last executing test programs: 2m53.458268395s ago: executing program 2 (id=2144): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) 2m53.391299583s ago: executing program 2 (id=2154): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x6bb4, 0x0, 0x5, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 2m53.319330158s ago: executing program 2 (id=2149): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 2m53.16213999s ago: executing program 2 (id=2155): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m53.158435612s ago: executing program 2 (id=2156): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r1 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xe0000002}) sendmsg$nl_generic(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x14, 0x17, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20) 2m52.902900066s ago: executing program 2 (id=2159): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setfsgid(0xee00) 2m52.801912641s ago: executing program 32 (id=2159): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setfsgid(0xee00) 2m46.630983875s ago: executing program 3 (id=2306): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 2m46.630186584s ago: executing program 3 (id=2307): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6) 2m45.723962374s ago: executing program 3 (id=2319): socket(0x40000000015, 0x5, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, 0x0) 2m44.874038542s ago: executing program 3 (id=2312): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m44.802952074s ago: executing program 3 (id=2313): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="0f0d", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000000380)='_', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000840)="1d9008982d", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002000)="fa", 0x1}], 0x1}}], 0x4, 0x60cd894) 2m44.552016306s ago: executing program 3 (id=2327): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = eventfd(0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m44.489724755s ago: executing program 33 (id=2327): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = eventfd(0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m19.524434166s ago: executing program 5 (id=4287): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@acquire, @release], 0x0, 0x0, 0x0}) 1m19.442924023s ago: executing program 5 (id=4289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c003}, 0x80) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a3100000000050001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m19.424997471s ago: executing program 5 (id=4291): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) 1m19.423679961s ago: executing program 5 (id=4294): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x48) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x227) 1m19.354765661s ago: executing program 5 (id=4296): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) dup(r0) 1m19.071801497s ago: executing program 5 (id=4302): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0xfffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m19.046175968s ago: executing program 34 (id=4302): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0xfffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 38.660251065s ago: executing program 0 (id=5117): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace(0x420e, r0) 37.765428296s ago: executing program 0 (id=5138): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804125000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/101) 36.210541063s ago: executing program 0 (id=5160): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="1c005e8008000200010000000800"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 36.210234723s ago: executing program 0 (id=5161): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0) 36.14117522s ago: executing program 0 (id=5162): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) 35.830342704s ago: executing program 0 (id=5165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)="f5b2"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0xcac) 35.791699594s ago: executing program 35 (id=5165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)="f5b2"}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0xcac) 2.681413007s ago: executing program 1 (id=5908): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 2.383986164s ago: executing program 1 (id=5913): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 2.38381325s ago: executing program 1 (id=5914): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="c7a6", 0x2}], 0x1}, 0x24048811) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000001) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000042) 2.331287489s ago: executing program 1 (id=5915): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000000c0)='./file0/file0/../file0\x00', 0x1) 2.331082119s ago: executing program 1 (id=5916): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r1, @ANYBLOB="1e002606080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r1, @ANYBLOB='!'], 0x24}, 0x1, 0x0, 0x0, 0x8803}, 0x0) 2.111317792s ago: executing program 1 (id=5917): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 2.078056624s ago: executing program 36 (id=5917): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 1.941113924s ago: executing program 7 (id=5921): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x0, 0x2, 0x2, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.790887145s ago: executing program 7 (id=5922): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x2, 0x0, 0x10, r2, 0x80000001}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 1.731320954s ago: executing program 7 (id=5923): add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x2, 0x0, [{0x9cc, 0x0, 0x10}, {0x4, 0x0, 0x1ff}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0xffffffffffffffff}]}) 1.635059918s ago: executing program 7 (id=5925): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 1.549159361s ago: executing program 7 (id=5929): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r1, r0, 0x0, 0x80000000) 1.543161458s ago: executing program 7 (id=5931): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000380)={{0x3, 0x202, 0x7, 0x8, 0xfffffff1, 0xc3}, 0xfffffffa, [0x5, 0x1, 0x2, 0xfff, 0xd9bc, 0x80000001, 0xcbb, 0x6, 0x3e, 0x3, 0x6, 0x6, 0x10001, 0x0, 0x10, 0x2, 0x6, 0x9, 0x4, 0x200, 0xa768, 0x5, 0x0, 0x9d2f, 0x8, 0xa, 0x9, 0x580000, 0xffff7a97, 0x8, 0x2, 0x34, 0x9, 0xfff00, 0x80000000, 0x0, 0x0, 0x2, 0x8, 0x2, 0xae3f, 0x9, 0x0, 0x9, 0x7, 0x1, 0x101, 0x3, 0x1, 0x5, 0xc68, 0xf, 0x2cd, 0x0, 0x7, 0xfffffff7, 0x3, 0x5, 0x7f, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0xfffffff9, 0x400, 0x6, 0x8, 0x85, 0x400, 0x1, 0x1, 0x8, 0x80000000, 0xfffeffff, 0x7, 0x0, 0x1ff, 0x1, 0x9, 0xb, 0x1, 0x5, 0xa6ea, 0x8000, 0x3, 0x2, 0x6, 0x874, 0x6, 0x5, 0x0, 0x2, 0x0, 0x2, 0x5, 0x2, 0x8, 0xa1, 0x794, 0xd0, 0x8, 0x2518, 0x5, 0x6, 0x1, 0x4, 0x4, 0x10000, 0xffffe5e3, 0xa, 0x9, 0xfffffffc, 0x7, 0x6, 0xfffffffd, 0x1, 0x7ff, 0x1, 0x0, 0x6, 0x81, 0x2, 0x4, 0x7, 0x7, 0x4, 0x4, 0x2aab, 0x6, 0x0, 0x1, 0x1, 0x1ff, 0x7, 0x4, 0x2, 0xdeee, 0x7, 0x2, 0x6, 0x4, 0x5, 0x2, 0x1b, 0x5249, 0x9, 0x80000001, 0x2, 0x6b8, 0x5, 0xfffffffc, 0x1ac, 0x29, 0x5, 0x0, 0x5, 0xfffffff8, 0x6, 0xb, 0x91, 0x3ff, 0xf, 0x400, 0x1, 0x91, 0x2, 0xb396, 0x8, 0xffff, 0x80, 0x1, 0x6, 0xa05, 0x4, 0x2, 0xff, 0x4, 0x4, 0x0, 0x9, 0x6, 0x6, 0xb, 0x7, 0xe, 0x81, 0x6, 0x3ff, 0x4, 0x3, 0x48, 0x0, 0x7, 0x753, 0x80, 0x800, 0x4, 0xbabe, 0x401, 0xca6, 0x200, 0x57, 0x9, 0x3, 0xc9, 0x1000, 0x7fff, 0xb, 0x5, 0x80000000, 0x7ff, 0x0, 0xfffffff8, 0x5, 0x8, 0x7114, 0x3, 0x8000, 0x81, 0x3, 0x9, 0x4, 0x3, 0x3, 0x8001, 0x1f59, 0x8, 0xfff, 0x0, 0xa, 0x8000, 0x7, 0x8, 0x400, 0x10, 0x800, 0x9, 0x2, 0x8, 0x8, 0x2, 0x8, 0xd990, 0x9, 0x5, 0x1, 0x9, 0x4374d89b, 0x8, 0x8000, 0x2, 0x2, 0x400, 0xf18a, 0x9, 0xd, 0xc, 0x0, 0x8, 0x4, 0x9897, 0x10, 0x4, 0x7, 0x81, 0x7, 0x1000, 0x8d5, 0x296, 0x7, 0x1, 0x8, 0xd, 0xe, 0x4, 0x1, 0x7, 0x6192, 0xb02, 0xff, 0x6, 0x4, 0x7a2b, 0x0, 0xa, 0x80000000, 0x6, 0x4, 0x9, 0x2, 0x3, 0x0, 0xffffffff, 0x1f, 0x1c8, 0x7, 0x9a9, 0x6, 0x8, 0x0, 0x8001, 0x3e9, 0x2, 0x2, 0x5ee, 0x6, 0x6, 0xff, 0x8001, 0x7, 0x7fffffff, 0x3, 0x8, 0x5, 0x4, 0x1, 0xfffffffb, 0x8, 0x5, 0x1, 0x153, 0x1, 0x9, 0xfffff800, 0xa8, 0x3, 0x1, 0x2e746f27, 0xfff, 0x8, 0x8, 0xf227, 0x0, 0x10000, 0x9, 0x8, 0x1, 0x1, 0x4, 0xb, 0x2, 0x1ff, 0x3, 0xc9, 0x7, 0xffffff6a, 0x800, 0xf5, 0x1, 0x6, 0x2, 0x1ff, 0xc000000, 0x4, 0x1000, 0x8, 0x4, 0xfffffeff, 0x5, 0xb1d4, 0x6, 0xfffffff7, 0x7, 0x8, 0x1, 0x1000, 0x6, 0x8, 0x9, 0x0, 0x9, 0x4, 0x81, 0x26, 0x3, 0x9, 0x1, 0x4, 0x1, 0x9, 0x1, 0x1159000, 0x66d, 0x100, 0xffff, 0x9, 0x7, 0x8, 0x3, 0x3, 0x5, 0x2, 0x97, 0x86, 0x10001, 0x3, 0x4a0d, 0x1ff, 0x0, 0x401, 0x7, 0x101, 0x9, 0xf, 0x5, 0x6, 0x80000001, 0x34, 0x1, 0x2, 0x1, 0x9, 0x5, 0x1, 0x7, 0x81, 0x10, 0xf, 0x6, 0x443a2d0b, 0x19, 0x4, 0x89d, 0xf, 0x100, 0x0, 0xfffffff7, 0x4, 0x6, 0x2, 0x240000, 0x6, 0x6, 0xb08, 0x3, 0x9, 0x1, 0x3, 0x9, 0x401, 0x24, 0x3, 0x1, 0x5, 0x8, 0x9b, 0x6, 0xf, 0x8, 0x10000, 0x7f, 0x5, 0x2, 0x6, 0x8, 0x7ff, 0x1, 0xfffff124, 0x1, 0x9, 0x7, 0x0, 0x9, 0x35ab, 0x10, 0x9, 0x8, 0x3, 0xb, 0x6, 0x1000000, 0xb63a, 0x2, 0x5, 0x400, 0x1, 0x5, 0x9, 0x2, 0x8, 0x1, 0x6, 0x100000, 0xfb0, 0x3, 0xf, 0x0, 0x7, 0x4, 0x1, 0x7, 0x0, 0x7, 0x40a, 0x5, 0x4, 0x0, 0xfffffffb, 0x583e, 0x7f, 0x800, 0x1, 0x1, 0x7, 0x4, 0xfffffff2, 0x37, 0x7, 0x80000001, 0x6, 0x6, 0x0, 0xf, 0x98, 0x10, 0xfef8, 0x1, 0x6, 0xafde, 0x27f, 0xd, 0x7, 0xfffffff8, 0x1, 0x2dd, 0x0, 0x3, 0x1, 0x2, 0x1, 0x8, 0x0, 0x3, 0x0, 0x5, 0x561, 0xd, 0x10000, 0xff, 0xffff000, 0x3, 0x0, 0x1, 0x4, 0xe, 0xe599, 0x800, 0xfe00000, 0x8, 0xe894, 0x5, 0x208b1a78, 0x1, 0x3, 0x9b36, 0x7fff, 0x9, 0x3, 0x2, 0x1, 0x8, 0x2, 0x0, 0x4, 0x0, 0x200, 0x82, 0x1ff, 0x7ff, 0x7ff, 0xff, 0xfffffff8, 0x2, 0xd8, 0x1, 0x6, 0xffffffff, 0x6, 0x401, 0x1, 0x6, 0x5, 0x80000001, 0x7f, 0xa, 0x15a, 0x5, 0xff, 0x101, 0x6, 0xf, 0x101, 0x39, 0x30000, 0x5, 0xfe, 0x3, 0x10001, 0x2, 0x8, 0x2fc, 0xf2b, 0xffffffff, 0x0, 0x8439, 0x2, 0xd, 0x42, 0x2, 0xfffffff7, 0x2, 0x0, 0x3, 0x7, 0xc6d0, 0x6, 0x9648, 0x65b7, 0x7ff, 0x9, 0x3e66, 0xfff, 0x2, 0x1, 0x9, 0x1, 0x5, 0xffffffff, 0xfffffffd, 0x0, 0x9e, 0x1, 0x1, 0x100, 0x7, 0x3, 0x5, 0x4, 0xffff, 0x6, 0x1ff, 0x9, 0x1692, 0x48, 0x9, 0x401, 0x5, 0x3, 0xff, 0x8, 0x4, 0x1, 0x2, 0x1000, 0x5, 0xd, 0x3, 0x8, 0x1, 0xff, 0x54f, 0x8, 0x4, 0x1, 0x7fe00, 0x5, 0x2, 0x1, 0x7f, 0xdd00, 0x400, 0x5, 0x0, 0x9, 0x343, 0x7e7, 0xff, 0xb9, 0x7, 0x0, 0x7f, 0x29c7, 0x4, 0x7, 0x81, 0x1000, 0xd, 0x8, 0x7ff, 0x3, 0x6, 0x9, 0x6, 0x5, 0xe3, 0x9, 0xffffffff, 0x6, 0x10, 0x4, 0xe, 0x7ff, 0x8, 0x1000000, 0xc0, 0x0, 0x685, 0x6b3c, 0x6, 0x0, 0x9, 0x61, 0x3ff, 0x4, 0x0, 0x2, 0x25ad, 0x9, 0x8, 0xd1, 0x6, 0x3, 0x6, 0xffff, 0xb, 0x5d5, 0xb8, 0x5, 0x9, 0x1, 0x5, 0x7, 0xd0, 0x800, 0x1, 0x80, 0x8, 0x3, 0x3, 0x2, 0x0, 0x400, 0xd, 0x2, 0x1, 0x9, 0x5, 0x1, 0x9, 0x3, 0x80, 0x6a68, 0x647, 0xd, 0x6, 0x7, 0x8, 0x6, 0x6, 0xfffffff4, 0x40, 0xdff, 0x8, 0x2, 0x8, 0x65, 0x393, 0x4, 0x9, 0xc86, 0x101, 0x3ff, 0x9, 0x92, 0xd5, 0x8, 0x9, 0x4, 0x7, 0x7, 0x7, 0xffffffff, 0x0, 0x0, 0x5, 0x401, 0x1, 0x8, 0xab4, 0x1, 0x3, 0xfffffffe, 0x9, 0x7, 0x5, 0x3, 0x10, 0x7f, 0x1, 0x8, 0x800, 0xffff8001, 0x12c060b, 0x2c5, 0x1ff, 0x60a69ce6, 0x8, 0x1000, 0x12af, 0x9, 0x3, 0x1, 0x4, 0x8001, 0x9, 0x51, 0x7, 0x7, 0xfff, 0x80000001, 0x7, 0x1, 0xd, 0x454, 0x401, 0x725, 0x233, 0x3, 0xd70f, 0x1f2, 0x200, 0x2, 0x8000, 0x9, 0x3, 0x8, 0x7, 0x9, 0x4, 0x6, 0x5, 0x1ff, 0x5, 0x5a, 0x6, 0xfffffff9, 0x2, 0x0, 0xffffffff, 0x7, 0x8, 0xa5bc, 0xba0, 0xffffffff, 0xff, 0xffff40fc, 0x5, 0x5, 0x87, 0x3, 0x4, 0xaed, 0x10001, 0x2000000, 0x6c, 0x800, 0x97, 0x80000001, 0x8, 0x81, 0xd4, 0x2, 0x7, 0x7, 0x2, 0x5, 0x6, 0xffffffff, 0x0, 0xb, 0x3, 0x1, 0x6, 0x0, 0x2, 0xff, 0x9, 0x80000, 0x3, 0x200, 0x7f, 0xfffffffe, 0x7, 0x101, 0xff, 0x7, 0x15d, 0x3, 0x5, 0x5, 0x800, 0xa, 0x4, 0x2, 0xfffffffa, 0x2, 0x5ff9, 0x1, 0x4b, 0x0, 0x80, 0x6, 0x2, 0x3, 0x401, 0x7, 0x2, 0x8001, 0x5, 0x8, 0x4, 0x265a, 0x4, 0x5, 0x8000, 0x0, 0xfffffffd, 0xf9, 0x7ff, 0x4, 0x9, 0xfa, 0x8, 0xffff, 0x9, 0x9, 0x65, 0xffffffff, 0x7, 0x5, 0xd, 0xfff, 0x329, 0x80, 0x4, 0x9, 0x100, 0x13, 0x0, 0xf73a, 0x0, 0x80000000, 0x6, 0x7, 0x80000000, 0xffff, 0x80, 0x1, 0x1, 0xb0000000, 0xb66, 0x401, 0x9, 0x1, 0x5a, 0x7, 0x853e, 0xd, 0x5, 0x10000, 0x3, 0x5a9e, 0x3, 0x200, 0x3, 0x80b, 0x3, 0x1000, 0xffffff6f, 0x1, 0x10001, 0x0, 0x3, 0x3, 0x2, 0xf1c, 0x4, 0x7, 0x4, 0xfffffffb, 0x3, 0x800, 0x8, 0x750, 0x8, 0x1751, 0x6, 0xfffffff8, 0x0, 0x8, 0x2, 0x7, 0x3a, 0x9, 0x8, 0x4, 0xfff, 0x81, 0x3, 0x3f, 0x3, 0x40, 0x1, 0x1, 0x2, 0x10, 0xfffffff7, 0x1, 0x8, 0x5, 0x56, 0xdb, 0x400]}) 1.39380171s ago: executing program 4 (id=5937): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 1.328502841s ago: executing program 4 (id=5940): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x34, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x0) 1.00273925s ago: executing program 4 (id=5944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) 938.047798ms ago: executing program 4 (id=5946): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x1, 0x3, 0x30, @empty, @private2, 0x8, 0x7800, 0x3, 0xffffffff}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 754.294567ms ago: executing program 4 (id=5948): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 749.436368ms ago: executing program 4 (id=5950): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) writev(r1, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xa81}], 0x1) 389.607974ms ago: executing program 6 (id=5960): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = syz_clone(0x20022180, 0x0, 0xfe02, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 294.917028ms ago: executing program 6 (id=5961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000a80)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 211.226758ms ago: executing program 6 (id=5962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 95.851824ms ago: executing program 6 (id=5963): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r1, &(0x7f0000000080)=""/116, 0xfffffeb2) read(r1, &(0x7f0000000280)=""/96, 0x60) 322.83µs ago: executing program 6 (id=5964): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=5965): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): riptor 0 read error: -22 [ 225.713570][ T9423] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 225.716553][ T9423] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.720671][ T9423] usb 10-1: config 0 descriptor?? [ 225.788252][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.948979][ T6051] input: PS/2 Generic Mouse as /devices/serio7/input/input61 [ 225.957310][ T1455] usb 10-1: USB disconnect, device number 8 [ 226.158290][ T6051] psmouse serio7: Failed to enable mouse on [ 226.578545][T15442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.641591][T15442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.747589][T15452] syzkaller1: entered promiscuous mode [ 226.749442][T15452] syzkaller1: entered allmulticast mode [ 226.798503][ T6051] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 226.828256][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 226.971675][ T6051] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 226.974196][ T6051] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.977651][ T6051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.981055][ T6051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.984232][ T6051] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.987959][ T6051] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.991738][ T6051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.995339][ T6051] usb 6-1: config 0 descriptor?? [ 226.997520][T15438] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.409373][ T6051] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 227.411796][ T6051] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 227.417454][ T6051] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 227.420065][ T6051] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 227.422380][ T6051] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 227.424811][ T6051] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 227.427389][ T6051] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 227.430193][ T6051] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 227.432546][ T6051] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 227.435225][ T6051] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 227.447874][ T6051] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 227.680543][ T1455] usb 6-1: USB disconnect, device number 19 [ 227.768408][ T7758] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 227.858201][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.919930][ T7758] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.923887][ T7758] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 227.927259][ T7758] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 227.930459][ T7758] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.934509][ T7758] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.937315][ T7758] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.941359][ T7758] usb 9-1: config 0 descriptor?? [ 228.353785][ T7758] plantronics 0003:047F:FFFF.0023: ignoring exceeding usage max [ 228.359512][ T7758] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 228.688242][ T6051] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 228.844288][ T6051] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.848691][ T6051] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.852774][ T6051] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.856603][ T6051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.863331][T15549] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.867895][ T6051] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.898435][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 229.121692][ T6039] usb 5-1: USB disconnect, device number 17 [ 229.948162][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.182789][ T40] audit: type=1326 audit(2000000350.385:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15611 comm="syz.1.4270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 230.190540][ T40] audit: type=1326 audit(2000000350.385:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15611 comm="syz.1.4270" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 230.197197][ T40] audit: type=1326 audit(2000000350.385:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15611 comm="syz.1.4270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 230.206355][ T40] audit: type=1326 audit(2000000350.385:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15611 comm="syz.1.4270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 230.213123][ T40] audit: type=1326 audit(2000000350.385:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15611 comm="syz.1.4270" exe="/syz-executor" sig=0 arch=40000003 syscall=116 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 230.223158][ T40] audit: type=1326 audit(2000000350.385:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15611 comm="syz.1.4270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 230.231628][ T40] audit: type=1326 audit(2000000350.385:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15611 comm="syz.1.4270" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 230.415645][T15645] kvm: user requested TSC rate below hardware speed [ 230.449075][ T34] usb 9-1: USB disconnect, device number 16 [ 230.471359][T15651] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4289'. [ 230.578379][ T6051] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 230.760934][ T6051] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.765897][ T6051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.770754][ T6051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 230.774607][ T6051] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.780152][ T6051] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.783883][ T6051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.789094][ T6051] usb 6-1: config 0 descriptor?? [ 230.847394][ T88] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.851253][ T88] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.858205][ T34] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 230.944838][ T88] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.948231][ T88] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.978215][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 231.006669][ T88] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.010316][ T88] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.023877][ T5338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.027743][ T5338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.032024][ T5338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.034991][ T5338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.037749][ T5338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.047118][ T5978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.050309][ T34] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 231.050885][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.053952][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.055563][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.057757][ T34] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.057778][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 231.059090][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.062033][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.063584][ T34] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.067329][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.070369][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 231.084863][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.087778][ T34] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.092260][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 231.095453][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.095595][ T88] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.098505][ T34] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.102265][ T88] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.104655][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 231.105420][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.112984][ T34] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.116469][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 231.120006][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.122859][ T34] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.126287][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 231.132397][T15677] lo speed is unknown, defaulting to 1000 [ 231.138587][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.141333][ T34] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.144714][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 231.147588][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 231.150454][ T34] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 231.153841][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 231.157500][ T34] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 231.160485][ T34] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 231.162894][ T34] usb 9-1: Product: syz [ 231.164059][ T34] usb 9-1: Manufacturer: syz [ 231.165379][ T34] usb 9-1: SerialNumber: syz [ 231.167999][ T34] usb 9-1: config 0 descriptor?? [ 231.173370][ T34] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 231.201694][ T6051] plantronics 0003:047F:FFFF.0024: ignoring exceeding usage max [ 231.207214][ T6051] plantronics 0003:047F:FFFF.0024: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 231.224126][T15677] chnl_net:caif_netlink_parms(): no params data found [ 231.228878][ T88] bridge_slave_1: left allmulticast mode [ 231.230696][ T88] bridge_slave_1: left promiscuous mode [ 231.232569][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.236570][ T88] bridge_slave_0: left allmulticast mode [ 231.238655][ T88] bridge_slave_0: left promiscuous mode [ 231.240834][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.387374][ T1455] usb 9-1: USB disconnect, device number 17 [ 231.391109][ T1455] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 231.405743][ T10] usb 6-1: USB disconnect, device number 20 [ 231.540322][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.544144][ T88] bond_slave_0: left allmulticast mode [ 231.550543][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.554615][ T88] bond_slave_1: left allmulticast mode [ 231.558325][ T88] bond0 (unregistering): Released all slaves [ 231.665726][T15677] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.668196][T15677] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.670472][T15677] bridge_slave_0: entered allmulticast mode [ 231.672930][T15677] bridge_slave_0: entered promiscuous mode [ 231.676221][T15677] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.680864][T15677] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.684027][T15677] bridge_slave_1: entered allmulticast mode [ 231.688021][T15677] bridge_slave_1: entered promiscuous mode [ 231.733624][T15677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.738478][T15677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.771257][T15677] team0: Port device team_slave_0 added [ 231.774903][T15677] team0: Port device team_slave_1 added [ 231.822351][T15677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.824984][T15677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.838507][T15677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.843444][T15677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.846170][T15677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.854559][T15677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.937073][T15677] hsr_slave_0: entered promiscuous mode [ 231.940795][T15677] hsr_slave_1: entered promiscuous mode [ 231.943231][T15677] debugfs: 'hsr0' already exists in 'hsr' [ 231.945082][T15677] Cannot create hsr debugfs directory [ 231.977038][ T88] hsr_slave_0: left promiscuous mode [ 231.982491][ T88] hsr_slave_1: left promiscuous mode [ 231.985594][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.009149][ T88] veth1_vlan: left promiscuous mode [ 232.010965][ T88] veth0_vlan: left promiscuous mode [ 232.028158][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 232.524426][ T88] team0 (unregistering): Port device team_slave_1 removed [ 232.603848][ T88] team0 (unregistering): Port device team_slave_0 removed [ 233.058623][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 233.149955][ T5978] Bluetooth: hci2: command tx timeout [ 233.255012][T15700] pim6reg1: entered promiscuous mode [ 233.257377][T15700] pim6reg1: entered allmulticast mode [ 233.392937][T15708] rtc_cmos 00:05: Alarms can be up to one day in the future [ 233.400025][T15677] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 233.408053][T15677] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 233.414707][T15677] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 233.421359][T15677] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 233.481641][T15677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.512349][T15677] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.522362][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.525386][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.537385][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.539781][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.666371][T15677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.810470][ T6039] rtc_cmos 00:05: Alarms can be up to one day in the future [ 233.814082][ T6039] rtc_cmos 00:05: Alarms can be up to one day in the future [ 233.819575][ T6039] rtc_cmos 00:05: Alarms can be up to one day in the future [ 233.823172][ T6039] rtc_cmos 00:05: Alarms can be up to one day in the future [ 233.824337][T15677] veth0_vlan: entered promiscuous mode [ 233.826163][ T6039] rtc rtc0: __rtc_set_alarm: err=-22 [ 233.837503][T15677] veth1_vlan: entered promiscuous mode [ 233.850857][T15677] veth0_macvtap: entered promiscuous mode [ 233.854771][T15677] veth1_macvtap: entered promiscuous mode [ 233.866621][T15677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.872827][T15677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.876284][ T40] audit: type=1326 audit(2000000354.075:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15704 comm="syz.4.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7fc00000 [ 233.879795][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.887274][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.897972][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.901511][ T1226] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.920155][T15736] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 233.930146][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.935380][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.964770][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.967272][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.969347][T15743] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 234.098223][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 234.248255][ T34] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 234.261295][T15775] ubi0: attaching mtd0 [ 234.265759][T15775] ubi0: scanning is finished [ 234.267296][T15775] ubi0: empty MTD device detected [ 234.332941][T15775] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 234.335463][T15775] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 234.337753][T15775] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 234.340077][T15775] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 234.342418][T15775] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 234.344529][T15775] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 234.347015][T15775] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2595364712 [ 234.350404][T15775] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 234.355513][T15777] ubi0: background thread "ubi_bgt0d" started, PID 15777 [ 234.357006][T15776] ubi0: detaching mtd0 [ 234.364197][T15776] ubi0: mtd0 is detached [ 234.421166][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.425539][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.428738][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.432609][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.435814][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.440533][ T34] usb 6-1: config 0 descriptor?? [ 234.447716][T15783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'. [ 234.608244][ T9422] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 234.758219][ T9422] usb 5-1: Using ep0 maxpacket: 8 [ 234.763742][ T9422] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 234.766705][ T9422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.769435][ T9422] usb 5-1: Product: syz [ 234.770919][ T9422] usb 5-1: Manufacturer: syz [ 234.772440][ T9422] usb 5-1: SerialNumber: syz [ 234.775211][ T9422] usb 5-1: config 0 descriptor?? [ 234.779278][ T9422] option 5-1:0.0: GSM modem (1-port) converter detected [ 234.851574][ T34] hid_parser_main: 5 callbacks suppressed [ 234.851587][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 234.855367][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 234.857462][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 234.860345][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 234.862579][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 234.864688][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 234.866793][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 234.869223][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 234.871619][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 234.873906][ T34] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 234.878317][ T34] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 234.980069][ T1456] usb 5-1: USB disconnect, device number 18 [ 234.982757][ T1456] option 5-1:0.0: device disconnected [ 235.109659][ T7758] usb 6-1: USB disconnect, device number 21 [ 235.115045][T15788] loop7: detected capacity change from 0 to 7 [ 235.119031][ C0] blk_print_req_error: 23 callbacks suppressed [ 235.119046][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.124654][ C0] buffer_io_error: 5 callbacks suppressed [ 235.124664][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.129368][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.132736][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.135739][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.139745][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.143448][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.144742][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.149405][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.152301][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.155673][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.158392][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.161651][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.164804][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.167959][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.170798][T15788] ldm_validate_partition_table(): Disk read failed. [ 235.173436][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.177938][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.181926][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.184678][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.187597][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.190653][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 235.193615][T15788] Dev loop7: unable to read RDB block 0 [ 235.196201][T15788] loop7: unable to read partition table [ 235.198929][T15788] loop7: partition table beyond EOD, truncated [ 235.201223][T15788] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 235.228290][ T5978] Bluetooth: hci2: command tx timeout [ 235.660168][ T88] Bluetooth: hci4: Frame reassembly failed (-84) [ 235.662537][T15811] Bluetooth: hci4: Frame reassembly failed (-84) [ 236.178219][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.218239][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.298909][ T5338] Bluetooth: hci2: command tx timeout [ 237.338365][ T7758] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 237.498462][ T6039] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 237.502939][ T7758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.506392][ T7758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.509536][ T7758] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.513880][ T7758] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.517376][ T7758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.521239][ T7758] usb 6-1: config 0 descriptor?? [ 237.653032][ T6039] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 237.656773][ T6039] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.660293][ T6039] usb 11-1: Product: syz [ 237.662179][ T6039] usb 11-1: Manufacturer: syz [ 237.663716][ T6039] usb 11-1: SerialNumber: syz [ 237.666715][ T6039] usb 11-1: config 0 descriptor?? [ 237.698319][ T5978] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 237.698599][ T5338] Bluetooth: hci4: command 0xfc11 tx timeout [ 237.874834][ T6039] usb 11-1: USB disconnect, device number 2 [ 237.939331][ T7758] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 238.165835][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4376'. [ 238.258248][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 238.331011][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 238.336124][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4380'. [ 238.811934][ T40] audit: type=1326 audit(2000000359.015:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15898 comm="syz.0.4389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 238.819897][ T40] audit: type=1326 audit(2000000359.015:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15898 comm="syz.0.4389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 238.828567][ T40] audit: type=1326 audit(2000000359.015:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15898 comm="syz.0.4389" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 238.836914][ T40] audit: type=1326 audit(2000000359.015:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15898 comm="syz.0.4389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 238.846603][ T40] audit: type=1326 audit(2000000359.015:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15898 comm="syz.0.4389" exe="/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 238.855804][ T40] audit: type=1326 audit(2000000359.015:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15898 comm="syz.0.4389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 238.863585][ T40] audit: type=1326 audit(2000000359.015:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15898 comm="syz.0.4389" exe="/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 238.871977][ T40] audit: type=1326 audit(2000000359.075:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15898 comm="syz.0.4389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 238.880097][ T40] audit: type=1326 audit(2000000359.075:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15898 comm="syz.0.4389" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 238.959249][T15914] ubi0: attaching mtd0 [ 238.961390][T15914] ubi0: scanning is finished [ 239.029842][T15914] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 239.032981][T15914] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 239.035912][T15914] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 239.039813][T15914] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 239.042384][T15914] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 239.044570][T15914] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 239.047161][T15914] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2595364712 [ 239.051099][T15914] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 239.054426][T15923] ubi0: background thread "ubi_bgt0d" started, PID 15923 [ 239.054429][T15920] ubi0: detaching mtd0 [ 239.064041][T15920] ubi0: mtd0 is detached [ 239.308145][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 239.393670][ T5978] Bluetooth: hci2: command tx timeout [ 239.432629][ T72] usb 11-1: new low-speed USB device number 3 using dummy_hcd [ 239.610388][ T72] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.615046][ T72] usb 11-1: config 0 has no interfaces? [ 239.619832][ T72] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.624279][ T72] usb 11-1: config 0 has no interfaces? [ 239.627713][ T72] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.632229][ T72] usb 11-1: config 0 has no interfaces? [ 239.637214][ T72] usb 11-1: string descriptor 0 read error: -22 [ 239.640075][ T72] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 239.644015][ T72] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.650261][ T72] usb 11-1: config 0 descriptor?? [ 239.757978][T15950] ubi0: attaching mtd0 [ 239.761090][T15950] ubi0: scanning is finished [ 239.861736][T15950] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 239.864793][T15950] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 239.868243][T15950] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 239.871679][T15950] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 239.874940][T15950] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 239.877168][T15950] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 239.880302][T15950] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2595364712 [ 239.883628][T15950] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 239.887048][T15956] ubi0: background thread "ubi_bgt0d" started, PID 15956 [ 239.887837][T15952] ubi0: detaching mtd0 [ 239.894824][T15952] ubi0: mtd0 is detached [ 239.899042][ T840] usb 11-1: USB disconnect, device number 3 [ 239.929701][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4414'. [ 240.010581][ T34] usb 6-1: USB disconnect, device number 22 [ 240.331996][T15991] netlink: 'syz.0.4427': attribute type 3 has an invalid length. [ 240.338205][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 241.168151][ T1455] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 241.329765][ T1455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.334368][ T1455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.337671][ T1455] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.342565][ T1455] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.346093][ T1455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.352533][ T1455] usb 6-1: config 0 descriptor?? [ 241.378287][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 241.768284][ T1455] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 242.030596][ T1455] usb 6-1: USB disconnect, device number 23 [ 242.418303][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 242.665977][T16131] U9: renamed from lo (while UP) [ 242.874279][T16147] input: syz1 as /devices/virtual/input/input64 [ 242.916199][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4501'. [ 242.921287][T16151] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4501'. [ 243.041589][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4506'. [ 243.408231][ T34] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 243.468263][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 243.561115][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.578156][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.582386][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.589319][ T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.593011][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.598562][ T34] usb 5-1: config 0 descriptor?? [ 243.683914][T16213] mkiss: ax0: crc mode is auto. [ 243.744861][T16215] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4531'. [ 243.776320][T16217] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4532'. [ 244.010891][ T34] hid_parser_main: 5 callbacks suppressed [ 244.010905][ T34] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 244.015046][ T34] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 244.017532][ T34] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 244.020637][ T34] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 244.023101][ T34] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 244.025440][ T34] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 244.027914][ T34] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 244.030381][ T34] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 244.033113][ T34] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 244.035854][ T34] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 244.040045][ T34] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 244.119127][ T7758] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 244.283467][ T7758] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.284545][ T34] usb 5-1: USB disconnect, device number 19 [ 244.287889][ T7758] usb 9-1: config 0 has no interfaces? [ 244.293033][ T7758] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.297317][ T7758] usb 9-1: config 0 has no interfaces? [ 244.302593][ T7758] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.307245][ T7758] usb 9-1: config 0 has no interfaces? [ 244.312389][ T7758] usb 9-1: string descriptor 0 read error: -22 [ 244.315162][ T7758] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 244.320446][ T7758] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.331044][ T7758] usb 9-1: config 0 descriptor?? [ 244.508214][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 244.554577][T16234] tipc: Enabling of bearer rejected, failed to enable media [ 244.598851][ T34] usb 9-1: USB disconnect, device number 18 [ 244.858597][T16246] loop2: detected capacity change from 0 to 7 [ 244.863023][T16246] Dev loop2: unable to read RDB block 7 [ 244.865565][T16246] loop2: unable to read partition table [ 244.869843][T16246] loop2: partition table beyond EOD, truncated [ 244.872579][T16246] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 245.539532][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 245.618898][ T5338] Bluetooth: hci4: command 0x1003 tx timeout [ 245.623321][ T5978] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 245.761351][ T1455] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 245.909882][ T1455] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.913944][ T1455] usb 6-1: config 0 has no interfaces? [ 245.916674][ T1455] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.920588][ T1455] usb 6-1: config 0 has no interfaces? [ 245.924048][ T1455] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.927242][ T1455] usb 6-1: config 0 has no interfaces? [ 245.933681][ T1455] usb 6-1: string descriptor 0 read error: -22 [ 245.936269][ T1455] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 245.940041][ T1455] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.944633][ T1455] usb 6-1: config 0 descriptor?? [ 246.187182][ T1455] usb 6-1: USB disconnect, device number 24 [ 246.261994][ T34] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 246.429652][ T34] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.433302][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.436836][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 246.439947][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.443937][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.446884][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.450823][ T34] usb 9-1: config 0 descriptor?? [ 246.578271][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 246.758208][T16328] can0: slcan on ptm0. [ 246.770379][T16330] pim6reg: entered allmulticast mode [ 246.776702][T16330] pim6reg: left allmulticast mode [ 246.863436][ T34] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 246.909230][T16327] can0 (unregistered): slcan off ptm0. [ 247.040693][T16352] unknown channel width for channel at 909000KHz? [ 247.043301][T16352] unknown channel width for channel at 909000KHz? [ 247.046040][T16352] unknown channel width for channel at 909000KHz? [ 247.127018][ T6051] usb 9-1: USB disconnect, device number 19 [ 247.130851][T16362] kernel read not supported for file /eth0 (pid: 16362 comm: syz.0.4598) [ 247.134644][ T40] audit: type=1800 audit(2000000367.335:1229): pid=16362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4598" name="eth0" dev="mqueue" ino=30622 res=0 errno=0 [ 247.401210][T16380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4606'. [ 247.453185][T16382] can0: slcan on ptm0. [ 247.539930][T16381] can0 (unregistered): slcan off ptm0. [ 247.628741][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 247.736897][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4612'. [ 247.802832][T16401] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4615'. [ 247.807026][T16401] netlink: 'syz.6.4615': attribute type 7 has an invalid length. [ 247.812366][T16401] netlink: 'syz.6.4615': attribute type 8 has an invalid length. [ 247.820901][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4615'. [ 247.831308][T16401] gretap0: entered promiscuous mode [ 247.835036][T16401] batadv_slave_1: entered promiscuous mode [ 247.838743][T16401] erspan0: entered promiscuous mode [ 248.396564][ T40] audit: type=1326 audit(2000000368.595:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.0.4628" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f04579 code=0x0 [ 248.663473][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 249.468216][ T7758] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 249.642963][ T7758] usb 9-1: Using ep0 maxpacket: 16 [ 249.647423][ T7758] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.658260][ T7758] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 249.662175][ T7758] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.669776][ T7758] usb 9-1: config 0 descriptor?? [ 249.698199][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 250.084041][ T7758] kye 0003:0458:5016.002A: control desc unexpectedly large [ 250.090307][ T7758] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5016.002A/input/input66 [ 250.152942][ T7758] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5016.002A/input/input67 [ 250.213265][ T7758] kye 0003:0458:5016.002A: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 250.288828][T11503] usb 9-1: USB disconnect, device number 20 [ 250.748331][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 250.808804][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4681'. [ 251.078199][ T1456] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 251.253013][ T1456] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 251.258722][ T1456] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.261801][ T1456] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.264411][ T1456] usb 11-1: Product: syz [ 251.266025][ T1456] usb 11-1: Manufacturer: syz [ 251.267596][ T1456] usb 11-1: SerialNumber: syz [ 251.271332][ T1456] usb 11-1: config 0 descriptor?? [ 251.312309][ T40] audit: type=1326 audit(2000000371.515:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.1.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 251.323395][ T40] audit: type=1326 audit(2000000371.515:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.1.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf711e598 code=0x7ffc0000 [ 251.333017][ T40] audit: type=1326 audit(2000000371.515:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.1.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 251.341291][ T40] audit: type=1326 audit(2000000371.515:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.1.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf711e598 code=0x7ffc0000 [ 251.348874][ T40] audit: type=1326 audit(2000000371.515:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.1.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf711e598 code=0x7ffc0000 [ 251.357775][ T40] audit: type=1326 audit(2000000371.515:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.1.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 251.365094][ T40] audit: type=1326 audit(2000000371.515:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.1.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 251.372114][ T40] audit: type=1326 audit(2000000371.515:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.1.4704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 251.538300][ T7758] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 251.648314][ T1455] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 251.690278][ T7758] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.695434][ T7758] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.700107][ T7758] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.704156][ T7758] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.710251][ T7758] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.714467][ T7758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.722750][ T7758] usb 5-1: config 0 descriptor?? [ 251.778194][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 251.800061][ T1455] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 251.804268][ T1455] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 251.807397][ T1455] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 251.811030][ T1455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.815952][T16605] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 251.820973][ T1455] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.021663][ T1472] usb 6-1: USB disconnect, device number 25 [ 252.133194][ T7758] plantronics 0003:047F:FFFF.002B: ignoring exceeding usage max [ 252.138838][ T7758] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 252.145238][ T1455] usb 11-1: USB disconnect, device number 4 [ 252.697583][T16618] program syz.4.4712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.818208][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 252.995157][T16641] pim6reg: entered allmulticast mode [ 253.005589][T16641] pim6reg: left allmulticast mode [ 253.141054][T16645] input: syz1 as /devices/virtual/input/input68 [ 253.143895][T16645] input: failed to attach handler leds to device input68, error: -6 [ 253.858175][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 253.898967][ T40] kauditd_printk_skb: 109 callbacks suppressed [ 253.898979][ T40] audit: type=1326 audit(2000000374.105:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16663 comm="syz.6.4732" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd2579 code=0x0 [ 253.945440][T16667] Trying to write to read-only block-device nullb0 [ 253.976120][T16669] Bluetooth: hci0: load_link_keys: too big key_count value 28530 [ 254.047971][T16680] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 254.202001][T16686] syzkaller1: entered promiscuous mode [ 254.204144][T16686] syzkaller1: entered allmulticast mode [ 254.209410][T16686] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 6 [ 254.214298][ T7758] usb 5-1: USB disconnect, device number 20 [ 254.249789][T16692] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 254.447068][T16708] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 254.608964][ T72] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 254.638203][ T7758] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 254.758176][ T72] usb 9-1: Using ep0 maxpacket: 8 [ 254.769475][ T72] usb 9-1: config 0 interface 0 has no altsetting 0 [ 254.772283][ T72] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 254.776408][ T72] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.781848][ T72] usb 9-1: config 0 descriptor?? [ 254.788756][ T7758] usb 5-1: Using ep0 maxpacket: 8 [ 254.794223][ T7758] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.797202][ T7758] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 254.800748][ T7758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.805167][ T7758] usb 5-1: config 0 descriptor?? [ 254.848183][T16724] netlink: 'syz.6.4759': attribute type 11 has an invalid length. [ 254.898338][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 255.200247][ T72] mcp2221 0003:04D8:00DD.002C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 255.223390][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.225552][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.238350][ T7758] mcp2221 0003:04D8:00DD.002D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 255.425187][ T72] usb 5-1: USB disconnect, device number 21 [ 255.433190][T16703] i2c i2c-2: unsupported multi-msg i2c transaction [ 255.436284][ T6051] usb 9-1: USB disconnect, device number 21 [ 255.938289][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 256.148416][ T1472] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 256.309758][ T1472] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 149 [ 256.312949][ T1472] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.319140][ T1472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 256.322072][ T1472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 256.324500][ T1472] usb 6-1: Product: syz [ 256.325834][ T1472] usb 6-1: Manufacturer: syz [ 256.327435][ T1472] usb 6-1: SerialNumber: syz [ 256.331226][T16748] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.543795][ T1472] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 256.745624][ T72] usb 6-1: USB disconnect, device number 26 [ 256.750855][ T72] usblp0: removed [ 256.867732][T16791] lo speed is unknown, defaulting to 1000 [ 256.988269][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 257.424447][ T5981] Bluetooth: hci4: sending frame failed (-49) [ 257.427696][ T5338] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 257.583629][T16833] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 257.671851][T16839] vxcan1: tx address claim with different name [ 258.028206][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 258.433205][ T1472] kernel write not supported for file /sg0 (pid: 1472 comm: kworker/2:2) [ 258.639135][T16906] lo speed is unknown, defaulting to 1000 [ 258.870605][T16916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4844'. [ 258.908215][ T5338] Bluetooth: hci2: command 0x0405 tx timeout [ 258.945974][T16922] netlink: 83 bytes leftover after parsing attributes in process `syz.1.4847'. [ 259.058669][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 259.101729][T16934] loop7: detected capacity change from 0 to 7 [ 259.105158][T16932] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 259.180131][T16937] syzkaller1: entered promiscuous mode [ 259.182254][T16937] syzkaller1: entered allmulticast mode [ 259.220420][T16934] Dev loop7: unable to read RDB block 7 [ 259.222287][T16934] loop7: unable to read partition table [ 259.223472][ C0] blk_print_req_error: 6 callbacks suppressed [ 259.223484][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 259.224187][T16934] loop7: partition table beyond EOD, [ 259.226052][ C0] buffer_io_error: 5 callbacks suppressed [ 259.226061][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 259.235562][T16934] truncated [ 259.236597][T16934] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 259.399689][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4859'. [ 259.451133][T16952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4861'. [ 260.108303][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 260.677186][T17009] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 261.048175][ T1456] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 261.138173][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 261.219865][ T1456] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 261.224566][ T1456] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.231581][ T1456] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.236013][ T1456] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 261.243493][ T1456] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 261.247125][ T1456] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 261.250174][ T1456] usb 11-1: Manufacturer: syz [ 261.253513][ T1456] usb 11-1: config 0 descriptor?? [ 261.667941][ T1456] hid_parser_main: 16 callbacks suppressed [ 261.667964][ T1456] appleir 0003:05AC:8243.002E: unknown main item tag 0x0 [ 261.676706][ T1456] appleir 0003:05AC:8243.002E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 261.681008][ T1455] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 261.838156][ T1455] usb 5-1: Using ep0 maxpacket: 16 [ 261.844811][ T1455] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 261.847782][ T1455] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 261.851108][ T1455] usb 5-1: Product: syz [ 261.852618][ T1455] usb 5-1: Manufacturer: syz [ 261.854331][ T1455] usb 5-1: SerialNumber: syz [ 261.857636][ T1455] usb 5-1: config 0 descriptor?? [ 261.941173][ T7758] usb 11-1: USB disconnect, device number 5 [ 261.968241][ T6051] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 262.065779][ T1455] usb 5-1: USB disconnect, device number 22 [ 262.087925][T17092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.091754][T17092] batadv_slave_0: entered promiscuous mode [ 262.128381][ T6051] usb 9-1: Using ep0 maxpacket: 8 [ 262.132136][ T6051] usb 9-1: config 0 interface 0 has no altsetting 0 [ 262.134232][ T6051] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 262.137010][ T6051] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.140749][ T6051] usb 9-1: config 0 descriptor?? [ 262.189420][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 262.576538][ T6051] mcp2221 0003:04D8:00DD.002F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 262.777588][T17079] i2c i2c-2: unsupported multi-msg i2c transaction [ 262.782374][ T1455] usb 9-1: USB disconnect, device number 22 [ 263.228196][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 263.258249][T11503] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 263.419360][T11503] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 263.423726][T11503] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.427953][T11503] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.431447][T11503] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 263.436599][T11503] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 263.439746][T11503] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 263.442408][T11503] usb 6-1: Manufacturer: syz [ 263.445319][T11503] usb 6-1: config 0 descriptor?? [ 263.873656][T11503] appleir 0003:05AC:8243.0030: unknown main item tag 0x0 [ 263.889350][T11503] appleir 0003:05AC:8243.0030: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 263.942931][T17189] input: syz1 as /devices/virtual/input/input69 [ 264.132830][ T1472] usb 6-1: USB disconnect, device number 28 [ 264.205788][T17200] syzkaller1: entered promiscuous mode [ 264.207772][T17200] syzkaller1: entered allmulticast mode [ 264.258181][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 264.728373][ T1472] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 264.735773][T17225] bond0: (slave macvlan2): Error -22 calling dev_set_mtu [ 264.848203][ T6051] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 264.879762][ T1472] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 264.882585][ T1472] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 264.886782][ T1472] usb 5-1: config 0 interface 0 has no altsetting 0 [ 264.893145][ T1472] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 264.896807][ T1472] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 264.899527][ T1472] usb 5-1: Product: syz [ 264.900856][ T1472] usb 5-1: Manufacturer: syz [ 264.902374][ T1472] usb 5-1: SerialNumber: syz [ 264.905746][ T1472] usb 5-1: config 0 descriptor?? [ 264.911929][ T1472] hub 5-1:0.0: bad descriptor, ignoring hub [ 264.913930][ T1472] hub 5-1:0.0: probe with driver hub failed with error -5 [ 264.917733][ T1472] usb 5-1: selecting invalid altsetting 0 [ 265.010135][ T6051] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.014745][ T6051] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.020901][ T6051] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.025456][ T6051] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.029434][ T6051] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.033789][ T6051] usb 11-1: config 0 descriptor?? [ 265.298176][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 265.447110][ T6051] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 265.518267][T17217] usb 5-1: reset high-speed USB device number 23 using dummy_hcd [ 265.678739][T17217] usb 5-1: device firmware changed [ 265.683260][T11503] usb 5-1: USB disconnect, device number 23 [ 265.699692][ T72] usb 11-1: USB disconnect, device number 6 [ 265.839002][T11503] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 265.991724][T11503] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 265.994875][T11503] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.997394][T11503] usb 5-1: Product: syz [ 265.999373][T11503] usb 5-1: Manufacturer: syz [ 266.001316][T11503] usb 5-1: SerialNumber: syz [ 266.005592][T11503] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 266.030936][T11503] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 266.248631][ T1455] usb 5-1: USB disconnect, device number 24 [ 266.348263][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 266.477915][T17273] input: syz0 as /devices/virtual/input/input70 [ 266.529983][T17277] pim6reg1: entered promiscuous mode [ 266.531788][T17277] pim6reg1: entered allmulticast mode [ 267.043928][T17308] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000004 [ 267.058243][T11503] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 267.061504][T11503] ath9k_htc: Failed to initialize the device [ 267.065065][ T1455] usb 5-1: ath9k_htc: USB layer deinitialized [ 267.141009][T17310] netlink: 'syz.4.5022': attribute type 1 has an invalid length. [ 267.143765][T17310] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5022'. [ 267.147652][T17310] netlink: 'syz.4.5022': attribute type 2 has an invalid length. [ 267.150760][T17310] netlink: 'syz.4.5022': attribute type 1 has an invalid length. [ 267.268502][T17317] batadv_slave_1: entered promiscuous mode [ 267.272854][T17316] batadv_slave_1: left promiscuous mode [ 267.378368][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 267.888348][T17363] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5047'. [ 268.089851][T17384] netlink: 'syz.4.5057': attribute type 23 has an invalid length. [ 268.161675][T11503] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 268.311978][T11503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.315651][T11503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.319069][T11503] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 268.323650][T11503] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.326873][T11503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.331545][T11503] usb 5-1: config 0 descriptor?? [ 268.418150][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 268.708194][ T9422] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 268.743398][T11503] plantronics 0003:047F:FFFF.0032: reserved main item tag 0xd [ 268.752478][T11503] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 268.872112][T17435] syzkaller1: entered promiscuous mode [ 268.874498][T17435] syzkaller1: entered allmulticast mode [ 268.878195][ T9422] usb 9-1: Using ep0 maxpacket: 32 [ 268.883750][ T9422] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 268.887446][ T9422] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 268.892020][ T9422] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 268.896848][ T9422] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 268.902900][ T9422] usb 9-1: config 0 interface 0 has no altsetting 0 [ 268.907845][ T9422] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 268.912054][ T9422] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 268.915586][ T9422] usb 9-1: Product: syz [ 268.917491][ T9422] usb 9-1: Manufacturer: syz [ 268.919826][ T9422] usb 9-1: SerialNumber: syz [ 268.924539][ T9422] usb 9-1: config 0 descriptor?? [ 268.929517][ T9422] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 268.934581][ T9422] ldusb 9-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 268.999267][ T6039] usb 5-1: USB disconnect, device number 25 [ 269.157488][ T9422] usb 9-1: USB disconnect, device number 23 [ 269.160707][ T9422] ldusb 9-1:0.0: LD USB Device #1 now disconnected [ 269.458208][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 270.038231][T11503] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 270.188239][T11503] usb 5-1: Using ep0 maxpacket: 8 [ 270.191418][T11503] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 270.195132][T11503] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 270.198550][T11503] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.201834][T11503] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.205758][T11503] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.208704][T11503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.238213][ T10] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 270.388244][ T10] usb 11-1: Using ep0 maxpacket: 32 [ 270.391544][ T10] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 270.394569][ T10] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 270.399000][ T10] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 270.402756][ T10] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 270.407143][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 270.412646][ T10] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 270.416127][ T10] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 270.417172][T11503] usb 5-1: GET_CAPABILITIES returned 0 [ 270.419097][ T10] usb 11-1: Product: syz [ 270.419107][ T10] usb 11-1: Manufacturer: syz [ 270.419115][ T10] usb 11-1: SerialNumber: syz [ 270.420383][ T10] usb 11-1: config 0 descriptor?? [ 270.421919][T11503] usbtmc 5-1:16.0: can't read capabilities [ 270.424618][ T10] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 270.435855][ T10] ldusb 11-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 270.508180][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 270.618370][T11503] usb 5-1: USB disconnect, device number 26 [ 270.632079][ T34] usb 11-1: USB disconnect, device number 7 [ 270.635381][ T34] ldusb 11-1:0.0: LD USB Device #1 now disconnected [ 270.938931][T17494] input: syz0 as /devices/virtual/input/input72 [ 271.038300][T17492] block nbd0: server does not support multiple connections per device. [ 271.042810][T17492] block nbd0: shutting down sockets [ 271.339933][ T40] audit: type=1326 audit(2000000391.545:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.0.5117" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f04579 code=0x0 [ 271.538157][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.388600][ T6051] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 272.538356][ T6051] usb 5-1: Using ep0 maxpacket: 16 [ 272.541901][ T6051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.545385][ T6051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.548623][ T6051] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 272.551904][ T6051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.557193][ T6051] usb 5-1: config 0 descriptor?? [ 272.578250][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.586785][T17592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.590765][T17592] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 272.600480][T17592] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 272.975344][ T6051] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5012.0033/input/input73 [ 273.040906][ T6051] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0458:5012.0033/input/input74 [ 273.102274][ T6051] kye 0003:0458:5012.0033: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0 [ 273.173285][ T6051] usb 5-1: USB disconnect, device number 27 [ 273.269879][ T9422] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 273.428327][ T9422] usb 11-1: Using ep0 maxpacket: 16 [ 273.432152][ T9422] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.436391][ T9422] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.441469][ T9422] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 273.445915][ T9422] usb 11-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 273.452988][ T9422] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.456536][ T9422] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 273.460092][ T9422] usb 11-1: SerialNumber: syz [ 273.465829][ T9422] hub 11-1:1.0: bad descriptor, ignoring hub [ 273.468695][ T9422] hub 11-1:1.0: probe with driver hub failed with error -5 [ 273.472620][ T9422] cdc_ether 11-1:1.0: probe with driver cdc_ether failed with error -22 [ 273.628183][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.702140][T17611] netlink: 'syz.0.5160': attribute type 2 has an invalid length. [ 273.870148][T17609] raw-gadget.1 gadget.6: fail, usb_ep_set_wedge returned -11 [ 273.990031][ T6039] usb 11-1: USB disconnect, device number 8 [ 274.018321][ T5981] Bluetooth: hci4: command 0x1003 tx timeout [ 274.018388][ T5978] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 274.108205][ T1226] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.112526][ T1226] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.189357][ T1226] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.192512][ T1226] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.262754][ T1226] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.266000][ T1226] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.287948][ T5981] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.297954][ T5981] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.303411][ T5981] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.306447][ T5981] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.309704][ T5981] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.333416][T17625] lo speed is unknown, defaulting to 1000 [ 274.365538][ T1226] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.369930][ T1226] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.410747][T17637] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5174'. [ 274.485249][T17625] chnl_net:caif_netlink_parms(): no params data found [ 274.533380][ T1226] bridge_slave_1: left allmulticast mode [ 274.535202][ T1226] bridge_slave_1: left promiscuous mode [ 274.537078][ T1226] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.543915][ T1226] bridge_slave_0: left allmulticast mode [ 274.545743][ T1226] bridge_slave_0: left promiscuous mode [ 274.547594][ T1226] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.658459][ T5981] Bluetooth: hci2: command 0x0405 tx timeout [ 274.724854][ T1226] bridge0 (unregistering): left allmulticast mode [ 274.874279][ T1226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.880608][ T1226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.884684][ T1226] bond0 (unregistering): Released all slaves [ 274.974163][ T1226] bond1 (unregistering): Released all slaves [ 274.981957][ T1226] bond2 (unregistering): Released all slaves [ 275.047792][T17625] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.050765][T17625] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.054709][T17625] bridge_slave_0: entered allmulticast mode [ 275.057704][T17625] bridge_slave_0: entered promiscuous mode [ 275.062545][T17625] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.065130][T17625] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.068313][T17625] bridge_slave_1: entered allmulticast mode [ 275.071914][T17625] bridge_slave_1: entered promiscuous mode [ 275.099881][ T1226] tipc: Disabling bearer [ 275.104509][ T1226] tipc: Left network mode [ 275.151775][T17625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.156704][T17625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.238941][T17625] team0: Port device team_slave_0 added [ 275.242244][T17625] team0: Port device team_slave_1 added [ 275.306988][T17625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.310071][T17625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.321007][T17625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.325850][T17625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.328304][T17625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.338776][T17625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.360659][ T1226] hsr_slave_0: left promiscuous mode [ 275.363541][ T1226] hsr_slave_1: left promiscuous mode [ 275.365724][ T1226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.368010][ T1226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.372167][ T1226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.374741][ T1226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.398752][ T1226] team0: left allmulticast mode [ 275.400389][ T1226] team_slave_0: left allmulticast mode [ 275.402268][ T1226] team_slave_1: left allmulticast mode [ 275.404023][ T1226] team0: left promiscuous mode [ 275.405971][ T1226] team_slave_0: left promiscuous mode [ 275.407940][ T1226] team_slave_1: left promiscuous mode [ 275.411508][ T1226] veth1_macvtap: left promiscuous mode [ 275.413834][ T1226] veth0_macvtap: left promiscuous mode [ 275.415673][ T1226] veth1_vlan: left promiscuous mode [ 275.417336][ T1226] veth0_vlan: left promiscuous mode [ 276.167030][ T1226] team0 (unregistering): Port device team_slave_1 removed [ 276.244936][ T1226] team0 (unregistering): Port device team_slave_0 removed [ 276.341296][ T5981] Bluetooth: hci3: command tx timeout [ 276.738583][ T5981] Bluetooth: hci2: command 0x0405 tx timeout [ 276.883505][T17702] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.5202'. [ 276.900459][T17625] hsr_slave_0: entered promiscuous mode [ 276.902634][T17625] hsr_slave_1: entered promiscuous mode [ 276.904517][T17625] debugfs: 'hsr0' already exists in 'hsr' [ 276.906322][T17625] Cannot create hsr debugfs directory [ 277.065553][T17625] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 277.069923][T17625] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 277.075760][T17625] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 277.079958][T17625] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 277.124399][T17625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.139174][T17625] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.153186][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.155538][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.161716][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.161835][ T1226] IPVS: stop unused estimator thread 0... [ 277.164121][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.291832][T17625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.417347][T17625] veth0_vlan: entered promiscuous mode [ 277.424939][T17625] veth1_vlan: entered promiscuous mode [ 277.440266][T17625] veth0_macvtap: entered promiscuous mode [ 277.445731][T17625] veth1_macvtap: entered promiscuous mode [ 277.455002][T17625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.464156][T17625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.470310][ T46] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.473150][ T46] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.476281][ T46] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.479561][ T46] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.517770][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.521191][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.535500][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.538026][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.584096][T17730] binder: 17729:17730 ioctl c0306201 800003c0 returned -14 [ 277.884036][T17754] KVM: debugfs: duplicate directory 17754-4 [ 277.915705][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5212'. [ 277.920889][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5212'. [ 278.032257][T17759] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5219'. [ 278.189747][T17775] loop7: detected capacity change from 0 to 7 [ 278.193201][T17775] Dev loop7: unable to read RDB block 7 [ 278.195067][T17775] loop7: unable to read partition table [ 278.197131][T17775] loop7: partition table beyond EOD, truncated [ 278.200241][T17775] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 278.376054][T17794] dummy0: entered promiscuous mode [ 278.378807][T17794] bond0: entered promiscuous mode [ 278.380466][T17794] bond_slave_0: entered promiscuous mode [ 278.382412][T17794] bond_slave_1: entered promiscuous mode [ 278.385439][T17794] hsr2: entered allmulticast mode [ 278.387298][T17794] dummy0: entered allmulticast mode [ 278.389766][T17794] bond0: entered allmulticast mode [ 278.391924][T17794] bond_slave_0: entered allmulticast mode [ 278.393936][T17794] bond_slave_1: entered allmulticast mode [ 278.397994][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5237'. [ 278.423051][ T5981] Bluetooth: hci3: command tx timeout [ 278.557446][ T5978] Bluetooth: hci4: sending frame failed (-49) [ 278.562728][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 278.818272][ T5981] Bluetooth: hci2: command 0x0405 tx timeout [ 279.208234][ T10] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 279.346377][ T40] audit: type=1326 audit(2000000399.545:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.7.5268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 279.355135][ T40] audit: type=1326 audit(2000000399.545:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.7.5268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 279.362486][ T40] audit: type=1326 audit(2000000399.545:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.7.5268" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 279.371205][ T40] audit: type=1326 audit(2000000399.545:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.7.5268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 279.380992][ T40] audit: type=1326 audit(2000000399.555:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.7.5268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 279.381966][ T10] usb 11-1: config 0 has no interfaces? [ 279.391630][ T40] audit: type=1326 audit(2000000399.555:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.7.5268" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 279.395669][ T10] usb 11-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 279.402070][ T40] audit: type=1326 audit(2000000399.555:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.7.5268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 279.404954][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.412594][ T40] audit: type=1326 audit(2000000399.555:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.7.5268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 279.412628][ T40] audit: type=1326 audit(2000000399.555:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.7.5268" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 279.412649][ T40] audit: type=1326 audit(2000000399.555:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17862 comm="syz.7.5268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 279.436715][ T10] usb 11-1: Product: syz [ 279.438155][ T10] usb 11-1: Manufacturer: syz [ 279.439689][ T10] usb 11-1: SerialNumber: syz [ 279.442619][ T10] usb 11-1: config 0 descriptor?? [ 279.638278][ T840] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 279.658692][T11503] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 279.800321][ T840] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 279.803743][ T840] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 279.807839][ T840] usb 6-1: config 0 interface 0 has no altsetting 0 [ 279.810070][T11503] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.811832][ T840] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 279.814649][T11503] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.814670][T11503] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.814688][T11503] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 279.818803][ T840] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 279.823165][T11503] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 279.823185][T11503] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.827213][ T840] usb 6-1: Product: syz [ 279.833407][T11503] usb 12-1: config 0 descriptor?? [ 279.835162][ T840] usb 6-1: Manufacturer: syz [ 279.847987][ T840] usb 6-1: SerialNumber: syz [ 279.850935][ T840] usb 6-1: config 0 descriptor?? [ 279.853150][T17847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.853780][ T840] hub 6-1:0.0: bad descriptor, ignoring hub [ 279.856787][T17847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.858707][ T840] hub 6-1:0.0: probe with driver hub failed with error -5 [ 279.866305][ T840] usb 6-1: selecting invalid altsetting 0 [ 279.868630][ T34] usb 11-1: USB disconnect, device number 9 [ 280.243976][T11503] keytouch 0003:0926:3333.0034: fixing up Keytouch IEC report descriptor [ 280.248730][T11503] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0926:3333.0034/input/input75 [ 280.327216][T11503] keytouch 0003:0926:3333.0034: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 280.444463][T11503] usb 12-1: USB disconnect, device number 2 [ 280.499240][ T5981] Bluetooth: hci3: command tx timeout [ 280.750361][T17865] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 280.764687][T17882] netlink: 'syz.6.5277': attribute type 2 has an invalid length. [ 280.767354][T17882] netlink: 85376 bytes leftover after parsing attributes in process `syz.6.5277'. [ 280.981811][T17890] loop2: detected capacity change from 0 to 7 [ 280.984846][T17890] Dev loop2: unable to read RDB block 7 [ 280.987121][T17890] loop2: AHDI p1 p2 p3 [ 280.988842][T17890] loop2: partition table partially beyond EOD, truncated [ 280.991851][T17890] loop2: p1 start 1601398130 is beyond EOD, truncated [ 280.995429][T17890] loop2: p2 start 1702059890 is beyond EOD, truncated [ 281.001674][T17892] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5282'. [ 281.041335][T17896] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 281.079254][T17898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.087523][T17898] bond0: (slave rose0): Enslaving as an active interface with an up link [ 281.359155][ T9423] usb 6-1: USB disconnect, device number 29 [ 281.565403][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5304'. [ 281.568855][T17955] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5304'. [ 281.988159][ T9422] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 282.138283][ T9422] usb 9-1: Using ep0 maxpacket: 32 [ 282.141783][ T9422] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.145386][ T9422] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.149527][ T9422] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 282.153208][ T9422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.157991][ T9422] usb 9-1: config 0 descriptor?? [ 282.573305][ T9422] savu 0003:1E7D:2D5A.0035: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 282.578315][ T5981] Bluetooth: hci3: command tx timeout [ 282.728321][ T1456] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 282.828903][ T1472] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 282.832809][ T9422] usb 9-1: USB disconnect, device number 24 [ 282.878921][ T1456] usb 12-1: Using ep0 maxpacket: 8 [ 282.882358][ T1456] usb 12-1: config 0 interface 0 has no altsetting 0 [ 282.884772][ T1456] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 282.888012][ T1456] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.891732][ T1456] usb 12-1: config 0 descriptor?? [ 282.979141][ T1472] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 282.982627][ T1472] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 282.985731][ T1472] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 282.990146][ T1472] usb 6-1: config 0 interface 0 has no altsetting 0 [ 282.993779][ T1472] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 282.997854][ T1472] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.003085][ T1472] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.007033][ T1472] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.009996][ T1472] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.013483][ T1472] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.016484][ T1472] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.019755][ T1472] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.024057][ T1472] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.027475][ T1472] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.032448][ T1472] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.037248][ T1472] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.040442][ T1472] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.044702][ T1472] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.048654][ T1472] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.052006][ T1472] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.055078][ T1472] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.059647][ T1472] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.063400][ T1472] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 283.067541][ T1472] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 283.072405][ T1472] usb 6-1: config 0 interface 0 has no altsetting 0 [ 283.076478][ T1472] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 283.080251][ T1472] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 283.083802][ T1472] usb 6-1: Product: syz [ 283.085628][ T1472] usb 6-1: Manufacturer: syz [ 283.087588][ T1472] usb 6-1: SerialNumber: syz [ 283.091724][ T1472] usb 6-1: config 0 descriptor?? [ 283.099749][ T1472] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 283.302068][ T9422] usb 6-1: USB disconnect, device number 30 [ 283.307410][ T9422] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 283.311169][ T1456] mcp2221 0003:04D8:00DD.0036: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 283.407152][T18038] netlink: 'syz.4.5340': attribute type 10 has an invalid length. [ 283.439036][T18041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5341'. [ 283.508247][ T9423] usb 12-1: USB disconnect, device number 3 [ 284.778485][ T6039] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 284.932465][ T6039] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.935218][ T6039] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.938497][ T6039] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.941564][ T6039] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 284.947178][ T6039] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.950159][ T6039] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.952681][ T6039] usb 12-1: Product: syz [ 284.954029][ T6039] usb 12-1: Manufacturer: syz [ 284.957835][ T6039] cdc_wdm 12-1:1.0: skipping garbage [ 284.959696][ T6039] cdc_wdm 12-1:1.0: probe with driver cdc_wdm failed with error -22 [ 285.160650][ T5981] Bluetooth: hci3: Malformed LE Event: 0x0d [ 285.160983][ T6039] usb 12-1: USB disconnect, device number 4 [ 285.181856][ C2] vcan0: j1939_tp_rxtimer: 0xffff88804e4a2400: rx timeout, send abort [ 285.186330][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff88804e4a2400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 285.328227][ T72] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 285.488232][ T72] usb 6-1: Using ep0 maxpacket: 8 [ 285.491222][ T72] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 285.493807][ T72] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.497383][ T72] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.503300][ T72] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.506500][ T72] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.510650][ T72] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.513593][ T72] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.722966][ T72] usb 6-1: usb_control_msg returned -32 [ 285.724824][ T72] usbtmc 6-1:16.0: can't read capabilities [ 285.776152][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5381'. [ 285.783512][T18132] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5381'. [ 285.790007][T18134] : renamed from wg2 (while UP) [ 285.858570][ T6038] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 286.018347][ T6038] usb 11-1: Using ep0 maxpacket: 16 [ 286.023831][ T6038] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.028036][ T6038] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.031857][ T6038] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 286.045294][ T6038] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 286.048320][ T6038] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.052198][ T6038] usb 11-1: config 0 descriptor?? [ 286.143812][T18155] sp0: Synchronizing with TNC [ 286.152282][T18154] [U] [ 286.466562][ T6038] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 286.468988][ T6038] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 286.471464][ T6038] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 286.473800][ T6038] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 286.476163][ T6038] shield 0003:0955:7214.0037: unknown main item tag 0x0 [ 286.479729][ T6038] input: HID 0955:7214 Haptics as /devices/virtual/input/input76 [ 286.494376][ T6038] shield 0003:0955:7214.0037: Registered Thunderstrike controller [ 286.497651][ T6038] shield 0003:0955:7214.0037: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 286.668764][ T72] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 286.668858][ T10] usb 11-1: USB disconnect, device number 10 [ 286.673427][ T72] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 286.680205][ T72] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 286.684530][ T72] shield 0003:0955:7214.0037: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 287.271046][T18183] netlink: 71 bytes leftover after parsing attributes in process `syz.6.5403'. [ 287.428160][ T1456] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 287.589448][ T1456] usb 9-1: Using ep0 maxpacket: 8 [ 287.594386][ T1456] usb 9-1: config 0 interface 0 has no altsetting 0 [ 287.597376][ T1456] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 287.601753][ T1456] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.607519][ T1456] usb 9-1: config 0 descriptor?? [ 287.880289][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 287.880299][ T40] audit: type=1326 audit(2000000408.085:1365): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=18218 comm="syz.7.5418" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x0 [ 288.018849][ T1456] mcp2221 0003:04D8:00DD.0038: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 288.112467][ T1472] usb 6-1: USB disconnect, device number 31 [ 288.220281][ T1456] usb 9-1: USB disconnect, device number 25 [ 288.998244][ T1456] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 289.177275][ T1456] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 289.181709][ T1456] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.185546][ T1456] usb 9-1: Product: syz [ 289.187532][ T1456] usb 9-1: Manufacturer: syz [ 289.189893][ T1456] usb 9-1: SerialNumber: syz [ 289.197142][ T1456] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 289.211257][ T9422] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 289.426552][ T1456] usb 9-1: USB disconnect, device number 26 [ 290.218304][T18301] overlayfs: conflicting lowerdir path [ 290.226974][T18301] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 290.258371][ T9422] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 290.263354][T18304] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.263814][ T9422] ath9k_htc: Failed to initialize the device [ 290.271656][ T1456] usb 9-1: ath9k_htc: USB layer deinitialized [ 290.323246][T18308] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5454'. [ 290.326224][T18308] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5454'. [ 290.329228][T18308] netlink: 50 bytes leftover after parsing attributes in process `syz.7.5454'. [ 290.650531][T18330] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 290.655063][T18330] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 290.660385][T18330] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 290.947062][T18354] syzkaller1: entered promiscuous mode [ 290.949388][T18356] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 290.955881][T18354] syzkaller1: entered allmulticast mode [ 291.045425][T18362] kvm: user requested TSC rate below hardware speed [ 291.438760][ T1472] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 291.491851][T18403] smc: net device bond0 applied user defined pnetid SYZ2 [ 291.521398][T18407] netlink: 'syz.6.5502': attribute type 12 has an invalid length. [ 291.523848][T18407] netlink: 'syz.6.5502': attribute type 29 has an invalid length. [ 291.526389][T18407] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5502'. [ 291.530371][T18407] netlink: 'syz.6.5502': attribute type 1 has an invalid length. [ 291.533326][T18407] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5502'. [ 291.600973][ T1472] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 291.604266][ T1472] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.609898][ T1472] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 291.613144][ T1472] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.824300][ T1472] usb 12-1: usb_control_msg returned -32 [ 291.826160][ T1472] usbtmc 12-1:16.0: can't read capabilities [ 293.469353][T18488] io-wq is not configured for unbound workers [ 294.173802][T18521] binder: 18520:18521 ioctl c0306201 80000540 returned -22 [ 294.222571][ T7758] usb 12-1: USB disconnect, device number 5 [ 294.694999][T18555] [U] [ 294.930818][T18560] overlayfs: upper fs does not support tmpfile. [ 294.968431][ T9423] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 295.128152][ T9423] usb 11-1: Using ep0 maxpacket: 8 [ 295.131868][ T9423] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.135419][ T9423] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.139867][ T9423] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.144347][ T9423] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.149873][ T9423] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.153647][ T9423] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.198289][ T7758] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 295.349977][ T7758] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 295.352613][ T7758] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 295.355687][ T7758] usb 6-1: config 0 interface 0 has no altsetting 0 [ 295.359542][ T7758] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 295.362341][ T7758] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 295.362945][ T9423] usb 11-1: GET_CAPABILITIES returned 0 [ 295.364783][ T7758] usb 6-1: Product: syz [ 295.364794][ T7758] usb 6-1: Manufacturer: syz [ 295.364802][ T7758] usb 6-1: SerialNumber: syz [ 295.366686][ T9423] usbtmc 11-1:16.0: can't read capabilities [ 295.369137][ T7758] usb 6-1: config 0 descriptor?? [ 295.376230][ T7758] hub 6-1:0.0: bad descriptor, ignoring hub [ 295.378662][ T7758] hub 6-1:0.0: probe with driver hub failed with error -5 [ 295.382327][ T7758] usb 6-1: selecting invalid altsetting 0 [ 295.565412][ T10] usb 11-1: USB disconnect, device number 11 [ 295.648320][ T1456] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 295.691259][ T40] audit: type=1326 audit(2000000415.895:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz.7.5573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 295.699778][ T40] audit: type=1326 audit(2000000415.895:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz.7.5573" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 295.707311][ T40] audit: type=1326 audit(2000000415.895:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="syz.7.5573" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 295.714251][ T40] audit: type=1326 audit(2000000415.895:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 295.722192][ T40] audit: type=1326 audit(2000000415.895:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 295.728872][ T40] audit: type=1326 audit(2000000415.895:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 295.735609][ T40] audit: type=1326 audit(2000000415.895:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 295.743926][ T40] audit: type=1326 audit(2000000415.895:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 295.750587][ T40] audit: type=1326 audit(2000000415.895:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 295.757140][ T40] audit: type=1326 audit(2000000415.895:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18579 comm="" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 295.798260][ T1456] usb 9-1: Using ep0 maxpacket: 8 [ 295.801939][ T1456] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.805174][ T1456] usb 9-1: config 0 has no interface number 0 [ 295.807489][ T1456] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.812129][ T1456] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 295.815034][ T1456] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.819479][ T1456] usb 9-1: config 0 descriptor?? [ 295.824345][ T1456] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 295.832601][T18586] bond0: entered promiscuous mode [ 295.834697][T18586] bond_slave_0: entered promiscuous mode [ 295.837235][T18586] bond_slave_1: entered promiscuous mode [ 295.840721][T18586] batadv0: entered promiscuous mode [ 295.843185][T18586] debugfs: 'hsr1' already exists in 'hsr' [ 295.845173][T18586] Cannot create hsr debugfs directory [ 295.847302][T18586] hsr1: entered allmulticast mode [ 295.849276][T18586] bond0: entered allmulticast mode [ 295.850913][T18586] bond_slave_0: entered allmulticast mode [ 295.852786][T18586] bond_slave_1: entered allmulticast mode [ 295.854800][T18586] batadv0: entered allmulticast mode [ 295.856741][T18586] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 295.860031][T18586] bond0: left promiscuous mode [ 295.861800][T18586] bond_slave_0: left promiscuous mode [ 295.863762][T18586] bond_slave_1: left promiscuous mode [ 295.866237][T18586] batadv0: left promiscuous mode [ 296.026678][ T1456] usb 9-1: USB disconnect, device number 27 [ 296.125874][T18594] pim6reg1: entered promiscuous mode [ 296.127740][T18594] pim6reg1: entered allmulticast mode [ 296.205349][T18596] netlink: 27 bytes leftover after parsing attributes in process `syz.6.5581'. [ 296.288624][T18562] usb 6-1: reset high-speed USB device number 32 using dummy_hcd [ 296.299332][T18562] usb 6-1: device reset changed ep0 maxpacket size! [ 296.304312][ T1455] usb 6-1: USB disconnect, device number 32 [ 296.438311][ T1455] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 296.587807][T18620] evm: overlay not supported [ 296.588253][ T1455] usb 6-1: Using ep0 maxpacket: 8 [ 296.603773][ T1455] usb 6-1: unable to get BOS descriptor or descriptor too short [ 296.608984][ T1455] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 296.611583][ T1455] usb 6-1: can't read configurations, error -71 [ 296.649625][T18626] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 297.115693][T18660] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 297.139521][T18664] loop7: detected capacity change from 0 to 7 [ 297.144146][T18664] Dev loop7: unable to read RDB block 7 [ 297.146545][T18664] loop7: unable to read partition table [ 297.149729][T18664] loop7: partition table beyond EOD, truncated [ 297.152281][T18664] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 297.556426][T18703] syzkaller1: entered promiscuous mode [ 297.559494][T18703] syzkaller1: entered allmulticast mode [ 297.584255][T18706] syzkaller1: entered promiscuous mode [ 297.586112][T18706] syzkaller1: entered allmulticast mode [ 297.828441][T18739] Invalid ELF header magic: != ELF [ 297.845607][T18745] syzkaller1: entered promiscuous mode [ 297.847806][T18745] syzkaller1: entered allmulticast mode [ 298.128225][ T9423] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 298.280788][ T9423] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 298.284266][ T9423] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 298.287303][ T9423] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 298.290348][ T9423] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.294245][ T92] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 298.299398][T18749] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 298.305251][ T9423] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.511248][ T6038] usb 9-1: USB disconnect, device number 28 [ 299.792304][T18840] : Can't lookup blockdev [ 299.817411][T18842] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5692'. [ 300.285496][T18858] sctp: [Deprecated]: syz.6.5699 (pid 18858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 300.285496][T18858] Use struct sctp_sack_info instead [ 300.338305][ T5978] Bluetooth: hci4: command 0x1003 tx timeout [ 300.342299][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 300.489450][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5708'. [ 300.607812][T18892] bond0: entered promiscuous mode [ 300.610640][T18892] bond_slave_0: entered promiscuous mode [ 300.612898][T18892] bond_slave_1: entered promiscuous mode [ 300.616517][T18892] batadv0: entered promiscuous mode [ 300.619732][T18892] debugfs: 'hsr1' already exists in 'hsr' [ 300.621650][T18892] Cannot create hsr debugfs directory [ 300.623691][T18892] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 301.378919][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 301.378930][ T40] audit: type=1326 audit(2000000421.585:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.6.5746" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd2579 code=0x0 [ 301.385582][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5747'. [ 301.502052][T18974] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 301.575700][T18985] overlayfs: failed lookup in lower (newroot/1474, name='file1', err=-40): overlapping layers [ 301.680206][T18997] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 301.683104][T18997] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 301.688463][T18997] overlayfs: failed to get uuid (795/file1, err=-13); falling back to uuid=null. [ 301.731241][T19000] gretap0: entered promiscuous mode [ 301.735557][T19000] batman_adv: batadv0: Adding interface: macvlan2 [ 301.739616][T19000] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.748777][T19000] batman_adv: batadv0: Interface activated: macvlan2 [ 301.913769][T19013] pim6reg1: entered promiscuous mode [ 301.915691][T19013] pim6reg1: entered allmulticast mode [ 302.023723][T19022] loop8: detected capacity change from 0 to 7 [ 302.028754][T19022] Dev loop8: unable to read RDB block 7 [ 302.030642][T19022] loop8: unable to read partition table [ 302.032630][T19022] loop8: partition table beyond EOD, truncated [ 302.034685][T19022] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 302.100903][T19022] Dev loop8: unable to read RDB block 7 [ 302.102792][T19022] loop8: unable to read partition table [ 302.104701][T19022] loop8: partition table beyond EOD, truncated [ 302.106756][T19022] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 302.317206][T19037] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 302.320806][T19037] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 302.398545][ T7758] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 302.485601][T19045] netlink: 27 bytes leftover after parsing attributes in process `syz.6.5784'. [ 302.488568][T19044] syzkaller1: entered promiscuous mode [ 302.488589][T19044] syzkaller1: entered allmulticast mode [ 302.572303][ T7758] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.576287][ T7758] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.579733][ T7758] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 302.582780][ T7758] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.586624][ T7758] usb 9-1: config 0 descriptor?? [ 302.773128][T19057] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.776521][T19057] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.808799][T19057] netlink: 'syz.6.5791': attribute type 16 has an invalid length. [ 302.811373][T19057] netlink: 'syz.6.5791': attribute type 17 has an invalid length. [ 302.821058][T19059] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5790'. [ 302.825001][T19057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.000039][ T7758] cm6533_jd 0003:0D8C:0022.0039: unknown main item tag 0x0 [ 303.002631][ T7758] cm6533_jd 0003:0D8C:0022.0039: unknown main item tag 0x0 [ 303.006262][ T7758] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0D8C:0022.0039/input/input79 [ 303.017624][T19079] openvswitch: netlink: IPv6 tunnel dst address is zero [ 303.022940][ T7758] cm6533_jd 0003:0D8C:0022.0039: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 303.200671][ T7758] usb 9-1: USB disconnect, device number 29 [ 303.388179][ T34] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 303.550504][ T34] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 303.556934][ T34] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.560538][ T34] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 303.563689][ T34] usb 12-1: SerialNumber: syz [ 303.978292][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 304.151413][ T10] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 304.154574][ T10] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 304.157677][ T10] usb 9-1: config 1 interface 0 has no altsetting 0 [ 304.163522][ T10] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 304.167311][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.171155][ T10] usb 9-1: Product: syz [ 304.172957][ T10] usb 9-1: Manufacturer: syz [ 304.174950][ T10] usb 9-1: SerialNumber: syz [ 304.180822][T19101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 304.182484][ T34] cdc_ether 12-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 304.183282][T19101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 304.236510][T19126] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 304.580569][ T34] usb 12-1: USB disconnect, device number 6 [ 304.584739][ T34] cdc_ether 12-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 304.708376][ T7758] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 304.744294][T19155] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5834'. [ 304.859861][ T7758] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.864519][ T7758] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 304.868882][ T7758] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 304.872661][ T7758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.878633][T19149] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 304.885562][ T7758] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.091460][ T1455] usb 6-1: USB disconnect, device number 35 [ 305.201236][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: d2:a0:3b:1b:87:e5 [ 305.211082][ T10] rtl8150 9-1:1.0: eth18: rtl8150 is detected [ 305.216204][ T10] usb 9-1: USB disconnect, device number 30 [ 306.126128][T19237] netlink: 'syz.7.5869': attribute type 1 has an invalid length. [ 306.164286][T19237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.169761][T19237] bond1: (slave bond2): making interface the new active one [ 306.172680][T19237] bond1: (slave bond2): Enslaving as an active interface with an up link [ 306.214333][T19244] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 306.581416][T19261] loop3: detected capacity change from 0 to 7 [ 306.587760][T19261] Dev loop3: unable to read RDB block 7 [ 306.590446][T19261] loop3: unable to read partition table [ 306.593441][T19261] loop3: partition table beyond EOD, truncated [ 306.596073][T19261] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 306.626906][T19264] netlink: 'syz.7.5881': attribute type 1 has an invalid length. [ 306.641495][T19264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.659736][T19264] bond3: (slave geneve2): making interface the new active one [ 306.663154][T19264] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 306.727194][ T5978] Bluetooth: hci4: sending frame failed (-49) [ 306.730408][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 306.866489][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5890'. [ 306.947081][T19300] Invalid/unusable pipe [ 307.107678][T19318] veth1_to_bond: entered allmulticast mode [ 307.110938][T19317] veth1_to_bond: left allmulticast mode [ 307.268296][ T10] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 307.439800][ T10] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 307.443896][ T10] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 307.447131][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 307.450190][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.454593][T19310] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.458567][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.655022][T12396] bridge0: port 3(syz_tun) entered disabled state [ 307.661001][ T840] usb 9-1: USB disconnect, device number 31 [ 307.667686][T12396] syz_tun (unregistering): left allmulticast mode [ 307.672020][T12396] syz_tun (unregistering): left promiscuous mode [ 307.674418][T12396] bridge0: port 3(syz_tun) entered disabled state [ 307.807792][ T92] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.812095][ T92] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.906807][ T92] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.910302][ T92] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.992127][ T92] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.996264][ T92] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.035450][ T5978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.043721][ T5978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.046787][ T5978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.050666][ T5978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.053915][ T5978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.093575][T19353] Bluetooth: MGMT ver 1.23 [ 308.122483][T19356] dummy0: entered allmulticast mode [ 308.126424][T19356] dummy0: left allmulticast mode [ 308.161696][ T92] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.165502][ T92] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.203777][T19350] chnl_net:caif_netlink_parms(): no params data found [ 308.207941][T19363] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 308.269413][T19350] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.271745][T19350] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.274109][T19350] bridge_slave_0: entered allmulticast mode [ 308.277135][T19350] bridge_slave_0: entered promiscuous mode [ 308.282315][T19350] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.285715][T19350] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.289139][T19350] bridge_slave_1: entered allmulticast mode [ 308.292046][T19350] bridge_slave_1: entered promiscuous mode [ 308.338301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.342970][T19350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.357313][T19350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.437005][T19350] team0: Port device team_slave_0 added [ 308.446846][T19350] team0: Port device team_slave_1 added [ 308.489660][T19350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.492207][T19350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.501550][T19350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.516272][T19350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.518907][T19350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.528292][T19350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.533419][ T92] bridge_slave_1: left allmulticast mode [ 308.535363][ T92] bridge_slave_1: left promiscuous mode [ 308.537226][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.543876][ T92] bridge_slave_0: left allmulticast mode [ 308.545727][ T92] bridge_slave_0: left promiscuous mode [ 308.547594][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.583378][T19397] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 308.678235][ T1456] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 308.834554][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.841397][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.847126][ T92] bond0 (unregistering): Released all slaves [ 308.858289][ T1456] usb 12-1: Using ep0 maxpacket: 16 [ 308.865364][ T1456] usb 12-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 308.869921][ T1456] usb 12-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.873814][ T1456] usb 12-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.877647][ T1456] usb 12-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 308.882631][ T1456] usb 12-1: config 7 interface 0 has no altsetting 0 [ 308.885142][ T1456] usb 12-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 308.888027][ T1456] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.965378][ T92] tipc: Left network mode [ 308.968136][T19350] hsr_slave_0: entered promiscuous mode [ 308.970942][T19350] hsr_slave_1: entered promiscuous mode [ 308.973849][T19350] debugfs: 'hsr0' already exists in 'hsr' [ 308.976132][T19350] Cannot create hsr debugfs directory [ 309.133264][T19425] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5951'. [ 309.281616][T19350] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 309.288930][T19350] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 309.296329][T19350] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 309.304734][T19350] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 309.331938][T19432] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5954'. [ 309.342367][ T92] hsr_slave_0: left promiscuous mode [ 309.345017][ T92] hsr_slave_1: left promiscuous mode [ 309.345306][ T1456] input: HID 0458:5010 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:7.0/0003:0458:5010.003A/input/input80 [ 309.347355][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.354759][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.357217][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.380262][ T46] wlan1: Trigger new scan to find an IBSS to join [ 309.403283][ T92] team0: left allmulticast mode [ 309.405105][ T92] team_slave_0: left allmulticast mode [ 309.406808][ T92] team_slave_1: left allmulticast mode [ 309.411080][ T92] team0: left promiscuous mode [ 309.412052][ T1456] kye 0003:0458:5010.003A: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.7-1/input0 [ 309.414532][ T92] team_slave_0: left promiscuous mode [ 309.418627][ T92] team_slave_1: left promiscuous mode [ 309.420861][ T92] veth1_to_batadv: left promiscuous mode [ 309.423147][ T92] veth1_macvtap: left promiscuous mode [ 309.425179][ T92] veth0_macvtap: left promiscuous mode [ 309.427163][ T92] veth1_vlan: left promiscuous mode [ 309.431057][ T92] veth0_vlan: left promiscuous mode [ 309.979715][T19464] [ 309.981102][T19464] ===================================================== [ 309.984073][T19464] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 309.986705][T19464] syzkaller #0 Not tainted [ 309.989130][T19464] ----------------------------------------------------- [ 309.994547][T19464] syz.6.5965/19464 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 309.997044][T19464] ffff88807090f408 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 310.000438][T19464] [ 310.000438][T19464] and this task is already holding: [ 310.003503][T19464] ffff88800e1e8028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 310.007987][T19464] which would create a new lock dependency: [ 310.010906][T19464] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 310.015080][T19464] [ 310.015080][T19464] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 310.018915][T19464] (&dev->event_lock#2){..-.}-{3:3} [ 310.018954][T19464] [ 310.018954][T19464] ... which became SOFTIRQ-irq-safe at: [ 310.023840][T19464] lock_acquire+0x179/0x350 [ 310.025364][T19464] _raw_spin_lock_irqsave+0x3a/0x60 [ 310.027087][T19464] input_inject_event+0x9f/0x3b0 [ 310.028881][T19464] led_set_brightness+0x217/0x290 [ 310.030968][T19464] led_trigger_event+0xda/0x270 [ 310.033193][T19464] kbd_bh+0x21b/0x300 [ 310.034986][T19464] tasklet_action_common+0x284/0x400 [ 310.037276][T19464] handle_softirqs+0x219/0x8e0 [ 310.039323][T19464] run_ksoftirqd+0x3a/0x60 [ 310.041256][T19464] smpboot_thread_fn+0x3f4/0xae0 [ 310.043372][T19464] kthread+0x3c5/0x780 [ 310.045150][T19464] ret_from_fork+0x5d4/0x6f0 [ 310.047141][T19464] ret_from_fork_asm+0x1a/0x30 [ 310.049425][T19464] [ 310.049425][T19464] to a SOFTIRQ-irq-unsafe lock: [ 310.052706][T19464] (tasklist_lock){.+.+}-{3:3} [ 310.052739][T19464] [ 310.052739][T19464] ... which became SOFTIRQ-irq-unsafe at: [ 310.058205][T19464] ... [ 310.058216][T19464] lock_acquire+0x179/0x350 [ 310.061374][T19464] _raw_read_lock+0x5f/0x70 [ 310.063316][T19464] __do_wait+0x105/0x890 [ 310.064959][T19464] do_wait+0x21e/0x5a0 [ 310.066580][T19464] kernel_wait+0x9f/0x160 [ 310.068167][T19464] call_usermodehelper_exec_work+0xf1/0x170 [ 310.070772][T19464] process_one_work+0x9cf/0x1b70 [ 310.073352][T19464] worker_thread+0x6c8/0xf10 [ 310.075248][T19464] kthread+0x3c5/0x780 [ 310.076688][T19464] ret_from_fork+0x5d4/0x6f0 [ 310.078205][T19464] ret_from_fork_asm+0x1a/0x30 [ 310.079763][T19464] [ 310.079763][T19464] other info that might help us debug this: [ 310.079763][T19464] [ 310.083793][T19464] Chain exists of: [ 310.083793][T19464] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 310.083793][T19464] [ 310.090748][T19464] Possible interrupt unsafe locking scenario: [ 310.090748][T19464] [ 310.094165][T19464] CPU0 CPU1 [ 310.096419][T19464] ---- ---- [ 310.098543][T19464] lock(tasklist_lock); [ 310.100225][T19464] local_irq_disable(); [ 310.102957][T19464] lock(&dev->event_lock#2); [ 310.105527][T19464] lock(&client->buffer_lock); [ 310.108951][T19464] [ 310.110420][T19464] lock(&dev->event_lock#2); [ 310.111123][ T5981] Bluetooth: hci0: command tx timeout [ 310.112670][T19464] [ 310.112670][T19464] *** DEADLOCK *** [ 310.112670][T19464] [ 310.112679][T19464] 7 locks held by syz.6.5965/19464: [ 310.112693][T19464] #0: ffff888025c83118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x184/0x440 [ 310.124424][T19464] #1: ffff888022d0c230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 310.128390][T19464] #2: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 310.131979][T19464] #3: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 310.135413][T19464] #4: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 310.138703][T19464] #5: ffff88800e1e8028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 310.142730][T19464] #6: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 310.146456][T19464] [ 310.146456][T19464] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 310.150768][T19464] -> (&dev->event_lock#2){..-.}-{3:3} { [ 310.153203][T19464] IN-SOFTIRQ-W at: [ 310.155079][T19464] lock_acquire+0x179/0x350 [ 310.157764][T19464] _raw_spin_lock_irqsave+0x3a/0x60 [ 310.160453][T19464] input_inject_event+0x9f/0x3b0 [ 310.162989][T19464] led_set_brightness+0x217/0x290 [ 310.165856][T19464] led_trigger_event+0xda/0x270 [ 310.169300][T19464] kbd_bh+0x21b/0x300 [ 310.172179][T19464] tasklet_action_common+0x284/0x400 [ 310.175508][T19464] handle_softirqs+0x219/0x8e0 [ 310.178680][T19464] run_ksoftirqd+0x3a/0x60 [ 310.181629][T19464] smpboot_thread_fn+0x3f4/0xae0 [ 310.184455][T19464] kthread+0x3c5/0x780 [ 310.186977][T19464] ret_from_fork+0x5d4/0x6f0 [ 310.190088][T19464] ret_from_fork_asm+0x1a/0x30 [ 310.193004][T19464] INITIAL USE at: [ 310.194748][T19464] lock_acquire+0x179/0x350 [ 310.197714][T19464] _raw_spin_lock_irqsave+0x3a/0x60 [ 310.200669][T19464] input_inject_event+0x9f/0x3b0 [ 310.203389][T19464] led_set_brightness+0x217/0x290 [ 310.206067][T19464] kbd_led_trigger_activate+0xcb/0x110 [ 310.209165][T19464] led_trigger_set+0x59a/0xc50 [ 310.212153][T19464] led_trigger_set_default+0x1e0/0x2e0 [ 310.215323][T19464] led_classdev_register_ext+0x7b8/0xa10 [ 310.218541][T19464] input_leds_connect+0x552/0x8e0 [ 310.221310][T19464] input_attach_handler.isra.0+0x176/0x250 [ 310.224455][T19464] input_register_device+0xab9/0x1180 [ 310.227607][T19464] atkbd_connect+0x5f8/0xa40 [ 310.230396][T19464] serio_driver_probe+0x7c/0xd0 [ 310.233208][T19464] really_probe+0x23e/0xa90 [ 310.236068][T19464] __driver_probe_device+0x1de/0x440 [ 310.238967][T19464] driver_probe_device+0x4c/0x1b0 [ 310.241736][T19464] __driver_attach+0x283/0x580 [ 310.244335][T19464] bus_for_each_dev+0x13b/0x1d0 [ 310.247147][T19464] serio_handle_event+0x335/0xc30 [ 310.249908][T19464] process_one_work+0x9cf/0x1b70 [ 310.252625][T19464] worker_thread+0x6c8/0xf10 [ 310.255226][T19464] kthread+0x3c5/0x780 [ 310.257617][T19464] ret_from_fork+0x5d4/0x6f0 [ 310.260611][T19464] ret_from_fork_asm+0x1a/0x30 [ 310.263447][T19464] } [ 310.264725][T19464] ... key at: [] __key.7+0x0/0x40 [ 310.267661][T19464] -> (&client->buffer_lock){....}-{3:3} { [ 310.269993][T19464] INITIAL USE at: [ 310.271629][T19464] lock_acquire+0x179/0x350 [ 310.274002][T19464] _raw_spin_lock_irqsave+0x3a/0x60 [ 310.276973][T19464] evdev_do_ioctl+0x347/0x1b30 [ 310.279589][T19464] evdev_ioctl_compat+0x16f/0x1a0 [ 310.282255][T19464] __ia32_compat_sys_ioctl+0x242/0x370 [ 310.285173][T19464] __do_fast_syscall_32+0x7c/0x3a0 [ 310.287993][T19464] do_fast_syscall_32+0x32/0x80 [ 310.290653][T19464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.293994][T19464] } [ 310.295125][T19464] ... key at: [] __key.1+0x0/0x40 [ 310.298266][T19464] ... acquired at: [ 310.299758][T19464] _raw_spin_lock+0x2e/0x40 [ 310.301700][T19464] evdev_pass_values+0x10e/0x9b0 [ 310.303750][T19464] evdev_events+0x1bb/0x390 [ 310.305696][T19464] input_pass_values+0x74e/0x880 [ 310.307783][T19464] input_handle_event+0xf00/0x14d0 [ 310.310159][T19464] input_inject_event+0x1e8/0x3b0 [ 310.312550][T19464] evdev_write+0x2e1/0x440 [ 310.314933][T19464] vfs_write+0x2a0/0x11d0 [ 310.317129][T19464] ksys_write+0x1f8/0x250 [ 310.319317][T19464] __do_fast_syscall_32+0x7c/0x3a0 [ 310.321636][T19464] do_fast_syscall_32+0x32/0x80 [ 310.323672][T19464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.326309][T19464] [ 310.327333][T19464] [ 310.327333][T19464] the dependencies between the lock to be acquired [ 310.327347][T19464] and SOFTIRQ-irq-unsafe lock: [ 310.332968][T19464] -> (tasklist_lock){.+.+}-{3:3} { [ 310.335145][T19464] HARDIRQ-ON-R at: [ 310.337385][T19464] lock_acquire+0x179/0x350 [ 310.340263][T19464] _raw_read_lock+0x5f/0x70 [ 310.343291][T19464] __do_wait+0x105/0x890 [ 310.346219][T19464] do_wait+0x21e/0x5a0 [ 310.348877][T19464] kernel_wait+0x9f/0x160 [ 310.351476][T19464] call_usermodehelper_exec_work+0xf1/0x170 [ 310.354673][T19464] process_one_work+0x9cf/0x1b70 [ 310.357517][T19464] worker_thread+0x6c8/0xf10 [ 310.359912][T19464] kthread+0x3c5/0x780 [ 310.362808][T19464] ret_from_fork+0x5d4/0x6f0 [ 310.365812][T19464] ret_from_fork_asm+0x1a/0x30 [ 310.368818][T19464] SOFTIRQ-ON-R at: [ 310.370507][T19464] lock_acquire+0x179/0x350 [ 310.373059][T19464] _raw_read_lock+0x5f/0x70 [ 310.375668][T19464] __do_wait+0x105/0x890 [ 310.378516][T19464] do_wait+0x21e/0x5a0 [ 310.381199][T19464] kernel_wait+0x9f/0x160 [ 310.383924][T19464] call_usermodehelper_exec_work+0xf1/0x170 [ 310.387277][T19464] process_one_work+0x9cf/0x1b70 [ 310.390225][T19464] worker_thread+0x6c8/0xf10 [ 310.393185][T19464] kthread+0x3c5/0x780 [ 310.395909][T19464] ret_from_fork+0x5d4/0x6f0 [ 310.398858][T19464] ret_from_fork_asm+0x1a/0x30 [ 310.401682][T19464] INITIAL USE at: [ 310.403356][T19464] lock_acquire+0x179/0x350 [ 310.405973][T19464] _raw_write_lock_irq+0x36/0x50 [ 310.408722][T19464] copy_process+0x4caf/0x7690 [ 310.411442][T19464] kernel_clone+0xfc/0x930 [ 310.414086][T19464] user_mode_thread+0xc7/0x110 [ 310.416812][T19464] rest_init+0x23/0x2b0 [ 310.419283][T19464] start_kernel+0x3ee/0x4d0 [ 310.421864][T19464] x86_64_start_reservations+0x18/0x30 [ 310.424850][T19464] x86_64_start_kernel+0x130/0x190 [ 310.427604][T19464] common_startup_64+0x13e/0x148 [ 310.430346][T19464] INITIAL READ USE at: [ 310.432222][T19464] lock_acquire+0x179/0x350 [ 310.435022][T19464] _raw_read_lock+0x5f/0x70 [ 310.437772][T19464] __do_wait+0x105/0x890 [ 310.440447][T19464] do_wait+0x21e/0x5a0 [ 310.443085][T19464] kernel_wait+0x9f/0x160 [ 310.445781][T19464] call_usermodehelper_exec_work+0xf1/0x170 [ 310.449080][T19464] process_one_work+0x9cf/0x1b70 [ 310.452124][T19464] worker_thread+0x6c8/0xf10 [ 310.454827][T19464] kthread+0x3c5/0x780 [ 310.456908][T19464] ret_from_fork+0x5d4/0x6f0 [ 310.459084][T19464] ret_from_fork_asm+0x1a/0x30 [ 310.461447][T19464] } [ 310.462316][T19464] ... key at: [] tasklist_lock+0x18/0x40 [ 310.464705][T19464] ... acquired at: [ 310.465944][T19464] _raw_read_lock+0x5f/0x70 [ 310.467416][T19464] send_sigurg+0xed/0xc80 [ 310.468834][T19464] sk_send_sigurg+0x76/0x360 [ 310.470294][T19464] unix_stream_sendmsg+0xfa5/0x1340 [ 310.472013][T19464] ____sys_sendmsg+0xa95/0xc70 [ 310.473575][T19464] ___sys_sendmsg+0x134/0x1d0 [ 310.475119][T19464] __sys_sendmsg+0x16d/0x220 [ 310.476681][T19464] __do_fast_syscall_32+0x7c/0x3a0 [ 310.478337][T19464] do_fast_syscall_32+0x32/0x80 [ 310.479950][T19464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.482035][T19464] [ 310.482822][T19464] -> (&f_owner->lock){....}-{3:3} { [ 310.484656][T19464] INITIAL USE at: [ 310.485954][T19464] lock_acquire+0x179/0x350 [ 310.487958][T19464] _raw_write_lock_irq+0x36/0x50 [ 310.490069][T19464] __f_setown+0x61/0x3c0 [ 310.491902][T19464] f_setown+0x122/0x290 [ 310.493801][T19464] do_fcntl+0xfa6/0x15a0 [ 310.495761][T19464] do_compat_fcntl64+0x367/0x710 [ 310.497973][T19464] __do_fast_syscall_32+0x7c/0x3a0 [ 310.500099][T19464] do_fast_syscall_32+0x32/0x80 [ 310.502172][T19464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.504805][T19464] INITIAL READ USE at: [ 310.506402][T19464] lock_acquire+0x179/0x350 [ 310.508532][T19464] _raw_read_lock_irqsave+0x74/0x90 [ 310.510908][T19464] send_sigurg+0x5f/0xc80 [ 310.512915][T19464] sk_send_sigurg+0x76/0x360 [ 310.515017][T19464] unix_stream_sendmsg+0xfa5/0x1340 [ 310.517465][T19464] ____sys_sendmsg+0xa95/0xc70 [ 310.519714][T19464] ___sys_sendmsg+0x134/0x1d0 [ 310.521843][T19464] __sys_sendmsg+0x16d/0x220 [ 310.523932][T19464] __do_fast_syscall_32+0x7c/0x3a0 [ 310.526272][T19464] do_fast_syscall_32+0x32/0x80 [ 310.528764][T19464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.531573][T19464] } [ 310.532434][T19464] ... key at: [] __key.1+0x0/0x40 [ 310.534663][T19464] ... acquired at: [ 310.536265][T19464] _raw_read_lock_irqsave+0x74/0x90 [ 310.537998][T19464] send_sigio+0x31/0x3e0 [ 310.539413][T19464] kill_fasync+0x214/0x510 [ 310.541147][T19464] lease_break_callback+0x23/0x30 [ 310.543234][T19464] __break_lease+0x671/0x1810 [ 310.545210][T19464] do_dentry_open+0x91f/0x1530 [ 310.547285][T19464] vfs_open+0x82/0x3f0 [ 310.549104][T19464] path_openat+0x1de4/0x2cb0 [ 310.550716][T19464] do_filp_open+0x20b/0x470 [ 310.552305][T19464] do_sys_openat2+0x11b/0x1d0 [ 310.553983][T19464] __ia32_compat_sys_open+0x146/0x1e0 [ 310.556021][T19464] __do_fast_syscall_32+0x7c/0x3a0 [ 310.558121][T19464] do_fast_syscall_32+0x32/0x80 [ 310.559867][T19464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.562000][T19464] [ 310.562774][T19464] -> (&new->fa_lock){....}-{3:3} { [ 310.564392][T19464] INITIAL USE at: [ 310.565671][T19464] lock_acquire+0x179/0x350 [ 310.567844][T19464] _raw_write_lock_irq+0x36/0x50 [ 310.570527][T19464] fasync_remove_entry+0xb2/0x1e0 [ 310.573293][T19464] fasync_helper+0xaf/0xd0 [ 310.575832][T19464] __tty_hangup.part.0+0x2e4/0x8c0 [ 310.578599][T19464] tty_ioctl+0x1058/0x1680 [ 310.580824][T19464] tty_compat_ioctl+0xb9/0x4d0 [ 310.582793][T19464] __ia32_compat_sys_ioctl+0x242/0x370 [ 310.584918][T19464] __do_fast_syscall_32+0x7c/0x3a0 [ 310.586983][T19464] do_fast_syscall_32+0x32/0x80 [ 310.588960][T19464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.591929][T19464] INITIAL READ USE at: [ 310.593613][T19464] lock_acquire+0x179/0x350 [ 310.595720][T19464] _raw_read_lock_irqsave+0x74/0x90 [ 310.597952][T19464] kill_fasync+0x138/0x510 [ 310.600010][T19464] sock_wake_async+0x132/0x160 [ 310.602233][T19464] mptcp_close_wake_up+0x2eb/0x600 [ 310.604449][T19464] __mptcp_close_ssk+0xd54/0x14d0 [ 310.606853][T19464] mptcp_destroy_common+0x65a/0xaf0 [ 310.609358][T19464] mptcp_disconnect+0x228/0x870 [ 310.612063][T19464] inet_shutdown+0x26c/0x440 [ 310.614883][T19464] __sys_shutdown+0x116/0x1b0 [ 310.617638][T19464] __ia32_sys_shutdown+0x53/0x80 [ 310.620554][T19464] __do_fast_syscall_32+0x7c/0x3a0 [ 310.623546][T19464] do_fast_syscall_32+0x32/0x80 [ 310.626576][T19464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.630062][T19464] } [ 310.631157][T19464] ... key at: [] __key.0+0x0/0x40 [ 310.633801][T19464] ... acquired at: [ 310.635035][T19464] lock_acquire+0x179/0x350 [ 310.636569][T19464] _raw_read_lock_irqsave+0x74/0x90 [ 310.638328][T19464] kill_fasync+0x138/0x510 [ 310.640200][T19464] evdev_pass_values+0x619/0x9b0 [ 310.642658][T19464] evdev_events+0x1bb/0x390 [ 310.645182][T19464] input_pass_values+0x74e/0x880 [ 310.647614][T19464] input_handle_event+0xf00/0x14d0 [ 310.649710][T19464] input_inject_event+0x1e8/0x3b0 [ 310.651804][T19464] evdev_write+0x2e1/0x440 [ 310.653937][T19464] vfs_write+0x2a0/0x11d0 [ 310.655781][T19464] ksys_write+0x1f8/0x250 [ 310.657679][T19464] __do_fast_syscall_32+0x7c/0x3a0 [ 310.659811][T19464] do_fast_syscall_32+0x32/0x80 [ 310.661938][T19464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.664567][T19464] [ 310.665599][T19464] [ 310.665599][T19464] stack backtrace: [ 310.667995][T19464] CPU: 2 UID: 0 PID: 19464 Comm: syz.6.5965 Not tainted syzkaller #0 PREEMPT(full) [ 310.668018][T19464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 310.668029][T19464] Call Trace: [ 310.668037][T19464] [ 310.668045][T19464] dump_stack_lvl+0x116/0x1f0 [ 310.668077][T19464] check_irq_usage+0x7dc/0x920 [ 310.668101][T19464] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 310.668131][T19464] ? check_path.constprop.0+0x24/0x50 [ 310.668154][T19464] ? __lock_acquire+0x12bc/0x1ce0 [ 310.668175][T19464] __lock_acquire+0x12bc/0x1ce0 [ 310.668201][T19464] lock_acquire+0x179/0x350 [ 310.668221][T19464] ? kill_fasync+0x138/0x510 [ 310.668250][T19464] _raw_read_lock_irqsave+0x74/0x90 [ 310.668270][T19464] ? kill_fasync+0x138/0x510 [ 310.668295][T19464] kill_fasync+0x138/0x510 [ 310.668320][T19464] evdev_pass_values+0x619/0x9b0 [ 310.668339][T19464] evdev_events+0x1bb/0x390 [ 310.668357][T19464] input_pass_values+0x74e/0x880 [ 310.668374][T19464] input_handle_event+0xf00/0x14d0 [ 310.668391][T19464] ? _copy_from_user+0x59/0xd0 [ 310.668418][T19464] input_inject_event+0x1e8/0x3b0 [ 310.668437][T19464] evdev_write+0x2e1/0x440 [ 310.668454][T19464] ? __pfx_evdev_write+0x10/0x10 [ 310.668470][T19464] ? common_file_perm+0x1a9/0x340 [ 310.668492][T19464] ? bpf_lsm_file_permission+0x9/0x10 [ 310.668518][T19464] ? security_file_permission+0x71/0x210 [ 310.668543][T19464] ? rw_verify_area+0xcf/0x6c0 [ 310.668562][T19464] ? __pfx_evdev_write+0x10/0x10 [ 310.668576][T19464] vfs_write+0x2a0/0x11d0 [ 310.668599][T19464] ? __pfx_vfs_write+0x10/0x10 [ 310.668617][T19464] ? find_held_lock+0x2b/0x80 [ 310.668635][T19464] ? __fget_files+0x204/0x3c0 [ 310.668656][T19464] ? __fget_files+0x20e/0x3c0 [ 310.668678][T19464] ksys_write+0x1f8/0x250 [ 310.668698][T19464] ? __pfx_ksys_write+0x10/0x10 [ 310.668718][T19464] ? rcu_is_watching+0x12/0xc0 [ 310.668738][T19464] __do_fast_syscall_32+0x7c/0x3a0 [ 310.668763][T19464] do_fast_syscall_32+0x32/0x80 [ 310.668860][T19464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 310.668882][T19464] RIP: 0023:0xf7fd2579 [ 310.668896][T19464] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 310.668913][T19464] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 310.668931][T19464] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 310.668943][T19464] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 310.668953][T19464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 310.668964][T19464] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 310.668974][T19464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 310.668989][T19464] [ 310.669271][ C1] kye 0003:0458:5010.003A: usb_submit_urb(ctrl) failed: -1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 310.908895][ T9422] usb 12-1: reset high-speed USB device number 7 using dummy_hcd [ 311.048209][ T9422] usb 12-1: device descriptor read/64, error -32 [ 311.223731][ T92] team0 (unregistering): Port device team_slave_1 removed [ 311.298277][ T9422] usb 12-1: reset high-speed USB device number 7 using dummy_hcd [ 311.307815][ T92] team0 (unregistering): Port device team_slave_0 removed [ 311.448256][ T9422] usb 12-1: device descriptor read/64, error -32 [ 311.688917][ T9422] usb 12-1: reset high-speed USB device number 7 using dummy_hcd [ 311.710091][ T9422] usb 12-1: device descriptor read/8, error -32 [ 311.971422][ T9422] usb 12-1: reset high-speed USB device number 7 using dummy_hcd [ 311.994730][ T9422] usb 12-1: device descriptor read/8, error -32 [ 312.016595][ T1456] infiniband syz0: ib_query_port failed (-19) [ 312.108282][ T9422] raw-gadget.0 gadget.7: failed to queue suspend event [ 312.110955][ T1455] usb 12-1: USB disconnect, device number 7 [ 312.116372][ T1455] raw-gadget.0 gadget.7: failed to queue reset event [ 312.198701][ T1455] raw-gadget.0 gadget.7: failed to queue resume event [ 312.211040][T19381] raw-gadget.0 gadget.7: failed to queue suspend event [ 312.213530][T19381] raw-gadget.0 gadget.7: failed to queue disconnect event [ 312.268243][ T1455] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 313.298434][ T1139] wlan1: Trigger new scan to find an IBSS to join [ 314.149847][ T92] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.218728][ T1226] wlan1: Creating new IBSS network, BSSID 86:f7:f5:3d:40:8d [ 314.222591][ T92] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.261511][ T92] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.333075][ T92] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.423931][ T92] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.501614][ T92] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.553095][ T92] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.642712][ T92] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.729727][ T92] bridge_slave_1: left allmulticast mode [ 314.731552][ T92] bridge_slave_1: left promiscuous mode [ 314.733366][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.736100][ T92] bridge_slave_0: left allmulticast mode [ 314.737883][ T92] bridge_slave_0: left promiscuous mode [ 314.740360][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.744065][ T92] bridge_slave_1: left allmulticast mode [ 314.745951][ T92] bridge_slave_1: left promiscuous mode [ 314.747770][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.751137][ T92] bridge_slave_0: left allmulticast mode [ 314.752966][ T92] bridge_slave_0: left promiscuous mode [ 314.754789][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.758700][ T92] bridge_slave_1: left allmulticast mode [ 314.760982][ T92] bridge_slave_1: left promiscuous mode [ 314.763277][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.766801][ T92] bridge_slave_0: left allmulticast mode [ 314.769233][ T92] bridge_slave_0: left promiscuous mode [ 314.771511][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.902212][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.906111][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.909725][ T92] bond0 (unregistering): Released all slaves [ 314.925714][ T92] bond3 (unregistering): (slave geneve2): Releasing active interface [ 315.040825][ T92] bond0 (unregistering): left promiscuous mode [ 315.042856][ T92] bond_slave_0: left promiscuous mode [ 315.044788][ T92] bond_slave_1: left promiscuous mode [ 315.047155][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.050982][ T92] bond_slave_0: left allmulticast mode [ 315.054510][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.058639][ T92] bond_slave_1: left allmulticast mode [ 315.061544][ T92] bond0 (unregistering): Released all slaves [ 315.065542][ T92] bond1 (unregistering): (slave bond2): Releasing backup interface [ 315.068562][ T92] bond1 (unregistering): Released all slaves [ 315.153271][ T92] bond2 (unregistering): Released all slaves [ 315.159350][ T92] bond3 (unregistering): Released all slaves [ 315.171967][ T92] erspan0 (unregistering): left promiscuous mode [ 315.176040][ T92] gretap0 (unregistering): left promiscuous mode [ 315.233798][ T92] bond0 (unregistering): left promiscuous mode [ 315.236417][ T92] bond_slave_0: left promiscuous mode [ 315.238795][ T92] bond_slave_1: left promiscuous mode [ 315.241527][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.245147][ T92] bond_slave_0: left allmulticast mode [ 315.248626][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.251852][ T92] bond_slave_1: left allmulticast mode [ 315.255030][ T92] bond0 (unregistering): Released all slaves [ 315.931334][ T92] hsr_slave_0: left promiscuous mode [ 315.933333][ T92] hsr_slave_1: left promiscuous mode [ 315.935204][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.937676][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.940281][ T92] batadv0: left promiscuous mode [ 315.943394][ T92] hsr_slave_0: left promiscuous mode [ 315.945467][ T92] hsr_slave_1: left promiscuous mode [ 315.947409][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.949848][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.953195][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.955834][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.959062][ T92] dummy0: left promiscuous mode [ 315.961015][ T92] batadv_slave_1: left promiscuous mode [ 315.964228][ T92] hsr_slave_0: left promiscuous mode [ 315.966154][ T92] hsr_slave_1: left promiscuous mode [ 315.968002][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.970436][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.973251][ T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.975679][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.981729][ T92] veth1_macvtap: left promiscuous mode [ 315.983577][ T92] veth0_macvtap: left promiscuous mode [ 315.985532][ T92] veth1_vlan: left promiscuous mode [ 315.987403][ T92] veth0_vlan: left promiscuous mode [ 315.989795][ T92] veth1_macvtap: left promiscuous mode [ 315.991540][ T92] veth0_macvtap: left promiscuous mode [ 315.993435][ T92] veth1_vlan: left promiscuous mode [ 315.995087][ T92] veth0_vlan: left promiscuous mode [ 316.196401][ T92] team0 (unregistering): Port device team_slave_1 removed [ 316.242730][ T92] team0 (unregistering): Port device team_slave_0 removed [ 316.514673][ T92] team0 (unregistering): Port device team_slave_1 removed [ 316.568367][ T92] team0 (unregistering): Port device team_slave_0 removed [ 316.660653][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.969483][ T92] team0 (unregistering): Port device team_slave_1 removed [ 317.014964][ T92] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 18:59:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b43ffc0 RCX=ffffffff81af11e1 RDX=ffff888021452440 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900010fef20 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed1005687ff9 R14=0000000000000001 R15=0000000000000002 RIP=ffffffff81bb0262 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5180921120 CR3=000000002581c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000008000007f Opmask01=000000000000ffff Opmask02=000000000301ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560ae324f0b0 0000000000000009 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e1 0000000000000031 746e6576652f7475 706e692f7665642f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 25203a726f727265 2064616572207265 79616c207475706e 6900000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00051f574a575740 0541444057055740 5c4449055150554b 4c00000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007002400000001 0005000800000000 0004000800000001 0003000800000021 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560ae3253778 0000000000000000 0000000200000005 0000560ae3253388 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560ae32526d5 0000000000000001 0000000200000005 0000560ae3253778 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200000005 0000560ae3253388 0000000000000001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560ae32526ac 0000000000000001 0000000000000005 0000560ae32526c1 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2d2e28332220 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3724bf2f2b2427bf 2d2e2832312435bf 3728252433342c2f 33bf2d2e28332220 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000003 RBX=0000000000000001 RCX=1ffffffff35ca810 RDX=0000000000000000 RSI=ffffffff822c1c2f RDI=0000000000000001 RBP=ffff88803fffa5c0 RSP=ffffc90003b97538 R8 =0000000000000006 R9 =0000000000000000 R10=0000000000001000 R11=000000000000001e R12=ffff88803fffa400 R13=ffff88807ffce400 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff818821ce RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fe55c0 CR3=0000000055169000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617075 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc900069172f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9b0f96c0 R15=ffffffff85617010 RIP=ffffffff8561709f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f745d6f0 CR3=0000000024788000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000025745c RBX=0000000000000003 RCX=ffffffff8b90abf9 RDX=ffffed10056a6656 RSI=ffffffff8c162c80 RDI=ffffffff8190ccb1 RBP=ffffed1003866000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801c330000 R14=ffffffff90ab8390 R15=0000000000000000 RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7496288 CR3=0000000024788000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000