last executing test programs: 48m38.70232786s ago: executing program 1 (id=375): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x20, 0x3028}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x10040080) 48m34.597503727s ago: executing program 1 (id=376): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r0) 48m21.672206111s ago: executing program 1 (id=379): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000001100)={0x4000000, 0x4, 0x4}) close(r0) 48m18.412479791s ago: executing program 1 (id=380): r0 = syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x4fbe, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, 0x0) io_uring_enter(r0, 0x1, 0x135a, 0x0, 0x0, 0x0) 48m13.91640047s ago: executing program 1 (id=382): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x61, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x31, 0x50, 0xf9, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x7, 0x38, 0x1, {0x22, 0x5cb}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0xf5, 0x6}}}}}]}}]}}, 0x0) 48m1.742271742s ago: executing program 1 (id=385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020a02f000000", @ANYRES32=0x0, @ANYBLOB="00000000020000000c001500c405000070000000fd0008"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x8, 0xfa04, 0x108, 0x6c02, 0x230, 0x194, 0x194, 0x230, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0x108, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x2], 0x0, 0x0, 0x7a}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0xfffffffc, 0x2b0, 'pptp\x00', 'syz1\x00', {0x47c}}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@cpu={{0x28}, {0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}}, 0x0) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2000ca6, 0x0) r7 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) unshare(0x480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000003000)=""/4128, 0x32, 0x1020, 0x1}, 0x28) 47m13.754404786s ago: executing program 32 (id=385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020a02f000000", @ANYRES32=0x0, @ANYBLOB="00000000020000000c001500c405000070000000fd0008"], 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x8, 0xfa04, 0x108, 0x6c02, 0x230, 0x194, 0x194, 0x230, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0x108, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x2], 0x0, 0x0, 0x7a}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0xfffffffc, 0x2b0, 'pptp\x00', 'syz1\x00', {0x47c}}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@cpu={{0x28}, {0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}}, 0x0) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2000ca6, 0x0) r7 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) unshare(0x480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f0000003000)=""/4128, 0x32, 0x1020, 0x1}, 0x28) 39m55.27686458s ago: executing program 2 (id=420): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000010000000000000001b00100000000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a"], 0x104}}, 0x0) 39m44.252641393s ago: executing program 2 (id=422): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000b0e0000000000000000800018150000", @ANYRES32, @ANYBLOB="0000000700000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005400000095"], &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 39m35.081836713s ago: executing program 2 (id=424): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, 0x0) eventfd2(0x7fffffff, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 39m24.537534088s ago: executing program 2 (id=426): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) 39m9.341505753s ago: executing program 2 (id=429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 38m56.039506293s ago: executing program 2 (id=431): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 38m6.714512894s ago: executing program 33 (id=431): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 20m28.042808415s ago: executing program 0 (id=575): r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) 20m21.780952854s ago: executing program 0 (id=577): r0 = syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x4fbe, 0xc00, 0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x40000, 0x1}) io_uring_enter(r0, 0x1, 0x135a, 0x0, 0x0, 0x0) 20m12.825402322s ago: executing program 0 (id=579): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 20m2.374980994s ago: executing program 0 (id=580): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) 19m49.202693368s ago: executing program 0 (id=582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0xff, 0x8, 0xa, 0x4, 0x0, 0x6, 0x80, 0x10}, {0x8080000, 0x0, 0xc, 0x6, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x4000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xc3, 0x0, 0x3c}, {0x3000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x10000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0xfffffffffffffffc, 0x1, 0x400000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m29.243699749s ago: executing program 0 (id=584): syz_clone(0x91, 0x0, 0xd5cc402235073f75, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 18m40.161187153s ago: executing program 34 (id=584): syz_clone(0x91, 0x0, 0xd5cc402235073f75, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 58.289480714s ago: executing program 3 (id=721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x303, 0xf0, 0x0, {0x6}}, 0x14}}, 0x0) 48.919987112s ago: executing program 3 (id=723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}}, 0x18}}, 0x0) 46.199778593s ago: executing program 4 (id=724): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 41.963640747s ago: executing program 3 (id=725): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) 38.990120031s ago: executing program 4 (id=726): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x8, 0x0, &(0x7f0000000240)="87a905c5392467f7", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 32.121869912s ago: executing program 3 (id=727): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 28.411222867s ago: executing program 4 (id=728): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 20.569315682s ago: executing program 4 (id=729): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.455031419s ago: executing program 3 (id=730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r0, 0x3000) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x40010000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 12.719381416s ago: executing program 4 (id=731): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) 2.329451861s ago: executing program 3 (id=732): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0xff, 0x5, 0xd09a, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x200003, 0xffe, 0x80, 0xc, 0x2, 0x4, 0x7, 0xffff, 0x7, 0x4, 0x7ff, 0x830, 0x6, 0x9, 0x9, 0x800, 0x301, 0x2, 0x8001, 0x7, 0x3, 0x4, 0x5, 0x70f]}) 0s ago: executing program 4 (id=733): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) read$FUSE(r2, &(0x7f0000001c00)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:14431' (ED25519) to the list of known hosts. syzkaller login: [ 583.352188][ T3194] cgroup: Unknown subsys name 'net' [ 583.981934][ T3194] cgroup: Unknown subsys name 'cpuset' [ 584.141788][ T3194] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 693.493679][ T3194] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 914.708818][ T3207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.004582][ T3207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.552803][ T3209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.897989][ T3209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.543699][ T3207] hsr_slave_0: entered promiscuous mode [ 936.715290][ T3207] hsr_slave_1: entered promiscuous mode [ 940.458027][ T3209] hsr_slave_0: entered promiscuous mode [ 940.516600][ T3209] hsr_slave_1: entered promiscuous mode [ 940.556318][ T3209] debugfs: 'hsr0' already exists in 'hsr' [ 940.565334][ T3209] Cannot create hsr debugfs directory [ 952.392947][ T3207] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 952.789350][ T3207] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 953.048598][ T3207] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 953.246691][ T3207] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 957.248540][ T3209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 957.568288][ T3209] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 957.994456][ T3209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 958.398176][ T3209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 975.153410][ T3207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.397915][ T3209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.314228][ T3209] veth0_vlan: entered promiscuous mode [ 1048.842414][ T3209] veth1_vlan: entered promiscuous mode [ 1050.135341][ T3207] veth0_vlan: entered promiscuous mode [ 1050.936986][ T3207] veth1_vlan: entered promiscuous mode [ 1052.007092][ T3209] veth0_macvtap: entered promiscuous mode [ 1052.968166][ T3209] veth1_macvtap: entered promiscuous mode [ 1055.974924][ T3207] veth0_macvtap: entered promiscuous mode [ 1057.113950][ T3207] veth1_macvtap: entered promiscuous mode [ 1057.716008][ T3477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.855047][ T3477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.908936][ T3477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.981546][ T3477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.460567][ T3327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.462333][ T3327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.464126][ T3327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.465554][ T3327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.916400][ T3209] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1088.143314][ T3820] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1088.442394][ T3820] usb 2-1: Using ep0 maxpacket: 16 [ 1088.620944][ T3820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1088.746701][ T3820] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1088.748465][ T3820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.761968][ T3820] usb 2-1: Product: syz [ 1088.764031][ T3820] usb 2-1: Manufacturer: syz [ 1088.765651][ T3820] usb 2-1: SerialNumber: syz [ 1089.153381][ T3820] usb 2-1: config 0 descriptor?? [ 1089.644594][ T3820] hub 2-1:0.0: bad descriptor, ignoring hub [ 1089.673720][ T3820] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1090.044510][ T3820] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1104.713898][ T3690] usb 2-1: USB disconnect, device number 2 [ 1135.563352][ T3886] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1136.696651][ T3886] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1164.443524][ T3920] syzkaller0: entered promiscuous mode [ 1164.446323][ T3920] syzkaller0: entered allmulticast mode [ 1175.783486][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1176.382929][ T9] usb 1-1: config 9 interface 0 has no altsetting 0 [ 1176.499230][ T9] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 1176.505468][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.507678][ T9] usb 1-1: Product: syz [ 1176.509248][ T9] usb 1-1: Manufacturer: syz [ 1176.524243][ T9] usb 1-1: SerialNumber: syz [ 1179.146445][ T9] snd-usb-caiaq 1-1:9.0: can't set alt interface. [ 1179.148733][ T9] usb 1-1: unable to init card! (ret=-5) [ 1179.204861][ T9] snd-usb-caiaq 1-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 1179.367317][ T9] usb 1-1: USB disconnect, device number 2 [ 1204.334408][ T3820] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1204.611238][ T3820] usb 2-1: device descriptor read/64, error -71 [ 1205.048291][ T3820] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1205.347279][ T3820] usb 2-1: device descriptor read/64, error -71 [ 1205.483340][ T3820] usb usb2-port1: attempt power cycle [ 1206.065072][ T3820] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1206.156415][ T3820] usb 2-1: device descriptor read/8, error -71 [ 1206.593605][ T3820] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1206.915837][ T3820] usb 2-1: device descriptor read/8, error -71 [ 1207.122173][ T3820] usb usb2-port1: unable to enumerate USB device [ 1212.306584][ T3968] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 1236.553753][ T3983] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET) [ 1244.894726][ T3997] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 1250.464772][ T3936] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1250.712203][ T3936] usb 2-1: device descriptor read/64, error -71 [ 1251.226018][ T3936] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1251.520788][ T3936] usb 2-1: device descriptor read/64, error -71 [ 1251.644139][ T3936] usb usb2-port1: attempt power cycle [ 1252.174584][ T3936] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1252.364231][ T3936] usb 2-1: device descriptor read/8, error -71 [ 1252.894851][ T3936] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1253.047215][ T3936] usb 2-1: device descriptor read/8, error -71 [ 1253.212910][ T3936] usb usb2-port1: unable to enumerate USB device [ 1257.085822][ T4000] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1298.332372][ T3908] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1298.963929][ T3908] usb 2-1: device descriptor read/64, error -71 [ 1299.444713][ T3908] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1299.986502][ T3908] usb 2-1: device descriptor read/64, error -71 [ 1300.177531][ T3908] usb usb2-port1: attempt power cycle [ 1300.998518][ T3908] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1301.204460][ T3908] usb 2-1: device descriptor read/8, error -71 [ 1301.516543][ T3908] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1301.602777][ T3908] usb 2-1: device descriptor read/8, error -71 [ 1301.743159][ T3908] usb usb2-port1: unable to enumerate USB device [ 1333.292155][ T3820] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1333.485233][ T3820] usb 1-1: device descriptor read/64, error -71 [ 1333.794380][ T3820] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1334.026251][ T3820] usb 1-1: device descriptor read/64, error -71 [ 1334.177777][ T3820] usb usb1-port1: attempt power cycle [ 1334.852083][ T3820] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1334.924918][ T3820] usb 1-1: device descriptor read/8, error -71 [ 1335.286698][ T3820] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1335.357992][ T3820] usb 1-1: device descriptor read/8, error -71 [ 1335.504331][ T3820] usb usb1-port1: unable to enumerate USB device [ 1339.434146][ T3908] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1339.851579][ T3908] usb 1-1: device descriptor read/64, error -71 [ 1340.163566][ T3908] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1340.424044][ T3908] usb 1-1: device descriptor read/64, error -71 [ 1340.676221][ T3908] usb usb1-port1: attempt power cycle [ 1341.135175][ T3908] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1341.422767][ T3908] usb 1-1: device descriptor read/8, error -71 [ 1341.748588][ T3908] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1341.889297][ T3908] usb 1-1: device descriptor read/8, error -71 [ 1342.053766][ T3908] usb usb1-port1: unable to enumerate USB device [ 1367.764408][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1368.012198][ T9] usb 2-1: device descriptor read/64, error -71 [ 1368.314299][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1368.515982][ T9] usb 2-1: device descriptor read/64, error -71 [ 1368.666788][ T9] usb usb2-port1: attempt power cycle [ 1369.454213][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1369.502160][ T9] usb 2-1: device descriptor read/8, error -71 [ 1369.827500][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1370.068007][ T9] usb 2-1: device descriptor read/8, error -71 [ 1370.226300][ T9] usb usb2-port1: unable to enumerate USB device [ 1382.867847][ T4128] syzkaller0: entered promiscuous mode [ 1382.869243][ T4128] syzkaller0: entered allmulticast mode [ 1390.196930][ T4135] syzkaller0: entered promiscuous mode [ 1390.198362][ T4135] syzkaller0: entered allmulticast mode [ 1393.593754][ T3936] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1394.208191][ T3936] usb 1-1: device descriptor read/64, error -71 [ 1394.624475][ T3936] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1394.901768][ T3936] usb 1-1: device descriptor read/64, error -71 [ 1395.063283][ T3936] usb usb1-port1: attempt power cycle [ 1395.932415][ T3936] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1395.986377][ T3936] usb 1-1: device descriptor read/8, error -71 [ 1396.419224][ T3936] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1396.555799][ T3936] usb 1-1: device descriptor read/8, error -71 [ 1396.707223][ T3936] usb usb1-port1: unable to enumerate USB device [ 1411.531848][ T4159] syzkaller0: entered promiscuous mode [ 1411.533655][ T4159] syzkaller0: entered allmulticast mode [ 1546.598448][ T4256] netlink: 268 bytes leftover after parsing attributes in process `syz.1.84'. [ 1664.842732][ T4321] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1696.772054][ T4354] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1708.836376][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 1731.907132][ T4396] netlink: 268 bytes leftover after parsing attributes in process `syz.1.113'. [ 1741.594777][ T4400] No such timeout policy "syz1" [ 1772.428383][ T805] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1772.703515][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 1772.762295][ T805] usb 2-1: no configurations [ 1772.764420][ T805] usb 2-1: can't read configurations, error -22 [ 1773.055296][ T805] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1773.365978][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 1773.476569][ T805] usb 2-1: no configurations [ 1773.478917][ T805] usb 2-1: can't read configurations, error -22 [ 1773.519153][ T805] usb usb2-port1: attempt power cycle [ 1774.252854][ T805] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1774.347480][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 1774.388546][ T805] usb 2-1: no configurations [ 1774.403168][ T805] usb 2-1: can't read configurations, error -22 [ 1774.602609][ T805] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1774.727210][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 1774.775301][ T805] usb 2-1: no configurations [ 1774.778175][ T805] usb 2-1: can't read configurations, error -22 [ 1774.818638][ T805] usb usb2-port1: unable to enumerate USB device [ 1789.744292][ T4431] fuse: Bad value for 'fd' [ 1808.432795][ T4447] fuse: Bad value for 'fd' [ 1818.414172][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1818.776700][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1818.843890][ T9] usb 2-1: no configurations [ 1818.846242][ T9] usb 2-1: can't read configurations, error -22 [ 1819.079323][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1819.324453][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1819.397376][ T9] usb 2-1: no configurations [ 1819.401478][ T9] usb 2-1: can't read configurations, error -22 [ 1819.444081][ T9] usb usb2-port1: attempt power cycle [ 1820.448021][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1820.595701][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1820.667849][ T9] usb 2-1: no configurations [ 1820.675864][ T9] usb 2-1: can't read configurations, error -22 [ 1820.882526][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1820.924947][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1821.007937][ T9] usb 2-1: no configurations [ 1821.024102][ T9] usb 2-1: can't read configurations, error -22 [ 1821.032837][ T9] usb usb2-port1: unable to enumerate USB device [ 1835.875811][ T4467] fuse: Bad value for 'fd' [ 1860.018122][ T3820] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1860.443706][ T3820] usb 2-1: Using ep0 maxpacket: 32 [ 1860.508846][ T3820] usb 2-1: no configurations [ 1860.533975][ T3820] usb 2-1: can't read configurations, error -22 [ 1860.804555][ T3820] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1861.334461][ T3820] usb 2-1: Using ep0 maxpacket: 32 [ 1861.416995][ T3820] usb 2-1: no configurations [ 1861.426257][ T3820] usb 2-1: can't read configurations, error -22 [ 1861.455582][ T3820] usb usb2-port1: attempt power cycle [ 1861.655128][ T4481] fuse: Bad value for 'fd' [ 1862.016946][ T3820] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1862.172642][ T3820] usb 2-1: Using ep0 maxpacket: 32 [ 1862.268634][ T3820] usb 2-1: no configurations [ 1862.289138][ T3820] usb 2-1: can't read configurations, error -22 [ 1862.747265][ T3820] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1862.879399][ T3820] usb 2-1: Using ep0 maxpacket: 32 [ 1862.973235][ T3820] usb 2-1: no configurations [ 1862.975207][ T3820] usb 2-1: can't read configurations, error -22 [ 1863.003343][ T3820] usb usb2-port1: unable to enumerate USB device [ 1886.956458][ T4494] fuse: Bad value for 'fd' [ 1914.468426][ T4507] fuse: Bad value for 'fd' [ 1934.749485][ T4521] fuse: Bad value for 'fd' [ 1941.032797][ T4525] Zero length message leads to an empty skb [ 1952.486604][ T4531] fuse: Bad value for 'fd' [ 1957.163303][ T4533] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1957.226864][ T4533] block device autoloading is deprecated and will be removed. [ 1957.446827][ T4530] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1957.448658][ T4530] block device autoloading is deprecated and will be removed. [ 1990.110905][ T4553] fuse: Bad value for 'fd' [ 2192.541725][ T4690] fuse: Unknown parameter 'group_i00000000000000000000' [ 2220.189001][ T4705] fuse: Unknown parameter 'group_i00000000000000000000' [ 2236.443114][ T4398] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 2237.172804][ T4398] usb 2-1: config 9 interface 0 has no altsetting 0 [ 2237.656140][ T4398] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=34.15 [ 2237.696956][ T4398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2237.767064][ T4398] usb 2-1: Product: syz [ 2237.794036][ T4398] usb 2-1: Manufacturer: syz [ 2237.796060][ T4398] usb 2-1: SerialNumber: syz [ 2241.517872][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 2243.682812][ T4398] snd-usb-caiaq 2-1:9.0: can't set alt interface. [ 2243.684815][ T4398] usb 2-1: unable to init card! (ret=-5) [ 2243.708078][ T4398] snd-usb-caiaq 2-1:9.0: probe with driver snd-usb-caiaq failed with error -5 [ 2243.953791][ T4398] usb 2-1: USB disconnect, device number 31 [ 2278.404197][ T4743] fuse: Unknown parameter 'group_i00000000000000000000' [ 2318.606462][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 2461.894316][ T4843] fuse: Bad value for 'user_id' [ 2461.896578][ T4843] fuse: Bad value for 'user_id' [ 2474.113143][ T4847] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2501.518212][ T4874] fuse: Bad value for 'user_id' [ 2501.553134][ T4874] fuse: Bad value for 'user_id' [ 2535.872825][ T4888] netlink: 268 bytes leftover after parsing attributes in process `syz.1.264'. [ 2632.947901][ T4956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 2670.674524][ T4978] fuse: Bad value for 'group_id' [ 2670.676714][ T4978] fuse: Bad value for 'group_id' [ 2713.935908][ T5001] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 2732.203802][ T3820] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 2732.208317][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 2732.553953][ T3820] usb 2-1: device descriptor read/64, error -32 [ 2732.938058][ T3820] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 2734.842736][ T3820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2734.904522][ T3820] usb 2-1: not running at top speed; connect to a high speed hub [ 2735.147674][ T3820] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2735.153309][ T3820] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 2735.343837][ T3820] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 2735.346338][ T3820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2735.348189][ T3820] usb 2-1: Product: 㽀ᕯ昒甡똘嫜㒷䥐Ꞝ鄂ﰜ楸䍐궍噐ￎꉋ츢Ǒ等≤華ꢑ밻ﺣ돱汰齢㐥䨓䶀铖ꛅ州穦倆㖄⠗⎽骢녑冭ꬥ脪藢㤘绣⊏⥄㞗꣱큉 [ 2735.390847][ T3820] usb 2-1: Manufacturer: ᣀ訿斖ᰇꟂՊᷬ⁇췹蟸鶎裱濼ڭ礽Ꝩ孹䙡贒삖戛 [ 2735.393624][ T3820] usb 2-1: SerialNumber: syz [ 2742.566853][ T3820] usb 2-1: USB disconnect, device number 33 [ 2783.608317][ T5071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.312'. [ 2891.387292][ T5157] netlink: 268 bytes leftover after parsing attributes in process `syz.0.344'. [ 2899.824172][ T5159] No such timeout policy "syz1" [ 3040.096503][ T5267] netlink: 268 bytes leftover after parsing attributes in process `syz.1.385'. [ 3051.422017][ T5271] No such timeout policy "syz1" [ 3122.049013][ T4857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3124.216478][ T4857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3126.689492][ T4857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3128.996075][ T4857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3145.288806][ T4857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3145.412742][ T4857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3145.490889][ T4857] bond0 (unregistering): Released all slaves [ 3147.039467][ T4857] hsr_slave_0: left promiscuous mode [ 3147.157463][ T4857] hsr_slave_1: left promiscuous mode [ 3147.876750][ T4857] veth1_macvtap: left promiscuous mode [ 3147.888233][ T4857] veth0_macvtap: left promiscuous mode [ 3147.901536][ T4857] veth1_vlan: left promiscuous mode [ 3147.922892][ T4857] veth0_vlan: left promiscuous mode [ 3214.678375][ T5284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3215.142608][ T5284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3252.057575][ T5284] hsr_slave_0: entered promiscuous mode [ 3252.156432][ T5284] hsr_slave_1: entered promiscuous mode [ 3276.083406][ T5284] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3276.675400][ T5284] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3276.938262][ T5284] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3277.669557][ T5284] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3315.596149][ T5284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3422.839568][ T5713] fuse: Bad value for 'user_id' [ 3422.896284][ T5713] fuse: Bad value for 'user_id' [ 3482.014525][ T5284] veth0_vlan: entered promiscuous mode [ 3484.117676][ T5284] veth1_vlan: entered promiscuous mode [ 3490.148797][ T5284] veth0_macvtap: entered promiscuous mode [ 3491.574132][ T5284] veth1_macvtap: entered promiscuous mode [ 3499.313062][ T5141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3499.463868][ T5141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3499.502307][ T5141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3499.638616][ T5140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3531.283893][ T5780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.420'. [ 3559.324685][ T5795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3559.567661][ T5795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3654.537448][ T5841] netlink: 284 bytes leftover after parsing attributes in process `syz.0.438'. [ 3669.259503][ T5141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3673.936648][ T5141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3677.068123][ T5141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3680.207268][ T5141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3719.978447][ T5141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3720.495312][ T5141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3722.589037][ T5141] bond0 (unregistering): Released all slaves [ 3725.664110][ T5141] hsr_slave_0: left promiscuous mode [ 3725.785146][ T5141] hsr_slave_1: left promiscuous mode [ 3726.629217][ T5141] veth1_macvtap: left promiscuous mode [ 3726.655719][ T5141] veth0_macvtap: left promiscuous mode [ 3726.684056][ T5141] veth1_vlan: left promiscuous mode [ 3726.687793][ T5141] veth0_vlan: left promiscuous mode [ 3861.338883][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3861.726623][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3902.053586][ T5845] hsr_slave_0: entered promiscuous mode [ 3902.117085][ T5845] hsr_slave_1: entered promiscuous mode [ 3929.695343][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3930.255744][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3931.784066][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3932.687631][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3976.695890][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3983.066798][ T6253] fuse: Unknown parameter 'grou00000000000000000000' [ 4110.438160][ T5845] veth0_vlan: entered promiscuous mode [ 4112.122713][ T5845] veth1_vlan: entered promiscuous mode [ 4115.846475][ T5845] veth0_macvtap: entered promiscuous mode [ 4116.497936][ T5845] veth1_macvtap: entered promiscuous mode [ 4120.074377][ T4857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4120.394033][ T3477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4120.422938][ T3477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4120.426030][ T3477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4149.731650][ T6351] kvm [6351]: VCPU exit error -95 [ 4149.735619][ T6351] kvm [6351]: SEPC=0x0 SSTATUS=0x200004120 HSTATUS=0x2002001c0 [ 4149.763904][ T6351] kvm [6351]: SCAUSE=0x14 STVAL=0x0 HTVAL=0x0 HTINST=0x0 [ 4187.242522][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4187.293395][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4233.035299][ T6385] netlink: 100 bytes leftover after parsing attributes in process `syz.3.490'. [ 4283.233567][ T6410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4283.429694][ T6410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4349.874636][ T6444] fuse: Unknown parameter '0x0000000000000004' [ 4352.927412][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4353.582875][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4381.918688][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.517'. [ 4398.372354][ T6461] fuse: Unknown parameter '0x0000000000000004' [ 4422.654434][ T6473] fuse: Unknown parameter '0x0000000000000004' [ 4455.456258][ T6498] fuse: Unknown parameter '0x0000000000000004' [ 4479.271852][ T6515] fuse: Unknown parameter 'fd0x0000000000000004' [ 4500.507756][ T6528] fuse: Unknown parameter 'fd0x0000000000000004' [ 4542.357623][ T6549] fuse: Unknown parameter 'fd0x0000000000000004' [ 4672.043060][ T31] audit: type=1326 audit(4670.330:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.3.570" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a7332c6 code=0x7ffc0000 [ 4672.117687][ T31] audit: type=1326 audit(4670.470:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.3.570" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a7332c6 code=0x7ffc0000 [ 4672.625353][ T31] audit: type=1326 audit(4670.980:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.3.570" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a7332c6 code=0x7ffc0000 [ 4672.656397][ T31] audit: type=1326 audit(4670.980:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.3.570" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a7332c6 code=0x7ffc0000 [ 4672.668253][ T31] audit: type=1326 audit(4671.020:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.3.570" exe="/syz-executor" sig=0 arch=c00000f3 syscall=213 compat=0 ip=0x7fff9a7332c6 code=0x7ffc0000 [ 4672.704629][ T31] audit: type=1326 audit(4671.020:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.3.570" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a7332c6 code=0x7ffc0000 [ 4672.816519][ T31] audit: type=1326 audit(4671.150:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.3.570" exe="/syz-executor" sig=0 arch=c00000f3 syscall=98 compat=0 ip=0x7fff9a7332c6 code=0x7ffc0000 [ 4673.386241][ T31] audit: type=1326 audit(4671.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.3.570" exe="/syz-executor" sig=0 arch=c00000f3 syscall=436 compat=0 ip=0x7fff9a7332c6 code=0x7ffc0000 [ 4673.444607][ T31] audit: type=1326 audit(4671.760:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.3.570" exe="/syz-executor" sig=0 arch=c00000f3 syscall=94 compat=0 ip=0x7fff9a7332c6 code=0x7ffc0000 [ 4941.459081][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4942.033961][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4992.944962][ T6665] hsr_slave_0: entered promiscuous mode [ 4993.086549][ T6665] hsr_slave_1: entered promiscuous mode [ 4993.413119][ T6665] debugfs: 'hsr0' already exists in 'hsr' [ 4993.415501][ T6665] Cannot create hsr debugfs directory [ 5022.494802][ T6665] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 5023.406238][ T6665] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 5024.402089][ T6665] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 5024.903577][ T6665] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 5075.496722][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5232.766187][ T6665] veth0_vlan: entered promiscuous mode [ 5235.853534][ T6665] veth1_vlan: entered promiscuous mode [ 5241.585070][ T6665] veth0_macvtap: entered promiscuous mode [ 5242.778178][ T6665] veth1_macvtap: entered promiscuous mode [ 5247.657266][ T4780] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5247.723926][ T4780] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5247.726028][ T4780] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5247.727662][ T4780] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5264.897612][ T7065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5265.013238][ T7065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5303.399393][ T7081] netlink: 'syz.3.631': attribute type 4 has an invalid length. [ 5304.637283][ T7084] netlink: 'syz.3.631': attribute type 4 has an invalid length. [ 5322.153146][ T7089] netlink: 72 bytes leftover after parsing attributes in process `syz.3.633'. [ 5359.886779][ T7104] netlink: 72 bytes leftover after parsing attributes in process `syz.3.639'. [ 5364.906338][ T7108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.641'. [ 5386.744472][ T7125] netlink: 72 bytes leftover after parsing attributes in process `syz.3.645'. [ 5439.123082][ T7145] kvm [7145]: VCPU exit error -95 [ 5439.125321][ T7145] kvm [7145]: SEPC=0x0 SSTATUS=0x200004120 HSTATUS=0x2002001c0 [ 5439.127211][ T7145] kvm [7145]: SCAUSE=0x14 STVAL=0x0 HTVAL=0x0 HTINST=0x0 [ 5450.679603][ T7152] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 5485.188453][ T7164] syzkaller0: entered promiscuous mode [ 5485.191808][ T7164] syzkaller0: entered allmulticast mode [ 5540.075832][ T7187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5540.169354][ T7187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5580.336913][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5580.389431][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5590.106226][ T7215] capability: warning: `syz.3.670' uses deprecated v2 capabilities in a way that may be insecure [ 5600.025939][ T7219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5600.105922][ T7219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5637.411843][ T7235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5637.493984][ T7235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5669.451512][ T7252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5669.493888][ T7252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5782.854357][ T7303] netlink: 72 bytes leftover after parsing attributes in process `syz.4.705'. [ 5806.056041][ T7320] netlink: 72 bytes leftover after parsing attributes in process `syz.3.711'. [ 5851.556683][ T7335] netlink: 72 bytes leftover after parsing attributes in process `syz.4.718'. [ 5921.681860][ C0] ------------[ cut here ]------------ [ 5921.682568][ C0] WARNING: [irq_settings_is_per_cpu_devid(desc)] kernel/irq/manage.c:2150 at request_threaded_irq+0x320/0x38c, CPU#0: syz.3.732/7373 [ 5921.685562][ C0] Modules linked in: [ 5921.688094][ C0] CPU: 0 UID: 0 PID: 7373 Comm: syz.3.732 Tainted: G L syzkaller #0 PREEMPT [ 5921.689018][ C0] Tainted: [L]=SOFTLOCKUP [ 5921.689270][ C0] Hardware name: riscv-virtio,qemu (DT) [ 5921.690017][ C0] epc : request_threaded_irq+0x320/0x38c [ 5921.690808][ C0] ra : request_threaded_irq+0x320/0x38c [ 5921.691523][ C0] epc : ffffffff8033dfb0 ra : ffffffff8033dfb0 sp : ffff8f8000e077c0 [ 5921.691944][ C0] gp : ffffffff8a22a0c0 tp : ffffaf801af0b500 t0 : ffffffff8642fdbe [ 5921.692349][ C0] t1 : ffffffff91601820 t2 : ffffffff80170222 s0 : ffff8f8000e07820 [ 5921.692936][ C0] s1 : 0000000000000000 a0 : 0000000000000005 a1 : 0000000000000000 [ 5921.693320][ C0] a2 : 0000000000080000 a3 : ffffffff8033dfb0 a4 : ffff8f8004f6b060 [ 5921.693769][ C0] a5 : 0000000000010060 a6 : 0000000000000003 a7 : ffffffff86864460 [ 5921.694156][ C0] s2 : 0000000000200000 s3 : ffffaf8011d18800 s4 : 0000000000000005 [ 5921.694558][ C0] s5 : ffffffff84bcbc14 s6 : ffffaf801d4d8000 s7 : 0000000000000000 [ 5921.694985][ C0] s8 : ffffffff877b5b00 s9 : 0000000000020000 s10: ffffaf801d4d8000 [ 5921.695385][ C0] s11: 0000000000000001 t3 : 0000000000000001 t4 : 0000000000001fff [ 5921.695766][ C0] t5 : 00000000000000c8 t6 : 0000000000000002 ssp : 0000000000000000 [ 5921.696135][ C0] status: 0000000200000120 badaddr: ffffffff8033dfb0 cause: 0000000000000003 [ 5921.696687][ C0] [] request_threaded_irq+0x320/0x38c [ 5921.697594][ C0] [] parport_attach+0x780/0xb14 [ 5921.698361][ C0] [] comedi_device_attach+0x350/0x7ec [ 5921.699052][ C0] [] do_devconfig_ioctl+0x1a2/0x654 [ 5921.699687][ C0] [] comedi_unlocked_ioctl+0x750/0x30e0 [ 5921.700263][ C0] [] __riscv_sys_ioctl+0x17c/0x1e4 [ 5921.701002][ C0] [] syscall_handler+0x92/0x114 [ 5921.701780][ C0] [] do_trap_ecall_u+0x402/0x680 [ 5921.702448][ C0] [] handle_exception+0x15e/0x16a [ 5921.705416][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 5921.707270][ C0] CPU: 0 UID: 0 PID: 7373 Comm: syz.3.732 Tainted: G L syzkaller #0 PREEMPT [ 5921.708129][ C0] Tainted: [L]=SOFTLOCKUP [ 5921.708336][ C0] Hardware name: riscv-virtio,qemu (DT) [ 5921.708631][ C0] Call Trace: [ 5921.708863][ C0] [] dump_backtrace+0x2e/0x3c [ 5921.709723][ C0] [] show_stack+0x30/0x3c [ 5921.710228][ C0] [] dump_stack_lvl+0x114/0x1ac [ 5921.711034][ C0] [] dump_stack+0x1c/0x28 [ 5921.711783][ C0] [] vpanic+0x334/0x760 [ 5921.712315][ C0] [] trace_suspend_resume+0x0/0x420 [ 5921.713384][ C0] [] check_panic_on_warn+0xc0/0xe4 [ 5921.714025][ C0] [] __warn+0x216/0x654 [ 5921.714600][ C0] [] __report_bug+0x1d4/0x2ac [ 5921.715638][ C0] [] report_bug+0xd8/0x28c [ 5921.716678][ C0] [] handle_break+0x13a/0x30c [ 5921.717362][ C0] [] do_trap_break+0x188/0x358 [ 5921.718014][ C0] [] handle_exception+0x15e/0x16a [ 5921.718628][ C0] [] request_threaded_irq+0x320/0x38c [ 5921.719258][ C0] [] parport_attach+0x780/0xb14 [ 5921.720035][ C0] [] comedi_device_attach+0x350/0x7ec [ 5921.720690][ C0] [] do_devconfig_ioctl+0x1a2/0x654 [ 5921.721258][ C0] [] comedi_unlocked_ioctl+0x750/0x30e0 [ 5921.721888][ C0] [] __riscv_sys_ioctl+0x17c/0x1e4 [ 5921.722431][ C0] [] syscall_handler+0x92/0x114 [ 5921.723123][ C0] [] do_trap_ecall_u+0x402/0x680 [ 5921.723795][ C0] [] handle_exception+0x15e/0x16a [ 5921.725000][ C0] SMP: stopping secondary CPUs