last executing test programs: 12m54.319715301s ago: executing program 32 (id=682): io_setup(0x9, &(0x7f0000000000)=0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 12m50.676158155s ago: executing program 33 (id=893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 11m43.245089104s ago: executing program 34 (id=2917): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 10m13.258767248s ago: executing program 35 (id=6667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 9m50.513542357s ago: executing program 36 (id=6935): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x0, 0x8, 0x0, 0xf}) 9m39.504638123s ago: executing program 37 (id=7246): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 9m18.262333354s ago: executing program 38 (id=7641): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 5m47.241270667s ago: executing program 39 (id=12065): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 5m38.208958333s ago: executing program 9 (id=12316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xebd3, 0x0, 0x5, 0x8, 0x2]}}]}]}]}, 0x38}}, 0x20048000) 5m38.157245275s ago: executing program 9 (id=12318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m38.084812552s ago: executing program 9 (id=12322): socket$caif_seqpacket(0x25, 0x5, 0x5) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x73e0, 0xbd66, 0x1, 0x0, 0x27) 5m38.080821667s ago: executing program 9 (id=12324): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 5m38.00019886s ago: executing program 9 (id=12325): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) read$alg(r1, &(0x7f0000000040)=""/136, 0x88) 5m37.749077812s ago: executing program 9 (id=12331): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 5m37.694962296s ago: executing program 40 (id=12331): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 5m31.814017306s ago: executing program 1 (id=12475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x7bcf, 0x2830, 0x9, 0x1, 0x2, 0x7, 0x2]}}]}]}]}, 0x38}}, 0x4000) 5m31.764752597s ago: executing program 1 (id=12477): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x80, 0x1e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @NDA_VLAN={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 5m31.712902295s ago: executing program 1 (id=12480): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x6, 0x8, 0x1}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2a, 0x259fdc20, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c891}, 0x20000000) 5m31.667854465s ago: executing program 1 (id=12483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f000000a100)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x30000}}) 5m31.443140045s ago: executing program 1 (id=12494): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 5m31.438052365s ago: executing program 1 (id=12497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x409, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x5, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x48}}, 0x0) 5m16.423547737s ago: executing program 41 (id=12497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x409, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x5, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x48}}, 0x0) 5m11.257288517s ago: executing program 8 (id=12803): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="05000000010001", 0x7) 5m11.209337319s ago: executing program 8 (id=12808): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000002280), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800040, &(0x7f0000000440)=ANY=[@ANYBLOB="78224fc427ed619f319b73733d616e792c63616368653d66736361636865"]) chmod(&(0x7f00000001c0)='./file0\x00', 0x40) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) 5m11.159200173s ago: executing program 8 (id=12811): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x4e23, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffeff, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d2, 0x32}, 0x2, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 5m11.033313882s ago: executing program 8 (id=12817): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000280)='./file0\x00', 0x0, 0x97801, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x112) 5m10.942509596s ago: executing program 8 (id=12820): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 5m10.674310979s ago: executing program 8 (id=12829): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) close(0x3) 5m10.631560347s ago: executing program 42 (id=12829): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) close(0x3) 2m54.421178767s ago: executing program 6 (id=15241): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) 2m54.340478908s ago: executing program 6 (id=15242): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 2m54.3391445s ago: executing program 6 (id=15243): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7", 0x77}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f40)}}], 0x3, 0x0) 2m54.231275093s ago: executing program 6 (id=15245): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) 2m54.226639465s ago: executing program 6 (id=15246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000100)) 2m53.822132406s ago: executing program 6 (id=15250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000160a03020000000000000000020000000900020073797abf000000000900010073797a3000000000140003800800014000000000080002400000491f0900020073797a30000000001400000011000100"], 0x74}}, 0x2000c044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m53.74132786s ago: executing program 43 (id=15250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000160a03020000000000000000020000000900020073797abf000000000900010073797a3000000000140003800800014000000000080002400000491f0900020073797a30000000001400000011000100"], 0x74}}, 0x2000c044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x2c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m12.070143153s ago: executing program 3 (id=16040): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x8, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = epoll_create(0xa1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x2000}) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x40}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x34000091) 2m11.081185261s ago: executing program 3 (id=16059): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 2m10.16565025s ago: executing program 3 (id=16083): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e65766500001400028005000d0002000000050004000100000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m10.004754588s ago: executing program 3 (id=16085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x4000200d}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x41) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084000000041"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m9.50671296s ago: executing program 3 (id=16094): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' '], 0x40}}], 0x1, 0x40000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = syz_create_resource$binfmt(&(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 2m9.470244526s ago: executing program 3 (id=16095): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x800248a0, 0x0) 1m54.469027068s ago: executing program 44 (id=16095): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x800248a0, 0x0) 7.080908695s ago: executing program 7 (id=18204): r0 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000001c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000240)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(r2, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 6.890114817s ago: executing program 7 (id=18206): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(0x3) 6.320798718s ago: executing program 7 (id=18209): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x6, 0xb, 0x802, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c6700002c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bd6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287eda920fe0f7cfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de132cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f5b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4786c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0xffffffff, 0x0, {0x5, 0x0, 0x7, 0x6, 0x8, 0xffffffffffffff0c, 0x9ef, 0xfffffffb, 0x9, 0x6000, 0x9ea, 0xffffffffffffffff, 0xee01, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimes(&(0x7f0000000200)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 6.234444664s ago: executing program 7 (id=18210): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x88000, 0x0) 6.10077108s ago: executing program 7 (id=18211): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.53086593s ago: executing program 7 (id=18212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf27, 0x70bd28, 0xffffeffd, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5.495732395s ago: executing program 45 (id=18212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf27, 0x70bd28, 0xffffeffd, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 2.551176244s ago: executing program 0 (id=18261): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0)='~', 0x1, 0x4040001, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000006c0)="1e", 0x1}], 0x1}, 0x24028464) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) 1.636994673s ago: executing program 0 (id=18283): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 1.508958182s ago: executing program 0 (id=18284): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) 1.418353959s ago: executing program 0 (id=18287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd35, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 1.293794032s ago: executing program 0 (id=18290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.219899593s ago: executing program 5 (id=18292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0xc101) sendmsg$inet6(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000140)=0x7, 0x4) 1.138779832s ago: executing program 0 (id=18294): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' mO'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) 916.271752ms ago: executing program 2 (id=18297): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 887.846075ms ago: executing program 2 (id=18299): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2359830, 0x0) 775.010746ms ago: executing program 2 (id=18301): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r1], 0x10) 698.513012ms ago: executing program 2 (id=18303): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_IFALIAS={0x14, 0x14, 'team_slave_0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 628.408661ms ago: executing program 2 (id=18305): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d0900000800030006"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x800) 537.143071ms ago: executing program 2 (id=18307): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f0000000200)="bd4c4cc2", 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x0, 0x80000000, 0xffffffed, 0xd, 0x0, 0x40000, 0x80042, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000040)) 381.903828ms ago: executing program 4 (id=18311): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, r0, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x4, 0x1000) fanotify_mark(r2, 0x1, 0x8000021, r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1) openat$dir(0xffffff9c, &(0x7f0000000580)='./file0\x00', 0x4041, 0x148) 291.692505ms ago: executing program 5 (id=18312): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r0, &(0x7f00000011c0)=""/194, 0xc2) 288.008249ms ago: executing program 4 (id=18313): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x20020080, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f00000034c0)="da73", 0x2, 0x800, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 286.790273ms ago: executing program 5 (id=18314): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0xfffffffd, 0x2000, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x1) 212.374913ms ago: executing program 5 (id=18315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 158.588794ms ago: executing program 4 (id=18316): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x18c) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 90.715915ms ago: executing program 4 (id=18317): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = epoll_create(0x7fff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x80000000}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 90.446075ms ago: executing program 4 (id=18318): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1}, 0xf0) 75.600415ms ago: executing program 5 (id=18319): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4008, 0x7, &(0x7f0000006680)) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(r1, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) open_tree(0xffffffffffffff9c, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x89901) 7.698372ms ago: executing program 4 (id=18320): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r0 = syz_io_uring_setup(0x88c, &(0x7f0000000300)={0x0, 0xaee0, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 0s ago: executing program 5 (id=18321): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x0, 0x4}, 0x20) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 proto 3 vid 0x03F0 pid 0x6C17 [ 759.819710][T11295] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16439'. [ 759.861576][T13733] usb 9-1: usb_control_msg returned -32 [ 759.863446][T13733] usbtmc 9-1:16.0: can't read capabilities [ 759.883518][ T1453] usb 12-1: USB disconnect, device number 27 [ 759.895787][ T1453] usblp0: removed [ 760.073647][T11303] netlink: 'syz.5.16443': attribute type 27 has an invalid length. [ 760.117447][T11303] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.120707][T11303] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.185677][T11303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.193433][T11303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.312291][T11307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.316618][T11307] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.323254][T11307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 760.328879][ T1147] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.341087][ T1147] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.344427][ T1147] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.349828][T32261] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.695580][ T1453] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 760.867293][ T1453] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 760.871996][ T1453] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 760.875443][ T1453] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 760.878516][ T1453] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.885830][T11316] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 760.892139][ T1453] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 761.097218][ T54] usb 12-1: USB disconnect, device number 28 [ 761.606831][T11326] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16451'. [ 761.647552][T11326] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16451'. [ 761.651280][T11326] nbd: device at index 64 is going down [ 761.745877][T25318] udevd[25318]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 761.759970][T25318] udevd[25318]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 761.907238][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16458'. [ 762.195492][ T29] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 762.209747][T21543] usb 9-1: USB disconnect, device number 14 [ 762.347236][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 762.351084][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 762.354456][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 762.357854][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 762.362093][ T29] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 762.365897][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.370291][ T29] usb 10-1: config 0 descriptor?? [ 762.782387][ T29] plantronics 0003:047F:FFFF.0020: ignoring exceeding usage max [ 762.801134][ T29] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 763.084763][T11400] netlink: 'syz.0.16483': attribute type 4 has an invalid length. [ 763.242044][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16488'. [ 763.246760][T11415] netlink: 'syz.0.16488': attribute type 6 has an invalid length. [ 763.832366][T11458] futex_wake_op: syz.4.16498 tries to shift op by -1; fix this program [ 764.500541][ T40] audit: type=1326 audit(1769376541.264:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.4.16509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 764.509674][ T40] audit: type=1326 audit(1769376541.264:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.4.16509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 764.523081][ T40] audit: type=1326 audit(1769376541.264:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.4.16509" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 764.532342][ T40] audit: type=1326 audit(1769376541.264:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.4.16509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 764.542733][ T40] audit: type=1326 audit(1769376541.264:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.4.16509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 764.551054][ T40] audit: type=1326 audit(1769376541.264:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.4.16509" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 764.559821][ T40] audit: type=1326 audit(1769376541.264:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.4.16509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 764.568340][ T40] audit: type=1326 audit(1769376541.264:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.4.16509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 764.576591][ T40] audit: type=1326 audit(1769376541.274:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.4.16509" exe="/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 764.584377][ T40] audit: type=1326 audit(1769376541.274:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.4.16509" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 764.598512][T11495] netlink: 'syz.5.16510': attribute type 13 has an invalid length. [ 764.787453][ T6026] usb 10-1: USB disconnect, device number 16 [ 766.226932][T11570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.230801][T11570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.233855][T11570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.245352][T11570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.254287][T11570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.265364][T11569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.404131][T11581] kvm: Disabled LAPIC found during irq injection [ 766.765599][T11610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.769231][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.786257][T11610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.791260][T32261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.891929][T11620] netlink: 'syz.7.16562': attribute type 9 has an invalid length. [ 766.897733][T11620] netlink: 'syz.7.16562': attribute type 11 has an invalid length. [ 766.900961][T11620] netlink: 'syz.7.16562': attribute type 12 has an invalid length. [ 766.903826][T11620] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.16562'. [ 766.907570][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16562'. [ 767.073322][T11619] ip6_vti0 speed is unknown, defaulting to 1000 [ 767.160371][T11632] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16566'. [ 767.537521][ T7682] block nbd1: Possible stuck request ffff888027078000: control (read@0,1024B). Runtime 300 seconds [ 767.544758][ T7682] block nbd1: Possible stuck request ffff888027078200: control (read@1024,1024B). Runtime 300 seconds [ 767.549778][ T7682] block nbd1: Possible stuck request ffff888027078400: control (read@2048,1024B). Runtime 300 seconds [ 767.554371][ T7682] block nbd1: Possible stuck request ffff888027078600: control (read@3072,1024B). Runtime 300 seconds [ 767.655404][ T6026] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 767.810696][ T6026] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 767.816040][ T6026] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 767.821353][ T6026] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 767.824955][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.034857][ T6026] usb 5-1: usb_control_msg returned -32 [ 768.037185][ T6026] usbtmc 5-1:16.0: can't read capabilities [ 768.387762][T11666] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -32 [ 768.390963][ T5972] usb 5-1: USB disconnect, device number 41 [ 768.937039][T11692] netlink: 'syz.0.16593': attribute type 1 has an invalid length. [ 769.286825][T11715] ip6_vti0 speed is unknown, defaulting to 1000 [ 769.316337][T11717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16602'. [ 769.367105][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16604'. [ 769.370052][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16604'. [ 769.534531][T11730] netlink: 'syz.0.16608': attribute type 9 has an invalid length. [ 769.538243][T11730] netlink: 'syz.0.16608': attribute type 11 has an invalid length. [ 769.544804][T11730] netlink: 'syz.0.16608': attribute type 12 has an invalid length. [ 769.548433][T11730] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.16608'. [ 770.523848][ T54] libceph: connect (1)[c::]:6789 error -101 [ 770.526617][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 770.573324][ T6026] libceph: connect (1)[b::]:6789 error -101 [ 770.576431][ T6026] libceph: mon0 (1)[b::]:6789 connect error [ 770.795585][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 770.798175][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 770.835562][ T54] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 770.835754][ T8300] libceph: connect (1)[b::]:6789 error -101 [ 770.841111][ T8300] libceph: mon0 (1)[b::]:6789 connect error [ 770.985556][ T54] usb 9-1: Using ep0 maxpacket: 8 [ 770.988657][ T54] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 770.991424][ T54] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 770.994610][ T54] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 770.998079][ T54] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 771.001209][ T54] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.005530][ T54] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 771.009822][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.221218][ T54] usb 9-1: GET_CAPABILITIES returned 0 [ 771.223074][ T54] usbtmc 9-1:16.0: can't read capabilities [ 771.278038][T11797] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 771.280719][T11797] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 771.286725][T11797] vhci_hcd vhci_hcd.0: Device attached [ 771.293409][T11798] vhci_hcd: connection closed [ 771.295916][T32261] vhci_hcd vhci_hcd.5: stop threads [ 771.299265][T32261] vhci_hcd vhci_hcd.5: release socket [ 771.301007][T32261] vhci_hcd vhci_hcd.5: disconnect device [ 771.315685][ T54] libceph: connect (1)[c::]:6789 error -101 [ 771.318049][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 771.347284][ T6026] libceph: connect (1)[b::]:6789 error -101 [ 771.349910][T11781] ceph: No mds server is up or the cluster is laggy [ 771.351713][T11784] ceph: No mds server is up or the cluster is laggy [ 771.354876][ T6026] libceph: mon0 (1)[b::]:6789 connect error [ 771.539419][T11788] usbtmc 9-1:16.0: usb_control_msg returned -71 [ 771.542673][ T1453] usb 9-1: USB disconnect, device number 15 [ 771.545866][T11804] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -19 [ 771.826694][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 771.826706][ T40] audit: type=1326 audit(1769376548.594:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.0.16640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 771.838405][ T40] audit: type=1326 audit(1769376548.594:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.0.16640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 771.848950][ T40] audit: type=1326 audit(1769376548.594:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.0.16640" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 771.858113][ T40] audit: type=1326 audit(1769376548.614:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.0.16640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 771.867611][ T40] audit: type=1326 audit(1769376548.614:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.0.16640" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf714572b code=0x7ffc0000 [ 771.875582][ T40] audit: type=1326 audit(1769376548.614:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.0.16640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 771.883977][ T40] audit: type=1326 audit(1769376548.644:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.0.16640" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 771.894540][ T40] audit: type=1326 audit(1769376548.644:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.0.16640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 771.904023][ T40] audit: type=1326 audit(1769376548.644:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.0.16640" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 771.913437][ T40] audit: type=1326 audit(1769376548.644:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11813 comm="syz.0.16640" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 773.129165][T11900] tls_set_device_offload_rx: netdev not found [ 773.246224][ T55] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 773.407458][ T55] usb 12-1: config 0 has no interfaces? [ 773.411532][ T55] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 773.414990][ T55] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 773.418039][ T55] usb 12-1: Product: syz [ 773.419468][ T55] usb 12-1: Manufacturer: syz [ 773.424234][ T55] usb 12-1: config 0 descriptor?? [ 773.648593][ T1453] usb 12-1: USB disconnect, device number 29 [ 773.889415][T11931] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 773.915795][ T8300] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 774.228686][T11936] input: syz0 as /devices/virtual/input/input87 [ 774.431891][T11946] binder: 11945:11946 ioctl c06c4124 0 returned -22 [ 774.780550][T11960] batadv_slave_1: entered promiscuous mode [ 774.784267][T11960] veth1_virt_wifi: entered promiscuous mode [ 774.788282][T11958] veth1_virt_wifi: left promiscuous mode [ 774.790898][T11958] batadv_slave_1: left promiscuous mode [ 774.815661][ T8300] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 774.935597][T11971] ip6gretap1: entered promiscuous mode [ 774.937373][T11971] ip6gretap1: entered allmulticast mode [ 775.345483][ T8300] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 775.498120][ T8300] usb 9-1: Using ep0 maxpacket: 32 [ 775.501353][ T8300] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 775.504879][ T8300] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 775.509021][ T8300] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 775.512709][ T8300] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 775.520850][ T8300] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 775.524876][ T8300] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.529193][ T8300] usb 9-1: Product: syz [ 775.531041][ T8300] usb 9-1: Manufacturer: syz [ 775.532647][ T8300] usb 9-1: SerialNumber: syz [ 775.542729][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 775.546527][ T8300] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input88 [ 775.765735][ T8300] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 775.768580][ T8300] (id 0x00) [ 775.835454][ T8300] rc_core: IR keymap rc-imon-pad not found [ 775.838397][ T8300] Registered IR keymap rc-empty [ 775.840688][ T8300] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 775.846026][ T8300] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 775.876966][T11997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16715'. [ 775.880941][T11997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16715'. [ 775.884822][T11997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16715'. [ 775.966688][ T8300] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 775.976701][ T8300] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input89 [ 775.983809][ T8300] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:16> initialized [ 776.149874][ T8092] usb 9-1: USB disconnect, device number 16 [ 776.450411][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16724'. [ 776.463506][T12017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 776.496236][T12017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 776.498601][T12017] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 776.502276][T12017] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 777.144207][T12061] veth1_to_bond: entered allmulticast mode [ 777.150421][T12061] veth1_to_bond: left allmulticast mode [ 777.269276][T12068] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.16745'. [ 777.318952][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16749'. [ 777.493648][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16755'. [ 777.519097][T12091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16756'. [ 777.563969][T12089] hsr_slave_1 (unregistering): left promiscuous mode [ 777.585555][ T6026] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 777.684420][T12097] input: syz0 as /devices/virtual/input/input90 [ 777.743959][T12099] net_ratelimit: 5 callbacks suppressed [ 777.743978][T12099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.745517][ T6026] usb 5-1: Using ep0 maxpacket: 16 [ 777.747074][T12099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.752931][ T6026] usb 5-1: config 0 has no interfaces? [ 777.757506][T12099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.760420][ T6026] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 777.761040][T12099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.764969][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.768458][T12099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.771589][ T6026] usb 5-1: Product: syz [ 777.774721][T12099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.776785][ T6026] usb 5-1: Manufacturer: syz [ 777.779989][T12099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.781878][ T6026] usb 5-1: SerialNumber: syz [ 777.785224][T12099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.790349][T12099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.793930][T12099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.794569][ T6026] usb 5-1: config 0 descriptor?? [ 777.805506][ T7682] block nbd2: Possible stuck request ffff8880270f8000: control (read@0,4096B). Runtime 270 seconds [ 778.036967][ T54] usb 5-1: USB disconnect, device number 42 [ 778.801481][T12167] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 778.807276][T12167] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 779.113769][T12186] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 779.118539][T12186] bond2 (unregistering): Released all slaves [ 779.685531][ T5972] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 779.855463][ T5972] usb 9-1: Using ep0 maxpacket: 16 [ 779.866355][ T5972] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.869982][ T5972] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.873180][ T5972] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 779.878060][ T5972] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 779.882192][ T5972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.888067][ T5972] usb 9-1: config 0 descriptor?? [ 779.974975][ T55] libceph: connect (1)[c::]:6789 error -101 [ 779.977677][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 780.024266][ T8092] libceph: connect (1)[c::]:6789 error -101 [ 780.026695][ T8092] libceph: mon0 (1)[c::]:6789 connect error [ 780.156777][T12228] loop7: detected capacity change from 0 to 7 [ 780.159435][ C2] blk_print_req_error: 54 callbacks suppressed [ 780.159446][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.164523][ C2] buffer_io_error: 54 callbacks suppressed [ 780.164532][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.171620][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.174806][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.178777][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.182022][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.184776][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.188093][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.190923][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.194044][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.196922][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.199988][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.202693][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.205920][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.209212][T12228] ldm_validate_partition_table(): Disk read failed. [ 780.211516][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.214614][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.217302][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.220571][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.223482][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 780.226716][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 780.230473][T12228] Dev loop7: unable to read RDB block 0 [ 780.232680][T12228] loop7: unable to read partition table [ 780.234648][T12228] loop7: partition table beyond EOD, truncated [ 780.235604][ T55] libceph: connect (1)[c::]:6789 error -101 [ 780.238655][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 780.239929][T12228] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 780.285879][ T8092] libceph: connect (1)[c::]:6789 error -101 [ 780.288080][ T8092] libceph: mon0 (1)[c::]:6789 connect error [ 780.301421][ T5972] hid_parser_main: 6 callbacks suppressed [ 780.301434][ T5972] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 780.305906][ T5972] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 780.308357][ T5972] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 780.310650][ T5972] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 780.312959][ T5972] microsoft 0003:045E:07DA.0021: unknown main item tag 0x0 [ 780.319290][ T5972] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.0021/input/input91 [ 780.380878][ T5972] microsoft 0003:045E:07DA.0021: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 780.445402][ T6026] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 780.503310][ T5972] usb 9-1: USB disconnect, device number 17 [ 780.625464][ T6026] usb 12-1: Using ep0 maxpacket: 32 [ 780.628896][ T6026] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 780.631663][ T6026] usb 12-1: config 0 has no interface number 0 [ 780.635443][ T6026] usb 12-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 780.638509][ T6026] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.641233][ T6026] usb 12-1: Product: syz [ 780.642650][ T6026] usb 12-1: Manufacturer: syz [ 780.644294][ T6026] usb 12-1: SerialNumber: syz [ 780.647474][ T6026] usb 12-1: config 0 descriptor?? [ 780.651204][ T6026] usb 12-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 780.654314][ T6026] usb 12-1: selecting invalid altsetting 1 [ 780.656800][ T6026] usb 12-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 780.660806][ T6026] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 780.664534][ T6026] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 780.667316][ T6026] usb 12-1: media controller created [ 780.677311][ T6026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 780.745711][ T8300] libceph: connect (1)[c::]:6789 error -101 [ 780.748044][ T8300] libceph: mon0 (1)[c::]:6789 connect error [ 780.797787][ T8092] libceph: connect (1)[c::]:6789 error -101 [ 780.800493][ T8092] libceph: mon0 (1)[c::]:6789 connect error [ 780.805869][T12220] ceph: No mds server is up or the cluster is laggy [ 780.805980][T12223] ceph: No mds server is up or the cluster is laggy [ 780.863401][ T6026] usb 12-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 780.866309][ T6026] zl10353_read_register: readreg error (reg=127, ret==-71) [ 780.870358][ T6026] usb 12-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 780.902817][ T6026] usb 12-1: USB disconnect, device number 30 [ 780.921918][ T5350] ldm_validate_partition_table(): Disk read failed. [ 780.925258][ T5350] Dev loop7: unable to read RDB block 0 [ 780.928364][ T5350] loop7: unable to read partition table [ 780.930350][ T5350] loop7: partition table beyond EOD, truncated [ 781.315612][ T5988] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 781.475524][ T5988] usb 9-1: Using ep0 maxpacket: 8 [ 781.478572][ T5988] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 781.481490][ T5988] usb 9-1: config 0 has no interface number 0 [ 781.487572][ T5988] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 781.491104][ T5988] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 781.494380][ T5988] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.500171][ T5988] usb 9-1: config 0 descriptor?? [ 781.507171][ T5988] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 782.738210][ T55] usb 9-1: USB disconnect, device number 18 [ 783.264316][T12301] input: syz0 as /devices/virtual/input/input92 [ 784.304133][T12328] netlink: 6 bytes leftover after parsing attributes in process `syz.4.16845'. [ 784.452956][T12342] netlink: 'syz.7.16853': attribute type 2 has an invalid length. [ 784.457950][T12342] netlink: 532 bytes leftover after parsing attributes in process `syz.7.16853'. [ 784.481958][T12342] dummy0 (unregistering): left promiscuous mode [ 784.596487][T12354] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 784.682941][T12362] ip6_vti0 speed is unknown, defaulting to 1000 [ 784.859247][T12370] net_ratelimit: 1259 callbacks suppressed [ 784.859259][T12370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.094133][T12387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.098965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.189263][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16875'. [ 785.208940][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.211923][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.214659][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.219735][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.222585][T12398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.228848][T12397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.970052][T12437] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 786.018756][T12442] netlink: 44 bytes leftover after parsing attributes in process `syz.7.16896'. [ 786.027856][T12442] ubi0: attaching mtd0 [ 786.032778][T12442] ubi0: scanning is finished [ 786.034801][T12442] ubi0: empty MTD device detected [ 786.199284][T12442] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 786.202203][T12442] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 786.205287][T12442] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 786.207293][T12449] syzkaller1: entered promiscuous mode [ 786.212988][T12449] syzkaller1: entered allmulticast mode [ 786.223451][T12442] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 786.228591][T12442] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 786.231379][T12442] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 786.234834][T12442] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 988090608 [ 786.243499][T12442] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 786.285277][T12452] ubi0: background thread "ubi_bgt0d" started, PID 12452 [ 787.828264][T12484] ip6_vti0 speed is unknown, defaulting to 1000 [ 788.337160][T12503] netlink: 76 bytes leftover after parsing attributes in process `syz.0.16919'. [ 788.405714][ T5972] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 788.502277][T12510] ip6_vti0 speed is unknown, defaulting to 1000 [ 788.547132][T12514] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16921'. [ 788.555413][ T5972] usb 10-1: Using ep0 maxpacket: 8 [ 788.559454][ T5972] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 788.562188][ T5972] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 788.565501][ T5972] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 788.568629][ T5972] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 788.571813][ T5972] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 788.576623][ T5972] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 788.579589][ T5972] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.801989][ T5972] usb 10-1: GET_CAPABILITIES returned 0 [ 788.804346][ T5972] usbtmc 10-1:16.0: can't read capabilities [ 788.991058][T12518] ip6_vti0 speed is unknown, defaulting to 1000 [ 789.111383][T12493] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 789.112097][ T5988] usb 10-1: USB disconnect, device number 17 [ 789.114839][T12521] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -19 [ 789.367828][T12533] ip6_vti0 speed is unknown, defaulting to 1000 [ 789.770153][T12551] input: syz0 as /devices/virtual/input/input93 [ 789.935475][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 790.120182][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16945'. [ 790.343841][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16949'. [ 790.348101][T12595] netlink: 'syz.7.16949': attribute type 14 has an invalid length. [ 790.366999][T12582] ip6_vti0 speed is unknown, defaulting to 1000 [ 790.919095][T12620] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.16969'. [ 790.922229][T12620] netlink: Unknown conntrack attr (type=2304, max=9) [ 791.045806][T12632] input: syz0 as /devices/virtual/input/input94 [ 791.078499][T12633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16965'. [ 791.081283][T12633] netlink: 'syz.0.16965': attribute type 15 has an invalid length. [ 791.123430][T12633] vxlan2: entered promiscuous mode [ 791.143362][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 791.146860][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 791.149452][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 791.162315][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 792.196922][T12657] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16978'. [ 792.285530][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16978'. [ 792.286057][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16981'. [ 792.288607][T12661] nbd: device at index 64 is going down [ 792.300657][ T40] audit: type=1326 audit(1769376569.064:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12662 comm="syz.4.16980" exe="/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf7f63579 code=0x0 [ 792.314152][T12665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16981'. [ 793.774297][T12742] netlink: 'syz.5.17015': attribute type 9 has an invalid length. [ 793.778458][T12742] netlink: 'syz.5.17015': attribute type 11 has an invalid length. [ 793.781775][T12742] netlink: 'syz.5.17015': attribute type 12 has an invalid length. [ 793.787861][T12742] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.17015'. [ 793.791652][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17015'. [ 793.854786][T12746] syz.5.17017: page allocation failure: order:8, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 793.859891][T12746] CPU: 1 UID: 0 PID: 12746 Comm: syz.5.17017 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.859912][T12746] Tainted: [L]=SOFTLOCKUP [ 793.859917][T12746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 793.859923][T12746] Call Trace: [ 793.859928][T12746] [ 793.859934][T12746] dump_stack_lvl+0x100/0x190 [ 793.860046][T12746] warn_alloc.cold+0x95/0x1c1 [ 793.860068][T12746] ? __pfx_warn_alloc+0x10/0x10 [ 793.860083][T12746] ? __alloc_pages_direct_compact+0x3fe/0x550 [ 793.860100][T12746] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 793.860115][T12746] ? psi_memstall_leave+0x1e2/0x2e0 [ 793.860128][T12746] ? lockdep_hardirqs_on+0x78/0x100 [ 793.860171][T12746] __alloc_frozen_pages_noprof+0x1442/0x2410 [ 793.860193][T12746] ? rtnetlink_rcv_msg+0x95e/0xe90 [ 793.860211][T12746] ? netlink_rcv_skb+0x159/0x420 [ 793.860228][T12746] ? netlink_unicast+0x5aa/0x870 [ 793.860245][T12746] ? netlink_sendmsg+0x8b0/0xda0 [ 793.860268][T12746] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 793.860286][T12746] ? __do_fast_syscall_32+0xde/0x660 [ 793.860314][T12746] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 793.860347][T12746] ? __lock_acquire+0x4a5/0x2630 [ 793.860376][T12746] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 793.860394][T12746] ? policy_nodemask+0xed/0x4f0 [ 793.860411][T12746] alloc_pages_mpol+0x1fb/0x550 [ 793.860428][T12746] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 793.860448][T12746] ___kmalloc_large_node+0x104/0x150 [ 793.860465][T12746] ? __pfx___nla_validate_parse+0x10/0x10 [ 793.860509][T12746] __kmalloc_large_node_noprof+0x1c/0x70 [ 793.860528][T12746] ? tcf_em_tree_validate+0x1d1/0xd60 [ 793.860545][T12746] __kmalloc_noprof+0x6b1/0x9c0 [ 793.860563][T12746] ? tcf_em_tree_validate+0x1d1/0xd60 [ 793.860578][T12746] tcf_em_tree_validate+0x1d1/0xd60 [ 793.860598][T12746] ? rcu_is_watching+0x12/0xc0 [ 793.860610][T12746] ? __pfx_tcf_em_tree_validate+0x10/0x10 [ 793.860629][T12746] ? tcf_exts_validate+0x42/0x60 [ 793.860644][T12746] basic_change+0x3a5/0x1200 [ 793.860664][T12746] ? __pfx_basic_change+0x10/0x10 [ 793.860688][T12746] ? __pfx_basic_change+0x10/0x10 [ 793.860703][T12746] tc_new_tfilter+0x978/0x23b0 [ 793.860724][T12746] ? __pfx_tc_new_tfilter+0x10/0x10 [ 793.860734][T12746] ? kmem_cache_free+0x143/0x720 [ 793.860746][T12746] ? kfree_skbmem+0x19a/0x210 [ 793.860762][T12746] ? __lock_acquire+0x4a5/0x2630 [ 793.860784][T12746] ? find_held_lock+0x2b/0x80 [ 793.860796][T12746] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 793.860814][T12746] ? __pfx_tc_new_tfilter+0x10/0x10 [ 793.860825][T12746] rtnetlink_rcv_msg+0x95e/0xe90 [ 793.860844][T12746] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 793.860865][T12746] ? ref_tracker_free+0x37e/0x6c0 [ 793.860878][T12746] netlink_rcv_skb+0x159/0x420 [ 793.860895][T12746] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 793.860918][T12746] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 793.860950][T12746] ? netlink_deliver_tap+0x1ae/0xcc0 [ 793.860971][T12746] netlink_unicast+0x5aa/0x870 [ 793.860991][T12746] ? __pfx_netlink_unicast+0x10/0x10 [ 793.861007][T12746] ? __pfx___might_resched+0x10/0x10 [ 793.861030][T12746] netlink_sendmsg+0x8b0/0xda0 [ 793.861049][T12746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.861071][T12746] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 793.861088][T12746] ____sys_sendmsg+0xa54/0xc30 [ 793.861102][T12746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 793.861117][T12746] ? try_to_wake_up+0x644/0x1a60 [ 793.861133][T12746] ___sys_sendmsg+0x190/0x1e0 [ 793.861147][T12746] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.861159][T12746] ? futex_private_hash_put+0x107/0x1c0 [ 793.861192][T12746] __sys_sendmsg+0x170/0x220 [ 793.861208][T12746] ? __pfx___sys_sendmsg+0x10/0x10 [ 793.861225][T12746] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 793.861252][T12746] __do_fast_syscall_32+0xde/0x660 [ 793.861268][T12746] do_fast_syscall_32+0x32/0x70 [ 793.861282][T12746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 793.861296][T12746] RIP: 0023:0xf73bd579 [ 793.861312][T12746] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 793.861324][T12746] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 793.861338][T12746] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 793.861346][T12746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 793.861353][T12746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 793.861360][T12746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.861368][T12746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 793.861386][T12746] [ 793.861413][T12746] Mem-Info: [ 794.022110][T12746] active_anon:754 inactive_anon:3805 isolated_anon:0 [ 794.022110][T12746] active_file:1018 inactive_file:666 isolated_file:0 [ 794.022110][T12746] unevictable:1768 dirty:161 writeback:0 [ 794.022110][T12746] slab_reclaimable:7239 slab_unreclaimable:80144 [ 794.022110][T12746] mapped:24632 shmem:4601 pagetables:1959 [ 794.022110][T12746] sec_pagetables:343 bounce:0 [ 794.022110][T12746] kernel_misc_reclaimable:0 [ 794.022110][T12746] free:57662 free_pcp:2808 free_cma:0 [ 794.036024][T12746] Node 0 active_anon:1488kB inactive_anon:56kB active_file:804kB inactive_file:12kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1216kB dirty:40kB writeback:0kB shmem:5568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10200kB pagetables:1700kB sec_pagetables:1196kB all_unreclaimable? yes Balloon:0kB [ 794.047675][T12746] Node 1 active_anon:896kB inactive_anon:15852kB active_file:2400kB inactive_file:3552kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97368kB dirty:576kB writeback:0kB shmem:13000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6456kB pagetables:6188kB sec_pagetables:176kB all_unreclaimable? no Balloon:0kB [ 794.058260][T12746] Node 0 DMA free:2072kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:0kB free_cma:0kB [ 794.067499][T12746] lowmem_reserve[]: 0 288 288 288 288 [ 794.069607][T12746] Node 0 DMA32 free:14992kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1476kB inactive_anon:132kB active_file:348kB inactive_file:12kB unevictable:3536kB writepending:0kB zspages:820kB present:1032196kB managed:295112kB mlocked:0kB bounce:0kB free_pcp:3840kB local_pcp:0kB free_cma:0kB [ 794.079962][T12746] lowmem_reserve[]: 0 0 0 0 0 [ 794.081587][T12746] Node 1 DMA32 free:219096kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:896kB inactive_anon:15852kB active_file:2500kB inactive_file:3552kB unevictable:3536kB writepending:572kB zspages:6748kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:1412kB local_pcp:0kB free_cma:0kB [ 794.092036][T12746] lowmem_reserve[]: 0 0 0 0 0 [ 794.093990][T12746] Node 0 DMA: 4*4kB (U) 5*8kB (U) 3*16kB (UM) 8*32kB (UM) 2*64kB (UM) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2024kB [ 794.099925][T12746] Node 0 DMA32: 49*4kB (U) 335*8kB (UME) 210*16kB (UM) 113*32kB (UME) 24*64kB (UME) 20*128kB (UME) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 14972kB [ 794.105435][T12746] Node 1 DMA32: 2204*4kB (UME) 6108*8kB (UME) 4982*16kB (UME) 398*32kB (UME) 163*64kB (UME) 99*128kB (UM) 59*256kB (UME) 60*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 219056kB [ 794.110659][T12746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 794.113547][T12746] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 794.116447][T12746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 794.119404][T12746] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 794.122340][T12746] 7753 total pagecache pages [ 794.123831][T12746] 1375 pages in swap cache [ 794.125267][T12746] Free swap = 73476kB [ 794.126771][T12746] Total swap = 124996kB [ 794.128078][T12746] 524155 pages RAM [ 794.129375][T12746] 0 pages HighMem/MovableOnly [ 794.131214][T12746] 209484 pages reserved [ 794.132869][T12746] 0 pages cma reserved [ 794.134263][T12748] batadv_slave_1: entered promiscuous mode [ 794.138361][T12750] veth1_virt_wifi: entered promiscuous mode [ 794.147333][T12747] veth1_virt_wifi: left promiscuous mode [ 794.149644][T12747] batadv_slave_1: left promiscuous mode [ 794.735431][ T29] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 794.798498][T12805] ip6gretap1: entered promiscuous mode [ 794.800251][T12805] ip6gretap1: entered allmulticast mode [ 794.883063][T12813] overlayfs: failed to clone upperpath [ 794.894200][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 794.901725][ T29] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 794.904849][ T29] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 794.909332][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 794.912206][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 794.915140][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 794.919290][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 794.924113][ T29] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 794.927785][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.932384][ T29] usb 5-1: config 0 descriptor?? [ 795.143803][ T29] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 795.198436][ T40] audit: type=1800 audit(2000000000.249:2600): pid=12829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.17054" name="nullb0" dev="devtmpfs" ino=3720 res=0 errno=0 [ 795.264792][T12831] kvm: user requested TSC rate below hardware speed [ 795.351481][ T5988] usb 5-1: USB disconnect, device number 43 [ 795.355120][ T5988] usblp0: removed [ 795.657715][T12843] ptrace attach of "/syz-executor exec"[2517] was attempted by ""[12843] [ 796.014420][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17067'. [ 796.054868][ T5946] Bluetooth: hci4: unexpected event for opcode 0x201c [ 796.179253][T12870] loop2: detected capacity change from 0 to 7 [ 796.192499][T12870] Dev loop2: unable to read RDB block 7 [ 796.197639][T12870] loop2: unable to read partition table [ 796.199878][T12870] loop2: partition table beyond EOD, truncated [ 796.201968][T12870] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 796.515172][T12889] netlink: 'syz.7.17078': attribute type 1 has an invalid length. [ 796.726540][ T40] audit: type=1326 audit(2000000001.779:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12849 comm="syz.4.17064" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7fc00000 [ 796.817207][ T6026] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 796.966461][ T6026] usb 10-1: Using ep0 maxpacket: 8 [ 796.970343][ T6026] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.974615][ T6026] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 796.979757][ T6026] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 796.984441][ T6026] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 796.989130][ T6026] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 796.993124][ T6026] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.004632][ T6026] hub 10-1:1.0: bad descriptor, ignoring hub [ 797.008129][ T6026] hub 10-1:1.0: probe with driver hub failed with error -5 [ 797.011556][ T6026] cdc_wdm 10-1:1.0: skipping garbage [ 797.013987][ T6026] cdc_wdm 10-1:1.0: skipping garbage [ 797.020913][ T6026] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 797.023838][ T6026] cdc_wdm 10-1:1.0: Unknown control protocol [ 797.187268][ T5972] libceph: connect (1)[c::]:6789 error -101 [ 797.189857][ T5972] libceph: mon0 (1)[c::]:6789 connect error [ 797.235144][ T5972] libceph: connect (1)[c::]:6789 error -101 [ 797.237782][ T5972] libceph: mon0 (1)[c::]:6789 connect error [ 797.445793][ T5972] libceph: connect (1)[c::]:6789 error -101 [ 797.448131][ T5972] libceph: mon0 (1)[c::]:6789 connect error [ 797.475546][ T6026] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 797.497256][ T5972] libceph: connect (1)[c::]:6789 error -101 [ 797.499295][ T5972] libceph: mon0 (1)[c::]:6789 connect error [ 797.540457][ T8300] usb 10-1: USB disconnect, device number 18 [ 797.623248][ T7682] block nbd1: Possible stuck request ffff888027078000: control (read@0,1024B). Runtime 330 seconds [ 797.627060][ T6026] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.627307][ T7682] block nbd1: Possible stuck request ffff888027078200: control (read@1024,1024B). Runtime 330 seconds [ 797.631859][ T6026] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 797.635170][ T7682] block nbd1: Possible stuck request ffff888027078400: control (read@2048,1024B). Runtime 330 seconds [ 797.639371][ T6026] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 797.642528][ T7682] block nbd1: Possible stuck request ffff888027078600: control (read@3072,1024B). Runtime 330 seconds [ 797.652141][ T6026] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 797.656081][ T6026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.662283][T12946] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 797.667756][ T6026] hub 5-1:1.0: bad descriptor, ignoring hub [ 797.670310][ T6026] hub 5-1:1.0: probe with driver hub failed with error -5 [ 797.673697][ T6026] cdc_wdm 5-1:1.0: skipping garbage [ 797.685270][ T6026] cdc_wdm 5-1:1.0: skipping garbage [ 797.689069][ T6026] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 797.691579][ T6026] cdc_wdm 5-1:1.0: Unknown control protocol [ 797.956276][ T5972] libceph: connect (1)[c::]:6789 error -101 [ 797.958301][ T5972] libceph: mon0 (1)[c::]:6789 connect error [ 798.015709][ T5972] libceph: connect (1)[c::]:6789 error -101 [ 798.017769][ T5972] libceph: mon0 (1)[c::]:6789 connect error [ 798.029195][T12935] ceph: No mds server is up or the cluster is laggy [ 798.031723][T12941] ceph: No mds server is up or the cluster is laggy [ 798.585454][ T5988] usb 12-1: new high-speed USB device number 31 using dummy_hcd [ 798.586652][T12946] usb 5-1: reset full-speed USB device number 44 using dummy_hcd [ 798.735543][ T5988] usb 12-1: Using ep0 maxpacket: 8 [ 798.739174][ T5988] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 798.742399][ T5988] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 798.747389][ T5988] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 798.752020][ T5988] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 798.756528][T12946] usb 5-1: device firmware changed [ 798.758812][ T5988] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 798.759039][T12946] cdc_wdm 5-1:1.0: Error autopm - -16 [ 798.762796][ T5988] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 798.762822][ T5988] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 798.762843][ T5988] usb 12-1: config 168 interface 0 has no altsetting 0 [ 798.763673][ T54] usb 5-1: USB disconnect, device number 44 [ 798.779726][ T5988] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 798.782582][ T5988] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 798.787013][ T5988] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 798.791703][ T5988] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 798.797918][ T5988] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 798.803224][ T5988] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 798.808630][ T5988] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 798.819410][ T5988] usb 12-1: config 168 interface 0 has no altsetting 0 [ 798.822470][ T5988] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 798.824901][ T5988] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 798.828757][ T5988] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 798.832447][ T5988] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 798.836324][ T5988] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 798.839881][ T5988] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 798.843625][ T5988] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 798.848461][ T5988] usb 12-1: config 168 interface 0 has no altsetting 0 [ 798.852802][ T5988] usb 12-1: string descriptor 0 read error: -22 [ 798.854902][ T5988] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 798.858260][ T5988] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.867492][ T5988] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 798.947686][ T54] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 798.957539][T13011] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17131'. [ 798.960519][T13011] netlink: 'syz.5.17131': attribute type 1 has an invalid length. [ 798.963391][T13011] netlink: 'syz.5.17131': attribute type 2 has an invalid length. [ 798.966662][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17131'. [ 799.019500][T13013] syzkaller1: entered promiscuous mode [ 799.021873][T13013] syzkaller1: entered allmulticast mode [ 799.097080][ T54] usb 5-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 799.100414][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 799.103259][ T54] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 799.108360][ T54] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 799.112331][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.128916][T12949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 799.135984][ T54] hub 5-1:1.0: bad descriptor, ignoring hub [ 799.138464][ T54] hub 5-1:1.0: probe with driver hub failed with error -5 [ 799.141868][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 799.144442][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 799.147684][ T54] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 799.260511][ T1453] usb 12-1: USB disconnect, device number 31 [ 799.487418][ T6026] usb 5-1: USB disconnect, device number 45 [ 800.130382][T13067] netlink: 'syz.7.17154': attribute type 4 has an invalid length. [ 800.154368][T13067] netlink: 'syz.7.17154': attribute type 4 has an invalid length. [ 800.266585][T13079] overlay: filesystem on ./bus not supported [ 801.374318][T13114] input: syz0 as /devices/virtual/input/input95 [ 801.845519][ T40] audit: type=1326 audit(2000000006.889:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.0.17193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 801.852825][ T40] audit: type=1326 audit(2000000006.899:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.0.17193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 801.866017][ T40] audit: type=1326 audit(2000000006.919:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.0.17193" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 801.882539][ T40] audit: type=1326 audit(2000000006.919:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.0.17193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 801.891310][ T40] audit: type=1326 audit(2000000006.919:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.0.17193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 801.898707][ T40] audit: type=1326 audit(2000000006.929:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.0.17193" exe="/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 801.905997][ T40] audit: type=1326 audit(2000000006.929:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.0.17193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 801.913377][ T40] audit: type=1326 audit(2000000006.929:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.0.17193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 801.920412][ T40] audit: type=1326 audit(2000000006.929:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.0.17193" exe="/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 801.936564][ T40] audit: type=1326 audit(2000000006.989:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13148 comm="syz.0.17193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 802.089620][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17200'. [ 802.425478][ T54] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 802.545566][T13187] lo: Caught tx_queue_len zero misconfig [ 802.595503][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 802.600788][ T54] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.605086][ T54] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 802.609040][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 802.614426][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 802.620037][ T54] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 802.623877][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.635295][ T54] hub 5-1:1.0: bad descriptor, ignoring hub [ 802.638011][ T54] hub 5-1:1.0: probe with driver hub failed with error -5 [ 802.642276][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 802.644503][ T54] cdc_wdm 5-1:1.0: skipping garbage [ 802.648338][ T54] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 802.650896][ T54] cdc_wdm 5-1:1.0: Unknown control protocol [ 803.100388][T13193] netlink: 'syz.4.17212': attribute type 1 has an invalid length. [ 803.123464][T13193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 803.144367][T13193] bond1: (slave geneve2): making interface the new active one [ 803.148824][T13193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.152473][T13193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.155165][T13193] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 803.161412][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.172156][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.174871][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.181047][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.195969][T13733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.202993][ T6013] usb 5-1: USB disconnect, device number 46 [ 803.306020][T13733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.526163][T13211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.526243][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.596127][T13214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.662361][T13217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.994956][T13234] netlink: 'syz.5.17228': attribute type 9 has an invalid length. [ 804.001609][T13234] netlink: 'syz.5.17228': attribute type 11 has an invalid length. [ 804.004935][T13234] netlink: 'syz.5.17228': attribute type 12 has an invalid length. [ 804.008319][T13234] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.17228'. [ 804.012164][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17228'. [ 804.256355][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.380449][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17241'. [ 804.575987][T32260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.580591][T32260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.135735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.140127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.809371][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17271'. [ 805.813247][T13330] netlink: 'syz.5.17271': attribute type 14 has an invalid length. [ 805.821025][T13330] vxlan0: entered promiscuous mode [ 805.824154][ T46] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.830503][ T46] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.842647][ T46] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.846628][ T46] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.997320][T13336] ip6gre1: entered promiscuous mode [ 805.999191][T13336] ip6gre1: entered allmulticast mode [ 806.054915][T13339] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17277'. [ 806.406802][T13360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17284'. [ 806.410621][T13360] netlink: 'syz.4.17284': attribute type 15 has an invalid length. [ 806.425658][T13360] vxlan0: entered promiscuous mode [ 806.428570][T32261] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 806.432411][T32261] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 806.436339][T32261] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 806.444885][T32261] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 806.735298][T13375] Invalid ELF header len 8 [ 806.799045][T13382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 807.864898][ T7682] block nbd2: Possible stuck request ffff8880270f8000: control (read@0,4096B). Runtime 300 seconds [ 808.031216][T13453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17323'. [ 808.115684][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 808.115701][ T40] audit: type=1326 audit(2000000013.169:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.0.17324" exe="/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf7f43579 code=0x0 [ 808.345554][ C2] net_ratelimit: 121 callbacks suppressed [ 808.345570][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.350492][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.415798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.549076][T13444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.777834][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.893967][T13475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.897498][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.839320][T13556] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 809.847174][ T40] audit: type=1326 audit(2000000014.899:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.5.17360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7fc00000 [ 809.886225][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.936613][ T5946] Bluetooth: hci1: command 0x0406 tx timeout [ 811.017201][T32261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.242294][T13623] overlayfs: statfs failed on './file0' [ 812.104240][T13664] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.17408'. [ 812.678853][T13709] loop3: detected capacity change from 0 to 7 [ 812.687344][T25318] Dev loop3: unable to read RDB block 7 [ 812.689676][T25318] loop3: unable to read partition table [ 812.692482][T25318] loop3: partition table beyond EOD, truncated [ 812.702647][T13709] Dev loop3: unable to read RDB block 7 [ 812.705087][T13709] loop3: unable to read partition table [ 812.708604][T13709] loop3: partition table beyond EOD, truncated [ 812.711595][T13709] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 812.865713][ T5988] usb 12-1: new high-speed USB device number 32 using dummy_hcd [ 812.978280][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.980493][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.024662][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17438'. [ 813.028500][ T5988] usb 12-1: Using ep0 maxpacket: 8 [ 813.034655][ T5988] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 813.037851][ T5988] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 813.041898][ T5988] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 813.045199][ T5988] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 813.049178][ T5988] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.049778][T13730] 9pnet: p9_errstr2errno: server reported unknown error di3 [ 813.055888][ T5988] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 813.055905][ T5988] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.261781][ T5988] usb 12-1: usb_control_msg returned -32 [ 813.263998][ T5988] usbtmc 12-1:16.0: can't read capabilities [ 813.902821][T13777] input: syz0 as /devices/virtual/input/input96 [ 814.029327][T13784] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17459'. [ 814.036153][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17458'. [ 814.044960][T13783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17458'. [ 814.116118][T13785] usbtmc 12-1:16.0: usb_control_msg returned -32 [ 814.317907][ T6013] usb 12-1: USB disconnect, device number 32 [ 814.336245][ T5972] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 814.386747][T32260] net_ratelimit: 2 callbacks suppressed [ 814.386760][T32260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.496829][ T5972] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 814.502111][ T5972] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 814.504998][ T5972] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 814.508765][ T5972] usb 10-1: config 0 interface 0 has no altsetting 0 [ 814.512690][ T5972] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 814.515715][ T5972] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 814.519197][ T5972] usb 10-1: config 0 interface 0 has no altsetting 0 [ 814.522471][ T5972] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 814.525593][ T5972] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 814.529168][ T5972] usb 10-1: config 0 interface 0 has no altsetting 0 [ 814.532716][ T5972] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 814.536223][ T5972] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 814.539956][ T5972] usb 10-1: config 0 interface 0 has no altsetting 0 [ 814.543730][ T5972] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 814.547267][ T5972] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 814.550488][ T5972] usb 10-1: config 0 interface 0 has no altsetting 0 [ 814.553410][ T5972] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 814.556358][ T5972] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 814.559609][ T5972] usb 10-1: config 0 interface 0 has no altsetting 0 [ 814.562375][ T5972] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 814.565587][ T5972] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 814.569064][ T5972] usb 10-1: config 0 interface 0 has no altsetting 0 [ 814.571924][ T5972] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 814.574461][ T5972] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 814.578654][ T5972] usb 10-1: config 0 interface 0 has no altsetting 0 [ 814.582451][ T5972] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 814.585182][ T5972] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 814.587972][ T5972] usb 10-1: Product: syz [ 814.589639][ T5972] usb 10-1: Manufacturer: syz [ 814.591122][ T5972] usb 10-1: SerialNumber: syz [ 814.599228][ T5972] usb 10-1: config 0 descriptor?? [ 814.606420][ T5972] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 814.936762][ T5988] usb 10-1: USB disconnect, device number 19 [ 814.936822][ C1] usb 10-1: yurex_control_callback - control failed: -71 [ 814.941078][T13801] yurex 10-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 814.941656][ T5988] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 814.977109][T13804] netlink: 'syz.0.17474': attribute type 13 has an invalid length. [ 815.066587][ T6013] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 815.175659][ T6013] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 815.526975][T32260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.021427][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17487'. [ 816.647772][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.815680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.963447][T13877] loop9: detected capacity change from 0 to 7 [ 817.040987][T13882] overlayfs: failed to clone upperpath [ 817.143678][T13880] Invalid logical block size (1) [ 817.143702][T25318] Dev loop9: unable to read RDB block 7 [ 817.150570][T25318] loop9: unable to read partition table [ 817.153008][T25318] loop9: partition table beyond EOD, truncated [ 817.369041][T13877] Dev loop9: unable to read RDB block 7 [ 817.371771][T13877] loop9: unable to read partition table [ 817.374363][T13877] loop9: partition table beyond EOD, truncated [ 817.377693][T13877] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 817.737172][T13928] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 817.739805][T13928] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 817.744472][T13928] vhci_hcd vhci_hcd.0: Device attached [ 817.766576][T32260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.005511][ T54] usb 52-1: SetAddress Request (2) to port 0 [ 818.008036][ T54] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 818.517090][T13929] vhci_hcd: connection reset by peer [ 818.520571][T32261] vhci_hcd vhci_hcd.7: stop threads [ 818.522279][T32261] vhci_hcd vhci_hcd.7: release socket [ 818.524154][T32261] vhci_hcd vhci_hcd.7: disconnect device [ 818.714078][T13951] netlink: 'syz.4.17527': attribute type 9 has an invalid length. [ 818.716877][T13951] netlink: 'syz.4.17527': attribute type 11 has an invalid length. [ 818.719348][T13951] netlink: 'syz.4.17527': attribute type 12 has an invalid length. [ 818.721738][T13951] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.17527'. [ 818.724723][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17527'. [ 818.850346][T13958] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.17531'. [ 818.853594][T13958] netlink: Unknown conntrack attr (0) [ 818.886940][T32260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.936751][T13964] overlayfs: failed to clone upperpath [ 819.023903][T13972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.835521][ T5988] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 819.987251][ T5988] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.992184][ T5988] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.997070][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.997463][T13999] netlink: 'syz.4.17549': attribute type 13 has an invalid length. [ 820.000836][ T5988] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 820.008825][ T5988] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 820.012271][ T5988] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.017428][ T5988] usb 10-1: config 0 descriptor?? [ 820.066614][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.438178][ T5988] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 820.443410][ T5988] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 820.447141][ T5988] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 820.450867][ T5988] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 820.454252][ T5988] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 820.457107][ T5988] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 820.460249][ T5988] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 820.463152][ T5988] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 820.466341][ T5988] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 820.468813][ T5988] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 820.485612][ T830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.489372][ T5988] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 820.697672][ T5988] usb 10-1: USB disconnect, device number 20 [ 821.125680][T32260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.352194][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17565'. [ 821.362812][T14037] vxlan1: entered promiscuous mode [ 821.368637][ T12] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 821.372211][ T12] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 821.376786][ T12] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 821.380598][ T12] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 821.387734][T14039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17566'. [ 821.600696][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17575'. [ 821.897112][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17582'. [ 822.110387][T14084] netlink: 212344 bytes leftover after parsing attributes in process `syz.7.17587'. [ 822.276225][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.451124][T14118] netlink: 84 bytes leftover after parsing attributes in process `syz.0.17603'. [ 822.858493][T14152] input: syz0 as /devices/virtual/input/input97 [ 823.055474][ T54] usb 52-1: device descriptor read/8, error -110 [ 823.178450][ T8092] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 823.338160][ T8092] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 823.341909][ T8092] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 823.350270][ T8092] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 823.354859][ T8092] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 823.365872][ T8092] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 823.368933][ T8092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.374151][ T8092] usb 5-1: config 0 descriptor?? [ 823.379407][T14156] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 823.436381][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.446366][ T54] usb usb52-port1: attempt power cycle [ 823.803376][ T8092] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 823.813928][ T8092] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 823.828376][ T8300] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 823.962683][T14176] netlink: 'syz.7.17624': attribute type 13 has an invalid length. [ 823.986660][ T8300] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 823.990152][ T8300] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 823.993398][ T8300] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 823.997041][ T8300] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.003610][T14171] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 824.009862][ T8300] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 824.015972][ T54] usb usb52-port1: unable to enumerate USB device [ 824.058291][ T8092] usb 5-1: USB disconnect, device number 47 [ 824.220451][ T54] usb 10-1: USB disconnect, device number 21 [ 824.495545][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 824.566612][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.834088][T14212] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.17638'. [ 825.062314][T14225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.065079][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.219620][T14240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.222759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.281896][T14244] netlink: 'syz.0.17652': attribute type 1 has an invalid length. [ 825.297112][T14244] 8021q: adding VLAN 0 to HW filter on device bond3 [ 825.314934][T14247] macvlan0: entered promiscuous mode [ 825.317152][T14247] macvlan0: entered allmulticast mode [ 825.318880][T14247] gretap0: entered allmulticast mode [ 825.497896][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17656'. [ 825.709502][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.752289][T14273] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2947493435 (2947493435 ns) > initial count (1700214384 ns). Using initial count to start timer. [ 825.899025][T14288] syz.7.17662: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 825.904844][T14288] CPU: 0 UID: 0 PID: 14288 Comm: syz.7.17662 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.904865][T14288] Tainted: [L]=SOFTLOCKUP [ 825.904869][T14288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 825.904877][T14288] Call Trace: [ 825.904881][T14288] [ 825.904887][T14288] dump_stack_lvl+0x100/0x190 [ 825.904906][T14288] warn_alloc.cold+0x95/0x1c1 [ 825.904926][T14288] ? __pfx_warn_alloc+0x10/0x10 [ 825.904948][T14288] ? kasan_save_stack+0x3f/0x50 [ 825.904962][T14288] ? kasan_save_stack+0x30/0x50 [ 825.904976][T14288] ? kasan_save_track+0x14/0x30 [ 825.904992][T14288] ? xskq_create+0xfb/0x1d0 [ 825.905004][T14288] __vmalloc_node_range_noprof+0x1252/0x1530 [ 825.905021][T14288] ? xskq_create+0xfb/0x1d0 [ 825.905035][T14288] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 825.905053][T14288] ? xskq_create+0xfb/0x1d0 [ 825.905063][T14288] vmalloc_user_noprof+0x9e/0xe0 [ 825.905074][T14288] ? xskq_create+0xfb/0x1d0 [ 825.905085][T14288] xskq_create+0xfb/0x1d0 [ 825.905096][T14288] xsk_setsockopt+0x55f/0xa90 [ 825.905114][T14288] ? __pfx_xsk_setsockopt+0x10/0x10 [ 825.905132][T14288] ? find_held_lock+0x2b/0x80 [ 825.905145][T14288] ? aa_sock_opt_perm+0xfe/0x1b0 [ 825.905160][T14288] ? __pfx_xsk_setsockopt+0x10/0x10 [ 825.905178][T14288] do_sock_setsockopt+0xf3/0x1d0 [ 825.905192][T14288] __sys_setsockopt+0x119/0x190 [ 825.905211][T14288] __ia32_sys_setsockopt+0xbc/0x160 [ 825.905227][T14288] ? __do_fast_syscall_32+0x97/0x660 [ 825.905241][T14288] ? lockdep_hardirqs_on+0x78/0x100 [ 825.905254][T14288] __do_fast_syscall_32+0xde/0x660 [ 825.905269][T14288] do_fast_syscall_32+0x32/0x70 [ 825.905284][T14288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 825.905299][T14288] RIP: 0023:0xf7f46579 [ 825.905323][T14288] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 825.905333][T14288] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 825.905345][T14288] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 825.905352][T14288] RDX: 0000000000000002 RSI: 0000000080000900 RDI: 0000000000000004 [ 825.905358][T14288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 825.905364][T14288] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 825.905371][T14288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 825.905387][T14288] [ 825.984769][T14288] Mem-Info: [ 825.989560][T14288] active_anon:997 inactive_anon:1828 isolated_anon:0 [ 825.989560][T14288] active_file:8013 inactive_file:3286 isolated_file:0 [ 825.989560][T14288] unevictable:1768 dirty:538 writeback:0 [ 825.989560][T14288] slab_reclaimable:7122 slab_unreclaimable:80880 [ 825.989560][T14288] mapped:22582 shmem:1791 pagetables:2039 [ 825.989560][T14288] sec_pagetables:344 bounce:0 [ 825.989560][T14288] kernel_misc_reclaimable:0 [ 825.989560][T14288] free:57700 free_pcp:2778 free_cma:0 [ 826.011133][T14288] Node 0 active_anon:968kB inactive_anon:200kB active_file:2292kB inactive_file:48kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:440kB dirty:120kB writeback:0kB shmem:4584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10120kB pagetables:1948kB sec_pagetables:1196kB all_unreclaimable? yes Balloon:0kB [ 826.023069][T14288] Node 1 active_anon:2972kB inactive_anon:7112kB active_file:29760kB inactive_file:13096kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:90312kB dirty:2044kB writeback:0kB shmem:2580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6376kB pagetables:6176kB sec_pagetables:180kB all_unreclaimable? no Balloon:0kB [ 826.033707][T14288] Node 0 DMA free:2092kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 826.046203][T14288] lowmem_reserve[]: 0 288 288 288 288 [ 826.048054][T14288] Node 0 DMA32 free:16424kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:0KB free_highatomic:0KB active_anon:928kB inactive_anon:196kB active_file:2292kB inactive_file:48kB unevictable:3536kB writepending:120kB zspages:776kB present:1032196kB managed:295112kB mlocked:0kB bounce:0kB free_pcp:2752kB local_pcp:488kB free_cma:0kB [ 826.066955][T14288] lowmem_reserve[]: 0 0 0 0 0 [ 826.068632][T14288] Node 1 DMA32 free:212328kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2908kB inactive_anon:7112kB active_file:29760kB inactive_file:13096kB unevictable:3536kB writepending:2044kB zspages:6580kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:9108kB local_pcp:2764kB free_cma:0kB [ 826.081874][T14288] lowmem_reserve[]: 0 0 0 0 0 [ 826.083820][T14288] Node 0 DMA: 13*4kB (UM) 3*8kB (UM) 4*16kB (UM) 5*32kB (UM) 2*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2092kB [ 826.089484][T14288] Node 0 DMA32: 198*4kB (UME) 156*8kB (UME) 233*16kB (UME) 117*32kB (UM) 46*64kB (UME) 19*128kB (UME) 4*256kB (UE) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 16424kB [ 826.098206][T14288] Node 1 DMA32: 2616*4kB (UME) 5141*8kB (UME) 4686*16kB (UME) 208*32kB (UME) 116*64kB (UME) 83*128kB (UM) 41*256kB (UM) 95*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 212456kB [ 826.106334][T14288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 826.109712][T14288] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 826.112626][T14288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 826.116721][T14288] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 826.120108][T14288] 15307 total pagecache pages [ 826.122087][T14288] 2221 pages in swap cache [ 826.124491][T14288] Free swap = 74112kB [ 826.126456][T14288] Total swap = 124996kB [ 826.127986][T14288] 524155 pages RAM [ 826.129385][T14288] 0 pages HighMem/MovableOnly [ 826.131053][T14288] 209484 pages reserved [ 826.132639][T14288] 0 pages cma reserved [ 826.302483][T14298] bridge0: port 3(vlan0) entered disabled state [ 826.375757][T14301] lo: Caught tx_queue_len zero misconfig [ 826.385621][T14303] geneve2: entered promiscuous mode [ 826.389095][T32257] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.392035][T32257] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.395409][T32257] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.398377][T32257] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.570366][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17677'. [ 826.665555][T13733] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 826.743881][ T40] audit: type=1326 audit(2000000031.789:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.4.17685" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63579 code=0x0 [ 826.820033][T13733] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 826.828321][T13733] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 826.833139][T13733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 826.836911][T13733] usb 5-1: Product: syz [ 826.839092][T13733] usb 5-1: Manufacturer: syz [ 826.841151][T13733] usb 5-1: SerialNumber: syz [ 826.857158][ T88] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.065164][T13733] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 827.333614][ C1] usblp0: nonzero write bulk status received: -71 [ 827.333961][T13733] usb 5-1: USB disconnect, device number 48 [ 827.349774][T13733] usblp0: removed [ 827.556278][T14373] veth0: entered promiscuous mode [ 827.559263][T14372] veth0: left promiscuous mode [ 827.697294][ T7682] block nbd1: Possible stuck request ffff888027078000: control (read@0,1024B). Runtime 360 seconds [ 827.700859][ T7682] block nbd1: Possible stuck request ffff888027078200: control (read@1024,1024B). Runtime 360 seconds [ 827.704284][ T7682] block nbd1: Possible stuck request ffff888027078400: control (read@2048,1024B). Runtime 360 seconds [ 827.709126][ T7682] block nbd1: Possible stuck request ffff888027078600: control (read@3072,1024B). Runtime 360 seconds [ 827.956380][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.027590][T14406] ip6_vti0 speed is unknown, defaulting to 1000 [ 828.050497][T14413] overlayfs: failed to clone upperpath [ 828.407301][T14429] lo: Caught tx_queue_len zero misconfig [ 828.614783][ T40] audit: type=1326 audit(2000000033.659:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14432 comm="syz.4.17721" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63579 code=0x0 [ 828.973644][ T88] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.976691][ T88] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.980558][ T88] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.984041][ T88] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.987614][T14462] hsr0: entered allmulticast mode [ 828.989782][T14462] hsr_slave_0: entered allmulticast mode [ 828.992156][T14462] hsr_slave_1: entered allmulticast mode [ 829.000722][T14462] hsr_slave_0: left promiscuous mode [ 829.003432][T14462] hsr_slave_1: left promiscuous mode [ 829.028116][T14462] hsr0 (unregistering): left allmulticast mode [ 829.039484][T14460] geneve2: entered promiscuous mode [ 829.042244][T32260] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.046195][T32260] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.055604][T32260] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.066650][T32260] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.076144][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.188934][T14474] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.17739'. [ 829.192120][T14474] netlink: Conntrack attr has 4 unknown bytes [ 829.506284][T14502] ip6_vti0 speed is unknown, defaulting to 1000 [ 829.903033][T14535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.975434][ T55] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 830.101230][T14545] input: syz1 as /devices/virtual/input/input99 [ 830.137748][ T55] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 830.142752][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.195467][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.195519][T32260] net_ratelimit: 6 callbacks suppressed [ 830.195532][T32260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.200542][ T55] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 830.212146][ T55] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 830.215933][ T55] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 830.219340][ T55] usb 5-1: Manufacturer: syz [ 830.223507][ T55] usb 5-1: config 0 descriptor?? [ 830.258205][ T64] block nbd7: Receive control failed (result -32) [ 830.272010][T14553] block nbd7: shutting down sockets [ 830.649148][ T55] hid_parser_main: 5 callbacks suppressed [ 830.649170][ T55] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 830.663080][ T55] appleir 0003:05AC:8243.0024: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 830.725872][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17781'. [ 830.923022][ T6013] usb 5-1: USB disconnect, device number 49 [ 831.142225][T14591] netlink: 'syz.4.17788': attribute type 9 has an invalid length. [ 831.149005][T14591] netlink: 'syz.4.17788': attribute type 11 has an invalid length. [ 831.153888][T14591] netlink: 'syz.4.17788': attribute type 12 has an invalid length. [ 831.159043][T14591] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.17788'. [ 831.163105][T14591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17788'. [ 831.165091][T14593] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.17796'. [ 831.305788][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.446707][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.699226][ T64] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 832.703771][ T64] CPU: 2 UID: 0 PID: 64 Comm: kworker/u33:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.703804][ T64] Tainted: [L]=SOFTLOCKUP [ 832.703812][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 832.703825][ T64] Workqueue: hci1 hci_rx_work [ 832.703853][ T64] Call Trace: [ 832.703862][ T64] [ 832.703879][ T64] dump_stack_lvl+0x100/0x190 [ 832.703905][ T64] sysfs_warn_dup.cold+0x1c/0x28 [ 832.703932][ T64] sysfs_create_dir_ns+0x24b/0x2b0 [ 832.703977][ T64] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 832.704001][ T64] ? find_held_lock+0x2b/0x80 [ 832.704020][ T64] ? kobject_add_internal+0x25f/0x930 [ 832.704045][ T64] ? kobject_add_internal+0x25f/0x930 [ 832.704072][ T64] ? do_raw_spin_unlock+0x145/0x1e0 [ 832.704101][ T64] kobject_add_internal+0x2c8/0x930 [ 832.704133][ T64] kobject_add+0x16a/0x1e0 [ 832.704157][ T64] ? __pfx_kobject_add+0x10/0x10 [ 832.704181][ T64] ? class_to_subsys+0x10f/0x150 [ 832.704212][ T64] ? kobject_put+0xb9/0x640 [ 832.704234][ T64] ? _raw_spin_unlock+0x28/0x50 [ 832.704263][ T64] device_add+0x294/0x1950 [ 832.704290][ T64] ? __pfx_dev_set_name+0x10/0x10 [ 832.704319][ T64] ? __pfx_device_add+0x10/0x10 [ 832.704344][ T64] ? mgmt_send_event_skb+0x2fb/0x460 [ 832.704373][ T64] hci_conn_add_sysfs+0x1a3/0x260 [ 832.704401][ T64] le_conn_complete_evt+0x11cb/0x1f40 [ 832.704432][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 832.704464][ T64] hci_le_conn_complete_evt+0x23c/0x3a0 [ 832.704488][ T64] ? skb_pull_data+0x15f/0x1e0 [ 832.704514][ T64] hci_le_meta_evt+0x34a/0x5f0 [ 832.704539][ T64] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 832.704566][ T64] hci_event_packet+0x682/0x11c0 [ 832.704590][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 832.704615][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 832.704639][ T64] ? kcov_remote_start+0x374/0x660 [ 832.704659][ T64] ? lockdep_hardirqs_on+0x78/0x100 [ 832.704688][ T64] hci_rx_work+0x451/0xfc0 [ 832.704716][ T64] process_one_work+0x9c2/0x1840 [ 832.704756][ T64] ? __pfx_process_one_work+0x10/0x10 [ 832.704811][ T64] ? assign_work+0x19c/0x250 [ 832.704845][ T64] worker_thread+0x5da/0xe40 [ 832.704891][ T64] ? kthread+0x17d/0x730 [ 832.704917][ T64] ? __pfx_worker_thread+0x10/0x10 [ 832.704943][ T64] kthread+0x3b3/0x730 [ 832.704970][ T64] ? __pfx_kthread+0x10/0x10 [ 832.704994][ T64] ? ret_from_fork+0x79/0xaf0 [ 832.705012][ T64] ? ret_from_fork+0x79/0xaf0 [ 832.705029][ T64] ? rcu_is_watching+0x12/0xc0 [ 832.705047][ T64] ? __pfx_kthread+0x10/0x10 [ 832.705071][ T64] ret_from_fork+0x754/0xaf0 [ 832.705086][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 832.705106][ T64] ? __switch_to+0x7b9/0x10c0 [ 832.705128][ T64] ? __pfx_kthread+0x10/0x10 [ 832.705155][ T64] ret_from_fork_asm+0x1a/0x30 [ 832.705196][ T64] [ 832.708134][ T64] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 832.825715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.827149][ T64] Bluetooth: hci1: failed to register connection device [ 833.553991][T14688] syzkaller1: entered promiscuous mode [ 833.557044][T14688] syzkaller1: entered allmulticast mode [ 833.596853][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.906449][T14706] ip6_vti0 speed is unknown, defaulting to 1000 [ 834.107555][T14715] input: syz0 as /devices/virtual/input/input100 [ 834.146838][ T40] audit: type=1326 audit(2000000039.199:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14716 comm="syz.4.17840" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63579 code=0x0 [ 834.736045][T32260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.981661][T14740] netlink: 'syz.7.17849': attribute type 4 has an invalid length. [ 834.995840][T14740] netlink: 'syz.7.17849': attribute type 4 has an invalid length. [ 835.462483][T14754] overlayfs: failed to clone lowerpath [ 835.855954][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.942823][ T64] Bluetooth: hci1: unexpected event for opcode 0x0c38 [ 836.002782][T14795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17876'. [ 836.064004][T14804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17880'. [ 836.860681][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17909'. [ 836.877389][T14878] vxlan3: entered promiscuous mode [ 836.884721][T32257] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 836.889608][T32257] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 836.893151][T32257] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 836.897782][T32257] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 837.016230][T32257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.395537][ T5972] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 837.545433][ T5972] usb 10-1: Using ep0 maxpacket: 32 [ 837.550050][ T5972] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 837.554820][ T5972] usb 10-1: config 0 interface 0 has no altsetting 0 [ 837.557976][ T5972] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 837.562234][ T5972] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.577579][ T5972] usb 10-1: config 0 descriptor?? [ 837.770859][T14910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.874578][T14916] evm: overlay not supported [ 837.905740][ T5972] usbhid 10-1:0.0: can't add hid device: -71 [ 837.908342][ T5972] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 837.916569][ T5972] usb 10-1: USB disconnect, device number 22 [ 837.945556][ T7682] block nbd2: Possible stuck request ffff8880270f8000: control (read@0,4096B). Runtime 330 seconds [ 838.127160][T32261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.224808][T14939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.320075][T14947] netlink: 'syz.4.17942': attribute type 10 has an invalid length. [ 838.333234][T14947] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 838.367964][T14952] KVM: debugfs: duplicate directory 14952-5 [ 838.744049][T14973] kernel profiling enabled (shift: 63) [ 838.748114][T14973] profiling shift: 63 too large [ 839.256984][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.287871][T15005] ip6_vti0 speed is unknown, defaulting to 1000 [ 839.479253][T15011] ip6_vti0 speed is unknown, defaulting to 1000 [ 839.501047][ T1453] IPVS: starting estimator thread 0... [ 839.605447][T15012] IPVS: using max 44 ests per chain, 105600 per kthread [ 839.727654][T15019] loop2: detected capacity change from 0 to 7 [ 839.733047][T15019] Dev loop2: unable to read RDB block 7 [ 839.734856][T15019] loop2: unable to read partition table [ 839.737062][T15019] loop2: partition table beyond EOD, truncated [ 839.738971][T15019] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 839.791759][T32261] IPVS: stop unused estimator thread 0... [ 839.813826][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17970'. [ 839.994008][T15029] overlayfs: failed to clone upperpath [ 840.013311][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17976'. [ 840.019026][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17976'. [ 840.022745][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17976'. [ 840.400138][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.669351][T15073] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17993'. [ 840.672876][T15069] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17993'. [ 841.355417][ T55] usb 12-1: new high-speed USB device number 33 using dummy_hcd [ 841.505485][ T55] usb 12-1: Using ep0 maxpacket: 32 [ 841.512246][ T55] usb 12-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 841.516001][ T55] usb 12-1: config 0 interface 0 has no altsetting 0 [ 841.518208][ T55] usb 12-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 841.521382][ T55] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.535942][ T55] usb 12-1: config 0 descriptor?? [ 841.545794][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.755290][ T55] usbhid 12-1:0.0: can't add hid device: -71 [ 841.758063][ T55] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 841.764112][ T55] usb 12-1: USB disconnect, device number 33 [ 842.179790][T15122] overlayfs: failed to clone upperpath [ 842.690549][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.966999][ T40] audit: type=1326 audit(2000000048.019:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15168 comm="syz.5.18031" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73bd579 code=0x0 [ 843.035511][ T5988] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 843.188036][ T5988] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 843.191636][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 843.205539][ T5988] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 843.210015][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 843.214638][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 843.219893][ T5988] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 843.222551][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 843.227513][ T5988] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 843.232397][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 843.236871][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 843.242854][ T5988] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 843.246655][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 843.251427][ T5988] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 843.256868][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 843.261622][ T5988] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 843.269997][ T5988] usb 5-1: string descriptor 0 read error: -22 [ 843.273283][ T5988] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 843.277471][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.301812][ T5988] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 843.817275][T32261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.850729][T15205] overlayfs: upper fs does not support file handles, falling back to index=off. [ 844.232165][T15231] sch_tbf: peakrate 4294963201 is lower than or equals to rate 16284383111468714980 ! [ 844.717435][T15256] ip6_vti0 speed is unknown, defaulting to 1000 [ 844.975188][T15264] netlink: 'syz.4.18069': attribute type 16 has an invalid length. [ 844.978130][T15264] netlink: 'syz.4.18069': attribute type 17 has an invalid length. [ 844.987344][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.001325][T15268] lo: Caught tx_queue_len zero misconfig [ 845.269444][T15264] ip6gretap1: left promiscuous mode [ 845.271338][T15264] ip6gretap1: left allmulticast mode [ 845.288380][T15264] vxlan0: left promiscuous mode [ 845.347391][T15264] vxlan1: left promiscuous mode [ 845.353125][T15264] macvlan0: left promiscuous mode [ 845.355268][T15264] macvlan0: left allmulticast mode [ 845.376474][T32261] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 845.379894][T32261] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 845.382951][T32261] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.395485][T32261] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 845.398818][T32261] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 845.402342][T32261] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.406159][T32261] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 845.409664][T32261] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 845.413433][T32261] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.418135][T32261] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 845.421945][T32261] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 845.426248][T32261] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.696435][T13733] usb 5-1: USB disconnect, device number 50 [ 845.905214][T15299] netlink: 'syz.4.18086': attribute type 2 has an invalid length. [ 845.913707][T15299] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18086'. [ 846.046404][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18092'. [ 846.059680][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18092'. [ 846.167211][T15322] netlink: 104 bytes leftover after parsing attributes in process `syz.0.18096'. [ 846.171074][T15322] netlink: 104 bytes leftover after parsing attributes in process `syz.0.18096'. [ 846.278781][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18099'. [ 846.285099][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18099'. [ 846.445546][T15351] kvm: Disabled LAPIC found during irq injection [ 846.477561][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18108'. [ 846.482036][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18108'. [ 846.634521][T15366] overlayfs: failed to clone upperpath [ 846.640451][T15366] overlayfs: failed to clone upperpath [ 847.609412][ T64] Bluetooth: unknown link type 87 [ 847.610939][ T64] Bluetooth: hci1: connection err: -111 [ 847.650462][T15385] ip6_vti0 speed is unknown, defaulting to 1000 [ 847.901374][ T54] IPVS: starting estimator thread 0... [ 848.005636][T15389] IPVS: using max 43 ests per chain, 103200 per kthread [ 848.095585][ T73] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 848.099353][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 848.102762][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 848.106181][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 848.251557][T32257] IPVS: stop unused estimator thread 0... [ 848.585492][ T64] Bluetooth: hci4: command 0x0419 tx timeout [ 848.585820][T15350] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 849.444849][T15350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 849.448243][T15350] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 849.450475][T15350] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 849.453604][T15350] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 849.456296][T15350] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 849.458311][T15350] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 849.461724][T15350] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 850.656443][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 850.969914][T15471] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=407865202 (3262921616 ns) > initial count (2352015480 ns). Using initial count to start timer. [ 851.165079][T15480] netlink: 'syz.7.18155': attribute type 1 has an invalid length. [ 851.170478][T15480] netlink: 'syz.7.18155': attribute type 4 has an invalid length. [ 851.173789][T15480] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.18155'. [ 851.341410][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18158'. [ 851.455567][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 851.502368][T15501] binder: 15499:15501 ioctl c0306201 80000640 returned -22 [ 851.535547][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 853.427135][ T40] audit: type=1326 audit(2000000314.475:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.7.18196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7fc00000 [ 853.436667][ T40] audit: type=1326 audit(2000000314.475:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.7.18196" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f46579 code=0x7fc00000 [ 853.449033][ T40] audit: type=1326 audit(2000000314.475:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.7.18196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7fc00000 [ 853.466148][ T40] audit: type=1326 audit(2000000314.475:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.7.18196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7fc00000 [ 853.484212][ T40] audit: type=1326 audit(2000000314.475:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.7.18196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7fc00000 [ 853.495491][ T40] audit: type=1326 audit(2000000314.475:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.7.18196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7fc00000 [ 853.502859][ T40] audit: type=1326 audit(2000000314.475:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.7.18196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7fc00000 [ 853.510884][ T40] audit: type=1326 audit(2000000314.475:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.7.18196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7fc00000 [ 853.518625][ T40] audit: type=1326 audit(2000000314.475:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.7.18196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7fc00000 [ 853.526901][ T40] audit: type=1326 audit(2000000314.475:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.7.18196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7fc00000 [ 853.545472][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 853.605495][ T55] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 853.615810][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 853.765385][ T55] usb 10-1: Using ep0 maxpacket: 16 [ 853.768465][ T55] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.771921][ T55] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 853.777911][ T55] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 853.780989][ T55] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.787617][ T55] usb 10-1: config 0 descriptor?? [ 854.328068][ T55] HID 045e:07da: Invalid code 65791 type 1 [ 854.371170][ T55] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:045E:07DA.0025/input/input102 [ 854.385784][ T55] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 855.065921][ T55] usb 10-1: USB disconnect, device number 23 [ 855.616587][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 855.617466][T15645] netlink: 'syz.4.18215': attribute type 3 has an invalid length. [ 855.621697][T15645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18215'. [ 855.698633][ T5946] Bluetooth: hci3: command 0x0c1a tx timeout [ 855.703046][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 855.711926][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 855.718753][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 855.724242][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 855.728113][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 855.772824][T15651] ip6_vti0 speed is unknown, defaulting to 1000 [ 855.797776][T15659] bridge0: port 1(syz_tun) entered blocking state [ 855.800183][T15659] bridge0: port 1(syz_tun) entered disabled state [ 855.802718][T15659] syz_tun: entered allmulticast mode [ 855.816654][T15659] syz_tun: entered promiscuous mode [ 855.833801][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18221'. [ 855.860009][T15659] syz_tun (unregistering): left allmulticast mode [ 855.862118][T15659] syz_tun (unregistering): left promiscuous mode [ 855.864188][T15659] bridge0: port 1(syz_tun) entered disabled state [ 856.194620][T15651] chnl_net:caif_netlink_parms(): no params data found [ 856.259003][T15651] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.261340][T15651] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.263743][T15651] bridge_slave_0: entered allmulticast mode [ 856.266840][T15651] bridge_slave_0: entered promiscuous mode [ 856.270116][T15651] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.272454][T15651] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.274808][T15651] bridge_slave_1: entered allmulticast mode [ 856.279687][T15651] bridge_slave_1: entered promiscuous mode [ 856.295117][T15651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.313775][T15651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.342053][T15651] team0: Port device team_slave_0 added [ 856.345847][T15651] team0: Port device team_slave_1 added [ 856.378646][T15651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.381694][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.405781][T15651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.408542][T15698] netlink: 'syz.4.18235': attribute type 10 has an invalid length. [ 856.414746][T15651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.417602][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.445606][T15651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.451329][T15698] team0: Failed to send options change via netlink (err -105) [ 856.453869][T15698] team0: Port device dummy0 added [ 856.457567][T15698] netlink: 'syz.4.18235': attribute type 10 has an invalid length. [ 856.497101][T15698] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 856.706064][T15698] team0: Failed to send options change via netlink (err -105) [ 856.709464][T15698] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 856.715971][T15698] team0: Port device dummy0 removed [ 856.725195][T15698] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 856.743625][T15651] hsr_slave_0: entered promiscuous mode [ 856.751083][T15651] hsr_slave_1: entered promiscuous mode [ 856.753460][T15651] debugfs: 'hsr0' already exists in 'hsr' [ 856.755585][T15651] Cannot create hsr debugfs directory [ 856.854868][T15651] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.925352][T15651] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.001735][T15651] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.058782][T15651] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.259489][T15651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 857.264630][T15651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 857.272779][T15651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 857.284665][T15651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 857.383009][T15651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.396835][T15651] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.408276][T32260] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.410572][T32260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.428525][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.431559][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.555834][T15701] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 857.589031][T15651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.630065][T15651] veth0_vlan: entered promiscuous mode [ 857.642835][T15651] veth1_vlan: entered promiscuous mode [ 857.678340][T15651] veth0_macvtap: entered promiscuous mode [ 857.684910][T15651] veth1_macvtap: entered promiscuous mode [ 857.700848][T15651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.713066][T15651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.726779][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.731713][ T1147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.734542][ T1147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.746101][ T1147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.785539][ T64] Bluetooth: hci0: command tx timeout [ 857.790961][ T7682] block nbd1: Possible stuck request ffff888027078000: control (read@0,1024B). Runtime 390 seconds [ 857.794668][ T7682] block nbd1: Possible stuck request ffff888027078200: control (read@1024,1024B). Runtime 390 seconds [ 857.798993][ T7682] block nbd1: Possible stuck request ffff888027078400: control (read@2048,1024B). Runtime 390 seconds [ 857.805635][ T7682] block nbd1: Possible stuck request ffff888027078600: control (read@3072,1024B). Runtime 390 seconds [ 857.866707][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.870072][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.885444][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.888659][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.964493][T15800] kvm: pic: single mode not supported [ 858.964878][T15800] kvm: pic: single mode not supported [ 858.968966][T15800] kvm: pic: level sensitive irq not supported [ 858.997264][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18274'. [ 859.445668][T15826] netlink: 280 bytes leftover after parsing attributes in process `syz.5.18282'. [ 859.447658][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 859.448754][T15826] netlink: 280 bytes leftover after parsing attributes in process `syz.5.18282'. [ 859.450705][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 859.483132][T15827] ceph: No mds server is up or the cluster is laggy [ 859.607653][T15837] syzkaller1: entered promiscuous mode [ 859.609565][T15837] syzkaller1: entered allmulticast mode [ 859.757112][T15843] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.18289'. [ 859.855607][ T64] Bluetooth: hci0: command 0x041b tx timeout [ 859.920666][T15853] netlink: 'syz.4.18293': attribute type 1 has an invalid length. [ 859.927584][T15856] random: crng reseeded on system resumption [ 859.950859][T15853] 8021q: adding VLAN 0 to HW filter on device bond2 [ 859.988897][T15853] bond2: (slave ip6erspan0): making interface the new active one [ 859.993870][T15853] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 860.112651][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18296'. [ 860.126450][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18296'. [ 860.131266][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18296'. [ 860.195639][ T55] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 860.357250][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 860.361308][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.366553][ T55] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.370661][ T55] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 860.376037][ T55] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 860.379850][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.386166][ T55] usb 5-1: config 0 descriptor?? [ 860.453862][T15883] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18305'. [ 860.473488][T15883] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18305'. [ 860.816586][ T55] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 860.818970][ T55] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 860.821243][ T55] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 860.823469][ T55] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 860.829099][ T55] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 860.836680][ T55] input: HID 0955:7214 Haptics as /devices/virtual/input/input103 [ 860.881807][ T55] shield 0003:0955:7214.0026: Registered Thunderstrike controller [ 860.886490][ T55] shield 0003:0955:7214.0026: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 860.893150][T15907] 9p: Bad value for 'wfdno' [ 861.017669][T15856] netlink: 504 bytes leftover after parsing attributes in process `syz.0.18294'. [ 861.022164][ T5972] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 861.022398][ T5988] usb 5-1: USB disconnect, device number 51 [ 861.036446][ T5972] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 861.046674][ T5988] ------------[ cut here ]------------ [ 861.049405][ T5988] workqueue: work disable count underflowed [ 861.051506][ T5972] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 861.052147][ T5988] WARNING: kernel/workqueue.c:4359 at enable_work+0x2d1/0x320, CPU#3: kworker/3:3/5988 [ 861.061023][ T5988] Modules linked in: [ 861.063442][ T5988] CPU: 3 UID: 0 PID: 5988 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 861.066907][ T5988] Tainted: [L]=SOFTLOCKUP [ 861.068210][ T5988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 861.071338][ T5988] Workqueue: usb_hub_wq hub_event [ 861.072956][ T5988] RIP: 0010:enable_work+0x2d1/0x320 [ 861.074605][ T5988] Code: ff e8 13 52 38 00 e8 ce e9 a5 09 e9 61 ff ff ff e8 04 52 38 00 90 0f 0b 90 e9 17 fe ff ff e8 f6 51 38 00 48 8d 3d bf 6e ec 0e <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 8a a9 a1 00 e9 [ 861.080604][ T5988] RSP: 0000:ffffc90004e6f348 EFLAGS: 00010087 [ 861.083049][ T5988] RAX: 000000000003255a RBX: 0000000000000000 RCX: ffffc900308be000 [ 861.086144][ T5988] RDX: 0000000000100000 RSI: ffffffff81cdf88a RDI: ffffffff90ba6750 [ 861.088679][ T5988] RBP: ffff888057b87738 R08: 0000000000000007 R09: 0000000000000000 [ 861.091324][ T5988] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 861.093807][ T5988] R13: 1ffff920009cde6a R14: ffff888057b87698 R15: 000000007fffffff [ 861.096337][ T5988] FS: 0000000000000000(0000) GS:ffff8880976e3000(0000) knlGS:0000000000000000 [ 861.099050][ T5988] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 861.101139][ T5988] CR2: 00000000f1fee810 CR3: 000000000e392000 CR4: 0000000000352ef0 [ 861.103616][ T5988] Call Trace: [ 861.104663][ T5988] [ 861.105635][ T5988] ? __pfx_enable_work+0x10/0x10 [ 861.107245][ T5988] ? __pfx___might_resched+0x10/0x10 [ 861.108946][ T5988] cancel_delayed_work_sync+0x96/0xf0 [ 861.110652][ T5988] thermal_zone_device_unregister+0x28e/0x4e0 [ 861.112603][ T5988] ? __pfx_shield_remove+0x10/0x10 [ 861.114239][ T5988] power_supply_unregister+0x10a/0x150 [ 861.115994][ T5988] shield_remove+0x75/0x130 [ 861.117470][ T5988] ? __pfx_shield_remove+0x10/0x10 [ 861.119100][ T5988] hid_device_remove+0xd1/0x270 [ 861.120685][ T5988] ? __pfx_hid_device_remove+0x10/0x10 [ 861.122662][ T5988] device_remove+0xcb/0x180 [ 861.124468][ T5988] device_release_driver_internal+0x42e/0x600 [ 861.126897][ T5988] bus_remove_device+0x22f/0x440 [ 861.128881][ T5988] device_del+0x376/0x9b0 [ 861.130609][ T5988] ? __pfx_device_del+0x10/0x10 [ 861.132550][ T5988] ? do_raw_spin_lock+0x128/0x260 [ 861.134547][ T5988] hid_destroy_device+0x19c/0x240 [ 861.136529][ T5988] usbhid_disconnect+0xa0/0xe0 [ 861.138364][ T5988] usb_unbind_interface+0x1dd/0x9e0 [ 861.140306][ T5988] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 861.142213][ T5988] ? __pfx_usb_unbind_interface+0x10/0x10 [ 861.144194][ T5988] device_remove+0x12a/0x180 [ 861.145774][ T5988] device_release_driver_internal+0x42e/0x600 [ 861.148061][ T5988] bus_remove_device+0x22f/0x440 [ 861.149840][ T5988] device_del+0x376/0x9b0 [ 861.151359][ T5988] ? kfree_const+0x5a/0x70 [ 861.152972][ T5988] ? __pfx_device_del+0x10/0x10 [ 861.154674][ T5988] ? kobject_put+0xb9/0x640 [ 861.156184][ T5988] usb_disable_device+0x367/0x810 [ 861.157894][ T5988] usb_disconnect+0x2e2/0x9a0 [ 861.159482][ T5988] hub_event+0x1d0c/0x4af0 [ 861.161212][ T5988] ? __lock_acquire+0x4a5/0x2630 [ 861.163132][ T5988] ? do_raw_spin_unlock+0x145/0x1e0 [ 861.165236][ T5988] ? __pfx_hub_event+0x10/0x10 [ 861.167083][ T5988] ? debug_print_object+0x2a0/0x2a0 [ 861.168864][ T5988] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 861.170760][ T5988] ? process_one_work+0x80b/0x1840 [ 861.172547][ T5988] ? rcu_is_watching+0x12/0xc0 [ 861.174181][ T5988] process_one_work+0x9c2/0x1840 [ 861.175936][ T5988] ? __pfx_process_one_work+0x10/0x10 [ 861.177787][ T5988] ? assign_work+0x19c/0x250 [ 861.179282][ T5988] worker_thread+0x5da/0xe40 [ 861.180762][ T5988] ? kthread+0x17d/0x730 [ 861.182237][ T5988] ? __pfx_worker_thread+0x10/0x10 [ 861.183918][ T5988] kthread+0x3b3/0x730 [ 861.185229][ T5988] ? __pfx_kthread+0x10/0x10 [ 861.186929][ T5988] ? ret_from_fork+0x79/0xaf0 [ 861.188559][ T5988] ? ret_from_fork+0x79/0xaf0 [ 861.190160][ T5988] ? rcu_is_watching+0x12/0xc0 [ 861.191858][ T5988] ? __pfx_kthread+0x10/0x10 [ 861.193430][ T5988] ret_from_fork+0x754/0xaf0 [ 861.195190][ T5988] ? __pfx_ret_from_fork+0x10/0x10 [ 861.196997][ T5988] ? native_load_gs_index+0x1e/0xc0 [ 861.199072][ T5988] ? __switch_to+0x7b9/0x10c0 [ 861.200870][ T5988] ? __pfx_kthread+0x10/0x10 [ 861.202478][ T5988] ret_from_fork_asm+0x1a/0x30 [ 861.204012][ T5988] [ 861.205073][ T5988] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 861.207511][ T5988] CPU: 3 UID: 0 PID: 5988 Comm: kworker/3:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 861.211429][ T5988] Tainted: [L]=SOFTLOCKUP [ 861.213152][ T5988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 861.216912][ T5988] Workqueue: usb_hub_wq hub_event [ 861.218595][ T5988] Call Trace: [ 861.219698][ T5988] [ 861.220669][ T5988] dump_stack_lvl+0x100/0x190 [ 861.222193][ T5988] vpanic+0x20d/0x630 [ 861.223431][ T5988] panic+0xd1/0xd1 [ 861.224498][ T5988] ? __pfx_panic+0x10/0x10 [ 861.225758][ T5988] check_panic_on_warn.cold+0x19/0x34 [ 861.227276][ T5988] ? enable_work+0x2d1/0x320 [ 861.228731][ T5988] __warn.cold+0x191/0x2f8 [ 861.230163][ T5988] __report_bug+0x296/0x3d0 [ 861.231621][ T5988] ? enable_work+0x2d1/0x320 [ 861.233324][ T5988] ? __pfx___report_bug+0x10/0x10 [ 861.235326][ T5988] ? enable_work+0x2ca/0x320 [ 861.237211][ T5988] ? find_held_lock+0x2b/0x80 [ 861.239000][ T5988] ? __flush_work+0x928/0xcb0 [ 861.240526][ T5988] ? __flush_work+0x928/0xcb0 [ 861.242019][ T5988] report_bug_entry+0xe1/0x290 [ 861.243525][ T5988] ? enable_work+0x2d1/0x320 [ 861.245131][ T5988] handle_bug+0x1c9/0x2a0 [ 861.246845][ T5988] exc_invalid_op+0x17/0x50 [ 861.248669][ T5988] asm_exc_invalid_op+0x1a/0x20 [ 861.250615][ T5988] RIP: 0010:enable_work+0x2d1/0x320 [ 861.252688][ T5988] Code: ff e8 13 52 38 00 e8 ce e9 a5 09 e9 61 ff ff ff e8 04 52 38 00 90 0f 0b 90 e9 17 fe ff ff e8 f6 51 38 00 48 8d 3d bf 6e ec 0e <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 8a a9 a1 00 e9 [ 861.259499][ T5988] RSP: 0000:ffffc90004e6f348 EFLAGS: 00010087 [ 861.261431][ T5988] RAX: 000000000003255a RBX: 0000000000000000 RCX: ffffc900308be000 [ 861.263970][ T5988] RDX: 0000000000100000 RSI: ffffffff81cdf88a RDI: ffffffff90ba6750 [ 861.266497][ T5988] RBP: ffff888057b87738 R08: 0000000000000007 R09: 0000000000000000 [ 861.269245][ T5988] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 861.272376][ T5988] R13: 1ffff920009cde6a R14: ffff888057b87698 R15: 000000007fffffff [ 861.275344][ T5988] ? enable_work+0x2ca/0x320 [ 861.276903][ T5988] ? enable_work+0x2ca/0x320 [ 861.278379][ T5988] ? __pfx_enable_work+0x10/0x10 [ 861.279970][ T5988] ? __pfx___might_resched+0x10/0x10 [ 861.281649][ T5988] cancel_delayed_work_sync+0x96/0xf0 [ 861.283508][ T5988] thermal_zone_device_unregister+0x28e/0x4e0 [ 861.285903][ T5988] ? __pfx_shield_remove+0x10/0x10 [ 861.287801][ T5988] power_supply_unregister+0x10a/0x150 [ 861.289535][ T5988] shield_remove+0x75/0x130 [ 861.291006][ T5988] ? __pfx_shield_remove+0x10/0x10 [ 861.292663][ T5988] hid_device_remove+0xd1/0x270 [ 861.294223][ T5988] ? __pfx_hid_device_remove+0x10/0x10 [ 861.295973][ T5988] device_remove+0xcb/0x180 [ 861.297464][ T5988] device_release_driver_internal+0x42e/0x600 [ 861.299376][ T5988] bus_remove_device+0x22f/0x440 [ 861.300965][ T5988] device_del+0x376/0x9b0 [ 861.302380][ T5988] ? __pfx_device_del+0x10/0x10 [ 861.303952][ T5988] ? do_raw_spin_lock+0x128/0x260 [ 861.305561][ T5988] hid_destroy_device+0x19c/0x240 [ 861.307192][ T5988] usbhid_disconnect+0xa0/0xe0 [ 861.308729][ T5988] usb_unbind_interface+0x1dd/0x9e0 [ 861.310378][ T5988] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 861.312133][ T5988] ? __pfx_usb_unbind_interface+0x10/0x10 [ 861.313912][ T5988] device_remove+0x12a/0x180 [ 861.315354][ T5988] device_release_driver_internal+0x42e/0x600 [ 861.317330][ T5988] bus_remove_device+0x22f/0x440 [ 861.319310][ T5988] device_del+0x376/0x9b0 [ 861.320772][ T5988] ? kfree_const+0x5a/0x70 [ 861.322205][ T5988] ? __pfx_device_del+0x10/0x10 [ 861.323842][ T5988] ? kobject_put+0xb9/0x640 [ 861.325314][ T5988] usb_disable_device+0x367/0x810 [ 861.327004][ T5988] usb_disconnect+0x2e2/0x9a0 [ 861.328544][ T5988] hub_event+0x1d0c/0x4af0 [ 861.329976][ T5988] ? __lock_acquire+0x4a5/0x2630 [ 861.331745][ T5988] ? do_raw_spin_unlock+0x145/0x1e0 [ 861.333807][ T5988] ? __pfx_hub_event+0x10/0x10 [ 861.335715][ T5988] ? debug_print_object+0x2a0/0x2a0 [ 861.337779][ T5988] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 861.340095][ T5988] ? process_one_work+0x80b/0x1840 [ 861.341733][ T5988] ? rcu_is_watching+0x12/0xc0 [ 861.343221][ T5988] process_one_work+0x9c2/0x1840 [ 861.344848][ T5988] ? __pfx_process_one_work+0x10/0x10 [ 861.346591][ T5988] ? assign_work+0x19c/0x250 [ 861.348100][ T5988] worker_thread+0x5da/0xe40 [ 861.349591][ T5988] ? kthread+0x17d/0x730 [ 861.350952][ T5988] ? __pfx_worker_thread+0x10/0x10 [ 861.352602][ T5988] kthread+0x3b3/0x730 [ 861.353913][ T5988] ? __pfx_kthread+0x10/0x10 [ 861.355446][ T5988] ? ret_from_fork+0x79/0xaf0 [ 861.357274][ T5988] ? ret_from_fork+0x79/0xaf0 [ 861.359153][ T5988] ? rcu_is_watching+0x12/0xc0 [ 861.361070][ T5988] ? __pfx_kthread+0x10/0x10 [ 861.362568][ T5988] ret_from_fork+0x754/0xaf0 [ 861.364395][ T5988] ? __pfx_ret_from_fork+0x10/0x10 [ 861.366102][ T5988] ? native_load_gs_index+0x1e/0xc0 [ 861.367811][ T5988] ? __switch_to+0x7b9/0x10c0 [ 861.369317][ T5988] ? __pfx_kthread+0x10/0x10 [ 861.370807][ T5988] ret_from_fork_asm+0x1a/0x30 [ 861.372382][ T5988] [ 861.374112][ T5988] Kernel Offset: disabled [ 861.375568][ T5988] Rebooting in 86400 seconds..