last executing test programs: 2.058278699s ago: executing program 2 (id=541): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0x8, 0xa}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x28, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x8010) 1.962771007s ago: executing program 2 (id=542): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000501925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.962466443s ago: executing program 2 (id=543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() add_key(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x49071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000011000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007", @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRESOCT=r1], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800000850000000800000095"], 0x0, 0x7}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000ffffff88000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x10, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noxattr}, {@version_9p2000}, {@version_L}, {@cache_fscache}, {@noextend}], [{@obj_type}]}}) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) 1.908518305s ago: executing program 2 (id=544): unshare(0x24020400) fsopen(&(0x7f0000000180)='overlay\x00', 0x0) request_key(&(0x7f0000000080)='user\x00', 0x0, 0x0, 0xfffffffffffffffa) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) syz_ublk_setup_io_uring(0x25, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000f400102101fc020000000000598440ab66ad3c92ba797fb42f4e510000007c0b28310eae680d3073b45aae00000000000100000000000000000000ffffac1414aa4e204e21046190782c641688893166de"], 0x46) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x3, {0x0, 0x1, 0x4}, 0xfe}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'hsr0\x00', 0x0}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000440)={'pcl724\x00', [0x301, 0xc0000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x6, 0x1, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0x3, 0x89, 0x2, 0x81, 0xfffffffc, 0x5, 0xe66, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000400)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000006}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x1c, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x18}}, 0x4804) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.226030132s ago: executing program 1 (id=550): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000000)=@usbdevfs_connect) 1.122821816s ago: executing program 1 (id=552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r2, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0xfffffffffffffffe, 0x10001, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='environ\x00') r3 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x2, 0x16, &(0x7f0000000c80)=ANY=[@ANYRES32=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000400)={0x5}, 0x10}, 0x94) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/20, 0x14}, {0x0}], 0x2) 836.972731ms ago: executing program 1 (id=553): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1, 0xfffffffffffffffc]}}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 785.116943ms ago: executing program 2 (id=554): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="c5847a49128a4d6f07bb28bcea60df92c7b60da0096b7ce3404bf35b288bb2bf5a5836caef01ccd1497b395bab2efd70ec5b7d56be3cd444381abf35e12fdc67900858ded51ad0bd598413077a91204c366cd6aefb25100db3d5cf5ee44de849c31caeca7fabf707987bc638a6b042fdfab9b9e5a18a46b99a04580c37e79cd3bd86d168b87e8198bfb958a7ef2657944f53c3ed19d5cbc55aa5e0117457b35f62a36a9748cc01fc7583d404ae4f8a30c145f5fb7d6a8d2ffb31c381ac49c334925b500d0b3bda146266b000360525ada31b04af5823263cb761bc88a8789833bb1c6590163fe3b5d62ed917"], 0x248}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="c5847a49128a4d6f07bb28bcea60df92c7b60da0096b7ce3404bf35b288bb2bf5a5836caef01ccd1497b395bab2efd70ec5b7d56be3cd444381abf35e12fdc67900858ded51ad0bd598413077a91204c366cd6aefb25100db3d5cf5ee44de849c31caeca7fabf707987bc638a6b042fdfab9b9e5a18a46b99a04580c37e79cd3bd86d168b87e8198bfb958a7ef2657944f53c3ed19d5cbc55aa5e0117457b35f62a36a9748cc01fc7583d404ae4f8a30c145f5fb7d6a8d2ffb31c381ac49c334925b500d0b3bda146266b000360525ada31b04af5823263cb761bc88a8789833bb1c6590163fe3b5d62ed917"], 0x248}], 0x1}, 0x0) 759.100984ms ago: executing program 1 (id=555): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000080000000000006e0100003801000001") 758.942619ms ago: executing program 2 (id=556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x40025b0c, &(0x7f0000000040)) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff12, &(0x7f0000000280)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x70bd25, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}]}, 0x3c}}, 0x4000000) 757.806393ms ago: executing program 3 (id=557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce) (fail_nth: 3) 649.29337ms ago: executing program 1 (id=558): r0 = socket$inet(0x2, 0x2, 0x11) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f00, @loopback}, 0x10) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='proto\x00', &(0x7f0000000340)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000380)='mountproto\x00', &(0x7f00000003c0)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000400)=""/100, 0x64, 0x40, &(0x7f0000000500)={0x2, 0x0, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x3000005, 0x32, 0xffffffffffffffff, 0xa94a7000) capget(&(0x7f0000feaff9)={0x20080522}, &(0x7f0000000000)={0x10004, 0x8, 0x2, 0xfffffffc, 0x0, 0x1ff}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0004007a9d1de9d3d9dba3569739ef5100df673febe7c71fb14ef80d2253a01bc6f11c58339f5f243389471e6a85bf279674acba0b9be01a23230299d824197db59aa65514002570ea", @ANYRES16=r3, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x401c404) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x3, 0x1ab301) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f00000000c0)) r5 = socket(0x18, 0x4, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000040)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x1000a96) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x8a, &(0x7f0000000680), 0x4) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x8000) openat$hpet(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000072000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 645.969804ms ago: executing program 1 (id=559): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='100000', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) 465.079451ms ago: executing program 3 (id=560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce) 318.817192ms ago: executing program 3 (id=561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x6, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xd}, {0x5, 0x9, 0x8, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xc, 0x9, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x47, 0xb, '\x00', 0x43}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x68, 0x87, 0x1, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0xc, 0xd1, '\x00', 0x80}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x94, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xcd, 0x0, 0xefa}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000440)={0x1, 0x0, [{0x1, 0xfff, 0x4, 0xffffffff, 0x9}]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0xb, 0x95, 0xd}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 205.081215ms ago: executing program 0 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000017c0)={0xc0, r1, 0x5, 0xc000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x3, 0x4400, @void, @void, @void, @void, @void, @val={0x5, 0x9, {0x4, 0x6e, 0xff, "eca673bda5bd"}}, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x4, 0x0, {0x7, 0x1f81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xfff, 0x8}}, @void, @void, @val={0x76, 0x6, {0x7, 0x8, 0x4, 0xe}}}}, @NL80211_ATTR_FTM_RESPONDER={0x34, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x2c, 0x3, "67b9cc98fdbfcc0aea0c49798dc0644ed27025ffc421f670f5463ea78936b7c7d6279a8cd5beb89b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xbc}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xc0}}, 0x4880) 204.709231ms ago: executing program 0 (id=565): rseq(&(0x7f0000000400), 0x20, 0x8000000000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x81102) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="3f536f190ad79c6471e4f87256d139e2b201001e79e7be1b31af4a1d1681cc2314cdf8898a9c55c1a40d4ef5093fbad8ae30086cbc60cbd40cf6b025fddc8931e520cf27", @ANYRESOCT=r4, @ANYRESHEX=r0, @ANYRES32, @ANYRES32=r1], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r5, 0x0, 0x0}, 0x1c) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x200000, 0x2) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, &(0x7f00000001c0)) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, &(0x7f00000001c0)) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x0, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001ac0)=@nat={'nat\x00', 0x670, 0x5, 0x14b0, 0x3f0, 0x1340, 0xffffffff, 0x1340, 0x10f8, 0x141c, 0x141c, 0xffffffff, 0x141c, 0x141c, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16, 0x1}, 0x0, 0x10c4, 0x10f8, 0x48, {}, [@common=@ttl={{0x24}, {0x3, 0xd}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x1, './cgroup/syz0\x00', 0x1, {0xc}}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23, @port=0x4e24}}}}, {{@uncond, 0x0, 0x100, 0x134, 0x0, {}, [@common=@inet=@iprange={{0x64}, {@ipv6=@private2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010102, @port=0x4e22, @icmp_id=0x67}}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0xcc, 0x114, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x7}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x6, 0x0, 0x59d6, {0x6}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @gre_key=0x1, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x62, 0x1, 0x5}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x6, {0x8}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x150c) (async) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001ac0)=@nat={'nat\x00', 0x670, 0x5, 0x14b0, 0x3f0, 0x1340, 0xffffffff, 0x1340, 0x10f8, 0x141c, 0x141c, 0xffffffff, 0x141c, 0x141c, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16, 0x1}, 0x0, 0x10c4, 0x10f8, 0x48, {}, [@common=@ttl={{0x24}, {0x3, 0xd}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x1, './cgroup/syz0\x00', 0x1, {0xc}}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23, @port=0x4e24}}}}, {{@uncond, 0x0, 0x100, 0x134, 0x0, {}, [@common=@inet=@iprange={{0x64}, {@ipv6=@private2, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010102, @port=0x4e22, @icmp_id=0x67}}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0xcc, 0x114, 0x0, {}, [@common=@ttl={{0x24}, {0x2, 0x7}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x6, 0x0, 0x59d6, {0x6}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @gre_key=0x1, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x62, 0x1, 0x5}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x6, {0x8}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x150c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) 132.646484ms ago: executing program 3 (id=566): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x2) fchdir(r4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) rmdir(&(0x7f0000000280)='./file0/file0\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r7 = mq_open(&(0x7f0000000000)='..]$\x00', 0x40, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r7}, 0x8) 58.256272ms ago: executing program 0 (id=567): r0 = syz_io_uring_setup(0x7a3f, &(0x7f0000000100)={0x0, 0x9c62, 0x1, 0x2, 0x15e}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000ac0), 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x39, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x2, 0x1, 0x0, 0x0) 58.094859ms ago: executing program 0 (id=568): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000400)={'wlan0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000400)={'wlan0\x00', 0x1}) (fail_nth: 6) 56.525069ms ago: executing program 3 (id=569): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001400000000000000ffff021500000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b5ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000002600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 2.025175ms ago: executing program 0 (id=570): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffff9c, 0x0, 0x48000, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x1c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x300}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00\x00@'}}}}}}}, 0x0) 1.725619ms ago: executing program 3 (id=571): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x6, 0x240240) sendmsg$kcm(r1, &(0x7f0000001b00)={&(0x7f0000000140)=@caif=@dbg={0x25, 0xd, 0x6}, 0x80, &(0x7f0000001900)=[{&(0x7f00000012c0)="f67bd4abf43756fa2d935bc838c018c39ae08d96ee03c62450070f0e91b341d8c0ec1ef6966910751b28d48c3cd73cda74e5b981c100ce36ab590895d113a8d994c9cd87428b86c472c86f9db1869dcb975f3abd90f16c7f750dc18e8ec1926f927c963200e182cc3a6314d27d95d572791a6dd0a01661a3ac94613c7c5636434e2833751a880e025999d2186cbaa060aa37c5f0e9db5e7f80272584ef0397dceed226e67b078105c2", 0xa9}, {&(0x7f0000001380)="2f4915db149e49a7ad4d98accfa0b58a55f83b5e4527181bb0f58127c760800f0a1f93f8415d4e70f2597365e04b92358e7a492bc465", 0x36}, {&(0x7f00000013c0)="f15c22b724c0e60d30822513e1c2934588f6a932b98a7241bfef4b9e44a574489832000c1f4bcb682de8d5b5283f99dddf855786005a3b6d5df7f19b854cd25e37c6235d488b65be75b8ee8753f5f07b24af086453078e10cd23c378fe08ae4a59e91aea0a9a6285c011bd0e6576abf8983a62c86f", 0x75}, {&(0x7f0000001440)="57226a56f97ff9ec0d96c598eef08d647c6016a87f641be3b5682a4be297d033b2fa0642d65f6ae5386bfc733990a84bd9329b818d6bf57590e6f2072094e7a991523cc55dccee81a9b3cb0e38bb70f8e8c06827c884b6ab9e7993db82dfda1e73a011f4c7fdd30017c3452fb33f7081446f5ae92143b1f4a353e2fa2517469734add6da3d79b57f40679341314f5c9754c96932e352399523386dac8b32f621e908663009f68241c246e1914a35ada5040bd4417da332bb2fca891955652443db5c055be72af27fd0e9e156db3e9a6c0b8775506e", 0xd5}, {&(0x7f0000001540)="bfcb1282e3eb19cd621288cc227cc66b029ad3b85e892a1c9ddf6d7b9d2b6cbb36d30ca210eee97f3d6a0838e2106ae24e9268f6243740f0ee1bbd4ae4906dfcb232e6cca7fd8141a6542002c776fb84f32a8353206fd4a7708c6fecfb57206ab46f16567bcf62bbf3b2c6654f15ad81fc5559bb77be456e475cea9b001b5cdfee2928d8cfc74a328b5752e5befb85972e6ab3f6f0545d6ff3e51a2b62", 0x9d}, {&(0x7f0000001600)="62bb6fda91f0bbc6b787be831c975e3902a6ad7ccd3d83003794570e9f2d6290ddbfe8ba66b63f602e31b83c58cacd411729facfe2c1624036c51c057ab0a3d0d96f168246d48aa5e16350fc5a9953273c5792e99a657044d7d39d63aa581c4bf335c92de811cc14b5374cdb3430832cfae1823743c9f94a508826698eb5c14f62accd8d42d1cae90ce97db221127304ee37df2beddc561667122031777cee4a67a61968505fa59ee8e0b64296b7eea5c2d68f2e570dbbf7fa94dc73f8b7f21f34fb8ed65aaf7fa1cb34056df5aaa27a53cf5921f0de5423cdb0c12cdbfa0d45bc5e1dc8c3a8939d91b1", 0xea}, {&(0x7f0000001700)="f9076a75b3c117c85d2cc693a200d249d9de3aff58b5968dc188", 0x1a}, {&(0x7f0000001740)="27f18acc7dd7555f2fa96a3a3b94f853094bee120dee20f5aecd10b5e71453745ab5da8daf0c44a9cd2175d7af2720975980c00f756cbaaa057daebce0d5e047bae4034db1bb931f9fc9c1b755ce143b4c723f0b8df77b1f52b700e0fca4f1aeaedadc5fd75cb38677fb7c44a821de1f692f2e6ec6a765688e0e6939eae353b7b82f5f11f68496443d18c2ef77cff5e12afb5653cda3cf77513490122032726d6e075b6afcbe3349fcf4a6eacbb0265e302451d255ad70d458731a71da1e098260feefbf23f5ba07b4ed6085cc1d8139afa3986165d94d5f71690fda5d928dd6e8a43d46dd5bd824544100049982b84efb987488f5b99c5c7f69", 0xfa}, {&(0x7f0000001840)="d21bb3a4c748455dd16583abd6066169f99cd9e72349ab3731466cb6ab79cdf62e47bfb858609c93094379b0268c55242e713e105ad0376d9e366c819de8bf0a3b7f727d177b46a7a3d66ea0f6d20b2cd4bbfb721d7ba137147603f930b97c7d0d55d2bf690a9d45909e289b20f584e1343848bc4e083ff0b51c9b41ddb2bca4d752965bc2fafcb0ded15f3770cfcc7920a970bd32df03e1d0f3acc684ec", 0x9e}], 0x9, &(0x7f0000001980)=[{0xf8, 0x111, 0x7, "9a0156f7060fd0185f77b6f0f4fd76e50573ff81e872396555d5fe4f8ff30b9b3c13bb2ba730ebeeb4b10e85a18895f7be2b6ed806ffecd1b50c6554102c8a5f4666f0c5a5ae0860212b904502f28da5a1a5a382626e91924f632db8902c8bd776d0419866f7279d7f3a6491cdf45a05868603342da247dccdeb258a019f8da789cef1c4df08eb94526ee24f68614174ce20f2b5df25222b54d7a1e351f7834afa15869ddd8045c7f05a81a7fc8c052db75b1a96cee3ecfdeaf8788d74a5ac636bf51176615e1ead7b188c65864cf6acd5dc9935a993fd97dbb84b345ee9bcb7b561e3c46eab171cd17068"}, {0x74, 0x102, 0x7, "6354c08091be75ef9276873c421ba9947fb91d9023a1f62a4d1862cc97a547a5b5eaad7737d469766bf9f329ad94dea152a267d41c7c63b81e0175d526f70fe25f5f4b00ab36a5c9dea058e735fa64ba31fb422583af34cc62611b716698633214b563ca1deac48f"}], 0x16c}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffb, @private2}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000009c0)={0x2, 0xffffffff, 0x15, 0x6, 0xaf, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000000a05000000000000000000010000000900010073797a30000000000900010073797a30000000000980837f6e4ce7f920106c079a0fced700010073797a30000000000c"], 0x17c}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c090) socket$inet_icmp_raw(0x2, 0x3, 0x1) 0s ago: executing program 0 (id=572): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/vlan0\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) (fail_nth: 4) kernel console output (not intermixed with test programs): 319357][ T6707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.319370][ T6707] [ 93.319395][ T6707] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.390552][ T1035] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 93.537942][ T1035] usb 5-1: Using ep0 maxpacket: 8 [ 93.540028][ T1035] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.543830][ T1035] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 93.546470][ T1035] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 93.550169][ T1035] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.553575][ T1035] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 93.557046][ T1035] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 93.560673][ T1035] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.564783][ T1035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.775545][ T1035] usb 5-1: usb_control_msg returned -32 [ 93.778150][ T1035] usbtmc 5-1:16.0: can't read capabilities [ 93.793479][ T1035] usb 5-1: USB disconnect, device number 11 [ 93.982141][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 93.982154][ T42] audit: type=1804 audit(1786606036.879:19): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.195" name="/newroot/51/file0" dev="tmpfs" ino=299 res=1 errno=0 [ 94.103834][ T42] audit: type=1326 audit(1786606036.999:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 94.112612][ T42] audit: type=1326 audit(1786606037.009:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 94.120323][ T42] audit: type=1326 audit(1786606037.009:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 94.127207][ T42] audit: type=1326 audit(1786606037.009:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.195" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700efec code=0x7ffc0000 [ 94.134076][ T42] audit: type=1326 audit(1786606037.009:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 94.141381][ T42] audit: type=1326 audit(1786606037.009:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 94.149776][ T42] audit: type=1326 audit(1786606037.009:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 94.158587][ T42] audit: type=1326 audit(1786606037.009:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.195" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 94.167057][ T42] audit: type=1326 audit(1786606037.009:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6720 comm="syz.3.195" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf700efec code=0x7ffc0000 [ 94.307305][ T1035] usb 7-1: USB disconnect, device number 15 [ 94.331388][ T1035] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 94.343378][ T1035] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 94.349960][ T1035] ti_usb_3410_5052 7-1:2.0: device disconnected [ 94.538044][ T41] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 94.689628][ T41] usb 6-1: unable to get BOS descriptor or descriptor too short [ 94.692720][ T41] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 94.696731][ T41] usb 6-1: config 189 has an invalid interface number: 127 but max is 0 [ 94.700161][ T41] usb 6-1: config 189 has no interface number 0 [ 94.702469][ T41] usb 6-1: config 189 interface 127 has no altsetting 0 [ 94.706424][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.709226][ T41] usb 6-1: Product: syz [ 94.710621][ T41] usb 6-1: Manufacturer: syz [ 94.712154][ T41] usb 6-1: SerialNumber: syz [ 94.718065][ T1035] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 94.738929][ T6737] kvm_intel: kvm [6734]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3ff [ 94.868439][ T1035] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.874755][ T1035] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.878280][ T1035] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 94.882949][ T1035] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.892035][ T1035] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 94.895549][ T1035] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 94.904882][ T1035] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.908160][ T1035] usb 7-1: Product: syz [ 94.909658][ T1035] usb 7-1: Manufacturer: syz [ 94.917318][ T1035] cdc_wdm 7-1:1.0: skipping garbage [ 94.922086][ T1035] cdc_wdm 7-1:1.0: skipping garbage [ 94.931599][ T1035] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 94.933801][ T1035] cdc_wdm 7-1:1.0: Unknown control protocol [ 95.028901][ T41] usbserial_generic 6-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 95.035063][ T41] usbserial_generic 6-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 95.040742][ T41] usbserial_generic 6-1:189.127: device has no bulk endpoints [ 95.044525][ T41] safe_serial 6-1:189.127: safe_serial converter detected [ 95.047426][ T41] safe_serial 6-1:189.127: probe with driver safe_serial failed with error -22 [ 95.051939][ T41] usb 6-1: USB disconnect, device number 11 [ 95.531364][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 95.533620][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 95.535640][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 95.537718][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 95.539805][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 95.541880][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 95.543958][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 95.546054][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 95.548478][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 95.550540][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 95.552552][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 95.554596][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 95.556674][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 95.558743][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 95.560828][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 95.562889][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 95.564970][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 95.567029][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 95.569145][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 95.571187][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 95.584270][ T850] usb 7-1: USB disconnect, device number 16 [ 95.586270][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 95.654268][ T41] Process accounting resumed [ 95.679653][ T6745] Process accounting resumed [ 95.841852][ T6729] xt_hl: Unknown Hop Limit match mode: 230 [ 95.928143][ T41] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 96.068272][ T6011] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 96.090561][ T41] usb 5-1: not running at top speed; connect to a high speed hub [ 96.093779][ T41] usb 5-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.40 [ 96.098518][ T41] usb 5-1: config 1 interface 0 has no altsetting 0 [ 96.103312][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.106615][ T41] usb 5-1: Product: ╨Ц [ 96.108395][ T41] usb 5-1: Manufacturer: ╨ж [ 96.110277][ T41] usb 5-1: SerialNumber: сРД [ 96.228726][ T6011] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 96.233525][ T6011] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.239165][ T6011] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.246161][ T6011] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.249289][ T6011] usb 8-1: Product: syz [ 96.250923][ T6011] usb 8-1: Manufacturer: syz [ 96.252733][ T6011] usb 8-1: SerialNumber: syz [ 96.260597][ T6011] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 96.266805][ T6011] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 96.273124][ T6011] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 96.390558][ T6759] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 96.393734][ T6759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.522927][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.529430][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.539466][ T41] usbhid 5-1:1.0: can't add hid device: -71 [ 96.541537][ T41] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 96.545831][ T41] usb 5-1: USB disconnect, device number 12 [ 97.490259][ T6803] netlink: 40 bytes leftover after parsing attributes in process `syz.1.211'. [ 97.555190][ T6809] FAULT_INJECTION: forcing a failure. [ 97.555190][ T6809] name failslab, interval 1, probability 0, space 0, times 0 [ 97.564427][ T6809] CPU: 2 UID: 0 PID: 6809 Comm: syz.2.213 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.564473][ T6809] Tainted: [L]=SOFTLOCKUP [ 97.564478][ T6809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.564485][ T6809] Call Trace: [ 97.564489][ T6809] [ 97.564494][ T6809] dump_stack_lvl+0x100/0x190 [ 97.564513][ T6809] should_fail_ex.cold+0x5/0xa [ 97.564528][ T6809] should_failslab+0xc2/0x120 [ 97.564559][ T6809] __kmalloc_noprof+0xfc/0x820 [ 97.564573][ T6809] ? rcu_is_watching+0x12/0xc0 [ 97.564589][ T6809] ? tomoyo_realpath_from_path+0xb6/0x690 [ 97.564610][ T6809] tomoyo_realpath_from_path+0xb6/0x690 [ 97.564637][ T6809] tomoyo_path_number_perm+0x23c/0x580 [ 97.564651][ T6809] ? tomoyo_path_number_perm+0x22e/0x580 [ 97.564665][ T6809] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.564680][ T6809] ? get_pid_task+0x106/0x250 [ 97.564708][ T6809] ? find_held_lock+0x2b/0x80 [ 97.564722][ T6809] ? __fget_files+0x215/0x3d0 [ 97.564733][ T6809] ? hook_file_ioctl_common+0x140/0x440 [ 97.564748][ T6809] ? __fget_files+0x215/0x3d0 [ 97.564760][ T6809] ? __fget_files+0x21f/0x3d0 [ 97.564773][ T6809] security_file_ioctl_compat+0xd3/0x230 [ 97.564789][ T6809] __ia32_compat_sys_ioctl+0xc2/0x360 [ 97.564808][ T6809] __do_fast_syscall_32+0xe7/0x970 [ 97.564826][ T6809] ? lockdep_hardirqs_on+0x78/0x100 [ 97.564843][ T6809] do_fast_syscall_32+0x32/0x70 [ 97.564859][ T6809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.564875][ T6809] RIP: 0023:0xf7ff7fec [ 97.564889][ T6809] Code: Unable to access opcode bytes at 0xf7ff7fc2. [ 97.564894][ T6809] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 97.564906][ T6809] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c04c560f [ 97.564913][ T6809] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.564919][ T6809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.564925][ T6809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.564932][ T6809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.564946][ T6809] [ 97.565066][ T6809] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.076946][ T6828] FAULT_INJECTION: forcing a failure. [ 98.076946][ T6828] name failslab, interval 1, probability 0, space 0, times 0 [ 98.082164][ T6828] CPU: 0 UID: 0 PID: 6828 Comm: syz.2.218 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.082182][ T6828] Tainted: [L]=SOFTLOCKUP [ 98.082186][ T6828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.082193][ T6828] Call Trace: [ 98.082197][ T6828] [ 98.082202][ T6828] dump_stack_lvl+0x100/0x190 [ 98.082220][ T6828] should_fail_ex.cold+0x5/0xa [ 98.082231][ T6828] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 98.082244][ T6828] should_failslab+0xc2/0x120 [ 98.082261][ T6828] kmem_cache_alloc_noprof+0x91/0x6a0 [ 98.082280][ T6828] ? skb_clone+0x190/0x400 [ 98.082299][ T6828] skb_clone+0x190/0x400 [ 98.082314][ T6828] netlink_deliver_tap+0xaed/0xcc0 [ 98.082329][ T6828] netlink_unicast+0x62b/0x850 [ 98.082343][ T6828] ? __pfx_netlink_unicast+0x10/0x10 [ 98.082358][ T6828] netlink_sendmsg+0x8b0/0xda0 [ 98.082372][ T6828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.082386][ T6828] ? apparmor_socket_sendmsg+0x15b/0x270 [ 98.082401][ T6828] ____sys_sendmsg+0xa4d/0xbe0 [ 98.082411][ T6828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.082427][ T6828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.082453][ T6828] ___sys_sendmsg+0x190/0x1e0 [ 98.082475][ T6828] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.082503][ T6828] ? find_held_lock+0x2b/0x80 [ 98.082537][ T6828] __sys_sendmsg+0x160/0x210 [ 98.082562][ T6828] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.082593][ T6828] ? __pfx_ksys_write+0x10/0x10 [ 98.082618][ T6828] __do_fast_syscall_32+0xe7/0x970 [ 98.082646][ T6828] ? lockdep_hardirqs_on+0x78/0x100 [ 98.082670][ T6828] do_fast_syscall_32+0x32/0x70 [ 98.082687][ T6828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.082702][ T6828] RIP: 0023:0xf7ff7fec [ 98.082716][ T6828] Code: Unable to access opcode bytes at 0xf7ff7fc2. [ 98.082720][ T6828] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 98.082731][ T6828] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 98.082738][ T6828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.082744][ T6828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.082750][ T6828] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 98.082756][ T6828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.082769][ T6828] [ 98.098841][ T41] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 98.709817][ T41] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 98.716145][ T41] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 98.722329][ T41] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 98.729012][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.732165][ T41] usb 5-1: Product: syz [ 98.733751][ T41] usb 5-1: Manufacturer: syz [ 98.735518][ T41] usb 5-1: SerialNumber: syz [ 98.741755][ T41] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 98.749997][ T41] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 98.755365][ T41] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 98.834127][ T29] usb 8-1: USB disconnect, device number 12 [ 98.854785][ T29] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 98.872431][ T29] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 98.876768][ T29] ti_usb_3410_5052 8-1:2.0: device disconnected [ 98.960550][ T6846] ALSA: mixer_oss: invalid OSS volume 'PHlт6ЮЮq╙Ж╪╚╠ONEOUT' [ 98.963460][ T6846] ALSA: mixer_oss: invalid index 137438 [ 98.990348][ T1035] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 99.916314][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 99.922724][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.926100][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.464962][ T6011] usb 5-1: USB disconnect, device number 13 [ 100.484032][ T6011] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 100.508990][ T6011] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 100.525582][ T6872] netlink: 56 bytes leftover after parsing attributes in process `syz.2.228'. [ 100.528790][ T6011] ti_usb_3410_5052 5-1:2.0: device disconnected [ 100.615587][ T6872] overlayfs: failed to resolve './file1/file0': -2 [ 100.857997][ T6011] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 101.004939][ T6880] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 101.019764][ T6011] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 101.025106][ T6011] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.032422][ T6011] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 101.039870][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.043336][ T6011] usb 5-1: Product: syz [ 101.045026][ T6011] usb 5-1: Manufacturer: syz [ 101.047258][ T6011] usb 5-1: SerialNumber: syz [ 101.061666][ T6011] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 101.072191][ T6011] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 101.079531][ T6011] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 101.128513][ T41] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 101.880162][ T42] kauditd_printk_skb: 1039 callbacks suppressed [ 101.880177][ T42] audit: type=1800 audit(1786606044.779:1068): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.233" name="/" dev="fuse" ino=1 res=0 errno=0 [ 101.896648][ T42] audit: type=1804 audit(1786606044.789:1069): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.233" name="/newroot/64/file1" dev="fuse" ino=1 res=1 errno=0 [ 101.954821][ T41] usb 7-1: unable to get BOS descriptor or descriptor too short [ 101.958487][ T41] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 101.967237][ T41] usb 7-1: config 189 has an invalid interface number: 127 but max is 0 [ 101.973134][ T41] usb 7-1: config 189 has no interface number 0 [ 101.975829][ T41] usb 7-1: config 189 interface 127 has no altsetting 0 [ 101.990022][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.993958][ T41] usb 7-1: Product: syz [ 101.996222][ T41] usb 7-1: Manufacturer: syz [ 101.998255][ T41] usb 7-1: SerialNumber: syz [ 102.043335][ T6894] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 102.328105][ T41] usbserial_generic 7-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 102.331860][ T41] usbserial_generic 7-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 102.335662][ T41] usbserial_generic 7-1:189.127: device has no bulk endpoints [ 102.344129][ T41] safe_serial 7-1:189.127: safe_serial converter detected [ 102.348899][ T41] safe_serial 7-1:189.127: probe with driver safe_serial failed with error -22 [ 102.366628][ T41] usb 7-1: USB disconnect, device number 17 [ 103.177452][ T6891] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 103.348488][ T1035] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 103.508015][ T41] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 103.519912][ T1035] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 103.526173][ T1035] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 103.538399][ T1035] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 103.546094][ T6011] usb 5-1: USB disconnect, device number 14 [ 103.549422][ T1035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.552388][ T1035] usb 7-1: Product: syz [ 103.553824][ T1035] usb 7-1: Manufacturer: syz [ 103.555656][ T1035] usb 7-1: SerialNumber: syz [ 103.573088][ T6011] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 103.584578][ T6011] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 103.588377][ T1035] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 103.589898][ T6011] ti_usb_3410_5052 5-1:2.0: device disconnected [ 103.603314][ T1035] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 103.609057][ T1035] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 103.664733][ T41] usb 8-1: unable to get BOS descriptor or descriptor too short qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 103.668712][ T41] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 103.676465][ T41] usb 8-1: config 189 has an invalid interface number: 127 but max is 0 [ 103.683554][ T41] usb 8-1: config 189 has no interface number 0 [ 103.686795][ T41] usb 8-1: config 189 interface 127 has no altsetting 0 [ 103.692205][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.695716][ T41] usb 8-1: Product: syz [ 103.697584][ T41] usb 8-1: Manufacturer: syz [ 103.699804][ T41] usb 8-1: SerialNumber: syz [ 103.785886][ T6907] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 103.913613][ T41] usbserial_generic 8-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 103.919507][ T41] usbserial_generic 8-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 103.924257][ T41] usbserial_generic 8-1:189.127: device has no bulk endpoints [ 103.930142][ T41] safe_serial 8-1:189.127: safe_serial converter detected [ 103.933324][ T41] safe_serial 8-1:189.127: probe with driver safe_serial failed with error -22 [ 103.942740][ T41] usb 8-1: USB disconnect, device number 13 [ 103.949837][ T6919] mmap: syz.0.243 (6919) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.990204][ T5731] Bluetooth: hci0: command 0x0401 tx timeout [ 105.647981][ T6011] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 106.442873][ T1035] usb 7-1: USB disconnect, device number 18 [ 106.453531][ T1035] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 106.465004][ T1035] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 106.468897][ T6011] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 106.471708][ T1035] ti_usb_3410_5052 7-1:2.0: device disconnected [ 106.473031][ T6011] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.481465][ T6011] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.486557][ T6011] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.489216][ T6011] usb 6-1: Product: syz [ 106.490525][ T6011] usb 6-1: Manufacturer: syz [ 106.491967][ T6011] usb 6-1: SerialNumber: syz [ 106.505214][ T6011] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 106.509744][ T6011] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 106.517477][ T6011] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 106.598419][ T6958] syzkaller1: entered promiscuous mode [ 106.600698][ T6958] syzkaller1: entered allmulticast mode [ 106.810539][ T34] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 106.958635][ T34] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 106.962875][ T34] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 106.966749][ T34] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 106.973341][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.977020][ T34] usb 5-1: Product: syz [ 106.984106][ T34] usb 5-1: Manufacturer: syz [ 106.985680][ T34] usb 5-1: SerialNumber: syz [ 106.990584][ T34] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 107.001435][ T34] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 107.006105][ T34] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 107.064880][ T6959] Process accounting resumed [ 107.411466][ T5928] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 107.545698][ T6995] FAULT_INJECTION: forcing a failure. [ 107.545698][ T6995] name failslab, interval 1, probability 0, space 0, times 0 [ 107.552728][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.2.257 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.552748][ T6995] Tainted: [L]=SOFTLOCKUP [ 107.552752][ T6995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.552759][ T6995] Call Trace: [ 107.552763][ T6995] [ 107.552767][ T6995] dump_stack_lvl+0x100/0x190 [ 107.552786][ T6995] should_fail_ex.cold+0x5/0xa [ 107.552801][ T6995] should_failslab+0xc2/0x120 [ 107.552817][ T6995] __kmalloc_cache_noprof+0x91/0x6c0 [ 107.552830][ T6995] ? ubi_attach_mtd_dev+0x36f/0x32a0 [ 107.552880][ T6995] ubi_attach_mtd_dev+0x36f/0x32a0 [ 107.552898][ T6995] ? __radix_tree_lookup+0x217/0x2b0 [ 107.552917][ T6995] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 107.552933][ T6995] ? __pfx_get_mtd_device+0x10/0x10 [ 107.552950][ T6995] ctrl_cdev_ioctl+0x36a/0x400 [ 107.552967][ T6995] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 107.552984][ T6995] ? __fget_files+0x21f/0x3d0 [ 107.552997][ T6995] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 107.553013][ T6995] compat_ptr_ioctl+0x6e/0xa0 [ 107.553028][ T6995] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 107.553042][ T6995] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 107.553060][ T6995] __do_fast_syscall_32+0xe7/0x970 [ 107.553076][ T6995] ? lockdep_hardirqs_on+0x78/0x100 [ 107.553091][ T6995] do_fast_syscall_32+0x32/0x70 [ 107.553107][ T6995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.553121][ T6995] RIP: 0023:0xf7ff7fec [ 107.553133][ T6995] Code: Unable to access opcode bytes at 0xf7ff7fc2. [ 107.553137][ T6995] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 107.553148][ T6995] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040186f40 [ 107.553155][ T6995] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.553161][ T6995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.553167][ T6995] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 107.553173][ T6995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.553190][ T6995] [ 107.587986][ T6998] FAULT_INJECTION: forcing a failure. [ 107.587986][ T6998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.637929][ T6998] CPU: 2 UID: 0 PID: 6998 Comm: syz.2.258 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.637956][ T6998] Tainted: [L]=SOFTLOCKUP [ 107.637962][ T6998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.637972][ T6998] Call Trace: [ 107.637978][ T6998] [ 107.637983][ T6998] dump_stack_lvl+0x100/0x190 [ 107.638012][ T6998] should_fail_ex.cold+0x5/0xa [ 107.638032][ T6998] _copy_from_user+0x2e/0xd0 [ 107.638059][ T6998] generic_map_update_batch+0x452/0x800 [ 107.638098][ T6998] ? __pfx_generic_map_update_batch+0x10/0x10 [ 107.638120][ T6998] ? __pfx_generic_map_update_batch+0x10/0x10 [ 107.638137][ T6998] bpf_map_do_batch+0x66f/0x6d0 [ 107.638164][ T6998] __sys_bpf+0x4ce/0x4e80 [ 107.638188][ T6998] ? __pfx___sys_bpf+0x10/0x10 [ 107.638206][ T6998] ? find_held_lock+0x2b/0x80 [ 107.638227][ T6998] ? get_pid_task+0xfc/0x250 [ 107.638247][ T6998] ? get_pid_task+0xfc/0x250 [ 107.638272][ T6998] ? proc_fail_nth_write+0x9f/0x220 [ 107.638321][ T6998] ? find_held_lock+0x2b/0x80 [ 107.638346][ T6998] ? rcu_read_lock_any_held+0x6a/0xa0 [ 107.638368][ T6998] ? find_held_lock+0x2b/0x80 [ 107.638387][ T6998] ? ksys_write+0x190/0x250 [ 107.638404][ T6998] ? ksys_write+0x190/0x250 [ 107.638435][ T6998] ? fput+0x79/0x100 [ 107.638457][ T6998] ? __ia32_sys_bpf+0xcc/0x170 [ 107.638474][ T6998] __ia32_sys_bpf+0xcc/0x170 [ 107.638493][ T6998] ? __do_fast_syscall_32+0x98/0x970 [ 107.638521][ T6998] __do_fast_syscall_32+0xe7/0x970 [ 107.638543][ T6998] ? lockdep_hardirqs_on+0x78/0x100 [ 107.638566][ T6998] do_fast_syscall_32+0x32/0x70 [ 107.638590][ T6998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.638610][ T6998] RIP: 0023:0xf7ff7fec [ 107.638633][ T6998] Code: Unable to access opcode bytes at 0xf7ff7fc2. [ 107.638641][ T6998] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 107.638657][ T6998] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000200 [ 107.638667][ T6998] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.638676][ T6998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.638685][ T6998] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 107.638694][ T6998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.638715][ T6998] [ 107.696721][ T7005] gadgetfs: bound to dummy_udc driver [ 108.779017][ T2312] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 108.805474][ C3] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 108.807974][ C3] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 108.810737][ C3] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 108.814465][ C3] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 108.816942][ C3] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 108.819385][ T6964] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -71 [ 108.819445][ C3] usb 6-1: ti_interrupt_callback - nonzero urb status, -71 [ 108.826825][ T34] usb 6-1: USB disconnect, device number 13 [ 108.836026][ T34] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 108.843905][ T34] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 108.852997][ T34] ti_usb_3410_5052 6-1:2.0: device disconnected [ 110.047197][ T5836] usb 5-1: USB disconnect, device number 15 [ 110.054573][ T5836] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 110.062578][ T5836] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 110.066142][ T5836] ti_usb_3410_5052 5-1:2.0: device disconnected [ 121.297942][ T34] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 121.388391][ T58] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 121.450771][ T34] usb 7-1: unable to get BOS descriptor or descriptor too short [ 121.456449][ T34] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 121.462980][ T34] usb 7-1: config 189 has an invalid interface number: 127 but max is 0 [ 121.466554][ T34] usb 7-1: config 189 has no interface number 0 [ 121.472652][ T34] usb 7-1: config 189 interface 127 has no altsetting 0 [ 121.477977][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.480918][ T34] usb 7-1: Product: syz [ 121.484155][ T34] usb 7-1: Manufacturer: syz [ 121.485831][ T34] usb 7-1: SerialNumber: syz [ 121.515779][ T7066] bond1 (unregistering): Released all slaves [ 121.538657][ T58] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 121.542952][ T58] usb 6-1: config 1 interface 0 altsetting 37 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.546215][ T58] usb 6-1: config 1 interface 0 has no altsetting 0 [ 121.553627][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.556242][ T58] usb 6-1: Product: syz [ 121.557618][ T58] usb 6-1: Manufacturer: syz [ 121.559437][ T58] usb 6-1: SerialNumber: syz [ 121.713723][ T34] usbserial_generic 7-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 121.720336][ T34] usbserial_generic 7-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 121.726010][ T34] usbserial_generic 7-1:189.127: device has no bulk endpoints [ 121.731362][ T34] safe_serial 7-1:189.127: safe_serial converter detected [ 121.737213][ T34] safe_serial 7-1:189.127: probe with driver safe_serial failed with error -22 [ 121.746164][ T34] usb 7-1: USB disconnect, device number 19 [ 122.195228][ T58] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 122.206503][ T58] usb 6-1: USB disconnect, device number 14 [ 122.215427][ T58] usblp0: removed [ 122.277940][ T5836] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 122.449966][ T7084] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 122.452908][ T7084] overlayfs: failed to set xattr on upper [ 122.454826][ T7084] overlayfs: ...falling back to redirect_dir=nofollow. [ 122.457084][ T7084] overlayfs: ...falling back to index=off. [ 122.459125][ T7084] overlayfs: conflicting lowerdir path [ 122.603206][ T5836] usb 5-1: unable to get BOS descriptor or descriptor too short [ 123.079378][ T5836] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 123.199544][ T5836] usb 5-1: config 189 has an invalid interface number: 127 but max is 0 [ 123.204608][ T5836] usb 5-1: config 189 has no interface number 0 [ 123.209354][ T5836] usb 5-1: config 189 interface 127 has no altsetting 0 [ 123.213401][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.217291][ T5836] usb 5-1: Product: syz [ 123.218878][ T5836] usb 5-1: Manufacturer: syz [ 123.220448][ T5836] usb 5-1: SerialNumber: syz [ 123.518508][ T1035] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 123.541499][ T5836] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 123.547471][ T5836] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 123.554274][ T5836] usbserial_generic 5-1:189.127: device has no bulk endpoints [ 123.557146][ T5836] safe_serial 5-1:189.127: safe_serial converter detected [ 123.559708][ T5836] safe_serial 5-1:189.127: probe with driver safe_serial failed with error -22 [ 123.566612][ T5836] usb 5-1: USB disconnect, device number 16 [ 123.592564][ T7093] bond1 (unregistering): Released all slaves [ 123.678542][ T1035] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 123.685095][ T1035] usb 6-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.690222][ T1035] usb 6-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.698038][ T1035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.702605][ T1035] usb 6-1: Product: syz [ 123.703934][ T1035] usb 6-1: Manufacturer: syz [ 123.706919][ T1035] usb 6-1: SerialNumber: syz [ 123.715520][ T1035] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 123.723361][ T1035] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 123.728618][ T1035] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 123.917203][ T7089] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 124.317975][ T5836] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 124.440553][ T7108] bond1 (unregistering): Released all slaves [ 124.470876][ T5836] usb 8-1: unable to get BOS descriptor or descriptor too short [ 124.477434][ T5836] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 124.483856][ T5836] usb 8-1: config 189 has an invalid interface number: 127 but max is 0 [ 124.488944][ T5836] usb 8-1: config 189 has no interface number 0 [ 124.493297][ T5836] usb 8-1: config 189 interface 127 has no altsetting 0 [ 124.500522][ T5836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.503896][ T5836] usb 8-1: Product: syz [ 124.505279][ T5836] usb 8-1: Manufacturer: syz [ 124.509099][ T5836] usb 8-1: SerialNumber: syz [ 125.325663][ T7122] netlink: 'syz.2.278': attribute type 1 has an invalid length. [ 125.450347][ T5836] usbserial_generic 8-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 125.532922][ T7125] sch_fq: defrate 4294967295 ignored. [ 125.536774][ T7125] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 125.540181][ T7125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.547816][ T42] audit: type=1800 audit(1786606068.439:1070): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.279" name="name" dev="configfs" ino=12225 res=0 errno=0 [ 125.878919][ T7134] process 'syz.2.280' launched '/dev/fd/10' with NULL argv: empty string added [ 125.879769][ T5836] usbserial_generic 8-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 125.886544][ T5836] usbserial_generic 8-1:189.127: device has no bulk endpoints [ 125.891528][ T5836] safe_serial 8-1:189.127: safe_serial converter detected [ 125.896796][ T5836] safe_serial 8-1:189.127: probe with driver safe_serial failed with error -22 [ 125.902013][ T5836] usb 8-1: USB disconnect, device number 14 [ 125.970745][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 126.105163][ T7139] bond1 (unregistering): Released all slaves [ 126.307501][ T850] usb 6-1: USB disconnect, device number 15 [ 126.328485][ T850] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 126.344951][ T850] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 126.360660][ T850] ti_usb_3410_5052 6-1:2.0: device disconnected [ 126.630537][ T2312] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 126.677119][ T7149] bond0 (unregistering): Released all slaves [ 126.802827][ T2312] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 126.811282][ T2312] usb 5-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 126.821761][ T2312] usb 5-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 126.840806][ T2312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.843356][ T2312] usb 5-1: Product: syz [ 126.851405][ T2312] usb 5-1: Manufacturer: syz [ 126.852912][ T2312] usb 5-1: SerialNumber: syz [ 126.860704][ T2312] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 126.865397][ T2312] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 126.870555][ T2312] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 127.094062][ T7144] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 128.412512][ T7184] sch_fq: defrate 4294967295 ignored. [ 128.419779][ T7184] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 128.425100][ T7184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.430736][ T42] audit: type=1800 audit(1786606071.329:1071): pid=7184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.291" name="name" dev="configfs" ino=14700 res=0 errno=0 [ 128.482091][ T42] audit: type=1326 audit(1786606071.379:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fec code=0x7ffc0000 [ 128.490495][ T42] audit: type=1326 audit(1786606071.389:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7fec code=0x7ffc0000 [ 128.498351][ T42] audit: type=1326 audit(1786606071.389:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.2.294" exe="/syz-executor" sig=0 arch=40000003 syscall=82 compat=1 ip=0xf7ff7fec code=0x7ffc0000 [ 128.546821][ T7197] tmpfs: Cannot change global quota limit on remount [ 128.549395][ T7196] tmpfs: Cannot change global quota limit on remount [ 129.146681][ T7206] bond0 (unregistering): Released all slaves [ 129.425450][ T10] usb 5-1: USB disconnect, device number 17 [ 129.475607][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 129.504994][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 129.522792][ T10] ti_usb_3410_5052 5-1:2.0: device disconnected [ 129.846320][ T7228] bond1 (unregistering): Released all slaves [ 130.143211][ T7232] bond0 (unregistering): Released all slaves [ 130.448235][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 130.545986][ T7253] jffs2: notice: (7253) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.728176][ T5928] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 130.849390][ T850] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 130.898372][ T5928] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.902137][ T5928] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.905410][ T5928] usb 8-1: config 0 has no interfaces? [ 130.907138][ T5928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.913306][ T5928] usb 8-1: config 0 descriptor?? [ 130.937987][ T5814] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 131.028858][ T850] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 131.034108][ T850] usb 5-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.040211][ T850] usb 5-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.048961][ T850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.052554][ T850] usb 5-1: Product: syz [ 131.053864][ T850] usb 5-1: Manufacturer: syz [ 131.055428][ T850] usb 5-1: SerialNumber: syz [ 131.065156][ T850] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 131.070714][ T850] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 131.077458][ T850] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 131.088064][ T5814] usb 7-1: Using ep0 maxpacket: 16 [ 131.093383][ T5814] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 131.098895][ T5814] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.104669][ T5814] usb 7-1: config 0 interface 0 has no altsetting 0 [ 131.110464][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.114209][ T5814] usb 7-1: Product: syz [ 131.115656][ T5814] usb 7-1: Manufacturer: syz [ 131.117241][ T5814] usb 7-1: SerialNumber: syz [ 131.121653][ T5814] usb 7-1: config 0 descriptor?? [ 131.215133][ T10] usb 8-1: USB disconnect, device number 15 [ 131.263083][ T7258] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 131.338660][ C2] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 131.345063][ T5814] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input19 [ 131.354805][ T5814] imon:send_packet: packet tx failed (-71) [ 131.368139][ T5814] imon 7-1:0.0: panel buttons/knobs setup failed [ 131.408020][ T5814] rc_core: IR keymap rc-imon-pad not found [ 131.410540][ T5814] Registered IR keymap rc-empty [ 131.412837][ T5814] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 131.417287][ T5814] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 131.421813][ T5814] imon:send_packet: packet tx failed (-71) [ 131.438076][ T5814] imon 7-1:0.0: remote input dev register failed [ 131.440989][ T5814] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 131.457510][ T5814] imon 7-1:0.0: unable to initialize intf0, err 0 [ 131.460392][ T5814] imon:imon_probe: failed to initialize context! [ 131.463047][ T5814] imon 7-1:0.0: unable to register, err -19 [ 131.471518][ T5814] usb 7-1: USB disconnect, device number 20 [ 131.827997][ T850] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 131.848094][ T5814] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 131.851421][ T5731] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 131.851469][ T7291] netlink: 'syz.3.311': attribute type 29 has an invalid length. [ 131.888078][ T5876] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.891032][ T5876] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.893854][ T5876] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.896739][ T5876] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.978110][ T850] usb 6-1: Using ep0 maxpacket: 16 [ 131.980745][ T850] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 131.984723][ T850] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.988503][ T850] usb 6-1: config 0 interface 0 has no altsetting 0 [ 131.992417][ T850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.995209][ T850] usb 6-1: Product: syz [ 131.996670][ T850] usb 6-1: Manufacturer: syz [ 131.998292][ T850] usb 6-1: SerialNumber: syz [ 132.003957][ T850] usb 6-1: config 0 descriptor?? [ 132.009476][ T5814] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 132.014327][ T5814] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 132.018324][ T5814] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 132.021674][ T5814] usb 7-1: config 0 interface 0 has no altsetting 0 [ 132.025300][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.027962][ T5814] usb 7-1: Product: syz [ 132.029283][ T5814] usb 7-1: Manufacturer: syz [ 132.030715][ T5814] usb 7-1: SerialNumber: syz [ 132.033825][ T5814] usb 7-1: config 0 descriptor?? [ 132.035887][ T7264] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.214586][ C3] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 132.222482][ T850] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input21 [ 132.234366][ T850] imon:send_packet: packet tx failed (-71) [ 132.241903][ C2] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 132.245378][ T5814] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input23 [ 132.257981][ T850] imon 6-1:0.0: panel buttons/knobs setup failed [ 132.297956][ T850] rc_core: IR keymap rc-imon-pad not found [ 132.300508][ T850] Registered IR keymap rc-empty [ 132.302496][ T850] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 132.305923][ T850] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 132.310601][ T850] imon:send_packet: packet tx failed (-71) [ 132.328010][ T850] imon 6-1:0.0: remote input dev register failed [ 132.330843][ T850] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 132.343025][ T850] imon 6-1:0.0: unable to initialize intf0, err 0 [ 132.345749][ T850] imon:imon_probe: failed to initialize context! [ 132.348803][ T850] imon 6-1:0.0: unable to register, err -19 [ 132.362621][ T850] usb 6-1: USB disconnect, device number 16 [ 132.379548][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.383555][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.497955][ T5814] rc_core: IR keymap rc-imon-pad not found [ 132.499900][ T5814] Registered IR keymap rc-empty [ 132.501795][ T5814] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 132.505090][ T5814] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 132.653481][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 132.658899][ T5814] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 132.663548][ T5814] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input24 [ 132.678731][ T5814] imon 7-1:0.0: iMON device (15c2:0045, intf0) on usb<7:21> initialized [ 132.747992][ T850] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 132.844676][ T7264] imon:lcd_write: invalid payload size: 7 (expected 8) [ 132.849431][ T58] usb 7-1: USB disconnect, device number 21 [ 132.919133][ T850] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 132.925037][ T850] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 132.930669][ T850] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 132.938472][ T850] usb 6-1: config 0 interface 0 has no altsetting 0 [ 132.946765][ T850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.951014][ T850] usb 6-1: Product: syz [ 132.951032][ T850] usb 6-1: Manufacturer: syz [ 132.951043][ T850] usb 6-1: SerialNumber: syz [ 132.956229][ T850] usb 6-1: config 0 descriptor?? [ 132.958324][ T7287] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 133.031981][ T7303] bond1 (unregistering): Released all slaves [ 133.165248][ C3] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 133.171107][ T850] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input25 [ 133.418326][ T850] rc_core: IR keymap rc-imon-pad not found [ 133.420714][ T850] Registered IR keymap rc-empty [ 133.422371][ T850] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 133.426388][ T850] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 133.568729][ T850] imon:send_packet: packet tx failed (-71) [ 133.588047][ T850] imon 6-1:0.0: remote input dev register failed [ 133.590797][ T850] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 133.604135][ T850] imon 6-1:0.0: unable to initialize intf0, err 0 [ 133.607006][ T850] imon:imon_probe: failed to initialize context! [ 133.609439][ T10] usb 5-1: USB disconnect, device number 18 [ 133.610223][ T850] imon 6-1:0.0: unable to register, err -19 [ 133.619104][ T850] usb 6-1: USB disconnect, device number 17 [ 133.629003][ T5814] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 133.644370][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 133.663306][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 133.669438][ T10] ti_usb_3410_5052 5-1:2.0: device disconnected [ 133.784254][ T5814] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.794772][ T5814] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.798464][ T5814] usb 7-1: config 0 has no interfaces? [ 133.800659][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.812637][ T5814] usb 7-1: config 0 descriptor?? [ 134.462593][ T10] usb 7-1: USB disconnect, device number 22 [ 134.565442][ T7321] netlink: 'syz.1.317': attribute type 1 has an invalid length. [ 135.696472][ T7348] netlink: 'syz.2.326': attribute type 10 has an invalid length. [ 135.701596][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.704849][ T7348] bridge0: port 2(bridge_slave_1) entered listening state [ 135.707950][ T7348] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.710245][ T7348] bridge0: port 1(bridge_slave_0) entered listening state [ 135.717581][ T7348] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 135.721799][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 135.724652][ T7348] bridge_slave_1: left allmulticast mode [ 135.726750][ T7348] bridge_slave_1: left promiscuous mode [ 135.731386][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.743278][ T7348] bridge_slave_0: left allmulticast mode [ 135.745167][ T7348] bridge_slave_0: left promiscuous mode [ 135.747086][ T7348] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.758513][ T7348] bond0: (slave bridge0): Releasing backup interface [ 135.891668][ T7355] bond2 (unregistering): Released all slaves [ 135.949290][ T10] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 135.982131][ T7357] bond0 (unregistering): Released all slaves [ 136.117961][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 136.120662][ T10] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 136.125311][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.128726][ T5836] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 136.131450][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 136.135881][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.138966][ T10] usb 8-1: Product: syz [ 136.140659][ T10] usb 8-1: Manufacturer: syz [ 136.143725][ T10] usb 8-1: SerialNumber: syz [ 136.148783][ T10] usb 8-1: config 0 descriptor?? [ 136.291152][ T5836] usb 7-1: unable to get BOS descriptor or descriptor too short [ 136.293640][ T5836] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 136.299675][ T5836] usb 7-1: config 189 has an invalid interface number: 127 but max is 0 [ 136.302288][ T5836] usb 7-1: config 189 has no interface number 0 [ 136.304258][ T5836] usb 7-1: config 189 interface 127 has no altsetting 0 [ 136.311709][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.315546][ T5836] usb 7-1: Product: syz [ 136.317131][ T5836] usb 7-1: Manufacturer: syz [ 136.319702][ T5836] usb 7-1: SerialNumber: syz [ 136.360056][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 136.364332][ T10] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input27 [ 136.406138][ T10] imon:send_packet: packet tx failed (-71) [ 136.429805][ T10] imon 8-1:0.0: panel buttons/knobs setup failed [ 136.487969][ T10] rc_core: IR keymap rc-imon-pad not found [ 136.489898][ T10] Registered IR keymap rc-empty [ 136.491545][ T10] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 136.494718][ T10] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 136.498140][ T10] imon:send_packet: packet tx failed (-71) [ 136.528088][ T10] imon 8-1:0.0: remote input dev register failed [ 136.530454][ T10] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 136.540473][ T5836] usbserial_generic 7-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 136.545979][ T5836] usbserial_generic 7-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 136.553677][ T5836] usbserial_generic 7-1:189.127: device has no bulk endpoints [ 136.560637][ T5836] safe_serial 7-1:189.127: safe_serial converter detected [ 136.564861][ T10] imon 8-1:0.0: unable to initialize intf0, err 0 [ 136.573071][ T10] imon:imon_probe: failed to initialize context! [ 136.575184][ T10] imon 8-1:0.0: unable to register, err -19 [ 136.577574][ T5836] safe_serial 7-1:189.127: probe with driver safe_serial failed with error -22 [ 136.590011][ T5836] usb 7-1: USB disconnect, device number 23 [ 136.592241][ T10] usb 8-1: USB disconnect, device number 16 [ 136.928085][ T10] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 137.078371][ T10] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 137.082058][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 137.086500][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 137.090153][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 137.095797][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.098986][ T10] usb 8-1: Product: syz [ 137.100374][ T10] usb 8-1: Manufacturer: syz [ 137.101799][ T10] usb 8-1: SerialNumber: syz [ 137.176527][ T7379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.331'. [ 137.199524][ T10] usb 8-1: config 0 descriptor?? [ 137.206112][ T7346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.362257][ T7382] syzkaller0: entered promiscuous mode [ 137.364068][ T7382] syzkaller0: entered allmulticast mode [ 137.416945][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 137.428797][ T10] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input29 [ 137.466053][ T7386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.334'. [ 137.707964][ T10] rc_core: IR keymap rc-imon-pad not found [ 137.831365][ T7401] bond2 (unregistering): Released all slaves [ 138.098264][ T10] Registered IR keymap rc-empty [ 138.467721][ T10] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 138.499392][ T7405] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 138.502814][ T7405] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 138.506464][ T7405] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 138.543743][ T7406] pim6reg1: entered promiscuous mode [ 138.545569][ T7406] pim6reg1: entered allmulticast mode [ 138.551898][ T10] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 138.557476][ T10] imon:send_packet: packet tx failed (-71) [ 138.578110][ T10] imon 8-1:0.0: remote input dev register failed [ 138.582204][ T10] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 138.603394][ T10] imon 8-1:0.0: unable to initialize intf0, err 0 [ 138.606295][ T10] imon:imon_probe: failed to initialize context! [ 138.608544][ T10] imon 8-1:0.0: unable to register, err -19 [ 138.614880][ T10] usb 8-1: USB disconnect, device number 17 [ 139.364328][ T7429] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 139.869227][ T7436] usb usb8: usbfs: process 7436 (syz.3.344) did not claim interface 0 before use [ 139.891156][ T7436] syzkaller0: entered promiscuous mode [ 139.893164][ T7436] syzkaller0: entered allmulticast mode [ 139.978198][ T5878] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 140.138045][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 140.141955][ T5878] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 140.148591][ T5878] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.153939][ T5878] usb 6-1: config 0 interface 0 has no altsetting 0 [ 140.160165][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.163597][ T5878] usb 6-1: Product: syz [ 140.165312][ T5878] usb 6-1: Manufacturer: syz [ 140.170713][ T5878] usb 6-1: SerialNumber: syz [ 140.175897][ T5878] usb 6-1: config 0 descriptor?? [ 140.329797][ T7444] bond1 (unregistering): Released all slaves [ 140.384860][ C2] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 140.395219][ T5878] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input31 [ 140.406001][ T5878] imon:send_packet: packet tx failed (-71) [ 140.435400][ T7446] bond2 (unregistering): Released all slaves [ 140.438801][ T5878] imon 6-1:0.0: panel buttons/knobs setup failed [ 140.488167][ T5878] rc_core: IR keymap rc-imon-pad not found [ 140.499841][ T5878] Registered IR keymap rc-empty [ 140.511421][ T5878] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 140.524547][ T5878] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 140.533156][ T5878] imon:send_packet: packet tx failed (-71) [ 140.568088][ T5878] imon 6-1:0.0: remote input dev register failed [ 140.570236][ T5878] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 140.583715][ T5878] imon 6-1:0.0: unable to initialize intf0, err 0 [ 140.586390][ T5878] imon:imon_probe: failed to initialize context! [ 140.589525][ T5878] imon 6-1:0.0: unable to register, err -19 [ 140.600991][ T5878] usb 6-1: USB disconnect, device number 18 [ 140.701526][ T42] audit: type=1800 audit(1786606083.599:1075): pid=7461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.351" name="zoned" dev="configfs" ino=14989 res=0 errno=0 [ 140.709619][ T42] audit: type=1800 audit(1786606083.599:1076): pid=7461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.351" name="zone_nr_conv" dev="configfs" ino=14990 res=0 errno=0 [ 140.779763][ T42] audit: type=1800 audit(1786606083.669:1077): pid=7462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.351" name="zoned" dev="configfs" ino=14998 res=0 errno=0 [ 140.807244][ T42] audit: type=1800 audit(1786606083.689:1078): pid=7462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.351" name="power" dev="configfs" ino=14999 res=0 errno=0 [ 140.991644][ T34] IPVS: starting estimator thread 0... [ 141.030493][ T7464] netlink: 64 bytes leftover after parsing attributes in process `syz.3.352'. [ 141.037924][ T5878] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 141.091136][ T7465] IPVS: using max 44 ests per chain, 105600 per kthread [ 141.150336][ T7470] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 141.153997][ T7470] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 141.157476][ T7470] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 141.202538][ T5878] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 141.223909][ T7474] pim6reg1: entered promiscuous mode [ 141.226104][ T7474] pim6reg1: entered allmulticast mode [ 141.248338][ T42] audit: type=1326 audit(1786606084.139:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.0.356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 141.251517][ T5878] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 141.268678][ T42] audit: type=1326 audit(1786606084.149:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.0.356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 141.276855][ T42] audit: type=1326 audit(1786606084.149:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.0.356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 141.277147][ T5878] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 141.285904][ T42] audit: type=1326 audit(1786606084.139:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.0.356" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 141.293043][ T5878] usb 6-1: config 0 interface 0 has no altsetting 0 [ 141.298285][ T42] audit: type=1326 audit(1786606084.149:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.0.356" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71574eb code=0x7ffc0000 [ 141.305654][ T42] audit: type=1326 audit(1786606084.159:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.0.356" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf701efec code=0x7ffc0000 [ 141.318433][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.322055][ T5878] usb 6-1: Product: syz [ 141.323630][ T5878] usb 6-1: Manufacturer: syz [ 141.325298][ T5878] usb 6-1: SerialNumber: syz [ 141.380400][ T5878] usb 6-1: config 0 descriptor?? [ 141.401112][ T7434] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.702698][ C2] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 141.753775][ T5878] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input33 [ 142.169416][ T5878] rc_core: IR keymap rc-imon-pad not found [ 142.171327][ T5878] Registered IR keymap rc-empty [ 142.173399][ T5878] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 142.176603][ T5878] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 142.203029][ T5878] imon:send_packet: packet tx failed (-71) [ 142.266035][ T5878] imon 6-1:0.0: remote input dev register failed [ 142.827928][ T5928] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 142.979886][ T5928] usb 7-1: unable to get BOS descriptor or descriptor too short [ 142.982496][ T5928] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 142.986352][ T5928] usb 7-1: config 189 has an invalid interface number: 127 but max is 0 [ 142.989641][ T5928] usb 7-1: config 189 has no interface number 0 [ 142.991746][ T5928] usb 7-1: config 189 interface 127 has no altsetting 0 [ 142.995763][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.998719][ T5928] usb 7-1: Product: syz [ 143.000210][ T5928] usb 7-1: Manufacturer: syz [ 143.001715][ T5928] usb 7-1: SerialNumber: syz [ 143.177425][ T5878] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 143.199731][ T7509] bond2 (unregistering): Released all slaves [ 143.214101][ T5878] imon 6-1:0.0: unable to initialize intf0, err 0 [ 143.217772][ T5928] usbserial_generic 7-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 143.218346][ T5878] imon:imon_probe: failed to initialize context! [ 143.230096][ T5878] imon 6-1:0.0: unable to register, err -19 [ 143.236268][ T5928] usbserial_generic 7-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 143.245833][ T5928] usbserial_generic 7-1:189.127: device has no bulk endpoints [ 143.277262][ T5928] safe_serial 7-1:189.127: safe_serial converter detected [ 143.278513][ T5878] usb 6-1: USB disconnect, device number 19 [ 143.288703][ T5928] safe_serial 7-1:189.127: probe with driver safe_serial failed with error -22 [ 143.304482][ T5928] usb 7-1: USB disconnect, device number 24 [ 144.057935][ T5928] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 144.218040][ T5928] usb 7-1: Using ep0 maxpacket: 16 [ 144.221578][ T5928] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 144.230721][ T5928] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.236442][ T5928] usb 7-1: config 0 interface 0 has no altsetting 0 [ 144.242425][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.245809][ T5928] usb 7-1: Product: syz [ 144.247766][ T5928] usb 7-1: Manufacturer: syz [ 144.250875][ T5928] usb 7-1: SerialNumber: syz [ 144.257070][ T5928] usb 7-1: config 0 descriptor?? [ 144.392920][ T7553] FAULT_INJECTION: forcing a failure. [ 144.392920][ T7553] name failslab, interval 1, probability 0, space 0, times 0 [ 144.406822][ T7553] CPU: 0 UID: 0 PID: 7553 Comm: syz.0.376 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.406842][ T7553] Tainted: [L]=SOFTLOCKUP [ 144.406846][ T7553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.406853][ T7553] Call Trace: [ 144.406857][ T7553] [ 144.406862][ T7553] dump_stack_lvl+0x100/0x190 [ 144.406880][ T7553] should_fail_ex.cold+0x5/0xa [ 144.406893][ T7553] should_failslab+0xc2/0x120 [ 144.406911][ T7553] __kmalloc_noprof+0xfc/0x820 [ 144.406925][ T7553] ? trace_kmem_cache_alloc+0xdd/0x100 [ 144.406941][ T7553] ? lsm_blob_alloc+0x68/0x90 [ 144.406961][ T7553] lsm_blob_alloc+0x68/0x90 [ 144.406977][ T7553] security_sk_alloc+0x2d/0x290 [ 144.406990][ T7553] sk_prot_alloc+0x1d1/0x2a0 [ 144.407009][ T7553] sk_alloc+0x36/0xe80 [ 144.407024][ T7553] inet6_create+0x385/0x12b0 [ 144.407052][ T7553] ? inet6_create+0x7f/0x12b0 [ 144.407066][ T7553] __sock_create+0x339/0x860 [ 144.407080][ T7553] mptcp_subflow_create_socket+0xec/0xa30 [ 144.407103][ T7553] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 144.407114][ T7553] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 144.407128][ T7553] ? lockdep_hardirqs_on+0x78/0x100 [ 144.407142][ T7553] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 144.407156][ T7553] __mptcp_nmpc_sk+0x17f/0x880 [ 144.407171][ T7553] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 144.407188][ T7553] mptcp_connect+0x7e/0xaf0 [ 144.407202][ T7553] __inet_stream_connect+0x208/0xfa0 [ 144.407225][ T7553] ? __pfx___schedule+0x10/0x10 [ 144.407240][ T7553] ? __pfx___inet_stream_connect+0x10/0x10 [ 144.407255][ T7553] ? preempt_schedule_thunk+0x16/0x40 [ 144.407272][ T7553] ? __pfx_inet_stream_connect+0x10/0x10 [ 144.407286][ T7553] ? preempt_schedule_common+0x42/0xc0 [ 144.407301][ T7553] ? preempt_schedule_thunk+0x16/0x40 [ 144.407319][ T7553] ? __pfx_inet_stream_connect+0x10/0x10 [ 144.407334][ T7553] inet_stream_connect+0x57/0xa0 [ 144.407349][ T7553] __sys_connect_file+0x141/0x1a0 [ 144.407364][ T7553] __sys_connect+0x141/0x170 [ 144.407377][ T7553] ? __pfx___sys_connect+0x10/0x10 [ 144.407389][ T7553] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.407410][ T7553] ? ksys_write+0x1ac/0x250 [ 144.407420][ T7553] ? __pfx_ksys_write+0x10/0x10 [ 144.407432][ T7553] __ia32_sys_connect+0x71/0xb0 [ 144.407444][ T7553] ? lockdep_hardirqs_on+0x78/0x100 [ 144.407458][ T7553] __do_fast_syscall_32+0xe7/0x970 [ 144.407488][ T7553] ? lockdep_hardirqs_on+0x78/0x100 [ 144.407504][ T7553] do_fast_syscall_32+0x32/0x70 [ 144.407519][ T7553] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.407534][ T7553] RIP: 0023:0xf701efec [ 144.407548][ T7553] Code: Unable to access opcode bytes at 0xf701efc2. [ 144.407552][ T7553] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 144.407563][ T7553] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 144.407570][ T7553] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 144.407576][ T7553] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.407582][ T7553] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 144.407588][ T7553] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.407601][ T7553] [ 144.523030][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 144.526101][ T5928] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input35 [ 144.537770][ T5928] imon:send_packet: packet tx failed (-71) [ 144.557934][ T5928] imon 7-1:0.0: panel buttons/knobs setup failed [ 144.774267][ T7571] bond2 (unregistering): Released all slaves [ 144.888130][ T34] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 145.049862][ T34] usb 8-1: unable to get BOS descriptor or descriptor too short [ 145.054321][ T34] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 145.061347][ T34] usb 8-1: config 189 has an invalid interface number: 127 but max is 0 [ 145.064715][ T34] usb 8-1: config 189 has no interface number 0 [ 145.068033][ T34] usb 8-1: config 189 interface 127 has no altsetting 0 [ 145.072035][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.074660][ T34] usb 8-1: Product: syz [ 145.076008][ T34] usb 8-1: Manufacturer: syz [ 145.076779][ T5928] rc_core: IR keymap rc-imon-pad not found [ 145.077546][ T34] usb 8-1: SerialNumber: syz [ 145.554067][ T5928] Registered IR keymap rc-empty [ 145.555763][ T5928] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 145.641441][ T34] usbserial_generic 8-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 145.647773][ T34] usbserial_generic 8-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 145.651394][ T34] usbserial_generic 8-1:189.127: device has no bulk endpoints [ 145.654107][ T34] safe_serial 8-1:189.127: safe_serial converter detected [ 145.656660][ T34] safe_serial 8-1:189.127: probe with driver safe_serial failed with error -22 [ 145.663421][ T34] usb 8-1: USB disconnect, device number 18 [ 145.987183][ T5928] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 145.991258][ T5928] imon:send_packet: packet tx failed (-71) [ 146.007955][ T5928] imon 7-1:0.0: remote input dev register failed [ 146.009925][ T5928] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 146.087941][ T5928] imon 7-1:0.0: unable to initialize intf0, err 0 [ 146.092467][ T5928] imon:imon_probe: failed to initialize context! [ 146.094348][ T5928] imon 7-1:0.0: unable to register, err -19 [ 146.100943][ T5928] usb 7-1: USB disconnect, device number 25 [ 146.406687][ T7583] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 146.408706][ T7583] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 146.425425][ T7583] vhci_hcd vhci_hcd.0: Device attached [ 146.487982][ T5928] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 146.495827][ T7586] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 146.660811][ T7590] vhci_hcd: connection closed [ 146.664736][ T12] vhci_hcd vhci_hcd.0: stop threads [ 146.668890][ T12] vhci_hcd vhci_hcd.0: release socket [ 146.669271][ T5928] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 146.672662][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 146.690906][ T5928] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 146.701732][ T5928] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 146.712674][ T5928] usb 7-1: config 0 interface 0 has no altsetting 0 [ 146.725471][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.728122][ T5928] usb 7-1: Product: syz [ 146.729547][ T5928] usb 7-1: Manufacturer: syz [ 146.731472][ T5928] usb 7-1: SerialNumber: syz [ 146.753635][ T5928] usb 7-1: config 0 descriptor?? [ 146.762393][ T7545] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 146.852929][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 146.872582][ T5928] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input37 [ 146.899119][ T5928] imon:send_packet: packet tx failed (-71) [ 146.917933][ T5928] imon 7-1:0.0: panel buttons/knobs setup failed [ 147.023826][ T7604] FAULT_INJECTION: forcing a failure. [ 147.023826][ T7604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.030106][ T7604] CPU: 2 UID: 0 PID: 7604 Comm: syz.3.388 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.030125][ T7604] Tainted: [L]=SOFTLOCKUP [ 147.030129][ T7604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.030136][ T7604] Call Trace: [ 147.030140][ T7604] [ 147.030144][ T7604] dump_stack_lvl+0x100/0x190 [ 147.030162][ T7604] should_fail_ex.cold+0x5/0xa [ 147.030175][ T7604] _copy_to_user+0x32/0xd0 [ 147.030194][ T7604] msr_read+0x144/0x240 [ 147.030219][ T7604] ? __pfx_msr_read+0x10/0x10 [ 147.030229][ T7604] ? bpf_lsm_file_permission+0x9/0x10 [ 147.030240][ T7604] ? security_file_permission+0x76/0x210 [ 147.030257][ T7604] ? rw_verify_area+0xce/0x6d0 [ 147.030273][ T7604] ? __pfx_msr_read+0x10/0x10 [ 147.030283][ T7604] vfs_read+0x1e4/0xb40 [ 147.030294][ T7604] ? __pfx_vfs_read+0x10/0x10 [ 147.030303][ T7604] ? find_held_lock+0x2b/0x80 [ 147.030317][ T7604] ? __fget_files+0x215/0x3d0 [ 147.030328][ T7604] ? __fget_files+0x215/0x3d0 [ 147.030340][ T7604] ? __fget_files+0x21f/0x3d0 [ 147.030353][ T7604] ksys_read+0x12a/0x250 [ 147.030363][ T7604] ? __pfx_ksys_read+0x10/0x10 [ 147.030372][ T7604] ? ksys_write+0x1ac/0x250 [ 147.030381][ T7604] ? __pfx_ksys_write+0x10/0x10 [ 147.030397][ T7604] __do_fast_syscall_32+0xe7/0x970 [ 147.030423][ T7604] ? lockdep_hardirqs_on+0x78/0x100 [ 147.030445][ T7604] do_fast_syscall_32+0x32/0x70 [ 147.030470][ T7604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.030494][ T7604] RIP: 0023:0xf700efec [ 147.030514][ T7604] Code: Unable to access opcode bytes at 0xf700efc2. [ 147.030521][ T7604] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 147.030532][ T7604] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080019680 [ 147.030539][ T7604] RDX: 0000000000018ff8 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.030545][ T7604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.030551][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.030557][ T7604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.030570][ T7604] [ 147.088063][ T5928] rc_core: IR keymap rc-imon-pad not found [ 147.104399][ T5928] Registered IR keymap rc-empty [ 147.106367][ T5928] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 147.113574][ T5928] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 147.116997][ T5928] imon:send_packet: packet tx failed (-71) [ 147.140655][ T5928] imon 7-1:0.0: remote input dev register failed [ 147.144561][ T5928] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 147.499921][ T5928] imon 7-1:0.0: unable to initialize intf0, err 0 [ 147.502017][ T5928] imon:imon_probe: failed to initialize context! [ 147.504006][ T5928] imon 7-1:0.0: unable to register, err -19 [ 147.510716][ T5928] usb 7-1: USB disconnect, device number 26 [ 149.081723][ T7654] syzkaller0: entered promiscuous mode [ 149.086137][ T7654] syzkaller0: entered allmulticast mode [ 149.100274][ T7654] tipc: Enabled bearer , priority 0 [ 149.298105][ T5878] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 149.378092][ T2312] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 149.448054][ T5878] usb 8-1: Using ep0 maxpacket: 8 [ 149.466030][ T5878] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.492527][ T5878] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 149.507070][ T5878] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.518952][ T5878] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.521992][ T5878] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.524948][ T5878] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.531405][ T5878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.580766][ T2312] usb 6-1: unable to get BOS descriptor or descriptor too short [ 149.600248][ T2312] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 149.622110][ T2312] usb 6-1: config 189 has an invalid interface number: 127 but max is 0 [ 149.634493][ T2312] usb 6-1: config 189 has no interface number 0 [ 149.646544][ T2312] usb 6-1: config 189 interface 127 has no altsetting 0 [ 149.658419][ T7668] bond2 (unregistering): Released all slaves [ 149.674678][ T2312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.680347][ T2312] usb 6-1: Product: syz [ 149.689714][ T2312] usb 6-1: Manufacturer: syz [ 149.697171][ T2312] usb 6-1: SerialNumber: syz [ 150.002712][ T5878] usb 8-1: usb_control_msg returned -32 [ 150.022430][ T5878] usbtmc 8-1:16.0: can't read capabilities [ 150.119228][ T55] tipc: Node number set to 2026989357 [ 150.455427][ T2312] usbserial_generic 6-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 150.494859][ T2312] usbserial_generic 6-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 150.532014][ T2312] usbserial_generic 6-1:189.127: device has no bulk endpoints [ 150.552465][ T2312] safe_serial 6-1:189.127: safe_serial converter detected [ 150.573183][ T2312] safe_serial 6-1:189.127: probe with driver safe_serial failed with error -22 [ 150.662525][ T2312] usb 6-1: USB disconnect, device number 20 [ 150.749584][ T7684] usbtmc 8-1:16.0: usb_clear_halt returned -32 [ 150.767190][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 150.844617][ T7680] bond1 (unregistering): Released all slaves [ 150.912826][ T7684] bridge_slave_1: left allmulticast mode [ 150.915170][ T7684] bridge_slave_1: left promiscuous mode [ 150.919423][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.941295][ T7684] bridge_slave_0: left allmulticast mode [ 150.943681][ T7684] bridge_slave_0: left promiscuous mode [ 150.948458][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.629136][ T7699] syzkaller1: entered promiscuous mode [ 151.631018][ T7699] syzkaller1: entered allmulticast mode [ 151.641645][ T7699] batman_adv: batadv0: Adding interface: veth0 [ 151.643694][ T7699] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.651862][ T7699] batman_adv: batadv0: Interface activated: veth0 [ 152.119590][ T55] usb 8-1: USB disconnect, device number 19 [ 152.558013][ T55] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 152.733154][ T55] usb 8-1: unable to get BOS descriptor or descriptor too short [ 152.735787][ T55] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 152.740099][ T55] usb 8-1: config 189 has an invalid interface number: 127 but max is 0 [ 152.743354][ T55] usb 8-1: config 189 has no interface number 0 [ 152.745954][ T55] usb 8-1: config 189 interface 127 has no altsetting 0 [ 152.750526][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.753832][ T55] usb 8-1: Product: syz [ 152.755577][ T55] usb 8-1: Manufacturer: syz [ 152.757153][ T55] usb 8-1: SerialNumber: syz [ 153.260759][ T55] usbserial_generic 8-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 153.283771][ T55] usbserial_generic 8-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 153.301160][ T55] usbserial_generic 8-1:189.127: device has no bulk endpoints [ 153.312699][ T55] safe_serial 8-1:189.127: safe_serial converter detected [ 153.322152][ T55] safe_serial 8-1:189.127: probe with driver safe_serial failed with error -22 [ 153.335370][ T55] usb 8-1: USB disconnect, device number 20 [ 153.537972][ T5878] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 153.638110][ T5836] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 153.708106][ T5878] usb 7-1: Using ep0 maxpacket: 16 [ 153.710212][ T5878] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 153.713930][ T5878] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.717446][ T5878] usb 7-1: config 0 interface 0 has no altsetting 0 [ 153.721420][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.723953][ T5878] usb 7-1: Product: syz [ 153.725267][ T5878] usb 7-1: Manufacturer: syz [ 153.726718][ T5878] usb 7-1: SerialNumber: syz [ 153.729743][ T5878] usb 7-1: config 0 descriptor?? [ 153.955309][ C2] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 154.000866][ T5878] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input39 [ 154.019859][ T5878] imon:send_packet: packet tx failed (-71) [ 154.037902][ T5878] imon 7-1:0.0: panel buttons/knobs setup failed [ 154.088053][ T5878] rc_core: IR keymap rc-imon-pad not found [ 154.098023][ T5878] Registered IR keymap rc-empty [ 154.104502][ T5878] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 154.108362][ T5836] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 154.120719][ T5878] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 154.135322][ T5878] imon:send_packet: packet tx failed (-71) [ 154.158452][ T5878] imon 7-1:0.0: remote input dev register failed [ 154.163280][ T5878] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 154.187810][ T5836] usb 6-1: config 1 interface 0 altsetting 37 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.190990][ T5836] usb 6-1: config 1 interface 0 has no altsetting 0 [ 154.194682][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.197411][ T5836] usb 6-1: Product: syz [ 154.198880][ T5836] usb 6-1: Manufacturer: syz [ 154.200425][ T5836] usb 6-1: SerialNumber: syz [ 154.216326][ T5878] imon 7-1:0.0: unable to initialize intf0, err 0 [ 154.222915][ T5878] imon:imon_probe: failed to initialize context! [ 154.224988][ T5878] imon 7-1:0.0: unable to register, err -19 [ 154.250820][ T5878] usb 7-1: USB disconnect, device number 27 [ 154.516997][ T5836] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 154.549375][ T5878] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 154.698455][ T5878] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 154.703032][ T5878] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 154.706784][ T5878] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 154.710460][ T5878] usb 7-1: config 0 interface 0 has no altsetting 0 [ 154.714611][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.717327][ T5878] usb 7-1: Product: syz [ 154.718924][ T5878] usb 7-1: Manufacturer: syz [ 154.720891][ T5878] usb 7-1: SerialNumber: syz [ 154.723901][ T5878] usb 7-1: config 0 descriptor?? [ 154.728039][ T7740] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.100705][ C2] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 155.108009][ T5878] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input41 [ 155.122771][ T5878] imon:send_packet: packet tx failed (-71) [ 155.138118][ T5878] imon 7-1:0.0: panel buttons/knobs setup failed [ 155.207030][ T5836] usb 6-1: USB disconnect, device number 21 [ 155.210661][ T5836] usblp0: removed [ 155.247929][ T5878] rc_core: IR keymap rc-imon-pad not found [ 155.249829][ T5878] Registered IR keymap rc-empty [ 155.251378][ T5878] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 155.254495][ T5878] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 155.263604][ T5878] imon:send_packet: packet tx failed (-71) [ 155.278128][ T5878] imon 7-1:0.0: remote input dev register failed [ 155.280564][ T5878] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 155.302352][ T5878] imon 7-1:0.0: unable to initialize intf0, err 0 [ 155.304526][ T5878] imon:imon_probe: failed to initialize context! [ 155.307009][ T5878] imon 7-1:0.0: unable to register, err -19 [ 155.323117][ T5878] usb 7-1: USB disconnect, device number 28 [ 155.541130][ T5836] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 155.740290][ T5836] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 155.763799][ T5836] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 155.783043][ T5836] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 155.800525][ T5836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.803237][ T5836] usb 6-1: Product: syz [ 155.804659][ T5836] usb 6-1: Manufacturer: syz [ 155.806280][ T5836] usb 6-1: SerialNumber: syz [ 155.842561][ T5836] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 155.861609][ T5836] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 155.897719][ T5836] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 156.646959][ T42] kauditd_printk_skb: 96 callbacks suppressed [ 156.646973][ T42] audit: type=1800 audit(1786606099.539:1181): pid=7787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.427" name="zoned" dev="configfs" ino=15287 res=0 errno=0 [ 156.878036][ T5878] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 157.030361][ T5878] usb 7-1: unable to get BOS descriptor or descriptor too short [ 157.033953][ T5878] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 157.040954][ T5878] usb 7-1: config 189 has an invalid interface number: 127 but max is 0 [ 157.044895][ T5878] usb 7-1: config 189 has no interface number 0 [ 157.047758][ T5878] usb 7-1: config 189 interface 127 has no altsetting 0 [ 157.053579][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.057391][ T5878] usb 7-1: Product: syz [ 157.060964][ T5878] usb 7-1: Manufacturer: syz [ 157.063081][ T5878] usb 7-1: SerialNumber: syz [ 157.208005][ T2312] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 157.277020][ T5878] usbserial_generic 7-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 157.280914][ T5878] usbserial_generic 7-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 157.284577][ T5878] usbserial_generic 7-1:189.127: device has no bulk endpoints [ 157.287329][ T5878] safe_serial 7-1:189.127: safe_serial converter detected [ 157.289604][ T5878] safe_serial 7-1:189.127: probe with driver safe_serial failed with error -22 [ 157.293943][ T5878] usb 7-1: USB disconnect, device number 29 [ 157.361097][ T2312] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 157.364843][ T2312] usb 8-1: config 1 interface 0 altsetting 37 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.368125][ T2312] usb 8-1: config 1 interface 0 has no altsetting 0 [ 157.371723][ T2312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.374328][ T2312] usb 8-1: Product: syz [ 157.375687][ T2312] usb 8-1: Manufacturer: syz [ 157.377235][ T2312] usb 8-1: SerialNumber: syz [ 157.495586][ T5836] usb 6-1: USB disconnect, device number 22 [ 157.505798][ T5836] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 157.513534][ T5836] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 157.518206][ T5836] ti_usb_3410_5052 6-1:2.0: device disconnected [ 157.537394][ T7802] tipc: New replicast peer: 255.255.255.255 [ 157.542068][ T7802] tipc: Enabled bearer , priority 10 [ 157.551595][ T7802] serio: Serial port ptm0 [ 157.603762][ T2312] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 157.610611][ T2312] usb 8-1: USB disconnect, device number 21 [ 157.618977][ T2312] usblp0: removed [ 157.984986][ T2312] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 158.138078][ T2312] usb 8-1: Using ep0 maxpacket: 16 [ 158.141498][ T2312] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 158.150707][ T2312] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.154202][ T2312] usb 8-1: config 0 interface 0 has no altsetting 0 [ 158.163949][ T2312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.166588][ T2312] usb 8-1: Product: syz [ 158.168046][ T2312] usb 8-1: Manufacturer: syz [ 158.171384][ T2312] usb 8-1: SerialNumber: syz [ 158.184791][ T2312] usb 8-1: config 0 descriptor?? [ 158.418032][ T1035] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 158.424194][ C2] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 158.437750][ T2312] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input43 [ 158.452423][ T2312] imon:send_packet: packet tx failed (-71) [ 158.468024][ T2312] imon 8-1:0.0: panel buttons/knobs setup failed [ 158.519861][ T2312] rc_core: IR keymap rc-imon-pad not found [ 158.521909][ T2312] Registered IR keymap rc-empty [ 158.523828][ T2312] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 158.527247][ T2312] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 158.530973][ T2312] imon:send_packet: packet tx failed (-71) [ 158.548286][ T2312] imon 8-1:0.0: remote input dev register failed [ 158.551166][ T2312] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 158.579053][ T1035] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.584281][ T1035] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.585093][ T2312] imon 8-1:0.0: unable to initialize intf0, err 0 [ 158.588354][ T1035] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.590530][ T2312] imon:imon_probe: failed to initialize context! [ 158.595289][ T1035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.598925][ T2312] imon 8-1:0.0: unable to register, err -19 [ 158.610777][ T2312] usb 8-1: USB disconnect, device number 22 [ 158.660900][ T5814] tipc: Node number set to 1419454713 [ 158.691580][ T7827] vcan0: tx drop: invalid sa for name 0x0004000000000000 [ 158.989985][ T1035] usb 6-1: GET_CAPABILITIES returned 0 [ 159.222010][ T1035] usbtmc 6-1:16.0: can't read capabilities [ 159.382911][ T7840] pim6reg: entered allmulticast mode [ 159.459728][ T7845] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 159.567405][ T7851] fuse: Unknown parameter '        0x0000000000000003' [ 159.601908][ T1035] usb 6-1: USB disconnect, device number 23 [ 159.712883][ T42] audit: type=1800 audit(1786606102.609:1182): pid=7858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.448" name="blkio.bfq.time_recursive" dev="tmpfs" ino=658 res=0 errno=0 [ 160.127967][ T1035] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 160.287934][ T1035] usb 6-1: Using ep0 maxpacket: 16 [ 160.290254][ T1035] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 160.294158][ T1035] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.297801][ T1035] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.301986][ T1035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.304750][ T1035] usb 6-1: Product: syz [ 160.306235][ T1035] usb 6-1: Manufacturer: syz [ 160.308300][ T1035] usb 6-1: SerialNumber: syz [ 160.314079][ T1035] usb 6-1: config 0 descriptor?? [ 160.522263][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 160.534007][ T1035] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input45 [ 160.553480][ T1035] imon:send_packet: packet tx failed (-71) [ 160.577943][ T1035] imon 6-1:0.0: panel buttons/knobs setup failed [ 160.629075][ T1035] rc_core: IR keymap rc-imon-pad not found [ 160.631014][ T1035] Registered IR keymap rc-empty [ 160.634486][ T1035] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 160.639749][ T1035] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 160.647411][ T1035] imon:send_packet: packet tx failed (-71) [ 160.668095][ T1035] imon 6-1:0.0: remote input dev register failed [ 160.672822][ T1035] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 160.690340][ T1035] imon 6-1:0.0: unable to initialize intf0, err 0 [ 160.694976][ T1035] imon:imon_probe: failed to initialize context! [ 160.694988][ T1035] imon 6-1:0.0: unable to register, err -19 [ 160.704851][ T1035] usb 6-1: USB disconnect, device number 24 [ 160.850822][ T7885] bond1 (unregistering): Released all slaves [ 160.862228][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 160.865525][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 161.302730][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.305825][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.358765][ T7904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.363656][ T7904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.398957][ T7904] bond1: left promiscuous mode [ 161.410329][ T5876] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.415848][ T5876] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.420747][ T5876] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.429615][ T5876] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.671726][ T7917] bond1 (unregistering): Released all slaves [ 162.307952][ T5836] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 162.588589][ T5836] usb 8-1: Using ep0 maxpacket: 16 [ 162.592214][ T5836] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 162.598200][ T5836] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.604113][ T5836] usb 8-1: config 0 interface 0 has no altsetting 0 [ 162.610228][ T5836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.614158][ T5836] usb 8-1: Product: syz [ 162.616181][ T5836] usb 8-1: Manufacturer: syz [ 162.619167][ T5836] usb 8-1: SerialNumber: syz [ 162.634443][ T5836] usb 8-1: config 0 descriptor?? [ 162.647674][ T7936] netlink: 'syz.1.479': attribute type 10 has an invalid length. [ 162.842886][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 162.851983][ T5836] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input47 [ 162.860830][ T5836] imon:send_packet: packet tx failed (-71) [ 162.878561][ T5836] imon 8-1:0.0: panel buttons/knobs setup failed [ 162.998470][ T42] audit: type=1326 audit(1786606105.849:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 163.027618][ T42] audit: type=1326 audit(1786606105.849:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 163.046481][ T42] audit: type=1326 audit(1786606105.849:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.480" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf701efec code=0x7ffc0000 [ 163.101445][ T42] audit: type=1326 audit(1786606105.849:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 163.111100][ T42] audit: type=1326 audit(1786606105.849:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 163.128738][ T42] audit: type=1326 audit(1786606105.859:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.480" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701efec code=0x7ffc0000 [ 163.138086][ T5836] rc_core: IR keymap rc-imon-pad not found [ 163.140550][ T5836] Registered IR keymap rc-empty [ 163.142613][ T5836] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 163.143305][ T42] audit: type=1326 audit(1786606105.859:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 163.146351][ T5836] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 163.146606][ T5836] imon:send_packet: packet tx failed (-71) [ 163.180804][ T42] audit: type=1326 audit(1786606105.859:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 163.188086][ T5836] imon 8-1:0.0: remote input dev register failed [ 163.192771][ T5836] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 163.211244][ T42] audit: type=1326 audit(1786606105.859:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.480" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efec code=0x7ffc0000 [ 163.223477][ T5836] imon 8-1:0.0: unable to initialize intf0, err 0 [ 163.226782][ T5836] imon:imon_probe: failed to initialize context! [ 163.230461][ T5836] imon 8-1:0.0: unable to register, err -19 [ 163.236261][ T42] audit: type=1326 audit(1786606105.859:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.0.480" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 163.243469][ T5836] usb 8-1: USB disconnect, device number 23 [ 163.694860][ T7965] bond1 (unregistering): Released all slaves [ 163.746766][ T7971] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 163.766892][ T7970] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 164.497418][ T7990] FAULT_INJECTION: forcing a failure. [ 164.497418][ T7990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.503099][ T7990] CPU: 1 UID: 0 PID: 7990 Comm: syz.0.494 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.503143][ T7990] Tainted: [L]=SOFTLOCKUP [ 164.503149][ T7990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.503158][ T7990] Call Trace: [ 164.503164][ T7990] [ 164.503171][ T7990] dump_stack_lvl+0x100/0x190 [ 164.503198][ T7990] should_fail_ex.cold+0x5/0xa [ 164.503220][ T7990] _copy_from_user+0x2e/0xd0 [ 164.503244][ T7990] get_compat_msghdr+0xb3/0x480 [ 164.503291][ T7990] ? __pfx_get_compat_msghdr+0x10/0x10 [ 164.503315][ T7990] ? rcu_is_watching+0x12/0xc0 [ 164.503334][ T7990] ? ___sys_sendmsg+0x19d/0x1e0 [ 164.503353][ T7990] ? kfree+0x1e5/0x6c0 [ 164.503368][ T7990] ? __pfx__kstrtoull+0x10/0x10 [ 164.503389][ T7990] ___sys_sendmsg+0x1b6/0x1e0 [ 164.503409][ T7990] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.503424][ T7990] ? __lock_acquire+0x49f/0x1a40 [ 164.503457][ T7990] ? __pfx___might_resched+0x10/0x10 [ 164.503488][ T7990] __sys_sendmmsg+0x309/0x440 [ 164.503515][ T7990] ? __pfx___sys_sendmmsg+0x10/0x10 [ 164.503539][ T7990] ? find_held_lock+0x2b/0x80 [ 164.503567][ T7990] ? __mutex_unlock_slowpath+0x35d/0x930 [ 164.503606][ T7990] ? fput+0x79/0x100 [ 164.503628][ T7990] ? ksys_write+0x1ac/0x250 [ 164.503649][ T7990] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 164.503667][ T7990] ? lockdep_hardirqs_on+0x78/0x100 [ 164.503691][ T7990] __do_fast_syscall_32+0xe7/0x970 [ 164.503717][ T7990] ? lockdep_hardirqs_on+0x78/0x100 [ 164.503741][ T7990] do_fast_syscall_32+0x32/0x70 [ 164.503767][ T7990] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.503790][ T7990] RIP: 0023:0xf701efec [ 164.503811][ T7990] Code: Unable to access opcode bytes at 0xf701efc2. [ 164.503819][ T7990] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 164.503845][ T7990] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080004380 [ 164.503856][ T7990] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.503865][ T7990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.503891][ T7990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.503902][ T7990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.503926][ T7990] [ 164.800024][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 164.820783][ T7996] udc dummy_udc.0: failed to start g1: -19 [ 164.824960][ T7996] UDC core: g1: couldn't find an available UDC or it's busy [ 164.921207][ T850] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 164.923018][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.498'. [ 164.927994][ T6011] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 165.045767][ T8006] hub 8-0:1.0: USB hub found [ 165.050031][ T8006] hub 8-0:1.0: 1 port detected [ 165.079941][ T6011] usb 7-1: Using ep0 maxpacket: 16 [ 165.082284][ T6011] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 165.086325][ T6011] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.090284][ T6011] usb 7-1: config 0 interface 0 has no altsetting 0 [ 165.094185][ T6011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.096837][ T6011] usb 7-1: Product: syz [ 165.098466][ T6011] usb 7-1: Manufacturer: syz [ 165.100417][ T6011] usb 7-1: SerialNumber: syz [ 165.105566][ T6011] usb 7-1: config 0 descriptor?? [ 165.188511][ T8014] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 165.190602][ T8014] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.193282][ T8014] vhci_hcd vhci_hcd.0: Device attached [ 165.198008][ T850] usb 6-1: Using ep0 maxpacket: 8 [ 165.201181][ T850] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.203431][ T850] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 165.207697][ T850] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.207719][ T850] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.207741][ T850] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.207761][ T850] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.207795][ T850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.312944][ T7994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.321207][ T7994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.331233][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 165.334275][ T6011] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input49 [ 165.349041][ T6011] imon:send_packet: packet tx failed (-71) [ 165.368071][ T6011] imon 7-1:0.0: panel buttons/knobs setup failed [ 165.396183][ T8019] bond2 (unregistering): Released all slaves [ 165.418337][ T6011] rc_core: IR keymap rc-imon-pad not found [ 165.420600][ T6011] Registered IR keymap rc-empty [ 165.422186][ T6011] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 165.425431][ T6011] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 165.429728][ T6011] imon:send_packet: packet tx failed (-71) [ 165.438027][ T2312] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 165.448788][ T6011] imon 7-1:0.0: remote input dev register failed [ 165.451041][ T6011] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 165.467380][ T6011] imon 7-1:0.0: unable to initialize intf0, err 0 [ 165.469627][ T6011] imon:imon_probe: failed to initialize context! [ 165.471854][ T6011] imon 7-1:0.0: unable to register, err -19 [ 165.476968][ T6011] usb 7-1: USB disconnect, device number 30 [ 165.491893][ T850] usb 6-1: usb_control_msg returned -32 [ 165.494713][ T850] usbtmc 6-1:16.0: can't read capabilities [ 165.788341][ T8015] vhci_hcd: connection reset by peer [ 165.791802][ T12] vhci_hcd vhci_hcd.3: stop threads [ 165.797189][ T12] vhci_hcd vhci_hcd.3: release socket [ 165.799597][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 166.158636][ T8040] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 166.183135][ T8038] kvm: pic: non byte write [ 166.186658][ T8038] kvm: pic: non byte write [ 166.202460][ T8038] kvm: pic: non byte write [ 166.208709][ T8044] usbtmc 6-1:16.0: usb_clear_halt returned -32 [ 166.224580][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 166.227709][ T8044] vlan0: left allmulticast mode [ 166.231813][ T8044] dummy0: left allmulticast mode [ 166.239167][ T8044] vlan0: left promiscuous mode [ 166.241988][ T8044] dummy0: left promiscuous mode [ 166.244645][ T8044] bridge0: port 3(vlan0) entered disabled state [ 166.257608][ T8044] bridge_slave_1: left allmulticast mode [ 166.261096][ T8044] bridge_slave_1: left promiscuous mode [ 166.263003][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.269804][ T8044] bridge_slave_0: left allmulticast mode [ 166.273047][ T8044] bridge_slave_0: left promiscuous mode [ 166.275020][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.281366][ T8047] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 166.500736][ T6011] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 166.634883][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'. [ 166.658854][ T6011] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 166.666156][ T6011] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 166.671192][ T6011] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 166.675456][ T6011] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 166.681758][ T6011] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 166.688727][ T6011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.693268][ T6011] usb 7-1: Product: syz [ 166.695096][ T6011] usb 7-1: Manufacturer: syz [ 166.697042][ T6011] usb 7-1: SerialNumber: syz [ 166.701715][ T6011] usb 7-1: config 0 descriptor?? [ 166.912008][ T6011] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 167.166407][ T850] usb 7-1: USB disconnect, device number 31 [ 167.534864][ T1035] usb 6-1: USB disconnect, device number 25 [ 168.206238][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 168.292509][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.295112][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.317084][ T8094] batman_adv: batadv0: Interface deactivated: veth0 [ 168.349386][ T8094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.354438][ T8094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.468091][ T5876] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.472717][ T5876] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.476636][ T5876] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.479440][ T8105] fuse: Unknown parameter '00000000000000000000003' [ 168.481768][ T5876] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.684616][ T8108] FAULT_INJECTION: forcing a failure. [ 168.684616][ T8108] name fail_futex, interval 1, probability 0, space 0, times 1 [ 168.689851][ T8108] CPU: 1 UID: 0 PID: 8108 Comm: syz.0.535 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.689868][ T8108] Tainted: [L]=SOFTLOCKUP [ 168.689872][ T8108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 168.689879][ T8108] Call Trace: [ 168.689883][ T8108] [ 168.689887][ T8108] dump_stack_lvl+0x100/0x190 [ 168.689908][ T8108] should_fail_ex.cold+0x5/0xa [ 168.689923][ T8108] get_futex_key+0x1d2/0x14f0 [ 168.689938][ T8108] ? __pfx_get_futex_key+0x10/0x10 [ 168.689948][ T8108] ? __lock_acquire+0x49f/0x1a40 [ 168.689960][ T8108] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 168.689979][ T8108] futex_wake+0xf4/0x5e0 [ 168.689994][ T8108] ? __pfx_futex_wake+0x10/0x10 [ 168.690009][ T8108] ? __lock_acquire+0x49f/0x1a40 [ 168.690018][ T8108] ? __css_rstat_updated+0x1ce/0x5a0 [ 168.690035][ T8108] ? __pfx___handle_mm_fault+0x10/0x10 [ 168.690049][ T8108] ? __pfx___css_rstat_updated+0x10/0x10 [ 168.690080][ T8108] do_futex+0x2b2/0x440 [ 168.690093][ T8108] ? __pfx_do_futex+0x10/0x10 [ 168.690105][ T8108] ? find_held_lock+0x2b/0x80 [ 168.690118][ T8108] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 168.690133][ T8108] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 168.690149][ T8108] __ia32_sys_futex_time32+0x2f4/0x470 [ 168.690164][ T8108] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 168.690183][ T8108] __do_fast_syscall_32+0xe7/0x970 [ 168.690201][ T8108] do_fast_syscall_32+0x32/0x70 [ 168.690217][ T8108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.690232][ T8108] RIP: 0023:0xf701efec [ 168.690245][ T8108] Code: Unable to access opcode bytes at 0xf701efc2. [ 168.690249][ T8108] RSP: 002b:00000000ff8a908c EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 168.690260][ T8108] RAX: ffffffffffffffda RBX: 00000000f7414f88 RCX: 0000000000000081 [ 168.690267][ T8108] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.690273][ T8108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.690279][ T8108] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 168.690285][ T8108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.690298][ T8108] [ 168.828113][ T8115] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 168.830237][ T8115] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 168.841753][ T8115] vhci_hcd vhci_hcd.0: Device attached [ 169.018049][ T5836] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 169.078470][ T5836] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 169.150129][ T8116] vhci_hcd: connection closed [ 169.152335][ T5876] vhci_hcd vhci_hcd.1: stop threads [ 169.156522][ T5876] vhci_hcd vhci_hcd.1: release socket [ 169.159467][ T5876] vhci_hcd vhci_hcd.1: disconnect device [ 169.245131][ T8129] fuse: Unknown parameter '        0x0000000000000003' [ 169.395990][ T8135] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 169.403958][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 169.417644][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 169.417661][ T42] audit: type=1800 audit(1786606112.309:1209): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.539" name="blkio.bfq.time_recursive" dev="tmpfs" ino=778 res=0 errno=0 [ 169.611345][ T8142] overlayfs: missing 'lowerdir' [ 169.615682][ T8142] comedi comedi1: pcl724: I/O base address not correctly aligned [ 169.892399][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 170.281114][ T8161] hub 8-0:1.0: USB hub found [ 170.282972][ T8161] hub 8-0:1.0: 1 port detected [ 170.297993][ T5731] Bluetooth: hci2: command 0x0406 tx timeout [ 170.299917][ T5731] Bluetooth: hci1: command 0x0406 tx timeout [ 170.302466][ T5741] Bluetooth: hci0: command 0x0401 tx timeout [ 170.411928][ T8166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 170.488605][ T1035] libceph: connect (1)[c::]:6789 error -101 [ 170.491687][ T1035] libceph: mon0 (1)[c::]:6789 connect error [ 170.585303][ T8176] loop9: detected capacity change from 0 to 8 [ 170.597079][ T8176] Dev loop9: unable to read RDB block 8 [ 170.607957][ T8176] loop9: unable to read partition table [ 170.627999][ T2312] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 170.629059][ T8176] loop9: partition table beyond EOD, truncated [ 170.640358][ T8176] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 170.733101][ T8184] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.2048.0), cmd(9) [ 170.749845][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 170.752943][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 170.772892][ T8186] FAULT_INJECTION: forcing a failure. [ 170.772892][ T8186] name failslab, interval 1, probability 0, space 0, times 0 [ 170.776656][ T8186] CPU: 3 UID: 0 PID: 8186 Comm: syz.3.557 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.776673][ T8186] Tainted: [L]=SOFTLOCKUP [ 170.776677][ T8186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.776683][ T8186] Call Trace: [ 170.776688][ T8186] [ 170.776693][ T8186] dump_stack_lvl+0x100/0x190 [ 170.776713][ T8186] should_fail_ex.cold+0x5/0xa [ 170.776726][ T8186] should_failslab+0xc2/0x120 [ 170.776743][ T8186] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 170.776757][ T8186] ? __alloc_skb+0x5b7/0x710 [ 170.776773][ T8186] ? __alloc_skb+0x140/0x710 [ 170.776788][ T8186] __alloc_skb+0x140/0x710 [ 170.776801][ T8186] ? __alloc_skb+0x5b7/0x710 [ 170.776815][ T8186] ? __pfx___alloc_skb+0x10/0x10 [ 170.776832][ T8186] alloc_skb_with_frags+0xdd/0x760 [ 170.776848][ T8186] ? __might_fault+0xc5/0x140 [ 170.776860][ T8186] ? __might_fault+0xc5/0x140 [ 170.776873][ T8186] sock_alloc_send_pskb+0x801/0x980 [ 170.776887][ T8186] ? _copy_from_iter+0x270/0x1690 [ 170.776909][ T8186] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 170.776923][ T8186] ? _parse_integer_limit+0x1ac/0x220 [ 170.776937][ T8186] ? iov_iter_advance+0xac/0x6d0 [ 170.776953][ T8186] tun_get_user+0x904/0x3c20 [ 170.776985][ T8186] ? __pfx_tun_get_user+0x10/0x10 [ 170.776999][ T8186] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 170.777016][ T8186] ? find_held_lock+0x2b/0x80 [ 170.777030][ T8186] ? tun_get+0x191/0x370 [ 170.777040][ T8186] ? tun_get+0x191/0x370 [ 170.777054][ T8186] tun_chr_write_iter+0xdc/0x200 [ 170.777068][ T8186] vfs_write+0x6ac/0x1050 [ 170.777079][ T8186] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 170.777093][ T8186] ? __pfx_vfs_write+0x10/0x10 [ 170.777102][ T8186] ? find_held_lock+0x2b/0x80 [ 170.777123][ T8186] ksys_write+0x12a/0x250 [ 170.777133][ T8186] ? __pfx_ksys_write+0x10/0x10 [ 170.777142][ T8186] ? ksys_write+0x1ac/0x250 [ 170.777152][ T8186] ? __pfx_ksys_write+0x10/0x10 [ 170.777165][ T8186] __do_fast_syscall_32+0xe7/0x970 [ 170.777182][ T8186] ? lockdep_hardirqs_on+0x78/0x100 [ 170.777197][ T8186] do_fast_syscall_32+0x32/0x70 [ 170.777213][ T8186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.777227][ T8186] RIP: 0023:0xf700efec [ 170.777240][ T8186] Code: Unable to access opcode bytes at 0xf700efc2. [ 170.777244][ T8186] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 170.777255][ T8186] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001280 [ 170.777261][ T8186] RDX: 0000000000000fce RSI: 0000000000000000 RDI: 0000000000000000 [ 170.777271][ T8186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.777277][ T8186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.777283][ T8186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.777295][ T8186] [ 170.968080][ T1035] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 171.018733][ T8170] ceph: No mds server is up or the cluster is laggy [ 171.169368][ T8200] netlink: 304 bytes leftover after parsing attributes in process `syz.0.563'. [ 171.169776][ T1035] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.176554][ T1035] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.180805][ T1035] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.186177][ T1035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.234823][ T42] audit: type=1326 audit(1786606114.129:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 171.243307][ T42] audit: type=1326 audit(1786606114.129:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 171.252896][ T42] audit: type=1326 audit(1786606114.129:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 171.260301][ T42] audit: type=1326 audit(1786606114.129:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 171.266797][ T42] audit: type=1326 audit(1786606114.129:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf701efec code=0x7ffc0000 [ 171.273992][ T42] audit: type=1326 audit(1786606114.129:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 171.280593][ T42] audit: type=1326 audit(1786606114.129:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 171.286908][ T42] audit: type=1326 audit(1786606114.129:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 171.293490][ T42] audit: type=1326 audit(1786606114.129:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8203 comm="syz.0.565" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf701efec code=0x7ffc0000 [ 171.390886][ T8214] FAULT_INJECTION: forcing a failure. [ 171.390886][ T8214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.395137][ T8214] CPU: 2 UID: 0 PID: 8214 Comm: syz.0.568 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.395156][ T8214] Tainted: [L]=SOFTLOCKUP [ 171.395160][ T8214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.395167][ T8214] Call Trace: [ 171.395171][ T8214] [ 171.395175][ T8214] dump_stack_lvl+0x100/0x190 [ 171.395195][ T8214] should_fail_ex.cold+0x5/0xa [ 171.395209][ T8214] _copy_from_user+0x2e/0xd0 [ 171.395227][ T8214] kstrtouint_from_user+0xd6/0x1d0 [ 171.395239][ T8214] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 171.395251][ T8214] ? __lock_acquire+0x49f/0x1a40 [ 171.395268][ T8214] proc_fail_nth_write+0x83/0x220 [ 171.395285][ T8214] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.395305][ T8214] vfs_write+0x2aa/0x1050 [ 171.395316][ T8214] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.395333][ T8214] ? __pfx_vfs_write+0x10/0x10 [ 171.395342][ T8214] ? find_held_lock+0x2b/0x80 [ 171.395356][ T8214] ? __fget_files+0x215/0x3d0 [ 171.395369][ T8214] ? __fget_files+0x21f/0x3d0 [ 171.395383][ T8214] ksys_write+0x12a/0x250 [ 171.395397][ T8214] ? __pfx_ksys_write+0x10/0x10 [ 171.395411][ T8214] do_int80_emulation+0x14b/0x720 [ 171.395431][ T8214] asm_int80_emulation+0x1a/0x20 [ 171.395442][ T8214] RIP: 0023:0xf71574eb [ 171.395452][ T8214] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 171.395462][ T8214] RSP: 002b:00000000f540d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 171.395474][ T8214] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540d5d0 [ 171.395480][ T8214] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.395486][ T8214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.395492][ T8214] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 171.395498][ T8214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.395511][ T8214] [ 171.406599][ T1035] usb 7-1: usb_control_msg returned -32 [ 171.462805][ T1035] usbtmc 7-1:16.0: can't read capabilities [ 171.512910][ T8221] [ 171.513786][ T8221] ====================================================== [ 171.516033][ T8221] WARNING: possible circular locking dependency detected [ 171.518240][ T8221] syzkaller #0 Tainted: G L [ 171.520260][ T8221] ------------------------------------------------------ [ 171.522357][ T8221] syz.0.572/8221 is trying to acquire lock: [ 171.524221][ T8221] ffffffff8ed801c0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xe87/0x1ca0 [ 171.527211][ T8221] [ 171.527211][ T8221] but task is already holding lock: [ 171.528563][ T8223] netlink: 236 bytes leftover after parsing attributes in process `syz.3.571'. [ 171.529507][ T8221] ffff888026815430 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 171.535780][ T8221] [ 171.535780][ T8221] which lock already depends on the new lock. [ 171.535780][ T8221] [ 171.539000][ T8221] [ 171.539000][ T8221] the existing dependency chain (in reverse order) is: [ 171.541782][ T8221] [ 171.541782][ T8221] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 171.544571][ T8221] lock_acquire+0x1b9/0x370 [ 171.546210][ T8221] blk_alloc_queue+0x610/0x790 [ 171.547891][ T8221] blk_mq_alloc_queue+0x174/0x290 [ 171.549656][ T8221] __blk_mq_alloc_disk+0x29/0x120 [ 171.551398][ T8221] loop_add+0x498/0xb60 [ 171.552927][ T8221] loop_init+0x1d3/0x200 [ 171.554430][ T8221] do_one_initcall+0x11d/0x700 [ 171.556111][ T8221] kernel_init_freeable+0x6ea/0x7b0 [ 171.557955][ T8221] kernel_init+0x1f/0x1e0 [ 171.559508][ T8221] ret_from_fork+0x72b/0xd50 [ 171.561145][ T8221] ret_from_fork_asm+0x1a/0x30 [ 171.562805][ T8221] [ 171.562805][ T8221] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 171.565076][ T8221] lock_acquire+0x1b9/0x370 [ 171.566660][ T8221] fs_reclaim_acquire+0xc4/0x100 [ 171.568392][ T8221] prepare_alloc_pages+0x166/0x5f0 [ 171.570150][ T8221] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 171.572169][ T8221] __alloc_pages_noprof+0xb/0x110 [ 171.573905][ T8221] pcpu_populate_chunk+0x118/0x990 [ 171.575692][ T8221] pcpu_alloc_noprof+0x881/0x1ca0 [ 171.577450][ T8221] iommu_dma_init_fq+0x1da/0x7e0 [ 171.579189][ T8221] iommu_setup_dma_ops+0x11df/0x1620 [ 171.581075][ T8221] bus_iommu_probe+0x264/0x550 [ 171.582778][ T8221] iommu_device_register+0x1af/0x280 [ 171.584634][ T8221] intel_iommu_init+0x2020/0x2990 [ 171.586420][ T8221] pci_iommu_init+0x3c/0x80 [ 171.588003][ T8221] do_one_initcall+0x11d/0x700 [ 171.589688][ T8221] kernel_init_freeable+0x6ea/0x7b0 [ 171.591477][ T8221] kernel_init+0x1f/0x1e0 [ 171.593032][ T8221] ret_from_fork+0x72b/0xd50 [ 171.594644][ T8221] ret_from_fork_asm+0x1a/0x30 [ 171.596357][ T8221] [ 171.596357][ T8221] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 171.598766][ T8221] check_prev_add+0xeb/0xe60 [ 171.600398][ T8221] __lock_acquire+0x136c/0x1a40 [ 171.602075][ T8221] lock_acquire+0x1b9/0x370 [ 171.603659][ T8221] __mutex_lock+0x1a4/0x1bd0 [ 171.605297][ T8221] pcpu_alloc_noprof+0xe87/0x1ca0 [ 171.607002][ T8221] __percpu_counter_init_many+0x42/0x3b0 [ 171.608856][ T8221] blkg_rwstat_init+0x2c/0xd0 [ 171.610486][ T8221] throtl_pd_alloc+0xf1/0xa50 [ 171.612111][ T8221] blkcg_activate_policy+0x7bb/0xe60 [ 171.613974][ T8221] blk_throtl_init+0x39a/0x5b0 [ 171.615639][ T8221] tg_set_conf.isra.0+0x252/0x500 [ 171.617404][ T8221] cgroup_file_write+0x1e6/0x8a0 [ 171.619116][ T8221] kernfs_fop_write_iter+0x3e0/0x5f0 [ 171.620962][ T8221] vfs_write+0x6ac/0x1050 [ 171.622493][ T8221] ksys_write+0x12a/0x250 [ 171.624018][ T8221] __do_fast_syscall_32+0xe7/0x970 [ 171.625849][ T8221] do_fast_syscall_32+0x32/0x70 [ 171.627536][ T8221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.629685][ T8221] [ 171.629685][ T8221] other info that might help us debug this: [ 171.629685][ T8221] [ 171.632699][ T8221] Chain exists of: [ 171.632699][ T8221] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#17 [ 171.632699][ T8221] [ 171.636862][ T8221] Possible unsafe locking scenario: [ 171.636862][ T8221] [ 171.639176][ T8221] CPU0 CPU1 [ 171.640867][ T8221] ---- ---- [ 171.642537][ T8221] lock(&q->q_usage_counter(io)#17); [ 171.644238][ T8221] lock(fs_reclaim); [ 171.646291][ T8221] lock(&q->q_usage_counter(io)#17); [ 171.648673][ T8221] lock(pcpu_alloc_mutex); [ 171.650034][ T8221] [ 171.650034][ T8221] *** DEADLOCK *** [ 171.650034][ T8221] [ 171.652574][ T8221] 7 locks held by syz.0.572/8221: [ 171.654152][ T8221] #0: ffff8880719882b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 171.657018][ T8221] #1: ffff888027080450 (sb_writers#10){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 171.659834][ T8221] #2: ffff88801363d880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 171.662891][ T8221] #3: ffff88806b620008 (kn->active#78){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 171.666044][ T8221] #4: ffff888026815630 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 [ 171.669211][ T8221] #5: ffff888026815430 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 171.672823][ T8221] #6: ffff888026815468 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 171.676373][ T8221] [ 171.676373][ T8221] stack backtrace: [ 171.678311][ T8221] CPU: 3 UID: 0 PID: 8221 Comm: syz.0.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.678327][ T8221] Tainted: [L]=SOFTLOCKUP [ 171.678331][ T8221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 171.678339][ T8221] Call Trace: [ 171.678343][ T8221] [ 171.678347][ T8221] dump_stack_lvl+0x100/0x190 [ 171.678363][ T8221] print_circular_bug.cold+0x178/0x1c7 [ 171.678381][ T8221] check_noncircular+0x146/0x160 [ 171.678400][ T8221] check_prev_add+0xeb/0xe60 [ 171.678417][ T8221] __lock_acquire+0x136c/0x1a40 [ 171.678428][ T8221] lock_acquire+0x1b9/0x370 [ 171.678437][ T8221] ? pcpu_alloc_noprof+0xe87/0x1ca0 [ 171.678449][ T8221] ? __pfx___might_resched+0x10/0x10 [ 171.678467][ T8221] __mutex_lock+0x1a4/0x1bd0 [ 171.678483][ T8221] ? pcpu_alloc_noprof+0xe87/0x1ca0 [ 171.678494][ T8221] ? pcpu_alloc_noprof+0xe87/0x1ca0 [ 171.678504][ T8221] ? blk_throtl_init+0x39a/0x5b0 [ 171.678515][ T8221] ? tg_set_conf.isra.0+0x252/0x500 [ 171.678527][ T8221] ? cgroup_file_write+0x1e6/0x8a0 [ 171.678537][ T8221] ? kernfs_fop_write_iter+0x3e0/0x5f0 [ 171.678550][ T8221] ? vfs_write+0x6ac/0x1050 [ 171.678560][ T8221] ? ksys_write+0x12a/0x250 [ 171.678568][ T8221] ? __do_fast_syscall_32+0xe7/0x970 [ 171.678584][ T8221] ? do_fast_syscall_32+0x32/0x70 [ 171.678599][ T8221] ? __pfx___mutex_lock+0x10/0x10 [ 171.678617][ T8221] ? pcpu_alloc_noprof+0xe87/0x1ca0 [ 171.678627][ T8221] pcpu_alloc_noprof+0xe87/0x1ca0 [ 171.678640][ T8221] ? kasan_save_track+0x14/0x30 [ 171.678655][ T8221] __percpu_counter_init_many+0x42/0x3b0 [ 171.678673][ T8221] blkg_rwstat_init+0x2c/0xd0 [ 171.678683][ T8221] throtl_pd_alloc+0xf1/0xa50 [ 171.678692][ T8221] ? __pfx_throtl_pd_alloc+0x10/0x10 [ 171.678702][ T8221] blkcg_activate_policy+0x7bb/0xe60 [ 171.678720][ T8221] blk_throtl_init+0x39a/0x5b0 [ 171.678732][ T8221] tg_set_conf.isra.0+0x252/0x500 [ 171.678744][ T8221] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 171.678757][ T8221] ? kernfs_root+0xf8/0x2a0 [ 171.678767][ T8221] cgroup_file_write+0x1e6/0x8a0 [ 171.678779][ T8221] ? __pfx_tg_set_conf_u64+0x10/0x10 [ 171.678791][ T8221] ? __pfx_cgroup_file_write+0x10/0x10 [ 171.678802][ T8221] kernfs_fop_write_iter+0x3e0/0x5f0 [ 171.678815][ T8221] ? __pfx_cgroup_file_write+0x10/0x10 [ 171.678825][ T8221] vfs_write+0x6ac/0x1050 [ 171.678835][ T8221] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 171.678848][ T8221] ? __pfx_vfs_write+0x10/0x10 [ 171.678857][ T8221] ? find_held_lock+0x2b/0x80 [ 171.678873][ T8221] ksys_write+0x12a/0x250 [ 171.678882][ T8221] ? __pfx_ksys_write+0x10/0x10 [ 171.678891][ T8221] ? ksys_write+0x1ac/0x250 [ 171.678900][ T8221] ? __pfx_ksys_write+0x10/0x10 [ 171.678910][ T8221] __do_fast_syscall_32+0xe7/0x970 [ 171.678925][ T8221] ? lockdep_hardirqs_on+0x78/0x100 [ 171.678939][ T8221] do_fast_syscall_32+0x32/0x70 [ 171.678954][ T8221] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.678969][ T8221] RIP: 0023:0xf701efec [ 171.678983][ T8221] Code: Unable to access opcode bytes at 0xf701efc2. [ 171.678987][ T8221] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 171.678997][ T8221] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 171.679004][ T8221] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000000 [ 171.679010][ T8221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.679015][ T8221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.679021][ T8221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.679030][ T8221] [ 173.706373][ T2312] usb 7-1: USB disconnect, device number 32 [ 174.208028][ T5836] vhci_hcd vhci_hcd.1: vhci_device speed not set