: [ 2883.077269][ T9258] #0: ffff888012f8de40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 2883.080379][ T9258] #1: ffff888062348ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 2883.083265][ T9258] #2: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 2883.085931][ T9258] [ 2883.085931][ T9258] stack backtrace: [ 2883.087763][ T9258] CPU: 3 UID: 0 PID: 9258 Comm: syz.1.9020 Tainted: G L syzkaller #0 PREEMPT(full) [ 2883.087788][ T9258] Tainted: [L]=SOFTLOCKUP [ 2883.087794][ T9258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2883.087806][ T9258] Call Trace: [ 2883.087818][ T9258] [ 2883.087827][ T9258] dump_stack_lvl+0x100/0x190 [ 2883.087851][ T9258] print_circular_bug.cold+0x178/0x1c7 [ 2883.087881][ T9258] check_noncircular+0x146/0x160 [ 2883.087917][ T9258] check_prev_add+0xeb/0xe60 [ 2883.087942][ T9258] __lock_acquire+0x136c/0x1a40 [ 2883.087971][ T9258] lock_acquire+0x1b9/0x370 [ 2883.087995][ T9258] ? __flush_work+0x4ca/0xcb0 [ 2883.088024][ T9258] ? mark_held_locks+0x40/0x70 [ 2883.088049][ T9258] ? __flush_work+0x4ca/0xcb0 [ 2883.088072][ T9258] __flush_work+0x4de/0xcb0 [ 2883.088096][ T9258] ? __flush_work+0x4ca/0xcb0 [ 2883.088121][ T9258] ? __pfx___flush_work+0x10/0x10 [ 2883.088145][ T9258] ? __lock_acquire+0x49f/0x1a40 [ 2883.088168][ T9258] ? __pfx_wq_barrier_func+0x10/0x10 [ 2883.088192][ T9258] ? __pfx___might_resched+0x10/0x10 [ 2883.088219][ T9258] ? __smc_release+0x5ba/0x880 [ 2883.088245][ T9258] cancel_work_sync+0xd1/0xf0 [ 2883.088272][ T9258] smc_clcsock_release+0x5f/0xe0 [ 2883.088299][ T9258] __smc_release+0x5c2/0x880 [ 2883.088322][ T9258] ? __pfx_sock_def_readable+0x10/0x10 [ 2883.088338][ T9258] smc_close_non_accepted+0xda/0x200 [ 2883.088362][ T9258] smc_close_active+0x4ff/0x1070 [ 2883.088390][ T9258] __smc_release+0x634/0x880 [ 2883.088412][ T9258] smc_release+0x1fc/0x620 [ 2883.088437][ T9258] __sock_release+0xb3/0x260 [ 2883.088460][ T9258] ? __pfx_sock_close+0x10/0x10 [ 2883.088480][ T9258] sock_close+0x1c/0x30 [ 2883.088500][ T9258] __fput+0x3ff/0xb50 [ 2883.088520][ T9258] ? _raw_spin_unlock_irq+0x23/0x50 [ 2883.088546][ T9258] task_work_run+0x150/0x240 [ 2883.088570][ T9258] ? __pfx_task_work_run+0x10/0x10 [ 2883.088596][ T9258] exit_to_user_mode_loop+0x1d8/0x6f0 [ 2883.088628][ T9258] ? rcu_is_watching+0x12/0xc0 [ 2883.088653][ T9258] __do_fast_syscall_32+0x701/0x970 [ 2883.088672][ T9258] do_fast_syscall_32+0x32/0x70 [ 2883.088691][ T9258] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2883.088716][ T9258] RIP: 0023:0xf7f04fec [ 2883.088740][ T9258] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 2883.088782][ T9258] RSP: 002b:00000000ffec695c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 2883.088799][ T9258] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 2883.088810][ T9258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2883.088822][ T9258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2883.088831][ T9258] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2883.088841][ T9258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2883.088858][ T9258] [ 2883.194822][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9021'.