last executing test programs: 7.779651251s ago: executing program 1 (id=518): ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) socket$inet6(0xa, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 7.512730706s ago: executing program 3 (id=520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000300)={0x0, 0x32dd, 0x10000, 0x1, 0x322, 0x0, r1}, &(0x7f0000000cc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfb7d, 0x2, 0x1, 0x181, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa594, 0x80, 0x3, 0x38d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e01, 0x400, 0x3, 0x6d, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbf, 0x20000, 0x3, 0x235, 0x0, r0}, 0xffffffffffffffff}], 0x4, &(0x7f0000003640)={0x2e, 0x9, 0x0, r1, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xff32}, 0x0, 0x0, '\x00', {0x0, 0xca0, 0x0, &(0x7f0000002640)=@buf_512="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"}}, &(0x7f00000036c0)) io_uring_setup(0x17b2, &(0x7f0000003700)={0x0, 0x904b, 0x8000, 0x1, 0x30e, 0x0, r5}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000380)=@mmap={0x8, 0x1, 0x4, 0x1000, 0x0, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x79, "0100"}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.806834212s ago: executing program 1 (id=522): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2c040004) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}}, 0x40000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r4, 0x8914, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120119feffffff406a0563"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 6.205963711s ago: executing program 3 (id=525): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_submit(0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000100)={0x0, 0x2f00}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r2, 0x0, 0x0) r3 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x88, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x1, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x88}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x10) unshare(0x22020600) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x4002c0, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x4010744d, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x3c, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.904775133s ago: executing program 0 (id=529): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) ioctl$sock_FIOSETOWN(r1, 0x8901, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) 3.61445602s ago: executing program 1 (id=530): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) 3.56547936s ago: executing program 2 (id=531): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) 3.490540654s ago: executing program 2 (id=532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xfff2, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.422738257s ago: executing program 3 (id=533): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x2c, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, r2, 0x8203, 0x810}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}]}, 0x2c}}, 0x4054) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) membarrier(0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x800, 0x0, 0x1, 0x1, 0x80, 0x80}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000000640)={{0xffffffffffffffff, &(0x7f0000000500)='dummy0\x00', 0x80000, &(0x7f0000000540)={@_ha_fsid={[0xb, 0x2]}, {0x9, 0x4, 0x0, 0x8000000000000001}}, 0x35, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0xe17f}, {[0x2, 0x5, 0x7, 0x7]}, 0xd, 0x1a, &(0x7f0000000600)=""/26}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000000d2ccdc7984f688314a76af1a69b9838c709e1b998de4f0a3f84d094d3a1ea189805c34e47c82d27f5c30ef80ca3380f501cb66d1c19591142c7d1521c886ed17d74f06573420c90f20d87eb775b5727f9373388a39d904231e39d440e2835bb5090a8ea44b67b588df9f34ed4ab477b0c8abc8a11ff4f14a9f73984d0e3ca231ccd38c11fdf19c5fe95e9c4dde2e7ac035c856978d4304d42f44950002a8860aabb6b476565e141c7d88c18d8d5b4849f4466e095cf0407cec46890ab69c81e5054e84678ea9b12dc8aa6f12e62fb165db64869f8e2908eb86397391ffd3", @ANYRES16=r4, @ANYBLOB="000327bd7000fbdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000000000006001100aa0b00000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000101000006001100040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ff01000006001100030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00080000000600110007000000"], 0xd4}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@local, 0x3ff, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@ipv6_newaddr={0x2c, 0x14, 0x800, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x96, 0xfe, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x7fffffff, 0x4, 0xc84b, 0x1000}}]}, 0x2c}}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffff1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x819b}, 0x1c) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r6, 0x29, 0x45, 0x0, &(0x7f0000000b80)) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x6, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='wlan0\x00', 0x10) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write(r0, &(0x7f0000000280)="89ba41c97928dec7ce6a48422754c15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd00f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e62b206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45dee7ff00000000000000c4", 0xff4b) 3.209510896s ago: executing program 3 (id=534): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="ad000000b43da3978d060000", 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000900), 0x80000, 0x0) ioctl$CDROMRESUME(r4, 0x5302) syz_usb_control_io$hid(r0, 0x0, 0x0) setuid(0xee01) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x100000000000035) tkill(r5, 0x3d) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) close(0x3) write$char_usb(r6, 0x0, 0x0) 3.179134557s ago: executing program 0 (id=535): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x24002000) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x8a) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)='16', 0x2) 2.69269543s ago: executing program 2 (id=536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_mark(0xffffffffffffffff, 0x1, 0x800002b, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) 2.455482346s ago: executing program 1 (id=537): mkdir(&(0x7f0000000240)='./file0\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) mount(&(0x7f0000000280)=@filename='127.0.0.1:/\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000340)='addr=127.0.0.1\x00') r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x2, 0x156}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x3, 0xe3e}}}, &(0x7f0000000480)) openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) 2.24897215s ago: executing program 0 (id=538): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x2c040004) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r5, 0x8914, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120119feffffff406a0563"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 1.570101968s ago: executing program 2 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x16, 0x0, 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xe2, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x1) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x16, 0x8}, 0x6, 0x40, 0x9, 0xfffffffffffffffb, 0x0, 0x0, 0xd382}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 805.486245ms ago: executing program 0 (id=540): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) 565.131903ms ago: executing program 1 (id=541): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x2, 0x2, 0x3}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x117) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/obex.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/configs/c.1/obex.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='dummy_udc.0', 0xb) 554.789112ms ago: executing program 0 (id=542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}]}, 0x24}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000600), 0x2008800, &(0x7f0000000640)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_getres(0x17, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000480)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x140008c0) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x2b, 0xfffffffe, 0x300040ac, 0x0, 0x3, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa8f86, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4008, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0xfffffff6}], 0xee00}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) close(r2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) lseek(r5, 0xfffffffffffffff9, 0x4) 414.732276ms ago: executing program 2 (id=543): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000a3f90d10ba40d5f6d2b77a888211e64b358c31aa", @ANYRES16=r0, @ANYBLOB="00022abd7000ffdbdf256f00000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000f0000004b0000000a000600ffffffffffff0000050018010a0000000a000600ffffffffffff00000a00060008021100000100000500d6000700000008002201b60200000800a000080000000800a1001a4400000800a100cf090000080026006c090000"], 0x84}}, 0x20008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="18004305aaaaaaaaaaaabbbbbbbbbbbb86dd"], 0x36) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f0000000000)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r9, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0xf0ffff}, 0x24044080) 192.808708ms ago: executing program 1 (id=544): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x2c040004) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r5, 0x8914, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120119feffffff406a0563"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) 119.952839ms ago: executing program 3 (id=545): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) 0s ago: executing program 0 (id=546): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x15) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x4, [0x0, 0x0, 0xd1, 0x8b]}}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): T6343] 212116 pages reserved [ 61.782279][ T6343] 0 pages cma reserved [ 61.881665][ T1040] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 61.901333][ T5094] Bluetooth: hci3: command 0x0c1a tx timeout [ 61.901375][ T5094] Bluetooth: hci2: command 0x0419 tx timeout [ 61.901393][ T5094] Bluetooth: hci1: command 0x0406 tx timeout [ 61.921295][ T5813] usb 5-1: Using ep0 maxpacket: 8 [ 61.923685][ T5813] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 61.924663][ T5813] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 61.924719][ T5813] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.924755][ T5813] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.924792][ T5813] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.924829][ T5813] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.924877][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.188635][ T5813] usb 5-1: usb_control_msg returned -32 [ 62.188772][ T5813] usbtmc 5-1:16.0: can't read capabilities [ 62.442402][ T6348] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 62.466633][ T6348] evm: overlay not supported [ 62.886031][ T6350] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 62.955034][ T6353] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 62.957912][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.958126][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.191533][ T6360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 63.191787][ T6360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.191874][ T6360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.988685][ T6360] Process accounting resumed [ 64.058289][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 64.058457][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.066959][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.445044][ T5157] usb 5-1: USB disconnect, device number 2 [ 64.513903][ T1040] usb 7-1: unable to get BOS descriptor or descriptor too short [ 64.514573][ T1040] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 64.514592][ T1040] usb 7-1: no configurations [ 64.514598][ T1040] usb 7-1: can't read configurations, error -22 [ 64.931300][ T5157] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 64.940896][ T6391] geneve3: entered promiscuous mode [ 64.951634][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 56209 - 0 [ 64.951695][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 56209 - 0 [ 64.951747][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 56209 - 0 [ 64.951766][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 56209 - 0 [ 65.059103][ T6396] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 65.264632][ T5736] Bluetooth: hci2: command 0x0419 tx timeout [ 65.271301][ T5736] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.273782][ T5094] Bluetooth: hci1: command 0x0406 tx timeout [ 66.144254][ T6418] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.144424][ T6418] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.144495][ T6418] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.976558][ T6415] Process accounting resumed [ 66.996739][ T57] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 67.005671][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 67.008164][ T6430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 67.421323][ T5839] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 67.587515][ T5157] usb 5-1: unable to get BOS descriptor or descriptor too short [ 67.588857][ T5157] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 67.588886][ T5157] usb 5-1: no configurations [ 67.588896][ T5157] usb 5-1: can't read configurations, error -22 [ 68.148080][ T6439] geneve2: entered promiscuous mode [ 68.151340][ T5094] Bluetooth: hci1: command 0x0406 tx timeout [ 68.162391][ T5806] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 38886 - 0 [ 68.162461][ T5806] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 38886 - 0 [ 68.162579][ T5806] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 38886 - 0 [ 68.162598][ T5806] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 38886 - 0 [ 68.232044][ T5736] Bluetooth: hci2: command 0x0419 tx timeout [ 68.232212][ T5094] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.234846][ T6444] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.314320][ T5897] md_update_sb: can't update sb for read-only array md0 [ 68.372955][ T6445] md: could not open device unknown-block(1,1). [ 68.373475][ T6444] md: could not open device unknown-block(1,0). [ 68.373968][ T5897] md_update_sb: can't update sb for read-only array md0 [ 68.433324][ T5897] md_update_sb: can't update sb for read-only array md0 [ 68.441297][ T6444] md_update_sb: can't update sb for read-only array md0 [ 68.443590][ T5897] md_update_sb: can't update sb for read-only array md0 [ 68.689370][ T42] audit: type=1326 audit(1788957169.883:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 68.689514][ T42] audit: type=1326 audit(1788957169.883:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 68.689550][ T42] audit: type=1326 audit(1788957169.883:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 68.689677][ T42] audit: type=1326 audit(1788957169.883:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.125" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 68.689713][ T42] audit: type=1326 audit(1788957169.883:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 68.689862][ T42] audit: type=1326 audit(1788957169.883:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.125" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 68.690128][ T42] audit: type=1326 audit(1788957169.883:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.1.125" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 69.662170][ T57] usb 8-1: unable to get BOS descriptor or descriptor too short [ 69.665179][ T57] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 69.665236][ T57] usb 8-1: no configurations [ 69.665255][ T57] usb 8-1: can't read configurations, error -22 [ 69.693221][ T6460] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 69.709971][ T6460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.743696][ T6460] gretap1: entered promiscuous mode [ 69.750301][ T6460] bond0: (slave gretap1): making interface the new active one [ 69.752989][ T6460] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 69.797707][ T6460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.798992][ T6460] bond0: (slave bond1): Enslaving as an active interface with a down link [ 69.826695][ T6460] bond0 (unregistering): (slave gretap1): Releasing active interface [ 69.832919][ T6460] bond0 (unregistering): (slave bond1): Releasing active interface [ 69.837218][ T6460] bond0 (unregistering): Released all slaves [ 70.218198][ T5839] usb 7-1: unable to get BOS descriptor or descriptor too short [ 70.218865][ T5839] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 70.218884][ T5839] usb 7-1: no configurations [ 70.218890][ T5839] usb 7-1: can't read configurations, error -22 [ 70.258348][ T6478] syz_tun: entered allmulticast mode [ 70.259105][ T6478] syz_tun: left allmulticast mode [ 70.807186][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.807488][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.888824][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.907494][ T6511] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 70.907578][ T6511] CPU: 3 UID: 0 PID: 6511 Comm: syz.0.142 Tainted: G L syzkaller #0 PREEMPT(full) [ 70.907621][ T6511] Tainted: [L]=SOFTLOCKUP [ 70.907642][ T6511] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.907654][ T6511] Call Trace: [ 70.907661][ T6511] [ 70.907668][ T6511] dump_stack_lvl+0x100/0x190 [ 70.907700][ T6511] sysfs_warn_dup.cold+0x1c/0x28 [ 70.907733][ T6511] sysfs_create_dir_ns+0x24b/0x2b0 [ 70.907756][ T6511] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 70.907776][ T6511] ? find_held_lock+0x2b/0x80 [ 70.907820][ T6511] ? kobject_add_internal+0x25f/0x930 [ 70.907842][ T6511] ? kobject_add_internal+0x25f/0x930 [ 70.907871][ T6511] ? class_dir_child_ns_type+0xd/0x60 [ 70.907903][ T6511] kobject_add_internal+0x2c8/0x930 [ 70.907928][ T6511] kobject_add+0x16a/0x1e0 [ 70.907950][ T6511] ? __pfx_kobject_add+0x10/0x10 [ 70.907973][ T6511] ? get_device_parent+0x1b3/0x4c0 [ 70.907999][ T6511] ? kobject_put+0xb9/0x640 [ 70.908024][ T6511] device_add+0x294/0x1970 [ 70.908052][ T6511] ? lockdep_init_map_type+0x5c/0x250 [ 70.908080][ T6511] ? __pfx_device_add+0x10/0x10 [ 70.908106][ T6511] ? lockdep_init_map_type+0x5c/0x250 [ 70.908134][ T6511] ? __init_waitqueue_head+0xca/0x150 [ 70.908170][ T6511] tty_register_device_attr+0x388/0x7f0 [ 70.908196][ T6511] ? lockdep_init_map_type+0x5c/0x250 [ 70.908224][ T6511] ? __pfx_tty_register_device_attr+0x10/0x10 [ 70.908254][ T6511] ? tty_port_init+0x156/0x1c0 [ 70.908283][ T6511] gsm_activate_mux+0x155/0x2a0 [ 70.908309][ T6511] gsmld_ioctl+0xbbc/0x15c0 [ 70.908345][ T6511] ? __pfx_gsmld_ioctl+0x10/0x10 [ 70.908391][ T6511] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.908424][ T6511] ? __pfx_gsmld_ioctl+0x10/0x10 [ 70.908452][ T6511] tty_compat_ioctl+0x396/0x420 [ 70.908477][ T6511] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 70.908502][ T6511] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 70.908537][ T6511] __do_fast_syscall_32+0x13a/0x8b0 [ 70.908569][ T6511] do_fast_syscall_32+0x32/0x70 [ 70.908598][ T6511] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.908623][ T6511] RIP: 0023:0xf7f04fec [ 70.908644][ T6511] Code: Unable to access opcode bytes at 0xf7f04fc2. [ 70.908653][ T6511] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 70.908672][ T6511] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000404c4701 [ 70.908685][ T6511] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.908697][ T6511] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.908708][ T6511] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 70.908719][ T6511] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.908745][ T6511] [ 70.909885][ T6511] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 70.948648][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.948822][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.957636][ T1341] cfg80211: failed to load regulatory.db [ 70.968714][ T42] audit: type=1326 audit(1788957172.163:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 70.968910][ T42] audit: type=1326 audit(1788957172.163:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 70.969907][ T42] audit: type=1326 audit(1788957172.163:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 71.106722][ T6499] gretap1: left promiscuous mode [ 71.132426][ T5806] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.132509][ T5806] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.132541][ T5806] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.132570][ T5806] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.335118][ T6521] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 71.571272][ T6501] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 72.561401][ T1755] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 74.230325][ T6501] usb 7-1: unable to get BOS descriptor or descriptor too short [ 74.231010][ T6501] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 74.231030][ T6501] usb 7-1: no configurations [ 74.231036][ T6501] usb 7-1: can't read configurations, error -22 [ 74.290043][ T6545] syz.2.145: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 74.290201][ T6545] CPU: 3 UID: 0 PID: 6545 Comm: syz.2.145 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.290228][ T6545] Tainted: [L]=SOFTLOCKUP [ 74.290233][ T6545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.290240][ T6545] Call Trace: [ 74.290244][ T6545] [ 74.290249][ T6545] dump_stack_lvl+0x100/0x190 [ 74.290268][ T6545] warn_alloc.cold+0x9e/0xb2 [ 74.290280][ T6545] ? __pfx_warn_alloc+0x10/0x10 [ 74.290298][ T6545] ? __lock_acquire+0x5c0/0x1f40 [ 74.290316][ T6545] __vmalloc_node_range_noprof+0x123b/0x1420 [ 74.290331][ T6545] ? __lock_acquire+0x5c0/0x1f40 [ 74.290346][ T6545] ? __lock_acquire+0x5c0/0x1f40 [ 74.290363][ T6545] ? do_replace+0x1c6/0x490 [ 74.290378][ T6545] ? do_raw_spin_lock+0x128/0x260 [ 74.290396][ T6545] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 74.290412][ T6545] ? __lock_acquire+0x5c0/0x1f40 [ 74.290427][ T6545] ? do_raw_spin_unlock+0x145/0x1e0 [ 74.290439][ T6545] ? do_replace+0x1c6/0x490 [ 74.290451][ T6545] __vmalloc_node_noprof+0xad/0xf0 [ 74.290466][ T6545] ? do_replace+0x1c6/0x490 [ 74.290479][ T6545] __vmalloc_noprof+0xa3/0x120 [ 74.290494][ T6545] ? __pfx___vmalloc_noprof+0x10/0x10 [ 74.290513][ T6545] do_replace+0x1c6/0x490 [ 74.290527][ T6545] ? __pfx_do_replace+0x10/0x10 [ 74.290544][ T6545] ? register_lock_class+0x3f/0x7b0 [ 74.290562][ T6545] compat_do_replace+0x589/0x7a0 [ 74.290576][ T6545] ? __pfx_compat_do_replace+0x10/0x10 [ 74.290597][ T6545] ? bpf_lsm_capable+0x9/0x10 [ 74.290613][ T6545] ? security_capable+0x80/0x260 [ 74.290628][ T6545] do_ebt_set_ctl+0x3f4/0x4a0 [ 74.290642][ T6545] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 74.290656][ T6545] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 74.290673][ T6545] ? futex_wake+0x4ea/0x5e0 [ 74.290687][ T6545] ? nf_sockopt_find.isra.0+0x222/0x290 [ 74.290703][ T6545] nf_setsockopt+0x8d/0xf0 [ 74.290719][ T6545] ip_setsockopt+0xcb/0xf0 [ 74.290738][ T6545] tcp_setsockopt+0xa7/0x100 [ 74.290752][ T6545] smc_setsockopt+0x1b6/0xa40 [ 74.290765][ T6545] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 74.290784][ T6545] ? __pfx_smc_setsockopt+0x10/0x10 [ 74.290798][ T6545] ? aa_sock_opt_perm+0x114/0x1e0 [ 74.290812][ T6545] ? __pfx_smc_setsockopt+0x10/0x10 [ 74.290826][ T6545] do_sock_setsockopt+0xf3/0x1d0 [ 74.290845][ T6545] __sys_setsockopt+0x119/0x190 [ 74.290861][ T6545] __ia32_sys_setsockopt+0xbc/0x160 [ 74.290874][ T6545] ? __do_fast_syscall_32+0xb3/0x8b0 [ 74.290891][ T6545] ? lockdep_hardirqs_on+0x7d/0x110 [ 74.290906][ T6545] __do_fast_syscall_32+0x13a/0x8b0 [ 74.290924][ T6545] do_fast_syscall_32+0x32/0x70 [ 74.290941][ T6545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 74.290956][ T6545] RIP: 0023:0xf7f32fec [ 74.290969][ T6545] Code: Unable to access opcode bytes at 0xf7f32fc2. [ 74.290974][ T6545] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 74.290985][ T6545] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 74.290992][ T6545] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 74.290998][ T6545] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.291004][ T6545] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 74.291011][ T6545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.291024][ T6545] [ 74.291045][ T6545] Mem-Info: [ 74.291051][ T6545] active_anon:4728 inactive_anon:959 isolated_anon:0 [ 74.291051][ T6545] active_file:7681 inactive_file:16604 isolated_file:0 [ 74.291051][ T6545] unevictable:1000 dirty:567 writeback:0 [ 74.291051][ T6545] slab_reclaimable:5926 slab_unreclaimable:51790 [ 74.291051][ T6545] mapped:24004 shmem:1514 pagetables:1220 [ 74.291051][ T6545] sec_pagetables:299 bounce:0 [ 74.291051][ T6545] kernel_misc_reclaimable:0 [ 74.291051][ T6545] free:35711 free_pcp:14068 free_cma:0 [ 74.291085][ T6545] Node 0 active_anon:24kB inactive_anon:36kB active_file:1396kB inactive_file:120kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9056kB pagetables:1568kB sec_pagetables:1116kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 74.291115][ T6545] Node 1 active_anon:18888kB inactive_anon:3800kB active_file:29328kB inactive_file:66296kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:95984kB dirty:2256kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4988kB pagetables:3312kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 74.291145][ T6545] Node 0 DMA free:3508kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:192kB local_pcp:112kB free_cma:0kB [ 74.291328][ T6545] lowmem_reserve[]: 0 277 277 277 277 [ 74.291350][ T6545] Node 0 DMA32 free:13884kB boost:2048kB min:14676kB low:17832kB high:20988kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24kB inactive_anon:36kB active_file:1396kB inactive_file:120kB unevictable:2000kB writepending:12kB zspages:0kB present:1032196kB managed:284588kB mlocked:0kB bounce:0kB free_pcp:7120kB local_pcp:3548kB free_cma:0kB [ 74.291383][ T6545] lowmem_reserve[]: 0 0 0 0 0 [ 74.291402][ T6545] Node 1 DMA32 free:125452kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0kB free_highatomic:0kB active_anon:18888kB inactive_anon:3800kB active_file:29328kB inactive_file:66296kB unevictable:2000kB writepending:2256kB zspages:3492kB present:1048432kB managed:948208kB mlocked:0kB bounce:0kB free_pcp:48952kB local_pcp:13776kB free_cma:0kB [ 74.291434][ T6545] lowmem_reserve[]: 0 0 0 0 0 [ 74.291453][ T6545] Node 0 DMA: 157*4kB (UE) 26*8kB (UE) 17*16kB (UE) 35*32kB (UE) 8*64kB (UE) 6*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3508kB [ 74.291525][ T6545] Node 0 DMA32: 5*4kB (E) 33*8kB (UME) 22*16kB (UME) 42*32kB (UME) 26*64kB (UM) 16*128kB (UM) 6*256kB (UM) 7*512kB (UM) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 13884kB [ 74.291603][ T6545] Node 1 DMA32: 257*4kB (UM) 367*8kB (UME) 213*16kB (UME) 84*32kB (UE) 312*64kB (UME) 80*128kB (UME) 98*256kB (UME) 49*512kB (UME) 14*1024kB (UM) 8*2048kB (UM) 1*4096kB (U) = 125260kB [ 74.291684][ T6545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.291693][ T6545] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.291701][ T6545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.291708][ T6545] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.291716][ T6545] 26916 total pagecache pages [ 74.291720][ T6545] 1120 pages in swap cache [ 74.291723][ T6545] Free swap = 111252kB [ 74.291727][ T6545] Total swap = 124996kB [ 74.291731][ T6545] 524155 pages RAM [ 74.291734][ T6545] 0 pages HighMem/MovableOnly [ 74.291738][ T6545] 212116 pages reserved [ 74.291741][ T6545] 0 pages cma reserved [ 74.751378][ T1040] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 75.230564][ T1755] usb 6-1: unable to get BOS descriptor or descriptor too short [ 75.231285][ T1755] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 75.231330][ T1755] usb 6-1: no configurations [ 75.231355][ T1755] usb 6-1: can't read configurations, error -22 [ 75.501291][ T5736] Bluetooth: hci2: command 0x0419 tx timeout [ 75.502797][ T5094] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 77.310904][ T1040] usb 5-1: unable to get BOS descriptor or descriptor too short [ 77.315171][ T1040] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 77.318260][ T1040] usb 5-1: no configurations [ 77.322270][ T1040] usb 5-1: can't read configurations, error -22 [ 77.358093][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 77.358170][ T42] audit: type=1326 audit(1788957178.553:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.1.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 77.358622][ T42] audit: type=1326 audit(1788957178.553:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.1.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 77.358752][ T42] audit: type=1326 audit(1788957178.553:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.1.150" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 77.358965][ T42] audit: type=1326 audit(1788957178.553:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.1.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 77.361685][ T42] audit: type=1326 audit(1788957178.553:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6559 comm="syz.1.150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 77.431605][ T6571] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 77.722952][ T42] audit: type=1326 audit(1788957178.923:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 77.723018][ T42] audit: type=1326 audit(1788957178.923:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 77.736850][ T42] audit: type=1326 audit(1788957178.933:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 77.737034][ T42] audit: type=1326 audit(1788957178.933:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 77.737166][ T42] audit: type=1326 audit(1788957178.933:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.1.152" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 77.831901][ T1341] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 77.961763][ T6581] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 77.961949][ T6581] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 77.962088][ T6581] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.776435][ T6582] Process accounting resumed [ 78.953209][ T6592] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 78.978985][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.1.156 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.979018][ T6592] Tainted: [L]=SOFTLOCKUP [ 78.979024][ T6592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.979031][ T6592] Call Trace: [ 78.979035][ T6592] [ 78.979041][ T6592] dump_stack_lvl+0x100/0x190 [ 78.979061][ T6592] sysfs_warn_dup.cold+0x1c/0x28 [ 78.979090][ T6592] sysfs_create_dir_ns+0x24b/0x2b0 [ 78.979105][ T6592] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 78.979117][ T6592] ? find_held_lock+0x2b/0x80 [ 78.979129][ T6592] ? kobject_add_internal+0x25f/0x930 [ 78.979141][ T6592] ? kobject_add_internal+0x25f/0x930 [ 78.979155][ T6592] ? class_dir_child_ns_type+0xd/0x60 [ 78.979174][ T6592] kobject_add_internal+0x2c8/0x930 [ 78.979188][ T6592] kobject_add+0x16a/0x1e0 [ 78.979200][ T6592] ? __pfx_kobject_add+0x10/0x10 [ 78.979212][ T6592] ? get_device_parent+0x1b3/0x4c0 [ 78.979227][ T6592] ? kobject_put+0xb9/0x640 [ 78.979241][ T6592] device_add+0x294/0x1970 [ 78.979257][ T6592] ? lockdep_init_map_type+0x5c/0x250 [ 78.979273][ T6592] ? __pfx_device_add+0x10/0x10 [ 78.979288][ T6592] ? lockdep_init_map_type+0x5c/0x250 [ 78.979304][ T6592] ? __init_waitqueue_head+0xca/0x150 [ 78.979324][ T6592] tty_register_device_attr+0x388/0x7f0 [ 78.979339][ T6592] ? lockdep_init_map_type+0x5c/0x250 [ 78.979355][ T6592] ? __pfx_tty_register_device_attr+0x10/0x10 [ 78.979373][ T6592] ? tty_port_init+0x156/0x1c0 [ 78.979389][ T6592] gsm_activate_mux+0x155/0x2a0 [ 78.979404][ T6592] gsmld_ioctl+0xbbc/0x15c0 [ 78.979423][ T6592] ? __pfx_gsmld_ioctl+0x10/0x10 [ 78.979454][ T6592] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.979474][ T6592] ? __pfx_gsmld_ioctl+0x10/0x10 [ 78.979492][ T6592] tty_compat_ioctl+0x396/0x420 [ 78.979506][ T6592] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 78.979522][ T6592] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 78.979543][ T6592] __do_fast_syscall_32+0x13a/0x8b0 [ 78.979563][ T6592] do_fast_syscall_32+0x32/0x70 [ 78.979579][ T6592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 78.979594][ T6592] RIP: 0023:0xf702efec [ 78.979606][ T6592] Code: Unable to access opcode bytes at 0xf702efc2. [ 78.979611][ T6592] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 78.979622][ T6592] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000404c4701 [ 78.979629][ T6592] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.979636][ T6592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 78.979642][ T6592] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 78.979648][ T6592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.979662][ T6592] [ 79.105043][ T6592] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 79.984282][ T5094] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.984367][ T5094] Bluetooth: hci1: command 0x0406 tx timeout [ 79.984821][ T5736] Bluetooth: hci2: command 0x0419 tx timeout [ 80.373722][ T1341] usb 8-1: unable to get BOS descriptor or descriptor too short [ 80.377099][ T1341] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 80.377156][ T1341] usb 8-1: no configurations [ 80.377175][ T1341] usb 8-1: can't read configurations, error -22 [ 80.936289][ T6618] FAULT_INJECTION: forcing a failure. [ 80.936289][ T6618] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 80.936340][ T6618] CPU: 1 UID: 0 PID: 6618 Comm: syz.1.161 Tainted: G L syzkaller #0 PREEMPT(full) [ 80.936367][ T6618] Tainted: [L]=SOFTLOCKUP [ 80.936373][ T6618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.936379][ T6618] Call Trace: [ 80.936384][ T6618] [ 80.936389][ T6618] dump_stack_lvl+0x100/0x190 [ 80.936407][ T6618] should_fail_ex.cold+0x5/0xa [ 80.936420][ T6618] ? prepare_alloc_pages+0x16d/0x5b0 [ 80.936437][ T6618] should_fail_alloc_page+0xeb/0x140 [ 80.936453][ T6618] prepare_alloc_pages+0x1f0/0x5b0 [ 80.936468][ T6618] ? find_held_lock+0x2b/0x80 [ 80.936482][ T6618] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 80.936495][ T6618] ? is_bpf_text_address+0x94/0x1a0 [ 80.936511][ T6618] ? kernel_text_address+0x8d/0x100 [ 80.936526][ T6618] ? __kernel_text_address+0xd/0x30 [ 80.936539][ T6618] ? unwind_get_return_address+0x59/0xa0 [ 80.936555][ T6618] ? __lock_acquire+0x5c0/0x1f40 [ 80.936571][ T6618] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 80.936586][ T6618] ? look_up_lock_class+0x55/0x120 [ 80.936602][ T6618] ? register_lock_class+0x3f/0x7b0 [ 80.936617][ T6618] ? find_held_lock+0x2b/0x80 [ 80.936628][ T6618] ? ima_match_policy+0x8c4/0x23f0 [ 80.936675][ T6618] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 80.936693][ T6618] ? policy_nodemask+0xed/0x4f0 [ 80.936711][ T6618] alloc_pages_mpol+0x201/0x550 [ 80.936727][ T6618] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 80.936743][ T6618] ? __lock_acquire+0x5c0/0x1f40 [ 80.936761][ T6618] folio_alloc_mpol_noprof+0x36/0x260 [ 80.936780][ T6618] shmem_alloc_folio+0x135/0x160 [ 80.936795][ T6618] shmem_alloc_and_add_folio+0x371/0xd40 [ 80.936816][ T6618] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 80.936834][ T6618] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 80.936854][ T6618] shmem_get_folio_gfp+0x75b/0x1980 [ 80.936874][ T6618] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 80.936893][ T6618] ? filemap_map_pages+0x114a/0x2100 [ 80.936911][ T6618] shmem_fault+0x1fb/0xa30 [ 80.936946][ T6618] ? __pfx_shmem_fault+0x10/0x10 [ 80.936966][ T6618] ? __pfx_filemap_map_pages+0x10/0x10 [ 80.936984][ T6618] ? find_held_lock+0x2b/0x80 [ 80.936998][ T6618] ? __pfx_filemap_map_pages+0x10/0x10 [ 80.937013][ T6618] __do_fault+0x10b/0x440 [ 80.937027][ T6618] do_fault+0xb3f/0x1830 [ 80.937043][ T6618] ? __pfx_do_fault+0x10/0x10 [ 80.937056][ T6618] ? rcu_read_unlock+0x2d/0xb0 [ 80.937074][ T6618] ? rcu_read_unlock+0x2d/0xb0 [ 80.937090][ T6618] ? __pte_offset_map+0x179/0x310 [ 80.937105][ T6618] __handle_mm_fault+0x150b/0x2f60 [ 80.937125][ T6618] ? __pfx___handle_mm_fault+0x10/0x10 [ 80.937140][ T6618] ? __pfx_mt_find+0x10/0x10 [ 80.937164][ T6618] ? find_vma+0xbf/0x140 [ 80.937176][ T6618] ? __pfx_find_vma+0x10/0x10 [ 80.937190][ T6618] handle_mm_fault+0x363/0xa20 [ 80.937209][ T6618] do_user_addr_fault+0x745/0x12f0 [ 80.937225][ T6618] exc_page_fault+0x6f/0xd0 [ 80.937240][ T6618] asm_exc_page_fault+0x26/0x30 [ 80.937252][ T6618] RIP: 0010:__get_user_4+0x14/0x30 [ 80.937265][ T6618] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 80.937275][ T6618] RSP: 0018:ffffc900077afeb8 EFLAGS: 00050283 [ 80.937285][ T6618] RAX: 0000000080001440 RBX: ffffc900077aff48 RCX: ffffc9000c5d1000 [ 80.937292][ T6618] RDX: 00007ffffffff000 RSI: ffffffff825fafa1 RDI: ffffffff8c622580 [ 80.937299][ T6618] RBP: 0000000080001440 R08: 000000000004bf1c R09: 00000000000001d2 [ 80.937306][ T6618] R10: 0000000000000200 R11: 0000000000000000 R12: ffff88802958a580 [ 80.937312][ T6618] R13: 000000000000007f R14: 0000000000000000 R15: 0000000000000000 [ 80.937323][ T6618] ? __might_fault+0x111/0x140 [ 80.937342][ T6618] __ia32_compat_sys_io_setup+0x72/0x220 [ 80.937360][ T6618] __do_fast_syscall_32+0x13a/0x8b0 [ 80.937376][ T6618] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.937393][ T6618] do_fast_syscall_32+0x32/0x70 [ 80.937409][ T6618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.937423][ T6618] RIP: 0023:0xf702efec [ 80.937435][ T6618] Code: Unable to access opcode bytes at 0xf702efc2. [ 80.937440][ T6618] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000f5 [ 80.937450][ T6618] RAX: ffffffffffffffda RBX: 000000000000007f RCX: 0000000080001440 [ 80.937457][ T6618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.937463][ T6618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.937469][ T6618] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.937476][ T6618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.937489][ T6618] [ 81.444875][ T6627] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.284497][ T6638] input: syz1 as /devices/virtual/input/input5 [ 82.452376][ T1341] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 82.714703][ T6647] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 82.714755][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.3.171 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.714773][ T6647] Tainted: [L]=SOFTLOCKUP [ 82.714777][ T6647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.714784][ T6647] Call Trace: [ 82.714789][ T6647] [ 82.714793][ T6647] dump_stack_lvl+0x100/0x190 [ 82.714814][ T6647] sysfs_warn_dup.cold+0x1c/0x28 [ 82.714833][ T6647] sysfs_create_dir_ns+0x24b/0x2b0 [ 82.714847][ T6647] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 82.714860][ T6647] ? find_held_lock+0x2b/0x80 [ 82.714872][ T6647] ? kobject_add_internal+0x25f/0x930 [ 82.714886][ T6647] ? kobject_add_internal+0x25f/0x930 [ 82.714899][ T6647] ? class_dir_child_ns_type+0xd/0x60 [ 82.714917][ T6647] kobject_add_internal+0x2c8/0x930 [ 82.714932][ T6647] kobject_add+0x16a/0x1e0 [ 82.714946][ T6647] ? __pfx_kobject_add+0x10/0x10 [ 82.714964][ T6647] ? get_device_parent+0x1b3/0x4c0 [ 82.714984][ T6647] ? kobject_put+0xb9/0x640 [ 82.715003][ T6647] device_add+0x294/0x1970 [ 82.715019][ T6647] ? lockdep_init_map_type+0x5c/0x250 [ 82.715036][ T6647] ? __pfx_device_add+0x10/0x10 [ 82.715051][ T6647] ? lockdep_init_map_type+0x5c/0x250 [ 82.715074][ T6647] ? __init_waitqueue_head+0xca/0x150 [ 82.715105][ T6647] tty_register_device_attr+0x388/0x7f0 [ 82.715121][ T6647] ? lockdep_init_map_type+0x5c/0x250 [ 82.715137][ T6647] ? __pfx_tty_register_device_attr+0x10/0x10 [ 82.715155][ T6647] ? tty_port_init+0x156/0x1c0 [ 82.715181][ T6647] gsm_activate_mux+0x155/0x2a0 [ 82.715203][ T6647] gsmld_ioctl+0xbbc/0x15c0 [ 82.715223][ T6647] ? __pfx_gsmld_ioctl+0x10/0x10 [ 82.715256][ T6647] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 82.715298][ T6647] ? __pfx_gsmld_ioctl+0x10/0x10 [ 82.715322][ T6647] tty_compat_ioctl+0x396/0x420 [ 82.715340][ T6647] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 82.715361][ T6647] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 82.715406][ T6647] __do_fast_syscall_32+0x13a/0x8b0 [ 82.715437][ T6647] do_fast_syscall_32+0x32/0x70 [ 82.715460][ T6647] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.715483][ T6647] RIP: 0023:0xf7f22fec [ 82.715503][ T6647] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 82.715510][ T6647] RSP: 002b:00000000f53c550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 82.715528][ T6647] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000404c4701 [ 82.715541][ T6647] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.715553][ T6647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.715564][ T6647] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 82.715571][ T6647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.715595][ T6647] [ 82.715616][ T6647] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 83.264660][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 83.317749][ T6657] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 83.937713][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 83.939932][ T42] audit: type=1326 audit(1788957185.133:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.175" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 83.947077][ T42] audit: type=1326 audit(1788957185.133:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.175" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 83.954776][ T42] audit: type=1326 audit(1788957185.133:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.175" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 83.957389][ T42] audit: type=1326 audit(1788957185.133:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.175" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 83.957414][ T42] audit: type=1326 audit(1788957185.133:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.175" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 83.957435][ T42] audit: type=1326 audit(1788957185.133:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.175" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 83.957455][ T42] audit: type=1326 audit(1788957185.133:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.175" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 84.131384][ T1755] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 84.281337][ T1755] usb 7-1: Using ep0 maxpacket: 16 [ 84.282072][ T1755] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 84.284283][ T1755] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.284295][ T1755] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 84.286339][ T1755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.286350][ T1755] usb 7-1: Product: syz [ 84.286357][ T1755] usb 7-1: Manufacturer: syz [ 84.286364][ T1755] usb 7-1: SerialNumber: syz [ 84.287635][ T1755] usb 7-1: config 0 descriptor?? [ 84.441391][ T6501] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 84.504331][ T5839] usb 7-1: USB disconnect, device number 10 [ 84.611289][ T6501] usb 8-1: Using ep0 maxpacket: 16 [ 84.611999][ T6501] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 84.613164][ T6501] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.613180][ T6501] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 84.615494][ T6501] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.615511][ T6501] usb 8-1: Product: syz [ 84.615522][ T6501] usb 8-1: Manufacturer: syz [ 84.615533][ T6501] usb 8-1: SerialNumber: syz [ 84.618377][ T6501] usb 8-1: config 0 descriptor?? [ 84.831627][ T5839] usb 8-1: USB disconnect, device number 7 [ 84.917023][ T42] audit: type=1326 audit(1788957186.113:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 84.918355][ T42] audit: type=1326 audit(1788957186.113:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 84.918403][ T42] audit: type=1326 audit(1788957186.113:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.0.177" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 85.110974][ T1341] usb 6-1: unable to get BOS descriptor or descriptor too short [ 85.113933][ T1341] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 85.113955][ T1341] usb 6-1: no configurations [ 85.113961][ T1341] usb 6-1: can't read configurations, error -22 [ 85.205545][ T108] Bluetooth: hci4: Frame reassembly failed (-84) [ 85.205823][ T108] Bluetooth: hci4: Frame reassembly failed (-84) [ 85.205855][ T108] Bluetooth: hci4: Frame reassembly failed (-84) [ 85.205883][ T108] Bluetooth: hci4: Frame reassembly failed (-84) [ 85.205910][ T108] Bluetooth: hci4: Frame reassembly failed (-84) [ 85.205937][ T108] Bluetooth: hci4: Frame reassembly failed (-84) [ 85.205964][ T108] Bluetooth: hci4: Frame reassembly failed (-84) [ 85.540978][ T6685] netlink: 17 bytes leftover after parsing attributes in process `syz.3.180'. [ 87.261287][ T5736] Bluetooth: hci4: command 0xfc11 tx timeout [ 87.266590][ T5094] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 87.856828][ T6705] syz.1.186 uses obsolete (PF_INET,SOCK_PACKET) [ 88.401445][ T6508] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 89.431304][ T5827] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 89.907643][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 89.907821][ T42] audit: type=1326 audit(1788957191.103:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.1.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 89.907870][ T42] audit: type=1326 audit(1788957191.103:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.1.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 89.909220][ T42] audit: type=1326 audit(1788957191.103:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.1.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 89.909343][ T42] audit: type=1326 audit(1788957191.103:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.1.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 89.909380][ T42] audit: type=1326 audit(1788957191.103:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.1.195" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 89.909406][ T42] audit: type=1326 audit(1788957191.103:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.1.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 89.909427][ T42] audit: type=1326 audit(1788957191.103:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.1.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 89.909495][ T42] audit: type=1326 audit(1788957191.103:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6756 comm="syz.1.195" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 90.076826][ T6760] bridge_slave_0: left allmulticast mode [ 90.076949][ T6760] bridge_slave_0: left promiscuous mode [ 90.077292][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.084839][ T6760] bridge_slave_1: left allmulticast mode [ 90.084862][ T6760] bridge_slave_1: left promiscuous mode [ 90.085127][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.097306][ T6760] bond0: (slave bond_slave_0): Releasing backup interface [ 90.102956][ T6760] bond0: (slave bond_slave_1): Releasing backup interface [ 90.109801][ T6760] team0: Port device team_slave_0 removed [ 90.113245][ T6760] team0: Port device team_slave_1 removed [ 90.113568][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.120199][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.124372][ T6760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 90.194633][ T6760] bond1: (slave ip6gretap1): making interface the new active one [ 90.197468][ T6760] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 90.641234][ T5828] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 91.021419][ T6508] usb 8-1: unable to get BOS descriptor or descriptor too short [ 91.022300][ T6508] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 91.022325][ T6508] usb 8-1: no configurations [ 91.022331][ T6508] usb 8-1: can't read configurations, error -22 [ 91.118613][ T42] audit: type=1326 audit(1788957192.313:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 91.121049][ T42] audit: type=1326 audit(1788957192.313:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6778 comm="syz.3.199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 91.290005][ T6786] netlink: 'syz.3.201': attribute type 2 has an invalid length. [ 91.290090][ T6786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.201'. [ 91.301959][ T6786] : entered promiscuous mode [ 92.095653][ T5827] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.096541][ T5827] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 92.096569][ T5827] usb 5-1: no configurations [ 92.096579][ T5827] usb 5-1: can't read configurations, error -22 [ 92.152554][ C3] IPv4: Oversized IP packet from 127.0.0.1 [ 93.011386][ T5827] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 93.162349][ T5827] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 93.163814][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.191380][ T6782] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 93.281794][ T5828] usb 7-1: unable to get BOS descriptor or descriptor too short [ 93.286330][ T5828] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 93.290861][ T5828] usb 7-1: no configurations [ 93.293015][ T5828] usb 7-1: can't read configurations, error -22 [ 93.595658][ T6792] tipc: Started in network mode [ 93.595805][ T6792] tipc: Node identity ac14140f, cluster identity 4711 [ 93.597896][ T6792] tipc: New replicast peer: 172.30.0.1 [ 93.598209][ T6792] tipc: Enabled bearer , priority 10 [ 93.604628][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 93.604704][ T6792] tipc: Disabling bearer [ 93.685773][ T5827] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/0003:04D8:C002.0002/input/input6 [ 93.761776][ T5827] rc_core: IR keymap rc-rc6-mce not found [ 93.761890][ T5827] Registered IR keymap rc-empty [ 93.773889][ T5827] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/0003:04D8:C002.0002/rc/rc0 [ 93.791113][ T5827] input: HID 04d8:c002 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/0003:04D8:C002.0002/rc/rc0/input7 [ 93.838145][ T5827] hid-picolcd 0003:04D8:C002.0002: No report with id 0x92 found [ 94.826242][ T1755] usb 5-1: USB disconnect, device number 8 [ 95.041375][ T5827] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 95.405064][ T6833] syzkaller0: entered promiscuous mode [ 95.405203][ T6833] syzkaller0: entered allmulticast mode [ 95.551503][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 95.551562][ T42] audit: type=1400 audit(1788957196.743:175): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 96.990173][ T42] audit: type=1326 audit(1788957198.183:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.1.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 96.990285][ T42] audit: type=1326 audit(1788957198.183:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.1.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 96.990963][ T42] audit: type=1326 audit(1788957198.183:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.1.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 96.990998][ T42] audit: type=1326 audit(1788957198.183:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.1.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 96.991573][ T42] audit: type=1326 audit(1788957198.183:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.1.217" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 96.991600][ T42] audit: type=1326 audit(1788957198.193:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.1.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 96.991620][ T42] audit: type=1326 audit(1788957198.193:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.1.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 96.992517][ T42] audit: type=1326 audit(1788957198.193:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.1.217" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 97.110856][ T42] audit: type=1326 audit(1788957198.303:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.1.217" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 97.793324][ T5827] usb 7-1: unable to get BOS descriptor or descriptor too short [ 97.793950][ T5827] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 97.793969][ T5827] usb 7-1: no configurations [ 97.793975][ T5827] usb 7-1: can't read configurations, error -22 [ 98.483216][ T6873] 9pnet_virtio: no channels available for device syz [ 98.797391][ T1341] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.804353][ T1341] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 98.808477][ T1341] usb 5-1: no configurations [ 98.810778][ T1341] usb 5-1: can't read configurations, error -22 [ 100.487151][ T6886] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 100.487178][ T6886] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.488123][ T6886] vhci_hcd vhci_hcd.0: Device attached [ 100.498106][ T6886] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 100.498132][ T6886] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.498192][ T6886] vhci_hcd vhci_hcd.0: Device attached [ 100.502242][ T6886] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 100.502264][ T6886] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.502330][ T6886] vhci_hcd vhci_hcd.0: Device attached [ 100.508468][ T6886] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 100.508482][ T6886] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.508527][ T6886] vhci_hcd vhci_hcd.0: Device attached [ 100.515138][ T6886] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 100.515162][ T6886] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.515230][ T6886] vhci_hcd vhci_hcd.0: Device attached [ 100.518931][ T6886] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 100.518946][ T6886] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.519708][ T6886] vhci_hcd vhci_hcd.0: Device attached [ 100.523578][ T6886] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 100.523599][ T6886] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.523718][ T6886] vhci_hcd vhci_hcd.0: Device attached [ 100.535747][ T6886] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 100.535771][ T6886] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 100.535883][ T6886] vhci_hcd vhci_hcd.0: Device attached [ 100.566797][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 100.566876][ T42] audit: type=1326 audit(1788957201.763:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 100.568765][ T42] audit: type=1326 audit(1788957201.763:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 100.569096][ T42] audit: type=1326 audit(1788957201.763:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 100.569119][ T42] audit: type=1326 audit(1788957201.763:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 100.572885][ T42] audit: type=1326 audit(1788957201.763:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.228" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 100.572930][ T42] audit: type=1326 audit(1788957201.763:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 100.579077][ T42] audit: type=1326 audit(1788957201.773:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6890 comm="syz.2.228" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 100.642543][ T6901] vhci_hcd: connection closed [ 100.642928][ T6892] vhci_hcd: connection closed [ 100.643853][ T6897] vhci_hcd: connection closed [ 100.643928][ T6899] vhci_hcd: connection closed [ 100.643995][ T6895] vhci_hcd: connection closed [ 100.644243][ T6889] vhci_hcd: connection closed [ 100.644267][ T6903] vhci_hcd: connection closed [ 100.647172][ T6887] vhci_hcd: connection closed [ 100.647402][ T13] vhci_hcd vhci_hcd.1: stop threads [ 100.647848][ T13] vhci_hcd vhci_hcd.1: release socket [ 100.648679][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 100.648800][ T13] vhci_hcd vhci_hcd.1: stop threads [ 100.648811][ T13] vhci_hcd vhci_hcd.1: release socket [ 100.650113][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 100.650246][ T13] vhci_hcd vhci_hcd.1: stop threads [ 100.650259][ T13] vhci_hcd vhci_hcd.1: release socket [ 100.650331][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 100.650427][ T13] vhci_hcd vhci_hcd.1: stop threads [ 100.650438][ T13] vhci_hcd vhci_hcd.1: release socket [ 100.650490][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 100.650586][ T13] vhci_hcd vhci_hcd.1: stop threads [ 100.650597][ T13] vhci_hcd vhci_hcd.1: release socket [ 100.650653][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 100.650746][ T13] vhci_hcd vhci_hcd.1: stop threads [ 100.650758][ T13] vhci_hcd vhci_hcd.1: release socket [ 100.650815][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 100.650911][ T13] vhci_hcd vhci_hcd.1: stop threads [ 100.650923][ T13] vhci_hcd vhci_hcd.1: release socket [ 100.650937][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 100.651026][ T13] vhci_hcd vhci_hcd.1: stop threads [ 100.651037][ T13] vhci_hcd vhci_hcd.1: release socket [ 100.651100][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 100.671356][ T5941] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 101.091354][ T1040] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 101.234693][ T42] audit: type=1326 audit(1788957202.433:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.1.230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 101.234914][ T42] audit: type=1326 audit(1788957202.433:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.1.230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 101.235472][ T42] audit: type=1326 audit(1788957202.433:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.1.230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 101.305511][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.231'. [ 101.751296][ T5827] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 102.362769][ T6924] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 103.212950][ T6931] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 103.541581][ T6933] kvm [6932]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 103.734148][ T1040] usb 7-1: unable to get BOS descriptor or descriptor too short [ 103.737913][ T1040] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 103.738014][ T1040] usb 7-1: no configurations [ 103.738025][ T1040] usb 7-1: can't read configurations, error -22 [ 103.791891][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 104.426615][ T5827] usb 8-1: unable to get BOS descriptor or descriptor too short [ 104.430308][ T5827] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 104.430379][ T5827] usb 8-1: no configurations [ 104.430399][ T5827] usb 8-1: can't read configurations, error -22 [ 104.947576][ T6982] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.681356][ T7004] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.771303][ T30] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 107.334208][ T42] kauditd_printk_skb: 43 callbacks suppressed [ 107.337355][ T42] audit: type=1326 audit(1788957208.533:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 107.346798][ T42] audit: type=1326 audit(1788957208.533:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 107.355796][ T42] audit: type=1326 audit(1788957208.533:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 107.361586][ T42] audit: type=1326 audit(1788957208.533:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 107.361871][ T42] audit: type=1326 audit(1788957208.553:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.248" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 107.362297][ T42] audit: type=1326 audit(1788957208.553:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 107.362464][ T42] audit: type=1326 audit(1788957208.553:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.248" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 107.627357][ T42] audit: type=1326 audit(1788957208.823:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.3.250" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 107.634938][ T42] audit: type=1326 audit(1788957208.833:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 107.635254][ T42] audit: type=1326 audit(1788957208.833:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.251" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 109.259473][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 109.260166][ T30] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 109.260187][ T30] usb 7-1: no configurations [ 109.260193][ T30] usb 7-1: can't read configurations, error -22 [ 110.112148][ T30] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 111.378714][ T7067] binder: 7065:7067 ioctl c00c6211 0 returned -14 [ 111.438664][ T7069] loop2: detected capacity change from 0 to 2640 [ 111.527890][ T7069] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 111.528233][ T7069] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 111.528416][ T7069] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 111.528493][ T7069] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 111.528671][ T7069] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 111.529138][ T7069] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 111.529288][ T7069] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 111.529365][ T7069] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 111.529491][ T7069] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 111.529648][ T7069] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 112.641235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 112.736891][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 112.749838][ T30] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 112.750196][ T30] usb 7-1: no configurations [ 112.750309][ T30] usb 7-1: can't read configurations, error -22 [ 112.760343][ T30] usb usb7-port1: attempt power cycle [ 113.351716][ T5827] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 113.762231][ T5827] usb 8-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 113.769897][ T5827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.986736][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 113.987385][ T42] audit: type=1326 audit(1788957215.183:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.1.272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 113.987432][ T42] audit: type=1326 audit(1788957215.183:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.1.272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 113.987468][ T42] audit: type=1326 audit(1788957215.183:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.1.272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 113.987503][ T42] audit: type=1326 audit(1788957215.183:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.1.272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 113.987540][ T42] audit: type=1326 audit(1788957215.183:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.1.272" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 113.987990][ T42] audit: type=1326 audit(1788957215.183:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.1.272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 113.988934][ T42] audit: type=1326 audit(1788957215.183:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.1.272" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 114.242649][ T7098] tipc: Started in network mode [ 114.242736][ T7098] tipc: Node identity ac14140f, cluster identity 4711 [ 114.242971][ T7098] tipc: New replicast peer: 172.30.0.4 [ 114.243171][ T7098] tipc: Enabled bearer , priority 10 [ 114.279309][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 114.279394][ T7098] tipc: Disabling bearer [ 114.362821][ T5827] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/0003:04D8:C002.0003/input/input8 [ 114.472153][ T5827] rc_core: IR keymap rc-rc6-mce not found [ 114.472190][ T5827] Registered IR keymap rc-empty [ 114.472971][ T5827] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/0003:04D8:C002.0003/rc/rc0 [ 114.474330][ T5827] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/0003:04D8:C002.0003/rc/rc0/input9 [ 114.505929][ T5827] hid-picolcd 0003:04D8:C002.0003: No report with id 0x92 found [ 115.251286][ T5827] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 115.330134][ T42] audit: type=1326 audit(1788957216.523:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.0.279" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 115.330321][ T42] audit: type=1326 audit(1788957216.523:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.0.279" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 115.330579][ T42] audit: type=1326 audit(1788957216.523:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7155 comm="syz.0.279" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 115.493677][ T6501] usb 8-1: USB disconnect, device number 12 [ 115.819737][ T7100] syz.2.268 (7100) used greatest stack depth: 18080 bytes left [ 115.950271][ T7173] capability: warning: `syz.1.280' uses 32-bit capabilities (legacy support in use) [ 116.064576][ T7178] tc action pedit 'at' offset 5 out of bounds [ 116.064619][ T7178] tc action pedit 'at' offset 5 out of bounds [ 116.064660][ T7178] tc action pedit 'at' offset 5 out of bounds [ 116.064679][ T7178] tc action pedit 'at' offset 5 out of bounds [ 116.064698][ T7178] tc action pedit 'at' offset 5 out of bounds [ 116.064717][ T7178] tc action pedit 'at' offset 5 out of bounds [ 116.064736][ T7178] tc action pedit 'at' offset 5 out of bounds [ 116.064756][ T7178] tc action pedit 'at' offset 5 out of bounds [ 116.064775][ T7178] tc action pedit 'at' offset 5 out of bounds [ 116.064794][ T7178] tc action pedit 'at' offset 5 out of bounds [ 116.064818][ T7178] 0: reclassify loop, rule prio 0, protocol 800 [ 117.916667][ T5827] usb 7-1: unable to get BOS descriptor or descriptor too short [ 117.919663][ T5827] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 117.919746][ T5827] usb 7-1: no configurations [ 117.919767][ T5827] usb 7-1: can't read configurations, error -22 [ 118.381281][ T5941] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 118.531762][ T5941] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 118.535534][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.621355][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 118.917565][ T7215] binder: 7213:7215 ioctl c00c6211 0 returned -14 [ 118.968966][ T7207] tipc: Started in network mode [ 118.969008][ T7207] tipc: Node identity ac14140f, cluster identity 4711 [ 118.969303][ T7207] tipc: New replicast peer: 172.30.0.2 [ 118.969451][ T7207] tipc: Enabled bearer , priority 10 [ 118.984043][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.291'. [ 118.984128][ T7207] tipc: Disabling bearer [ 119.022952][ T7216] loop2: detected capacity change from 0 to 2640 [ 119.056379][ T7216] buffer_io_error: 320 callbacks suppressed [ 119.057507][ T7216] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 119.057630][ T7216] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 119.057683][ T7216] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 119.057848][ T7216] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 119.057902][ T7216] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 119.058231][ T7216] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 119.058364][ T7216] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 119.058571][ T7216] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 119.058622][ T7216] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 119.058709][ T7216] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 119.086867][ T5941] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/0003:04D8:C002.0004/input/input10 [ 119.191272][ T5941] rc_core: IR keymap rc-rc6-mce not found [ 119.193205][ T5941] Registered IR keymap rc-empty [ 119.197229][ T5941] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/0003:04D8:C002.0004/rc/rc0 [ 119.204296][ T5941] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/0003:04D8:C002.0004/rc/rc0/input11 [ 119.213500][ T5941] hid-picolcd 0003:04D8:C002.0004: No report with id 0x92 found [ 120.195594][ T6501] usb 6-1: USB disconnect, device number 8 [ 120.641377][ T5827] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 120.835512][ T7238] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 121.086067][ T5827] usb 7-1: Using ep0 maxpacket: 32 [ 121.229561][ T5827] usb 7-1: unable to get BOS descriptor or descriptor too short [ 121.229624][ T5827] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 121.630977][ T5827] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 121.631026][ T5827] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 121.631060][ T5827] usb 7-1: config 14 has no interface number 0 [ 121.631070][ T5827] usb 7-1: config 14 has no interface number 1 [ 121.631095][ T5827] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 121.631107][ T5827] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 121.631119][ T5827] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 121.631131][ T5827] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 121.631144][ T5827] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 121.631157][ T5827] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.631294][ T5827] usb 7-1: config 14 interface 57 has no altsetting 0 [ 121.631304][ T5827] usb 7-1: config 14 interface 228 has no altsetting 0 [ 121.632971][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.632984][ T5827] usb 7-1: Product: syz [ 121.632990][ T5827] usb 7-1: Manufacturer: syz [ 121.632998][ T5827] usb 7-1: SerialNumber: syz [ 121.699798][ T7240] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 121.699825][ T7240] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.702583][ T7240] vhci_hcd vhci_hcd.0: Device attached [ 121.708173][ T7240] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 121.708198][ T7240] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.708264][ T7240] vhci_hcd vhci_hcd.0: Device attached [ 121.710596][ T7240] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 121.710613][ T7240] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.710651][ T7240] vhci_hcd vhci_hcd.0: Device attached [ 121.714842][ T7240] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 121.714855][ T7240] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.714915][ T7240] vhci_hcd vhci_hcd.0: Device attached [ 121.717034][ T7240] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 121.717047][ T7240] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.717079][ T7240] vhci_hcd vhci_hcd.0: Device attached [ 121.719697][ T7240] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 121.719710][ T7240] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.719741][ T7240] vhci_hcd vhci_hcd.0: Device attached [ 121.722103][ T7240] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 121.722124][ T7240] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.722174][ T7240] vhci_hcd vhci_hcd.0: Device attached [ 121.724467][ T7240] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(17) [ 121.724489][ T7240] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 121.724559][ T7240] vhci_hcd vhci_hcd.0: Device attached [ 121.805108][ T7255] vhci_hcd: connection closed [ 121.805281][ T7253] vhci_hcd: connection closed [ 121.805999][ T7249] vhci_hcd: connection closed [ 121.806148][ T7247] vhci_hcd: connection closed [ 121.806553][ T7245] vhci_hcd: connection closed [ 121.806561][ T7251] vhci_hcd: connection closed [ 121.806680][ T7243] vhci_hcd: connection closed [ 121.806733][ T7241] vhci_hcd: connection closed [ 121.807780][ T13] vhci_hcd vhci_hcd.0: stop threads [ 121.807805][ T13] vhci_hcd vhci_hcd.0: release socket [ 121.807825][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 121.808199][ T13] vhci_hcd vhci_hcd.0: stop threads [ 121.808214][ T13] vhci_hcd vhci_hcd.0: release socket [ 121.808228][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 121.809839][ T13] vhci_hcd vhci_hcd.0: stop threads [ 121.809854][ T13] vhci_hcd vhci_hcd.0: release socket [ 121.809871][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 121.810071][ T13] vhci_hcd vhci_hcd.0: stop threads [ 121.810082][ T13] vhci_hcd vhci_hcd.0: release socket [ 121.810095][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 121.810230][ T13] vhci_hcd vhci_hcd.0: stop threads [ 121.810247][ T13] vhci_hcd vhci_hcd.0: release socket [ 121.810312][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 121.810526][ T13] vhci_hcd vhci_hcd.0: stop threads [ 121.810539][ T13] vhci_hcd vhci_hcd.0: release socket [ 121.810554][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 121.810702][ T13] vhci_hcd vhci_hcd.0: stop threads [ 121.810714][ T13] vhci_hcd vhci_hcd.0: release socket [ 121.810729][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 121.810876][ T13] vhci_hcd vhci_hcd.0: stop threads [ 121.810888][ T13] vhci_hcd vhci_hcd.0: release socket [ 121.810903][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 122.052693][ T5827] legousbtower 7-1:14.57: interrupt endpoints not found [ 122.141297][ T7230] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 122.465612][ T5827] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 122.492928][ T5827] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 122.960833][ T7278] binder: 7275:7278 ioctl c00c6211 0 returned -14 [ 123.024956][ T7280] loop2: detected capacity change from 0 to 2640 [ 123.218383][ T6508] usb 7-1: USB disconnect, device number 22 [ 123.233818][ T6508] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 123.703447][ T7285] netlink: 136 bytes leftover after parsing attributes in process `syz.1.307'. [ 123.703502][ T7285] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 124.097018][ T7289] Bluetooth: ISO socket layer initialized [ 124.132712][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 124.132826][ T42] audit: type=1326 audit(1788957225.333:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 124.132888][ T42] audit: type=1326 audit(1788957225.333:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 124.144131][ T42] audit: type=1326 audit(1788957225.343:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 124.144174][ T42] audit: type=1326 audit(1788957225.343:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 124.144206][ T42] audit: type=1326 audit(1788957225.343:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.309" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 124.161506][ T42] audit: type=1326 audit(1788957225.343:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 124.161550][ T42] audit: type=1326 audit(1788957225.343:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 124.161582][ T42] audit: type=1326 audit(1788957225.343:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.309" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 124.307871][ T7288] kvm [7286]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 124.314443][ T7288] kvm [7286]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 124.369418][ T42] audit: type=1326 audit(1788957225.563:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 124.377893][ T42] audit: type=1326 audit(1788957225.563:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7286 comm="syz.2.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 124.497656][ T7298] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 124.497691][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.497753][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 124.504331][ T7298] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 124.504358][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.504536][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 124.510313][ T7298] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 124.510339][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.510396][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 124.515100][ T7298] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 124.515129][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.515168][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 124.525640][ T7298] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 124.525668][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.525711][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 124.530305][ T7298] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 124.530328][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.530377][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 124.537890][ T7298] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(15) [ 124.537906][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 124.537942][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 124.541537][ T7298] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(17) [ 124.541551][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 124.541626][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 124.698611][ T7307] vhci_hcd: connection closed [ 124.698884][ T7299] vhci_hcd: connection closed [ 124.699188][ T7303] vhci_hcd: connection closed [ 124.699316][ T7314] vhci_hcd: connection closed [ 124.699388][ T7301] vhci_hcd: connection closed [ 124.699457][ T7305] vhci_hcd: connection closed [ 124.699742][ T13] vhci_hcd vhci_hcd.3: stop threads [ 124.699805][ T13] vhci_hcd vhci_hcd.3: release socket [ 124.699972][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 124.703768][ T7310] vhci_hcd: connection closed [ 124.704628][ T13] vhci_hcd vhci_hcd.3: stop threads [ 124.704688][ T13] vhci_hcd vhci_hcd.3: release socket [ 124.704805][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 124.705077][ T13] vhci_hcd vhci_hcd.3: stop threads [ 124.705085][ T13] vhci_hcd vhci_hcd.3: release socket [ 124.705455][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 124.706621][ T7312] vhci_hcd: connection closed [ 124.708333][ T13] vhci_hcd vhci_hcd.3: stop threads [ 124.708343][ T13] vhci_hcd vhci_hcd.3: release socket [ 124.708485][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 124.709187][ T13] vhci_hcd vhci_hcd.3: stop threads [ 124.709196][ T13] vhci_hcd vhci_hcd.3: release socket [ 124.709675][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 124.709949][ T13] vhci_hcd vhci_hcd.3: stop threads [ 124.709957][ T13] vhci_hcd vhci_hcd.3: release socket [ 124.710151][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 124.710853][ T13] vhci_hcd vhci_hcd.3: stop threads [ 124.710861][ T13] vhci_hcd vhci_hcd.3: release socket [ 124.712623][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 124.718201][ T13] vhci_hcd vhci_hcd.3: stop threads [ 124.718266][ T13] vhci_hcd vhci_hcd.3: release socket [ 124.718773][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 124.811287][ T5941] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 124.822694][ T5941] usb 43-1: enqueue for inactive port 0 [ 125.291302][ T5941] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 125.881372][ T1341] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 126.052191][ T1341] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 126.057830][ T1341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.060595][ T1341] usb 6-1: Product: syz [ 126.062102][ T1341] usb 6-1: Manufacturer: syz [ 126.063669][ T1341] usb 6-1: SerialNumber: syz [ 126.074723][ T1341] usb 6-1: USB2VGA dongle found at address 9 [ 126.079741][ T1341] usb 6-1: Allocated 8 output buffers [ 126.571915][ T6501] usb usb44-port8: attempt power cycle [ 126.625082][ T7338] netlink: 'syz.1.318': attribute type 30 has an invalid length. [ 126.666201][ T1341] usb 6-1: Failed to early initialize device [ 126.683438][ T1341] usb 6-1: USB disconnect, device number 9 [ 126.725938][ T7349] netlink: 'syz.3.321': attribute type 1 has an invalid length. [ 126.775898][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.790574][ T7354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.790985][ T7354] bond0: (slave gre1): The slave device specified does not support setting the MAC address [ 126.793582][ T7354] bond0: (slave gre1): Error -95 calling set_mac_address [ 126.825681][ T7355] binder: 7351:7355 ioctl c00c6211 0 returned -14 [ 126.853841][ T7349] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.857610][ T7349] bond0: (slave bond2): Enslaving as an active interface with a down link [ 126.872693][ T7349] bond0 (unregistering): (slave bond2): Releasing active interface [ 126.879440][ T7349] bond0 (unregistering): Released all slaves [ 126.909532][ T7357] loop2: detected capacity change from 0 to 2640 [ 127.132120][ T6501] usb usb44-port8: unable to enumerate USB device [ 127.235147][ T7357] buffer_io_error: 654 callbacks suppressed [ 127.235211][ T7357] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 127.235243][ T7357] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 127.235271][ T7357] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 127.235286][ T7357] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 127.235299][ T7357] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 127.235313][ T7357] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 127.235326][ T7357] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 127.235339][ T7357] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 127.235351][ T7357] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 127.235364][ T7357] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 127.363416][ T7369] netlink: 'syz.1.325': attribute type 10 has an invalid length. [ 127.528975][ T7369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.534198][ T7369] team0: Port device bond0 added [ 127.616775][ T7371] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 127.624182][ T7370] netlink: 136 bytes leftover after parsing attributes in process `syz.0.324'. [ 127.624241][ T7370] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 132.382621][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.382719][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.471325][ T6501] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 132.562842][ T42] kauditd_printk_skb: 111 callbacks suppressed [ 132.563027][ T42] audit: type=1326 audit(1788957233.763:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 132.563076][ T42] audit: type=1326 audit(1788957233.763:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 132.566613][ T42] audit: type=1326 audit(1788957233.763:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 132.566757][ T42] audit: type=1326 audit(1788957233.763:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 132.566902][ T42] audit: type=1326 audit(1788957233.763:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.340" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 132.567556][ T42] audit: type=1326 audit(1788957233.763:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 132.567689][ T42] audit: type=1326 audit(1788957233.763:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.2.340" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 132.844059][ T42] audit: type=1326 audit(1788957234.043:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.3.341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 132.845238][ T42] audit: type=1326 audit(1788957234.043:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.3.341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 132.845508][ T42] audit: type=1326 audit(1788957234.043:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.3.341" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 134.236033][ T7435] netlink: 'syz.3.344': attribute type 15 has an invalid length. [ 134.236072][ T7435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.344'. [ 135.054026][ T7428] Set syz1 is full, maxelem 65536 reached [ 135.184358][ T6501] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.188028][ T6501] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 135.188097][ T6501] usb 5-1: no configurations [ 135.188124][ T6501] usb 5-1: can't read configurations, error -22 [ 136.305783][ T7466] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 136.827790][ T7481] netlink: 17 bytes leftover after parsing attributes in process `syz.0.356'. [ 140.495079][ T7508] netlink: 'syz.0.362': attribute type 10 has an invalid length. [ 140.510108][ T7508] bond1: (slave .`): Releasing active interface [ 140.523321][ T7508] 8021q: adding VLAN 0 to HW filter on device .` [ 140.527747][ T7508] team0: Port device .` added [ 140.650532][ T7508] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 141.455250][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 141.455349][ T42] audit: type=1326 audit(1788957242.623:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.2.369" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 141.455404][ T42] audit: type=1326 audit(1788957242.623:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.2.369" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 141.455437][ T42] audit: type=1326 audit(1788957242.623:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.2.369" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 141.455492][ T42] audit: type=1326 audit(1788957242.623:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.2.369" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 141.455529][ T42] audit: type=1326 audit(1788957242.623:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.2.369" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 141.455564][ T42] audit: type=1326 audit(1788957242.623:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.2.369" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 141.455595][ T42] audit: type=1326 audit(1788957242.623:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.2.369" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 142.297165][ T7530] netlink: 17 bytes leftover after parsing attributes in process `syz.1.371'. [ 143.588523][ T7538] netlink: 60 bytes leftover after parsing attributes in process `syz.1.374'. [ 143.754113][ T7545] netlink: 60 bytes leftover after parsing attributes in process `syz.3.375'. [ 143.854941][ T7545] netlink: 'syz.3.375': attribute type 11 has an invalid length. [ 143.976959][ T108] IPVS: starting estimator thread 0... [ 144.081880][ T7548] IPVS: using max 39 ests per chain, 93600 per kthread [ 144.848676][ T42] audit: type=1326 audit(1788957246.043:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.0.378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 144.848798][ T42] audit: type=1326 audit(1788957246.043:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.0.378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 144.850186][ T42] audit: type=1326 audit(1788957246.043:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7558 comm="syz.0.378" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 146.657215][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 146.660083][ T42] audit: type=1326 audit(1788957247.853:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.0.383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 146.668075][ T42] audit: type=1326 audit(1788957247.863:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.0.383" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 147.069890][ T42] audit: type=1326 audit(1788957248.263:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 147.070152][ T42] audit: type=1326 audit(1788957248.263:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 147.072789][ T42] audit: type=1326 audit(1788957248.263:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 147.072829][ T42] audit: type=1326 audit(1788957248.263:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 147.072861][ T42] audit: type=1326 audit(1788957248.263:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.386" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 147.072893][ T42] audit: type=1326 audit(1788957248.263:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 147.078330][ T42] audit: type=1326 audit(1788957248.263:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 147.078372][ T42] audit: type=1326 audit(1788957248.273:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7590 comm="syz.3.386" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 148.404204][ T7608] netlink: 'syz.2.390': attribute type 10 has an invalid length. [ 148.406461][ T7608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.408959][ T7608] team0: Port device bond0 added [ 148.474576][ T7608] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.485460][ T7608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.536227][ T7608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.536358][ T7608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.546858][ T7608] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 151.682264][ T1040] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 151.827797][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 151.827913][ T42] audit: type=1326 audit(1788957253.023:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7647 comm="syz.2.402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 151.828037][ T42] audit: type=1326 audit(1788957253.023:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7647 comm="syz.2.402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 151.830121][ T42] audit: type=1326 audit(1788957253.023:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7647 comm="syz.2.402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 151.850733][ T42] audit: type=1326 audit(1788957253.023:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7647 comm="syz.2.402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 151.850986][ T42] audit: type=1326 audit(1788957253.043:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7647 comm="syz.2.402" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 151.851556][ T42] audit: type=1326 audit(1788957253.043:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7647 comm="syz.2.402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 151.851907][ T1040] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 151.852740][ T1040] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 151.852753][ T1040] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 151.852763][ T1040] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 151.852783][ T1040] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 151.852796][ T1040] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 151.853046][ T42] audit: type=1326 audit(1788957253.043:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7647 comm="syz.2.402" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 151.853757][ T42] audit: type=1326 audit(1788957253.043:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7647 comm="syz.2.402" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 151.854270][ T1040] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 151.854282][ T1040] usb 5-1: Product: syz [ 151.854289][ T1040] usb 5-1: Manufacturer: syz [ 151.867142][ T1040] cdc_wdm 5-1:1.0: skipping garbage [ 151.867153][ T1040] cdc_wdm 5-1:1.0: skipping garbage [ 151.873253][ T1040] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 151.873265][ T1040] cdc_wdm 5-1:1.0: Unknown control protocol [ 152.137636][ T7651] syzkaller0: entered promiscuous mode [ 152.137700][ T7651] syzkaller0: entered allmulticast mode [ 152.144369][ T7651] tipc: Enabled bearer , priority 0 [ 152.147546][ T7651] tipc: Resetting bearer [ 152.153331][ T7650] tipc: Resetting bearer [ 152.163443][ T7650] tipc: Disabling bearer [ 152.900787][ T7660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.405'. [ 152.937403][ T7660] netlink: 'syz.2.405': attribute type 11 has an invalid length. [ 153.079575][ T7663] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 153.822534][ T1040] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 154.121702][ T42] audit: type=1326 audit(1788957255.323:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.1.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 154.121795][ T42] audit: type=1326 audit(1788957255.323:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.1.409" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 154.426122][ T5839] usb 5-1: USB disconnect, device number 13 [ 156.234020][ T7704] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 156.234060][ T7704] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 156.238986][ T7704] vhci_hcd vhci_hcd.0: Device attached [ 156.466148][ T1040] usb 7-1: unable to get BOS descriptor or descriptor too short [ 156.470995][ T1040] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 156.471053][ T1040] usb 7-1: no configurations [ 156.471077][ T1040] usb 7-1: can't read configurations, error -22 [ 156.521325][ T5828] usb 38-1: SetAddress Request (2) to port 0 [ 156.521429][ T5828] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 156.828029][ T7705] vhci_hcd: connection reset by peer [ 156.830251][ T13] vhci_hcd vhci_hcd.0: stop threads [ 156.830310][ T13] vhci_hcd vhci_hcd.0: release socket [ 156.831668][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 157.873240][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 157.873330][ T42] audit: type=1326 audit(1788957259.073:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 157.873387][ T42] audit: type=1326 audit(1788957259.073:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 157.873728][ T42] audit: type=1326 audit(1788957259.073:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 157.873849][ T42] audit: type=1326 audit(1788957259.073:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 157.874044][ T42] audit: type=1326 audit(1788957259.073:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.422" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 157.874479][ T42] audit: type=1326 audit(1788957259.073:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 157.876762][ T42] audit: type=1326 audit(1788957259.073:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7721 comm="syz.1.422" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 158.137956][ T42] audit: type=1326 audit(1788957259.333:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.1.423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 158.138232][ T42] audit: type=1326 audit(1788957259.333:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.1.423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 158.139756][ T42] audit: type=1326 audit(1788957259.333:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.1.423" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 158.759649][ T7733] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.831715][ T7733] md: couldn't update array info. -22 [ 158.837757][ T5897] md_update_sb: can't update sb for read-only array md0 [ 158.881978][ T7733] md: could not open device unknown-block(1,1). [ 158.883371][ T7733] md: md_import_device returned -16 [ 158.883984][ T5897] md_update_sb: can't update sb for read-only array md0 [ 158.926538][ T5897] md_update_sb: can't update sb for read-only array md0 [ 159.351284][ T6508] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 161.054306][ T7754] netlink: 'syz.3.429': attribute type 10 has an invalid length. [ 161.144890][ T7750] netlink: 'syz.2.430': attribute type 15 has an invalid length. [ 161.144952][ T7750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.430'. [ 161.165253][ T7754] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.180896][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.267882][ T7754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.286759][ T7754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.286855][ T7754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.304484][ T7754] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 161.310694][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.310772][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.320188][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.320318][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.581403][ T5828] usb 38-1: device descriptor read/8, error -110 [ 161.905993][ T7759] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 162.003788][ T5828] usb usb38-port1: attempt power cycle [ 162.210603][ T6508] usb 6-1: unable to get BOS descriptor or descriptor too short [ 162.221479][ T6508] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 162.221525][ T6508] usb 6-1: no configurations [ 162.221554][ T6508] usb 6-1: can't read configurations, error -22 [ 162.604642][ T5828] usb usb38-port1: unable to enumerate USB device [ 163.229085][ T7784] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 163.358726][ T42] kauditd_printk_skb: 55 callbacks suppressed [ 163.358806][ T42] audit: type=1326 audit(1788957264.553:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.2.440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 163.361921][ T42] audit: type=1326 audit(1788957264.553:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.2.440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 163.361968][ T42] audit: type=1326 audit(1788957264.553:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.2.440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 163.362003][ T42] audit: type=1326 audit(1788957264.553:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.2.440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 163.362035][ T42] audit: type=1326 audit(1788957264.553:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.2.440" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 163.362083][ T42] audit: type=1326 audit(1788957264.553:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.2.440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 163.362118][ T42] audit: type=1326 audit(1788957264.553:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.2.440" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 163.362152][ T42] audit: type=1326 audit(1788957264.553:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7787 comm="syz.2.440" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 163.526633][ T7792] binder: 7790:7792 ioctl c00c6211 0 returned -14 [ 163.599626][ T7793] loop2: detected capacity change from 0 to 2640 [ 163.684196][ T7793] buffer_io_error: 320 callbacks suppressed [ 163.684291][ T7793] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 163.684335][ T7793] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 163.684374][ T7793] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 163.684414][ T7793] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 163.684452][ T7793] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 163.684494][ T7793] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 163.684535][ T7793] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 163.684600][ T7793] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 163.684637][ T7793] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 163.684702][ T7793] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 163.792673][ T42] audit: type=1326 audit(1788957264.993:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7794 comm="syz.1.442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 163.799904][ T42] audit: type=1326 audit(1788957264.993:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7794 comm="syz.1.442" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 165.124779][ T7816] Console: switching to colour dummy device 80x25 [ 167.382018][ T75] IPVS: starting estimator thread 0... [ 167.471655][ T7847] IPVS: using max 27 ests per chain, 64800 per kthread [ 168.830280][ T7870] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 170.051980][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 170.052049][ T42] audit: type=1326 audit(1788957271.253:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 170.052140][ T42] audit: type=1326 audit(1788957271.253:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 170.078610][ T42] audit: type=1326 audit(1788957271.273:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 170.079996][ T42] audit: type=1326 audit(1788957271.273:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 170.097209][ T42] audit: type=1326 audit(1788957271.293:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 170.563839][ T42] audit: type=1326 audit(1788957271.743:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7871 comm="syz.1.462" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 170.920087][ T42] audit: type=1326 audit(1788957272.113:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.1.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 170.920640][ T42] audit: type=1326 audit(1788957272.113:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.1.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 170.920852][ T42] audit: type=1326 audit(1788957272.113:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.1.466" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 170.922821][ T42] audit: type=1326 audit(1788957272.123:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.1.466" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 171.521341][ T5157] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 172.512645][ T7901] netlink: 'syz.0.471': attribute type 11 has an invalid length. [ 172.667377][ T7901] netlink: 'syz.0.471': attribute type 10 has an invalid length. [ 172.710126][ T7901] syz_tun: entered promiscuous mode [ 172.746664][ T7901] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 172.788447][ T7902] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 174.239413][ T5157] usb 7-1: unable to get BOS descriptor or descriptor too short [ 174.240664][ T5157] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 174.240698][ T5157] usb 7-1: no configurations [ 174.240708][ T5157] usb 7-1: can't read configurations, error -22 [ 174.971435][ T7927] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 177.352536][ T5094] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 177.371841][ T5828] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 177.998160][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 177.998273][ T42] audit: type=1326 audit(1788957279.173:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.3.488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 177.998326][ T42] audit: type=1326 audit(1788957279.173:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.3.488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22fec code=0x7ffc0000 [ 178.361803][ T42] audit: type=1326 audit(1788957279.553:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.0.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 178.362752][ T42] audit: type=1326 audit(1788957279.553:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7967 comm="syz.0.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 179.392055][ T42] audit: type=1326 audit(1788957280.573:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.1.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.431909][ T42] audit: type=1326 audit(1788957280.633:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.1.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.432057][ T42] audit: type=1326 audit(1788957280.633:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.1.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.437972][ T42] audit: type=1326 audit(1788957280.633:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.1.492" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.438773][ T42] audit: type=1326 audit(1788957280.633:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.1.492" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 179.574975][ T42] audit: type=1326 audit(1788957280.763:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7978 comm="syz.1.492" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702efec code=0x7ffc0000 [ 180.004096][ T5828] usb 7-1: unable to get BOS descriptor or descriptor too short [ 180.004934][ T5828] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 180.004993][ T5828] usb 7-1: no configurations [ 180.005021][ T5828] usb 7-1: can't read configurations, error -22 [ 181.249463][ T7994] XFS (nbd0): SB validate failed with error -5. [ 183.052086][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 183.228880][ T8035] lo speed is unknown, defaulting to 1000 [ 183.229024][ T8035] lo speed is unknown, defaulting to 1000 [ 183.414926][ T8035] lo speed is unknown, defaulting to 1000 [ 183.474790][ T8035] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 183.514240][ T8035] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 183.522164][ T8035] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 183.682803][ T8035] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 183.747599][ T8035] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 184.011877][ T1040] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 184.205684][ T8035] lo speed is unknown, defaulting to 1000 [ 184.207351][ T8035] lo speed is unknown, defaulting to 1000 [ 184.211859][ T8035] lo speed is unknown, defaulting to 1000 [ 184.213237][ T8035] lo speed is unknown, defaulting to 1000 [ 184.214982][ T8035] lo speed is unknown, defaulting to 1000 [ 185.120609][ T8052] overlayfs: missing 'lowerdir' [ 186.032299][ T1040] usb 7-1: unable to get BOS descriptor or descriptor too short [ 186.045431][ T1040] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 186.052750][ T1040] usb 7-1: no configurations [ 186.056080][ T1040] usb 7-1: can't read configurations, error -22 [ 186.304983][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 186.308509][ T42] audit: type=1326 audit(1788957287.503:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 186.341295][ T42] audit: type=1326 audit(1788957287.513:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 186.341347][ T42] audit: type=1326 audit(1788957287.513:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.510" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 186.341392][ T42] audit: type=1326 audit(1788957287.513:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 186.341429][ T42] audit: type=1326 audit(1788957287.513:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.510" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f04fec code=0x7ffc0000 [ 187.611863][ T8065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.611914][ T8065] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 187.698779][ T8065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.698834][ T8065] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 188.090077][ T8065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.090123][ T8065] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 188.701084][ T8024] Set syz1 is full, maxelem 65536 reached [ 190.238366][ T42] audit: type=1326 audit(1788957291.433:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.2.519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 190.241717][ T42] audit: type=1326 audit(1788957291.433:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.2.519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 190.243138][ T42] audit: type=1326 audit(1788957291.443:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.2.519" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 190.244726][ T42] audit: type=1326 audit(1788957291.443:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.2.519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 190.246139][ T42] audit: type=1326 audit(1788957291.443:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8088 comm="syz.2.519" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 191.361468][ T5839] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 193.039777][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 193.040223][ T42] audit: type=1326 audit(1788957294.233:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.2.526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 193.040296][ T42] audit: type=1326 audit(1788957294.233:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.2.526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 193.041299][ T42] audit: type=1326 audit(1788957294.233:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.2.526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 193.041362][ T42] audit: type=1326 audit(1788957294.233:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.2.526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 193.044146][ T42] audit: type=1326 audit(1788957294.243:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.2.526" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 193.057739][ T42] audit: type=1326 audit(1788957294.243:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.2.526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 193.057790][ T42] audit: type=1326 audit(1788957294.243:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.2.526" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 193.060096][ T42] audit: type=1326 audit(1788957294.253:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8118 comm="syz.2.526" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f32fec code=0x7ffc0000 [ 193.394832][ T8110] netlink: 'syz.0.523': attribute type 15 has an invalid length. [ 193.394882][ T8110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 193.601689][ T8126] overlayfs: missing 'workdir' [ 193.629754][ T8126] CacheFiles: Empty directory specified [ 193.629987][ T8126] CacheFiles: No cache directory specified [ 193.830380][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.830476][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.996005][ T5839] usb 6-1: unable to get BOS descriptor or descriptor too short [ 193.996984][ T5839] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 193.997021][ T5839] usb 6-1: no configurations [ 193.997030][ T5839] usb 6-1: can't read configurations, error -22 [ 194.135603][ T8133] binder: 8132:8133 ioctl c00c6211 0 returned -14 [ 194.363601][ T8136] syzkaller0: entered promiscuous mode [ 194.366106][ T8136] syzkaller0: entered allmulticast mode [ 194.376416][ T8136] tipc: Started in network mode [ 194.376443][ T8136] tipc: Node identity 92e5ebc69e52, cluster identity 4711 [ 194.376908][ T8136] tipc: Enabled bearer , priority 0 [ 194.436568][ T8136] tipc: Resetting bearer [ 194.460925][ T8134] tipc: Resetting bearer [ 194.565661][ T8134] tipc: Disabling bearer [ 195.946801][ T5827] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 196.106827][ T5827] usb 5-1: unable to get BOS descriptor or descriptor too short [ 196.111649][ T5827] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 196.111716][ T5827] usb 5-1: no configurations [ 196.111746][ T5827] usb 5-1: can't read configurations, error -22 [ 196.958923][ T8150] netlink: 'syz.1.537': attribute type 15 has an invalid length. [ 196.959048][ T8150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 197.102869][ T8162] binder: 8161:8162 ioctl c00c6211 0 returned -14 [ 197.402700][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 197.678979][ T5839] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 197.881521][ T5839] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 197.886597][ T5839] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.891738][ T5839] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.897747][ T5839] usb 5-1: Dual-Role OTG device on HNP port [ 197.902399][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.909925][ C0] ------------[ cut here ]------------ [ 197.909953][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 197.909970][ C0] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#0: rcu_preempt/17 [ 197.920272][ C0] Modules linked in: [ 197.931149][ C0] CPU: 0 UID: 0 PID: 17 Comm: rcu_preempt Tainted: G L syzkaller #0 PREEMPT(full) [ 197.937097][ C0] Tainted: [L]=SOFTLOCKUP [ 197.939088][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.954918][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 197.957274][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d da f2 76 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 01 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 f4 d9 8c [ 197.961513][ T6515] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 197.980231][ C0] RSP: 0000:ffffc90000007a00 EFLAGS: 00010046 [ 197.982682][ C0] RAX: dffffc0000000000 RBX: ffff88802a2a40e0 RCX: ffffffff8cda3860 [ 197.985963][ C0] RDX: 0000000000000081 RSI: ffffffff8cda01c0 RDI: ffffffff9152cc40 [ 197.988819][ C0] RBP: 0000000000000081 R08: ffffffff8cd9f4a0 R09: 0000000000000000 [ 197.994974][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8cd9f4a0 [ 197.998015][ C0] R13: 0000000000000000 R14: ffff88802a2a40e0 R15: ffff88805aa3ee20 [ 198.011415][ C0] FS: 0000000000000000(0000) GS:ffff888096961000(0000) knlGS:0000000000000000 [ 198.017658][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.023381][ C0] CR2: 0000000000000000 CR3: 000000004eb3b000 CR4: 0000000000352ef0 [ 198.028767][ C0] Call Trace: [ 198.030291][ C0] [ 198.031679][ C0] hidg_set_alt+0x190/0xa10 [ 198.033645][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 198.035953][ C0] ? rcu_is_watching+0x13/0xc0 [ 198.038229][ C0] composite_setup+0x2ccf/0x9290 [ 198.041237][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 198.044325][ C0] ? __pfx_composite_setup+0x10/0x10 [ 198.047790][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 198.051134][ C0] ? do_raw_spin_lock+0x128/0x260 [ 198.053489][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 198.056005][ C0] ? configfs_composite_setup+0xfb/0x130 [ 198.058456][ C0] configfs_composite_setup+0xfb/0x130 [ 198.061332][ C0] dummy_timer+0x2039/0x3700 [ 198.063945][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 198.066811][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 198.069874][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 198.072602][ C0] ? rcu_is_watching+0x13/0xc0 [ 198.075175][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 198.078404][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 198.081338][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 198.084169][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 198.087150][ C0] handle_softirqs+0x1e6/0x9d0 [ 198.094585][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 198.097338][ C0] ? _raw_spin_unlock+0x28/0x50 [ 198.100041][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 198.103307][ C0] __irq_exit_rcu+0x16a/0x210 [ 198.106148][ C0] irq_exit_rcu+0x9/0x30 [ 198.108277][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 198.110504][ C0] [ 198.112062][ C0] [ 198.113647][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.116912][ C0] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 198.119373][ C0] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 e3 70 fa 09 e8 3e 06 3d 00 fb 48 8d bb 10 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 198.132038][ C0] RSP: 0000:ffffc9000043f9c8 EFLAGS: 00000206 [ 198.135817][ C0] RAX: 000000000004f71d RBX: ffff88801cb92580 RCX: 0000000000000000 [ 198.140362][ C0] RDX: 0000000000000001 RSI: ffffffff8e3f0eae RDI: ffff88801cb93c90 [ 198.145017][ C0] RBP: ffffc9000043fa20 R08: 0000000000000001 R09: 0000000000000000 [ 198.149453][ C0] R10: 0000000000000001 R11: ffffffff81d6a779 R12: ffff888024b0a580 [ 198.154151][ C0] R13: 0000000000000000 R14: ffffffff914573e4 R15: ffff88802b23c040 [ 198.159180][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 198.164307][ C0] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 198.168010][ C0] __schedule+0x1261/0x6920 [ 198.170036][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 198.172615][ C0] ? lock_acquire+0x1d1/0x380 [ 198.176888][ C0] ? __pfx___schedule+0x10/0x10 [ 198.179512][ C0] ? find_held_lock+0x2b/0x80 [ 198.181946][ C0] ? schedule+0x225/0x2c0 [ 198.184246][ C0] schedule+0xdd/0x2c0 [ 198.186059][ C0] schedule_timeout+0x127/0x280 [ 198.187934][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 198.189959][ C0] ? __pfx_process_timeout+0x10/0x10 [ 198.191965][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 198.193957][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 198.195868][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 198.197513][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 198.199338][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 198.202078][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 198.205164][ C0] ? rcu_is_watching+0x13/0xc0 [ 198.207962][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 198.211129][ C0] rcu_gp_kthread+0x17a/0x220 [ 198.213830][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 198.217133][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 198.220633][ C0] ? __kthread_parkme+0x18f/0x230 [ 198.226599][ C0] ? kthread+0x13a/0x450 [ 198.229037][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 198.231469][ C0] kthread+0x373/0x450 [ 198.233374][ C0] ? __pfx_kthread+0x10/0x10 [ 198.235624][ C0] ret_from_fork+0x730/0xd60 [ 198.237701][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 198.240939][ C0] ? __switch_to+0x800/0x10f0 [ 198.243526][ C0] ? __pfx_kthread+0x10/0x10 [ 198.255040][ C0] ret_from_fork_asm+0x1a/0x30 [ 198.257692][ C0] [ 198.259386][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 198.262848][ C0] CPU: 0 UID: 0 PID: 17 Comm: rcu_preempt Tainted: G L syzkaller #0 PREEMPT(full) [ 198.283269][ C0] Tainted: [L]=SOFTLOCKUP [ 198.286117][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.291543][ C0] Call Trace: [ 198.293048][ C0] [ 198.294315][ C0] dump_stack_lvl+0x100/0x190 [ 198.297150][ C0] vpanic+0x553/0x970 [ 198.301848][ C0] ? __pfx_vpanic+0x10/0x10 [ 198.307259][ C0] panic+0xd1/0xe0 [ 198.309630][ C0] ? __pfx_panic+0x10/0x10 [ 198.314960][ C0] check_panic_on_warn.cold+0x19/0x34 [ 198.317891][ C0] ? usb_ep_enable+0x3e6/0x490 [ 198.320782][ C0] __warn.cold+0x191/0x318 [ 198.323242][ C0] __report_bug+0x30f/0x440 [ 198.325802][ C0] ? usb_ep_enable+0x3e6/0x490 [ 198.328934][ C0] ? __pfx___report_bug+0x10/0x10 [ 198.332226][ C0] ? try_to_wake_up+0x158/0x1c90 [ 198.335011][ C0] report_bug_entry+0xe2/0x290 [ 198.337686][ C0] ? usb_ep_enable+0x3f8/0x490 [ 198.340392][ C0] handle_bug+0x1cd/0x2a0 [ 198.343087][ C0] exc_invalid_op+0x17/0x50 [ 198.346457][ C0] asm_exc_invalid_op+0x1a/0x20 [ 198.349523][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 198.352224][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d da f2 76 09 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 c0 01 da 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 60 f4 d9 8c [ 198.363407][ C0] RSP: 0000:ffffc90000007a00 EFLAGS: 00010046 [ 198.365887][ C0] RAX: dffffc0000000000 RBX: ffff88802a2a40e0 RCX: ffffffff8cda3860 [ 198.368926][ C0] RDX: 0000000000000081 RSI: ffffffff8cda01c0 RDI: ffffffff9152cc40 [ 198.372682][ C0] RBP: 0000000000000081 R08: ffffffff8cd9f4a0 R09: 0000000000000000 [ 198.377010][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8cd9f4a0 [ 198.381097][ C0] R13: 0000000000000000 R14: ffff88802a2a40e0 R15: ffff88805aa3ee20 [ 198.385168][ C0] hidg_set_alt+0x190/0xa10 [ 198.387170][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 198.389295][ C0] ? rcu_is_watching+0x13/0xc0 [ 198.391296][ C0] composite_setup+0x2ccf/0x9290 [ 198.393283][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 198.395629][ C0] ? __pfx_composite_setup+0x10/0x10 [ 198.398099][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 198.400442][ C0] ? do_raw_spin_lock+0x128/0x260 [ 198.402742][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 198.405815][ C0] ? configfs_composite_setup+0xfb/0x130 [ 198.408131][ C0] configfs_composite_setup+0xfb/0x130 [ 198.410625][ C0] dummy_timer+0x2039/0x3700 [ 198.412766][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 198.415455][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 198.417563][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 198.420348][ C0] ? rcu_is_watching+0x13/0xc0 [ 198.423230][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 198.426358][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 198.429323][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 198.432352][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 198.434621][ C0] handle_softirqs+0x1e6/0x9d0 [ 198.437720][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 198.441045][ C0] ? _raw_spin_unlock+0x28/0x50 [ 198.444144][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 198.447675][ C0] __irq_exit_rcu+0x16a/0x210 [ 198.450977][ C0] irq_exit_rcu+0x9/0x30 [ 198.453591][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 198.457175][ C0] [ 198.458879][ C0] [ 198.460361][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.462753][ C0] RIP: 0010:finish_task_switch.isra.0+0x2ca/0x10d0 [ 198.466382][ C0] Code: b6 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 e3 70 fa 09 e8 3e 06 3d 00 fb 48 8d bb 10 17 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 198.475275][ C0] RSP: 0000:ffffc9000043f9c8 EFLAGS: 00000206 [ 198.477695][ C0] RAX: 000000000004f71d RBX: ffff88801cb92580 RCX: 0000000000000000 [ 198.481628][ C0] RDX: 0000000000000001 RSI: ffffffff8e3f0eae RDI: ffff88801cb93c90 [ 198.486362][ C0] RBP: ffffc9000043fa20 R08: 0000000000000001 R09: 0000000000000000 [ 198.493194][ C0] R10: 0000000000000001 R11: ffffffff81d6a779 R12: ffff888024b0a580 [ 198.498420][ C0] R13: 0000000000000000 R14: ffffffff914573e4 R15: ffff88802b23c040 [ 198.503389][ C0] ? finish_task_switch.isra.0+0x149/0x10d0 [ 198.507520][ C0] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 198.511123][ C0] __schedule+0x1261/0x6920 [ 198.514058][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 198.517282][ C0] ? lock_acquire+0x1d1/0x380 [ 198.520019][ C0] ? __pfx___schedule+0x10/0x10 [ 198.522999][ C0] ? find_held_lock+0x2b/0x80 [ 198.525777][ C0] ? schedule+0x225/0x2c0 [ 198.528316][ C0] schedule+0xdd/0x2c0 [ 198.530982][ C0] schedule_timeout+0x127/0x280 [ 198.534320][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 198.537221][ C0] ? __pfx_process_timeout+0x10/0x10 [ 198.539415][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 198.556465][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 198.559298][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 198.561846][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 198.564781][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 198.567753][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 198.571367][ C0] ? rcu_is_watching+0x13/0xc0 [ 198.574819][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 198.576962][ C0] rcu_gp_kthread+0x17a/0x220 [ 198.578533][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 198.580823][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 198.583955][ C0] ? __kthread_parkme+0x18f/0x230 [ 198.586597][ C0] ? kthread+0x13a/0x450 [ 198.589151][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 198.592344][ C0] kthread+0x373/0x450 [ 198.594707][ C0] ? __pfx_kthread+0x10/0x10 [ 198.597686][ C0] ret_from_fork+0x730/0xd60 [ 198.600457][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 198.602822][ C0] ? __switch_to+0x800/0x10f0 [ 198.605077][ C0] ? __pfx_kthread+0x10/0x10 [ 198.607892][ C0] ret_from_fork_asm+0x1a/0x30 [ 198.610535][ C0] [ 198.620979][ C0] Kernel Offset: disabled [ 198.622692][ C0] Rebooting in 86400 seconds..