last executing test programs: 8m17.094293771s ago: executing program 0 (id=1640): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766c616e310000000000000000000000bfdb60c594546c18e604a6739d4acce8854f579770a4d89d81c4645cdde5b7bedcb85a7a629182bb31cbe7ac1adbd92f3a1eadf5a9702a96f7c41212f64802f41ce190e624cd68c53f7292307f0d8e3d98f880fdfaa8df92d67030c7ff61d0262ae765c2386918945330eec547780e69481f55086dc3ef703b43ad9a7e60e74e3c138558f7b93d2f7569c0906ce495ce256879d8ccaaf37acc62e4f94c2dae9b"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bond\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2, @ANYBLOB="a4a201f4939c383fd44e41d0aa4e999c5222be733acfb118ad2f306db817800869ea65c94b3292f6f55c6842073e50afc9100c8be1060fc7ffc73ab6a6af09acaaf16b0b5e20699ee46a57f0a0fe5b839373f041d6acd83b033d9c9bef50a57480f0cbe07601c956a89a651bec77bb19b239935167b45d2066ac2477a45ba793e13a88d8a0b8d170d026ad8ecf8ddc23a2254d323204d8a39bfec95c6abfd5d5450931e62eb1b7134c7e109c"], 0x40}}, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000500)='status\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x29, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) dup2(r6, r6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) open$dir(0x0, 0x0, 0x1) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="ad4300000000000020c015"], 0x14}, 0x1, 0x0, 0x0, 0x1004}, 0x2) 8m16.80069437s ago: executing program 0 (id=1650): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x100000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000007f000000f00e00008000000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000001400000000000000000000000028410ac44541638434bd23674dcddccfeed3f36d2d0b0fcc6b8cd1c080146bab4da1ca54", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000000000000000"], 0x50) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket(0x2, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x2711}, 0x10) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0xc, 0x0, 0xffffffffffffffff, 0x0, r9, 0x1, 0x0, 0x2}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x0, 0x2, {{0xc, 0x4, 0x1, 0x20, 0x30, 0x66, 0x0, 0x3, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x18, 0x97, 0x0, 0xf, [0x1, 0x6, 0xab, 0x6, 0x0]}, @rr={0x7, 0x3, 0xd9}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x24, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0xb, 0x6, 0x9, 0xffffffffffffffe0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @alu={0x7, 0x1, 0x0, 0xb, 0x9, 0x6, 0x1}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x24, &(0x7f0000000300)=""/36, 0x41100, 0x63, '\x00', r12, 0x25, r7, 0x8, &(0x7f00000006c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x3, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x1, r7, r0], &(0x7f0000000cc0)=[{0x3, 0x5, 0x8, 0x1}], 0x10, 0x5}, 0x94) 8m15.707395899s ago: executing program 0 (id=1654): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x100000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000007f000000f00e00008000000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000001400000000000000000000000028410ac44541638434bd23674dcddccfeed3f36d2d0b0fcc6b8cd1c080146bab4da1ca54", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000000000000000"], 0x50) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket(0x2, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x2711}, 0x10) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0xc, 0x0, 0xffffffffffffffff, 0x0, r9, 0x1, 0x0, 0x2}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x0, 0x2, {{0xc, 0x4, 0x1, 0x20, 0x30, 0x66, 0x0, 0x3, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x18, 0x97, 0x0, 0xf, [0x1, 0x6, 0xab, 0x6, 0x0]}, @rr={0x7, 0x3, 0xd9}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x24, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0xb, 0x6, 0x9, 0xffffffffffffffe0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @alu={0x7, 0x1, 0x0, 0xb, 0x9, 0x6, 0x1}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x24, &(0x7f0000000300)=""/36, 0x41100, 0x63, '\x00', r12, 0x25, r7, 0x8, &(0x7f00000006c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x3, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x1, r7, r0], &(0x7f0000000cc0)=[{0x3, 0x5, 0x8, 0x1}], 0x10, 0x5}, 0x94) 8m14.596549336s ago: executing program 3 (id=1649): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x100000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000007f000000f00e00008000000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000001400000000000000000000000028410ac44541638434bd23674dcddccfeed3f36d2d0b0fcc6b8cd1c080146bab4da1ca54", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000000000000000"], 0x50) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x2, 0x1, 0x6) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x2711}, 0x10) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0xc, 0x0, 0xffffffffffffffff, 0x0, r8, 0x1, 0x0, 0x2}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x0, 0x2, {{0xe, 0x4, 0x1, 0x20, 0x38, 0x66, 0x0, 0x3, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x14, 0x97, 0x0, 0xf, [0x6, 0xab, 0x6, 0x0]}, @rr={0x7, 0xf, 0xd9, [@remote, @multicast1, @loopback]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x24, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0xb, 0x6, 0x9, 0xffffffffffffffe0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @alu={0x7, 0x1, 0x0, 0xb, 0x9, 0x6, 0x1}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x24, &(0x7f0000000300)=""/36, 0x41100, 0x63, '\x00', r11, 0x25, r6, 0x8, &(0x7f00000006c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x3, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x1, r6, r0], &(0x7f0000000cc0)=[{0x3, 0x5, 0x8, 0x1}], 0x10, 0x5}, 0x94) 8m14.436720109s ago: executing program 0 (id=1651): r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x4) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r7 = creat(&(0x7f0000000040)='./file0\x00', 0x40) fadvise64(r7, 0xfff, 0x8, 0x2) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 8m13.692779375s ago: executing program 0 (id=1653): epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004001180865b0a620a9650d6c0fc77714246d2f36ad779e6d516255ad9e1463c4ae2583ac44d5b9a65418aa1f85d9ecb3d015b986ce3fbca7298a31c01336a4bf3a77eaec9f6cfc02d9b3363ade0702345c435f80d83556f7177a742d1d00258290e09ebeeb8b1673c7dc7460e3082698dee4f9bf2a56f3f5bf704"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d800010000000000000000000000008"], 0x80}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r8, r10, 0x25, 0x0, @val=@tcx}, 0x1c) 8m13.376612039s ago: executing program 3 (id=1656): restart_syscall() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000001200)) 8m13.225083264s ago: executing program 0 (id=1658): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close$fd_v4l2_buffer(r0) read$usbfs(0xffffffffffffffff, &(0x7f0000000040)=""/60, 0x3c) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = dup(r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) sendfile(r7, r7, 0x0, 0xffffffff) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) 8m13.088186697s ago: executing program 32 (id=1658): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0x0, 0x105, 0xfffffff8, 0x3d}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close$fd_v4l2_buffer(r0) read$usbfs(0xffffffffffffffff, &(0x7f0000000040)=""/60, 0x3c) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = dup(r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x8) sendfile(r7, r7, 0x0, 0xffffffff) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) 8m13.08626924s ago: executing program 3 (id=1660): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x100000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000007f000000f00e00008000000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000001400000000000000000000000028410ac44541638434bd23674dcddccfeed3f36d2d0b0fcc6b8cd1c080146bab4da1ca54", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000000000000000"], 0x50) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket(0x2, 0x1, 0x6) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x2711}, 0x10) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$I2C_RETRIES(0xffffffffffffffff, 0x701, 0x7) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0xc, 0x0, 0xffffffffffffffff, 0x0, r9, 0x1, 0x0, 0x2}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x0, 0x2, {{0xe, 0x4, 0x1, 0x20, 0x38, 0x66, 0x0, 0x3, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x18, 0x97, 0x0, 0xf, [0x1, 0x6, 0xab, 0x6, 0x0]}, @rr={0x7, 0xb, 0xd9, [@remote, @multicast1]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x24, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0xb, 0x6, 0x9, 0xffffffffffffffe0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @alu={0x7, 0x1, 0x0, 0xb, 0x9, 0x6, 0x1}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x24, &(0x7f0000000300)=""/36, 0x41100, 0x63, '\x00', r12, 0x25, r7, 0x8, &(0x7f00000006c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x3, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0x1, r7, r0], &(0x7f0000000cc0)=[{0x3, 0x5, 0x8, 0x1}], 0x10, 0x5}, 0x94) 8m11.562719661s ago: executing program 3 (id=1662): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x74, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x55, 0x6, "2f2b03aada1f518ae697a20cf074a2093f400c1a278d05aef28d15d57ea1f675f20e42a43edbde1403653324489082d9331199a267006747c7f33f56155b1bfa48e4412507385e05875eb478d062c24139"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc4}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setrlimit(0x6, &(0x7f0000000080)={0x4, 0x9}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3a49f0d23cba354b, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f00000001c0)=""/4096) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r8 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000001931bc64c7590d370066570e47602030405060708090a0b0c"], 0x48, 0xffffffffffffffff) keyctl$set_timeout(0xf, r8, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r8, 0xffffffffffffffff, 0xd) 8m9.946103374s ago: executing program 3 (id=1664): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r4, 0x0, 0x1}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r5, 0x289e0cb5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) 8m9.464782272s ago: executing program 3 (id=1667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000001200)) 8m9.351042344s ago: executing program 33 (id=1667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000001200)) 3.497526014s ago: executing program 2 (id=3436): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) fcntl$setstatus(r0, 0x4, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x1f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3, 0x0, 0x0, 0x2}, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000280)={{0x3, 0x4}, 0x0, 0x98, 0xfffffff2, {0x7, 0x17}, 0x40, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000b98000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00002db000/0x4000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000045e000/0x2000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') 2.952014762s ago: executing program 2 (id=3443): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) 2.309935129s ago: executing program 5 (id=3448): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) fcntl$setstatus(r0, 0x4, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x1f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3, 0x0, 0x0, 0x2}, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000280)={{0x3, 0x4}, 0x0, 0x98, 0xfffffff2, {0x7, 0x17}, 0x40, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000b98000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00002db000/0x4000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000045e000/0x2000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') 1.659833988s ago: executing program 5 (id=3454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) 1.649906948s ago: executing program 5 (id=3456): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e0", 0x1}], 0x1}}], 0x1, 0x2000c000) 1.602487079s ago: executing program 5 (id=3458): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) 1.558140201s ago: executing program 1 (id=3459): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="400901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/74, 0x4a}], 0x1, 0x8, 0xff) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 1.551765384s ago: executing program 2 (id=3460): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000080)={r6, r7, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x1, 0x0, 0x1000000000000}) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r8) socket$nl_netfilter(0x10, 0x3, 0xc) 1.002058892s ago: executing program 1 (id=3461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x4}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x47f, 0x0, 0x2}]}) 900.190631ms ago: executing program 1 (id=3462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 770.451058ms ago: executing program 1 (id=3463): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) fcntl$setstatus(r0, 0x4, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x1f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3, 0x0, 0x0, 0x2}, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000280)={{0x3, 0x4}, 0x0, 0x98, 0xfffffff2, {0x7, 0x17}, 0x40, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000b98000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00002db000/0x4000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000045e000/0x2000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') 769.690793ms ago: executing program 4 (id=3464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @random="a50a3a85366a"}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="020000000000", 0x6}, {&(0x7f0000000140)="0aa7d0", 0x3}], 0x3) 661.966272ms ago: executing program 5 (id=3465): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x1) setreuid(0xffffffffffffffff, 0xee01) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') 661.780813ms ago: executing program 4 (id=3466): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 660.430967ms ago: executing program 5 (id=3467): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$dri(0x0, 0xd21, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 362.205706ms ago: executing program 1 (id=3468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x34, r1, 0x2140dcfffd4d4d7f, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "2635eb6f2d8ab086368aa4cec5d828e0"}, @NL80211_ATTR_SSID={0x4}]}, 0x34}}, 0x50) 311.368846ms ago: executing program 1 (id=3469): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10}) 200.757665ms ago: executing program 4 (id=3470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f00000032c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4048850}, 0xcf58bee07fb4d89c) 200.4234ms ago: executing program 4 (id=3471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110029bd7000fddbdf253000000008000300", @ANYRES32=r2, @ANYBLOB="060036"], 0x24}, 0x1, 0x0, 0x0, 0x48044}, 0x880) 101.777826ms ago: executing program 4 (id=3472): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 101.549394ms ago: executing program 2 (id=3473): mknod$loop(&(0x7f0000000080)='./file0\x00', 0xc000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x4000, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) close(0x3) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100830, 0x0) 41.925137ms ago: executing program 4 (id=3474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102481, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x1}) 41.713998ms ago: executing program 2 (id=3475): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000140)=0x2) 0s ago: executing program 2 (id=3476): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) kernel console output (not intermixed with test programs): :4kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1092.333739][T19678] lowmem_reserve[]: 0 289 289 289 289 [ 1092.342117][T19678] Node 0 DMA32 free:18476kB boost:2048kB min:15380kB low:18712kB high:22044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2388kB inactive_anon:96kB active_file:3864kB inactive_file:240kB unevictable:3536kB writepending:152kB zspages:1000kB present:1032196kB managed:296820kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:272kB free_cma:0kB [ 1092.392653][T19678] lowmem_reserve[]: 0 0 0 0 0 [ 1092.394232][T19678] Node 1 DMA32 free:139844kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4480kB inactive_anon:21764kB active_file:3032kB inactive_file:3664kB unevictable:3536kB writepending:304kB zspages:6200kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:16512kB local_pcp:7084kB free_cma:0kB [ 1092.420914][T19678] lowmem_reserve[]: 0 0 0 0 0 [ 1092.422491][T19678] Node 0 DMA: 18*4kB (U) 16*8kB (UE) 9*16kB (UE) 11*32kB (UE) 2*64kB (E) 0*128kB 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2360kB [ 1092.427367][T19678] Node 0 DMA32: 247*4kB (UME) 92*8kB (UME) 165*16kB (UME) 103*32kB (UME) 55*64kB (UME) 33*128kB (UME) 12*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18476kB [ 1092.439545][T19678] Node 1 DMA32: 680*4kB (UM) 2565*8kB (UME) 2272*16kB (UME) 399*32kB (UME) 237*64kB (UME) 144*128kB (UME) 87*256kB (UME) 18*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 139496kB [ 1092.445924][T19678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1092.448946][T19678] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1092.451863][T19678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1092.472828][T19678] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=2 hugepages_size=2048kB [ 1092.475939][T19678] 10668 total pagecache pages [ 1092.477478][T19678] 774 pages in swap cache [ 1092.478863][T19678] Free swap = 90428kB [ 1092.480182][T19678] Total swap = 124996kB [ 1092.481545][T19678] 524155 pages RAM [ 1092.493212][T19678] 0 pages HighMem/MovableOnly [ 1092.494766][T19678] 209057 pages reserved [ 1092.496102][T19678] 0 pages cma reserved [ 1092.699800][T19685] binder_alloc: 19680: binder_alloc_buf, no vma [ 1092.956241][T19689] rdma_rxe: rxe_newlink: failed to add lo [ 1092.959372][T19689] ªªªªªª: renamed from lo (while UP) [ 1093.152681][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 1093.232848][T12462] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1093.241387][T12462] Bluetooth: hci3: command 0x0c1a tx timeout [ 1093.246103][T12462] Bluetooth: hci2: command 0x0c1a tx timeout [ 1094.024289][ T40] audit: type=1326 audit(1093.926:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19696 comm="syz.4.2559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1094.162748][ T40] audit: type=1326 audit(1093.926:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19696 comm="syz.4.2559" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1094.245198][ T40] audit: type=1326 audit(1093.926:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19696 comm="syz.4.2559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1094.260706][ T40] audit: type=1326 audit(1093.936:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19696 comm="syz.4.2559" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1094.273520][ T40] audit: type=1326 audit(1093.936:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19696 comm="syz.4.2559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1094.291092][ T40] audit: type=1326 audit(1093.936:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19696 comm="syz.4.2559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1094.300195][ T40] audit: type=1326 audit(1093.936:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19696 comm="syz.4.2559" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1094.311891][ T40] audit: type=1326 audit(1093.936:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19696 comm="syz.4.2559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1094.322403][ T40] audit: type=1326 audit(1093.936:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19696 comm="syz.4.2559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1094.331678][ T40] audit: type=1326 audit(1093.936:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19696 comm="syz.4.2559" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 1095.323127][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 1096.076240][T19704] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2552'. [ 1096.423321][T19719] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1096.426091][T19719] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1096.429443][T19719] vhci_hcd vhci_hcd.0: Device attached [ 1096.685249][T19724] IPVS: Error connecting to the multicast addr [ 1096.702854][ T9292] usb 48-1: SetAddress Request (71) to port 0 [ 1096.704963][ T9292] usb 48-1: new SuperSpeed USB device number 71 using vhci_hcd [ 1096.808647][T19712] netlink: 'syz.2.2554': attribute type 4 has an invalid length. [ 1096.843436][ T6031] lo speed is unknown, defaulting to 1000 [ 1096.845831][ T6031] syz0: Port: 1 Link DOWN [ 1096.935291][T19712] netlink: 'syz.2.2554': attribute type 4 has an invalid length. [ 1096.951503][ T6031] lo speed is unknown, defaulting to 1000 [ 1096.954001][ T6031] syz0: Port: 1 Link ACTIVE [ 1097.122117][T19728] mkiss: ax0: crc mode is auto. [ 1097.199795][T19720] vhci_hcd: connection reset by peer [ 1097.202396][ T1055] vhci_hcd vhci_hcd.5: stop threads [ 1097.204952][ T1055] vhci_hcd vhci_hcd.5: release socket [ 1097.208072][ T1055] vhci_hcd vhci_hcd.5: disconnect device [ 1097.473513][ T25] block nbd0: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 450 seconds [ 1097.479452][ T25] block nbd0: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 450 seconds [ 1097.484067][ T25] block nbd0: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 450 seconds [ 1097.488425][ T25] block nbd0: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 450 seconds [ 1098.450359][T19745] netlink: 'syz.4.2561': attribute type 4 has an invalid length. [ 1098.453004][T19745] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2561'. [ 1098.675178][T19739] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1098.677287][T19739] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1098.679866][T19739] vhci_hcd vhci_hcd.0: Device attached [ 1098.749830][T19748] vhci_hcd: connection closed [ 1098.751394][ T3349] vhci_hcd vhci_hcd.1: stop threads [ 1098.755192][ T3349] vhci_hcd vhci_hcd.1: release socket [ 1098.758250][ T3349] vhci_hcd vhci_hcd.1: disconnect device [ 1098.812460][T19751] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1098.814592][T19751] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1098.831406][T19751] vhci_hcd vhci_hcd.0: Device attached [ 1099.233212][T19752] vhci_hcd: connection closed [ 1099.234216][T15247] vhci_hcd vhci_hcd.5: stop threads [ 1099.237994][T15247] vhci_hcd vhci_hcd.5: release socket [ 1099.239778][T15247] vhci_hcd vhci_hcd.5: disconnect device [ 1099.381568][T19759] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1099.383745][T19759] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1099.386579][T19759] vhci_hcd vhci_hcd.0: Device attached [ 1099.404746][ C1] bridge0: port 1(erspan0) entered forwarding state [ 1099.406927][ C1] bridge0: topology change detected, propagating [ 1099.515969][T19763] vhci_hcd: connection closed [ 1099.518199][ T3349] vhci_hcd vhci_hcd.4: stop threads [ 1099.522356][ T3349] vhci_hcd vhci_hcd.4: release socket [ 1099.524948][ T3349] vhci_hcd vhci_hcd.4: disconnect device [ 1100.135149][T19772] siw: device registration error -23 [ 1100.309139][T19772] wireguard0: entered promiscuous mode [ 1100.311652][T19772] wireguard0: entered allmulticast mode [ 1101.804018][ T9292] usb 48-1: device descriptor read/8, error -110 [ 1102.193191][ T9292] usb usb48-port1: attempt power cycle [ 1102.793048][ T9292] usb usb48-port1: unable to enumerate USB device [ 1103.004321][T19785] 9p: Bad value for 'rfdno' [ 1103.062002][T19797] netlink: 'syz.5.2567': attribute type 13 has an invalid length. [ 1103.207736][T19795] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1103.209957][T19795] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1103.228302][T19795] vhci_hcd vhci_hcd.0: Device attached [ 1103.383007][T19797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1103.572782][ T9292] usb 46-1: SetAddress Request (101) to port 0 [ 1103.575657][ T9292] usb 46-1: new SuperSpeed USB device number 101 using vhci_hcd [ 1103.751566][T19796] vhci_hcd: connection reset by peer [ 1103.764131][ T6704] vhci_hcd vhci_hcd.4: stop threads [ 1103.766399][ T6704] vhci_hcd vhci_hcd.4: release socket [ 1103.791324][ T6704] vhci_hcd vhci_hcd.4: disconnect device [ 1103.865188][T19806] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 1103.973402][T19805] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1103.975563][T19805] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1103.978341][T19805] vhci_hcd vhci_hcd.0: Device attached [ 1104.050033][T19809] vhci_hcd: connection closed [ 1104.050391][T15247] vhci_hcd vhci_hcd.2: stop threads [ 1104.055335][T15247] vhci_hcd vhci_hcd.2: release socket [ 1104.058041][T15247] vhci_hcd vhci_hcd.2: disconnect device [ 1104.237692][T19814] mkiss: ax0: crc mode is auto. [ 1104.748889][T19819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2574'. [ 1105.426048][T19826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 1106.727465][T19839] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1106.729567][T19839] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1106.848248][T19839] vhci_hcd vhci_hcd.0: Device attached [ 1107.122809][T14926] usb 42-1: SetAddress Request (126) to port 0 [ 1107.158352][T14926] usb 42-1: new SuperSpeed USB device number 126 using vhci_hcd [ 1107.382001][T19841] vhci_hcd: connection reset by peer [ 1107.384681][T15427] vhci_hcd vhci_hcd.2: stop threads [ 1107.387215][T15427] vhci_hcd vhci_hcd.2: release socket [ 1107.389612][T15427] vhci_hcd vhci_hcd.2: disconnect device [ 1107.802236][T19854] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1107.917196][T19857] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1107.919318][T19857] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1108.060452][T19857] vhci_hcd vhci_hcd.0: Device attached [ 1108.154673][T19851] netlink: 'syz.5.2581': attribute type 4 has an invalid length. [ 1108.167222][T19851] netlink: 'syz.5.2581': attribute type 4 has an invalid length. [ 1108.371465][T19867] trusted_key: encrypted_key: insufficient parameters specified [ 1108.390462][ T54] usb 40-1: SetAddress Request (103) to port 0 [ 1108.400637][ T54] usb 40-1: new SuperSpeed USB device number 103 using vhci_hcd [ 1108.454054][T19860] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1108.476622][ T3349] vhci_hcd vhci_hcd.1: stop threads [ 1108.480094][ T3349] vhci_hcd vhci_hcd.1: release socket [ 1108.543583][ T3349] vhci_hcd vhci_hcd.1: disconnect device [ 1108.674630][ T9292] usb 46-1: device descriptor read/8, error -110 [ 1109.055585][T19874] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1109.058578][T19874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1109.625026][T19874] vhci_hcd vhci_hcd.0: Device attached [ 1109.833273][T19875] vhci_hcd: connection closed [ 1109.834418][T14975] vhci_hcd vhci_hcd.4: stop threads [ 1109.838949][T14975] vhci_hcd vhci_hcd.4: release socket [ 1109.841972][T14975] vhci_hcd vhci_hcd.4: disconnect device [ 1109.943076][ T9292] usb 46-1: enqueue for inactive port 0 [ 1110.080702][T19885] netlink: 'syz.2.2586': attribute type 4 has an invalid length. [ 1110.083547][T19885] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2586'. [ 1110.183158][ T9292] usb usb46-port1: attempt power cycle [ 1110.773722][ T9292] usb usb46-port1: unable to enumerate USB device [ 1111.029810][T19887] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1111.031901][T19887] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1111.034697][T19887] vhci_hcd vhci_hcd.0: Device attached [ 1111.260523][T19901] netlink: 'syz.2.2597': attribute type 4 has an invalid length. [ 1111.263202][T19901] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2597'. [ 1111.600575][T19888] vhci_hcd: connection closed [ 1111.601029][ T3349] vhci_hcd vhci_hcd.1: stop threads [ 1111.604413][ T3349] vhci_hcd vhci_hcd.1: release socket [ 1111.606208][ T3349] vhci_hcd vhci_hcd.1: disconnect device [ 1112.099316][T19902] afs: Unknown parameter '#7dyn' [ 1112.102134][T19902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2587'. [ 1112.192932][T14926] usb 42-1: device descriptor read/8, error -110 [ 1112.376585][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 1112.376597][ T40] audit: type=1326 audit(1112.276:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.5.2592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1112.387447][ T40] audit: type=1326 audit(1112.276:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.5.2592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1112.394411][ T40] audit: type=1326 audit(1112.276:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.5.2592" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1112.403160][ T40] audit: type=1326 audit(1112.276:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.5.2592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1112.414706][ T40] audit: type=1326 audit(1112.276:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.5.2592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1112.432781][ T40] audit: type=1326 audit(1112.276:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.5.2592" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1112.441701][ T40] audit: type=1326 audit(1112.286:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.5.2592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1112.502746][ T40] audit: type=1326 audit(1112.286:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.5.2592" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1112.582471][ T40] audit: type=1326 audit(1112.286:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.5.2592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1112.590352][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'. [ 1112.594928][T19916] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2591'. [ 1112.622318][T14926] usb usb42-port1: attempt power cycle [ 1112.625105][ T40] audit: type=1326 audit(1112.286:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19906 comm="syz.5.2592" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1112.626534][T19916] batadv1: entered allmulticast mode [ 1113.129276][T19922] siw: device registration error -23 [ 1113.213209][T14926] usb usb42-port1: unable to enumerate USB device [ 1113.472959][ T54] usb 40-1: device descriptor read/8, error -110 [ 1113.811788][T19933] pimreg: entered allmulticast mode [ 1113.874344][T19946] netlink: 'syz.2.2596': attribute type 13 has an invalid length. [ 1113.881586][ T54] usb usb40-port1: attempt power cycle [ 1113.896934][T19946] bridge0: port 1(erspan0) entered blocking state [ 1113.899662][T19946] bridge0: port 1(erspan0) entered forwarding state [ 1113.914256][T19946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1114.257093][T19947] siw: device registration error -23 [ 1114.645518][T19957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1114.674251][T19947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'. [ 1114.688389][T19958] mkiss: ax0: crc mode is auto. [ 1114.848579][T19963] netlink: 'syz.2.2602': attribute type 4 has an invalid length. [ 1114.852379][T19963] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2602'. [ 1115.027325][ T54] usb usb40-port1: unable to enumerate USB device [ 1115.946922][T19967] netlink: 'syz.2.2603': attribute type 1 has an invalid length. [ 1116.071875][T19971] netlink: 'syz.1.2611': attribute type 4 has an invalid length. [ 1116.074469][T19971] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2611'. [ 1116.959766][T19978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1117.018893][T19982] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1117.023851][T19982] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1117.028282][T19982] vhci_hcd vhci_hcd.0: Device attached [ 1117.369831][T19988] 9p: Bad value for 'wfdno' [ 1117.432467][T19983] vhci_hcd: connection closed [ 1117.501961][ T12] vhci_hcd vhci_hcd.5: stop threads [ 1117.505494][ T12] vhci_hcd vhci_hcd.5: release socket [ 1117.507748][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 1117.552741][T14926] usb 48-1: enqueue for inactive port 0 [ 1118.050731][T14926] usb usb48-port1: attempt power cycle [ 1118.074255][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 1118.074270][ T40] audit: type=1326 audit(1117.976:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.2.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1118.113105][ T40] audit: type=1326 audit(1118.016:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.2.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1118.130139][ T40] audit: type=1326 audit(1118.016:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.2.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1118.155685][ T40] audit: type=1326 audit(1118.026:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.2.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1118.162487][ T40] audit: type=1326 audit(1118.046:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.2.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1118.202742][ T40] audit: type=1326 audit(1118.046:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.2.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1118.209313][ T40] audit: type=1326 audit(1118.046:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.2.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1118.216045][ T40] audit: type=1326 audit(1118.056:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.2.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1118.222735][ T40] audit: type=1326 audit(1118.056:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.2.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1118.230245][ T40] audit: type=1326 audit(1118.066:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.2.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1118.308033][T20002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2616'. [ 1118.372894][T20005] tipc: Enabled bearer , priority 10 [ 1118.519137][T20007] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1118.773578][T14926] usb usb48-port1: unable to enumerate USB device [ 1119.648074][T20024] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1119.650351][T20024] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1119.654234][T20024] vhci_hcd vhci_hcd.0: Device attached [ 1119.668662][T20023] cgroup: release_agent respecified [ 1119.676551][T20027] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1119.678687][T20027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1119.687668][T20027] vhci_hcd vhci_hcd.0: Device attached [ 1119.975131][ T9292] usb 40-1: SetAddress Request (107) to port 0 [ 1119.978204][ T9292] usb 40-1: new SuperSpeed USB device number 107 using vhci_hcd [ 1119.981339][T14926] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 1120.459050][T20032] syz2: rxe_newlink: already configured on wg2 [ 1122.453361][T20028] vhci_hcd: connection reset by peer [ 1122.455542][ T3349] vhci_hcd vhci_hcd.4: stop threads [ 1122.458034][ T3349] vhci_hcd vhci_hcd.4: release socket [ 1122.462736][ T3349] vhci_hcd vhci_hcd.4: disconnect device [ 1122.527017][T20025] vhci_hcd: connection reset by peer [ 1122.529041][ T3349] vhci_hcd vhci_hcd.1: stop threads [ 1122.530811][ T3349] vhci_hcd vhci_hcd.1: release socket [ 1122.597730][ T3349] vhci_hcd vhci_hcd.1: disconnect device [ 1122.936719][T20056] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1122.939558][T20056] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1122.943752][T20056] vhci_hcd vhci_hcd.0: Device attached [ 1123.087141][ T40] kauditd_printk_skb: 84 callbacks suppressed [ 1123.087155][ T40] audit: type=1326 audit(1122.946:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20051 comm="syz.1.2621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1123.096024][ T40] audit: type=1326 audit(1122.976:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20051 comm="syz.1.2621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1123.104166][ T40] audit: type=1326 audit(1122.976:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20051 comm="syz.1.2621" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1123.114850][ T40] audit: type=1326 audit(1122.996:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20051 comm="syz.1.2621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1123.119874][T20061] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1123.125958][T20061] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1123.129693][T20061] vhci_hcd vhci_hcd.0: Device attached [ 1123.170523][ T40] audit: type=1326 audit(1122.996:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20051 comm="syz.1.2621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1123.223484][ T5948] usb 42-1: SetAddress Request (4) to port 0 [ 1123.226125][ T5948] usb 42-1: new SuperSpeed USB device number 4 using vhci_hcd [ 1123.357472][T20059] vhci_hcd: connection reset by peer [ 1123.360224][T15427] vhci_hcd vhci_hcd.2: stop threads [ 1123.362487][T15427] vhci_hcd vhci_hcd.2: release socket [ 1123.365098][T15427] vhci_hcd vhci_hcd.2: disconnect device [ 1123.412744][ T6287] usb 48-1: SetAddress Request (79) to port 0 [ 1123.415207][ T6287] usb 48-1: new SuperSpeed USB device number 79 using vhci_hcd [ 1123.603758][T20062] vhci_hcd: connection reset by peer [ 1123.605938][T15427] vhci_hcd vhci_hcd.5: stop threads [ 1123.607685][T15427] vhci_hcd vhci_hcd.5: release socket [ 1123.609580][T15427] vhci_hcd vhci_hcd.5: disconnect device [ 1123.672775][T20072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.677397][T20072] team0: Port device batadv0 added [ 1124.581269][T20087] /dev/nullb0: Can't open blockdev [ 1125.093126][ T9292] usb 40-1: device descriptor read/8, error -110 [ 1125.098318][T14926] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1125.358799][T20096] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1125.367470][T20096] team0: Port device batadv1 added [ 1125.523218][ T9292] usb usb40-port1: attempt power cycle [ 1126.083183][ T9292] usb usb40-port1: unable to enumerate USB device [ 1126.362734][ T6952] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1126.445150][T20107] ubi31: detaching mtd0 [ 1126.464871][T20107] ubi31: mtd0 is detached [ 1126.525042][ T6952] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 1126.528818][ T6952] usb 10-1: config 1 has no interface number 0 [ 1126.534185][ T6952] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1126.538974][ T6952] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 16 [ 1126.548810][ T6952] usb 10-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1126.564170][ T6952] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1126.598664][ T6952] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.744009][ T6952] usb 10-1: Product: syz [ 1126.756133][ T6952] usb 10-1: Manufacturer: syz [ 1126.757787][ T6952] usb 10-1: SerialNumber: syz [ 1126.810166][T20103] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1126.812888][T20103] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1126.880571][T20113] netlink: 'syz.4.2630': attribute type 1 has an invalid length. [ 1127.498952][ T6952] usb 10-1: Expected 3 endpoints, found: 2 [ 1127.638748][T20123] lo speed is unknown, defaulting to 1000 [ 1127.641377][T20123] wg2 speed is unknown, defaulting to 1000 [ 1127.776187][T20123] ªªªªªª speed is unknown, defaulting to 1000 [ 1128.114404][ T25] block nbd0: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 480 seconds [ 1128.118692][ T25] block nbd0: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 480 seconds [ 1128.122692][ T25] block nbd0: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 480 seconds [ 1128.126187][ T25] block nbd0: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 480 seconds [ 1128.272790][ T5948] usb 42-1: device descriptor read/8, error -110 [ 1128.340564][T20131] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1128.343366][T20131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1128.358148][T20131] vhci_hcd vhci_hcd.0: Device attached [ 1128.523374][ T6287] usb 48-1: device descriptor read/8, error -110 [ 1128.642685][ T6952] usb 40-1: SetAddress Request (111) to port 0 [ 1128.645593][ T6952] usb 40-1: new SuperSpeed USB device number 111 using vhci_hcd [ 1128.683703][ T5948] usb usb42-port1: attempt power cycle [ 1128.864934][T20132] vhci_hcd: connection reset by peer [ 1128.867179][ T63] vhci_hcd vhci_hcd.1: stop threads [ 1128.869416][ T63] vhci_hcd vhci_hcd.1: release socket [ 1128.871680][ T63] vhci_hcd vhci_hcd.1: disconnect device [ 1128.923887][ T6287] usb usb48-port1: attempt power cycle [ 1129.177497][ T54] usb 10-1: USB disconnect, device number 7 [ 1129.263515][ T5948] usb usb42-port1: unable to enumerate USB device [ 1129.521689][ T6287] usb usb48-port1: unable to enumerate USB device [ 1129.565258][T20137] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1129.567615][T20137] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1129.570508][T20137] vhci_hcd vhci_hcd.0: Device attached [ 1129.781230][T20138] vhci_hcd: connection closed [ 1129.782707][ T63] vhci_hcd vhci_hcd.4: stop threads [ 1129.794928][ T63] vhci_hcd vhci_hcd.4: release socket [ 1129.802965][ T63] vhci_hcd vhci_hcd.4: disconnect device [ 1129.931831][T20149] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1130.164867][T20149] team0: Port device batadv2 added [ 1130.377034][T20153] syz.1.2637: page allocation failure: order:9, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1130.382945][T20153] CPU: 1 UID: 0 PID: 20153 Comm: syz.1.2637 Tainted: G L syzkaller #0 PREEMPT(full) [ 1130.382976][T20153] Tainted: [L]=SOFTLOCKUP [ 1130.382980][T20153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1130.382988][T20153] Call Trace: [ 1130.382993][T20153] [ 1130.382997][T20153] dump_stack_lvl+0x16c/0x1f0 [ 1130.383019][T20153] warn_alloc+0x248/0x3a0 [ 1130.383035][T20153] ? __pfx_warn_alloc+0x10/0x10 [ 1130.383047][T20153] ? psi_memstall_leave+0x1e6/0x2d0 [ 1130.383066][T20153] ? __alloc_pages_direct_compact+0x466/0x580 [ 1130.383081][T20153] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 1130.383097][T20153] ? psi_memstall_leave+0x1e6/0x2d0 [ 1130.383116][T20153] __alloc_frozen_pages_noprof+0xe9b/0x2430 [ 1130.383138][T20153] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1130.383158][T20153] ? __pfx___schedule+0x10/0x10 [ 1130.383174][T20153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1130.383193][T20153] ? keyring_get_key_chunk+0x22d/0x280 [ 1130.383210][T20153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1130.383228][T20153] ? policy_nodemask+0xea/0x4e0 [ 1130.383247][T20153] alloc_pages_mpol+0x1fb/0x550 [ 1130.383265][T20153] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1130.383286][T20153] ___kmalloc_large_node+0x10c/0x150 [ 1130.383307][T20153] __kmalloc_large_node_noprof+0x1c/0x70 [ 1130.383327][T20153] __kmalloc_noprof.cold+0xc/0x62 [ 1130.383344][T20153] ? __lock_acquire+0x436/0x2890 [ 1130.383359][T20153] ? dns_resolver_preparse+0x319/0xe00 [ 1130.383374][T20153] ? dns_resolver_preparse+0x319/0xe00 [ 1130.383385][T20153] dns_resolver_preparse+0x319/0xe00 [ 1130.383399][T20153] ? __pfx_dns_resolver_preparse+0x10/0x10 [ 1130.383412][T20153] ? __pfx___might_resched+0x10/0x10 [ 1130.383432][T20153] ? down_read+0x13d/0x460 [ 1130.383442][T20153] ? __pfx_down_read+0x10/0x10 [ 1130.383456][T20153] ? __pfx_dns_resolver_preparse+0x10/0x10 [ 1130.383469][T20153] __key_create_or_update+0x458/0xe10 [ 1130.383486][T20153] ? __pfx___key_create_or_update+0x10/0x10 [ 1130.383501][T20153] ? lookup_user_key+0x2ce/0x1300 [ 1130.383518][T20153] ? irqentry_exit+0x1dd/0x8c0 [ 1130.383538][T20153] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1130.383552][T20153] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1130.383570][T20153] key_create_or_update+0x42/0x60 [ 1130.383587][T20153] __do_sys_add_key+0x29d/0x470 [ 1130.383605][T20153] ? __pfx___do_sys_add_key+0x10/0x10 [ 1130.383622][T20153] ? xfd_validate_state+0x61/0x180 [ 1130.383639][T20153] __do_fast_syscall_32+0xe8/0x680 [ 1130.383659][T20153] do_fast_syscall_32+0x32/0x80 [ 1130.383676][T20153] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1130.383691][T20153] RIP: 0023:0xf7f95579 [ 1130.383700][T20153] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1130.383711][T20153] RSP: 002b:00000000f544455c EFLAGS: 00000296 ORIG_RAX: 000000000000011e [ 1130.383722][T20153] RAX: ffffffffffffffda RBX: 00000000800003c0 RCX: 0000000080000400 [ 1130.383729][T20153] RDX: 0000000080000080 RSI: 00000000000fffff RDI: 0000000010e3230c [ 1130.383736][T20153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1130.383743][T20153] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1130.383749][T20153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1130.383764][T20153] [ 1130.383805][T20153] Mem-Info: [ 1130.519280][T20155] tmpfs: Bad value for 'mpol' [ 1130.523548][T20153] active_anon:2990 inactive_anon:9310 isolated_anon:0 [ 1130.523548][T20153] active_file:1145 inactive_file:762 isolated_file:0 [ 1130.523548][T20153] unevictable:1768 dirty:112 writeback:50 [ 1130.523548][T20153] slab_reclaimable:6383 slab_unreclaimable:67244 [ 1130.523548][T20153] mapped:30161 shmem:8112 pagetables:1636 [ 1130.523548][T20153] sec_pagetables:341 bounce:0 [ 1130.523548][T20153] kernel_misc_reclaimable:0 [ 1130.523548][T20153] free:25205 free_pcp:438 free_cma:0 [ 1130.539208][T20153] Node 0 active_anon:896kB inactive_anon:8784kB active_file:324kB inactive_file:28kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8832kB dirty:0kB writeback:0kB shmem:12204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9060kB pagetables:1784kB sec_pagetables:1160kB all_unreclaimable? no Balloon:0kB [ 1130.551079][T20153] Node 1 active_anon:11164kB inactive_anon:28456kB active_file:4256kB inactive_file:3020kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:111912kB dirty:148kB writeback:400kB shmem:20344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5192kB pagetables:4760kB sec_pagetables:204kB all_unreclaimable? no Balloon:0kB [ 1130.562647][T20153] Node 0 DMA free:2096kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100kB inactive_anon:4kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:24kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.598821][T20153] lowmem_reserve[]: 0 289 289 289 289 [ 1130.600895][T20153] Node 0 DMA32 free:12220kB boost:10240kB min:23572kB low:26904kB high:30236kB reserved_highatomic:2048KB free_highatomic:64KB active_anon:796kB inactive_anon:8780kB active_file:296kB inactive_file:28kB unevictable:3536kB writepending:0kB zspages:1008kB present:1032196kB managed:296820kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1130.611559][T20153] lowmem_reserve[]: 0 0 0 0 0 [ 1130.614194][T20153] Node 1 DMA32 free:86504kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11264kB inactive_anon:28456kB active_file:4256kB inactive_file:3020kB unevictable:3536kB writepending:648kB zspages:7000kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1516kB local_pcp:308kB free_cma:0kB [ 1130.630877][T20153] lowmem_reserve[]: 0 0 0 0 0 [ 1130.632604][T20153] Node 0 DMA: 16*4kB (UM) 22*8kB (UM) 10*16kB (UM) 5*32kB (U) 0*64kB 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2096kB [ 1130.637336][T20153] Node 0 DMA32: 69*4kB (UM) 9*8kB (UM) 144*16kB (UH) 85*32kB (UMH) 43*64kB (U) 32*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12220kB [ 1130.642237][T20153] Node 1 DMA32: 95*4kB (UME) 1760*8kB (UME) 2439*16kB (UME) 352*32kB (UME) 208*64kB (UME) 55*128kB (UME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 85100kB [ 1130.647553][T20153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.650716][T20153] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1130.653756][T20153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.656810][T20153] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=2 hugepages_size=2048kB [ 1130.659900][T20153] 10881 total pagecache pages [ 1130.661489][T20153] 816 pages in swap cache [ 1130.663918][T20153] Free swap = 54004kB [ 1130.665317][T20153] Total swap = 124996kB [ 1130.666737][T20153] 524155 pages RAM [ 1130.668034][T20153] 0 pages HighMem/MovableOnly [ 1130.669609][T20153] 209057 pages reserved [ 1130.671080][T20153] 0 pages cma reserved [ 1130.748529][T20157] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 1130.751945][T20157] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 1130.813105][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'. [ 1131.314416][ T40] audit: type=1804 audit(1131.206:2081): pid=20166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2641" name="/newroot/239/bus/file0" dev="overlay" ino=1281 res=1 errno=0 [ 1131.951611][T20174] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1131.954292][T20174] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1131.961375][T20174] vhci_hcd vhci_hcd.0: Device attached [ 1132.233614][T20175] vhci_hcd: connection closed [ 1132.263298][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1132.266698][ T12] vhci_hcd vhci_hcd.1: release socket [ 1132.268597][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1132.987239][ T5941] Bluetooth: hci2: unexpected event for opcode 0x204e [ 1133.397042][T20192] loop5: detected capacity change from 0 to 7 [ 1133.407353][T20192] Dev loop5: unable to read RDB block 7 [ 1133.409797][T20192] loop5: AHDI p1 p2 [ 1133.411528][T20192] loop5: partition table partially beyond EOD, truncated [ 1133.414389][T20192] loop5: p1 start 1702000233 is beyond EOD, truncated [ 1133.712814][ T6952] usb 40-1: device descriptor read/8, error -110 [ 1133.773289][T20194] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1133.775458][T20194] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1133.801656][T20194] vhci_hcd vhci_hcd.0: Device attached [ 1133.962752][ T6952] usb 40-1: SetAddress Request (112) to port 0 [ 1133.965481][ T6952] usb 40-1: new SuperSpeed USB device number 112 using vhci_hcd [ 1134.478124][T20195] vhci_hcd: connection reset by peer [ 1134.480869][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1134.483568][ T12] vhci_hcd vhci_hcd.1: release socket [ 1134.486551][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1135.289165][T20207] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1135.292043][T20207] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1135.296979][T20207] vhci_hcd vhci_hcd.0: Device attached [ 1135.541106][T20210] vhci_hcd: connection closed [ 1135.545807][ T12] vhci_hcd vhci_hcd.5: stop threads [ 1135.550237][ T12] vhci_hcd vhci_hcd.5: release socket [ 1135.554716][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 1135.562702][ T54] usb 48-1: enqueue for inactive port 0 [ 1135.897508][T20215] netlink: 'syz.1.2650': attribute type 13 has an invalid length. [ 1135.940350][T20215] bridge0: port 3(erspan0) entered blocking state [ 1135.943160][T20215] bridge0: port 3(erspan0) entered forwarding state [ 1136.063120][ T54] usb usb48-port1: attempt power cycle [ 1136.481006][T20219] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1136.546414][T20215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1136.553611][T14977] ªªªªªª speed is unknown, defaulting to 1000 [ 1137.260404][ T5351] udevd[5351]: worker [13391] /devices/virtual/block/nbd0 timeout; kill it [ 1137.295867][ T5351] udevd[5351]: seq 14119 '/devices/virtual/block/nbd0' killed [ 1137.404121][ T54] usb usb48-port1: unable to enumerate USB device [ 1137.889950][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2654'. [ 1137.953814][T20236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2654'. [ 1138.022064][T20237] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1138.024366][T20237] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1138.027815][T20237] vhci_hcd vhci_hcd.0: Device attached [ 1138.216977][T20237] rdma_rxe: rxe_newlink: failed to add wg2 [ 1138.302722][ T6287] usb 48-1: SetAddress Request (87) to port 0 [ 1138.305489][ T6287] usb 48-1: new SuperSpeed USB device number 87 using vhci_hcd [ 1138.420421][T20238] vhci_hcd: connection reset by peer [ 1138.422463][ T3349] vhci_hcd vhci_hcd.5: stop threads [ 1138.425278][ T3349] vhci_hcd vhci_hcd.5: release socket [ 1138.427710][ T3349] vhci_hcd vhci_hcd.5: disconnect device [ 1138.586319][T20245] 9pnet_virtio: no channels available for device syz [ 1138.913855][T20249] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1138.916218][T20249] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1138.924596][T20249] vhci_hcd vhci_hcd.0: Device attached [ 1138.956717][T20252] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1138.958629][T20252] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1138.961582][T20252] vhci_hcd vhci_hcd.0: Device attached [ 1139.102161][ T6952] usb 40-1: device descriptor read/8, error -110 [ 1139.179625][T20252] rdma_rxe: rxe_newlink: failed to add wg2 [ 1139.192794][ T5948] usb 42-1: SetAddress Request (8) to port 0 [ 1139.199863][ T5948] usb 42-1: new SuperSpeed USB device number 8 using vhci_hcd [ 1139.212874][ T6952] usb usb40-port1: attempt power cycle [ 1139.233402][ T77] usb 46-1: SetAddress Request (106) to port 0 [ 1139.243155][ T77] usb 46-1: new SuperSpeed USB device number 106 using vhci_hcd [ 1139.502730][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2658'. [ 1139.773545][ T6952] usb usb40-port1: unable to enumerate USB device [ 1139.850828][T20266] netlink: 'syz.1.2659': attribute type 13 has an invalid length. [ 1139.888437][T20266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1139.968655][T20250] vhci_hcd: connection reset by peer [ 1139.974271][ T12] vhci_hcd vhci_hcd.2: stop threads [ 1139.976278][ T12] vhci_hcd vhci_hcd.2: release socket [ 1139.978155][T20253] vhci_hcd: connection reset by peer [ 1139.980192][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 1139.982875][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1139.986468][ T12] vhci_hcd vhci_hcd.4: release socket [ 1139.989024][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1140.763799][T20270] loop5: detected capacity change from 0 to 7 [ 1140.767321][T20270] Dev loop5: unable to read RDB block 7 [ 1140.769070][T20270] loop5: AHDI p1 p2 [ 1140.770585][T20270] loop5: partition table partially beyond EOD, truncated [ 1140.773535][T20270] loop5: p1 start 1702000233 is beyond EOD, truncated [ 1141.278861][T20272] /dev/nullb0: Can't open blockdev [ 1141.694704][T20284] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1141.696922][T20284] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1141.699967][T20284] vhci_hcd vhci_hcd.0: Device attached [ 1142.152976][T20287] vhci_hcd: connection closed [ 1142.153817][ T63] vhci_hcd vhci_hcd.5: stop threads [ 1142.157288][ T63] vhci_hcd vhci_hcd.5: release socket [ 1142.159107][ T63] vhci_hcd vhci_hcd.5: disconnect device [ 1142.734186][T20300] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2666'. [ 1143.042145][T20308] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1143.402733][ T6287] usb 48-1: device descriptor read/8, error -110 [ 1143.803849][ T6287] usb usb48-port1: attempt power cycle [ 1144.087648][T20321] loop5: detected capacity change from 0 to 7 [ 1144.106969][T20321] Dev loop5: unable to read RDB block 7 [ 1144.108834][T20321] loop5: AHDI p1 p2 [ 1144.110123][T20321] loop5: partition table partially beyond EOD, truncated [ 1144.113720][T20321] loop5: p1 start 1702000233 is beyond EOD, truncated [ 1144.139546][T20320] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1144.273118][ T5948] usb 42-1: device descriptor read/8, error -110 [ 1144.323782][T20327] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1144.352744][ T77] usb 46-1: device descriptor read/8, error -110 [ 1144.393617][ T6287] usb usb48-port1: unable to enumerate USB device [ 1144.664346][ T5948] usb usb42-port1: attempt power cycle [ 1144.765178][ T77] usb usb46-port1: attempt power cycle [ 1145.233152][ T5948] usb usb42-port1: unable to enumerate USB device [ 1145.344291][ T77] usb usb46-port1: unable to enumerate USB device [ 1145.958991][T20351] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1145.961139][T20351] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1145.964740][T20351] vhci_hcd vhci_hcd.0: Device attached [ 1146.412665][ T54] usb 46-1: SetAddress Request (110) to port 0 [ 1146.414789][ T54] usb 46-1: new SuperSpeed USB device number 110 using vhci_hcd [ 1146.515021][T20352] vhci_hcd: connection reset by peer [ 1146.517777][T14975] vhci_hcd vhci_hcd.4: stop threads [ 1146.520050][T14975] vhci_hcd vhci_hcd.4: release socket [ 1146.522511][T14975] vhci_hcd vhci_hcd.4: disconnect device [ 1146.530572][T20359] lo speed is unknown, defaulting to 1000 [ 1146.536223][T20359] wg2 speed is unknown, defaulting to 1000 [ 1146.588250][T20361] 9pnet_virtio: no channels available for device syz [ 1146.620073][T20359] ªªªªªª speed is unknown, defaulting to 1000 [ 1147.036568][T20373] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1147.039197][T20373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1147.053293][T20373] vhci_hcd vhci_hcd.0: Device attached [ 1147.125097][T15427] Bluetooth: hci4: Frame reassembly failed (-84) [ 1147.342782][ T5948] usb 48-1: SetAddress Request (91) to port 0 [ 1147.344933][ T5948] usb 48-1: new SuperSpeed USB device number 91 using vhci_hcd [ 1147.919747][T20374] vhci_hcd: connection reset by peer [ 1147.925235][T15427] vhci_hcd vhci_hcd.5: stop threads [ 1147.926979][T15427] vhci_hcd vhci_hcd.5: release socket [ 1147.933179][T15427] vhci_hcd vhci_hcd.5: disconnect device [ 1148.260401][ T6287] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 1148.329461][T20384] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1148.331668][T20384] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1148.334570][T20384] vhci_hcd vhci_hcd.0: Device attached [ 1148.426592][ T6287] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 1148.429319][ T6287] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.432467][ T6287] usb 9-1: config 0 has no interface number 0 [ 1148.442659][ T6287] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1148.446081][ T6287] usb 9-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1148.451398][ T6287] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1148.463466][ T6287] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.475160][ T6287] usb 9-1: config 0 descriptor?? [ 1148.493737][ T6287] ldusb 9-1:0.55: Interrupt in endpoint not found [ 1148.545919][T20385] vhci_hcd: connection closed [ 1148.546154][T15427] vhci_hcd vhci_hcd.2: stop threads [ 1148.550378][T15427] vhci_hcd vhci_hcd.2: release socket [ 1148.552940][T15427] vhci_hcd vhci_hcd.2: disconnect device [ 1148.602698][ T9292] usb 42-1: enqueue for inactive port 0 [ 1148.938802][T20393] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1148.941616][T20393] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1148.945449][T20393] vhci_hcd vhci_hcd.0: Device attached [ 1149.093741][ T9292] usb usb42-port1: attempt power cycle [ 1149.162640][T17677] Bluetooth: hci4: command 0x1003 tx timeout [ 1149.165091][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1149.272830][ T77] usb 40-1: SetAddress Request (115) to port 0 [ 1149.275648][ T77] usb 40-1: new SuperSpeed USB device number 115 using vhci_hcd [ 1149.563251][T20394] vhci_hcd: connection reset by peer [ 1149.608032][ T3349] vhci_hcd vhci_hcd.1: stop threads [ 1149.610032][ T3349] vhci_hcd vhci_hcd.1: release socket [ 1149.618533][T20403] netlink: 'syz.2.2688': attribute type 13 has an invalid length. [ 1149.626084][ T3349] vhci_hcd vhci_hcd.1: disconnect device [ 1149.646551][T20403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1149.684675][ T9292] usb usb42-port1: unable to enumerate USB device [ 1150.260303][ T5941] Bluetooth: hci3: Malformed Event: 0x02 [ 1150.526397][T20413] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1150.528773][T20413] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1150.542187][T20413] vhci_hcd vhci_hcd.0: Device attached [ 1150.711106][T20423] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1150.713424][T20423] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1150.728479][T20423] vhci_hcd vhci_hcd.0: Device attached [ 1150.895292][T20427] bridge1: entered allmulticast mode [ 1150.990292][T20414] vhci_hcd: connection closed [ 1150.990925][ T63] vhci_hcd vhci_hcd.1: stop threads [ 1150.994716][ T63] vhci_hcd vhci_hcd.1: release socket [ 1150.996426][ T63] vhci_hcd vhci_hcd.1: disconnect device [ 1151.042888][ T6952] usb 9-1: USB disconnect, device number 7 [ 1151.179094][T20424] vhci_hcd: connection closed [ 1151.179536][ T63] vhci_hcd vhci_hcd.5: stop threads [ 1151.182936][ T63] vhci_hcd vhci_hcd.5: release socket [ 1151.184675][ T63] vhci_hcd vhci_hcd.5: disconnect device [ 1151.472794][ T54] usb 46-1: device descriptor read/8, error -110 [ 1151.963305][ T54] usb usb46-port1: attempt power cycle [ 1152.359017][T20444] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1152.361162][T20444] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1152.377092][T20444] vhci_hcd vhci_hcd.0: Device attached [ 1152.432776][ T5948] usb 48-1: device descriptor read/8, error -110 [ 1152.710504][ T54] usb 46-1: SetAddress Request (113) to port 0 [ 1152.712650][ T54] usb 46-1: new SuperSpeed USB device number 113 using vhci_hcd [ 1152.833382][ T5948] usb usb48-port1: attempt power cycle [ 1153.064545][T20452] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1153.066659][T20452] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1153.069515][T20452] vhci_hcd vhci_hcd.0: Device attached [ 1153.182710][ T5948] usb 48-1: SetAddress Request (93) to port 0 [ 1153.184744][ T5948] usb 48-1: new SuperSpeed USB device number 93 using vhci_hcd [ 1153.262199][T20453] vhci_hcd: connection reset by peer [ 1153.264661][ T63] vhci_hcd vhci_hcd.5: stop threads [ 1153.266418][ T63] vhci_hcd vhci_hcd.5: release socket [ 1153.268541][ T63] vhci_hcd vhci_hcd.5: disconnect device [ 1153.642035][T20445] vhci_hcd: connection reset by peer [ 1153.644296][ T3349] vhci_hcd vhci_hcd.4: stop threads [ 1153.646575][ T3349] vhci_hcd vhci_hcd.4: release socket [ 1153.648963][ T3349] vhci_hcd vhci_hcd.4: disconnect device [ 1153.712366][T20460] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1153.714453][T20460] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1153.726598][T20460] vhci_hcd vhci_hcd.0: Device attached [ 1153.995717][T20461] vhci_hcd: connection closed [ 1153.996280][T15247] vhci_hcd vhci_hcd.2: stop threads [ 1154.001298][T15247] vhci_hcd vhci_hcd.2: release socket [ 1154.004152][T15247] vhci_hcd vhci_hcd.2: disconnect device [ 1154.086154][ T5941] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 1154.143097][T14977] hid_parser_main: 8 callbacks suppressed [ 1154.143119][T14977] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1154.174062][T14977] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1154.352914][ T77] usb 40-1: device descriptor read/8, error -110 [ 1154.743284][ T77] usb usb40-port1: attempt power cycle [ 1154.807250][T20485] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1154.809441][T20485] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1154.812342][T20485] vhci_hcd vhci_hcd.0: Device attached [ 1154.867295][T20489] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1154.869993][T20489] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1154.886253][T20489] vhci_hcd vhci_hcd.0: Device attached [ 1155.350437][T20486] vhci_hcd: connection closed [ 1155.356022][ T6704] vhci_hcd vhci_hcd.4: stop threads [ 1155.359868][ T6704] vhci_hcd vhci_hcd.4: release socket [ 1155.368879][ T6704] vhci_hcd vhci_hcd.4: disconnect device [ 1155.482666][ T77] usb 40-1: SetAddress Request (117) to port 0 [ 1155.598824][T20498] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1155.601666][T20498] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1155.605425][T20498] vhci_hcd vhci_hcd.0: Device attached [ 1155.617456][ T77] usb 40-1: new SuperSpeed USB device number 117 using vhci_hcd [ 1156.003261][T20499] vhci_hcd: connection closed [ 1156.003566][ T6704] vhci_hcd vhci_hcd.5: stop threads [ 1156.007383][ T6704] vhci_hcd vhci_hcd.5: release socket [ 1156.009289][ T6704] vhci_hcd vhci_hcd.5: disconnect device [ 1156.117685][T20490] vhci_hcd: connection reset by peer [ 1156.119844][ T6704] vhci_hcd vhci_hcd.1: stop threads [ 1156.122220][ T6704] vhci_hcd vhci_hcd.1: release socket [ 1156.125570][ T6704] vhci_hcd vhci_hcd.1: disconnect device [ 1156.444563][T20510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1157.654730][T20530] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1157.659598][T20530] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1157.703893][T20530] vhci_hcd vhci_hcd.0: Device attached [ 1157.813564][ T54] usb 46-1: device descriptor read/8, error -110 [ 1158.032774][ T54] usb usb46-port1: unable to enumerate USB device [ 1158.205159][T20543] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1158.205179][T20543] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1158.205638][T20543] vhci_hcd vhci_hcd.0: Device attached [ 1158.282767][ T5948] usb 48-1: device descriptor read/8, error -110 [ 1158.428503][T20544] vhci_hcd: connection closed [ 1158.433392][T14923] vhci_hcd vhci_hcd.2: stop threads [ 1158.437098][T14923] vhci_hcd vhci_hcd.2: release socket [ 1158.440184][T14923] vhci_hcd vhci_hcd.2: disconnect device [ 1158.683627][ T5948] usb usb48-port1: unable to enumerate USB device [ 1158.877953][ T25] block nbd0: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 510 seconds [ 1158.882533][ T25] block nbd0: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 510 seconds [ 1158.887548][ T25] block nbd0: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 510 seconds [ 1158.892256][ T25] block nbd0: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 510 seconds [ 1159.040991][T20531] vhci_hcd: connection closed [ 1159.041264][ T3349] vhci_hcd vhci_hcd.1: stop threads [ 1159.050041][ T3349] vhci_hcd vhci_hcd.1: release socket [ 1159.052450][ T3349] vhci_hcd vhci_hcd.1: disconnect device [ 1159.062505][ T5941] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 1159.289648][T20553] siw: device registration error -23 [ 1159.299501][T20553] wireguard3: entered promiscuous mode [ 1159.301504][T20553] wireguard3: entered allmulticast mode [ 1159.469737][T20561] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1159.469755][T20561] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1159.470445][T20561] vhci_hcd vhci_hcd.0: Device attached [ 1159.633581][T20566] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1159.635682][T20566] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1159.657108][T20566] vhci_hcd vhci_hcd.0: Device attached [ 1159.866581][ T6704] Bluetooth: hci4: Frame reassembly failed (-84) [ 1159.869219][ T6704] Bluetooth: hci4: Frame reassembly failed (-84) [ 1159.932772][ T6031] usb 46-1: SetAddress Request (114) to port 0 [ 1159.936352][ T6031] usb 46-1: new SuperSpeed USB device number 114 using vhci_hcd [ 1160.046067][T20562] vhci_hcd: connection closed [ 1160.057776][ T6704] vhci_hcd vhci_hcd.5: stop threads [ 1160.067112][ T6704] vhci_hcd vhci_hcd.5: release socket [ 1160.076804][ T6704] vhci_hcd vhci_hcd.5: disconnect device [ 1160.648888][T20580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1160.672842][ T77] usb 40-1: device descriptor read/8, error -110 [ 1161.095593][ T77] usb usb40-port1: unable to enumerate USB device [ 1161.181576][T20567] vhci_hcd: connection reset by peer [ 1161.185051][T15427] vhci_hcd vhci_hcd.4: stop threads [ 1161.187487][T15427] vhci_hcd vhci_hcd.4: release socket [ 1161.190065][T15427] vhci_hcd vhci_hcd.4: disconnect device [ 1161.872820][T17677] Bluetooth: hci4: command 0x1003 tx timeout [ 1161.876141][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1162.079941][T20603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1162.246992][T20601] bridge1: entered allmulticast mode [ 1162.994228][T20618] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1162.996941][T20618] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1163.054406][T20618] vhci_hcd vhci_hcd.0: Device attached [ 1163.085968][T20623] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1163.088110][T20623] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1163.092533][T20623] vhci_hcd vhci_hcd.0: Device attached [ 1163.372919][ T9292] usb 42-1: SetAddress Request (18) to port 0 [ 1163.372972][ T9292] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1163.535344][ T5948] usb 48-1: SetAddress Request (95) to port 0 [ 1163.538070][ T5948] usb 48-1: new SuperSpeed USB device number 95 using vhci_hcd [ 1163.654000][T20620] vhci_hcd: connection reset by peer [ 1163.673128][ T12] vhci_hcd vhci_hcd.2: stop threads [ 1163.675549][ T12] vhci_hcd vhci_hcd.2: release socket [ 1163.680563][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 1163.709126][T20633] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1163.711601][T20633] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1163.765840][T20633] vhci_hcd vhci_hcd.0: Device attached [ 1164.095237][T20634] vhci_hcd: connection closed [ 1164.096649][T14975] vhci_hcd vhci_hcd.4: stop threads [ 1164.104985][T14975] vhci_hcd vhci_hcd.4: release socket [ 1164.112853][T14975] vhci_hcd vhci_hcd.4: disconnect device [ 1164.257198][ T54] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1164.269173][ T54] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1164.283612][ T3349] Bluetooth: hci4: Frame reassembly failed (-84) [ 1164.286207][ T3349] Bluetooth: hci4: Frame reassembly failed (-84) [ 1164.293331][ T3349] Bluetooth: hci4: Frame reassembly failed (-84) [ 1164.574315][T20625] vhci_hcd: connection reset by peer [ 1164.576390][T14975] vhci_hcd vhci_hcd.5: stop threads [ 1164.578507][T14975] vhci_hcd vhci_hcd.5: release socket [ 1164.580535][T14975] vhci_hcd vhci_hcd.5: disconnect device [ 1164.992769][ T6031] usb 46-1: device descriptor read/8, error -110 [ 1165.384270][ T6031] usb usb46-port1: attempt power cycle [ 1165.953147][ T6031] usb usb46-port1: unable to enumerate USB device [ 1166.352866][T17677] Bluetooth: hci4: command 0x1003 tx timeout [ 1166.356037][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1166.467435][ T5941] Bluetooth: hci3: unexpected subevent 0x1a length: 10 > 6 [ 1166.795589][T20674] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1166.797721][T20674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1166.800519][T20674] vhci_hcd vhci_hcd.0: Device attached [ 1166.834146][ T40] audit: type=1804 audit(1166.736:2082): pid=20674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2741" name="/newroot/689/file0/file1" dev="overlay" ino=3688 res=1 errno=0 [ 1167.002659][T20677] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1167.004644][T20677] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1167.007415][T20677] vhci_hcd vhci_hcd.0: Device attached [ 1167.127740][T20682] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1167.129975][T20682] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1167.133125][T20682] vhci_hcd vhci_hcd.0: Device attached [ 1167.140314][ T8733] Bluetooth: hci4: Frame reassembly failed (-84) [ 1167.150504][ T8733] Bluetooth: hci4: Frame reassembly failed (-84) [ 1167.159425][ T8733] Bluetooth: hci4: Frame reassembly failed (-84) [ 1167.282656][ T54] usb 40-1: SetAddress Request (119) to port 0 [ 1167.284902][ T54] usb 40-1: new SuperSpeed USB device number 119 using vhci_hcd [ 1167.347096][T17677] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1167.478279][ T8733] Bluetooth: hci5: Frame reassembly failed (-84) [ 1167.481162][ T8733] Bluetooth: hci5: Frame reassembly failed (-84) [ 1167.484307][ T8733] Bluetooth: hci5: Frame reassembly failed (-84) [ 1167.487178][ T8733] Bluetooth: hci5: Frame reassembly failed (-84) [ 1167.622810][T20683] vhci_hcd: connection closed [ 1167.623054][ T8733] vhci_hcd vhci_hcd.5: stop threads [ 1167.627488][ T8733] vhci_hcd vhci_hcd.5: release socket [ 1167.630005][ T8733] vhci_hcd vhci_hcd.5: disconnect device [ 1167.635106][T20680] vhci_hcd: connection reset by peer [ 1167.639321][ T8733] vhci_hcd vhci_hcd.1: stop threads [ 1167.641101][ T8733] vhci_hcd vhci_hcd.1: release socket [ 1167.643172][ T8733] vhci_hcd vhci_hcd.1: disconnect device [ 1168.050892][T20675] vhci_hcd: connection closed [ 1168.052394][T15427] vhci_hcd vhci_hcd.2: stop threads [ 1168.072873][T15427] vhci_hcd vhci_hcd.2: release socket [ 1168.076051][T15427] vhci_hcd vhci_hcd.2: disconnect device [ 1168.432769][ T9292] usb 42-1: device descriptor read/8, error -110 [ 1168.602681][ T5948] usb 48-1: device descriptor read/8, error -110 [ 1168.843527][ T9292] usb usb42-port1: attempt power cycle [ 1168.912724][T14977] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1169.004567][ T5948] usb usb48-port1: attempt power cycle [ 1169.153248][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1169.474400][T17677] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1169.596407][ T5948] usb usb48-port1: unable to enumerate USB device [ 1169.638780][T20720] bridge1: entered allmulticast mode [ 1169.867486][T20723] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1169.867503][T20723] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1169.867720][T20723] vhci_hcd vhci_hcd.0: Device attached [ 1169.993020][ T9292] usb 42-1: SetAddress Request (20) to port 0 [ 1169.995138][ T9292] usb 42-1: new SuperSpeed USB device number 20 using vhci_hcd [ 1171.055990][T20754] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1171.058161][T20754] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1171.060871][T20754] vhci_hcd vhci_hcd.0: Device attached [ 1171.118188][T20724] vhci_hcd: connection reset by peer [ 1171.120793][T14975] vhci_hcd vhci_hcd.2: stop threads [ 1171.122493][T14975] vhci_hcd vhci_hcd.2: release socket [ 1171.132940][T14975] vhci_hcd vhci_hcd.2: disconnect device [ 1171.155336][T20758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.160095][T20758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.372723][ T6287] usb 48-1: SetAddress Request (99) to port 0 [ 1171.374693][ T6287] usb 48-1: new SuperSpeed USB device number 99 using vhci_hcd [ 1171.692472][T20764] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1171.694607][T20764] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1171.697348][T20764] vhci_hcd vhci_hcd.0: Device attached [ 1171.933805][T20765] vhci_hcd: connection closed [ 1171.934189][T14975] vhci_hcd vhci_hcd.4: stop threads [ 1171.938501][T14975] vhci_hcd vhci_hcd.4: release socket [ 1171.940894][T14975] vhci_hcd vhci_hcd.4: disconnect device [ 1171.982746][ T5948] usb 46-1: enqueue for inactive port 0 [ 1172.221858][T20755] vhci_hcd: connection reset by peer [ 1172.224672][ T63] vhci_hcd vhci_hcd.5: stop threads [ 1172.227285][ T63] vhci_hcd vhci_hcd.5: release socket [ 1172.229675][ T63] vhci_hcd vhci_hcd.5: disconnect device [ 1172.352840][ T54] usb 40-1: device descriptor read/8, error -110 [ 1172.473239][ T5948] usb usb46-port1: attempt power cycle [ 1172.753137][ T54] usb usb40-port1: attempt power cycle [ 1173.043515][ T5948] usb usb46-port1: unable to enumerate USB device [ 1173.324120][ T54] usb usb40-port1: unable to enumerate USB device [ 1173.690597][T17677] Bluetooth: hci2: unexpected event for opcode 0x040d [ 1174.123815][T20820] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1174.126256][T20820] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1174.142124][T20820] vhci_hcd vhci_hcd.0: Device attached [ 1174.482724][T14977] usb 46-1: SetAddress Request (122) to port 0 [ 1174.484778][T14977] usb 46-1: new SuperSpeed USB device number 122 using vhci_hcd [ 1174.512287][T20839] siw: device registration error -23 [ 1174.534752][T20839] wireguard3: entered promiscuous mode [ 1174.537412][T20839] wireguard3: entered allmulticast mode [ 1175.059628][T20821] vhci_hcd: connection reset by peer [ 1175.072949][ T3349] vhci_hcd vhci_hcd.4: stop threads [ 1175.075376][ T3349] vhci_hcd vhci_hcd.4: release socket [ 1175.077844][ T3349] vhci_hcd vhci_hcd.4: disconnect device [ 1175.082669][ T9292] usb 42-1: device descriptor read/8, error -110 [ 1175.513214][ T9292] usb usb42-port1: unable to enumerate USB device [ 1175.820251][T20876] siw: device registration error -23 [ 1175.863321][T20876] wireguard3: entered promiscuous mode [ 1175.865166][T20876] wireguard3: entered allmulticast mode [ 1175.884809][T20878] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1175.887697][T20878] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1175.897570][T20878] vhci_hcd vhci_hcd.0: Device attached [ 1176.432710][ T6287] usb 48-1: device descriptor read/8, error -110 [ 1176.647381][T20881] vhci_hcd: connection closed [ 1176.647573][T15247] vhci_hcd vhci_hcd.4: stop threads [ 1176.650862][T15247] vhci_hcd vhci_hcd.4: release socket [ 1176.652994][T15247] vhci_hcd vhci_hcd.4: disconnect device [ 1176.819094][T20898] netlink: 'syz.2.2811': attribute type 13 has an invalid length. [ 1176.830276][T20898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1176.843007][ T6287] usb usb48-port1: attempt power cycle [ 1177.416302][ T6287] usb usb48-port1: unable to enumerate USB device [ 1177.830392][T20912] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1177.833296][T20912] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1177.837488][T20912] vhci_hcd vhci_hcd.0: Device attached [ 1178.244292][T20913] vhci_hcd: connection closed [ 1178.244905][ T6704] vhci_hcd vhci_hcd.4: stop threads [ 1178.248321][ T6704] vhci_hcd vhci_hcd.4: release socket [ 1178.250898][ T6704] vhci_hcd vhci_hcd.4: disconnect device [ 1178.355013][T20926] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1178.357881][T20926] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1178.361517][T20927] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1178.364309][T20927] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1178.372678][T20927] vhci_hcd vhci_hcd.0: Device attached [ 1178.383330][T20926] vhci_hcd vhci_hcd.0: Device attached [ 1178.611730][T20929] vhci_hcd: connection closed [ 1178.612493][T15427] vhci_hcd vhci_hcd.5: stop threads [ 1178.615884][T15427] vhci_hcd vhci_hcd.5: release socket [ 1178.617703][ T6952] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 1178.620254][T15427] vhci_hcd vhci_hcd.5: disconnect device [ 1178.636161][ T40] audit: type=1804 audit(1178.536:2083): pid=20927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2816" name="/newroot/295/file0/file1" dev="overlay" ino=1570 res=1 errno=0 [ 1178.935652][T20928] vhci_hcd: connection reset by peer [ 1178.938358][ T3349] vhci_hcd vhci_hcd.1: stop threads [ 1178.940614][ T3349] vhci_hcd vhci_hcd.1: release socket [ 1178.943015][ T3349] vhci_hcd vhci_hcd.1: disconnect device [ 1179.655437][T14977] usb 46-1: device descriptor read/8, error -110 [ 1179.902621][ T77] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1180.062737][ T77] usb 7-1: Using ep0 maxpacket: 32 [ 1180.066419][ T77] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 1180.074409][ T77] usb 7-1: config 0 has no interface number 0 [ 1180.076660][ T77] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1180.080199][ T77] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1180.084343][ T77] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1180.089791][ T77] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1180.093292][ T77] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1180.100878][ T77] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1180.103895][ T77] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.106638][ T77] usb 7-1: Product: syz [ 1180.108356][ T77] usb 7-1: Manufacturer: syz [ 1180.113839][ T77] usb 7-1: SerialNumber: syz [ 1180.123072][ T77] usb 7-1: config 0 descriptor?? [ 1180.126356][T20953] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1180.134457][ T77] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input214 [ 1180.166225][ T5336] usb 7-1: BOGUS urb xfer, pipe 1 != type 3 [ 1180.180276][ C3] bcm5974 7-1:0.119: trackpad urb failed: -1 [ 1180.343407][T14977] usb usb46-port1: attempt power cycle [ 1180.400439][ T6287] usb 7-1: USB disconnect, device number 9 [ 1180.998842][T14977] usb usb46-port1: unable to enumerate USB device [ 1181.167480][T20979] bridge0: entered allmulticast mode [ 1181.795508][T20990] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1181.797670][T20990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1181.802081][T20990] vhci_hcd vhci_hcd.0: Device attached [ 1181.939354][ T40] audit: type=1804 audit(1181.836:2084): pid=20990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2834" name="/newroot/297/file0/file1" dev="overlay" ino=1590 res=1 errno=0 [ 1182.044270][T14977] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 1182.388050][T20991] vhci_hcd: connection reset by peer [ 1182.390775][ T8733] vhci_hcd vhci_hcd.5: stop threads [ 1182.392344][ T8733] vhci_hcd vhci_hcd.5: release socket [ 1182.394813][ T8733] vhci_hcd vhci_hcd.5: disconnect device [ 1183.702679][ T6952] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1184.031123][T21063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1184.632796][T21083] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1184.637445][T21083] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1184.640246][T21083] vhci_hcd vhci_hcd.0: Device attached [ 1184.735793][T21086] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1184.737897][T21086] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1184.740711][T21086] vhci_hcd vhci_hcd.0: Device attached [ 1184.922814][ T6952] usb 46-1: SetAddress Request (126) to port 0 [ 1184.925485][ T6952] usb 46-1: new SuperSpeed USB device number 126 using vhci_hcd [ 1185.141135][T21084] vhci_hcd: connection reset by peer [ 1185.143496][T15427] vhci_hcd vhci_hcd.4: stop threads [ 1185.145289][T15427] vhci_hcd vhci_hcd.4: release socket [ 1185.147254][T15427] vhci_hcd vhci_hcd.4: disconnect device [ 1185.314124][T21087] vhci_hcd: connection closed [ 1185.314566][T15427] vhci_hcd vhci_hcd.5: stop threads [ 1185.318477][T15427] vhci_hcd vhci_hcd.5: release socket [ 1185.321100][T15427] vhci_hcd vhci_hcd.5: disconnect device [ 1185.754580][T21111] 9pnet_virtio: no channels available for device syz [ 1186.666525][T21124] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1186.668877][T21124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1186.671823][T21124] vhci_hcd vhci_hcd.0: Device attached [ 1186.848071][T17677] Bluetooth: hci2: Malformed LE Event: 0x1d [ 1186.873066][T21130] vhci_hcd: connection closed [ 1186.873297][ T63] vhci_hcd vhci_hcd.1: stop threads [ 1186.877106][ T63] vhci_hcd vhci_hcd.1: release socket [ 1186.884639][ T63] vhci_hcd vhci_hcd.1: disconnect device [ 1186.915887][T21141] geneve2: entered promiscuous mode [ 1186.918335][T21141] geneve2: entered allmulticast mode [ 1186.922073][T15247] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1186.929710][T15247] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1186.936790][T15247] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1186.940566][T15247] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1187.145016][T14977] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1187.304249][T21169] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1187.306375][T21169] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1187.308968][T21169] vhci_hcd vhci_hcd.0: Device attached [ 1187.394940][ T63] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.399446][ T63] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.405494][ T63] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.410962][ T63] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.698132][T21193] netlink: 'syz.2.2904': attribute type 12 has an invalid length. [ 1187.706402][T21196] netlink: 'syz.5.2907': attribute type 10 has an invalid length. [ 1187.899323][T21170] vhci_hcd: connection closed [ 1187.914925][ T63] vhci_hcd vhci_hcd.4: stop threads [ 1187.919568][ T63] vhci_hcd vhci_hcd.4: release socket [ 1187.922319][ T63] vhci_hcd vhci_hcd.4: disconnect device [ 1187.926933][T21209] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1188.412792][T21219] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1188.415704][T21219] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1188.432846][T21219] vhci_hcd vhci_hcd.0: Device attached [ 1188.446902][ T6009] usb usb48-port1: attempt power cycle [ 1188.631173][T21237] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1188.699396][T21220] vhci_hcd: connection closed [ 1188.699777][ T63] vhci_hcd vhci_hcd.1: stop threads [ 1188.703450][ T63] vhci_hcd vhci_hcd.1: release socket [ 1188.705805][ T63] vhci_hcd vhci_hcd.1: disconnect device [ 1188.712736][ T54] usb 40-1: enqueue for inactive port 0 [ 1189.012768][ T25] block nbd0: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 540 seconds [ 1189.013196][ T6009] usb usb48-port1: unable to enumerate USB device [ 1189.016510][ T25] block nbd0: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 540 seconds [ 1189.024739][ T25] block nbd0: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 540 seconds [ 1189.029460][ T25] block nbd0: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 540 seconds [ 1189.113671][T21253] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1189.116546][T21253] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1189.119502][T21253] vhci_hcd vhci_hcd.0: Device attached [ 1189.214048][ T54] usb usb40-port1: attempt power cycle [ 1189.392745][ T6009] usb 42-1: SetAddress Request (22) to port 0 [ 1189.395559][ T6009] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1189.583361][T21254] vhci_hcd: connection reset by peer [ 1189.585367][ T63] vhci_hcd vhci_hcd.2: stop threads [ 1189.587049][ T63] vhci_hcd vhci_hcd.2: release socket [ 1189.588873][ T63] vhci_hcd vhci_hcd.2: disconnect device [ 1189.783608][ T54] usb usb40-port1: unable to enumerate USB device [ 1190.001495][T21277] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1190.004303][T21277] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1190.008487][T21277] vhci_hcd vhci_hcd.0: Device attached [ 1190.380764][T21278] vhci_hcd: connection reset by peer [ 1190.385259][ T63] vhci_hcd vhci_hcd.4: stop threads [ 1190.396931][ T63] vhci_hcd vhci_hcd.4: release socket [ 1190.405611][ T6952] usb 46-1: device descriptor read/8, error -110 [ 1190.406789][ T63] vhci_hcd vhci_hcd.4: disconnect device [ 1190.532251][T21289] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1190.803331][ T6952] usb usb46-port1: attempt power cycle [ 1191.263319][T21311] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1191.266126][T21311] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1191.269676][T21311] vhci_hcd vhci_hcd.0: Device attached [ 1191.395541][T21319] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1191.397701][T21319] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1191.400472][T21319] vhci_hcd vhci_hcd.0: Device attached [ 1191.419833][ T6952] usb usb46-port1: unable to enumerate USB device [ 1191.534798][ T6031] usb 48-1: SetAddress Request (108) to port 0 [ 1191.538242][ T6031] usb 48-1: new SuperSpeed USB device number 108 using vhci_hcd [ 1191.610449][T21320] vhci_hcd: connection closed [ 1191.610747][T15427] vhci_hcd vhci_hcd.1: stop threads [ 1191.620252][T15427] vhci_hcd vhci_hcd.1: release socket [ 1191.623683][T15427] vhci_hcd vhci_hcd.1: disconnect device [ 1191.683186][T21312] vhci_hcd: connection reset by peer [ 1191.693481][T15427] vhci_hcd vhci_hcd.5: stop threads [ 1191.695746][T15427] vhci_hcd vhci_hcd.5: release socket [ 1191.700422][T21329] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1191.702590][T21329] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1191.702866][T15427] vhci_hcd vhci_hcd.5: disconnect device [ 1191.709230][T21329] vhci_hcd vhci_hcd.0: Device attached [ 1191.947125][T21330] vhci_hcd: connection closed [ 1191.947377][T15427] vhci_hcd vhci_hcd.4: stop threads [ 1191.951345][T15427] vhci_hcd vhci_hcd.4: release socket [ 1191.953683][T15427] vhci_hcd vhci_hcd.4: disconnect device [ 1191.972783][ T77] usb 46-1: enqueue for inactive port 0 [ 1192.463612][ T77] usb usb46-port1: attempt power cycle [ 1192.769895][T17677] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 1193.033292][ T77] usb usb46-port1: unable to enumerate USB device [ 1193.226573][T21375] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1193.228787][T21375] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1193.232942][T21375] vhci_hcd vhci_hcd.0: Device attached [ 1193.386504][T21379] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1193.388627][T21379] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1193.391309][T21379] vhci_hcd vhci_hcd.0: Device attached [ 1193.566502][ T40] audit: type=1804 audit(1193.406:2085): pid=21375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2962" name="/newroot/345/file0/file1" dev="overlay" ino=1843 res=1 errno=0 [ 1193.585468][T21401] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1193.706133][ T6952] usb 46-1: SetAddress Request (8) to port 0 [ 1193.708720][ T6952] usb 46-1: new SuperSpeed USB device number 8 using vhci_hcd [ 1193.816975][T21383] vhci_hcd: connection reset by peer [ 1193.827807][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1193.830069][ T12] vhci_hcd vhci_hcd.4: release socket [ 1193.833480][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1194.069008][T21411] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1194.071849][T21411] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1194.082896][T21411] vhci_hcd vhci_hcd.0: Device attached [ 1194.297026][T21412] vhci_hcd: connection closed [ 1194.297277][T15427] vhci_hcd vhci_hcd.2: stop threads [ 1194.301073][T15427] vhci_hcd vhci_hcd.2: release socket [ 1194.303533][T15427] vhci_hcd vhci_hcd.2: disconnect device [ 1194.342273][T21376] vhci_hcd: connection closed [ 1194.346382][T15427] vhci_hcd vhci_hcd.5: stop threads [ 1194.349647][T15427] vhci_hcd vhci_hcd.5: release socket [ 1194.363110][T15427] vhci_hcd vhci_hcd.5: disconnect device [ 1194.432799][ T6009] usb 42-1: device descriptor read/8, error -110 [ 1194.489424][T21419] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1194.492380][T21419] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1194.492733][T21419] vhci_hcd vhci_hcd.0: Device attached [ 1194.730351][T21420] vhci_hcd: connection closed [ 1194.730750][ T8733] vhci_hcd vhci_hcd.1: stop threads [ 1194.735567][ T8733] vhci_hcd vhci_hcd.1: release socket [ 1194.738112][ T8733] vhci_hcd vhci_hcd.1: disconnect device [ 1194.762852][ T77] usb 40-1: enqueue for inactive port 0 [ 1194.831658][ T6009] usb usb42-port1: attempt power cycle [ 1195.173744][T21453] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1195.176285][T21453] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1195.179143][T21453] vhci_hcd vhci_hcd.0: Device attached [ 1195.303144][ T77] usb usb40-port1: attempt power cycle [ 1195.437713][ T6009] usb usb42-port1: unable to enumerate USB device [ 1195.647499][T21454] vhci_hcd: connection closed [ 1195.647756][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1195.650981][ T12] vhci_hcd vhci_hcd.4: release socket [ 1195.653256][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1195.883720][ T77] usb usb40-port1: unable to enumerate USB device [ 1195.903434][ T8020] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1196.062680][ T8020] usb 7-1: Using ep0 maxpacket: 16 [ 1196.066741][ T8020] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.071474][ T8020] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.076400][ T8020] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1196.080211][ T8020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.087752][ T8020] usb 7-1: config 0 descriptor?? [ 1196.312356][ T8020] usbhid 7-1:0.0: can't add hid device: -71 [ 1196.319740][ T8020] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1196.332701][ T8020] usb 7-1: USB disconnect, device number 10 [ 1196.603056][ T6031] usb 48-1: device descriptor read/8, error -110 [ 1196.759388][T21513] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1196.762228][T21513] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1196.772927][T21513] vhci_hcd vhci_hcd.0: Device attached [ 1197.004304][ T6031] usb usb48-port1: attempt power cycle [ 1197.043217][ T9292] usb 40-1: SetAddress Request (7) to port 0 [ 1197.046217][ T9292] usb 40-1: new SuperSpeed USB device number 7 using vhci_hcd [ 1197.072840][ T6287] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1197.363629][T21514] vhci_hcd: connection reset by peer [ 1197.369756][ T8733] vhci_hcd vhci_hcd.1: stop threads [ 1197.371361][ T8733] vhci_hcd vhci_hcd.1: release socket [ 1197.373116][ T8733] vhci_hcd vhci_hcd.1: disconnect device [ 1198.343589][ T6031] usb usb48-port1: unable to enumerate USB device [ 1198.561802][T21589] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1198.564483][T21589] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1198.570503][T21589] vhci_hcd vhci_hcd.0: Device attached [ 1198.832701][ T6952] usb 46-1: device descriptor read/8, error -110 [ 1199.090736][T21590] vhci_hcd: connection closed [ 1199.091893][T21608] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1199.092792][T15427] vhci_hcd vhci_hcd.1: stop threads [ 1199.093490][T21608] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1199.096368][T15427] vhci_hcd vhci_hcd.1: release socket [ 1199.102787][T21608] vhci_hcd vhci_hcd.0: Device attached [ 1199.104029][T15427] vhci_hcd vhci_hcd.1: disconnect device [ 1199.223920][ T6952] usb usb46-port1: attempt power cycle [ 1199.370363][T21616] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1199.372549][T21616] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1199.376244][ T6031] usb 48-1: SetAddress Request (112) to port 0 [ 1199.378953][ T6031] usb 48-1: new SuperSpeed USB device number 112 using vhci_hcd [ 1199.381620][T21616] vhci_hcd vhci_hcd.0: Device attached [ 1199.432650][T21609] vhci_hcd: connection reset by peer [ 1199.435155][T14923] vhci_hcd vhci_hcd.5: stop threads [ 1199.437212][T14923] vhci_hcd vhci_hcd.5: release socket [ 1199.439288][T14923] vhci_hcd vhci_hcd.5: disconnect device [ 1199.610870][ T6952] usb 46-1: SetAddress Request (10) to port 0 [ 1199.629845][T21617] vhci_hcd: connection closed [ 1199.630047][T14923] vhci_hcd vhci_hcd.4: stop threads [ 1199.634529][T14923] vhci_hcd vhci_hcd.4: release socket [ 1199.636402][ T6952] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1199.636499][T14923] vhci_hcd vhci_hcd.4: disconnect device [ 1199.665228][ T6952] usb 46-1: enqueue for inactive port 0 [ 1200.153196][ T6952] usb usb46-port1: unable to enumerate USB device [ 1200.407730][T21642] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1200.513733][T21652] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1200.516409][T21652] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1200.532772][T21652] vhci_hcd vhci_hcd.0: Device attached [ 1200.812685][ T6287] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1200.937512][T21665] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1200.939637][T21665] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1200.942410][T21665] vhci_hcd vhci_hcd.0: Device attached [ 1200.963212][T21653] vhci_hcd: connection closed [ 1200.963518][ T12] vhci_hcd vhci_hcd.1: stop threads [ 1200.967673][ T12] vhci_hcd vhci_hcd.1: release socket [ 1200.969909][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 1200.974631][ T6287] usb 7-1: config 4 has an invalid interface number: 28 but max is 0 [ 1200.977619][ T6287] usb 7-1: config 4 has no interface number 0 [ 1200.988317][ T6287] usb 7-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 1200.991357][ T6287] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.003037][ T6287] usb 7-1: Product: syz [ 1201.004593][ T6287] usb 7-1: Manufacturer: syz [ 1201.006111][ T6287] usb 7-1: SerialNumber: syz [ 1201.029312][ T6287] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:4.28/input/input215 [ 1201.040557][T21669] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1201.042800][T21669] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1201.046575][T21669] vhci_hcd vhci_hcd.0: Device attached [ 1201.212820][ T6287] usb 46-1: SetAddress Request (12) to port 0 [ 1201.214938][ T6287] usb 46-1: new SuperSpeed USB device number 12 using vhci_hcd [ 1201.288448][ T5336] bcm5974 7-1:4.28: could not read from device [ 1201.288821][ T5948] usb 7-1: USB disconnect, device number 11 [ 1201.298199][T20041] bcm5974 7-1:4.28: could not read from device [ 1201.318845][T21666] vhci_hcd: connection reset by peer [ 1201.321179][ T8733] vhci_hcd vhci_hcd.4: stop threads [ 1201.323744][ T8733] vhci_hcd vhci_hcd.4: release socket [ 1201.325676][ T8733] vhci_hcd vhci_hcd.4: disconnect device [ 1201.336946][T20041] udevd[20041]: Error opening device "/dev/input/event4": No such file or directory [ 1201.344079][T20041] udevd[20041]: Unable to EVIOCGABS device "/dev/input/event4" [ 1201.347825][T20041] udevd[20041]: Unable to EVIOCGABS device "/dev/input/event4" [ 1201.351086][T20041] udevd[20041]: Unable to EVIOCGABS device "/dev/input/event4" [ 1201.354546][T20041] udevd[20041]: Unable to EVIOCGABS device "/dev/input/event4" [ 1201.413150][T21670] vhci_hcd: connection closed [ 1201.413334][ T8733] vhci_hcd vhci_hcd.5: stop threads [ 1201.416601][ T8733] vhci_hcd vhci_hcd.5: release socket [ 1201.422664][ T8733] vhci_hcd vhci_hcd.5: disconnect device [ 1202.125203][ T9292] usb 40-1: device descriptor read/8, error -110 [ 1202.149824][T21698] tipc: Enabling of bearer rejected, failed to enable media [ 1202.405050][T21717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.434198][T21717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.543536][ T9292] usb usb40-port1: attempt power cycle [ 1202.683533][ T6009] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1202.836104][ T6009] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1202.838927][ T6009] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.841852][ T6009] usb 10-1: Product: syz [ 1202.847918][ T6009] usb 10-1: Manufacturer: syz [ 1202.849981][ T6009] usb 10-1: SerialNumber: syz [ 1202.858148][ T6009] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1202.891084][ T6952] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1203.113494][ T9292] usb usb40-port1: unable to enumerate USB device [ 1203.237095][T17677] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1203.340788][T21744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.345490][T21744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.501971][ T54] usb 10-1: USB disconnect, device number 8 [ 1203.602710][ T9292] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1203.689225][T21754] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1203.692029][T21754] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1203.695835][T21754] vhci_hcd vhci_hcd.0: Device attached [ 1203.752843][ T9292] usb 9-1: Using ep0 maxpacket: 32 [ 1203.756992][ T9292] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1203.763672][ T9292] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1203.767604][ T9292] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1203.771384][ T9292] usb 9-1: Product: syz [ 1203.774127][ T9292] usb 9-1: Manufacturer: syz [ 1203.776382][ T9292] usb 9-1: SerialNumber: syz [ 1203.780846][ T9292] usb 9-1: config 0 descriptor?? [ 1203.784528][T21746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1203.789119][ T9292] hub 9-1:0.0: bad descriptor, ignoring hub [ 1203.791757][ T9292] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1203.962733][ T77] usb 42-1: SetAddress Request (26) to port 0 [ 1203.965436][ T77] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1204.112926][ T8020] usb 9-1: USB disconnect, device number 8 [ 1204.113666][ T6952] usb 10-1: Service connection timeout for: 256 [ 1204.120848][ T6952] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1204.125368][ T6952] ath9k_htc: Failed to initialize the device [ 1204.129493][T21766] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1204.132010][T21766] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1204.135856][T21766] vhci_hcd vhci_hcd.0: Device attached [ 1204.138587][ T54] usb 10-1: ath9k_htc: USB layer deinitialized [ 1204.218403][T21772] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3096'. [ 1204.262531][T21776] tipc: Enabled bearer , priority 10 [ 1204.325268][T21755] vhci_hcd: connection reset by peer [ 1204.327380][ T63] vhci_hcd vhci_hcd.2: stop threads [ 1204.329321][ T63] vhci_hcd vhci_hcd.2: release socket [ 1204.331213][ T63] vhci_hcd vhci_hcd.2: disconnect device [ 1204.413682][ T8020] usb 40-1: SetAddress Request (11) to port 0 [ 1204.415712][ T8020] usb 40-1: new SuperSpeed USB device number 11 using vhci_hcd [ 1204.435144][ T6031] usb 48-1: device descriptor read/8, error -110 [ 1204.702828][T14174] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1204.769466][T21767] vhci_hcd: connection reset by peer [ 1204.772380][ T1055] vhci_hcd vhci_hcd.1: stop threads [ 1204.775080][ T1055] vhci_hcd vhci_hcd.1: release socket [ 1204.778368][ T1055] vhci_hcd vhci_hcd.1: disconnect device [ 1204.823908][ T6031] usb usb48-port1: attempt power cycle [ 1204.854347][T14174] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1204.857114][T14174] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.861613][T14174] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1204.864694][T14174] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1204.867353][T14174] usb 10-1: Manufacturer: syz [ 1204.873427][T14174] usb 10-1: config 0 descriptor?? [ 1204.915674][T21796] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1204.917972][T21796] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1204.924987][T21796] vhci_hcd vhci_hcd.0: Device attached [ 1205.043066][T14174] rc_core: IR keymap rc-hauppauge not found [ 1205.045620][T14174] Registered IR keymap rc-empty [ 1205.053086][T14174] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 1205.074723][T14174] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input216 [ 1205.095705][T14174] usb 10-1: USB disconnect, device number 9 [ 1205.202744][T21478] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1205.352685][T21478] usb 7-1: Using ep0 maxpacket: 16 [ 1205.355999][T21478] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 1205.358665][T21478] usb 7-1: config 0 has no interface number 0 [ 1205.360700][T21478] usb 7-1: config 0 interface 217 has no altsetting 0 [ 1205.366606][T21478] usb 7-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ce.a8 [ 1205.370401][T21478] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.373997][T21478] usb 7-1: Product: syz [ 1205.375585][T21478] usb 7-1: Manufacturer: syz [ 1205.377073][T21478] usb 7-1: SerialNumber: syz [ 1205.381170][T21478] usb 7-1: config 0 descriptor?? [ 1205.394601][ T6031] usb usb48-port1: unable to enumerate USB device [ 1205.513337][T21797] vhci_hcd: connection closed [ 1205.513586][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1205.517451][ T12] vhci_hcd vhci_hcd.4: release socket [ 1205.519247][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1205.591294][T21478] usb 7-1: USB disconnect, device number 12 [ 1206.272760][ T6287] usb 46-1: device descriptor read/8, error -110 [ 1206.663611][ T6287] usb usb46-port1: attempt power cycle [ 1206.822521][T21851] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1206.824674][T21851] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1206.827756][T21851] vhci_hcd vhci_hcd.0: Device attached [ 1207.262873][T21852] vhci_hcd: connection closed [ 1207.263572][ T12] vhci_hcd vhci_hcd.2: stop threads [ 1207.263596][ T6287] usb usb46-port1: unable to enumerate USB device [ 1207.265084][ T12] vhci_hcd vhci_hcd.2: release socket [ 1207.271967][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 1207.375635][ T40] audit: type=1326 audit(1207.276:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21877 comm="syz.5.3133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1207.390539][ T40] audit: type=1326 audit(1207.286:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21877 comm="syz.5.3133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1207.406644][ T40] audit: type=1326 audit(1207.306:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21877 comm="syz.5.3133" exe="/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1207.414123][ T40] audit: type=1326 audit(1207.316:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21877 comm="syz.5.3133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1207.421435][ T40] audit: type=1326 audit(1207.316:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21877 comm="syz.5.3133" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1207.467660][T21880] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1207.470306][T21880] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1207.481489][T21880] vhci_hcd vhci_hcd.0: Device attached [ 1207.488737][T21884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3134'. [ 1207.752814][ T54] usb 46-1: SetAddress Request (16) to port 0 [ 1207.755209][ T54] usb 46-1: new SuperSpeed USB device number 16 using vhci_hcd [ 1207.829345][T21881] vhci_hcd: connection reset by peer [ 1207.842753][ T1055] vhci_hcd vhci_hcd.4: stop threads [ 1207.844441][ T1055] vhci_hcd vhci_hcd.4: release socket [ 1207.846298][ T1055] vhci_hcd vhci_hcd.4: disconnect device [ 1208.505139][T21931] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1208.507187][T21931] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1208.518597][T21931] vhci_hcd vhci_hcd.0: Device attached [ 1208.554992][T21937] raw_sendmsg: syz.5.3153 forgot to set AF_INET. Fix it! [ 1209.079432][T21932] vhci_hcd: connection reset by peer [ 1209.084433][T14923] vhci_hcd vhci_hcd.2: stop threads [ 1209.087542][T14923] vhci_hcd vhci_hcd.2: release socket [ 1209.089921][ T77] usb 42-1: device descriptor read/8, error -110 [ 1209.089956][T14923] vhci_hcd vhci_hcd.2: disconnect device [ 1209.222673][ T6009] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1209.382697][ T6009] usb 10-1: Using ep0 maxpacket: 16 [ 1209.394484][ T6009] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.398650][ T6009] usb 10-1: config 0 has no interfaces? [ 1209.406358][ T6009] usb 10-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 1209.409956][ T6009] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.423011][ T6009] usb 10-1: Product: syz [ 1209.424848][ T6009] usb 10-1: Manufacturer: syz [ 1209.426885][ T6009] usb 10-1: SerialNumber: syz [ 1209.434503][ T6009] usb 10-1: config 0 descriptor?? [ 1209.473211][ T77] usb usb42-port1: attempt power cycle [ 1209.475072][ T8020] usb 40-1: device descriptor read/8, error -110 [ 1209.572779][T21975] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1209.574982][T21975] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1209.579040][T21975] vhci_hcd vhci_hcd.0: Device attached [ 1209.649885][ T6287] usb 10-1: USB disconnect, device number 10 [ 1209.759532][T21984] syz_tun: entered allmulticast mode [ 1209.769623][T21984] syz_tun: left allmulticast mode [ 1209.873276][ T8020] usb usb40-port1: attempt power cycle [ 1210.034312][ T77] usb usb42-port1: unable to enumerate USB device [ 1210.145971][T21976] vhci_hcd: connection closed [ 1210.146239][ T12] vhci_hcd vhci_hcd.4: stop threads [ 1210.151776][ T12] vhci_hcd vhci_hcd.4: release socket [ 1210.154900][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 1210.160933][T21992] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 1210.383850][T22006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.387782][T22006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.473190][ T8020] usb usb40-port1: unable to enumerate USB device [ 1210.515615][T22016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3181'. [ 1210.620130][T22025] xt_HMARK: proto mask must be zero with L3 mode [ 1210.823808][T22036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3189'. [ 1211.115524][T22062] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1211.118286][T22062] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1211.123088][T22062] vhci_hcd vhci_hcd.0: Device attached [ 1211.141363][T22067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3201'. [ 1211.392763][T20537] usb 42-1: SetAddress Request (30) to port 0 [ 1211.395586][T20537] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1211.469705][T22093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.473468][T22093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.632840][ T6009] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1211.713178][T22063] vhci_hcd: connection reset by peer [ 1211.715870][T15427] vhci_hcd vhci_hcd.2: stop threads [ 1211.718105][T15427] vhci_hcd vhci_hcd.2: release socket [ 1211.720584][T15427] vhci_hcd vhci_hcd.2: disconnect device [ 1211.802694][ T6009] usb 9-1: Using ep0 maxpacket: 16 [ 1211.807176][ T6009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.810907][ T6009] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1211.815907][ T6009] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1211.818923][ T6009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.822795][ T77] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1211.824218][ T6009] usb 9-1: config 0 descriptor?? [ 1211.982788][ T77] usb 10-1: Using ep0 maxpacket: 32 [ 1211.986745][ T77] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1211.990331][ T77] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1211.995846][ T77] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1211.999489][ T77] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1212.003679][ T77] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1212.007357][ T77] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1212.010397][ T77] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1212.013465][ T77] usb 10-1: Product: syz [ 1212.015291][ T77] usb 10-1: Manufacturer: syz [ 1212.017166][ T77] usb 10-1: SerialNumber: syz [ 1212.023097][ T77] usb 10-1: config 0 descriptor?? [ 1212.026893][ T77] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1212.031028][ T77] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1212.492915][ T77] usb 10-1: USB disconnect, device number 11 [ 1212.496964][ T77] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1212.531738][T22111] netlink: 'syz.2.3221': attribute type 9 has an invalid length. [ 1212.603375][T22116] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1212.834481][ T54] usb 46-1: device descriptor read/8, error -110 [ 1213.008464][T22132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3229'. [ 1213.233136][ T54] usb usb46-port1: attempt power cycle [ 1213.332686][ T6287] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1213.348343][T22142] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1213.350472][T22142] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1213.361642][T22142] vhci_hcd vhci_hcd.0: Device attached [ 1213.482678][ T6287] usb 10-1: Using ep0 maxpacket: 8 [ 1213.495793][ T6287] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1213.498933][ T6287] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1213.502064][ T6287] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1213.505341][ T6287] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.509396][ T6287] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1213.512254][ T6287] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.730663][ T6287] usb 10-1: GET_CAPABILITIES returned 0 [ 1213.732752][ T6287] usbtmc 10-1:16.0: can't read capabilities [ 1213.803484][ T54] usb usb46-port1: unable to enumerate USB device [ 1213.940173][ T6287] usb 10-1: USB disconnect, device number 12 [ 1213.963369][T22143] vhci_hcd: connection closed [ 1213.963746][ T8733] vhci_hcd vhci_hcd.2: stop threads [ 1213.967828][ T8733] vhci_hcd vhci_hcd.2: release socket [ 1213.969595][ T8733] vhci_hcd vhci_hcd.2: disconnect device [ 1214.413430][ T6009] usbhid 9-1:0.0: can't add hid device: -71 [ 1214.415512][ T6009] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1214.425392][ T6009] usb 9-1: USB disconnect, device number 9 [ 1214.697353][T22186] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3246'. [ 1215.193998][T22205] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1215.196150][T22205] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1215.211642][T22205] vhci_hcd vhci_hcd.0: Device attached [ 1215.492885][ T54] usb 48-1: SetAddress Request (116) to port 0 [ 1215.494934][ T54] usb 48-1: new SuperSpeed USB device number 116 using vhci_hcd [ 1215.496174][T22215] lo speed is unknown, defaulting to 1000 [ 1215.501302][T22215] wg2 speed is unknown, defaulting to 1000 [ 1215.627459][T22215] ªªªªªª speed is unknown, defaulting to 1000 [ 1215.645538][T22206] vhci_hcd: connection reset by peer [ 1215.647549][ T8733] vhci_hcd vhci_hcd.5: stop threads [ 1215.649255][ T8733] vhci_hcd vhci_hcd.5: release socket [ 1215.651759][ T8733] vhci_hcd vhci_hcd.5: disconnect device [ 1215.772716][ T77] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1215.782734][ T6287] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1215.923995][ T77] usb 7-1: config 0 has an invalid interface number: 204 but max is 0 [ 1215.926698][ T77] usb 7-1: config 0 has no interface number 0 [ 1215.930193][ T77] usb 7-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 1215.932696][ T6287] usb 9-1: Using ep0 maxpacket: 8 [ 1215.933464][ T77] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.937660][ T6287] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1215.938120][ T77] usb 7-1: Product: syz [ 1215.938132][ T77] usb 7-1: Manufacturer: syz [ 1215.938140][ T77] usb 7-1: SerialNumber: syz [ 1215.940194][ T77] usb 7-1: config 0 descriptor?? [ 1215.941534][ T6287] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1215.945350][ T77] ems_usb 7-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1215.945944][ T6287] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1215.947749][ T77] ems_usb 7-1:0.204: probe with driver ems_usb failed with error -22 [ 1215.950590][ T6287] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1215.964805][ T6287] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1215.968042][ T6287] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.177868][ T6287] usb 9-1: GET_CAPABILITIES returned 0 [ 1216.179737][ T6287] usbtmc 9-1:16.0: can't read capabilities [ 1216.208067][ T6009] usb 7-1: USB disconnect, device number 13 [ 1216.349893][T22232] IPv6: Can't replace route, no match found [ 1216.382992][ T6287] usb 9-1: USB disconnect, device number 10 [ 1216.444397][T20537] usb 42-1: device descriptor read/8, error -110 [ 1216.764078][T22246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3265'. [ 1216.841942][T20537] usb usb42-port1: attempt power cycle [ 1217.128283][ T77] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1217.284527][ T77] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1217.287724][ T77] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.291827][ T77] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1217.299750][ T77] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1217.303430][ T77] usb 7-1: Manufacturer: syz [ 1217.306517][ T77] usb 7-1: config 0 descriptor?? [ 1217.317479][T22279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.325106][T22279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.373517][ T77] rc_core: IR keymap rc-hauppauge not found [ 1217.375605][ T77] Registered IR keymap rc-empty [ 1217.378486][ T77] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 1217.384680][ T77] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input217 [ 1217.403585][T20537] usb usb42-port1: unable to enumerate USB device [ 1217.517085][ T77] usb 7-1: USB disconnect, device number 14 [ 1218.193775][T22308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.197072][T22308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.351013][T22315] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1218.353859][T22315] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1218.357415][T22315] vhci_hcd vhci_hcd.0: Device attached [ 1218.664927][ T6009] usb 42-1: SetAddress Request (34) to port 0 [ 1218.667864][ T6009] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1218.763929][T22325] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1218.765958][T22325] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1218.768693][T22325] vhci_hcd vhci_hcd.0: Device attached [ 1219.092180][ T25] block nbd0: Possible stuck request ffff888026978000: control (read@0,1024B). Runtime 570 seconds [ 1219.097220][ T25] block nbd0: Possible stuck request ffff888026978200: control (read@1024,1024B). Runtime 570 seconds [ 1219.101885][ T25] block nbd0: Possible stuck request ffff888026978400: control (read@2048,1024B). Runtime 570 seconds [ 1219.106435][ T25] block nbd0: Possible stuck request ffff888026978600: control (read@3072,1024B). Runtime 570 seconds [ 1219.132669][T20537] usb 46-1: SetAddress Request (20) to port 0 [ 1219.134097][T22327] vhci_hcd: connection closed [ 1219.134679][T20537] usb 46-1: new SuperSpeed USB device number 20 using vhci_hcd [ 1219.135007][ T63] vhci_hcd vhci_hcd.4: stop threads [ 1219.141077][ T63] vhci_hcd vhci_hcd.4: release socket [ 1219.151046][ T63] vhci_hcd vhci_hcd.4: disconnect device [ 1219.163998][ T40] audit: type=1326 audit(1219.066:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.3300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1219.175758][ T40] audit: type=1326 audit(1219.066:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.3300" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1219.182301][ T40] audit: type=1326 audit(1219.066:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.3300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1219.226524][ T40] audit: type=1326 audit(1219.076:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.3300" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1219.228597][T22316] vhci_hcd: connection reset by peer [ 1219.238581][ T40] audit: type=1326 audit(1219.076:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.3300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1219.248411][ T40] audit: type=1326 audit(1219.076:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.3300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1219.259095][ T40] audit: type=1326 audit(1219.076:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.3300" exe="/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1219.264043][T15427] vhci_hcd vhci_hcd.2: stop threads [ 1219.267714][T15427] vhci_hcd vhci_hcd.2: release socket [ 1219.269480][T15427] vhci_hcd vhci_hcd.2: disconnect device [ 1219.270430][ T40] audit: type=1326 audit(1219.076:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.3300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1219.342624][ T40] audit: type=1326 audit(1219.076:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22345 comm="syz.1.3300" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 1219.685767][T17677] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1220.161257][T22390] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1220.163742][T22390] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1220.166850][T22390] vhci_hcd vhci_hcd.0: Device attached [ 1220.228852][T22401] macvlan0: entered promiscuous mode [ 1220.230761][T22401] netlink: 'syz.4.3320': attribute type 1 has an invalid length. [ 1220.233482][T22401] netlink: 'syz.4.3320': attribute type 2 has an invalid length. [ 1220.602719][ T54] usb 48-1: device descriptor read/8, error -110 [ 1220.745242][T22392] vhci_hcd: connection closed [ 1220.745573][T14923] vhci_hcd vhci_hcd.2: stop threads [ 1220.748907][T14923] vhci_hcd vhci_hcd.2: release socket [ 1220.750771][T14923] vhci_hcd vhci_hcd.2: disconnect device [ 1220.793372][T22421] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1220.795577][T22421] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1220.798854][T22421] vhci_hcd vhci_hcd.0: Device attached [ 1220.850798][T22425] TCP: TCP_TX_DELAY enabled [ 1221.011830][T22422] vhci_hcd: connection closed [ 1221.012240][T15427] vhci_hcd vhci_hcd.5: stop threads [ 1221.016634][T15427] vhci_hcd vhci_hcd.5: release socket [ 1221.021351][T15427] vhci_hcd vhci_hcd.5: disconnect device [ 1221.062869][ T54] usb 48-1: enqueue for inactive port 0 [ 1221.162731][ T6287] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1221.272887][ T54] usb usb48-port1: attempt power cycle [ 1221.314385][ T6287] usb 9-1: Using ep0 maxpacket: 16 [ 1221.319509][ T6287] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 1221.323303][ T6287] usb 9-1: config 0 has no interface number 0 [ 1221.328346][ T6287] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1221.332149][ T6287] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.335812][ T6287] usb 9-1: Product: syz [ 1221.337210][ T6287] usb 9-1: Manufacturer: syz [ 1221.338736][ T6287] usb 9-1: SerialNumber: syz [ 1221.356589][ T6287] usb 9-1: config 0 descriptor?? [ 1221.360657][ T6287] hub 9-1:0.132: bad descriptor, ignoring hub [ 1221.362997][ T6287] hub 9-1:0.132: probe with driver hub failed with error -5 [ 1221.368637][ T6287] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.132/input/input218 [ 1221.498986][T22443] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3335'. [ 1221.502240][T22443] block nbd0: reconnected socket [ 1221.505087][T22443] nbd: socks must be embedded in a SOCK_ITEM attr [ 1221.512854][T17677] block nbd0: Receive control failed (result -32) [ 1221.643372][T22449] netlink: 'syz.1.3339': attribute type 2 has an invalid length. [ 1221.833584][ T54] usb usb48-port1: unable to enumerate USB device [ 1221.884868][T22453] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1221.887010][T22453] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1221.889871][T22453] vhci_hcd vhci_hcd.0: Device attached [ 1222.162778][ T6287] usb 48-1: SetAddress Request (120) to port 0 [ 1222.164932][ T6287] usb 48-1: new SuperSpeed USB device number 120 using vhci_hcd [ 1222.512224][T22454] vhci_hcd: connection reset by peer [ 1222.527990][T15427] vhci_hcd vhci_hcd.5: stop threads [ 1222.529804][T15427] vhci_hcd vhci_hcd.5: release socket [ 1222.541998][T15427] vhci_hcd vhci_hcd.5: disconnect device [ 1222.780701][T22486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3352'. [ 1222.886867][T22498] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1222.889141][T22498] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1222.891858][T22498] vhci_hcd vhci_hcd.0: Device attached [ 1223.462094][T22499] vhci_hcd: connection closed [ 1223.462800][T14923] vhci_hcd vhci_hcd.2: stop threads [ 1223.466293][T14923] vhci_hcd vhci_hcd.2: release socket [ 1223.468860][T14923] vhci_hcd vhci_hcd.2: disconnect device [ 1223.722777][ T6009] usb 42-1: device descriptor read/8, error -110 [ 1224.153497][ T6009] usb usb42-port1: attempt power cycle [ 1224.192728][T20537] usb 46-1: device descriptor read/8, error -110 [ 1224.315263][ T5336] usb 9-1: reset high-speed USB device number 11 using dummy_hcd [ 1224.473449][ T5336] usb 9-1: device firmware changed [ 1224.476045][ T6952] usb 9-1: USB disconnect, device number 11 [ 1224.584340][T20537] usb usb46-port1: attempt power cycle [ 1224.622806][ T6952] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1224.748644][ T6009] usb usb42-port1: unable to enumerate USB device [ 1224.772649][ T6952] usb 9-1: Using ep0 maxpacket: 16 [ 1224.784844][ T6952] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1224.787953][ T6952] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1224.791297][ T6952] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1224.795578][ T6952] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1224.814333][ T6952] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1224.817318][ T6952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.819814][ T6952] usb 9-1: Product: syz [ 1224.821146][ T6952] usb 9-1: Manufacturer: syz [ 1224.832826][ T6952] usb 9-1: SerialNumber: syz [ 1225.016124][T22541] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1225.018333][T22541] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1225.021346][T22541] vhci_hcd vhci_hcd.0: Device attached [ 1225.103080][ T6952] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1225.235474][T20537] usb usb46-port1: unable to enumerate USB device [ 1225.308836][ T6952] usb 9-1: USB disconnect, device number 12 [ 1225.314061][ T6952] usblp0: removed [ 1225.378357][T22546] vhci_hcd: connection closed [ 1225.378683][T15427] vhci_hcd vhci_hcd.5: stop threads [ 1225.381929][T15427] vhci_hcd vhci_hcd.5: release socket [ 1225.383881][T15427] vhci_hcd vhci_hcd.5: disconnect device [ 1225.579974][T22555] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1225.582103][T22555] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1225.585631][T22555] vhci_hcd vhci_hcd.0: Device attached [ 1225.852764][T20537] usb 42-1: SetAddress Request (38) to port 0 [ 1225.857064][T20537] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1225.863822][T22561] comedi comedi3: pcl816: I/O port conflict (0x101,16) [ 1225.932719][T22556] vhci_hcd: connection reset by peer [ 1225.942374][ T63] vhci_hcd vhci_hcd.2: stop threads [ 1225.945081][ T63] vhci_hcd vhci_hcd.2: release socket [ 1225.947369][ T63] vhci_hcd vhci_hcd.2: disconnect device [ 1226.419441][T22600] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1226.422029][T22600] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1226.425083][T22600] vhci_hcd vhci_hcd.0: Device attached [ 1226.692719][ T9292] usb 46-1: SetAddress Request (24) to port 0 [ 1226.694982][ T9292] usb 46-1: new SuperSpeed USB device number 24 using vhci_hcd [ 1226.982660][T22601] vhci_hcd: connection reset by peer [ 1226.984541][T22625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3400'. [ 1226.984770][T14923] vhci_hcd vhci_hcd.4: stop threads [ 1226.989456][T14923] vhci_hcd vhci_hcd.4: release socket [ 1226.992740][T14923] vhci_hcd vhci_hcd.4: disconnect device [ 1227.126637][ T54] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 1227.129726][ T54] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 1227.133289][ T54] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 1227.135789][ T54] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 1227.138171][ T54] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 1227.140650][ T54] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 1227.143463][ T54] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 1227.145800][ T54] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 1227.148173][ T54] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 1227.150729][ T54] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 1227.156831][ T54] hid-generic 0003:0004:0000.000C: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 1227.208721][T22636] fido_id[22636]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1227.237505][ T6287] usb 48-1: device descriptor read/8, error -110 [ 1227.643238][ T6287] usb usb48-port1: attempt power cycle [ 1227.952305][T22665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3417'. [ 1228.223603][ T6287] usb usb48-port1: unable to enumerate USB device [ 1228.273573][ T6952] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1228.442680][ T6952] usb 9-1: Using ep0 maxpacket: 16 [ 1228.445908][ T6952] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1228.448491][ T6952] usb 9-1: config 0 has no interface number 0 [ 1228.450472][ T6952] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1228.454721][ T6952] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1228.459215][ T6952] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1228.462156][ T6952] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1228.465481][ T6952] usb 9-1: Product: syz [ 1228.466908][ T6952] usb 9-1: SerialNumber: syz [ 1228.470002][ T6952] usb 9-1: config 0 descriptor?? [ 1228.474425][ T6952] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 1228.477979][ T6952] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input219 [ 1228.642703][ T77] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1228.683893][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1228.684071][ T54] usb 9-1: USB disconnect, device number 13 [ 1228.686867][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1228.698186][ T54] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1228.742924][T22701] 9pnet_virtio: no channels available for device syz [ 1228.802862][ T77] usb 10-1: Using ep0 maxpacket: 8 [ 1228.806624][ T77] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1228.809412][ T77] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1228.813860][ T77] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.819724][ T77] usb 10-1: config 0 descriptor?? [ 1229.034800][T22707] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3435'. [ 1229.038758][T22707] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3435'. [ 1229.044054][T22707] unsupported nlmsg_type 40 [ 1229.232561][ T77] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1229.432533][ T6287] usb 10-1: USB disconnect, device number 13 [ 1229.752682][T22729] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1229.755171][T22729] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1229.758858][T22729] vhci_hcd vhci_hcd.0: Device attached [ 1229.872720][ T77] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1229.996753][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3444'. [ 1230.067338][ T77] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1230.067361][ T77] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1230.067380][ T77] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1230.067392][ T77] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.069090][T22726] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1230.072227][ T77] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1230.295291][T22730] vhci_hcd: connection closed [ 1230.295656][T14923] vhci_hcd vhci_hcd.4: stop threads [ 1230.312069][T14923] vhci_hcd vhci_hcd.4: release socket [ 1230.313438][ T6287] usb 7-1: USB disconnect, device number 15 [ 1230.314979][T14923] vhci_hcd vhci_hcd.4: disconnect device [ 1230.352336][T22748] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3449'. [ 1230.386069][T22750] veth1_to_bridge: entered promiscuous mode [ 1230.388446][T22750] batadv0: entered promiscuous mode [ 1230.390680][T22749] batadv0: left promiscuous mode [ 1230.393782][T22749] veth1_to_bridge: left promiscuous mode [ 1230.912758][T20537] usb 42-1: device descriptor read/8, error -110 [ 1231.055083][T22774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.055452][T22774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.303565][T20537] usb usb42-port1: attempt power cycle [ 1231.415540][T22780] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1231.415557][T22780] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1231.417106][T22780] vhci_hcd vhci_hcd.0: Device attached [ 1231.642756][T20537] usb 42-1: SetAddress Request (40) to port 0 [ 1231.642794][T20537] usb 42-1: new SuperSpeed USB device number 40 using vhci_hcd [ 1231.694934][T22788] syzkaller1: entered promiscuous mode [ 1231.694955][T22788] syzkaller1: entered allmulticast mode [ 1231.792839][ T9292] usb 46-1: device descriptor read/8, error -110 [ 1231.838302][T22793] syzkaller1: entered allmulticast mode [ 1231.928155][T22781] vhci_hcd: connection reset by peer [ 1231.930313][ T12] vhci_hcd vhci_hcd.2: stop threads [ 1231.932533][ T12] vhci_hcd vhci_hcd.2: release socket [ 1231.935455][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 1231.996051][ T40] audit: type=1326 audit(1231.896:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22797 comm="syz.5.3467" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x0 [ 1232.183280][ T9292] usb usb46-port1: attempt power cycle [ 1232.276103][T22808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.280181][T22808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.640938][T22822] [ 1232.641828][T22822] ===================================================== [ 1232.644338][T22822] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1232.646829][T22822] syzkaller #0 Tainted: G L [ 1232.648818][T22822] ----------------------------------------------------- [ 1232.651035][T22822] syz.2.3476/22822 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1232.653577][T22822] ffff888057d440c0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 1232.657192][T22822] [ 1232.657192][T22822] and this task is already holding: [ 1232.659806][T22822] ffff888055b9c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 1232.662880][T22822] which would create a new lock dependency: [ 1232.665066][T22822] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1232.667754][T22822] [ 1232.667754][T22822] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1232.670704][T22822] (&dev->event_lock#2){..-.}-{3:3} [ 1232.670725][T22822] [ 1232.670725][T22822] ... which became SOFTIRQ-irq-safe at: [ 1232.674845][T22822] lock_acquire+0x179/0x330 [ 1232.676434][T22822] _raw_spin_lock_irqsave+0x3a/0x60 [ 1232.678149][T22822] input_inject_event+0x9f/0x3b0 [ 1232.679887][T22822] led_set_brightness+0x217/0x290 [ 1232.681550][T22822] led_trigger_event+0xda/0x270 [ 1232.683200][T22822] kbd_bh+0x247/0x330 [ 1232.684578][T22822] tasklet_action_common+0x254/0x3f0 [ 1232.686779][T22822] handle_softirqs+0x219/0x950 [ 1232.688904][T22822] run_ksoftirqd+0x3a/0x60 [ 1232.690861][T22822] smpboot_thread_fn+0x3f7/0xae0 [ 1232.692996][T22822] kthread+0x3c5/0x780 [ 1232.694761][T22822] ret_from_fork+0x983/0xb10 [ 1232.696808][T22822] ret_from_fork_asm+0x1a/0x30 [ 1232.698894][T22822] [ 1232.698894][T22822] to a SOFTIRQ-irq-unsafe lock: [ 1232.701846][T22822] (tasklist_lock){.+.+}-{3:3} [ 1232.701875][T22822] [ 1232.701875][T22822] ... which became SOFTIRQ-irq-unsafe at: [ 1232.707196][T22822] ... [ 1232.707205][T22822] lock_acquire+0x179/0x330 [ 1232.710318][T22822] _raw_read_lock+0x5f/0x70 [ 1232.712249][T22822] __do_wait+0x105/0x890 [ 1232.714051][T22822] do_wait+0x21d/0x570 [ 1232.715816][T22822] kernel_wait+0x9f/0x160 [ 1232.717682][T22822] call_usermodehelper_exec_work+0xf1/0x170 [ 1232.720225][T22822] process_one_work+0x9ba/0x1b20 [ 1232.722366][T22822] worker_thread+0x6c8/0xf10 [ 1232.724379][T22822] kthread+0x3c5/0x780 [ 1232.726189][T22822] ret_from_fork+0x983/0xb10 [ 1232.728216][T22822] ret_from_fork_asm+0x1a/0x30 [ 1232.730310][T22822] [ 1232.730310][T22822] other info that might help us debug this: [ 1232.730310][T22822] [ 1232.734465][T22822] Chain exists of: [ 1232.734465][T22822] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1232.734465][T22822] [ 1232.740077][T22822] Possible interrupt unsafe locking scenario: [ 1232.740077][T22822] [ 1232.743538][T22822] CPU0 CPU1 [ 1232.745837][T22822] ---- ---- [ 1232.748236][T22822] lock(tasklist_lock); [ 1232.750042][T22822] local_irq_disable(); [ 1232.752808][T22822] lock(&dev->event_lock#2); [ 1232.753376][ T9292] usb usb46-port1: unable to enumerate USB device [ 1232.755838][T22822] lock(&client->buffer_lock); [ 1232.755859][T22822] [ 1232.755864][T22822] lock(&dev->event_lock#2); [ 1232.755883][T22822] [ 1232.755883][T22822] *** DEADLOCK *** [ 1232.755883][T22822] [ 1232.768662][T22822] 7 locks held by syz.2.3476/22822: [ 1232.770877][T22822] #0: ffff888021595118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x184/0x440 [ 1232.774784][T22822] #1: ffff88802312a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 1232.779102][T22822] #2: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 1232.783285][T22822] #3: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 1232.787352][T22822] #4: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 1232.791255][T22822] #5: ffff888055b9c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 1232.795614][T22822] #6: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 1232.799476][T22822] [ 1232.799476][T22822] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1232.803666][T22822] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1232.805493][T22822] IN-SOFTIRQ-W at: [ 1232.806805][T22822] lock_acquire+0x179/0x330 [ 1232.808830][T22822] _raw_spin_lock_irqsave+0x3a/0x60 [ 1232.811059][T22822] input_inject_event+0x9f/0x3b0 [ 1232.813228][T22822] led_set_brightness+0x217/0x290 [ 1232.815404][T22822] led_trigger_event+0xda/0x270 [ 1232.817570][T22822] kbd_bh+0x247/0x330 [ 1232.819459][T22822] tasklet_action_common+0x254/0x3f0 [ 1232.821697][T22822] handle_softirqs+0x219/0x950 [ 1232.823803][T22822] run_ksoftirqd+0x3a/0x60 [ 1232.825824][T22822] smpboot_thread_fn+0x3f7/0xae0 [ 1232.827984][T22822] kthread+0x3c5/0x780 [ 1232.829876][T22822] ret_from_fork+0x983/0xb10 [ 1232.831917][T22822] ret_from_fork_asm+0x1a/0x30 [ 1232.834017][T22822] INITIAL USE at: [ 1232.835318][T22822] lock_acquire+0x179/0x330 [ 1232.837323][T22822] _raw_spin_lock_irqsave+0x3a/0x60 [ 1232.839525][T22822] input_inject_event+0x9f/0x3b0 [ 1232.841651][T22822] led_set_brightness+0x217/0x290 [ 1232.843801][T22822] kbd_led_trigger_activate+0xcb/0x110 [ 1232.846107][T22822] led_trigger_set+0x59a/0xc50 [ 1232.848196][T22822] led_trigger_set_default+0x1e0/0x2e0 [ 1232.850626][T22822] led_classdev_register_ext+0x71d/0xa30 [ 1232.853012][T22822] input_leds_connect+0x552/0x8e0 [ 1232.855179][T22822] input_attach_handler.isra.0+0x176/0x250 [ 1232.857613][T22822] input_register_device+0xab9/0x11b0 [ 1232.859906][T22822] atkbd_connect+0x5f8/0xa60 [ 1232.861927][T22822] serio_driver_probe+0x7f/0xd0 [ 1232.864128][T22822] really_probe+0x241/0xb20 [ 1232.866173][T22822] __driver_probe_device+0x1de/0x470 [ 1232.868407][T22822] driver_probe_device+0x4c/0x1b0 [ 1232.870545][T22822] __driver_attach+0x283/0x5e0 [ 1232.872623][T22822] bus_for_each_dev+0x13e/0x1d0 [ 1232.874726][T22822] serio_handle_event+0x281/0xb30 [ 1232.876893][T22822] process_one_work+0x9ba/0x1b20 [ 1232.879026][T22822] worker_thread+0x6c8/0xf10 [ 1232.881062][T22822] kthread+0x3c5/0x780 [ 1232.882934][T22822] ret_from_fork+0x983/0xb10 [ 1232.884963][T22822] ret_from_fork_asm+0x1a/0x30 [ 1232.887066][T22822] } [ 1232.887943][T22822] ... key at: [] __key.7+0x0/0x40 [ 1232.890249][T22822] -> (&client->buffer_lock){....}-{3:3} { [ 1232.892095][T22822] INITIAL USE at: [ 1232.893352][T22822] lock_acquire+0x179/0x330 [ 1232.895282][T22822] _raw_spin_lock+0x2e/0x40 [ 1232.897255][T22822] evdev_handle_get_val+0x66/0x600 [ 1232.899389][T22822] evdev_do_ioctl+0x7ac/0x1b30 [ 1232.901413][T22822] evdev_ioctl_compat+0x16f/0x1a0 [ 1232.903522][T22822] __ia32_compat_sys_ioctl+0x242/0x370 [ 1232.905749][T22822] __do_fast_syscall_32+0xe8/0x680 [ 1232.907871][T22822] do_fast_syscall_32+0x32/0x80 [ 1232.909917][T22822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1232.912424][T22822] } [ 1232.913245][T22822] ... key at: [] __key.88+0x0/0x40 [ 1232.915591][T22822] ... acquired at: [ 1232.916812][T22822] _raw_spin_lock+0x2e/0x40 [ 1232.918286][T22822] evdev_handle_get_val+0x66/0x600 [ 1232.919946][T22822] evdev_do_ioctl+0x7ac/0x1b30 [ 1232.921465][T22822] evdev_ioctl_compat+0x16f/0x1a0 [ 1232.923086][T22822] __ia32_compat_sys_ioctl+0x242/0x370 [ 1232.924816][T22822] __do_fast_syscall_32+0xe8/0x680 [ 1232.926539][T22822] do_fast_syscall_32+0x32/0x80 [ 1232.928144][T22822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1232.930203][T22822] [ 1232.930987][T22822] [ 1232.930987][T22822] the dependencies between the lock to be acquired [ 1232.930993][T22822] and SOFTIRQ-irq-unsafe lock: [ 1232.935258][T22822] -> (tasklist_lock){.+.+}-{3:3} { [ 1232.936930][T22822] HARDIRQ-ON-R at: [ 1232.938262][T22822] lock_acquire+0x179/0x330 [ 1232.940328][T22822] _raw_read_lock+0x5f/0x70 [ 1232.942390][T22822] __do_wait+0x105/0x890 [ 1232.944353][T22822] do_wait+0x21d/0x570 [ 1232.946319][T22822] kernel_wait+0x9f/0x160 [ 1232.948311][T22822] call_usermodehelper_exec_work+0xf1/0x170 [ 1232.950720][T22822] process_one_work+0x9ba/0x1b20 [ 1232.952881][T22822] worker_thread+0x6c8/0xf10 [ 1232.954912][T22822] kthread+0x3c5/0x780 [ 1232.956872][T22822] ret_from_fork+0x983/0xb10 [ 1232.958959][T22822] ret_from_fork_asm+0x1a/0x30 [ 1232.961098][T22822] SOFTIRQ-ON-R at: [ 1232.962433][T22822] lock_acquire+0x179/0x330 [ 1232.964508][T22822] _raw_read_lock+0x5f/0x70 [ 1232.966618][T22822] __do_wait+0x105/0x890 [ 1232.968621][T22822] do_wait+0x21d/0x570 [ 1232.970563][T22822] kernel_wait+0x9f/0x160 [ 1232.972563][T22822] call_usermodehelper_exec_work+0xf1/0x170 [ 1232.975050][T22822] process_one_work+0x9ba/0x1b20 [ 1232.977288][T22822] worker_thread+0x6c8/0xf10 [ 1232.979418][T22822] kthread+0x3c5/0x780 [ 1232.981376][T22822] ret_from_fork+0x983/0xb10 [ 1232.983491][T22822] ret_from_fork_asm+0x1a/0x30 [ 1232.985584][T22822] INITIAL USE at: [ 1232.986861][T22822] lock_acquire+0x179/0x330 [ 1232.988792][T22822] _raw_write_lock_irq+0x36/0x50 [ 1232.990837][T22822] copy_process+0x4668/0x7430 [ 1232.992927][T22822] kernel_clone+0xfc/0x910 [ 1232.994923][T22822] user_mode_thread+0xc8/0x110 [ 1232.997019][T22822] rest_init+0x23/0x2b0 [ 1232.998979][T22822] start_kernel+0x3ef/0x4d0 [ 1233.001020][T22822] x86_64_start_reservations+0x18/0x30 [ 1233.003375][T22822] x86_64_start_kernel+0x130/0x190 [ 1233.005608][T22822] common_startup_64+0x13e/0x148 [ 1233.007722][T22822] INITIAL READ USE at: [ 1233.009172][T22822] lock_acquire+0x179/0x330 [ 1233.011348][T22822] _raw_read_lock+0x5f/0x70 [ 1233.013521][T22822] __do_wait+0x105/0x890 [ 1233.015648][T22822] do_wait+0x21d/0x570 [ 1233.017693][T22822] kernel_wait+0x9f/0x160 [ 1233.019821][T22822] call_usermodehelper_exec_work+0xf1/0x170 [ 1233.022416][T22822] process_one_work+0x9ba/0x1b20 [ 1233.024739][T22822] worker_thread+0x6c8/0xf10 [ 1233.026985][T22822] kthread+0x3c5/0x780 [ 1233.029044][T22822] ret_from_fork+0x983/0xb10 [ 1233.031253][T22822] ret_from_fork_asm+0x1a/0x30 [ 1233.033509][T22822] } [ 1233.034398][T22822] ... key at: [] tasklist_lock+0x18/0x40 [ 1233.036947][T22822] ... acquired at: [ 1233.038233][T22822] _raw_read_lock+0x5f/0x70 [ 1233.039782][T22822] send_sigio+0xb8/0x3e0 [ 1233.041224][T22822] kill_fasync+0x214/0x510 [ 1233.042720][T22822] lease_break_callback+0x23/0x30 [ 1233.044402][T22822] __break_lease+0x6cd/0x1800 [ 1233.046008][T22822] vfs_truncate+0x4ce/0x6d0 [ 1233.047539][T22822] __ia32_compat_sys_truncate+0x171/0x1e0 [ 1233.049435][T22822] __do_fast_syscall_32+0xe8/0x680 [ 1233.051149][T22822] do_fast_syscall_32+0x32/0x80 [ 1233.052779][T22822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1233.054886][T22822] [ 1233.055699][T22822] -> (&f_owner->lock){....}-{3:3} { [ 1233.057402][T22822] INITIAL USE at: [ 1233.058693][T22822] lock_acquire+0x179/0x330 [ 1233.060694][T22822] _raw_write_lock_irq+0x36/0x50 [ 1233.062827][T22822] __f_setown+0x61/0x3c0 [ 1233.064755][T22822] fcntl_dirnotify+0x7b1/0xb60 [ 1233.066744][T22822] do_fcntl+0x504/0x1660 [ 1233.068668][T22822] do_compat_fcntl64+0x367/0x710 [ 1233.070782][T22822] __do_fast_syscall_32+0xe8/0x680 [ 1233.072962][T22822] do_fast_syscall_32+0x32/0x80 [ 1233.075064][T22822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1233.077585][T22822] INITIAL READ USE at: [ 1233.079020][T22822] lock_acquire+0x179/0x330 [ 1233.081136][T22822] _raw_read_lock_irqsave+0x74/0x90 [ 1233.083450][T22822] send_sigio+0x31/0x3e0 [ 1233.085474][T22822] kill_fasync+0x214/0x510 [ 1233.087573][T22822] n_tty_receive_buf_common+0x5d1/0x19d0 [ 1233.090038][T22822] tty_ioctl+0x583/0x1650 [ 1233.092131][T22822] tty_compat_ioctl+0x24a/0x4d0 [ 1233.094350][T22822] __ia32_compat_sys_ioctl+0x242/0x370 [ 1233.096792][T22822] __do_fast_syscall_32+0xe8/0x680 [ 1233.099116][T22822] do_fast_syscall_32+0x32/0x80 [ 1233.101339][T22822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1233.104021][T22822] } [ 1233.104863][T22822] ... key at: [] __key.1+0x0/0x40 [ 1233.107197][T22822] ... acquired at: [ 1233.108401][T22822] _raw_read_lock_irqsave+0x74/0x90 [ 1233.110124][T22822] send_sigio+0x31/0x3e0 [ 1233.111551][T22822] kill_fasync+0x214/0x510 [ 1233.113034][T22822] n_tty_receive_buf_common+0x5d1/0x19d0 [ 1233.114880][T22822] tty_ioctl+0x583/0x1650 [ 1233.116376][T22822] tty_compat_ioctl+0x24a/0x4d0 [ 1233.117999][T22822] __ia32_compat_sys_ioctl+0x242/0x370 [ 1233.119779][T22822] __do_fast_syscall_32+0xe8/0x680 [ 1233.121476][T22822] do_fast_syscall_32+0x32/0x80 [ 1233.123100][T22822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1233.125164][T22822] [ 1233.125977][T22822] -> (&new->fa_lock){....}-{3:3} { [ 1233.127648][T22822] INITIAL USE at: [ 1233.128910][T22822] lock_acquire+0x179/0x330 [ 1233.130857][T22822] _raw_write_lock_irq+0x36/0x50 [ 1233.132929][T22822] fasync_remove_entry+0xb2/0x1e0 [ 1233.135012][T22822] fasync_helper+0xaf/0xd0 [ 1233.136967][T22822] sock_fasync+0x92/0x140 [ 1233.138864][T22822] __fput+0x96b/0xb70 [ 1233.140570][T22822] task_work_run+0x150/0x240 [ 1233.142511][T22822] exit_to_user_mode_loop+0xfb/0x540 [ 1233.144659][T22822] __do_fast_syscall_32+0x4a4/0x680 [ 1233.146829][T22822] do_fast_syscall_32+0x32/0x80 [ 1233.148881][T22822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1233.151422][T22822] INITIAL READ USE at: [ 1233.152808][T22822] lock_acquire+0x179/0x330 [ 1233.154879][T22822] _raw_read_lock_irqsave+0x74/0x90 [ 1233.157201][T22822] kill_fasync+0x138/0x510 [ 1233.159252][T22822] sock_wake_async+0x132/0x160 [ 1233.161392][T22822] sock_def_error_report+0x352/0x400 [ 1233.164063][T22822] sk_error_report+0x3f/0x260 [ 1233.166247][T22822] tcp_done_with_error+0xa4/0xc0 [ 1233.168345][T22822] tcp_reset+0x140/0x2e0 [ 1233.170163][T22822] tcp_rcv_state_process+0x1fbf/0x6540 [ 1233.172465][T22822] tcp_v6_do_rcv+0x7b8/0x1dc0 [ 1233.174576][T22822] __release_sock+0x158/0x450 [ 1233.176725][T22822] release_sock+0x5a/0x220 [ 1233.178754][T22822] __inet_stream_connect+0x659/0xf50 [ 1233.181091][T22822] inet_stream_connect+0x57/0xa0 [ 1233.183289][T22822] __sys_connect_file+0x141/0x1a0 [ 1233.185487][T22822] __sys_connect+0x13b/0x160 [ 1233.187542][T22822] __ia32_sys_connect+0x71/0xb0 [ 1233.189711][T22822] __do_fast_syscall_32+0xe8/0x680 [ 1233.191968][T22822] do_fast_syscall_32+0x32/0x80 [ 1233.194070][T22822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1233.196657][T22822] } [ 1233.197460][T22822] ... key at: [] __key.0+0x0/0x40 [ 1233.199638][T22822] ... acquired at: [ 1233.200864][T22822] lock_acquire+0x179/0x330 [ 1233.202375][T22822] _raw_read_lock_irqsave+0x74/0x90 [ 1233.204187][T22822] kill_fasync+0x138/0x510 [ 1233.205690][T22822] evdev_pass_values+0x619/0x9b0 [ 1233.207349][T22822] evdev_events+0x1bb/0x390 [ 1233.208849][T22822] input_pass_values+0x74e/0x880 [ 1233.210488][T22822] input_handle_event+0xf00/0x14d0 [ 1233.212201][T22822] input_inject_event+0x1e8/0x3b0 [ 1233.213838][T22822] evdev_write+0x2e1/0x440 [ 1233.215167][T22822] vfs_write+0x2a0/0x11d0 [ 1233.216672][T22822] ksys_write+0x1f8/0x250 [ 1233.218055][T22822] __do_fast_syscall_32+0xe8/0x680 [ 1233.219757][T22822] do_fast_syscall_32+0x32/0x80 [ 1233.221369][T22822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1233.223543][T22822] [ 1233.224334][T22822] [ 1233.224334][T22822] stack backtrace: [ 1233.226264][T22822] CPU: 2 UID: 0 PID: 22822 Comm: syz.2.3476 Tainted: G L syzkaller #0 PREEMPT(full) [ 1233.226283][T22822] Tainted: [L]=SOFTLOCKUP [ 1233.226287][T22822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1233.226294][T22822] Call Trace: [ 1233.226300][T22822] [ 1233.226305][T22822] dump_stack_lvl+0x116/0x1f0 [ 1233.226326][T22822] check_irq_usage+0x8e6/0xbc0 [ 1233.226345][T22822] ? __pfx___smp_call_single_queue+0x10/0x10 [ 1233.226368][T22822] ? check_path.constprop.0+0x24/0x50 [ 1233.226386][T22822] ? __lock_acquire+0x167f/0x2890 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1233.226396][T22822] __lock_acquire+0x167f/0x2890 [ 1233.226409][T22822] lock_acquire+0x179/0x330 [ 1233.226419][T22822] ? kill_fasync+0x138/0x510 [ 1233.226433][T22822] _raw_read_lock_irqsave+0x74/0x90 [ 1233.226450][T22822] ? kill_fasync+0x138/0x510 [ 1233.226461][T22822] kill_fasync+0x138/0x510 [ 1233.226474][T22822] evdev_pass_values+0x619/0x9b0 [ 1233.226491][T22822] evdev_events+0x1bb/0x390 [ 1233.226506][T22822] input_pass_values+0x74e/0x880 [ 1233.226522][T22822] input_handle_event+0xf00/0x14d0 [ 1233.226538][T22822] ? _copy_from_user+0x59/0xd0 [ 1233.226551][T22822] input_inject_event+0x1e8/0x3b0 [ 1233.226567][T22822] evdev_write+0x2e1/0x440 [ 1233.226582][T22822] ? __pfx_evdev_write+0x10/0x10 [ 1233.226597][T22822] ? bpf_lsm_file_permission+0x9/0x10 [ 1233.226611][T22822] ? security_file_permission+0x71/0x210 [ 1233.226626][T22822] ? rw_verify_area+0xcf/0x6c0 [ 1233.226641][T22822] ? __pfx_evdev_write+0x10/0x10 [ 1233.226655][T22822] vfs_write+0x2a0/0x11d0 [ 1233.226672][T22822] ? __pfx_vfs_write+0x10/0x10 [ 1233.226687][T22822] ? find_held_lock+0x2b/0x80 [ 1233.226702][T22822] ? __fget_files+0x204/0x3c0 [ 1233.226719][T22822] ? __fget_files+0x20e/0x3c0 [ 1233.226736][T22822] ksys_write+0x1f8/0x250 [ 1233.226752][T22822] ? __pfx_ksys_write+0x10/0x10 [ 1233.226768][T22822] ? fput+0x70/0xf0 [ 1233.226779][T22822] __do_fast_syscall_32+0xe8/0x680 [ 1233.226797][T22822] do_fast_syscall_32+0x32/0x80 [ 1233.226815][T22822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1233.226829][T22822] RIP: 0023:0xf705d579 [ 1233.226839][T22822] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1233.226851][T22822] RSP: 002b:00000000f544d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1233.226862][T22822] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1233.226869][T22822] RDX: 0000000000000037 RSI: 0000000000000000 RDI: 0000000000000000 [ 1233.226876][T22822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1233.226882][T22822] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1233.226889][T22822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1233.226900][T22822] [ 1233.227098][T12462] Bluetooth: hci3: command 0x0c1a tx timeout [ 1233.634164][ T8733] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.826518][ T8733] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.830577][ T9292] usb 6-1: USB disconnect, device number 6 [ 1233.899702][ T8733] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.962488][ T8733] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.048230][ T8733] erspan0: left allmulticast mode [ 1234.049987][ T8733] erspan0: left promiscuous mode [ 1234.052264][ T8733] bridge0: port 1(erspan0) entered disabled state [ 1234.237500][ T8733] team0: Port device bridge0 removed [ 1234.376920][ T8733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.380267][ T8733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.383450][ T8733] bond0 (unregistering): Released all slaves [ 1234.386386][ T8733] bond1 (unregistering): Released all slaves [ 1234.473475][ T8733] bond2 (unregistering): Released all slaves [ 1234.559848][ T8733] tipc: Disabling bearer [ 1234.562796][ T8733] tipc: Disabling bearer [ 1234.564506][ T8733] tipc: Left network mode [ 1234.797505][ T8733] hsr_slave_0: left promiscuous mode [ 1234.799546][ T8733] hsr_slave_1: left promiscuous mode [ 1234.806827][ T8733] pimreg (unregistering): left allmulticast mode [ 1234.842006][ T8733] team0 (unregistering): Port device batadv0 removed [ 1235.109063][ T8733] team0 (unregistering): Port device team_slave_1 removed [ 1235.136604][ T8733] team0 (unregistering): Port device team_slave_0 removed [ 1235.718985][ T8733] IPVS: stop unused estimator thread 0... [ 1235.856639][ T8733] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.860051][ T8733] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1235.873207][ T6952] wg2 speed is unknown, defaulting to 1000 [ 1235.875255][ T6952] syz2: Port: 1 Link DOWN [ 1235.876760][ T6952] wg2 speed is unknown, defaulting to 1000 [ 1235.917069][ T8733] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.920482][ T8733] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1235.986264][ T8733] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.989707][ T8733] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1236.065732][ T8733] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.069004][ T8733] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1236.205650][ T8733] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1236.255769][ T8733] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1236.335298][ T8733] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1236.405644][ T8733] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1236.467467][ T8733] erspan0: left allmulticast mode [ 1236.469079][ T8733] erspan0: left promiscuous mode [ 1236.470714][ T8733] bridge0: port 3(erspan0) entered disabled state [ 1236.474833][ T8733] bridge_slave_1: left allmulticast mode [ 1236.476631][ T8733] bridge_slave_1: left promiscuous mode [ 1236.478482][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.482047][ T8733] bridge_slave_0: left allmulticast mode [ 1236.484488][ T8733] bridge_slave_0: left promiscuous mode [ 1236.486905][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.496035][ T8733] batman_adv: batadv0: Interface deactivated: gretap1 [ 1236.672819][T20537] usb 42-1: device descriptor read/8, error -110 [ 1236.688660][ T8733] batman_adv: batadv0: Removing interface: gretap1 [ 1236.899162][ T8733] bond0 (unregistering): (slave 30): Releasing backup interface [ 1236.902805][ T8733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.906328][ T8733] bond0 (unregistering): Released all slaves [ 1236.989164][ T8733] bond1 (unregistering): Released all slaves [ 1237.083229][T20537] usb usb42-port1: unable to enumerate USB device [ 1237.235748][ T8733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1237.240395][ T8733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1237.244639][ T8733] bond0 (unregistering): Released all slaves [ 1237.343992][ T8733] tipc: Disabling bearer [ 1237.346906][ T8733] tipc: Left network mode [ 1237.358980][ T8733] tipc: Disabling bearer [ 1237.361034][ T8733] tipc: Left network mode [ 1237.406088][ T8733] IPVS: stopping master sync thread 19806 ... [ 1237.826299][ T8733] hsr_slave_0: left promiscuous mode [ 1237.828709][ T8733] hsr_slave_1: left promiscuous mode [ 1237.830597][ T8733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1237.833055][ T8733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.835944][ T8733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1237.838296][ T8733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1237.842026][ T8733] hsr_slave_0: left promiscuous mode [ 1237.845384][ T8733] hsr_slave_1: left promiscuous mode [ 1237.849271][ T8733] veth1_macvtap: left promiscuous mode [ 1237.851046][ T8733] veth0_macvtap: left promiscuous mode [ 1237.852920][ T8733] veth1_vlan: left promiscuous mode [ 1237.854641][ T8733] veth0_vlan: left promiscuous mode [ 1237.880160][ T8733] team0 (unregistering): Port device batadv1 removed [ 1237.946876][ T8733] team0 (unregistering): Port device team_slave_1 removed [ 1237.951404][ T8733] team0 (unregistering): Port device team_slave_0 removed [ 1237.992122][ T3349] smc: removing ib device syz2 [ 1238.077273][ T12] smc: removing ib device sz1 [ 1238.080153][ T8733] team0 (unregistering): Port device batadv0 removed [ 1238.326560][ T8733] team0 (unregistering): Port device team_slave_1 removed [ 1238.352776][ T8733] team0 (unregistering): Port device team_slave_0 removed [ 1238.592155][ T8020] ªªªªªª speed is unknown, defaulting to 1000 [ 1238.594975][ T8020] sz1: Port: 1 Link DOWN [ 1239.241272][ T8733] IPVS: stop unused estimator thread 0... [ 1239.244358][ T8733] IPVS: stop unused estimator thread 0...