last executing test programs: 8m50.279644878s ago: executing program 1 (id=2696): unshare(0x24020400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2}) 8m50.012542999s ago: executing program 1 (id=2700): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf251d00000008000300", @ANYRES32=r2, @ANYBLOB='$\x00/'], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4044080) 8m49.824013166s ago: executing program 1 (id=2703): unshare(0x400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x0, 0x3, 0x10007f, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4004e0, 0x1, 0x4, 0xffff80f1, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0x1, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8m49.71245448s ago: executing program 1 (id=2705): r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 8m49.489321962s ago: executing program 1 (id=2709): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x15000820) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 8m49.289770353s ago: executing program 1 (id=2712): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x64bd55c157188b30) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 8m34.042708364s ago: executing program 32 (id=2712): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x64bd55c157188b30) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 3m44.831094793s ago: executing program 0 (id=6124): r0 = fanotify_init(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x48001022, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x61, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f0000000240)=@known='trusted.overlay.redirect\x00') 3m44.641121383s ago: executing program 0 (id=6129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c0000000000030000000000000001"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 3m44.414173462s ago: executing program 0 (id=6133): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x20011, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 3m44.255087791s ago: executing program 0 (id=6136): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="66bad004c4a218f38f0000000066ba210066b8000066ef0fe4a90090000066bad004b02eee430f01c2b9500200000f32d201c441785af566ba52210000b87a0066baf80cb8b068568bef66bafc0cb800000000efc423b57c2b00", 0x5a}], 0x1, 0x4e, 0x0, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000240)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, 0x0, 0xfffffe3f, 0x0, 0x0}) 3m44.083758383s ago: executing program 0 (id=6141): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) 3m43.938814747s ago: executing program 0 (id=6144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 3m42.229495062s ago: executing program 3 (id=6167): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x201, 0x2, 0x10000}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) 3m41.105122617s ago: executing program 3 (id=6175): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x70, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4e, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb019"}}}}}}, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000640)={r1, r2+60000000}) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/214}, {&(0x7f0000000180)=""/128}, {&(0x7f0000000480)=""/68}, {&(0x7f0000000080)=""/46}, {&(0x7f0000000500)=""/160}], 0xa) 3m40.942594659s ago: executing program 3 (id=6178): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 3m40.490680475s ago: executing program 3 (id=6183): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') 3m40.247582439s ago: executing program 3 (id=6187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, &(0x7f0000000a00), &(0x7f0000001a00)=""/4096}, 0x20) 3m39.375190233s ago: executing program 3 (id=6198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x10}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x8, 0x2c, 0x0, @private2, @mcast2, {[@dstopts={0x3c}]}}}}}}, 0x42) 3m38.999231057s ago: executing program 33 (id=6198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x10}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x8, 0x2c, 0x0, @private2, @mcast2, {[@dstopts={0x3c}]}}}}}}, 0x42) 3m28.718217647s ago: executing program 34 (id=6144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 8.337082613s ago: executing program 7 (id=8499): landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x2, 0x1}, 0x18, 0x0) r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xe020, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}, {0x0}], 0x2) 5.142491001s ago: executing program 7 (id=8526): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.076459544s ago: executing program 5 (id=8527): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000200)=[@rdmsr={0x66, 0x18, {0x999}}, @code={0xa, 0x6c, {"640f01c5c4e235098ff5520000440f01d1b97f080000b82607f8e9ba000000000f30b9800000c00f3235008000000f3066b8cd000f00d00f01c8f26526410f30b9800000c00f3235010000000f30b805000000b9080000000f01c1"}}], 0x84}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendto$inet6(r0, &(0x7f0000000280)="020409fcec0748020000", 0xa, 0x800, 0x0, 0x0) 3.295916426s ago: executing program 2 (id=8528): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x78948679f3a620db) splice(r0, 0x0, r2, 0x0, 0x82, 0x8) write$tun(r1, &(0x7f00000033c0)=ANY=[], 0x107c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ca9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.031164603s ago: executing program 6 (id=8530): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x4040051) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) 2.989320529s ago: executing program 5 (id=8531): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 2.962072138s ago: executing program 2 (id=8533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = socket(0x1, 0x5, 0x0) close(r1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOPEN(r2, 0x0, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000500)={0xe000200c}) poll(&(0x7f0000000080)=[{r3, 0x8000}], 0x1, 0x5) 2.65876569s ago: executing program 2 (id=8536): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) sendto(r1, 0x0, 0x0, 0x2401c000, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x20) read$FUSE(r2, &(0x7f0000005440)={0x2020}, 0x2020) 2.611171919s ago: executing program 6 (id=8537): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000001900), 0x0, &(0x7f0000001940)=""/61, 0x3d}, 0x93d}], 0x1, 0x20, &(0x7f0000003a80)={0x0, 0x3938700}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) 2.410942089s ago: executing program 5 (id=8540): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10a) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.061730443s ago: executing program 6 (id=8543): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ad0b19196c79eb5}) 1.821556149s ago: executing program 6 (id=8545): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000005540)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)="5308fe8e4c59ee609a5ab268afd855a0af46fd165c3e", 0x16}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 1.779365157s ago: executing program 7 (id=8546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000400)={0x1, 0x1, [@empty]}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4040, &(0x7f0000000080)={0x11, 0x9, r4, 0x1, 0x2, 0x6, @remote}, 0x14) 1.641874046s ago: executing program 2 (id=8548): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000008200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) setns(r3, 0x24020000) 1.51652139s ago: executing program 6 (id=8550): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r5 = pidfd_getfd(r3, r4, 0x0) readlinkat(r5, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000080)=0x5) 1.214749588s ago: executing program 2 (id=8552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x74, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x57de, 0x0, 0x0, 0x0, 0x0) 1.085279936s ago: executing program 6 (id=8553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x185402) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 1.007118503s ago: executing program 4 (id=8554): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x60, 0x0, 0x405, 0x70bd29, 0x25ffdc01, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000411}, 0x44084) 1.006464514s ago: executing program 7 (id=8555): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x9880) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 921.868822ms ago: executing program 5 (id=8556): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8b, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0xd0, 0x2, 0x4, 0x0, 0x4, 0x10, 0x3, 0x5, 0x5, 0x2, 0x31, 0x9, 0x3, 0x2}, 0xe) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0x7fffffff, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff7, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) 886.169387ms ago: executing program 4 (id=8557): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5414, &(0x7f0000000000)) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r5, 0x4) 755.223242ms ago: executing program 4 (id=8558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 649.074681ms ago: executing program 5 (id=8559): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) 648.688362ms ago: executing program 4 (id=8560): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0x4, 0x0, 0x3, 0x401], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 632.210622ms ago: executing program 7 (id=8561): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) shutdown(r1, 0x2) 543.57704ms ago: executing program 2 (id=8562): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x3}}}, 0x84) 398.815901ms ago: executing program 4 (id=8563): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x20001a, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x221100, 0x240, 0x806, 0x40, 0x548c, 0x0, 0x0, 0x40, 0x7f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x2, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x125c01, 0x8) write$USERIO_CMD_REGISTER(r2, &(0x7f00000001c0)={0x0, 0xa}, 0x2) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0xffffffffffffffda, 0x0, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="627499ca6602d0ae86c04379262361fd7a135aa40f55bbe3a38aad22f4dc1bb71223ed8228f76529b8f6cfb1ede7f224d77a361f6989f252b2e830fbf3ec1f0d91370fb93cf6ead11f3fce86b2567372b6cb0633825915464439daaff86ef49f44794790d512752469b7c74813bbd636d8e02b68747b9af4aba3af5e1b65b4f1db4d7222c13809e3f067691e5e82e9ea438dae2d496d684d379435906052bb829f1e1b8cd9440f8b261853a1859b96ed11944f4413ae5e8aa82b9887e41b1aef58c396b7dec1de3b3dad0e575a393db64feddf05024d1dbe532e59d76b9adda3c51d06f99bd93cead0b1571ac53658cc3c813e4e8b7b9fd3270a06cebbf72feabe5afa0f14ae98652f8bbb4857cbaf016d8ecb2de1e9b42ce8458d26880b180e9ed9674b9be88f36515341643b27fb5c07b78ee4e522e53bbdd3237c24c216a642669dfa68a79a792d4dfd160a05ffb03d8e0ef8c966e19b0569815e20474074d8689a599e90568a7271f20fc50732277565e17d2e855275656aec52fd4aef7e0935ea5d27554d7a281ab534030548181ab12878090e7c688c83fc08ea472db88f5f07b1c9f7123771c98544cbca380afe455d34df9dc7b877c61998659d3508a76f2ba257fbc33d4a2f663018dd2d1875453d6dd3005a925e83498347cf18675a6b6fa2fd6c37fb48cbe44a2cf2a65a3ced8da428c7e497a1c35ffbad02a4cbe61a410c2f756290cf275104a5fb5e923e34de5255bdc6e5cab3fe484d16bb3e62d71d026471f25cb8c0a061076683331c197d7896eb856d22ae93fd300244f4ca8935c83a7f883308266e9f0f65aa19f0f445973d69a4324ec7d9eca896686124d75874fa9914675c49e2a8828245bb88320da9ae5a74fa152094e6ece0be454a63e70a7493ae0a6b351bda39ef6fc6f93f5553e71aa7ff625815a8202313d9502a6b656ff3e09ba75a0aaf5f5dbae4849592890ade3e56714b787eb2c0697d8445d5324655c230703e0f2d543cd30ee8d2d7a01ef1ef6fe1fa8e8295cccf0865e767fea5dde34af9c7a1a70530b95bf50999b91066b96e907e5c459de8744578577a66e838530aaff464e49743f0b560355f55bb8eff0bbb68ae361fc0eab755d4ecbd1334f90392d90b59828bcd0b2b42dd20508130468b12970bfce50a495023121952d3d5561f79c9593389cf817609d7c144da53af3d0ff52a963e506874eb035946d6cfd4bd090f31b75797d5eff005395dafc6fcade96f6bb49a90e495ef7ea8913e91c54d5784cf0de83cc6fcd847cd2c5acf6bde8fb2409c5096b12c963abefb8293d54d606f20ae20d351675e2334cb508fe50429b92bf7a0d2924c1eef311a6169b0c7635b3d85e5e7dee265c303b799ca279a5d900d7843bbdc43d22ffff66b6b1789972f9288dee5eaba8d60710d214570cef6d08cef33e949bbfcba62b1229d2a3816c2270fd5f2738ad58c5904b0f1cad1c98dca81cc4b97248bd8b7507ecc4a3b2298c6144cd85ffc9241c0be6ec65787dc5d52289af228769be4da8c877d79116f5cc4fea23f4637dec73be0376a77197e75765bd754b59cb7150736a76a22d68f139a25f4d18e9d533d59170dbb9a88bc525d477295f9ac0df369ab500b7fbc4d4b77d237cdadfe1268159417abb374e154b5d152dc074f32a0824db48dd8924c2ec1a5466a86a6712e7828a0b4e29c264c17b61681f828c0d21ecedfb8eb2fe7d13bad3d5b5ac45ac79d8b8e5b7fd15b49471d442b3241ca6f389766a4365db638cafde70ab41c992616199d6ace709e3f4fb59cb7351525f2d065edbcedcad8a62fe9a9186ddf4e85c541ef790e76b09475e8795276b96007d2aec6e06108e0f6e20754da346afc2cf6a83fedae44caa52e93e3543d476490e79da1b9c01f29846383e2f6e8311055f54046f60df76eb5faac73e8b89eb144b0733441196b7d620dba4c8db5ebfb0cd09636b2268b85c5325b0fac26638911518d11104e749315d4e8157dc13b8a2d43eadc9696915459475cdc801ed1112bbae86a6dca2d3d3a883ea1d3521027f3e55ca064cbe78776c400f6afde72aacb744ef77472ebac58036e4dec71e92ef92fce94dc66d59e5386d63e21f04a420259db1c54a9d6562b572f5a0a270b89979c9267d282c50ff6d51a9399374b57582198ad73b82edfbeee7088ee1f93385abe21f4d2c11684049dcfbb3b658cce7fa027aaa04072d1ed195bd05834dc7c64bf6c79ee7bbf99ed6f26c2311e079afc226114577645735c2e0c79cd0fcaa8d59e08e31187b7f0b573976c2cb1e4ec720717de712e24ba95c5cf9fe6738d2a0a496064fe13e3f948e3da05e4b241c3b35c4f6280ee49244cda7e336fa8b8a44acfbf5469982ad1e63d6edb3df45d2064baca6755a806ee1857e99c23b8fc994c0cf153e18748a3b4965f93576f0a262e2a8cc7c33b5afa229bb9d1844d32b003e2810a92fc2e3d09a0760447997edc97a57fd91498b4211525bda4eb2003b257967086d0c98b2b0bfda90c615a5aac0be550203f65cef3d19c1c841a40a979cf80c14d8f0fdf7af67504f18117e06657289edae002a9e8c0b1da2b1600bf546c0b2f8329729cbb180b5e86029afe4bb4fc2610af4b31f764ea5630774db82db116c0cce2c71585c311cbc4afe334bd793a8bc4d0dc605d1f9f1cafda0bff6ab1b3f791ede7deb8307e3e21169fd395fdb80f41c607f4d9dc4f37b43a4fae6db95b9c3c10c4b8ef52e0bdd370b70c498be771781489c2af35692064c36e05b315a500c1754d16bce8c4cad254c2694149c040336c4d05aab06ee3ed48426b17f6c4603fee4ec01f2d7eab65f8e7d7430191f3925806904311f2b5f3c68323ac1f81811670a6ed0d6872023ec3bd312f6d4001de51fe06c5b3499e7c5e72824d916885b5eb27ec45b8d293cb638cea74ee1d7736bf7bbb377d65c3f0636b45d99625bd7a40b5a0fc6e96effc1c6042c1ad4828832d00c8c713486669ae0d2396e74763f892755b28cc7f7ef068c2a5104f4ac3338410a6d473339ab9e4431c8e7b9a2f5e86e76164faef5b581467d97f0ad95e97d25fb8ccd28b4e9756f21c37556932febc86a1e248021269d341e9ab8f1b6ff3b35638151e5f598be23b60e1e794cb8200cb797822ccd64c16a75b77ba2d8371ef9907ac81b764b145e2ec738aa9253f464f464d8d8a73c79f89061e734627e02d38720df9acb11a0db08c2113c1e55d2b83d8768180cdf3e824a48766eae9d6be77940565520e26f6c0567e3b5f93e26599a1bb5c12ddf5eb6998b1771d3048f045220fe071a31719953cee5770280933edb8c4d7f36a0b89e247dc7f15ffd113f4d7b6212c3adb1c1f139a581ecff94cb82bd3c4bc54c8c308b92f7c3868a35d61692cc5e9049830113c749011975242648a9d4977251cd0c4a973b619740f602fd02116d51b7258d3bb468a395c880a6e1bd1d830115031553ed0337b79e149ee7e05cd9f3389b68b6f9bc14fe852bac8dbfc26e924086e17f9d91c73599b5f612899173f7bb15715120c2bb1be7058ce52372ac0d97a501877e92c9aeaeb463b29239dc53fae164ef6bf79108238a5e627c5edb78022d21afa18098439fae6ed330de0a1e59162edd7b92d66ac5e23d4337cca2f2462e85f019f3e7c93002f6a4352293f00253856808e76d85c1e97b1654f8d8cd79cfff0d93e7f4b038010c431cab78de7308eac8e675d002c707700023f29246bfe984e4e81db59fd20f7537ede1d6338b33a46564a9801ee53ca4aa621fe58b467241b852b92084757cdfe9b08020d688987159e3f997494b5c5002b3fb805d237d29b95698eb3bc8988d2362e193e99bf5e55ec261897730b57a4164b854b909b4c5b9bbee584826d62619d4f2fc1a3084b8aa575744bd1df83c0c523897397901831951ce5894990d0119a25c37857306d6c50cd525e98a772e81d7225af2e12ef00f985dbe903358fddfc46244743635e32fce2add4073ac55f6555dab7edfb39bd6591e7b0d89bf82b80b5342ee06944d4d38c4964bcda5076b8d1dc9d079faf3e74f4d59db8895709bf5ffc3fa7e44d8c11ecff65a82e04e83ab24a8580d0553334f55247d7eae80c066792374a61beefcd8ae06f3c63b9980edaf1fa58231cd2f7ce67c84adf99ed5a8793a270cefd6109dc9bba127b4586c372fc6c18f26bcff11e559945a8aa9cb74d6bf3e1ef56e635ee875dac0941b4a6faea6d065dc71785685f803ad16dc0d1dc3489e3c1ad89d02ccf7dd7c5d1edfee7c755dd73cdf4fe5c8ee85b310e53e1dbf9a4e5ef63d3782055421253ffebe27255d4c98986ab3d8448cc40e295f0edea125939e59e5e9bbbd5c33bbefe6ada222f484fb27a570b18550670669beef87d94566845114bc99042a621316a4a63aa750ea93182bcbeff27345003157a9955971c4b1deea6fdee0457d65e707eceac177d6116e2be2ced615cfea5fbbe1c88d097b69a32c1c08f0c07746f6bcefceb371af120907a9c616da6c3e7e291ff3de7136a3e70bed69f89289f3b223f76517a00e39da79ffa364f1e810abda8acdce071d6f17a3da5681147857da35cc092c35d232140a31d621d6a4dd4051b13e1d034e9f008dc32b4623417d5a5c36cf501f42fde64896c3498d0239e2132399299e1cbdbb78af83c06d312cb9a25351afcb1ef9427df73d1561cbcd89787ac3b7235a3f586413a1d813f57309e1f9bba09e4d2519b3d20cc806427e5f326611281f02be68077a668af1a8c37f14205702623cd3f169ed38a105ec0dbc2eb32edbf05c62f3a1ee72bd9d8078d653c6cc4f3f35ae0c0abfb2a52ef777325ed828dd0d2422b509f23bed412349a9e273fd1bdff7720df07954dd870c34ec0e286cec8d52191cfceef91360b5e4d3eeb505e3927ba4f8bfcd0c29eeed0ce3f0b7a299cff80b4f2dad4ef8997f66bf2c9af146e18bb38af690b2f498084e8363c6b9b84beb6473d129bebcae6b52d6ef2769a7472a4b7ed69e50f501c46921a2c86dff16e0c2249337b8a893216cb48bee987fd8cc3bb329ec0e7c464801c0d4fcb30056ab74d5b3f64db31d6568e455859886ffc1964a20f1266edff171c018b1e82815ec1461f903c7d5b69c058f446083d0c26d51b4a54efc6bdf22ddf36dd2578c6fbec56c5c1db57d2dd9fa370b2d91cff183fabcd99baa3019c14c58bd0168ff43b430d5b17b714805860de0f14e60022263a873c9c69b4017b336504e98aea47cba9a9a29bc595740cc0c7633b7bdc65e4203f7f75ccdd958de1bcbebdbafc75b688344ed3a2eb33d74e5eea7701957dcc1562721fc7354c873df12a0e5280ab25b2eefa6ff81737bdf0efb63327a3b575df47c1da7308918ece97be6d2f5daedfb11575c4086f38ef5769d2917d00dfd50cb4c1446acba90a3cd474f49acaf8d47e3df9d806d12e49e12378cee18f8d288bf8f179a182467eab5ca9583a29bc58ec2141d5c3749a04d4bddf6e811f77b03d26cf8bc4d44e7f07e18a2ed8a21ed8018da54390f69ad0bec8056bf72229b58f1336389331738fb5362a1cee4c52a20dc5ed08b63ce358cdb2e5278a1f73c78ddf4a7ce43778a73e5304702767f04e0cbbffe20419cf8db225a80959b10d140bbf477526d6f334e882b296283be22b145b5e67a1a5b69d1b47f92a82adf0d09748e049fdf4dbaa4b734c6d05d167bff7660296dd9c488122db1969e01080234591f58fbcd187fa0bb1d13d01f078d707af15b06ba913f0dc0d820ecc6984692e3c114686a65d08bd97744cba19ff5f89ff8e9534f3629f752e9d230808e2b40d2da704075052b2311860e469654e446fc90a8c656b69fbab1a4f1ff3af9b6110da8a27e51391e197efe9664d728e83d3875a4a164e06654a4fa074b5d62fe293342c662a555a1aeccc17d19bfc8ce103eb529a14c508ca1dfa8e83a55e486b07b0d5ff6ea33bfa75cf3e03aa0b7e350dac7086fa40a03900329a0dad338dc669560feea9c20bfc6ce802cd811fadf96bd08123cdf8b392d759358bb2285421d7e2f4180aa342ca62a7170fba76e934ddf260975d7e4d3b895a88326d27f7a24733026b4ade177be726c4a45327dc29cce82dba2531de47c16fec4d1966d499168625e28e0037f5ad9aca3d0b41200d9d7c10b332b97eab67a80f75e137e515c2fc1e55cb807b9f91a03df0a4b32e95a2089d9f1b3e0d42a2e84c88871edb2d8b31a37e94f7fa37926a877f7da28e4c76869e92961d02e94b698066662c489a3794cbc415bf584339bf443a3fadabad1f8c0c3337589e3b3d659af860292517d9f464f41d5a43b427c753c8ac62b7348c4885987409a810b8553dbf2321bcbc5bdc38345b48bfa81b8b6072afcc0b8f530f999fe44392c9c47154faefabd53d0da1091555418869c9027624d805ca61e7c4eaab54edfb107c48cea22e2e3e7713276f45cfd6268b8f8dcbaf9a5e75045d471607841a6bc9a18f301e55613ce7e9145d53911866c6ca74051489fc92e8f475eec788449e523ca6c54debfb12b7567dc60ea80e64c91fb315144749f7dc7cc492fbf213019d7aaa091d0024d7732698985970a23918f374254d78fff6e3dca1e10f28a8e7d644157854e8020bbc8988cc2539f325c080c0b63a80668cd199c62affb8775fce71d7e34c432162b9dac6911483890bd0549e49035eaf6e94e1e380ca608655efce76e7477748c3c70f166f6aac05eb3f00a1bb8a32b2a48f43b6274e8362ae0af7bbff1549dfae9ec48075c3f43e5d7f95db42f0f77c8cd928603c1dda5e0ba56358861b822070d211bcc4584e90e871dfbb4b78adad634b2383ae6985701026be299b78e22824de5b6c36bfc99016d8b2a35db23e035ba8b76a372b4c44ab3e1f0000b83cdd1d69cae98df96acb0e00fa54b57fc4d430efaab715238cf549ed24a7e6833c3fec3f0f7e2fdcda098fe8c43f4f5d45dc4da35b5452bd8b4eeafb88dfc23eb44c980d6a028470105f9e95700f5283960910a838993cffdfb89f8c6890359872657b4fcdb81cf57f3417f16eafc8870071b604c17866ac5390ccaeb8a026d1223addfac5846215c15abde85a56f565e906953a4daea90587afee36a9800821b77a4cdc240e7a3d0edba5e8c93bf53fc3f58cce2bd1b3ac1c937a9be42fd4a31a1c9465cd8d5559771e12336db721337d3955fd1a97553862f7a1a0c61d7a6f996a69bf285cb809b244182bb11e9c4a45edb778edf50c1a025c59db4a079e4d5d1340684ac0808d6cd4ad75409524d8bd073f052eb594e2e665db8b49c8f6e4ad024b43171afce5fab280d97bef5680e2b14349862585b4f746d33078f55da4be82c336b8b9a8e3d6f115b56f8df44b3a46358d8258c90cb4aeb2da3c365c3e7fa8c16626fea7e40d4482be407ea57de16941f7135fb30e0881d2919c78cdc8abd7e4dd9c5ad1d74f8ca9c023dded9ed0181db99ba7948abea83102fdd2aade67f4c21fc31ad4e3f9ac6f6ff75fba8888444ce6a24e0d33b56eaa17bfad88396025ae6795bce536362863ce392e33335389b075494e57b5dfcd0ee1a954fe997b410064148a01013e4d37a14281a7ac213ef9ac7550aa3b6c604e10e6b134e629f48c7cf862b9015960dbefb78df895c9e9ec69c986de5aeb787a11cdc6b1a6f82ed950c2f20de373ced6bb469541a492114e6fc7c68381550ad83e02166838a8068f9fb6bce54f440d1e86d4d5a79ba8192a7ba1f0e4f528812f34b57045312858b000760f5133d7c3afac2ff2b52113af986c1d3b2234d95732a6652602e1bccda85176433c8e18986a96d1ebd512a5f97b4032ef175c26398831a0e51ca2eb692588bc1f18a4ea5c3ea111505640e8779dfbb9ff19b39c9839d8002df82dee0393199ebf448d67cc6018c6873488aa172a70dffc6939c703d71b6e5fff556d308376faab6418109db568389fb9e89f117c4e13be9088b12d84e0214aa35f266e1b1ebbf08db9171148184bdcf0f8dbb6c3b74dac0fd594d4fbc01f8c3112b15e4ebaf61ee05679feabe7c8eff92edf4d2bf4e7172b70da146f9dd8c104db0efcd076cb80d035c56e358a5d9f61ad26607f7d94c2d7e7ab9ee9688d722204afe882753c227d51cad6f66fcad9480338675edeb50af23899b24ff87525d763235ff3b08619201ce75a30ae95bca6e492ff172f77fcf833d4ebc8e28b2e909395693033fadbd3ed4e3beef8bf943157e921f6a7e0852ccd529c377ad86e8ed5e9a9dec4fa61e426f81e577956a5aad99730fba77952cd4d0f395dfc909450e0608ff5c7cab1d3b8c670c3faf85cfed06e8bea1f1e8e3522c1419fb33ae27e21dd62303f68e7a18a35209d7b40dcd32ba47254be6cc8244227c12908c5d315511e8a1d587433e246fef8a335ee52bf849c62d398094ed3bf2387df543cc7887570e0b23f7fe91969bd11b6b11e806d261908a946c676bc3c96147e1c3c92858ba2b3dc78e04dc43147868ea1f58608eced9c524bfb1a7c68c944e7c4367c7f413112b820d0c3ed6507706e968db6ca697571cebb76099b7627c09933c5fef54feb229ecdeb5d4b3c41f2729db832ca38adc0e4d223dfd0fc6f7d70a46804c55aaf99216db732b903910149676d8e8fa2858115fc001c95be7d2ac4bd9f588666a7408172eab6e0e5e579d02ee866a6f5dadbd028b6e20efaf24ea263e015ffe9399313a63f36321f7f00e3b003912366997b5de93f829b3d236ef99da83809c12f388cf37db0568b0e87daef90fa5cc06948fafc54dd6caa49d6131294eda82db41fd9ce436d67e45cd9ef18f4f6af2886ed2ec6fd0f71ca9642f2d8fbc2df949535266437542fd34ddf2ccaf92c8a6042656a2a24f02359054347ad2d2699ba70f567742cb0b330ab5f8e5d07a038fb33c77a760d46589291d86646e89a3b463f60e55c4af7d226ac1caf6aa03390c244f7db2b5b000fda377a212f3521f4a0309ad266ec3b7db008fec20e78d777a96a52b6e0fabe8c44f1b20179319b1621397c19aed85a7a463c1966be6ff96ee2eab4d1ad5c5c5d78f93c5e0a0fca038acf5c36e14661f7126ce80a303bf42c6b0385bcb77bbb1f92660d0f783f574a23a8935c7ae74f435212a1f12adf06454afd65c56c846b83e0dbbc505e0fc5ae2896321a0cd10c6f93be16b99e3ef75c79902925fb8c2afb72178d8ab72c97ad9f9aa6eb34bd32b4cfed8407e9f3932d5b96579576e7f29d0f7ea9ea5fbddf5d07362251a9783500edaa351d1dd460973d9b947d47c969783ca61b3f419d86895265f1d930282cc6c5b8abe10f8daf10f782d6746379868958b24ecf8be3808054f38c7e69cc518618c62517737a313c7109f9deba2a23b7fdf23a107a2f489b650f72c32477877556ae6724cf34a8a4b197603cb2e19d586f95283c058c5a56ba1f2ba7434a148f28b1a6fc43dd33a9d3863ed9a785af66bd6c1c822c9df327e56e9487051ee849ae34ec8f25743f74dfe126bd203887a8cab9b9e1739ccabd2630e3df969b6cd12ad5b6982087c6a7bc228881bd6fb1216e7df7aacc447d2e8f980f2909ac8fbb1ed8b108e8a06c1948ddbd14e4d1666bbe901cbc93dd714483e7a4df706678ecfacfe7f1e55c12bdcab180f864bb0d23a91a5f54f6ec18cdff21f86d6d5fbd5f28642c086e079b96fb1dfc34cb0824eea65a4de00774c40340cbd0b5a12d72b314b9f4b33ab50771a4adf9cfc517fa781fd311616ebce30dad67706e0b6bde54625c8097181b6744cf2d89e9d06acf1a072f14ad0c6a70eee4127cbd87aab4c4048b4492dc381c1d9bb1fa5703435aefc6a3d2d53265d1d3d96d58a4c6e202606ebb2e2afa03159c9238257582c4ab2c3b613565c0c08a60ae5cfad5967bb2cde5e31f78506d0bada7db02913bf3f8e5cb6734c1a8eb8a5076185969c81e67c48e578728e6c170e9321554c7a5c4cb22222ce829473fea8fc2db3937fc3414b97d5f81479b9a22bb42e9ad1164dcea58c8b6204601aa0a3b53fccc8cc9712aa0e1c0d3fd93ee48915d2846f4f9985a2f77b5eee33506b53a30a10830f2febdf3db2a6137d49ba11f999861479d93cb8131bea4547119130fa7c6fea347fa18e72354f02f36cf5420a941e4b83774e31afa7e9cc2359ea5baaac006ba11fd3195d2b210243abb7b6870ba86e0370e340c77535bd0765db971112730642354ca73b6ecba465063a142ddd34c13cfe99aff52a9cca959439e7aac04fb49ed093a02daa285059a68653cf80f99adb734d421630d1f2405abc4c5ccd38345dc508221967263789edb945ed6b5f100ee77852530aadab3c6d9e85657c79c5ae58d0e7a560fbb0d9d86b4ca71e8995a6f83dddf723740f4e4665749ec25c843acd1ad152e7e4f40cdc751c65edb7e89fc7b93991dd96ba042111cd8296d524fa18954790828bdd684a11ffd18edb6ed0258697c83f8e7f51545e024073e77d2ad1580c55119af89b084d6ddc027bf635e541ec10182a9e71b4e9d5341a2af5217f4d40b7e27870bcad035a0d7a6f4d1c235ebd7ef20931898febfbb34406f270ea9c249c56c0695867ece5d1e0bf7f57b1dcce946c74d290233704ea94e41587ead3dfd5cd341e4c4c1886da735edccb4bc244131ef50926f0a574a4e75cd20586bf9d8ada7a0fc5c21c85f77c72a8689363f49c4694895dd6faf6ecb2f5ab7e2f1d7f4e15fd5d4b7db767a8e7d3d1e1f90ba49db8c747cce28e763276cbe2fd52151c3c292b09161f013fe24eeb60437a5b6797c633ff82b5818c8deb74546a8643f21f1a5015162b3fa4fed7e34f8146dab76a5f15205166f31e2d95225b2221712e7db054082903701220eb44fdcae986d487c715fb134bbbf29da8db488d589f5ff81d5803cd564e0fa7c8897a8ea71244bc16d0bbc117f0b6642e0d7e6d07f29c7025b5868b3391e585395880dbbd92bf4076ac078ae9a8d76241dae3ff09404ef3d36f684f856541a908e0678cc62c8377bf99576836a7b322eaeefffc9e551f7f442138b4eea72c704d555042e8c78702c0878175a1692da87a72c4ddb53aaf5357faf98f97fb28c4118432aa17df0299dae082f185656227f8ac62a28599395ec61920ee43464df73c01a7564aa43b4d1e2b6b53c25b6dfd2a7349254b9c64debe0dbded3c0b6ef7dcfb733bd2e896fcccb59c72b4b0952168ad91a8522e7028560feef8ccb3aa2ca72ac953600f6851f1cf925e8e780ed48d6f8fcad5bae9cc7ccb22d7985811d055817b103682313d8ec76c24df23c0a68cfd838323eea2c747f448f5e317d2354f8cdd93f39fbacc0e9466dad945e2597cb6736223b9e7d0db7f371fc85774e9ee3810d940e550672e61e12d395aa96bc3fe01d6da16d475f03046046b90a53d92380b235b5bd4117875aab8a0da6a60874fd63aef1d53edc329eff952873b1e57f9da86ba73cf0bd83a8b2cc69ce5cdb8370c1d7de7a4dfcde92cdf0a0c4fd586c567be64d9bc4843df302193c7eb35440e172e15d82f15c71df13d705852da7fc2dbd00", 0x2000, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x18, 0x0, 0xfffffffffffffffe, {0x405}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 365.921164ms ago: executing program 5 (id=8564): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) read$FUSE(r2, &(0x7f0000001680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=r3) 92.663068ms ago: executing program 4 (id=8565): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=8566): socket(0x400000000010, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r2) kernel console output (not intermixed with test programs): 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 508.706149][ T5934] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 508.706174][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.754218][T18099] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 508.786388][ T5934] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 509.196766][T18122] process '/newroot/139/file0' started with executable stack [ 509.198622][ T5934] usb 5-1: USB disconnect, device number 35 [ 509.479680][T18138] batadv_slave_0: entered promiscuous mode [ 509.511484][T18137] batadv_slave_0: left promiscuous mode [ 509.545607][T17147] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.548975][T17147] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.549030][T17147] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.549070][T17147] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.829627][T18186] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5052'. [ 511.348014][T18202] netlink: 'syz.3.5057': attribute type 1 has an invalid length. [ 511.348042][T18202] netlink: 'syz.3.5057': attribute type 2 has an invalid length. [ 511.363038][T18202] netlink: 'syz.3.5057': attribute type 1 has an invalid length. [ 511.363058][T18202] netlink: 'syz.3.5057': attribute type 2 has an invalid length. [ 512.012523][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 512.018164][T18229] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 512.037717][T15119] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 512.041623][T15119] Bluetooth: hci1: Injecting HCI hardware error event [ 512.044983][ T5808] Bluetooth: hci1: hardware error 0x00 [ 512.462906][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 512.462929][ T37] audit: type=1800 audit(1771749592.982:272): pid=18236 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.5070" name="bus" dev="tmpfs" ino=5191 res=0 errno=0 [ 512.906479][T18245] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 513.007275][T18254] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 513.007301][T18254] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 513.136457][T18259] loop5: detected capacity change from 0 to 1671 [ 513.139592][T18259] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 513.515679][ T5162] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 514.092713][ T5808] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 514.193707][T18278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5090'. [ 514.539542][T18288] batman_adv: batadv0: Adding interface: dummy0 [ 514.539561][T18288] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.539598][T18288] batman_adv: batadv0: Interface activated: dummy0 [ 515.398909][T18310] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5103'. [ 516.799229][T18336] 9p: Invalid uid '0x00000000ffffffff' [ 519.803634][T18430] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 519.803665][T18430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 519.804146][T18428] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 519.804171][T18428] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 519.850324][T18428] vhci_hcd vhci_hcd.0: Device attached [ 519.871329][T18434] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 519.871361][T18434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 519.871419][T18434] vhci_hcd vhci_hcd.0: Device attached [ 519.881940][T18430] vhci_hcd vhci_hcd.0: Device attached [ 519.910714][T18428] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 519.910744][T18428] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 519.910800][T18428] vhci_hcd vhci_hcd.0: Device attached [ 519.922130][T18428] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(8) [ 519.922158][T18428] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 519.922216][T18428] vhci_hcd vhci_hcd.0: Device attached [ 519.923596][T18435] vhci_hcd: connection closed [ 519.931245][T18441] vhci_hcd: connection closed [ 519.960343][T18429] vhci_hcd: connection closed [ 519.961664][T18432] vhci_hcd: connection closed [ 519.963837][T17147] vhci_hcd vhci_hcd.4: stop threads [ 519.963864][T17147] vhci_hcd vhci_hcd.4: release socket [ 519.963904][T17147] vhci_hcd vhci_hcd.4: disconnect device [ 519.964254][T17147] vhci_hcd vhci_hcd.4: stop threads [ 519.964269][T17147] vhci_hcd vhci_hcd.4: release socket [ 519.964302][T17147] vhci_hcd vhci_hcd.4: disconnect device [ 519.978670][T17147] vhci_hcd vhci_hcd.4: stop threads [ 519.978693][T17147] vhci_hcd vhci_hcd.4: release socket [ 519.978732][T17147] vhci_hcd vhci_hcd.4: disconnect device [ 520.024953][T17147] vhci_hcd vhci_hcd.4: stop threads [ 520.024987][T17147] vhci_hcd vhci_hcd.4: release socket [ 520.025062][T17147] vhci_hcd vhci_hcd.4: disconnect device [ 520.053397][T18437] vhci_hcd: connection closed [ 520.060202][T17147] vhci_hcd vhci_hcd.4: stop threads [ 520.060237][T17147] vhci_hcd vhci_hcd.4: release socket [ 520.078808][T17147] vhci_hcd vhci_hcd.4: disconnect device [ 520.682913][T18450] overlayfs: upper fs does not support file handles, falling back to index=off. [ 522.596401][T18488] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 525.104329][T18531] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.106787][T18531] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.219531][T18531] team_slave_0: left promiscuous mode [ 525.230297][T18531] team_slave_1: left promiscuous mode [ 525.230398][T18531] dummy0: left promiscuous mode [ 525.431206][T18542] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 525.581019][T18542] usb 6-1: Using ep0 maxpacket: 32 [ 525.583684][T18542] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 525.583716][T18542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.588025][T18542] usb 6-1: config 0 descriptor?? [ 525.626600][T18542] gspca_main: sunplus-2.14.0 probing 041e:400b [ 525.894319][T18531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.968850][T18531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.428179][T18542] gspca_sunplus: reg_r err -71 [ 526.428287][T18542] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 526.454054][T18542] usb 6-1: USB disconnect, device number 14 [ 526.783984][T18531] batman_adv: batadv0: Interface deactivated: gretap1 [ 526.844850][T17158] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.853904][T17158] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.853953][T17158] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.853990][T17158] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.146038][T18590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5211'. [ 527.471397][ T36] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 527.631538][ T36] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 527.631572][ T36] usb 6-1: config 0 has no interface number 0 [ 527.631620][ T36] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 527.631647][ T36] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 527.631676][ T36] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 527.636206][ T36] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 527.636241][ T36] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 527.636263][ T36] usb 6-1: Product: syz [ 527.636279][ T36] usb 6-1: SerialNumber: syz [ 527.662174][ T36] usb 6-1: config 0 descriptor?? [ 527.707133][ T36] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 527.746544][ T36] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input37 [ 527.946367][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 528.154484][T18548] usb 6-1: USB disconnect, device number 15 [ 528.214395][T18548] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 529.736947][T18662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5242'. [ 529.736984][T18662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5242'. [ 530.141256][ T36] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 530.333687][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.333729][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.333756][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 530.333804][ T36] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 530.333831][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.339742][ T36] usb 5-1: config 0 descriptor?? [ 530.674675][T18680] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5251'. [ 530.774160][ T36] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 530.774195][ T36] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 530.774211][ T36] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 530.774226][ T36] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 530.774242][ T36] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 530.774258][ T36] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 530.774273][ T36] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 530.774289][ T36] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 530.774304][ T36] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 530.774319][ T36] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 530.801482][ T36] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 531.059779][T18572] usb 5-1: USB disconnect, device number 36 [ 532.785048][T18726] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5269'. [ 532.786792][T18726] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5269'. [ 533.079882][T18735] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 533.227766][T18741] netlink: 'syz.0.5276': attribute type 12 has an invalid length. [ 533.227790][T18741] netlink: 'syz.0.5276': attribute type 29 has an invalid length. [ 533.227805][T18741] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5276'. [ 533.227832][T18741] netlink: 'syz.0.5276': attribute type 2 has an invalid length. [ 533.227845][T18741] netlink: 23 bytes leftover after parsing attributes in process `syz.0.5276'. [ 533.656397][T18754] sock: sock_set_timeout: `syz.4.5279' (pid 18754) tries to set negative timeout [ 533.796266][T18756] tun0: tun_chr_ioctl cmd 2148553947 [ 533.796610][T18756] tun0: tun_chr_ioctl cmd 1074025684 [ 534.250799][T15119] Bluetooth: hci3: command 0x0c1a tx timeout [ 534.346255][T18767] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 534.351037][T18772] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 535.078194][T18548] IPVS: starting estimator thread 0... [ 535.088219][T18801] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 535.190699][T18805] IPVS: using max 7 ests per chain, 16800 per kthread [ 535.636951][T18831] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 535.636982][T18831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 535.661904][T18831] vhci_hcd vhci_hcd.0: Device attached [ 535.693081][T18831] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 535.693112][T18831] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 535.693181][T18831] vhci_hcd vhci_hcd.0: Device attached [ 535.729903][T18831] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 535.729933][T18831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 535.729993][T18831] vhci_hcd vhci_hcd.0: Device attached [ 535.771182][T18831] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 535.771213][T18831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 535.825452][T18831] vhci_hcd vhci_hcd.0: Device attached [ 535.827924][T18832] vhci_hcd: connection closed [ 535.828008][T18837] vhci_hcd: connection closed [ 535.828266][T18840] vhci_hcd: connection closed [ 535.828394][T18834] vhci_hcd: connection closed [ 535.828655][T17177] vhci_hcd vhci_hcd.4: stop threads [ 535.828680][T17177] vhci_hcd vhci_hcd.4: release socket [ 535.828765][T17177] vhci_hcd vhci_hcd.4: disconnect device [ 535.851443][T17177] vhci_hcd vhci_hcd.4: stop threads [ 535.851467][T17177] vhci_hcd vhci_hcd.4: release socket [ 535.851548][T17177] vhci_hcd vhci_hcd.4: disconnect device [ 535.873245][T17177] vhci_hcd vhci_hcd.4: stop threads [ 535.873271][T17177] vhci_hcd vhci_hcd.4: release socket [ 535.873353][T17177] vhci_hcd vhci_hcd.4: disconnect device [ 535.873741][T17177] vhci_hcd vhci_hcd.4: stop threads [ 535.873755][T17177] vhci_hcd vhci_hcd.4: release socket [ 535.882511][T17177] vhci_hcd vhci_hcd.4: disconnect device [ 535.933387][T18548] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 535.956712][T18847] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 536.180610][T18550] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 536.330579][T18550] usb 6-1: Using ep0 maxpacket: 8 [ 536.349081][T18550] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 536.359791][T18550] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.359826][T18550] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 536.359853][T18550] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 536.359879][T18550] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.359926][T18550] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 536.359951][T18550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.971037][ T36] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 537.091175][T18880] vcan0: tx address claim with different name [ 537.124488][ T36] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.124519][ T36] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.127707][ T36] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 537.127738][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 537.127760][ T36] usb 5-1: SerialNumber: syz [ 537.235280][T18883] usbtmc 6-1:16.0: simple usb_control_msg returned 0 [ 537.424213][ T36] usb 5-1: 0:2 : does not exist [ 537.435483][T18542] usb 6-1: USB disconnect, device number 16 [ 537.493107][T18889] input: syz1 as /devices/virtual/input/input38 [ 537.604826][ T36] usb 5-1: USB disconnect, device number 37 [ 537.733830][ T6016] udevd[6016]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.243252][T18915] netlink: 75 bytes leftover after parsing attributes in process `syz.0.5351'. [ 538.311276][T18572] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 538.424921][T18924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5356'. [ 538.424960][T18924] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5356'. [ 538.473492][T18572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.473530][T18572] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.473553][T18572] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.473601][T18572] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.473626][T18572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.512016][T18572] usb 5-1: config 0 descriptor?? [ 539.022190][T18572] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 539.298487][T18572] usb 5-1: USB disconnect, device number 38 [ 540.679460][ T37] audit: type=1326 audit(1771749873.226:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.0.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a0c629 code=0x7ffc0000 [ 540.680328][ T37] audit: type=1326 audit(1771749873.226:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.0.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a0c629 code=0x7ffc0000 [ 540.684624][ T37] audit: type=1326 audit(1771749873.236:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.0.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a0c629 code=0x7ffc0000 [ 540.685053][ T37] audit: type=1326 audit(1771749873.236:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.0.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f36d9a0c629 code=0x7ffc0000 [ 540.688346][ T37] audit: type=1326 audit(1771749873.236:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.0.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a0c629 code=0x7ffc0000 [ 540.688611][ T37] audit: type=1326 audit(1771749873.236:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.0.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a0c629 code=0x7ffc0000 [ 540.689296][ T37] audit: type=1326 audit(1771749873.236:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.0.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a0c629 code=0x7ffc0000 [ 540.690222][ T37] audit: type=1326 audit(1771749873.236:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.0.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a0c629 code=0x7ffc0000 [ 540.691604][ T37] audit: type=1326 audit(1771749873.236:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.0.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f36d9a0c629 code=0x7ffc0000 [ 540.691650][ T37] audit: type=1326 audit(1771749873.246:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18984 comm="syz.0.5379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9a0c629 code=0x7ffc0000 [ 541.421304][T18542] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 541.581526][T18542] usb 6-1: Using ep0 maxpacket: 32 [ 541.598648][T18542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.598685][T18542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.598726][T18542] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 541.598750][T18542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.607255][T18542] usb 6-1: config 0 descriptor?? [ 541.639492][T18542] hub 6-1:0.0: USB hub found [ 541.771494][T15119] Bluetooth: hci3: command 0x0c1a tx timeout [ 541.823356][T18542] hub 6-1:0.0: config failed, hub has too many ports! (err -19) [ 542.032025][T18542] usbhid 6-1:0.0: can't add hid device: -71 [ 542.032149][T18542] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 542.062171][T18542] usb 6-1: USB disconnect, device number 17 [ 542.198725][T19029] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 542.207815][T19030] batman_adv: batadv0: Interface deactivated: dummy0 [ 542.207846][T19030] batman_adv: batadv0: Removing interface: dummy0 [ 542.284051][T19030] bridge_slave_0: left allmulticast mode [ 542.284085][T19030] bridge_slave_0: left promiscuous mode [ 542.284369][T19030] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.374647][T19030] bridge_slave_1: left allmulticast mode [ 542.374680][T19030] bridge_slave_1: left promiscuous mode [ 542.374933][T19030] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.584550][T19030] bond0: (slave bond_slave_0): Releasing backup interface [ 542.692642][T18548] hid_parser_main: 5 callbacks suppressed [ 542.692666][T18548] hid-generic 0103:0004:0000.003F: unknown main item tag 0x0 [ 542.692707][T18548] hid-generic 0103:0004:0000.003F: unknown main item tag 0x0 [ 542.692741][T18548] hid-generic 0103:0004:0000.003F: unknown main item tag 0x0 [ 542.692775][T18548] hid-generic 0103:0004:0000.003F: unknown main item tag 0x0 [ 542.692822][T18548] hid-generic 0103:0004:0000.003F: unknown main item tag 0x0 [ 542.692855][T18548] hid-generic 0103:0004:0000.003F: unknown main item tag 0x0 [ 542.692880][T18548] hid-generic 0103:0004:0000.003F: unknown main item tag 0x0 [ 542.692905][T18548] hid-generic 0103:0004:0000.003F: unknown main item tag 0x0 [ 542.692927][T18548] hid-generic 0103:0004:0000.003F: unknown main item tag 0x0 [ 542.692947][T18548] hid-generic 0103:0004:0000.003F: unknown main item tag 0x0 [ 542.817327][T19030] bond0: (slave bond_slave_1): Releasing backup interface [ 542.818808][T18548] hid-generic 0103:0004:0000.003F: hidraw0: HID v0.02 Device [syz0] on syz1 [ 543.085333][T19030] team0: Port device team_slave_0 removed [ 543.114836][T19045] fido_id[19045]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 543.181955][T19030] team0: Port device team_slave_1 removed [ 543.183273][T19030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.183299][T19030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.237952][T19030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.237973][T19030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.274334][T19030] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 543.585247][T19069] Bluetooth: MGMT ver 1.23 [ 544.048857][T19080] netlink: 304 bytes leftover after parsing attributes in process `syz.5.5417'. [ 545.773113][T19092] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.773958][T19092] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.970212][T19092] C: left promiscuous mode [ 545.970399][T19092] team_slave_1: left promiscuous mode [ 546.214693][T19118] binder: 19116:19118 ioctl 4020ae46 0 returned -22 [ 546.215140][T19118] binder: 19116:19118 ioctl 41a0ae8d 200000000800 returned -22 [ 546.320322][ T5934] kernel write not supported for file [landlock-ruleset] (pid: 5934 comm: kworker/0:6) [ 546.996844][T19092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.034834][T19092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.516887][T19141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.477046][T19133] syz_tun: entered allmulticast mode [ 548.489200][T17158] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.515945][T19133] syz_tun: left allmulticast mode [ 548.517846][T17158] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.783508][T17158] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.790059][T17158] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.015272][T19173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5457'. [ 549.015301][T19173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5457'. [ 549.112515][T19177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5459'. [ 549.132779][T19177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5459'. [ 549.438271][T19189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5465'. [ 549.505762][ T5808] Bluetooth: hci2: unexpected event for opcode 0x0c56 [ 550.406662][T19229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5483'. [ 550.406709][T19229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5483'. [ 550.770226][T19247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5486'. [ 551.708358][T19285] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5503'. [ 551.787646][T19285] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5503'. [ 552.910645][T18548] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 553.111571][T18548] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 553.111606][T18548] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 553.111630][T18548] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 553.114123][T18548] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 553.114154][T18548] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.114176][T18548] usb 6-1: Product: syz [ 553.114192][T18548] usb 6-1: Manufacturer: syz [ 553.114209][T18548] usb 6-1: SerialNumber: syz [ 553.187703][T18548] hub 6-1:1.0: bad descriptor, ignoring hub [ 553.187747][T18548] hub 6-1:1.0: probe with driver hub failed with error -5 [ 553.368495][T18548] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 553.740278][ T36] usb 6-1: USB disconnect, device number 18 [ 553.814262][ T5457] veth0_macvtap: left promiscuous mode [ 553.861932][ T36] usblp0: removed [ 554.048610][T19328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.251235][ T36] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 554.403246][ T36] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 554.403282][ T36] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.406295][ T36] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 554.406327][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.406349][ T36] usb 6-1: Product: syz [ 554.406365][ T36] usb 6-1: Manufacturer: syz [ 554.406381][ T36] usb 6-1: SerialNumber: syz [ 554.426342][ T36] hub 6-1:1.0: bad descriptor, ignoring hub [ 554.426380][ T36] hub 6-1:1.0: probe with driver hub failed with error -5 [ 554.668929][ T36] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 554.751684][ T36] usb 6-1: USB disconnect, device number 19 [ 554.753611][T19347] Invalid argument reading file caps for ./file0 [ 554.796556][ T36] usblp0: removed [ 556.631538][ T810] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 556.805736][ T810] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 556.805774][ T810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.823718][ T810] usb 6-1: config 0 descriptor?? [ 556.863929][ T810] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 556.937007][T19404] netlink: 'syz.3.5542': attribute type 12 has an invalid length. [ 556.937033][T19404] netlink: 'syz.3.5542': attribute type 29 has an invalid length. [ 556.937049][T19404] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5542'. [ 556.937074][T19404] netlink: 59 bytes leftover after parsing attributes in process `syz.3.5542'. [ 557.676315][ T810] gspca_stv06xx: I2C: Read error writing address: -71 [ 557.680909][ T810] usb 6-1: USB disconnect, device number 20 [ 557.965302][T19434] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5555'. [ 558.128788][T19441] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5558'. [ 558.299269][T19448] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5562'. [ 558.610750][ T5934] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 558.782792][ T5934] usb 6-1: config 0 has an invalid interface number: 111 but max is 0 [ 558.782827][ T5934] usb 6-1: config 0 has no interface number 0 [ 558.782881][ T5934] usb 6-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 558.782908][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.790212][ T5934] usb 6-1: config 0 descriptor?? [ 558.852885][ T5934] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 559.046664][ T5934] gspca_ov534_9: reg_w failed -71 [ 559.395782][T19486] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 559.460521][ T5934] gspca_ov534_9: Unknown sensor 0000 [ 559.460630][ T5934] ov534_9 6-1:0.111: probe with driver ov534_9 failed with error -22 [ 559.464200][ T5934] usb 6-1: USB disconnect, device number 21 [ 559.783878][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 559.783900][ T37] audit: type=1326 audit(1771749892.326:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ab8cc629 code=0x7ffc0000 [ 559.783952][ T37] audit: type=1326 audit(1771749892.336:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ab8cc629 code=0x7ffc0000 [ 559.783999][ T37] audit: type=1326 audit(1771749892.336:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ab8cc629 code=0x7ffc0000 [ 559.787678][ T37] audit: type=1326 audit(1771749892.336:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f37ab8cc629 code=0x7ffc0000 [ 559.787730][ T37] audit: type=1326 audit(1771749892.336:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ab8cc629 code=0x7ffc0000 [ 559.787777][ T37] audit: type=1326 audit(1771749892.336:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ab8cc629 code=0x7ffc0000 [ 559.787822][ T37] audit: type=1326 audit(1771749892.336:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ab8cc629 code=0x7ffc0000 [ 559.787865][ T37] audit: type=1326 audit(1771749892.336:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ab8cc629 code=0x7ffc0000 [ 559.787909][ T37] audit: type=1326 audit(1771749892.336:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ab8cc629 code=0x7ffc0000 [ 559.791627][ T37] audit: type=1326 audit(1771749892.346:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19496 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f37ab8cc629 code=0x7ffc0000 [ 561.359192][T19546] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 561.729032][T17177] Bluetooth: hci4: Frame reassembly failed (-84) [ 563.239304][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.239390][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.774449][ T5808] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 563.774541][T15119] Bluetooth: hci4: command 0x1003 tx timeout [ 563.828678][T19598] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 564.340518][ T5934] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 564.490708][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 564.493359][ T5934] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 564.504426][ T5934] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 564.504460][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 564.504483][ T5934] usb 5-1: Product: syz [ 564.504499][ T5934] usb 5-1: Manufacturer: syz [ 564.504603][ T5934] usb 5-1: SerialNumber: syz [ 564.580060][ T5934] usb 5-1: config 0 descriptor?? [ 564.587783][T19607] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 564.838778][ T810] usb 5-1: USB disconnect, device number 39 [ 564.906276][ T5934] hid_parser_main: 1 callbacks suppressed [ 564.906303][ T5934] hid-generic 0006:0004:0009.0040: unknown main item tag 0x0 [ 564.906336][ T5934] hid-generic 0006:0004:0009.0040: unknown main item tag 0x0 [ 564.906362][ T5934] hid-generic 0006:0004:0009.0040: unknown main item tag 0x0 [ 564.906387][ T5934] hid-generic 0006:0004:0009.0040: unknown main item tag 0x0 [ 564.906412][ T5934] hid-generic 0006:0004:0009.0040: unknown main item tag 0x0 [ 564.906437][ T5934] hid-generic 0006:0004:0009.0040: unknown main item tag 0x0 [ 564.906461][ T5934] hid-generic 0006:0004:0009.0040: unknown main item tag 0x0 [ 564.906486][ T5934] hid-generic 0006:0004:0009.0040: unknown main item tag 0x0 [ 564.908212][ T5934] hid-generic 0006:0004:0009.0040: unknown main item tag 0x0 [ 564.908239][ T5934] hid-generic 0006:0004:0009.0040: unknown main item tag 0x0 [ 565.003621][T19636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5644'. [ 565.039411][ T5934] hid-generic 0006:0004:0009.0040: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 565.232464][T19640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 565.235874][T19638] fido_id[19638]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 566.302936][T19664] netlink: 'syz.4.5656': attribute type 3 has an invalid length. [ 566.302967][T19664] netlink: 'syz.4.5656': attribute type 3 has an invalid length. [ 566.303060][T19664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5656'. [ 566.510710][T18548] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 566.682213][T18548] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 566.682249][T18548] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 566.682275][T18548] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.694502][T18548] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 566.694536][T18548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.694559][T18548] usb 4-1: Product: syz [ 566.694575][T18548] usb 4-1: Manufacturer: syz [ 566.694591][T18548] usb 4-1: SerialNumber: syz [ 566.803972][T18548] hub 4-1:1.0: bad descriptor, ignoring hub [ 566.804017][T18548] hub 4-1:1.0: probe with driver hub failed with error -5 [ 567.066482][T18548] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 568.053980][T19662] usb 4-1: reset high-speed USB device number 37 using dummy_hcd [ 568.801696][T18572] usb 4-1: USB disconnect, device number 37 [ 568.809571][T18572] usblp0: removed [ 570.427728][T18548] kernel read not supported for file /audio1 (pid: 18548 comm: kworker/0:5) [ 571.961501][T19842] netlink: 'syz.2.5725': attribute type 5 has an invalid length. [ 572.566049][T19857] overlayfs: failed lookup in lower (newroot/1163, name='file0', err=-40): overlapping layers [ 573.616014][T19882] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 573.618620][T18572] IPVS: starting estimator thread 0... [ 573.731912][T19886] IPVS: using max 7 ests per chain, 16800 per kthread [ 575.685310][T19961] trusted_key: syz.5.5779 sent an empty control message without MSG_MORE. [ 576.280723][T18548] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 576.434570][T18548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.434610][T18548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.438405][T18548] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 576.438450][T18548] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 576.438472][T18548] usb 4-1: Manufacturer: syz [ 576.493689][T18548] usb 4-1: config 0 descriptor?? [ 576.507157][T19988] netlink: 'syz.2.5792': attribute type 8 has an invalid length. [ 576.507181][T19988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5792'. [ 576.577246][T19988] bond0: entered promiscuous mode [ 576.582324][T19988] gretap0: entered promiscuous mode [ 576.584334][T19988] debugfs: 'hsr1' already exists in 'hsr' [ 576.584361][T19988] Cannot create hsr debugfs directory [ 576.584384][T19988] hsr1: entered promiscuous mode [ 577.021098][ T36] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 577.175487][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.175527][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.175551][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 577.175598][ T36] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.175623][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.189441][ T36] usb 5-1: config 0 descriptor?? [ 577.346357][T18548] uclogic 0003:256C:006D.0041: failed retrieving string descriptor #100: -71 [ 577.346429][T18548] uclogic 0003:256C:006D.0041: failed retrieving pen parameters: -71 [ 577.346448][T18548] uclogic 0003:256C:006D.0041: failed probing pen v1 parameters: -71 [ 577.346521][T18548] uclogic 0003:256C:006D.0041: failed probing parameters: -71 [ 577.346648][T18548] uclogic 0003:256C:006D.0041: probe with driver uclogic failed with error -71 [ 577.405495][T18548] usb 4-1: USB disconnect, device number 38 [ 577.702333][ T36] hid_parser_main: 7 callbacks suppressed [ 577.702361][ T36] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 577.702393][ T36] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 577.702430][ T36] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 577.702456][ T36] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 577.702483][ T36] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 577.702510][ T36] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 577.702536][ T36] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 577.702562][ T36] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 577.702588][ T36] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 577.702614][ T36] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 577.717042][ T36] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 578.076964][T18572] usb 5-1: USB disconnect, device number 40 [ 578.312703][T20011] fido_id[20011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 578.737454][T20027] loop2: detected capacity change from 0 to 7 [ 578.749994][T20027] Dev loop2: unable to read RDB block 7 [ 578.750044][T20027] loop2: unable to read partition table [ 578.750262][T20027] loop2: partition table beyond EOD, truncated [ 578.807833][T20027] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 579.061175][ T36] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 579.219228][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.219266][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.219292][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 579.219340][ T36] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 579.219376][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.241493][ T36] usb 5-1: config 0 descriptor?? [ 579.829343][ T36] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 579.950613][ T5934] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 580.029602][ T36] usb 5-1: USB disconnect, device number 41 [ 580.111139][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 580.114957][T20051] fido_id[20051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 580.115580][ T5934] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 580.115612][ T5934] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 580.115639][ T5934] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 580.115678][ T5934] usb 6-1: config 1 interface 0 has no altsetting 0 [ 580.148636][ T5934] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 580.148680][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.148704][ T5934] usb 6-1: Product: syz [ 580.148720][ T5934] usb 6-1: Manufacturer: syz [ 580.148736][ T5934] usb 6-1: SerialNumber: syz [ 580.507521][ T5934] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 580.733530][ T36] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 580.779275][T20047] usblp0:failed reading printer status (-32) [ 580.787761][T18572] usb 6-1: USB disconnect, device number 22 [ 580.793977][T18572] usblp0: removed [ 580.901052][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 580.903194][ T36] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 580.903221][ T36] usb 4-1: config 0 has no interface number 0 [ 580.903288][ T36] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.903318][ T36] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.903357][ T36] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 580.903383][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.928338][ T36] usb 4-1: config 0 descriptor?? [ 581.282163][T20073] netlink: 428 bytes leftover after parsing attributes in process `syz.2.5825'. [ 581.282202][T20073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5825'. [ 581.558146][ T36] uclogic 0003:28BD:0071.0044: pen parameters not found [ 581.558175][ T36] uclogic 0003:28BD:0071.0044: interface is invalid, ignoring [ 581.632869][T20083] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5829'. [ 581.792821][T18548] usb 4-1: USB disconnect, device number 39 [ 582.875981][ T37] kauditd_printk_skb: 47 callbacks suppressed [ 582.876002][ T37] audit: type=1326 audit(1771749915.426:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20102 comm="syz.4.5839" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f968df5c629 code=0x0 [ 583.948614][T20135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5852'. [ 583.948633][T20135] netlink: 'syz.0.5852': attribute type 2 has an invalid length. [ 584.299874][T20148] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 584.578859][T20163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5863'. [ 584.591392][T20164] netlink: 'syz.5.5864': attribute type 4 has an invalid length. [ 584.611253][T20163] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.501552][T20196] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 586.917140][T20232] input: syz1 as /devices/virtual/input/input39 [ 586.917179][T20232] input: failed to attach handler leds to device input39, error: -6 [ 587.261092][ T36] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 587.411139][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 587.418056][ T36] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 587.418088][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 587.418110][ T36] usb 5-1: config 0 has no interface number 0 [ 587.418159][ T36] usb 5-1: config 0 interface 17 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 587.431862][ T36] usb 5-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=ab.c3 [ 587.431897][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.431920][ T36] usb 5-1: Product: syz [ 587.431935][ T36] usb 5-1: Manufacturer: syz [ 587.431950][ T36] usb 5-1: SerialNumber: syz [ 587.507740][ T36] usb 5-1: config 0 descriptor?? [ 587.533164][ T36] usbhid 5-1:0.17: couldn't find an input interrupt endpoint [ 587.711342][T20249] team0 (unregistering): Port device team_slave_0 removed [ 587.730024][ T5934] usb 5-1: USB disconnect, device number 42 [ 587.773116][T20249] team0 (unregistering): Port device team_slave_1 removed [ 588.569751][T20276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5911'. [ 588.673460][T20277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5912'. [ 589.088780][T20291] veth1_vlan: left allmulticast mode [ 589.141337][T20291] netlink: 'syz.0.5918': attribute type 1 has an invalid length. [ 589.141364][T20291] netlink: 'syz.0.5918': attribute type 2 has an invalid length. [ 589.204271][T20293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5919'. [ 590.063103][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 591.841647][T20369] ªªªªªª: renamed from wg2 (while UP) [ 592.420553][ T5934] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 592.575176][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 592.583426][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 592.583468][ T5934] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 592.583492][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.599165][ T5934] usb 4-1: config 0 descriptor?? [ 593.060856][ T5934] hid_parser_main: 16 callbacks suppressed [ 593.060883][ T5934] corsair-psu 0003:1B1C:1C0D.0045: unknown main item tag 0x0 [ 593.060914][ T5934] corsair-psu 0003:1B1C:1C0D.0045: unknown main item tag 0x0 [ 593.060939][ T5934] corsair-psu 0003:1B1C:1C0D.0045: unknown main item tag 0x0 [ 593.060965][ T5934] corsair-psu 0003:1B1C:1C0D.0045: unknown main item tag 0x0 [ 593.060991][ T5934] corsair-psu 0003:1B1C:1C0D.0045: unknown main item tag 0x0 [ 593.082577][ T5934] corsair-psu 0003:1B1C:1C0D.0045: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.3-1/input0 [ 593.296842][ T5934] corsair-psu 0003:1B1C:1C0D.0045: unable to initialize device (-71) [ 593.313834][ T5934] corsair-psu 0003:1B1C:1C0D.0045: probe with driver corsair-psu failed with error -71 [ 593.365119][ T5934] usb 4-1: USB disconnect, device number 40 [ 595.660631][ T5934] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 595.815549][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.815614][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 595.815643][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 595.815671][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 595.815697][ T5934] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 595.818436][ T5934] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 595.818466][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 595.818479][ T5934] usb 5-1: Product: syz [ 595.818489][ T5934] usb 5-1: Manufacturer: syz [ 595.818498][ T5934] usb 5-1: SerialNumber: syz [ 595.911826][ T5934] usb 5-1: config 0 descriptor?? [ 595.921165][T18572] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 596.073236][T18572] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 596.073270][T18572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.102651][T18572] usb 6-1: config 0 descriptor?? [ 596.139268][ T5934] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 596.139298][ T5934] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 596.335985][ T5934] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 596.336013][ T5934] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 596.336034][ T5934] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 596.532264][T18572] elan 0003:04F3:0755.0046: unknown main item tag 0x1 [ 596.539021][ T5934] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 596.586017][T18572] elan 0003:04F3:0755.0046: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 596.746912][T18548] usb 6-1: USB disconnect, device number 23 [ 596.786885][T20488] fido_id[20488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 597.141281][ T5934] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 597.141714][ T5934] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 597.167931][ T5934] usb 5-1: USB disconnect, device number 43 [ 597.416062][T18572] kernel read not supported for file /admmidi2 (pid: 18572 comm: kworker/1:8) [ 598.470655][T18548] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 598.624447][T18548] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 598.624483][T18548] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.624530][T18548] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 598.624556][T18548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.867395][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6029'. [ 598.890119][T18548] usb 5-1: usb_control_msg returned -32 [ 598.890199][T18548] usbtmc 5-1:16.0: can't read capabilities [ 598.934551][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6029'. [ 599.273295][T20546] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -32 [ 599.275518][ T5934] usb 5-1: USB disconnect, device number 44 [ 600.860186][T20586] veth0: entered promiscuous mode [ 600.869210][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6047'. [ 600.936407][T20586] veth0 (unregistering): left promiscuous mode [ 601.101417][T18572] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 601.255776][T18572] usb 6-1: unable to get BOS descriptor or descriptor too short [ 601.256572][T18572] usb 6-1: not running at top speed; connect to a high speed hub [ 601.321673][T18572] usb 6-1: config 56 has an invalid interface number: 216 but max is 0 [ 601.321709][T18572] usb 6-1: config 56 has no interface number 0 [ 601.321758][T18572] usb 6-1: config 56 interface 216 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 601.321791][T18572] usb 6-1: config 56 interface 216 has no altsetting 0 [ 601.367934][T18572] usb 6-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b [ 601.367971][T18572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.367995][T18572] usb 6-1: Product: syz [ 601.368010][T18572] usb 6-1: Manufacturer: syz [ 601.368026][T18572] usb 6-1: SerialNumber: syz [ 601.416793][T20583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 601.623884][T18572] hub 6-1:56.216: bad descriptor, ignoring hub [ 601.623930][T18572] hub 6-1:56.216: probe with driver hub failed with error -5 [ 601.626976][T18572] option 6-1:56.216: GSM modem (1-port) converter detected [ 601.728006][T18572] usb 6-1: USB disconnect, device number 24 [ 601.740281][T18572] option 6-1:56.216: device disconnected [ 602.429432][T20615] bridge_slave_1: invalid flags given to default FDB implementation [ 602.866517][T20624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6061'. [ 604.035969][T20657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6085'. [ 605.124462][ T36] libceph: connect (1)[c::]:6789 error -22 [ 605.139844][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 605.165866][ T36] libceph: connect (1)[c::]:6789 error -22 [ 605.166063][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 605.169986][T20688] ceph: No mds server is up or the cluster is laggy [ 605.240649][T18550] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 605.404788][T18550] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.404827][T18550] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.404852][T18550] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 605.404899][T18550] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 605.404925][T18550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.438329][T18572] libceph: connect (1)[c::]:6789 error -22 [ 605.438561][T18572] libceph: mon0 (1)[c::]:6789 connect error [ 605.452661][T18550] usb 6-1: config 0 descriptor?? [ 605.938167][T18550] hid-udraw 0003:20D6:CB17.0047: unknown main item tag 0x3 [ 605.958621][T18550] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0047/input/input40 [ 605.975023][T18550] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0047/input/input41 [ 606.045999][T18550] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0047/input/input42 [ 606.197514][T18550] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0047/input/input43 [ 606.320598][T18550] hid-udraw 0003:20D6:CB17.0047: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.5-1/input0 [ 606.381094][T18550] usb 6-1: USB disconnect, device number 25 [ 606.654881][T20709] fido_id[20709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 607.104439][T20722] syzkaller1: entered allmulticast mode [ 608.783976][T20775] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6125'. [ 608.837052][T20781] netlink: 'syz.0.6129': attribute type 1 has an invalid length. [ 608.837077][T20781] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.6129'. [ 609.012872][T20790] netlink: 'syz.3.6132': attribute type 19 has an invalid length. [ 609.012897][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6132'. [ 609.066586][T20790] netlink: 'syz.3.6132': attribute type 19 has an invalid length. [ 609.066611][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6132'. [ 609.747784][T20825] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 609.804962][T20827] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 609.911400][T20825] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 609.920182][T20825] overlayfs: failed to look up (tracing) for ino (-66) [ 611.000658][T18550] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 611.153011][T18550] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 611.153049][T18550] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 611.153078][T18550] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 611.153101][T18550] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 611.153148][T18550] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 611.153174][T18550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.282420][T18550] usb 6-1: config 0 descriptor?? [ 611.734731][T18550] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 611.734772][T18550] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 611.734799][T18550] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 611.734826][T18550] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 611.734852][T18550] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x0 [ 611.800280][T18550] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 611.998640][ T36] usb 6-1: USB disconnect, device number 26 [ 612.071780][T20874] fido_id[20874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 612.667293][T20894] input: syz0 as /devices/virtual/input/input44 [ 613.571646][ T37] audit: type=1326 audit(1771749946.116:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20916 comm="syz.2.6192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc19e58c629 code=0x0 [ 614.835340][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 614.861071][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 614.864473][ T5808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 614.865765][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 614.866643][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 615.045410][T17145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.045454][T17145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.664454][T17145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.664499][T17145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.274817][T17145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.274858][T17145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.965070][T17145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.965111][T17145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.972388][T15119] Bluetooth: hci0: command tx timeout [ 617.842488][T17145] bridge_slave_1: left allmulticast mode [ 617.842521][T17145] bridge_slave_1: left promiscuous mode [ 617.842815][T17145] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.953461][T17145] bridge_slave_0: left allmulticast mode [ 617.953769][T17145] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.917692][T21032] fuse: Bad value for 'fd' [ 619.052352][T15119] Bluetooth: hci0: command tx timeout [ 620.566584][T17145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.672635][T17145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.724767][T17145] bond0 (unregistering): Released all slaves [ 620.831615][T20940] chnl_net:caif_netlink_parms(): no params data found [ 621.049725][T17145] : left promiscuous mode [ 621.139176][T15119] Bluetooth: hci0: command tx timeout [ 621.313335][T20940] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.315655][T20940] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.315877][T20940] bridge_slave_0: entered allmulticast mode [ 621.347682][T20940] bridge_slave_0: entered promiscuous mode [ 621.359467][T20940] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.359682][T20940] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.359930][T20940] bridge_slave_1: entered allmulticast mode [ 621.421936][T20940] bridge_slave_1: entered promiscuous mode [ 621.579567][T17145] tipc: Left network mode [ 621.607462][T20940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.662056][T20940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.292288][T20940] team0: Port device team_slave_0 added [ 622.387420][T20940] team0: Port device team_slave_1 added [ 623.211295][T18550] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 623.214709][T15119] Bluetooth: hci0: command tx timeout [ 623.264816][T20940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.264836][T20940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.264866][T20940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.296821][T20940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.296840][T20940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.296868][T20940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.374275][T18550] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.374308][T18550] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 623.374331][T18550] usb 6-1: config 1 has no interface number 0 [ 623.374365][T18550] usb 6-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30 [ 623.374410][T18550] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.374440][T18550] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222 [ 623.374468][T18550] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 623.379553][T18550] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40 [ 623.379587][T18550] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.379608][T18550] usb 6-1: Product: syz [ 623.379624][T18550] usb 6-1: Manufacturer: syz [ 623.379639][T18550] usb 6-1: SerialNumber: syz [ 623.812164][T17145] hsr_slave_0: left promiscuous mode [ 623.851225][T17145] hsr_slave_1: left promiscuous mode [ 623.852371][T17145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.852400][T17145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.893035][T17145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.893064][T17145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.065957][T17145] veth1_macvtap: left promiscuous mode [ 624.067104][T17145] veth0_macvtap: left promiscuous mode [ 624.084018][T17145] veth0_vlan: left promiscuous mode [ 624.303821][T18550] cdc_ncm 6-1:1.1: bind() failure [ 624.509745][ T36] usb 6-1: USB disconnect, device number 27 [ 624.669698][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.669782][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.090176][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 625.122153][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 625.124028][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 625.145639][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 625.146705][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 625.877311][T21210] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.6320'. [ 625.877396][T21210] netlink: ct family unspecified [ 626.313392][T21221] Bluetooth: MGMT ver 1.23 [ 627.295471][T15119] Bluetooth: hci4: command tx timeout [ 627.489049][T20940] hsr_slave_0: entered promiscuous mode [ 627.547075][T20940] hsr_slave_1: entered promiscuous mode [ 627.550091][T20940] debugfs: 'hsr0' already exists in 'hsr' [ 627.550129][T20940] Cannot create hsr debugfs directory [ 628.726237][T18542] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 628.883267][T18542] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 628.883300][T18542] usb 6-1: config 0 has no interface number 0 [ 628.887742][T18542] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 628.887774][T18542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.887796][T18542] usb 6-1: Product: syz [ 628.887811][T18542] usb 6-1: Manufacturer: syz [ 628.887826][T18542] usb 6-1: SerialNumber: syz [ 628.966797][T18542] usb 6-1: config 0 descriptor?? [ 629.381533][T15119] Bluetooth: hci4: command tx timeout [ 629.405360][T18542] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 629.405393][T18542] usb 6-1: Firmware version (0.0) predates our first public release. [ 629.405413][T18542] usb 6-1: Please update to version 0.2 or newer [ 630.035193][T18542] usb 6-1: USB disconnect, device number 28 [ 630.145141][T21291] bond0: Device is already in use. [ 630.312659][T17145] IPVS: stop unused estimator thread 0... [ 630.440048][T21186] chnl_net:caif_netlink_parms(): no params data found [ 630.854658][T20940] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 630.953361][T20940] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 631.049554][T20940] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 631.144257][T20940] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 631.379360][T21186] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.379537][T21186] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.379784][T21186] bridge_slave_0: entered allmulticast mode [ 631.404499][T21186] bridge_slave_0: entered promiscuous mode [ 631.433912][T21186] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.434063][T21186] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.434332][T21186] bridge_slave_1: entered allmulticast mode [ 631.437380][T21186] bridge_slave_1: entered promiscuous mode [ 631.450637][T15119] Bluetooth: hci4: command tx timeout [ 631.669149][T21186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.704128][T21186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.927220][T21186] team0: Port device team_slave_0 added [ 631.957699][T21186] team0: Port device team_slave_1 added [ 632.167509][T21186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.167529][T21186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.167556][T21186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.225441][T21186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.225460][T21186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.225491][T21186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.823028][T21186] hsr_slave_0: entered promiscuous mode [ 632.827845][T21186] hsr_slave_1: entered promiscuous mode [ 632.830291][T21186] debugfs: 'hsr0' already exists in 'hsr' [ 632.830317][T21186] Cannot create hsr debugfs directory [ 633.502654][T20940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.531184][T15119] Bluetooth: hci4: command tx timeout [ 633.736001][T20940] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.769485][T17171] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.769720][T17171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.898258][T17167] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.903591][T17167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.236347][T21186] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 634.329374][T21186] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 634.396507][T21186] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 634.494478][T21186] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 635.126433][T21186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.280170][T21186] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.399533][T17167] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.399728][T17167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.451112][T17171] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.451261][T17171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.635133][T20940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.274452][T21186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.429338][T20940] veth0_vlan: entered promiscuous mode [ 637.526048][T20940] veth1_vlan: entered promiscuous mode [ 637.807777][T20940] veth0_macvtap: entered promiscuous mode [ 637.830149][T20940] veth1_macvtap: entered promiscuous mode [ 637.865908][T20940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.901879][T20940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.922489][T17158] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.923377][T17167] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.923422][T17167] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.923462][T17167] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.631100][T17171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.631124][T17171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.637881][T21540] netlink: 'syz.2.6429': attribute type 1 has an invalid length. [ 638.846495][T21542] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 638.846523][T21542] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 638.850231][T21542] bond1: (slave ip6gre1): making interface the new active one [ 638.882145][T21542] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 638.974362][T17167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.974386][T17167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.157980][T21186] veth0_vlan: entered promiscuous mode [ 639.225186][T21186] veth1_vlan: entered promiscuous mode [ 639.272654][T21554] netlink: 'syz.5.6432': attribute type 11 has an invalid length. [ 639.272681][T21554] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6432'. [ 639.282576][T21554] netlink: 'syz.5.6432': attribute type 11 has an invalid length. [ 639.282598][T21554] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6432'. [ 639.296013][T21554] netlink: 'syz.5.6432': attribute type 11 has an invalid length. [ 639.296034][T21554] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6432'. [ 639.469560][T21186] veth0_macvtap: entered promiscuous mode [ 639.521535][T21186] veth1_macvtap: entered promiscuous mode [ 639.623254][T21186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.669953][T21186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.702850][T17171] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.734541][T17171] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.744672][T17171] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.767706][T17171] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.298920][T17171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.298944][T17171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.461098][T17099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.461123][T17099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.325215][T21617] befs: (nullb0): invalid magic header [ 643.917668][T21700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6496'. [ 644.651830][ T36] kernel write not supported for file [eventfd] (pid: 36 comm: kworker/1:1) [ 645.708019][T21733] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6511'. [ 645.780468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 646.551805][T21743] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6516'. [ 646.822920][T21753] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 646.864734][T21753] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 649.331650][T18542] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 649.513760][T18542] usb 6-1: Using ep0 maxpacket: 16 [ 649.516585][T18542] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.516629][T18542] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 649.516671][T18542] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 649.519210][T18542] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 649.519242][T18542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 649.519264][T18542] usb 6-1: SerialNumber: syz [ 649.587398][T18572] kernel read not supported for file /mISDNtimer (pid: 18572 comm: kworker/1:8) [ 649.609203][T18542] cdc_acm 6-1:1.0: invalid descriptor buffer length [ 649.609228][T18542] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 649.609242][T18542] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 649.609280][T18542] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 650.099390][T18542] usb 6-1: USB disconnect, device number 29 [ 651.870575][T18550] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 652.023409][T18550] usb 7-1: Using ep0 maxpacket: 8 [ 652.026137][T18550] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 652.026191][T18550] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 652.026217][T18550] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.069546][T18550] usb 7-1: config 0 descriptor?? [ 652.258283][ T37] audit: type=1326 audit(1771749984.806:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.7.6583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d38fec629 code=0x0 [ 652.305730][T18550] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 652.805427][T18550] usb 7-1: USB disconnect, device number 2 [ 658.347507][T22065] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6633'. [ 658.365764][T22065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6633'. [ 659.112462][T22089] input: syz0 as /devices/virtual/input/input45 [ 660.490680][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 662.544697][T22190] loop2: detected capacity change from 0 to 7 [ 662.551924][T22190] Dev loop2: unable to read RDB block 7 [ 662.551971][T22190] loop2: unable to read partition table [ 662.552186][T22190] loop2: partition table beyond EOD, truncated [ 662.552205][T22190] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 662.686731][T22196] kernel read not supported for file /net_prio.prioidx (pid: 22196 comm: syz.6.6678) [ 662.708240][ T37] audit: type=1800 audit(1771749995.236:355): pid=22196 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.6678" name="net_prio.prioidx" dev="mqueue" ino=73634 res=0 errno=0 [ 663.794826][T22235] netlink: 'syz.2.6692': attribute type 1 has an invalid length. [ 663.794852][T22235] netlink: 'syz.2.6692': attribute type 4 has an invalid length. [ 663.794867][T22235] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6692'. [ 664.156300][T22245] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6696'. [ 666.470607][T18554] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 666.501479][T22342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6731'. [ 666.620571][T18554] usb 6-1: Using ep0 maxpacket: 16 [ 666.637781][T18554] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 666.637815][T18554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.637835][T18554] usb 6-1: Product: syz [ 666.637850][T18554] usb 6-1: Manufacturer: syz [ 666.637864][T18554] usb 6-1: SerialNumber: syz [ 666.761379][T18554] usb 6-1: config 0 descriptor?? [ 666.798452][T18554] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 668.000538][T18554] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 668.036176][T18554] usb 6-1: USB disconnect, device number 30 [ 668.253196][T22378] input: syz1 as /devices/virtual/input/input46 [ 668.413283][T22028] udevd[22028]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 669.529726][T22411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 669.529747][T22411] IPv6: NLM_F_CREATE should be set when creating new route [ 670.254125][T22435] block nbd6: not configured, cannot reconfigure [ 670.492518][T22447] loop2: detected capacity change from 0 to 7 [ 670.518900][T22447] Dev loop2: unable to read RDB block 7 [ 670.518959][T22447] loop2: unable to read partition table [ 670.519220][T22447] loop2: partition table beyond EOD, truncated [ 670.519257][T22447] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 671.599964][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6781'. [ 671.695973][T22481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.829540][T22519] ip6gre2: entered promiscuous mode [ 672.829569][T22519] ip6gre2: entered allmulticast mode [ 672.863914][T17167] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 672.864332][T17167] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 672.866693][T22519] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 672.890969][T18554] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 673.300712][T18554] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 673.610711][T18550] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 674.150518][T18550] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 674.323723][T18550] usb 7-1: config 0 has an invalid interface number: 87 but max is 0 [ 674.323754][T18550] usb 7-1: config 0 has no interface number 0 [ 674.323789][T18550] usb 7-1: config 0 interface 87 has no altsetting 0 [ 674.329807][T18550] usb 7-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=7d.82 [ 674.329840][T18550] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.329863][T18550] usb 7-1: Product: syz [ 674.329877][T18550] usb 7-1: Manufacturer: syz [ 674.329891][T18550] usb 7-1: SerialNumber: syz [ 674.368449][T18550] usb 7-1: config 0 descriptor?? [ 674.635339][T18554] usb 7-1: USB disconnect, device number 3 [ 675.327011][T22587] syz.7.6820 (22587) used greatest stack depth: 17568 bytes left [ 677.210662][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 678.618504][T22689] input: syz1 as /devices/virtual/input/input47 [ 680.067054][T22738] netlink: 'syz.5.6884': attribute type 1 has an invalid length. [ 680.209884][T22738] 8021q: adding VLAN 0 to HW filter on device bond2 [ 680.228948][T22744] bond2: (slave geneve2): making interface the new active one [ 680.241740][T22744] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 680.286744][T17171] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.305864][T17171] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.305922][T17171] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.305963][T17171] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.225826][T22809] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6914'. [ 682.225858][T22809] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6914'. [ 682.676043][T22828] loop7: detected capacity change from 0 to 16384 [ 682.930731][T22832] loop7: detected capacity change from 16384 to 16383 [ 683.080983][T18554] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 683.243296][T18554] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 683.243336][T18554] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 683.280938][T18554] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 683.280973][T18554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.280995][T18554] usb 6-1: Product: syz [ 683.281009][T18554] usb 6-1: Manufacturer: syz [ 683.281025][T18554] usb 6-1: SerialNumber: syz [ 683.343798][T18554] usb 6-1: config 0 descriptor?? [ 683.361297][T22835] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 683.361440][T22835] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 683.489190][T22846] kvm: vcpu 33: requested lapic timer restore with starting count register 0x390=4192136817 (67074189072 ns) > initial count (6505914512 ns). Using initial count to start timer. [ 683.607105][T22835] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 683.607311][T22835] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 684.022438][T18554] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 684.712968][T18554] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 684.757259][T18554] dm9601 6-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 5a:e9:04:2f:85:81 [ 684.774290][T18554] usb 6-1: USB disconnect, device number 31 [ 684.778553][T18554] dm9601 6-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 685.210981][T17147] wlan1: Trigger new scan to find an IBSS to join [ 686.099646][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 686.103509][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.103588][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.255875][T22952] fuse: Bad value for 'fd' [ 688.179725][T17177] wlan1: Trigger new scan to find an IBSS to join [ 688.257611][T22976] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 689.548173][T23013] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 690.462369][T23046] fuse: Bad value for 'fd' [ 691.040425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 691.212675][T17099] wlan1: Trigger new scan to find an IBSS to join [ 691.780418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 691.781124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 692.267492][T17147] wlan1: Creating new IBSS network, BSSID 32:ed:94:97:f2:f1 [ 692.851426][T23100] IPv4: Oversized IP packet from 172.20.20.10 [ 692.910108][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 694.164471][T23133] netlink: 'syz.5.7055': attribute type 6 has an invalid length. [ 695.250491][T18554] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 695.400637][T18554] usb 7-1: Using ep0 maxpacket: 8 [ 695.403884][T18554] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 695.403947][T18554] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 695.403971][T18554] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 695.403999][T18554] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 695.404024][T18554] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 695.404070][T18554] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 695.404096][T18554] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.703945][T18554] usb 7-1: GET_CAPABILITIES returned 0 [ 695.704003][T18554] usbtmc 7-1:16.0: can't read capabilities [ 696.339012][T18542] usb 7-1: USB disconnect, device number 4 [ 696.351469][T23153] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 696.521752][T23169] syz.2.7073 (23169) used greatest stack depth: 16712 bytes left [ 699.140131][T23253] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.7108'. [ 700.770728][T23313] netlink: 'syz.7.7136': attribute type 4 has an invalid length. [ 700.845588][T23313] netlink: 'syz.7.7136': attribute type 4 has an invalid length. [ 702.558413][T23360] loop2: detected capacity change from 0 to 7 [ 702.564639][T23360] Dev loop2: unable to read RDB block 7 [ 702.564684][T23360] loop2: unable to read partition table [ 702.565026][T23360] loop2: partition table beyond EOD, truncated [ 702.566069][T23360] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 702.730633][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 703.879380][T23390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7168'. [ 703.881363][T23390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7168'. [ 703.924082][T23387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7169'. [ 705.230679][T18550] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 705.383313][T18550] usb 6-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 705.383348][T18550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.422985][T18550] usb 6-1: config 0 descriptor?? [ 705.438999][T18550] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 705.661968][T18550] gspca_sn9c2028: read1 error -71 [ 705.662427][T18550] gspca_sn9c2028: read1 error -71 [ 705.662984][T18550] gspca_sn9c2028: read1 error -71 [ 705.663080][T18550] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 705.666547][T18550] usb 6-1: USB disconnect, device number 32 [ 705.731942][T23435] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 707.302658][T23473] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 707.302695][T23473] overlayfs: failed to set xattr on upper [ 707.302705][T23473] overlayfs: ...falling back to redirect_dir=nofollow. [ 707.303946][T23473] overlayfs: ...falling back to index=off. [ 707.303957][T23473] overlayfs: ...falling back to uuid=null. [ 707.304278][T23473] overlayfs: conflicting lowerdir path [ 708.782481][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7230'. [ 708.782861][T23519] syz_tun: refused to change device tx_queue_len [ 708.784937][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7230'. [ 708.785257][T23519] syz_tun: refused to change device tx_queue_len [ 708.883001][T23524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7232'. [ 708.883041][T23524] netlink: 'syz.2.7232': attribute type 7 has an invalid length. [ 708.883056][T23524] netlink: 'syz.2.7232': attribute type 8 has an invalid length. [ 708.883070][T23524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7232'. [ 709.317346][T23546] netlink: 'syz.2.7242': attribute type 1 has an invalid length. [ 709.401619][T18554] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 709.421711][T23546] bond2: entered promiscuous mode [ 709.421744][T23546] bond2: entered allmulticast mode [ 709.422310][T23546] 8021q: adding VLAN 0 to HW filter on device bond2 [ 709.480395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 709.480523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 709.569544][T18554] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 709.569580][T18554] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.569602][T18554] usb 6-1: Product: syz [ 709.569617][T18554] usb 6-1: Manufacturer: syz [ 709.569634][T18554] usb 6-1: SerialNumber: syz [ 709.725870][T18554] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 709.846181][T18550] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 709.888736][T23551] erspan1: entered allmulticast mode [ 709.946407][T23551] bond2: (slave erspan1): making interface the new active one [ 709.946427][T23551] erspan1: entered promiscuous mode [ 710.026618][T23551] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 710.185754][T18542] usb 6-1: USB disconnect, device number 33 [ 710.971986][T18550] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 710.972218][T18550] ath9k_htc: Failed to initialize the device [ 710.997016][T18542] usb 6-1: ath9k_htc: USB layer deinitialized [ 711.037735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 716.866922][T23734] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 717.729060][T23777] sctp: [Deprecated]: syz.5.7347 (pid 23777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 717.729060][T23777] Use struct sctp_sack_info instead [ 717.834628][ T37] audit: type=1326 audit(1771750050.376:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23772 comm="syz.7.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d38fec629 code=0x7fc00000 [ 717.839374][ T37] audit: type=1326 audit(1771750050.386:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23772 comm="syz.7.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5d38fec629 code=0x7fc00000 [ 717.842221][ T37] audit: type=1326 audit(1771750050.396:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23772 comm="syz.7.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d38fec629 code=0x7fc00000 [ 717.842470][ T37] audit: type=1326 audit(1771750050.396:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23772 comm="syz.7.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d38fec629 code=0x7fc00000 [ 717.842747][ T37] audit: type=1326 audit(1771750050.396:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23772 comm="syz.7.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d38fec629 code=0x7fc00000 [ 717.842978][ T37] audit: type=1326 audit(1771750050.396:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23772 comm="syz.7.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d38fec629 code=0x7fc00000 [ 717.843218][ T37] audit: type=1326 audit(1771750050.396:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23772 comm="syz.7.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d38fec629 code=0x7fc00000 [ 717.843449][ T37] audit: type=1326 audit(1771750050.396:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23772 comm="syz.7.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d38fec629 code=0x7fc00000 [ 717.844714][ T37] audit: type=1326 audit(1771750050.396:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23772 comm="syz.7.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d38fec629 code=0x7fc00000 [ 717.862803][ T37] audit: type=1326 audit(1771750050.396:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23772 comm="syz.7.7345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d38fec629 code=0x7fc00000 [ 717.904566][T23782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7348'. [ 717.967191][T17145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.968799][T17145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.968890][T17145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.968927][T17145] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.969156][T23782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7348'. [ 718.312549][T18578] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 718.473419][T18578] usb 6-1: Using ep0 maxpacket: 8 [ 718.477592][T18578] usb 6-1: config 0 has no interfaces? [ 718.477630][T18578] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 718.477652][T18578] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.498446][T18578] usb 6-1: config 0 descriptor?? [ 718.966709][T23785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.967330][T23785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.984670][T18578] usb 6-1: USB disconnect, device number 34 [ 719.805536][T23846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7373'. [ 720.462308][T23859] fuse: Bad value for 'fd' [ 721.251195][T18550] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 721.413193][T18550] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 721.413233][T18550] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 721.413263][T18550] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 721.413288][T18550] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 721.413337][T18550] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 721.413363][T18550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.475260][T23888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7392'. [ 721.506504][T18550] usb 6-1: config 0 descriptor?? [ 721.538311][T23888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7392'. [ 721.973382][T18550] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 722.364545][T17175] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 722.594191][T18550] usb 6-1: USB disconnect, device number 35 [ 723.800854][T23945] Bluetooth: hci0: unsupported parameter 255 [ 723.800881][T23945] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 724.001833][T23954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7421'. [ 724.188747][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7417'. [ 724.188775][T23943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7417'. [ 724.189080][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7417'. [ 724.189099][T23943] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7417'. [ 724.280598][T18550] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 724.466314][T18550] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 724.466347][T18550] usb 6-1: config 0 has no interface number 0 [ 724.466397][T18550] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 724.466426][T18550] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 724.466453][T18550] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 724.466482][T18550] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 724.469270][T18550] usb 6-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 724.469295][T18550] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 724.469308][T18550] usb 6-1: Product: syz [ 724.469317][T18550] usb 6-1: Manufacturer: syz [ 724.469325][T18550] usb 6-1: SerialNumber: syz [ 724.574822][T18550] usb 6-1: config 0 descriptor?? [ 724.591739][T18550] xpad 6-1:0.237: probe with driver xpad failed with error -5 [ 724.844177][T18550] usb 6-1: USB disconnect, device number 36 [ 724.948116][T23986] netlink: 27 bytes leftover after parsing attributes in process `syz.6.7437'. [ 726.083346][T24030] netlink: 332 bytes leftover after parsing attributes in process `syz.2.7457'. [ 726.083414][T24030] netlink: 'syz.2.7457': attribute type 9 has an invalid length. [ 726.083429][T24030] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7457'. [ 726.083445][T24030] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7457'. [ 728.595055][T24111] netlink: 'syz.7.7479': attribute type 1 has an invalid length. [ 728.606589][T24112] netlink: 'syz.5.7480': attribute type 1 has an invalid length. [ 728.761503][T24111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.889248][T24114] gretap1: entered allmulticast mode [ 728.925250][T24114] bond3: (slave gretap1): making interface the new active one [ 728.963081][T24114] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 732.883089][T24219] netlink: 'syz.6.7512': attribute type 10 has an invalid length. [ 732.977335][T24221] netlink: 'syz.6.7512': attribute type 10 has an invalid length. [ 732.991323][T24219] team0: Port device dummy0 added [ 732.992725][T24221] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 733.127740][T24226] netlink: 'syz.2.7516': attribute type 83 has an invalid length. [ 733.202923][T24221] team0: Failed to send options change via netlink (err -105) [ 733.203203][T24221] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 733.203885][T24221] team0: Port device dummy0 removed [ 733.404062][T24221] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 734.315939][T24252] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7528'. [ 735.826487][T24279] macvtap1: entered promiscuous mode [ 735.826512][T24279] syz_tun: entered promiscuous mode [ 736.310396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 736.632034][T24279] syz_tun: left promiscuous mode [ 737.766547][ T37] audit: type=1326 audit(1771750070.306:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24297 comm="syz.6.7546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a9ecfc629 code=0x0 [ 737.930631][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 738.636899][T24319] fuse: Bad value for 'fd' [ 739.254840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 739.320887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 739.370482][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 739.380689][ T5934] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 739.550548][ T5934] usb 7-1: Using ep0 maxpacket: 32 [ 739.553004][ T5934] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 739.553052][ T5934] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 739.553078][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.605013][ T5934] usb 7-1: config 0 descriptor?? [ 739.852042][ T36] usb 7-1: USB disconnect, device number 5 [ 740.057946][T24355] netlink: 'syz.5.7571': attribute type 1 has an invalid length. [ 740.194268][T24361] bond4: (slave geneve3): making interface the new active one [ 740.194993][T24361] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 740.213726][T17165] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 740.213785][T17165] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 740.213841][T17165] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 740.213882][T17165] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 740.591085][T24369] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 741.200661][T24390] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7588'. [ 741.200703][T24390] netlink: 'syz.6.7588': attribute type 7 has an invalid length. [ 741.200718][T24390] netlink: 'syz.6.7588': attribute type 8 has an invalid length. [ 741.200731][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7588'. [ 742.041101][T18542] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 742.212620][T18542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.212665][T18542] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.212701][T18542] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 742.212724][T18542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.273692][T18542] usb 6-1: config 0 descriptor?? [ 742.337126][T24429] fuse: Bad value for 'fd' [ 742.715130][T18542] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 742.744802][T18542] cp2112 0003:10C4:EA90.004A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 742.886162][T24441] MTD: Couldn't look up './file0': -15 [ 742.886239][T24441] ./file0: Can't lookup blockdev [ 742.902241][T18542] cp2112 0003:10C4:EA90.004A: Part Number: 0x82 Device Version: 0xFE [ 743.514489][T18542] cp2112 0003:10C4:EA90.004A: error reading lock byte: -71 [ 743.587767][T18542] usb 6-1: USB disconnect, device number 37 [ 745.478618][T24488] fuse: Bad value for 'fd' [ 746.151718][T18572] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 746.310892][T18572] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.310932][T18572] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.310958][T18572] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 746.311098][T18572] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 746.311124][T18572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.359800][T18572] usb 6-1: config 0 descriptor?? [ 746.871870][T18572] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 747.555072][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.555148][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.709418][T18550] usb 6-1: USB disconnect, device number 38 [ 749.610589][ T5808] Bluetooth: hci4: command 0x0406 tx timeout [ 750.411615][T18572] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 750.562076][T18572] usb 7-1: Using ep0 maxpacket: 8 [ 750.568123][T18572] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 750.568162][T18572] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 750.568191][T18572] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 750.568217][T18572] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 750.568274][T18572] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 750.568302][T18572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.838563][T18572] usb 7-1: GET_CAPABILITIES returned 0 [ 750.838630][T18572] usbtmc 7-1:16.0: can't read capabilities [ 750.877169][T15119] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 751.108923][ T36] usb 7-1: USB disconnect, device number 6 [ 751.690607][T15119] Bluetooth: hci5: command 0x0406 tx timeout [ 751.997417][ T5808] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 753.585796][T17177] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 754.461337][T18572] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 754.611316][T18572] usb 7-1: Using ep0 maxpacket: 32 [ 754.617955][T18572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.617987][T18572] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.618013][T18572] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 754.618029][T18572] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.626068][T18572] usb 7-1: config 0 descriptor?? [ 754.692420][T18572] hub 7-1:0.0: USB hub found [ 754.896239][T18572] hub 7-1:0.0: 1 port detected [ 755.450873][T24772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7759'. [ 755.521186][ T36] hub 7-1:0.0: activate --> -90 [ 755.943473][T18572] usb 7-1: USB disconnect, device number 7 [ 757.073493][T24812] fuse: Bad value for 'fd' [ 757.364188][T24816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.411665][T24816] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.479504][T24816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 758.190277][T17153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.872526][T24874] netlink: 'syz.2.7806': attribute type 27 has an invalid length. [ 759.026539][T24881] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7810'. [ 759.333177][T17143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.434577][T17145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.620852][T17143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.414200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.721986][T17143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.846128][T17143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.665881][T25031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 764.694591][T25033] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 764.859307][T25042] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7878'. [ 764.952708][T17158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.591277][T25074] netlink: 'syz.5.7889': attribute type 83 has an invalid length. [ 765.780616][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 766.051422][T17158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.215223][T25098] input: syz1 as /devices/virtual/input/input49 [ 766.910692][T25113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7908'. [ 767.170698][T17177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.412227][T25123] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 767.783084][T25139] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 767.783117][T25139] overlayfs: failed to set xattr on upper [ 767.783126][T25139] overlayfs: ...falling back to redirect_dir=nofollow. [ 767.783135][T25139] overlayfs: ...falling back to index=off. [ 767.783144][T25139] overlayfs: ...falling back to uuid=null. [ 767.783186][T25139] overlayfs: conflicting lowerdir path [ 768.270626][T17153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.290631][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 769.299246][T15119] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 769.375226][T17145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.473296][T25189] overlayfs: failed to clone lowerpath [ 769.545486][T25193] overlayfs: failed to clone lowerpath [ 770.045849][T25207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.046136][T25207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.046635][T25207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.474473][T17143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.973555][T25230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.014454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.039878][T25230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.067447][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.370531][T15119] Bluetooth: hci0: command 0x0406 tx timeout [ 771.580250][T25251] overlayfs: failed to clone upperpath [ 771.740976][T18548] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 771.894663][T18548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.894700][T18548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.894723][T18548] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 771.894771][T18548] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.894795][T18548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.983248][T18548] usb 6-1: config 0 descriptor?? [ 772.155829][T25261] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 772.513420][T18548] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 773.830745][T17161] net_ratelimit: 18 callbacks suppressed [ 773.830769][T17161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.998990][T25312] IPv6: NLM_F_CREATE should be specified when creating new route [ 773.999779][T25312] IPv6: NLM_F_REPLACE set, but no existing node found! [ 774.772875][T25328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.773133][T25328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.773484][T25328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.778593][T25328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.778942][T25328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.779253][T25328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.790846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.856831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.856980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.217268][T18572] usb 6-1: USB disconnect, device number 39 [ 777.094984][T25376] fuse: Bad value for 'fd' [ 777.342136][T15119] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 777.572051][T25390] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8028'. [ 778.981346][T25436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.999164][T25436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.133846][T25444] overlayfs: failed to clone upperpath [ 779.411650][T17145] net_ratelimit: 296 callbacks suppressed [ 779.411673][T17145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.450704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.467456][T25454] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8056'. [ 779.708720][T25458] binder_alloc: 25457: binder_alloc_buf, no vma [ 780.541171][T17143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.653210][T17143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.789960][T25497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.790289][T25497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.791868][T25497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.813283][T25497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.813941][T25497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.404141][T25516] syz_tun: entered promiscuous mode [ 782.404299][T25516] vlan2: entered promiscuous mode [ 782.771470][T17145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.897139][T25528] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8090'. [ 783.406389][T25534] syz.5.8092 (25534) used greatest stack depth: 15784 bytes left [ 785.600521][T25581] vivid-000: disconnect [ 785.693382][T17143] net_ratelimit: 9 callbacks suppressed [ 785.693406][T17143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.346327][T25577] vivid-000: reconnect [ 786.567989][T25595] fuse: Bad value for 'fd' [ 786.831414][T17158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.253323][T25622] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8131'. [ 787.535365][T25633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.536593][T25633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.537404][T25633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.538264][T25633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.539025][T25633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.558755][T25632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.940910][T17143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.061485][T17177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.767880][ T37] audit: type=1326 audit(1771750122.316:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25676 comm="syz.5.8155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37ab8cc629 code=0x0 [ 789.890299][T25682] fuse: Bad value for 'fd' [ 792.344132][T17171] net_ratelimit: 2 callbacks suppressed [ 792.344154][T17171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.452941][T17145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.790491][T18548] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 793.940447][T18548] usb 6-1: Using ep0 maxpacket: 32 [ 793.943274][T18548] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 793.943305][T18548] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 793.943328][T18548] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 793.943382][T18548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 793.943407][T18548] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 793.943434][T18548] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 793.943481][T18548] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 793.943508][T18548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.042091][T18548] usb 6-1: config 0 descriptor?? [ 794.309985][T18548] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 794.370670][T18548] usb 6-1: USB disconnect, device number 40 [ 794.377989][T18548] usblp0: removed [ 794.562287][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.840716][T18548] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 794.990471][T18548] usb 6-1: Using ep0 maxpacket: 32 [ 794.994109][T18548] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 794.994139][T18548] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 794.994162][T18548] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 794.994217][T18548] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 794.994242][T18548] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 794.994269][T18548] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 794.994325][T18548] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 794.994352][T18548] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.095122][T18548] usb 6-1: config 0 descriptor?? [ 795.327040][T18548] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 795.670921][T17171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.795756][T18554] usb 6-1: USB disconnect, device number 41 [ 795.823033][T18554] usblp0: removed [ 796.582276][T25837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.582565][T25837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.582901][T25837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.587868][T25837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.588190][T25837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.588728][T25837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.167485][T25847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8228'. [ 797.167514][T25847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8228'. [ 797.263180][T25851] fuse: Bad value for 'fd' [ 798.092744][T17143] net_ratelimit: 24 callbacks suppressed [ 798.092766][T17143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.731144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.834760][T15119] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 799.208696][T25922] fuse: Bad value for 'fd' [ 799.211985][T17165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.268674][T25947] fuse: Bad value for 'fd' [ 800.363439][T17177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.592736][T25957] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8277'. [ 801.462548][T17177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.612493][T17177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.891435][T15119] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 802.895108][T15119] Bluetooth: hci4: Injecting HCI hardware error event [ 802.898388][T15119] Bluetooth: hci4: hardware error 0x00 [ 803.723941][T17145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.770686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.842944][T17165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.461423][T15119] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 805.616741][T26055] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8321'. [ 805.952985][T17161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.571376][T26079] overlayfs: failed to clone upperpath [ 806.780038][T26087] overlayfs: failed to clone upperpath [ 806.862868][T26089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8334'. [ 807.051984][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.178184][T17177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.957773][T26146] netlink: 'syz.5.8361': attribute type 4 has an invalid length. [ 808.977492][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.977561][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.086577][T26146] netlink: 'syz.5.8361': attribute type 17 has an invalid length. [ 809.370843][T26151] Invalid ELF header magic: != ELF [ 809.684931][T26162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8367'. [ 810.392589][T26175] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 812.890908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.891223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.891585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.891866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.703825][T26235] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8399'. [ 813.816721][T26238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8399'. [ 814.090623][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 814.653903][T26256] io-wq is not configured for unbound workers [ 814.720573][ T5934] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 814.893731][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 814.900895][ T5934] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 814.900929][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 814.911444][ T5934] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 814.911478][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.911501][ T5934] usb 7-1: Product: syz [ 814.911517][ T5934] usb 7-1: Manufacturer: syz [ 814.911532][ T5934] usb 7-1: SerialNumber: syz [ 814.986850][ T5934] usb 7-1: config 0 descriptor?? [ 815.008510][ T5934] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 815.008551][ T5934] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 815.665984][ T5934] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 815.666724][ T5934] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 816.499071][ T5934] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 816.499595][ T5934] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 816.500043][ T5934] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 816.522963][ T5934] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 816.523611][ T5934] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 816.524062][ T5934] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 816.555824][ T5934] usb 7-1: USB disconnect, device number 8 [ 816.970659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.970984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.971281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.469093][T26296] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8424'. [ 819.256297][T26338] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8440'. [ 820.330964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.331290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.331555][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.854071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.854409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.854693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.314859][T26448] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8491'. [ 825.573511][T26488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8505'. [ 828.010841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.011152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.011458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.518302][T26554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8531'. [ 830.886135][T26570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8537'. [ 832.473873][T26611] netlink: 'syz.7.8555': attribute type 4 has an invalid length. [ 832.525588][T26615] netlink: 'syz.7.8555': attribute type 4 has an invalid length. [ 832.970699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.971018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.971311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.971593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.971878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.376727][T26612] [ 833.376742][T26612] ====================================================== [ 833.376753][T26612] WARNING: possible circular locking dependency detected [ 833.376768][T26612] syzkaller #0 Tainted: G L [ 833.376782][T26612] ------------------------------------------------------ [ 833.376791][T26612] syz.6.8553/26612 is trying to acquire lock: [ 833.376805][T26612] ffffffff8decac98 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x202/0x1950 [ 833.376942][T26612] [ 833.376942][T26612] but task is already holding lock: [ 833.376950][T26612] ffff8880267ddb38 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: nbd_start_device+0x17f/0xb20 [ 833.377091][T26612] [ 833.377091][T26612] which lock already depends on the new lock. [ 833.377091][T26612] [ 833.377100][T26612] [ 833.377100][T26612] the existing dependency chain (in reverse order) is: [ 833.377109][T26612] [ 833.377109][T26612] -> #2 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 833.377146][T26612] blk_alloc_queue+0x54e/0x690 [ 833.377219][T26612] __blk_mq_alloc_disk+0x197/0x390 [ 833.377258][T26612] nbd_dev_add+0x499/0xb50 [ 833.377284][T26612] nbd_init+0x168/0x1f0 [ 833.377377][T26612] do_one_initcall+0x250/0x8d0 [ 833.377411][T26612] do_initcall_level+0x104/0x190 [ 833.377449][T26612] do_initcalls+0x59/0xa0 [ 833.377468][T26612] kernel_init_freeable+0x2a6/0x3e0 [ 833.377489][T26612] kernel_init+0x1d/0x1d0 [ 833.377507][T26612] ret_from_fork+0x51e/0xb90 [ 833.377536][T26612] ret_from_fork_asm+0x1a/0x30 [ 833.377554][T26612] [ 833.377554][T26612] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 833.377584][T26612] fs_reclaim_acquire+0x71/0x100 [ 833.377647][T26612] prepare_alloc_pages+0x152/0x6b0 [ 833.377678][T26612] __alloc_frozen_pages_noprof+0x12f/0x380 [ 833.377698][T26612] __alloc_pages_noprof+0xa/0x30 [ 833.377717][T26612] pcpu_populate_chunk+0x182/0xb30 [ 833.377738][T26612] pcpu_alloc_noprof+0xc0f/0x1950 [ 833.377757][T26612] bpf_map_alloc_percpu+0x72/0x1f0 [ 833.377785][T26612] prealloc_init+0x217/0x640 [ 833.377816][T26612] htab_map_alloc+0x69e/0xc90 [ 833.377840][T26612] map_create+0xafd/0x16b0 [ 833.377863][T26612] __sys_bpf+0x6e1/0x950 [ 833.377885][T26612] __x64_sys_bpf+0x7c/0x90 [ 833.377903][T26612] do_syscall_64+0x14d/0xf80 [ 833.377930][T26612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.377951][T26612] [ 833.377951][T26612] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 833.377981][T26612] __lock_acquire+0x15a5/0x2cf0 [ 833.377999][T26612] lock_acquire+0xf0/0x2e0 [ 833.378029][T26612] _mutex_lock_killable+0x63/0x1d0 [ 833.378048][T26612] pcpu_alloc_noprof+0x202/0x1950 [ 833.378067][T26612] sbitmap_init_node+0x1e1/0x640 [ 833.378131][T26612] sbitmap_queue_init_node+0x3e/0x4d0 [ 833.378154][T26612] blk_mq_init_tags+0x164/0x2d0 [ 833.378175][T26612] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 833.378226][T26612] blk_mq_update_nr_hw_queues+0xa88/0x1b10 [ 833.378249][T26612] nbd_start_device+0x17f/0xb20 [ 833.378274][T26612] nbd_ioctl+0x57b/0xe40 [ 833.378299][T26612] blkdev_ioctl+0x5e6/0x750 [ 833.378338][T26612] __se_sys_ioctl+0xff/0x170 [ 833.378409][T26612] do_syscall_64+0x14d/0xf80 [ 833.378434][T26612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.378456][T26612] [ 833.378456][T26612] other info that might help us debug this: [ 833.378456][T26612] [ 833.378464][T26612] Chain exists of: [ 833.378464][T26612] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 833.378464][T26612] [ 833.378508][T26612] Possible unsafe locking scenario: [ 833.378508][T26612] [ 833.378516][T26612] CPU0 CPU1 [ 833.378523][T26612] ---- ---- [ 833.378530][T26612] lock(&q->q_usage_counter(io)#55); [ 833.378552][T26612] lock(fs_reclaim); [ 833.378569][T26612] lock(&q->q_usage_counter(io)#55); [ 833.378592][T26612] lock(pcpu_alloc_mutex); [ 833.378607][T26612] [ 833.378607][T26612] *** DEADLOCK *** [ 833.378607][T26612] [ 833.378613][T26612] 4 locks held by syz.6.8553/26612: [ 833.378627][T26612] #0: ffff8880267f69b0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbf/0x1b10 [ 833.378691][T26612] #1: ffff8880267f68c8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xd2/0x1b10 [ 833.378742][T26612] #2: ffff8880267ddb38 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: nbd_start_device+0x17f/0xb20 [ 833.378801][T26612] #3: ffff8880267ddb70 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb20 [ 833.378863][T26612] [ 833.378863][T26612] stack backtrace: [ 833.378878][T26612] CPU: 1 UID: 0 PID: 26612 Comm: syz.6.8553 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 833.378909][T26612] Tainted: [L]=SOFTLOCKUP [ 833.378917][T26612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 833.378930][T26612] Call Trace: [ 833.378937][T26612] [ 833.378946][T26612] dump_stack_lvl+0xe8/0x150 [ 833.378980][T26612] print_circular_bug+0x2e1/0x300 [ 833.379009][T26612] check_noncircular+0x12e/0x150 [ 833.379039][T26612] __lock_acquire+0x15a5/0x2cf0 [ 833.379062][T26612] ? ___free_pages+0xb2/0x220 [ 833.379091][T26612] ? __kasan_kmalloc+0x93/0xb0 [ 833.379154][T26612] lock_acquire+0xf0/0x2e0 [ 833.379187][T26612] ? pcpu_alloc_noprof+0x202/0x1950 [ 833.379210][T26612] ? pcpu_alloc_noprof+0x202/0x1950 [ 833.379234][T26612] ? pcpu_alloc_noprof+0x202/0x1950 [ 833.379254][T26612] _mutex_lock_killable+0x63/0x1d0 [ 833.379275][T26612] ? pcpu_alloc_noprof+0x202/0x1950 [ 833.379296][T26612] ? pcpu_alloc_noprof+0x202/0x1950 [ 833.379320][T26612] pcpu_alloc_noprof+0x202/0x1950 [ 833.379352][T26612] sbitmap_init_node+0x1e1/0x640 [ 833.379382][T26612] sbitmap_queue_init_node+0x3e/0x4d0 [ 833.379411][T26612] blk_mq_init_tags+0x164/0x2d0 [ 833.379441][T26612] blk_mq_alloc_map_and_rqs+0xbb/0x9c0 [ 833.379480][T26612] ? kfree+0x1c1/0x6c0 [ 833.379543][T26612] ? blk_mq_update_nr_hw_queues+0x997/0x1b10 [ 833.379570][T26612] blk_mq_update_nr_hw_queues+0xa88/0x1b10 [ 833.379594][T26612] ? rt_mutex_slowlock_block+0x56c/0x680 [ 833.379624][T26612] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 833.379665][T26612] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 833.379691][T26612] ? nbd_start_device+0x174/0xb20 [ 833.379722][T26612] nbd_start_device+0x17f/0xb20 [ 833.379756][T26612] nbd_ioctl+0x57b/0xe40 [ 833.379787][T26612] ? __pfx_nbd_ioctl+0x10/0x10 [ 833.379815][T26612] ? __asan_memset+0x22/0x50 [ 833.379860][T26612] ? smack_file_ioctl+0x263/0x360 [ 833.379928][T26612] ? __pfx_smack_file_ioctl+0x10/0x10 [ 833.379956][T26612] ? __pfx_nbd_ioctl+0x10/0x10 [ 833.379986][T26612] blkdev_ioctl+0x5e6/0x750 [ 833.380009][T26612] ? __pfx_blkdev_ioctl+0x10/0x10 [ 833.380030][T26612] ? __fget_files+0x2a/0x420 [ 833.380095][T26612] ? bpf_lsm_file_ioctl+0x9/0x20 [ 833.380165][T26612] ? __pfx_blkdev_ioctl+0x10/0x10 [ 833.380185][T26612] __se_sys_ioctl+0xff/0x170 [ 833.380216][T26612] do_syscall_64+0x14d/0xf80 [ 833.380245][T26612] ? trace_irq_disable+0x3b/0x150 [ 833.380270][T26612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.380292][T26612] ? clear_bhb_loop+0x40/0x90 [ 833.380315][T26612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.380337][T26612] RIP: 0033:0x7f0a9ecfc629 [ 833.380359][T26612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.380379][T26612] RSP: 002b:00007f0a9cf2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.380404][T26612] RAX: ffffffffffffffda RBX: 00007f0a9ef76090 RCX: 00007f0a9ecfc629 [ 833.380421][T26612] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 833.380435][T26612] RBP: 00007f0a9ed92b39 R08: 0000000000000000 R09: 0000000000000000 [ 833.380449][T26612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.380463][T26612] R13: 00007f0a9ef76128 R14: 00007f0a9ef76090 R15: 00007ffe8f8d41f8 [ 833.380489][T26612] [ 833.463749][T15119] block nbd6: Receive control failed (result -32) [ 833.466544][T15119] block nbd6: Receive control failed (result -32) [ 833.894102][T26612] block nbd6: shutting down sockets [ 836.330537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.330667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.330782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.610685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.610887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.611019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.970529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.970655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.970744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog