last executing test programs: 12.49460456s ago: executing program 1 (id=856): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x3, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x24, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x80000, 0x8427c78, 0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x55af) inotify_init1(0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioperm(0x0, 0x6e, 0xe) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 10.751779875s ago: executing program 1 (id=861): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000900f0000000000000000e4ff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000400100"], 0x80}}, 0x4044) 10.634656065s ago: executing program 1 (id=862): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)={[], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, '/dev/ttynull\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f67"], 0xec}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) openat$null(0xffffff9c, &(0x7f0000000140), 0x101201, 0x0) set_mempolicy(0x0, &(0x7f0000000040)=0xfffffffffffffbff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESHEX], 0x48) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000001e80500010000005d9015db9c414507466aee75087413490c17", @ANYRES32=r2], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x0, [0xfffffffe, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), 0x0}, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x7b9, &(0x7f0000000280)) syz_io_uring_setup(0xf01, &(0x7f0000000400)={0x0, 0x2c69, 0x800, 0x0, 0x51, 0x0, r4}, &(0x7f0000000100), &(0x7f0000000480), &(0x7f0000000080)) 8.807774336s ago: executing program 1 (id=868): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x15, 0x5, 0x18, 0x3, 0x6d, 0x1}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x2000b) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0xfe, 0x2, &(0x7f0000000000)={0x22, "271e6c5d59ed71c24ac5b072d56010b62db2500454e1fe22469c29274cf254a6da"}}) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x3c3001, 0x0) r3 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0x20, 0x1, 0xf}, &(0x7f0000000100)=0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x1, 0x1, 0x61, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYRES32=r5, @ANYRES16=r4, @ANYRESOCT, @ANYBLOB="0cabf6588018ef8c4bc3ce4839c7ff0017f40a91f36b2e921826cccf032773d784e7e49dbd942280c7be0ad96dcb7fa840c72e874c0381f12085925d8f876eb45a186cf71fa619d8da1a6d4d46aba0662e3ca2ec8de59f0f9382dbb7f72a2e16bef34184fc1b73382354a9c3fc883272346b8722f015ce111c8e5149675a2d65f4ce66fe93deaada979b95237881c57d2e11710a3965e00ac0cc670596364823ebf08ea7b6add3c439e2d362afee3f5660feb0d7fc36e72452e652b759f1369a8549b4dfac054988743f3468ab16b4115a49d296cc74db5a627b1936280a4f92b4c5f751b84ee0", @ANYRES32=0x0, @ANYBLOB="0200000003000000000000000000000000573d000000000100004900"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f80)={r6, 0x0, 0x0}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) syz_ublk_setup_io_uring(0x800020, &(0x7f0000000040)={0x0, 0x6240}, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000240)=[{&(0x7f00000000c0)='t', 0x1}, {0x0, 0x300}], 0x2) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f00008c8000/0x2000)=nil, 0x2000, 0x9) r8 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r8, 0x0, 0x3, 0x0, 0x0) r9 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r9, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r10, &(0x7f0000004300)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x800001, {0x7, 0x21, 0x402, 0x772d42, 0x4, 0x0, 0x6c9, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 4.399958793s ago: executing program 0 (id=883): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000001e00020000001c00188008000140a080000008000240000000020800034015000002240001801400018008000100e000000108000200"], 0xe0}, 0x1, 0x0, 0x0, 0x14}, 0x40) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000280)={0x0, 0xf5b8, 0x10, 0x1, 0x215, 0x0, r1}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe4b8, 0x2, 0x3, 0xf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b4f, 0x4000, 0x0, 0x344}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f38, 0x1, 0x3, 0x221, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5df, 0x900, 0x2, 0x2bd, 0x0, r1}}], 0x4, 0x0, 0x0) 4.301215976s ago: executing program 0 (id=884): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1fa) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='file1\x00', 0x115442, 0x1ff) ftruncate(r4, 0x1000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x80) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r4) r9 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r9, &(0x7f0000001100)='m', 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r10, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000010000000000000000000000030000000400000000000000000000000000000000100000") ioctl(r10, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r10, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r10, 0x400c0930, 0x0) dup(r0) 4.197606707s ago: executing program 1 (id=886): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) io_setup(0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="cf", 0x1) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000000), 0xfffb) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r8, 0x1, 0x0, 0x4, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x44}, 0x1, 0xffffffff00000003}, 0x800) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r9 = eventfd2(0xc, 0x800) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x1, r9}]) r10 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) 3.258949919s ago: executing program 0 (id=891): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x3, 0x1) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0x80) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x5b, 0x2c00) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000680)={{0x9, 0x1, 0x3, 0x7, 'syz1\x00', 0xffdfd424}, 0x1, [0x80000000, 0x3, 0x9, 0x64, 0x8, 0x4, 0xa91e, 0x5, 0x7, 0x8, 0x861, 0x1, 0x9, 0x4, 0x8, 0x9, 0x7, 0x5, 0x80, 0x6, 0x5, 0xc16a, 0x3, 0x9, 0x3244, 0xfffffffd, 0x80033, 0x807, 0x100000001, 0x3, 0x8, 0xda75, 0x6, 0xfffffffc, 0x6, 0xfffffffffffffffa, 0x2, 0x5, 0x8, 0x3, 0x1c, 0x9, 0x2, 0x3a9, 0x1, 0xa, 0x6, 0xd1, 0x254, 0x8, 0x2, 0xfffffffffffffffb, 0x1, 0x80000000, 0x2, 0x4, 0x2, 0x3, 0xfffffffffffffffd, 0x1, 0x81, 0x3e78d4f3, 0x7, 0xfc30, 0x0, 0x87, 0x81, 0x5, 0xf, 0xffdffffe, 0x2, 0x7f, 0xfffffffd, 0xfff, 0x4, 0x4, 0x9, 0x0, 0x100000001, 0x1, 0x81, 0x5152f9e0, 0x9, 0x8, 0x3, 0x8000000000000001, 0x3b6c54fb, 0x3, 0x1, 0x1, 0x4, 0x401, 0x5, 0x8, 0x6, 0x3, 0x2000008, 0x4, 0x9, 0x0, 0x3, 0x9, 0xe29, 0x2, 0x8b7, 0x7726, 0xc, 0xffffffffffff0001, 0x400, 0xffffffffffffffff, 0xeff, 0x6, 0x5, 0xa0, 0x4, 0x3, 0x8, 0xbedd, 0x10001, 0x101, 0x9, 0x1ff, 0x3, 0x3, 0x8, 0x79c, 0xf, 0x3]}) write$FUSE_CREATE_OPEN(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x8, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x8, 0x7}, 0x0) close_range(r0, r1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r7], 0x68}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r8 = socket(0x10, 0x3, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r9, &(0x7f0000000100)=[{&(0x7f0000000380)=""/137, 0x89}], 0x1, 0x6, 0x1) r10 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r10, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \''], 0x8c) close(r10) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.178821172s ago: executing program 1 (id=892): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8], 0xfdef) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902"], 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r5 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc2c45513, &(0x7f0000002e00)={{0x9, 0x7, 0x3, 0x8, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x100, 0x1000, 0x694e, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0xd89e, 0x15b, 0xb27, 0x5948, 0x5, 0x2, 0x8004a7, 0x9, 0x5, 0xb, 0x2, 0x3ff, 0x400, 0x2000040, 0x10040002, 0x7, 0x0, 0x2, 0x887f, 0x803, 0x3, 0xffffffff, 0x6, 0xffffffff, 0xfff, 0x1, 0x1, 0x5, 0x9, 0x3, 0x6, 0x100003, 0x78a, 0xbfff8007, 0x200000e, 0xa, 0x0, 0x1, 0x4, 0x3, 0x1, 0x9, 0x7fffffff, 0x3fe, 0x1ff, 0x9, 0xfffff647, 0x408, 0x4, 0x2, 0x9, 0x9, 0x5, 0x5, 0x8, 0x98, 0xbe, 0x10, 0xa, 0x4, 0x3, 0x81, 0x2, 0x2, 0x80000001, 0x69e, 0xb, 0x4, 0x1, 0x1ff, 0x1e2, 0x7, 0x4, 0x10001, 0x0, 0xffffeffd, 0x11002, 0x1, 0x5, 0x0, 0xcbe, 0x8, 0xff, 0x4, 0xfffffff9, 0xf8a, 0xe1e, 0xfc10, 0x9, 0x895, 0x8, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0x8e0b2, 0x9, 0x3, 0x12, 0x3, 0x3, 0xfffffff8, 0x3, 0x2, 0x1, 0x2bd, 0x0, 0xe, 0x5, 0x8, 0x2, 0xfff, 0xffb, 0x3, 0x7, 0x2, 0x1007, 0x6, 0x200ff]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x5064}}, './file0\x00'}) mmap(&(0x7f00008dd000/0x2000)=nil, 0x2000, 0x6, 0x100010, r6, 0xb4ad6000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000100000890600000033671a043ec4660900"], 0x20000) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='geneve0\x00', 0x10) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9fff548600d698ceb5819570163", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @local, 0x3}, 0x1c) 1.61851686s ago: executing program 0 (id=897): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000900f0000000000000000e4ff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000400100"], 0x80}}, 0x4044) 1.607234288s ago: executing program 0 (id=898): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f00000000c0)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x12c, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000003380)={0x2020}, 0x2020) getpriority(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x3}}}) 1.206342435s ago: executing program 3 (id=899): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r1, &(0x7f0000000300), 0x0}, 0x20) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) openat$null(0xffffff9c, 0x0, 0x101201, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000001e80500", @ANYRES32], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000480)=""/134, 0x86}], 0x1, 0x800, 0x78) 868.470239ms ago: executing program 3 (id=900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x91, 0x1, 0x6, 0xc, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000000000001300000000000000", 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 750.032057ms ago: executing program 2 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000000)=ANY=[@ANYBLOB='mode=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB="0080"]) 711.040906ms ago: executing program 2 (id=903): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x53) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./bus\x00', 0xf2) open_by_handle_at(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="77000000f800000000000000fb"], 0x5f1502) 654.57618ms ago: executing program 3 (id=904): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1fa) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='file1\x00', 0x115442, 0x1ff) ftruncate(r4, 0x1000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x80) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r4) r9 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r9, &(0x7f0000001100)='md', 0x2) r10 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r10, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000010000000000000000000000030000000400000000000000000000000000000000100000") ioctl(r10, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r10, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r10, 0x400c0930, 0x0) dup(r0) 631.432472ms ago: executing program 2 (id=905): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe0000010000000008000100002001000800040001"], 0x2c}}, 0x0) 504.083369ms ago: executing program 3 (id=906): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000900f0000000000000000e4ff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000400100"], 0x80}}, 0x4044) 503.784983ms ago: executing program 2 (id=907): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500001f86ddffff1144ee1611d4b8bf", 0x22}], 0x1}, 0x0) 485.842497ms ago: executing program 3 (id=908): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x103040, 0x0) ioctl$CDROMVOLCTRL(r0, 0x530a, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x9}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca31, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x10, 0x800) connect$tipc(r6, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x2}}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000002000)=0x9) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}]}}]}, 0x38}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0x40, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_io_uring_setup(0x264d, &(0x7f0000000180)={0x0, 0xcca7, 0x1, 0x2, 0x34a}, &(0x7f0000000080), &(0x7f0000000340), &(0x7f0000000000)) io_uring_enter(r9, 0x0, 0x3, 0xb, 0x0, 0x18) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xfff1}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="01c807fa81534a00"], 0x48}, 0x1, 0x4801000000000000}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r12, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r5, @ANYBLOB="000229bd7000fedbdf253900000008000300", @ANYRES16=r4, @ANYBLOB="d70000000000000000000000ddfaf3d658c730d696670f70271836e6a567b44a215251a15bb399c33f11125a8b1051aa02e5dc96ad0333e83c55833478e0c45c91c1e75bab118586553a6040ba3428749276bde97633a97e188048b869b67e29442a2cee179114bbf113c8e770b0cf5a75a70b129c0210a40deaebdf31537ff4deb15551e4b83e5c682a85e24b6a72e855a1"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004044) r13 = syz_open_dev$dri(&(0x7f0000000740), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) close_range(r12, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 368.532709ms ago: executing program 0 (id=909): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x1) close(r1) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000100), 0x12) listen(r4, 0x1) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, "0b007e0b0a43b820a8e8c9881db660164333526f680eac8c863a63f79fe7f1d5514a5a2b016bc0ab07b7ea2914619c9248a3c94ff542d23d8d2253f8e3843394132280bfa1629888fe0f017805cd8f9bceac64d35287f5704d58322a0765d9585883e4f48958696855767c1b1ed4b2f5c0bde2d4bc831a95f12277658c0d707b77"}}, 0x88) 257.465813ms ago: executing program 2 (id=910): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000680)={0x38, r2, 0xb97534d5fe9704cf, 0xfffeffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x30000) 210.772307ms ago: executing program 2 (id=911): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, "0b007e0b0a42b820a8e8c9881db660164333526f680eac8c863a63f79fe7f1d5514a5a2b016bc0ab07b7ea2914619c9248a3c94ff542d23d8d2253f8e3843394132280bfa1629888fe0f017805cd8f9bceac64d35287f5704d58322a0765d9585883e4f48958696855767c1b1ed4b2f5c0bde2d4bc831a95f12277658c0d707b77"}}, 0x88) 0s ago: executing program 3 (id=912): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r1, &(0x7f0000000300), 0x0}, 0x20) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) openat$null(0xffffff9c, 0x0, 0x101201, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="1000000001e80500", @ANYRES32], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000480)=""/134, 0x86}], 0x1, 0x800, 0x78) kernel console output (not intermixed with test programs): ysfs+0x1a3/0x260 [ 149.667672][ T5748] le_conn_complete_evt+0x11eb/0x1f60 [ 149.667700][ T5748] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 149.667727][ T5748] ? hci_event_packet+0x186/0xcd0 [ 149.667754][ T5748] hci_le_conn_complete_evt+0x23c/0x3a0 [ 149.667784][ T5748] ? skb_pull_data+0x15f/0x1e0 [ 149.667808][ T5748] hci_le_meta_evt+0x34a/0x5f0 [ 149.667838][ T5748] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 149.667878][ T5748] hci_event_packet+0x51c/0xcd0 [ 149.667908][ T5748] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 149.667933][ T5748] ? __pfx_hci_event_packet+0x10/0x10 [ 149.667965][ T5748] ? kcov_remote_start+0x384/0x670 [ 149.667993][ T5748] ? lockdep_hardirqs_on+0x78/0x100 [ 149.668027][ T5748] hci_rx_work+0x451/0xfc0 [ 149.668053][ T5748] process_one_work+0xa23/0x1940 [ 149.668091][ T5748] ? __pfx_process_one_work+0x10/0x10 [ 149.668120][ T5748] ? __pfx_hci_rx_work+0x10/0x10 [ 149.668136][ T5748] worker_thread+0x5ef/0xe50 [ 149.668165][ T5748] ? kthread+0x13a/0x450 [ 149.668183][ T5748] ? __pfx_worker_thread+0x10/0x10 [ 149.668203][ T5748] kthread+0x370/0x450 [ 149.668225][ T5748] ? __pfx_kthread+0x10/0x10 [ 149.668241][ T5748] ret_from_fork+0x72b/0xd50 [ 149.668263][ T5748] ? __pfx_ret_from_fork+0x10/0x10 [ 149.668282][ T5748] ? rcu_is_watching+0x12/0xc0 [ 149.668312][ T5748] ? __switch_to+0x800/0x10f0 [ 149.668342][ T5748] ? __pfx_kthread+0x10/0x10 [ 149.668373][ T5748] ret_from_fork_asm+0x1a/0x30 [ 149.668418][ T5748] [ 149.668998][ T5748] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 149.765722][ T5748] Bluetooth: hci1: failed to register connection device [ 150.471245][ T5896] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 150.643464][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 150.676749][ T5896] usb 5-1: config 0 has no interfaces? [ 150.694870][ T5896] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 150.701425][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.707616][ T5896] usb 5-1: Product: syz [ 150.713152][ T5896] usb 5-1: Manufacturer: syz [ 150.718152][ T5896] usb 5-1: SerialNumber: syz [ 150.731856][ T5896] usb 5-1: config 0 descriptor?? [ 150.851329][ T7457] binder: 7453:7457 unknown command 0 [ 150.853115][ T7457] binder: 7453:7457 ioctl c0306201 800001c0 returned -22 [ 150.893507][ T7456] netlink: 'syz.2.355': attribute type 1 has an invalid length. [ 150.918526][ T7456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.939960][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.951542][ T7456] bond2: (slave geneve2): making interface the new active one [ 150.955339][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.957938][ T7456] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 150.961689][ T5896] usb 5-1: USB disconnect, device number 14 [ 150.964539][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.968148][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.975496][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.985551][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.435909][ T7492] netlink: 'syz.1.361': attribute type 2 has an invalid length. [ 151.530022][ T7468] cgroup: fork rejected by pids controller in /syz2 [ 151.999461][ T7516] netlink: 'syz.3.362': attribute type 11 has an invalid length. [ 152.347089][ T7527] siw: device registration error -23 [ 152.354903][ T7527] rdma_rxe: rxe_newlink: failed to add syz_tun [ 152.357675][ T7527] lo speed is unknown, defaulting to 1000 [ 152.361612][ T7527] lo speed is unknown, defaulting to 1000 [ 152.364716][ T7527] lo speed is unknown, defaulting to 1000 [ 152.413568][ T7528] netlink: 72 bytes leftover after parsing attributes in process `syz.1.367'. [ 152.463556][ T5841] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 152.551047][ T5896] lo speed is unknown, defaulting to 1000 [ 152.554919][ T7527] infiniband sz1: set active [ 152.558548][ T7527] infiniband sz1: added lo [ 152.575390][ T7527] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 152.584041][ T7527] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 152.592396][ T7527] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 152.619100][ T7527] RDS/IB: sz1: added [ 152.623952][ T7527] smc: adding ib device sz1 with port count 1 [ 152.626850][ T7527] smc: ib device sz1 port 1 has no pnetid [ 152.632836][ T5896] lo speed is unknown, defaulting to 1000 [ 152.639971][ T7527] lo speed is unknown, defaulting to 1000 [ 152.743138][ T7527] lo speed is unknown, defaulting to 1000 [ 152.826593][ T7527] lo speed is unknown, defaulting to 1000 [ 152.913355][ T7527] lo speed is unknown, defaulting to 1000 [ 153.520985][ T5841] usb 8-1: not running at top speed; connect to a high speed hub [ 153.525880][ T5841] usb 8-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 153.537695][ T5841] usb 8-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.547817][ T5841] usb 8-1: config 1 interface 0 has no altsetting 0 [ 153.559546][ T5841] usb 8-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.40 [ 153.592358][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.596925][ T5841] usb 8-1: Product: ﳏ陠ꇬﲟ⠂햾㴘ࡁႧ촰矣᚝骔渗훲贳刂蒿䵫幛疣횼᫷둨孚淓쪹㆖㏔蚼魥뵾嫵泥묜꥚췚⻭磽뇏幑珂踳髊盇ᖓ轠斟墀⑒벊觎髹賥漂㗘ꠢ䍥飼篅փ埨 [ 153.789781][ T5896] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 153.951297][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 153.959450][ T5896] usb 5-1: config 0 has no interfaces? [ 153.973874][ T5896] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 153.990923][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 154.007862][ T5896] usb 5-1: Product: syz [ 154.016033][ T5896] usb 5-1: Manufacturer: syz [ 154.027875][ T5896] usb 5-1: SerialNumber: syz [ 154.134609][ T5896] usb 5-1: config 0 descriptor?? [ 154.549564][ T5841] usb 8-1: Manufacturer: 쨑׹‚큩휽ਠ랖넠潦⬬㆖닎㣩盵밋ﻛ䍹왷᪀鈍렭篨ᥙἣ즙씠焣픠ײַ胰⤎Ωذ쿈㌆꾖㺥톩ᬺ뫌生谀ꥠﶹ麟떵틺Ζ慨ꨁ灋胰铩ﯩ䦲湲ఉ䜎嘵숓푀僿䤓絁ᢸ的슬악侸ꤏ⋛◧宾鬎䗦ｊ⦓⪀膏᧣ැ㜨歽 [ 154.564061][ T5841] usb 8-1: SerialNumber: syz [ 154.586950][ T7523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.968368][ T5841] usbhid 8-1:1.0: can't add hid device: -71 [ 155.970688][ T5841] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 156.009918][ T5841] usb 8-1: USB disconnect, device number 19 [ 156.275823][ T7580] overlayfs: missing 'lowerdir' [ 156.281529][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'. [ 156.307999][ T7580] netlink: 'syz.2.379': attribute type 8 has an invalid length. [ 156.449725][ T5841] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 156.509321][ T7586] CIFS: Attempting to mount //127.0.0.1/share [ 156.512068][ T7586] CIFS: VFS: Error connecting to socket. Aborting operation. [ 156.514458][ T7586] CIFS: VFS: cifs_mount failed w/return code = -111 [ 156.599687][ T5841] usb 8-1: Using ep0 maxpacket: 8 [ 156.603027][ T5841] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.606764][ T5841] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.610487][ T5841] usb 8-1: config 0 interface 0 has no altsetting 0 [ 156.613552][ T5841] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 156.617203][ T5841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.624196][ T5841] usb 8-1: config 0 descriptor?? [ 157.025102][ T50] usb 5-1: USB disconnect, device number 15 [ 157.036634][ T5841] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 157.039045][ T5841] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 157.042789][ T5841] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 157.049709][ T5841] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 157.055186][ T5841] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 157.064449][ T5841] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 157.129695][ T5748] Bluetooth: hci1: command 0x0406 tx timeout [ 158.287567][ T5841] usb 8-1: reset high-speed USB device number 20 using dummy_hcd [ 158.485550][ T7621] netlink: 'syz.0.386': attribute type 2 has an invalid length. [ 158.559683][ T50] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 158.770749][ T50] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 158.774620][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.830503][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.932931][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.042675][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.371069][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.397651][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.403686][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.406674][ T29] usb 8-1: USB disconnect, device number 20 [ 159.419732][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.447232][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.463769][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.470751][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.484334][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.489534][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.493732][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.507794][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.518852][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.526589][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.531002][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.539470][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.546456][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.554394][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.564067][ T50] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.572241][ T50] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.582766][ T50] usb 7-1: config 0 interface 0 has no altsetting 0 [ 159.586141][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.390'. [ 159.594055][ T50] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 159.602270][ T50] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 159.609533][ T50] usb 7-1: Product: syz [ 159.615469][ T50] usb 7-1: Manufacturer: syz [ 159.620095][ T50] usb 7-1: SerialNumber: syz [ 159.636079][ T50] usb 7-1: config 0 descriptor?? [ 159.700983][ T50] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 159.965546][ T7636] CIFS: Attempting to mount //127.0.0.1/share [ 159.968080][ T7636] CIFS: VFS: Error connecting to socket. Aborting operation. [ 159.971642][ T7636] CIFS: VFS: cifs_mount failed w/return code = -111 [ 160.399653][ T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 160.573620][ T29] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 160.576892][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.581498][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 160.584660][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 160.587903][ T29] usb 5-1: Product: syz [ 160.590963][ T29] usb 5-1: Manufacturer: syz [ 160.592762][ T29] usb 5-1: SerialNumber: syz [ 160.602787][ T29] usb 5-1: config 0 descriptor?? [ 160.610725][ T7647] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 160.620550][ T29] usb 5-1: selecting invalid altsetting 0 [ 160.734929][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 160.788371][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 160.847627][ T29] usb 5-1: USB disconnect, device number 16 [ 161.288405][ C1] usb 7-1: yurex_control_callback - control failed: -2 [ 161.311593][ T29] usb 7-1: USB disconnect, device number 13 [ 161.322117][ T29] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 161.773190][ T7684] comedi comedi3: pcl818: I/O base address or length out of range [ 162.019690][ T29] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 162.642976][ T7709] gadgetfs: bound to dummy_udc driver [ 162.755775][ T7711] syzkaller0: entered promiscuous mode [ 162.759803][ T7711] syzkaller0: entered allmulticast mode [ 162.943256][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 162.955770][ T29] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 162.959099][ T29] usb 7-1: can't read configurations, error -61 [ 162.962569][ T7716] FAULT_INJECTION: forcing a failure. [ 162.962569][ T7716] name failslab, interval 1, probability 0, space 0, times 0 [ 162.966664][ T7716] CPU: 2 UID: 0 PID: 7716 Comm: syz.0.413 Not tainted syzkaller #0 PREEMPT(full) [ 162.966690][ T7716] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.966697][ T7716] Call Trace: [ 162.966702][ T7716] [ 162.966706][ T7716] dump_stack_lvl+0x100/0x190 [ 162.966729][ T7716] should_fail_ex.cold+0x5/0xa [ 162.966742][ T7716] should_failslab+0xc2/0x120 [ 162.966760][ T7716] kmem_cache_alloc_noprof+0x91/0x6a0 [ 162.966774][ T7716] ? find_held_lock+0x2b/0x80 [ 162.966792][ T7716] ? __schedule+0x31d8/0x6730 [ 162.966803][ T7716] ? do_getname+0x35/0x390 [ 162.966820][ T7716] do_getname+0x35/0x390 [ 162.966835][ T7716] do_sys_openat2+0xc7/0x1e0 [ 162.966850][ T7716] ? __pfx_do_sys_openat2+0x10/0x10 [ 162.966869][ T7716] __ia32_compat_sys_openat+0x12d/0x210 [ 162.966885][ T7716] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 162.966900][ T7716] ? fput+0x79/0x100 [ 162.966912][ T7716] ? exit_to_user_mode_loop+0x166/0x6f0 [ 162.966924][ T7716] ? rcu_is_watching+0x12/0xc0 [ 162.966947][ T7716] __do_fast_syscall_32+0xe7/0x970 [ 162.966965][ T7716] ? lockdep_hardirqs_on+0x78/0x100 [ 162.966985][ T7716] do_fast_syscall_32+0x32/0x70 [ 162.967004][ T7716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 162.967019][ T7716] RIP: 0023:0xf7f08fec [ 162.967045][ T7716] Code: Unable to access opcode bytes at 0xf7f08fc2. [ 162.967052][ T7716] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 162.967063][ T7716] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 162.967070][ T7716] RDX: 0000000000001842 RSI: 0000000000000136 RDI: 0000000000000000 [ 162.967076][ T7716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.967083][ T7716] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 162.967089][ T7716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.967102][ T7716] [ 163.034166][ T7717] 9pnet_virtio: no channels available for device syz [ 163.089963][ T29] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 163.947266][ T7726] 9pnet_virtio: no channels available for device syz [ 164.009990][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 164.013874][ T29] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 164.017187][ T29] usb 7-1: can't read configurations, error -61 [ 164.020268][ T29] usb usb7-port1: attempt power cycle [ 164.390916][ T29] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 164.440991][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 164.451610][ T29] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 164.459547][ T29] usb 7-1: can't read configurations, error -61 [ 165.759725][ T29] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 165.781313][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 165.787308][ T29] usb 7-1: config 0 has no interfaces? [ 165.802274][ T29] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 165.822838][ T29] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 165.837660][ T29] usb 7-1: Product: syz [ 165.844321][ T29] usb 7-1: Manufacturer: syz [ 165.849031][ T29] usb 7-1: SerialNumber: syz [ 165.855074][ T29] usb 7-1: config 0 descriptor?? [ 165.981565][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 165.981585][ T42] audit: type=1326 audit(1785305460.562:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 166.027801][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 166.028922][ T42] audit: type=1326 audit(1785305460.562:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 166.055472][ T42] audit: type=1326 audit(1785305460.562:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.425" exe="/syz-executor" sig=0 arch=40000003 syscall=62 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 166.064611][ T42] audit: type=1326 audit(1785305460.562:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 166.074027][ T42] audit: type=1326 audit(1785305460.562:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.425" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 166.087036][ T42] audit: type=1326 audit(1785305460.562:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 166.113908][ T42] audit: type=1326 audit(1785305460.562:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.425" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 166.139734][ T42] audit: type=1326 audit(1785305460.562:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 166.164474][ T42] audit: type=1326 audit(1785305460.562:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.425" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 166.190074][ T42] audit: type=1326 audit(1785305460.582:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7762 comm="syz.0.425" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08fec code=0x7ffc0000 [ 166.265327][ T5896] usb 7-1: USB disconnect, device number 17 [ 166.489386][ T7781] CIFS: Attempting to mount //127.0.0.1/share [ 166.492921][ T7781] CIFS: VFS: Error connecting to socket. Aborting operation. [ 166.496061][ T7781] CIFS: VFS: cifs_mount failed w/return code = -111 [ 166.621151][ T7784] CIFS: Attempting to mount //127.0.0.1/share [ 166.641124][ T7784] CIFS: VFS: Error connecting to socket. Aborting operation. [ 166.643762][ T7784] CIFS: VFS: cifs_mount failed w/return code = -111 [ 166.847537][ T7791] FAULT_INJECTION: forcing a failure. [ 166.847537][ T7791] name failslab, interval 1, probability 0, space 0, times 0 [ 166.851568][ T7791] CPU: 2 UID: 0 PID: 7791 Comm: syz.3.430 Not tainted syzkaller #0 PREEMPT(full) [ 166.851588][ T7791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.851595][ T7791] Call Trace: [ 166.851600][ T7791] [ 166.851604][ T7791] dump_stack_lvl+0x100/0x190 [ 166.851622][ T7791] should_fail_ex.cold+0x5/0xa [ 166.851636][ T7791] should_failslab+0xc2/0x120 [ 166.851652][ T7791] __kmalloc_noprof+0xfc/0x820 [ 166.851667][ T7791] ? bpf_test_init.isra.0+0x88/0x100 [ 166.851686][ T7791] bpf_test_init.isra.0+0x88/0x100 [ 166.851704][ T7791] bpf_prog_test_run_xdp+0x57e/0x1670 [ 166.851720][ T7791] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 166.851735][ T7791] ? fput+0x79/0x100 [ 166.851748][ T7791] ? __bpf_prog_get+0x97/0x2a0 [ 166.851765][ T7791] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 166.851777][ T7791] __sys_bpf+0x2a12/0x4e80 [ 166.851793][ T7791] ? __pfx___sys_bpf+0x10/0x10 [ 166.851805][ T7791] ? find_held_lock+0x2b/0x80 [ 166.851819][ T7791] ? get_pid_task+0xfc/0x250 [ 166.851834][ T7791] ? get_pid_task+0xfc/0x250 [ 166.851851][ T7791] ? proc_fail_nth_write+0x9f/0x220 [ 166.851868][ T7791] ? find_held_lock+0x2b/0x80 [ 166.851883][ T7791] ? rcu_read_lock_any_held+0x6a/0xa0 [ 166.851898][ T7791] ? find_held_lock+0x2b/0x80 [ 166.851911][ T7791] ? ksys_write+0x190/0x250 [ 166.851932][ T7791] ? ksys_write+0x190/0x250 [ 166.851954][ T7791] ? fput+0x79/0x100 [ 166.851968][ T7791] ? __ia32_sys_bpf+0xcc/0x170 [ 166.851979][ T7791] __ia32_sys_bpf+0xcc/0x170 [ 166.851991][ T7791] ? __do_fast_syscall_32+0x98/0x970 [ 166.852007][ T7791] __do_fast_syscall_32+0xe7/0x970 [ 166.852020][ T7791] ? lockdep_hardirqs_on+0x78/0x100 [ 166.852034][ T7791] do_fast_syscall_32+0x32/0x70 [ 166.852048][ T7791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.852063][ T7791] RIP: 0023:0xf702efec [ 166.852076][ T7791] Code: Unable to access opcode bytes at 0xf702efc2. [ 166.852082][ T7791] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 166.852093][ T7791] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 166.852100][ T7791] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.852106][ T7791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.852111][ T7791] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 166.852117][ T7791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.852131][ T7791] [ 167.189125][ T7807] overlayfs: missing 'lowerdir' [ 167.213763][ T7809] comedi comedi3: s526: I/O base address or length out of range [ 167.819965][ T5841] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 168.570203][ T5841] usb 6-1: Using ep0 maxpacket: 32 [ 168.807387][ T5841] usb 6-1: config 0 has no interfaces? [ 168.812418][ T5841] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 168.816229][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 168.819179][ T5841] usb 6-1: Product: syz [ 168.820925][ T5841] usb 6-1: Manufacturer: syz [ 168.822643][ T5841] usb 6-1: SerialNumber: syz [ 168.832285][ T5841] usb 6-1: config 0 descriptor?? [ 169.024841][ T7856] overlayfs: missing 'lowerdir' [ 169.075994][ T7858] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 169.109808][ T7858] md: array md0 already has disks! [ 169.191234][ T7858] md: could not open device unknown-block(7,0). [ 169.196233][ T7858] md: error, md_import_device() returned -16 [ 169.199233][ T7859] md: could not open device unknown-block(7,1). [ 169.202443][ T7859] md: error, md_import_device() returned -16 [ 169.617299][ T7858] md/raid:md0: not clean -- starting background reconstruction [ 169.620885][ T7858] md/raid:md0: device loop1 operational as raid disk 1 [ 169.622976][ T7858] md/raid:md0: device loop0 operational as raid disk 0 [ 169.642475][ T7858] md/raid:md0: cannot start dirty degraded array. [ 169.972012][ T7858] md/raid:md0: failed to run raid set. [ 169.974911][ T7858] md: pers->run() failed ... [ 170.266936][ T5823] usb 6-1: USB disconnect, device number 14 [ 171.249691][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 171.267428][ T7910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.456'. [ 172.110143][ T5841] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 172.186719][ T7921] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 172.291959][ T7921] overlayfs: overlapping lowerdir path [ 172.439659][ T5841] usb 8-1: Using ep0 maxpacket: 32 [ 172.442753][ T5841] usb 8-1: config 0 has no interfaces? [ 172.448190][ T5841] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 172.454752][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 172.460196][ T5841] usb 8-1: Product: syz [ 172.461525][ T5841] usb 8-1: Manufacturer: syz [ 172.469440][ T5841] usb 8-1: SerialNumber: syz [ 172.475693][ T5841] usb 8-1: config 0 descriptor?? [ 172.860333][ T7937] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 172.881919][ T7937] qnx6: wrong signature (magic) in superblock #1. [ 172.884581][ T7937] qnx6: unable to read the first superblock [ 173.386279][ T7961] netlink: 'syz.1.468': attribute type 1 has an invalid length. [ 173.389457][ T7961] netlink: 244 bytes leftover after parsing attributes in process `syz.1.468'. [ 173.589555][ T5832] IPVS: starting estimator thread 0... [ 173.679671][ T7969] IPVS: using max 44 ests per chain, 105600 per kthread [ 173.866337][ T7972] netlink: 14 bytes leftover after parsing attributes in process `syz.2.470'. [ 173.866778][ T7974] netlink: 14 bytes leftover after parsing attributes in process `syz.2.470'. [ 173.876244][ T7972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.885001][ T7972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.889379][ T7972] bond0 (unregistering): Released all slaves [ 173.956861][ T7977] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 173.958977][ T7977] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 173.962478][ T7977] vhci_hcd vhci_hcd.0: Device attached [ 173.972594][ T7978] vhci_hcd: connection closed [ 173.975268][ T5796] vhci_hcd vhci_hcd.0: stop threads [ 173.983037][ T5796] vhci_hcd vhci_hcd.0: release socket [ 173.988580][ T5796] vhci_hcd vhci_hcd.0: disconnect device [ 174.933544][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 174.940118][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 174.943918][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 174.947961][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 174.951783][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 175.170647][ T10] usb 8-1: USB disconnect, device number 21 [ 175.369712][ T5758] Bluetooth: hci0: command 0x0406 tx timeout [ 175.369768][ T5755] Bluetooth: hci1: command 0x0406 tx timeout [ 175.379744][ T5755] Bluetooth: hci2: command 0x0406 tx timeout [ 175.632005][ T8027] FAULT_INJECTION: forcing a failure. [ 175.632005][ T8027] name failslab, interval 1, probability 0, space 0, times 0 [ 175.637228][ T8027] CPU: 3 UID: 0 PID: 8027 Comm: syz.3.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.637247][ T8027] Tainted: [L]=SOFTLOCKUP [ 175.637251][ T8027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 175.637258][ T8027] Call Trace: [ 175.637264][ T8027] [ 175.637269][ T8027] dump_stack_lvl+0x100/0x190 [ 175.637292][ T8027] should_fail_ex.cold+0x5/0xa [ 175.637308][ T8027] should_failslab+0xc2/0x120 [ 175.637325][ T8027] __kmalloc_noprof+0xfc/0x820 [ 175.637341][ T8027] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 175.637358][ T8027] kernfs_fop_write_iter+0x26a/0x5f0 [ 175.637374][ T8027] vfs_write+0x6ac/0x1050 [ 175.637385][ T8027] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 175.637400][ T8027] ? __pfx_vfs_write+0x10/0x10 [ 175.637410][ T8027] ? find_held_lock+0x2b/0x80 [ 175.637434][ T8027] ksys_write+0x12a/0x250 [ 175.637444][ T8027] ? __pfx_ksys_write+0x10/0x10 [ 175.637454][ T8027] ? ksys_write+0x1ac/0x250 [ 175.637464][ T8027] ? __pfx_ksys_write+0x10/0x10 [ 175.637478][ T8027] __do_fast_syscall_32+0xe7/0x970 [ 175.637493][ T8027] ? lockdep_hardirqs_on+0x78/0x100 [ 175.637507][ T8027] do_fast_syscall_32+0x32/0x70 [ 175.637521][ T8027] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.637537][ T8027] RIP: 0023:0xf702efec [ 175.637551][ T8027] Code: Unable to access opcode bytes at 0xf702efc2. [ 175.637556][ T8027] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 175.637567][ T8027] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000240 [ 175.637574][ T8027] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 175.637580][ T8027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.637586][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.637592][ T8027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.637605][ T8027] [ 175.785026][ T8035] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 175.841780][ T8035] md: array md0 already has disks! [ 175.916003][ T8035] md: could not open device unknown-block(7,0). [ 175.918778][ T8035] md: error, md_import_device() returned -16 [ 175.928178][ T8042] md: could not open device unknown-block(7,1). [ 175.938939][ T8042] md: error, md_import_device() returned -16 [ 176.716400][ T42] kauditd_printk_skb: 47 callbacks suppressed [ 176.716413][ T42] audit: type=1326 audit(1785305471.292:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 176.735616][ T42] audit: type=1326 audit(1785305471.312:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 176.759114][ T42] audit: type=1326 audit(1785305471.312:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.489" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 176.783380][ T42] audit: type=1326 audit(1785305471.312:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 176.843482][ T8035] md/raid:md0: not clean -- starting background reconstruction [ 176.845011][ T42] audit: type=1326 audit(1785305471.312:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.489" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71172eb code=0x7ffc0000 [ 176.846604][ T8035] md/raid:md0: device loop1 operational as raid disk 1 [ 176.870598][ T42] audit: type=1326 audit(1785305471.312:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 176.880479][ T42] audit: type=1326 audit(1785305471.312:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.489" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 176.887516][ T42] audit: type=1326 audit(1785305471.312:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 176.888313][ T8035] md/raid:md0: device loop0 operational as raid disk 0 [ 176.894625][ T42] audit: type=1326 audit(1785305471.312:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.489" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 176.894653][ T42] audit: type=1326 audit(1785305471.332:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 176.907759][ T8035] md/raid:md0: couldn't allocate thread. [ 177.473424][ T8035] md: pers->run() failed ... [ 178.179765][ T5896] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 178.199792][ T5841] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 178.341564][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 178.344793][ T5896] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.348590][ T5896] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.354521][ T5896] usb 6-1: config 0 interface 0 has no altsetting 0 [ 178.356727][ T5896] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 178.360310][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.364654][ T5896] usb 6-1: config 0 descriptor?? [ 178.369662][ T5841] usb 7-1: Using ep0 maxpacket: 32 [ 178.386850][ T5841] usb 7-1: config 0 has no interfaces? [ 178.395968][ T5841] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 178.401883][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 178.408346][ T5841] usb 7-1: Product: syz [ 178.431613][ T5841] usb 7-1: Manufacturer: syz [ 178.439187][ T5841] usb 7-1: SerialNumber: syz [ 178.468889][ T5841] usb 7-1: config 0 descriptor?? [ 179.624848][ T5896] usbhid 6-1:0.0: can't add hid device: -71 [ 179.634250][ T5896] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 179.700176][ T5896] usb 6-1: USB disconnect, device number 15 [ 179.718518][ T5856] usb 7-1: USB disconnect, device number 18 [ 180.080142][ T29] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 180.244216][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 180.252133][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.256930][ T29] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.263128][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.269046][ T29] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 180.277892][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.284726][ T29] usb 5-1: config 0 descriptor?? [ 180.662271][ T8147] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.720357][ T8147] md: array md0 already has disks! [ 180.722931][ T8150] md: could not open device unknown-block(7,0). [ 180.725422][ T8150] md: error, md_import_device() returned -16 [ 180.760578][ T29] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 180.765109][ T29] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 180.770212][ T29] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 180.774379][ T29] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 180.778580][ T29] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 180.782453][ T29] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 180.809113][ T8150] md/raid:md0: not clean -- starting background reconstruction [ 180.811928][ T8150] md/raid:md0: device loop1 operational as raid disk 1 [ 180.814326][ T8150] md/raid:md0: device loop0 operational as raid disk 0 [ 181.050208][ T8150] md/raid:md0: cannot start dirty degraded array. [ 181.243095][ T8150] md/raid:md0: failed to run raid set. [ 181.245553][ T8150] md: pers->run() failed ... [ 181.248226][ T8147] md: could not open device unknown-block(7,1). [ 181.251413][ T8147] md: error, md_import_device() returned -16 [ 181.378427][ T10] usb 5-1: USB disconnect, device number 17 [ 181.512893][ T8149] syz.1.499 (8149) used greatest stack depth: 18056 bytes left [ 182.239712][ T5841] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 182.426350][ T8194] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 183.546332][ T5841] usb 6-1: Using ep0 maxpacket: 8 [ 183.555407][ T5841] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.571766][ T5841] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.593425][ T5841] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.605091][ T5841] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 183.620713][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.644629][ T5841] usb 6-1: config 0 descriptor?? [ 183.959715][ T50] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 184.119737][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 184.337416][ T50] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.341338][ T50] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 184.343895][ T50] usb 5-1: can't read configurations, error -71 [ 184.365103][ T5841] usbhid 6-1:0.0: can't add hid device: -71 [ 184.367205][ T5841] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 184.372840][ T5841] usb 6-1: USB disconnect, device number 16 [ 184.615982][ T8214] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 184.910566][ T8230] FAULT_INJECTION: forcing a failure. [ 184.910566][ T8230] name failslab, interval 1, probability 0, space 0, times 0 [ 184.915680][ T8230] CPU: 0 UID: 0 PID: 8230 Comm: syz.2.527 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.915709][ T8230] Tainted: [L]=SOFTLOCKUP [ 184.915715][ T8230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.915724][ T8230] Call Trace: [ 184.915731][ T8230] [ 184.915741][ T8230] dump_stack_lvl+0x100/0x190 [ 184.915769][ T8230] should_fail_ex.cold+0x5/0xa [ 184.915790][ T8230] should_failslab+0xc2/0x120 [ 184.915815][ T8230] __kmalloc_noprof+0xfc/0x820 [ 184.915836][ T8230] ? __kernel_text_address+0xd/0x30 [ 184.915866][ T8230] ? unwind_get_return_address+0x59/0xa0 [ 184.915891][ T8230] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 184.915920][ T8230] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 184.915948][ T8230] genl_family_rcv_msg_doit+0xc7/0x300 [ 184.915972][ T8230] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 184.915992][ T8230] ? genl_get_cmd+0x3e7/0x760 [ 184.916017][ T8230] ? bpf_lsm_capable+0x9/0x10 [ 184.916038][ T8230] ? security_capable+0x80/0x260 [ 184.916065][ T8230] genl_rcv_msg+0x560/0x800 [ 184.916090][ T8230] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.916111][ T8230] ? __pfx_ip_vs_genl_get_cmd+0x10/0x10 [ 184.916138][ T8230] ? __lock_acquire+0x49f/0x1a40 [ 184.916174][ T8230] netlink_rcv_skb+0x159/0x420 [ 184.916193][ T8230] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.916214][ T8230] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.916243][ T8230] ? netlink_deliver_tap+0x1ae/0xcc0 [ 184.916265][ T8230] genl_rcv+0x28/0x40 [ 184.916284][ T8230] netlink_unicast+0x585/0x850 [ 184.916305][ T8230] ? __pfx_netlink_unicast+0x10/0x10 [ 184.916329][ T8230] netlink_sendmsg+0x8b0/0xda0 [ 184.916351][ T8230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.916369][ T8230] ? apparmor_socket_sendmsg+0x15b/0x270 [ 184.916385][ T8230] ____sys_sendmsg+0xa4d/0xbe0 [ 184.916396][ T8230] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.916414][ T8230] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.916442][ T8230] ___sys_sendmsg+0x190/0x1e0 [ 184.916463][ T8230] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.916493][ T8230] ? find_held_lock+0x2b/0x80 [ 184.916529][ T8230] __sys_sendmsg+0x160/0x210 [ 184.916553][ T8230] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.916583][ T8230] ? __pfx_ksys_write+0x10/0x10 [ 184.916606][ T8230] __do_fast_syscall_32+0xe7/0x970 [ 184.916629][ T8230] ? lockdep_hardirqs_on+0x78/0x100 [ 184.916652][ T8230] do_fast_syscall_32+0x32/0x70 [ 184.916672][ T8230] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.916695][ T8230] RIP: 0023:0xf70aefec [ 184.916717][ T8230] Code: Unable to access opcode bytes at 0xf70aefc2. [ 184.916724][ T8230] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 184.916743][ T8230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 184.916753][ T8230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.916764][ T8230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.916773][ T8230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.916782][ T8230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.916806][ T8230] [ 184.921129][ T5832] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 185.115290][ T8237] CIFS: Attempting to mount //127.0.0.1/share [ 185.118866][ T8237] CIFS: VFS: Error connecting to socket. Aborting operation. [ 185.123893][ T8237] CIFS: VFS: cifs_mount failed w/return code = -111 [ 185.200288][ T5832] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 185.203695][ T5832] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.206632][ T5832] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.210851][ T5832] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.213901][ T5832] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.216841][ T5832] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.220612][ T5832] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.224142][ T5832] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.227300][ T5832] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.231029][ T5832] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.233924][ T5832] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.236868][ T5832] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.240664][ T5832] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.243588][ T5832] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.246517][ T5832] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.250607][ T5832] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.253511][ T5832] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.256418][ T5832] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.260132][ T5832] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.263118][ T5832] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.266509][ T5832] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.270784][ T5832] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.273703][ T5832] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.276577][ T5832] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.280299][ T5832] usb 8-1: config 0 interface 0 has no altsetting 0 [ 185.283974][ T5832] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 185.286988][ T5832] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 185.290038][ T5832] usb 8-1: Product: syz [ 185.291458][ T5832] usb 8-1: Manufacturer: syz [ 185.293021][ T5832] usb 8-1: SerialNumber: syz [ 185.296270][ T5832] usb 8-1: config 0 descriptor?? [ 185.301417][ T5832] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 185.628250][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.632259][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.647446][ C3] usb 8-1: yurex_control_callback - control failed: -2 [ 185.654728][ T5832] usb 8-1: USB disconnect, device number 22 [ 185.659279][ T5832] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 186.025744][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 186.125406][ T8258] netlink: 'syz.1.536': attribute type 2 has an invalid length. [ 186.396436][ T8264] CIFS: Attempting to mount //127.0.0.1/share [ 186.499833][ T5832] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 186.649691][ T5832] usb 8-1: Using ep0 maxpacket: 8 [ 186.654100][ T5832] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.658708][ T5832] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.663289][ T5832] usb 8-1: config 0 interface 0 has no altsetting 0 [ 186.666438][ T5832] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 186.670535][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.680185][ T5832] usb 8-1: config 0 descriptor?? [ 186.836567][ T8264] CIFS: VFS: cifs_mount failed w/return code = -512 [ 187.051112][ T8267] FAULT_INJECTION: forcing a failure. [ 187.051112][ T8267] name failslab, interval 1, probability 0, space 0, times 0 [ 187.057403][ T8267] CPU: 0 UID: 0 PID: 8267 Comm: syz.0.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.057422][ T8267] Tainted: [L]=SOFTLOCKUP [ 187.057425][ T8267] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.057432][ T8267] Call Trace: [ 187.057436][ T8267] [ 187.057440][ T8267] dump_stack_lvl+0x100/0x190 [ 187.057459][ T8267] should_fail_ex.cold+0x5/0xa [ 187.057473][ T8267] should_failslab+0xc2/0x120 [ 187.057489][ T8267] kmem_cache_alloc_noprof+0x91/0x6a0 [ 187.057504][ T8267] ? __pmd_alloc+0xbf/0x950 [ 187.057523][ T8267] __pmd_alloc+0xbf/0x950 [ 187.057540][ T8267] __handle_mm_fault+0xa9c/0x2a00 [ 187.057553][ T8267] ? mt_find+0x45e/0x8e0 [ 187.057568][ T8267] ? __pfx___handle_mm_fault+0x10/0x10 [ 187.057578][ T8267] ? __pfx_mt_find+0x10/0x10 [ 187.057600][ T8267] ? find_vma+0xbf/0x140 [ 187.057613][ T8267] ? __pfx_find_vma+0x10/0x10 [ 187.057628][ T8267] handle_mm_fault+0x37b/0xa30 [ 187.057641][ T8267] do_user_addr_fault+0x74c/0x12f0 [ 187.057662][ T8267] exc_page_fault+0x6f/0xd0 [ 187.057675][ T8267] asm_exc_page_fault+0x26/0x30 [ 187.057686][ T8267] RIP: 0010:_copy_from_user+0x93/0xd0 [ 187.057704][ T8267] Code: d6 ed fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 e9 6a 5d fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 25 d1 [ 187.057715][ T8267] RSP: 0018:ffffc90002dbfd68 EFLAGS: 00050246 [ 187.057725][ T8267] RAX: 0000000000000001 RBX: 0000000080000080 RCX: 000000000000003a [ 187.057732][ T8267] RDX: 0000000000000001 RSI: 0000000080000080 RDI: ffffc90002dbfdd8 [ 187.057738][ T8267] RBP: 000000000000003a R08: 0000000000000001 R09: fffff520005b7fc2 [ 187.057745][ T8267] R10: ffffc90002dbfe11 R11: 0000000000000000 R12: 0000000000000000 [ 187.057751][ T8267] R13: ffffc90002dbfdd8 R14: 000000000000003a R15: 0000000000000000 [ 187.057764][ T8267] ? _copy_from_user+0x87/0xd0 [ 187.057780][ T8267] move_addr_to_kernel+0x65/0x170 [ 187.057823][ T8267] __sys_connect+0xb5/0x170 [ 187.057837][ T8267] ? __pfx___sys_connect+0x10/0x10 [ 187.057849][ T8267] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.057868][ T8267] ? ksys_write+0x1ac/0x250 [ 187.057879][ T8267] ? __pfx_ksys_write+0x10/0x10 [ 187.057890][ T8267] __ia32_sys_connect+0x71/0xb0 [ 187.057903][ T8267] ? lockdep_hardirqs_on+0x78/0x100 [ 187.057915][ T8267] __do_fast_syscall_32+0xe7/0x970 [ 187.057929][ T8267] ? lockdep_hardirqs_on+0x78/0x100 [ 187.057942][ T8267] do_fast_syscall_32+0x32/0x70 [ 187.057956][ T8267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.057969][ T8267] RIP: 0023:0xf7f08fec [ 187.057983][ T8267] Code: Unable to access opcode bytes at 0xf7f08fc2. [ 187.057987][ T8267] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a [ 187.058002][ T8267] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 187.058008][ T8267] RDX: 000000000000003a RSI: 0000000000000000 RDI: 0000000000000000 [ 187.058014][ T8267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.058020][ T8267] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.058026][ T8267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.058039][ T8267] [ 187.181847][ T5832] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 187.187518][ T5832] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 187.199686][ T5832] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 187.202501][ T5832] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 187.205329][ T5832] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 187.208583][ T5832] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 187.359834][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 187.363604][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 187.368554][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 187.402959][ T5823] usb 8-1: USB disconnect, device number 23 [ 187.412472][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 187.430503][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 187.443588][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 187.467221][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 187.483682][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 187.488484][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 188.786639][ T8303] smbdirect: ib_dev[syz1] removed [ 189.033655][ T8312] tipc: Started in network mode [ 189.037409][ T8312] tipc: Node identity 0010000000000000002, cluster identity 1 [ 189.686437][ T8320] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 190.382247][ T8338] syzkaller0: entered promiscuous mode [ 190.384207][ T8338] syzkaller0: entered allmulticast mode [ 191.239973][ T5832] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 191.389760][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 191.397051][ T5832] usb 6-1: config 0 has no interfaces? [ 191.403206][ T5832] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 191.409417][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.417656][ T5832] usb 6-1: Product: syz [ 191.419079][ T5832] usb 6-1: Manufacturer: syz [ 191.424500][ T5832] usb 6-1: SerialNumber: syz [ 191.428283][ T5832] usb 6-1: config 0 descriptor?? [ 191.504858][ T8361] __nla_validate_parse: 1 callbacks suppressed [ 191.504880][ T8361] netlink: 14 bytes leftover after parsing attributes in process `syz.0.572'. [ 191.515980][ T8361] lo speed is unknown, defaulting to 1000 [ 191.979975][ T8353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.985855][ T8353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.023547][ T8376] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 192.026446][ T845] usb 6-1: USB disconnect, device number 17 [ 192.078710][ T8380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'. [ 192.348622][ T8382] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 192.351331][ T8382] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 192.358723][ T8382] vhci_hcd vhci_hcd.0: Device attached [ 192.639792][ T29] usb 44-1: SetAddress Request (2) to port 0 [ 192.643678][ T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 192.729274][ T8389] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 192.810181][ T8389] md: array md0 already has disks! [ 192.855922][ T8394] CIFS: Attempting to mount //127.0.0.1/share [ 192.910038][ T8389] md: could not open device unknown-block(7,0). [ 192.914057][ T8389] md: error, md_import_device() returned -16 [ 192.951127][ T8389] md: could not open device unknown-block(7,1). [ 192.953351][ T8389] md: error, md_import_device() returned -16 [ 193.160272][ T6006] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 193.249230][ T8389] md/raid:md0: not clean -- starting background reconstruction [ 193.258555][ T8389] md/raid:md0: device loop1 operational as raid disk 1 [ 193.265559][ T8389] md/raid:md0: device loop0 operational as raid disk 0 [ 193.285830][ T8389] md/raid:md0: cannot start dirty degraded array. [ 193.319849][ T6006] usb 7-1: Using ep0 maxpacket: 32 [ 193.372796][ T6006] usb 7-1: config 0 has no interfaces? [ 193.379083][ T6006] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 193.382548][ T6006] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 193.385641][ T6006] usb 7-1: Product: syz [ 193.419471][ T6006] usb 7-1: Manufacturer: syz [ 193.421183][ T6006] usb 7-1: SerialNumber: syz [ 193.509246][ T8394] CIFS: VFS: cifs_mount failed w/return code = -512 [ 193.740018][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 193.747686][ T8418] netlink: 104 bytes leftover after parsing attributes in process `syz.0.583'. [ 193.753369][ T8418] netlink: 104 bytes leftover after parsing attributes in process `syz.0.583'. [ 193.773282][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.776711][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.806610][ T6006] usb 7-1: config 0 descriptor?? [ 193.842607][ T8383] vhci_hcd: connection reset by peer [ 193.851903][ T5846] vhci_hcd vhci_hcd.3: stop threads [ 193.853559][ T5846] vhci_hcd vhci_hcd.3: release socket [ 193.855529][ T5846] vhci_hcd vhci_hcd.3: disconnect device [ 193.874335][ T8389] md/raid:md0: failed to run raid set. [ 193.882359][ T8389] md: pers->run() failed ... [ 194.004773][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 194.007603][ T8423] FAULT_INJECTION: forcing a failure. [ 194.007603][ T8423] name failslab, interval 1, probability 0, space 0, times 0 [ 194.016335][ T8423] CPU: 1 UID: 0 PID: 8423 Comm: syz.1.585 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.016355][ T8423] Tainted: [L]=SOFTLOCKUP [ 194.016359][ T8423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.016366][ T8423] Call Trace: [ 194.016371][ T8423] [ 194.016376][ T8423] dump_stack_lvl+0x100/0x190 [ 194.016394][ T8423] should_fail_ex.cold+0x5/0xa [ 194.016405][ T8423] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 194.016419][ T8423] should_failslab+0xc2/0x120 [ 194.016436][ T8423] kmem_cache_alloc_noprof+0x91/0x6a0 [ 194.016452][ T8423] ? skb_clone+0x190/0x400 [ 194.016469][ T8423] skb_clone+0x190/0x400 [ 194.016484][ T8423] netlink_deliver_tap+0xaed/0xcc0 [ 194.016498][ T8423] netlink_unicast+0x6a5/0x850 [ 194.016512][ T8423] ? __pfx_netlink_unicast+0x10/0x10 [ 194.016523][ T8423] ? genl_rcv_msg+0x4be/0x800 [ 194.016539][ T8423] netlink_ack+0x655/0xb80 [ 194.016555][ T8423] netlink_rcv_skb+0x333/0x420 [ 194.016566][ T8423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 194.016580][ T8423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.016597][ T8423] ? netlink_deliver_tap+0x1ae/0xcc0 [ 194.016610][ T8423] genl_rcv+0x28/0x40 [ 194.016621][ T8423] netlink_unicast+0x585/0x850 [ 194.016635][ T8423] ? __pfx_netlink_unicast+0x10/0x10 [ 194.016650][ T8423] netlink_sendmsg+0x8b0/0xda0 [ 194.016664][ T8423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.016678][ T8423] ? apparmor_socket_sendmsg+0x15b/0x270 [ 194.016692][ T8423] ____sys_sendmsg+0xa4d/0xbe0 [ 194.016702][ T8423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.016715][ T8423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.016732][ T8423] ___sys_sendmsg+0x190/0x1e0 [ 194.016745][ T8423] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.016762][ T8423] ? find_held_lock+0x2b/0x80 [ 194.016785][ T8423] __sys_sendmsg+0x160/0x210 [ 194.016801][ T8423] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.016819][ T8423] ? __pfx_ksys_write+0x10/0x10 [ 194.016832][ T8423] __do_fast_syscall_32+0xe7/0x970 [ 194.016846][ T8423] ? lockdep_hardirqs_on+0x78/0x100 [ 194.016860][ T8423] do_fast_syscall_32+0x32/0x70 [ 194.016875][ T8423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.016889][ T8423] RIP: 0023:0xf6fdefec [ 194.016903][ T8423] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 194.016908][ T8423] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 194.016920][ T8423] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 194.016926][ T8423] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.016933][ T8423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.016939][ T8423] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 194.016949][ T8423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.016962][ T8423] [ 194.049885][ T5096] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 194.085658][ T6006] usb 7-1: USB disconnect, device number 19 [ 194.249773][ T5096] usb 5-1: Using ep0 maxpacket: 32 [ 194.253265][ T5096] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 194.257283][ T5096] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 194.263977][ T5096] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.268094][ T5096] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 194.276272][ T5096] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 194.280284][ T5096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.283315][ T5096] usb 5-1: Product: syz [ 194.284870][ T5096] usb 5-1: Manufacturer: syz [ 194.286865][ T5096] usb 5-1: SerialNumber: syz [ 194.298530][ C3] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 194.305186][ T5096] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input14 [ 194.328124][ T8430] Trying to write to read-only block-device nullb0 [ 194.670465][ T5096] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 194.712826][ T8453] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 194.922441][ T5761] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 194.927574][ T5761] CPU: 1 UID: 0 PID: 5761 Comm: kworker/u34:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.927629][ T5761] Tainted: [L]=SOFTLOCKUP [ 194.927638][ T5761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 194.927674][ T5761] Workqueue: hci2 hci_rx_work [ 194.927705][ T5761] Call Trace: [ 194.927715][ T5761] [ 194.927725][ T5761] dump_stack_lvl+0x100/0x190 [ 194.927763][ T5761] sysfs_warn_dup.cold+0x1c/0x28 [ 194.927798][ T5761] sysfs_create_dir_ns+0x24b/0x2b0 [ 194.927840][ T5761] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 194.927878][ T5761] ? find_held_lock+0x2b/0x80 [ 194.927904][ T5761] ? kobject_add_internal+0x25f/0x930 [ 194.927948][ T5761] ? kobject_add_internal+0x25f/0x930 [ 194.927986][ T5761] ? do_raw_spin_unlock+0x145/0x1e0 [ 194.928024][ T5761] kobject_add_internal+0x2c8/0x930 [ 194.928072][ T5761] kobject_add+0x16a/0x1e0 [ 194.928103][ T5761] ? __pfx_kobject_add+0x10/0x10 [ 194.928141][ T5761] ? preempt_schedule_thunk+0x16/0x40 [ 194.928187][ T5761] ? kobject_put+0xb9/0x640 [ 194.928213][ T5761] ? _raw_spin_unlock+0x3e/0x50 [ 194.928249][ T5761] device_add+0x294/0x1970 [ 194.928284][ T5761] ? __pfx_dev_set_name+0x10/0x10 [ 194.928312][ T5761] ? __pfx_device_add+0x10/0x10 [ 194.928350][ T5761] ? mgmt_send_event_skb+0x2fb/0x460 [ 194.928380][ T5761] hci_conn_add_sysfs+0x1a3/0x260 [ 194.928416][ T5761] le_conn_complete_evt+0x11eb/0x1f60 [ 194.928446][ T5761] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 194.928477][ T5761] ? hci_event_packet+0x186/0xcd0 [ 194.928508][ T5761] hci_le_conn_complete_evt+0x23c/0x3a0 [ 194.928540][ T5761] ? skb_pull_data+0x15f/0x1e0 [ 194.928565][ T5761] hci_le_meta_evt+0x34a/0x5f0 [ 194.928598][ T5761] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 194.928629][ T5761] hci_event_packet+0x51c/0xcd0 [ 194.928655][ T5761] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 194.928689][ T5761] ? __pfx_hci_event_packet+0x10/0x10 [ 194.928723][ T5761] ? kcov_remote_start+0x384/0x670 [ 194.928751][ T5761] ? lockdep_hardirqs_on+0x78/0x100 [ 194.928792][ T5761] hci_rx_work+0x451/0xfc0 [ 194.928821][ T5761] process_one_work+0xa23/0x1940 [ 194.928869][ T5761] ? __pfx_process_one_work+0x10/0x10 [ 194.928913][ T5761] ? __pfx_hci_rx_work+0x10/0x10 [ 194.928939][ T5761] worker_thread+0x5ef/0xe50 [ 194.928986][ T5761] ? __pfx_worker_thread+0x10/0x10 [ 194.929019][ T5761] ? kthread+0x13a/0x450 [ 194.929052][ T5761] ? __pfx_worker_thread+0x10/0x10 [ 194.929087][ T5761] kthread+0x370/0x450 [ 194.929115][ T5761] ? __pfx_kthread+0x10/0x10 [ 194.929151][ T5761] ret_from_fork+0x72b/0xd50 [ 194.929179][ T5761] ? __pfx_ret_from_fork+0x10/0x10 [ 194.929211][ T5761] ? __switch_to+0x800/0x10f0 [ 194.929245][ T5761] ? __pfx_kthread+0x10/0x10 [ 194.929281][ T5761] ret_from_fork_asm+0x1a/0x30 [ 194.929342][ T5761] [ 194.929497][ T5761] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 195.045035][ T5761] Bluetooth: hci2: failed to register connection device [ 195.158858][ T5096] (id 0x00) [ 195.339769][ T5096] rc_core: IR keymap rc-imon-pad not found [ 195.342409][ T5096] Registered IR keymap rc-empty [ 195.345963][ T5096] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 195.353689][ T5096] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 195.370529][ T5096] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 195.374692][ T5096] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input15 [ 195.381682][ T5096] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:20> initialized [ 195.557159][ T8471] netlink: 'syz.1.596': attribute type 2 has an invalid length. [ 196.563738][ T8478] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.631423][ T8478] md: array md0 already has disks! [ 196.665626][ T8481] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 196.669304][ T8481] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 196.675802][ T8481] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 196.682342][ T8479] md: could not open device unknown-block(7,0). [ 196.685116][ T8479] md: error, md_import_device() returned -16 [ 196.687782][ T8478] md: could not open device unknown-block(7,1). [ 196.691232][ T8478] md: error, md_import_device() returned -16 [ 196.724729][ T8478] md/raid:md0: not clean -- starting background reconstruction [ 196.730145][ T8478] md/raid:md0: device loop1 operational as raid disk 1 [ 196.733586][ T8478] md/raid:md0: device loop0 operational as raid disk 0 [ 196.769913][ T8478] md/raid:md0: cannot start dirty degraded array. [ 197.046097][ T8478] md/raid:md0: failed to run raid set. [ 197.048580][ T8478] md: pers->run() failed ... [ 197.135609][ T8501] netlink: 112 bytes leftover after parsing attributes in process `syz.2.604'. [ 197.154075][ T8494] imon:send_packet: task interrupted [ 197.158880][ T8494] imon:send_packet: packet tx failed (-512) [ 197.167208][ T8494] imon:vfd_write: send packet #5 failed [ 197.174906][ T50] usb 5-1: USB disconnect, device number 20 [ 197.703277][ T29] usb 44-1: device descriptor read/8, error -110 [ 198.159876][ T5096] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 198.345539][ T8527] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 198.349926][ T8527] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 198.356441][ T8527] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 198.667444][ T8538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.614'. [ 198.688496][ T29] usb usb44-port1: attempt power cycle [ 198.756947][ T8538] netlink: 'syz.1.614': attribute type 1 has an invalid length. [ 198.788839][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'. [ 198.902745][ T5096] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.146338][ T5096] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 199.150018][ T5096] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.153579][ T5096] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.157246][ T5096] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 199.162056][ T5096] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 199.168512][ T5096] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.172440][ T5096] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.175718][ T5096] usb 5-1: Product: syz [ 199.177306][ T5096] usb 5-1: Manufacturer: syz [ 199.182720][ T8516] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 199.195747][ T5096] cdc_wdm 5-1:1.0: skipping garbage [ 199.197457][ T5096] cdc_wdm 5-1:1.0: skipping garbage [ 199.215070][ T5096] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 199.217074][ T5096] cdc_wdm 5-1:1.0: Unknown control protocol [ 199.299243][ T29] usb usb44-port1: unable to enumerate USB device [ 199.395150][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 199.397435][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 199.399637][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 199.401784][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 199.404140][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 199.406843][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 199.409607][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 199.412411][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 199.415654][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 199.418418][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 199.421244][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 199.423970][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 199.426115][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 199.428371][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 199.430956][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 199.433580][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 199.436122][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 199.438932][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 199.441793][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 199.444561][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 199.644067][ T5096] usb 5-1: USB disconnect, device number 21 [ 200.321906][ T8573] FAULT_INJECTION: forcing a failure. [ 200.321906][ T8573] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 200.326364][ T8573] CPU: 1 UID: 0 PID: 8573 Comm: syz.2.624 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.326395][ T8573] Tainted: [L]=SOFTLOCKUP [ 200.326399][ T8573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.326411][ T8573] Call Trace: [ 200.326434][ T8573] [ 200.326439][ T8573] dump_stack_lvl+0x100/0x190 [ 200.326519][ T8573] should_fail_ex.cold+0x5/0xa [ 200.326545][ T8573] _copy_from_user+0x2e/0xd0 [ 200.326581][ T8573] memdup_user+0x6b/0xe0 [ 200.326612][ T8573] strndup_user+0x78/0xe0 [ 200.326625][ T8573] keyctl_join_session_keyring+0x27/0xd0 [ 200.326648][ T8573] __ia32_compat_sys_keyctl+0x406/0x550 [ 200.326666][ T8573] __do_fast_syscall_32+0xe7/0x970 [ 200.326683][ T8573] ? lockdep_hardirqs_on+0x78/0x100 [ 200.326697][ T8573] do_fast_syscall_32+0x32/0x70 [ 200.326712][ T8573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.326731][ T8573] RIP: 0023:0xf70aefec [ 200.326745][ T8573] Code: Unable to access opcode bytes at 0xf70aefc2. [ 200.326758][ T8573] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 200.326769][ T8573] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000800000c0 [ 200.326776][ T8573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.326783][ T8573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.326789][ T8573] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 200.326795][ T8573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.326808][ T8573] [ 201.236281][ T8588] lo speed is unknown, defaulting to 1000 [ 201.237535][ T8588] lo speed is unknown, defaulting to 1000 [ 201.245353][ T8588] lo speed is unknown, defaulting to 1000 [ 201.419742][ T5823] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 201.590613][ T5823] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 201.594884][ T5823] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.597972][ T5823] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.602271][ T5823] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.605517][ T5823] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.609188][ T5823] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.614562][ T5823] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.618762][ T5823] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.622444][ T5823] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.626683][ T5823] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.629910][ T5823] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.633816][ T5823] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.637424][ T5823] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.644678][ T5823] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.648394][ T5823] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.652269][ T5823] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.656209][ T5823] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.660097][ T5823] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.664140][ T5823] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.667772][ T5823] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.672863][ T5823] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.677896][ T5823] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.681578][ T5823] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 201.685174][ T5823] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 201.689392][ T5823] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.697471][ T5823] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 201.701447][ T5823] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 201.704408][ T5823] usb 6-1: Product: syz [ 201.706029][ T5823] usb 6-1: Manufacturer: syz [ 201.707921][ T5823] usb 6-1: SerialNumber: syz [ 201.712807][ T5823] usb 6-1: config 0 descriptor?? [ 201.719887][ T5823] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 201.779728][ T5761] Bluetooth: hci2: command 0x0406 tx timeout [ 202.061546][ T8619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.071558][ T8619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.106589][ T8621] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 202.169844][ T8621] md: array md0 already has disks! [ 202.172312][ T8622] md: could not open device unknown-block(7,0). [ 202.174478][ T8622] md: error, md_import_device() returned -16 [ 202.220305][ T8621] md: could not open device unknown-block(7,1). [ 202.223076][ T8621] md: error, md_import_device() returned -16 [ 202.259768][ T8621] md/raid:md0: not clean -- starting background reconstruction [ 202.265821][ T8621] md/raid:md0: device loop1 operational as raid disk 1 [ 202.273033][ T8621] md/raid:md0: device loop0 operational as raid disk 0 [ 202.316122][ T8621] md/raid:md0: cannot start dirty degraded array. [ 202.531314][ T8621] md/raid:md0: failed to run raid set. [ 202.533335][ T8621] md: pers->run() failed ... [ 202.782886][ T8639] X25: received unknown 00 with LCI 000 [ 202.791324][ T8639] autofs: Unknown parameter '/dev/net/tun' [ 202.847936][ T8644] input: syz0 as /devices/virtual/input/input16 [ 203.856213][ T8668] lo speed is unknown, defaulting to 1000 [ 203.859497][ T8668] lo speed is unknown, defaulting to 1000 [ 203.862756][ T8668] lo speed is unknown, defaulting to 1000 [ 203.977460][ T8671] syzkaller1: entered promiscuous mode [ 203.979294][ T8671] syzkaller1: entered allmulticast mode [ 203.992284][ T8673] netlink: 9 bytes leftover after parsing attributes in process `syz.0.658'. [ 204.010104][ C2] usb 6-1: yurex_control_callback - control failed: -2 [ 204.031328][ T8673] gretap0: entered promiscuous mode [ 204.031840][ T5856] usb 6-1: USB disconnect, device number 18 [ 204.043072][ T5856] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 204.065173][ T8673] netlink: 5 bytes leftover after parsing attributes in process `syz.0.658'. [ 204.079922][ T8673] 0{X: renamed from gretap0 [ 204.083831][ T8673] 0{X: left promiscuous mode [ 204.099802][ T8673] 0{X: entered allmulticast mode [ 204.104178][ T8673] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 204.162106][ T8677] syzkaller0: entered promiscuous mode [ 204.164404][ T8677] syzkaller0: entered allmulticast mode [ 204.331887][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.662'. [ 205.956969][ T8707] binder_alloc: 8706: binder_alloc_buf size -640 failed, no address space [ 205.960725][ T8707] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 205.992222][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 205.992258][ T42] audit: type=1804 audit(1785305500.572:240): pid=8709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.670" name="/newroot/166/file0" dev="tmpfs" ino=942 res=1 errno=0 [ 206.002913][ T8709] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -32012, delta: 1 [ 206.008226][ T8709] ref_ctr increment failed for inode: 0x3ae offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801bcca640 [ 206.029878][ T8716] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 206.042324][ T8709] ref_ctr going negative. vaddr: 0x80ffd002, curr val: -32012, delta: -1 [ 206.048083][ T8709] ref_ctr decrement failed for inode: 0x3ae offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801bcca640 [ 206.057552][ T8709] uprobe: syz.3.670:8709 failed to unregister, leaking uprobe [ 206.329770][ T5832] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 206.481058][ T5832] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 206.504252][ T5832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.509689][ T5832] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.516183][ T5832] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.519254][ T5832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.522284][ T5832] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.525374][ T5832] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.528269][ T5832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.531384][ T5832] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.534895][ T5832] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.537803][ T5832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.540940][ T5832] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.544542][ T5832] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.547444][ T5832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.550963][ T5832] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.554443][ T5832] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.557455][ T5832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.560487][ T5832] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.563994][ T5832] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.567021][ T5832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.570066][ T5832] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.573552][ T5832] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.576552][ T5832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 206.579515][ T5832] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 206.583468][ T5832] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.587307][ T5832] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 206.590760][ T5832] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 206.594086][ T5832] usb 5-1: Product: syz [ 206.595804][ T5832] usb 5-1: Manufacturer: syz [ 206.597764][ T5832] usb 5-1: SerialNumber: syz [ 206.601603][ T5832] usb 5-1: config 0 descriptor?? [ 206.606987][ T5832] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 206.900772][ T8738] netlink: 'syz.1.677': attribute type 10 has an invalid length. [ 206.916292][ T8738] team0: Port device dummy0 added [ 207.106243][ T8740] siw: device registration error -23 [ 207.130478][ T8740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.138182][ T8740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.308789][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'. [ 207.439686][ T5114] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 208.857060][ T8776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.690'. [ 208.864641][ T8776] ipvlan0: entered promiscuous mode [ 208.867357][ T8776] ipvlan0: left promiscuous mode [ 208.899902][ C3] usb 5-1: yurex_control_callback - control failed: -2 [ 208.909246][ T5832] usb 5-1: USB disconnect, device number 22 [ 208.921090][ T5832] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 209.354887][ T845] libceph: connect (1)[c::]:6789 error -101 [ 209.360505][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 209.369194][ T845] libceph: connect (1)[c::]:6789 error -101 [ 209.371715][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 209.443074][ T845] libceph: connect (1)[c::]:6789 error -101 [ 209.445647][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 209.668773][ T845] libceph: connect (1)[c::]:6789 error -101 [ 209.695715][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 209.707002][ T5749] libceph: connect (1)[c::]:6789 error -101 [ 209.711651][ T5749] libceph: mon0 (1)[c::]:6789 connect error [ 210.225769][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 210.232225][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 210.331442][ T8815] fuse: Unknown parameter '' [ 210.415857][ T8789] ceph: No mds server is up or the cluster is laggy [ 210.422122][ T8786] ceph: No mds server is up or the cluster is laggy [ 211.033241][ T5749] libceph: connect (1)[c::]:6789 error -101 [ 211.035829][ T5749] libceph: mon0 (1)[c::]:6789 connect error [ 211.042527][ T5749] libceph: connect (1)[c::]:6789 error -101 [ 211.044803][ T5749] libceph: mon0 (1)[c::]:6789 connect error [ 211.948824][ T5114] IPVS: starting estimator thread 0... [ 212.079747][ T8842] IPVS: using max 43 ests per chain, 103200 per kthread [ 213.280347][ T8871] WXF^W99їQE [ 213.382001][ T8874] netlink: 'syz.3.721': attribute type 2 has an invalid length. [ 213.439733][ T6006] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 213.462234][ T8875] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 213.474297][ T8875] pci 0000:00:02.0: BAR 0 [mem 0xfea80000-0xfea9ffff] [ 213.476485][ T8875] pci 0000:00:02.0: BAR 1 [mem 0xfeaa0000-0xfeabffff] [ 213.479189][ T8875] pci 0000:00:02.0: BAR 2 [io 0xc080-0xc09f] [ 213.481687][ T8875] pci 0000:00:02.0: BAR 3 [mem 0xfeaf0000-0xfeaf3fff] [ 213.484226][ T8875] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 213.488520][ T8875] pci 0000:00:02.0: enabling Extended Tags [ 213.525892][ T8877] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 213.595887][ T8875] pci 0000:00:02.0: Adding to iommu group 2 [ 213.609697][ T6006] usb 7-1: Using ep0 maxpacket: 8 [ 213.614979][ T6006] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.619397][ T6006] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.624036][ T6006] usb 7-1: config 0 interface 0 has no altsetting 0 [ 213.627221][ T6006] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 213.630270][ T8875] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 213.634625][ T8875] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 213.639052][ T8875] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 213.642865][ T8875] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 213.646974][ T8875] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 213.651987][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.673715][ T6006] usb 7-1: config 0 descriptor?? [ 213.851164][ T8875] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 214.084849][ T8875] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 214.236376][ T6006] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 214.245853][ T6006] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 214.248281][ T6006] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 214.250703][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 214.270417][ T6006] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 214.281880][ T6006] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 214.300673][ T6006] mcp2221 0003:04D8:00DD.000C: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 214.326758][ T8875] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 214.329866][ T8875] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 214.332718][ T8875] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 215.379779][ T5114] usb 7-1: USB disconnect, device number 21 [ 216.815029][ T8914] md: array md0 already has disks! [ 216.879965][ T8914] md: could not open device unknown-block(7,0). [ 216.882529][ T8914] md: error, md_import_device() returned -16 [ 216.884695][ T8919] md: could not open device unknown-block(7,1). [ 216.886901][ T8919] md: error, md_import_device() returned -16 [ 216.922173][ T8914] md/raid:md0: not clean -- starting background reconstruction [ 216.925002][ T8914] md/raid:md0: device loop1 operational as raid disk 1 [ 216.939557][ T8914] md/raid:md0: device loop0 operational as raid disk 0 [ 216.939750][ T8911] CIFS: Attempting to mount //127.0.0.1/share [ 216.944516][ T5457] 8021q: adding VLAN 0 to HW filter on device eth1 [ 216.960639][ T8914] md/raid:md0: cannot start dirty degraded array. [ 217.243307][ T8914] md/raid:md0: failed to run raid set. [ 217.245609][ T8914] md: pers->run() failed ... [ 217.399983][ T6006] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 217.443580][ T5823] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 217.484010][ T8911] CIFS: VFS: cifs_mount failed w/return code = -112 [ 217.599794][ T5823] usb 7-1: Using ep0 maxpacket: 32 [ 217.982575][ T5823] usb 7-1: config 0 has no interfaces? [ 218.908577][ T8961] binder: 8960:8961 ioctl c0306201 800001c0 returned -14 [ 218.979665][ T845] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 219.033064][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.739'. [ 219.140705][ T845] usb 5-1: Using ep0 maxpacket: 16 [ 219.168212][ T845] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1023 [ 219.173408][ T845] usb 5-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 219.249908][ T845] usb 5-1: config 1 interface 0 has no altsetting 0 [ 219.266979][ T845] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.271289][ T5823] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 219.273112][ T845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.278976][ T845] usb 5-1: Product: syz [ 219.284743][ T845] usb 5-1: Manufacturer: Ჺ㣋䯹⨫둨尴镤类힦ꖟㇷ쳙䞙閍셮֗郠໭쪭蕿淎虆 [ 219.288802][ T845] usb 5-1: SerialNumber: syz [ 219.338826][ T8959] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 219.341581][ T8959] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 219.480157][ T5823] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 219.563105][ T5823] usb 7-1: Product: syz [ 219.859615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 219.859761][ T5823] usb 7-1: Manufacturer: syz [ 219.875584][ T5823] usb 7-1: SerialNumber: syz [ 219.889425][ T5823] usb 7-1: config 0 descriptor?? [ 220.163545][ T5096] usb 7-1: USB disconnect, device number 22 [ 220.309720][ T50] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 220.469779][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 220.476600][ T50] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.484701][ T50] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.496247][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 220.505356][ T50] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 220.516509][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.873140][ T50] usb 6-1: config 0 descriptor?? [ 221.309716][ T50] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 221.313782][ T50] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 221.316267][ T50] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 221.322379][ T50] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 221.324611][ T50] mcp2221 0003:04D8:00DD.000D: unknown main item tag 0x0 [ 221.330772][ T50] mcp2221 0003:04D8:00DD.000D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 221.750930][ T845] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 221.778566][ T845] usb 5-1: USB disconnect, device number 23 [ 221.983192][ T6006] usb 6-1: USB disconnect, device number 19 [ 222.087557][ T50] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 222.267421][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 222.306556][ T50] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.334875][ T50] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.357162][ T50] usb 8-1: config 0 interface 0 has no altsetting 0 [ 222.377336][ T50] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 222.401346][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.498162][ T50] usb 8-1: config 0 descriptor?? [ 224.550429][ T50] usbhid 8-1:0.0: can't add hid device: -71 [ 224.552421][ T50] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 224.558750][ T50] usb 8-1: USB disconnect, device number 24 [ 226.119779][ T5749] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 226.289929][ T5749] usb 6-1: Using ep0 maxpacket: 32 [ 226.294425][ T5749] usb 6-1: config 0 has no interfaces? [ 226.309457][ T5749] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 226.314103][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 226.317710][ T5749] usb 6-1: Product: syz [ 226.319753][ T5749] usb 6-1: Manufacturer: syz [ 226.321966][ T5749] usb 6-1: SerialNumber: syz [ 226.326612][ T5749] usb 6-1: config 0 descriptor?? [ 227.110299][ T5749] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 227.263207][ T5749] usb 5-1: Using ep0 maxpacket: 8 [ 227.267156][ T5749] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.279828][ T5749] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.284616][ T5749] usb 5-1: config 0 interface 0 has no altsetting 0 [ 227.287499][ T5749] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 227.291646][ T5749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.316098][ T5749] usb 5-1: config 0 descriptor?? [ 227.739093][ T5749] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 227.742361][ T5749] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 227.752168][ T5749] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 227.755144][ T5749] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 227.767401][ T5749] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 227.772029][ T5749] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 228.845092][ T5749] usb 6-1: USB disconnect, device number 20 [ 229.942686][ T5114] usb 5-1: USB disconnect, device number 24 [ 230.934966][ T42] audit: type=1800 audit(1785305525.502:241): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.766" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 231.667516][ T9118] CIFS: Attempting to mount //127.0.0.1/share [ 231.864371][ T9118] CIFS: VFS: Error connecting to socket. Aborting operation. [ 231.867261][ T9118] CIFS: VFS: cifs_mount failed w/return code = -4 [ 232.026606][ T9123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.771'. [ 232.342377][ T9129] fuse: Bad value for 'fd' [ 232.629720][ T9133] md: array md0 already has disks! [ 232.669748][ T9133] md: could not open device unknown-block(7,0). [ 232.671797][ T9133] md: error, md_import_device() returned -16 [ 232.710140][ T9133] md: could not open device unknown-block(7,1). [ 232.712178][ T9133] md: error, md_import_device() returned -16 [ 232.738609][ T9133] md/raid:md0: not clean -- starting background reconstruction [ 232.740062][ T5896] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 232.741202][ T9133] md/raid:md0: device loop1 operational as raid disk 1 [ 232.746272][ T9133] md/raid:md0: device loop0 operational as raid disk 0 [ 232.756689][ T9133] md/raid:md0: cannot start dirty degraded array. [ 232.910389][ T5896] usb 8-1: Using ep0 maxpacket: 8 [ 232.914450][ T5896] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.918939][ T5896] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.922144][ T5896] usb 8-1: config 0 interface 0 has no altsetting 0 [ 232.924226][ T5896] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 232.927090][ T5896] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.930889][ T5896] usb 8-1: config 0 descriptor?? [ 233.000485][ T9133] md/raid:md0: failed to run raid set. [ 233.002392][ T9133] md: pers->run() failed ... [ 233.352599][ T5896] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 233.358923][ T5896] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 233.365133][ T5896] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 233.377693][ T5896] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 233.382240][ T5896] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 233.384756][ T5896] mcp2221 0003:04D8:00DD.000F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 233.447956][ T9146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.778'. [ 233.902189][ T50] usb 8-1: USB disconnect, device number 25 [ 234.019694][ T9150] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 234.059663][ T9150] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 234.082687][ T9150] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 234.131719][ T9150] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 235.529875][ T9166] md: array md0 already has disks! [ 235.579933][ T9166] md: could not open device unknown-block(7,0). [ 235.587363][ T9166] md: error, md_import_device() returned -16 [ 235.596495][ T9167] md: could not open device unknown-block(7,1). [ 235.599334][ T9167] md: error, md_import_device() returned -16 [ 235.660267][ T9166] md/raid:md0: not clean -- starting background reconstruction [ 235.664103][ T9166] md/raid:md0: device loop1 operational as raid disk 1 [ 235.672856][ T9166] md/raid:md0: device loop0 operational as raid disk 0 [ 235.706683][ T9166] md/raid:md0: cannot start dirty degraded array. [ 236.453317][ T9166] md/raid:md0: failed to run raid set. [ 236.458451][ T9166] md: pers->run() failed ... [ 236.463322][ T9173] md: array md0 already has disks! [ 236.474337][ T9174] md: could not open device unknown-block(7,0). [ 236.476508][ T9174] md: error, md_import_device() returned -16 [ 236.479218][ T9177] md: could not open device unknown-block(7,1). [ 236.487704][ T9177] md: error, md_import_device() returned -16 [ 236.538307][ T9173] md/raid:md0: not clean -- starting background reconstruction [ 236.541510][ T9173] md/raid:md0: device loop1 operational as raid disk 1 [ 236.543741][ T9173] md/raid:md0: device loop0 operational as raid disk 0 [ 236.555161][ T9173] md/raid:md0: cannot start dirty degraded array. [ 236.749665][ T5114] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 236.843653][ T9173] md/raid:md0: failed to run raid set. [ 236.847623][ T9173] md: pers->run() failed ... [ 237.577847][ T9198] vlan2: entered promiscuous mode [ 237.579816][ T9198] hsr0: entered promiscuous mode [ 237.581728][ T9198] vlan2: entered allmulticast mode [ 237.583584][ T9198] hsr0: entered allmulticast mode [ 237.585744][ T9198] hsr_slave_0: entered allmulticast mode [ 237.587951][ T9198] hsr_slave_1: entered allmulticast mode [ 237.602943][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'. [ 237.618176][ T9198] hsr_slave_0: left promiscuous mode [ 237.622151][ T9198] hsr_slave_1: left promiscuous mode [ 238.480236][ T9205] md: array md0 already has disks! [ 238.484370][ T9208] md: could not open device unknown-block(7,0). [ 238.486440][ T9208] md: error, md_import_device() returned -16 [ 238.521274][ T9205] md: could not open device unknown-block(7,1). [ 238.523526][ T9205] md: error, md_import_device() returned -16 [ 238.990062][ T9205] md/raid:md0: not clean -- starting background reconstruction [ 238.993395][ T9205] md/raid:md0: device loop1 operational as raid disk 1 [ 238.996425][ T9205] md/raid:md0: device loop0 operational as raid disk 0 [ 239.047991][ T9205] md/raid:md0: cannot start dirty degraded array. [ 239.210804][ T9205] md/raid:md0: failed to run raid set. [ 239.212989][ T9205] md: pers->run() failed ... [ 240.967910][ T9247] CIFS: Attempting to mount //127.0.0.1/share [ 241.269698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 241.289636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 241.402305][ T9258] ehci-pci 0000:00:1d.7: remove, state 1 [ 241.410966][ T9258] usb usb2: USB disconnect, device number 1 [ 241.415066][ T9258] usb 2-1: USB disconnect, device number 2 [ 242.088822][ T9247] CIFS: VFS: cifs_mount failed w/return code = -112 [ 242.796750][ T9272] trusted_key: encrypted_key: insufficient parameters specified [ 242.806109][ T9258] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 243.059759][ T845] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 243.149724][ T10] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 243.215459][ T845] usb 1-1: not running at top speed; connect to a high speed hub [ 243.236949][ T845] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 243.240300][ T845] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 243.243545][ T845] usb 1-1: Product: QEMU USB Tablet [ 243.245254][ T845] usb 1-1: Manufacturer: QEMU [ 243.246861][ T845] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 243.271499][ T845] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0010/input/input17 [ 243.584060][ T845] hid-generic 0003:0627:0001.0010: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 243.645079][ T9260] usb 1-1: USB disconnect, device number 2 [ 243.724975][ T9279] fido_id[9279]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/1-1/report_descriptor': No such file or directory [ 243.966749][ T9285] binder: 9284:9285 ioctl c00c6211 0 returned -14 [ 243.989229][ T9260] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 244.010974][ T9260] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 244.029452][ T9260] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 244.049870][ T9260] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 244.091763][ T9260] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 244.095533][ T9260] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 244.098710][ T9260] usb usb2: Product: EHCI Host Controller [ 244.101630][ T9260] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 244.105105][ T9260] usb usb2: SerialNumber: 0000:00:1d.7 [ 244.299633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 244.796778][ T9260] hub 2-0:1.0: USB hub found [ 244.839742][ T9260] hub 2-0:1.0: 6 ports detected [ 245.356923][ T845] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 245.386309][ T9260] hub 1-0:1.0: USB hub found [ 245.392752][ T9260] hub 1-0:1.0: 2 ports detected [ 245.453812][ T9260] hub 3-0:1.0: USB hub found [ 245.457209][ T9260] hub 3-0:1.0: 2 ports detected [ 245.493322][ T9260] hub 4-0:1.0: USB hub found [ 245.496732][ T9260] hub 4-0:1.0: 2 ports detected [ 245.566980][ T9295] futex_wake_op: syz.1.822 tries to shift op by 144; fix this program [ 245.580805][ T9295] futex_wake_op: syz.1.822 tries to shift op by 144; fix this program [ 245.584081][ T845] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 245.587814][ T845] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 245.605010][ T845] usb 2-1: Product: QEMU USB Tablet [ 245.608823][ T845] usb 2-1: Manufacturer: QEMU [ 245.611329][ T845] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 245.626170][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'. [ 245.656635][ T845] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0011/input/input19 [ 246.056589][ T845] hid-generic 0003:0627:0001.0011: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 246.383030][ T10] usb 8-1: no configurations [ 246.397655][ T10] usb 8-1: can't read configurations, error -22 [ 246.429733][ T9305] md: array md0 already has disks! [ 246.470745][ T9305] md: could not open device unknown-block(7,0). [ 246.473643][ T9305] md: error, md_import_device() returned -16 [ 246.520212][ T9305] md: could not open device unknown-block(7,1). [ 246.522261][ T9305] md: error, md_import_device() returned -16 [ 246.564535][ T9305] md/raid:md0: not clean -- starting background reconstruction [ 246.570823][ T9305] md/raid:md0: device loop1 operational as raid disk 1 [ 246.577692][ T9305] md/raid:md0: device loop0 operational as raid disk 0 [ 247.229693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 247.233076][ T9305] md/raid:md0: cannot start dirty degraded array. [ 247.632820][ T9305] md/raid:md0: failed to run raid set. [ 247.635366][ T9305] md: pers->run() failed ... [ 247.703151][ T9318] md/raid:md0: not clean -- starting background reconstruction [ 247.710025][ T9318] md/raid:md0: device loop1 operational as raid disk 1 [ 247.715007][ T9318] md/raid:md0: device loop0 operational as raid disk 0 [ 247.742148][ T9318] md/raid:md0: cannot start dirty degraded array. [ 248.000589][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 248.151946][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 248.163819][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.168500][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.175271][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.181675][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.184978][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.188655][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.203014][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.206964][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.212764][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.217849][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.226190][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.232486][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.244353][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.248629][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.254318][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.265417][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.269965][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.274654][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.288453][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.294346][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.301688][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.309540][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 248.315690][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 248.321326][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.340082][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 248.345343][ T10] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 248.349191][ T10] usb 5-1: Product: syz [ 248.353184][ T10] usb 5-1: Manufacturer: syz [ 248.355894][ T10] usb 5-1: SerialNumber: syz [ 248.372239][ T10] usb 5-1: config 0 descriptor?? [ 248.413095][ T10] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 248.490579][ T9340] CIFS: Attempting to mount //127.0.0.1/share [ 248.591573][ T9318] md/raid:md0: failed to run raid set. [ 248.593551][ T9318] md: pers->run() failed ... [ 248.767485][ T9328] siw: device registration error -23 [ 248.796895][ T10] usb 5-1: USB disconnect, device number 26 [ 248.817849][ T10] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 248.937641][ T9340] CIFS: VFS: cifs_mount failed w/return code = -112 [ 248.970034][ T5114] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 249.099045][ T9348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.299972][ T9354] md: array md0 already has disks! [ 249.339916][ T9354] md: could not open device unknown-block(7,0). [ 249.342621][ T9354] md: error, md_import_device() returned -16 [ 249.379863][ T9354] md: could not open device unknown-block(7,1). [ 249.568482][ T9354] md: error, md_import_device() returned -16 [ 250.089728][ T5114] usb 7-1: Using ep0 maxpacket: 8 [ 250.406878][ T9358] md/raid:md0: not clean -- starting background reconstruction [ 250.436269][ T9358] md/raid:md0: device loop1 operational as raid disk 1 [ 250.439974][ T9358] md/raid:md0: device loop0 operational as raid disk 0 [ 250.782651][ T5114] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.786310][ T5114] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.789397][ T5114] usb 7-1: config 0 interface 0 has no altsetting 0 [ 250.791490][ T5114] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 250.794358][ T5114] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.798168][ T5114] usb 7-1: config 0 descriptor?? [ 250.836864][ T9358] md/raid:md0: couldn't allocate thread. [ 251.021635][ T9358] md: pers->run() failed ... [ 251.168129][ T9367] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 251.211690][ T9367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.217809][ T5114] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 251.227677][ T5114] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 251.233639][ T5114] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 251.236461][ T9367] macvlan2: entered promiscuous mode [ 251.238171][ T9367] macvlan2: entered allmulticast mode [ 251.240257][ T5114] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 251.243090][ T5114] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 251.250563][ T5114] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 251.271440][ T9367] bond2: (slave ip6gretap1): making interface the new active one [ 251.275940][ T9367] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 251.398781][ T9372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.845'. [ 251.605372][ T9377] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 251.607748][ T9377] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 251.611182][ T9377] vhci_hcd vhci_hcd.0: Device attached [ 251.620932][ T5096] usb 7-1: USB disconnect, device number 23 [ 251.889793][ T29] usb 44-1: SetAddress Request (6) to port 0 [ 251.895032][ T29] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 252.001346][ T9384] CIFS: Attempting to mount //127.0.0.1/share [ 252.160608][ T9384] CIFS: VFS: cifs_mount failed w/return code = -112 [ 252.348591][ T9378] vhci_hcd: connection reset by peer [ 252.357278][ T5824] vhci_hcd vhci_hcd.3: stop threads [ 252.360753][ T5824] vhci_hcd vhci_hcd.3: release socket [ 252.363316][ T5824] vhci_hcd vhci_hcd.3: disconnect device [ 252.365917][ T9387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.847'. [ 252.649942][ T9391] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 252.652551][ T9391] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 252.656118][ T9391] vhci_hcd vhci_hcd.0: Device attached [ 252.961371][ T6006] usb 40-1: SetAddress Request (6) to port 0 [ 252.972174][ T6006] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 253.407272][ T5096] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 253.593626][ T5096] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 253.613385][ T5096] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.618761][ T5096] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.624512][ T5096] usb 7-1: config 0 interface 0 has no altsetting 0 [ 253.638391][ T5096] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.654379][ T5096] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.658771][ T5096] usb 7-1: config 0 interface 0 has no altsetting 0 [ 253.676406][ T9392] vhci_hcd: connection reset by peer [ 253.685225][ T5824] vhci_hcd vhci_hcd.1: stop threads [ 253.688105][ T5824] vhci_hcd vhci_hcd.1: release socket [ 253.692720][ T5096] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.705535][ T5096] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.711736][ T5824] vhci_hcd vhci_hcd.1: disconnect device [ 253.712217][ T5096] usb 7-1: config 0 interface 0 has no altsetting 0 [ 253.764876][ T5096] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.768364][ T5096] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.778115][ T5096] usb 7-1: config 0 interface 0 has no altsetting 0 [ 253.800201][ T5096] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.809545][ T5096] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.820106][ T5096] usb 7-1: config 0 interface 0 has no altsetting 0 [ 253.838886][ T5096] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.848403][ T5096] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.860750][ T5114] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 253.863021][ T5096] usb 7-1: config 0 interface 0 has no altsetting 0 [ 253.877568][ T5096] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.882320][ T5096] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.886843][ T5096] usb 7-1: config 0 interface 0 has no altsetting 0 [ 253.896573][ T5096] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.903454][ T5096] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.909455][ T5096] usb 7-1: config 0 interface 0 has no altsetting 0 [ 253.925610][ T5096] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 253.930104][ T5096] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 253.935230][ T5096] usb 7-1: Product: syz [ 253.937310][ T5096] usb 7-1: Manufacturer: syz [ 253.939049][ T5096] usb 7-1: SerialNumber: syz [ 253.977058][ T5096] usb 7-1: config 0 descriptor?? [ 254.049631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 254.119637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #306!!! [ 254.206178][ T5096] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 254.215052][ T9390] siw: device registration error -23 [ 254.291607][ T5096] usb 7-1: USB disconnect, device number 24 [ 254.345444][ T5096] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 254.350018][ T9406] md: array md0 already has disks! [ 254.678938][ T9406] md: could not open device unknown-block(7,0). [ 254.753420][ T9406] md: error, md_import_device() returned -16 [ 254.936274][ T9413] md: could not open device unknown-block(7,1). [ 254.980046][ T9413] md: error, md_import_device() returned -16 [ 255.258040][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.319846][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.616787][ T9414] md/raid:md0: not clean -- starting background reconstruction [ 255.623424][ T9422] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 255.625569][ T9422] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 255.630895][ T9414] md/raid:md0: device loop1 operational as raid disk 1 [ 255.639171][ T9422] vhci_hcd vhci_hcd.0: Device attached [ 255.646255][ T9414] md/raid:md0: device loop0 operational as raid disk 0 [ 255.704575][ T9428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.857'. [ 255.707655][ T9414] md/raid:md0: cannot start dirty degraded array. [ 255.936829][ T9434] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 255.938950][ T9434] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 255.948801][ T9434] vhci_hcd vhci_hcd.0: Device attached [ 256.103324][ T9414] md/raid:md0: failed to run raid set. [ 256.109315][ T9414] md: pers->run() failed ... [ 256.123491][ T9441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.858'. [ 256.259732][ T5841] usb 42-1: SetAddress Request (2) to port 0 [ 256.262383][ T5841] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 256.458908][ T9423] vhci_hcd: connection closed [ 256.459293][ T13] vhci_hcd vhci_hcd.1: stop threads [ 256.463602][ T13] vhci_hcd vhci_hcd.1: release socket [ 256.466418][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 256.499858][ T5823] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 256.579982][ T9435] vhci_hcd: connection reset by peer [ 256.585757][ T12] vhci_hcd vhci_hcd.2: stop threads [ 256.587444][ T12] vhci_hcd vhci_hcd.2: release socket [ 256.590148][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 256.649803][ T5823] usb 8-1: Using ep0 maxpacket: 8 [ 256.653868][ T5823] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.658658][ T5823] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.662992][ T5823] usb 8-1: config 0 interface 0 has no altsetting 0 [ 256.665906][ T5823] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 256.669988][ T5823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.675882][ T5823] usb 8-1: config 0 descriptor?? [ 256.969814][ T29] usb 44-1: device descriptor read/8, error -110 [ 257.119840][ T5823] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 257.122576][ T5823] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 257.124784][ T5823] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 257.126937][ T5823] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 257.129292][ T5823] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 257.133286][ T5823] mcp2221 0003:04D8:00DD.0013: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 257.371626][ T29] usb usb44-port1: attempt power cycle [ 257.534329][ T5749] usb 8-1: USB disconnect, device number 29 [ 258.089758][ T6006] usb 40-1: device descriptor read/8, error -110 [ 258.512411][ T29] usb usb44-port1: unable to enumerate USB device [ 258.730570][ T6006] usb usb40-port1: attempt power cycle [ 259.329736][ T5823] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 259.389808][ T5114] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 259.436294][ T9470] evm: overlay not supported [ 259.460710][ T6006] usb usb40-port1: unable to enumerate USB device [ 259.552960][ T5114] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 259.556932][ T5114] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.562745][ T5114] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.569347][ T5114] usb 7-1: config 0 interface 0 has no altsetting 0 [ 259.586031][ T5114] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.594566][ T5114] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.603702][ T5114] usb 7-1: config 0 interface 0 has no altsetting 0 [ 259.622127][ T5114] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.625166][ T5114] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.629672][ T5114] usb 7-1: config 0 interface 0 has no altsetting 0 [ 259.633284][ T5114] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.636191][ T5114] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.640503][ T5114] usb 7-1: config 0 interface 0 has no altsetting 0 [ 259.644307][ T5114] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.647670][ T5114] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.652866][ T5114] usb 7-1: config 0 interface 0 has no altsetting 0 [ 259.656320][ T5114] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.662259][ T5114] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.666834][ T5114] usb 7-1: config 0 interface 0 has no altsetting 0 [ 259.673158][ T5114] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.676154][ T5114] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.679535][ T5114] usb 7-1: config 0 interface 0 has no altsetting 0 [ 259.683038][ T5114] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 259.686662][ T5114] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 259.690367][ T5114] usb 7-1: config 0 interface 0 has no altsetting 0 [ 259.696190][ T5114] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 259.699287][ T5114] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 259.702457][ T5114] usb 7-1: Product: syz [ 259.703857][ T5114] usb 7-1: Manufacturer: syz [ 259.705711][ T5114] usb 7-1: SerialNumber: syz [ 259.710143][ T5114] usb 7-1: config 0 descriptor?? [ 259.720681][ T5114] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 259.735490][ T9474] netlink: 27 bytes leftover after parsing attributes in process `syz.0.871'. [ 259.809731][ T9474] /dev/sr0: Can't open blockdev [ 259.822390][ T9474] usb usb9: usbfs: process 9474 (syz.0.871) did not claim interface 0 before use [ 259.862992][ T9474] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 259.866371][ T9474] netlink: 224 bytes leftover after parsing attributes in process `syz.0.871'. [ 260.141235][ T9479] siw: device registration error -23 [ 260.150682][ C2] usb 7-1: yurex_control_callback - control failed: -2 [ 260.154288][ C2] usb 7-1: yurex_control_callback - control failed: -32 [ 260.233882][ T5749] usb 7-1: USB disconnect, device number 25 [ 260.246579][ T5749] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 260.670188][ T9483] CIFS: Attempting to mount //127.0.0.1/share [ 261.320730][ T9483] CIFS: VFS: cifs_mount failed w/return code = -512 [ 261.325667][ T9490] CIFS: Attempting to mount //127.0.0.1/share [ 261.370186][ T5841] usb 42-1: device descriptor read/8, error -110 [ 261.662499][ T9490] CIFS: VFS: Error connecting to socket. Aborting operation. [ 261.669867][ T9490] CIFS: VFS: cifs_mount failed w/return code = -4 [ 261.774707][ T5841] usb usb42-port1: attempt power cycle [ 262.375000][ T5841] usb usb42-port1: unable to enumerate USB device [ 263.640765][ T9515] md: array md0 already has disks! [ 263.690022][ T9515] md: could not open device unknown-block(7,0). [ 263.699915][ T9515] md: error, md_import_device() returned -16 [ 263.705181][ T9520] md: could not open device unknown-block(7,1). [ 263.710126][ T9520] md: error, md_import_device() returned -16 [ 263.834221][ T9515] md/raid:md0: not clean -- starting background reconstruction [ 263.844155][ T9515] md/raid:md0: device loop1 operational as raid disk 1 [ 263.856152][ T9515] md/raid:md0: device loop0 operational as raid disk 0 [ 263.892809][ T9515] md/raid:md0: cannot start dirty degraded array. [ 263.951637][ T9519] CIFS: Attempting to mount //127.0.0.1/share [ 264.132375][ T9515] md/raid:md0: failed to run raid set. [ 264.137888][ T9515] md: pers->run() failed ... [ 264.370008][ T56] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 264.540438][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 264.564592][ T56] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.579745][ T9519] CIFS: VFS: cifs_mount failed w/return code = -112 [ 264.580058][ T56] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.585365][ T56] usb 7-1: config 0 interface 0 has no altsetting 0 [ 264.587658][ T56] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 264.603844][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.624985][ T56] usb 7-1: config 0 descriptor?? [ 264.837485][ T56] usbhid 7-1:0.0: can't add hid device: -71 [ 264.842599][ T56] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 264.849659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 264.975352][ T56] usb 7-1: USB disconnect, device number 26 [ 265.159761][ T6006] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 265.311990][ T6006] usb 8-1: unable to get BOS descriptor or descriptor too short [ 265.321096][ T6006] usb 8-1: not running at top speed; connect to a high speed hub [ 265.326817][ T6006] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 265.333265][ T6006] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 265.338142][ T6006] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 265.342658][ T6006] usb 8-1: config 14 has no interface number 0 [ 265.345501][ T6006] usb 8-1: config 14 has no interface number 1 [ 265.349341][ T6006] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 265.355260][ T6006] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 265.363706][ T6006] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 265.377211][ T6006] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 265.389705][ T6006] usb 8-1: config 14 interface 57 has no altsetting 0 [ 265.395286][ T6006] usb 8-1: config 14 interface 228 has no altsetting 0 [ 265.402823][ T6006] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 265.407049][ T6006] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.411191][ T6006] usb 8-1: Product: syz [ 265.413846][ T6006] usb 8-1: Manufacturer: syz [ 265.416873][ T6006] usb 8-1: SerialNumber: syz [ 265.523173][ T9547] Bluetooth: MGMT ver 1.23 [ 265.571287][ T5096] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 265.781354][ T5096] usb 6-1: Using ep0 maxpacket: 32 [ 266.017995][ T5096] usb 6-1: config 0 has no interfaces? [ 266.068399][ T6006] legousbtower 8-1:14.57: interrupt endpoints not found [ 266.089102][ T6006] legousbtower 8-1:14.228: get version request failed: -71 [ 266.098731][ T6006] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 266.117494][ T6006] usb 8-1: USB disconnect, device number 30 [ 266.144707][ T5096] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 266.171091][ T5096] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 266.181510][ T5096] usb 6-1: Product: syz [ 266.183324][ T5096] usb 6-1: Manufacturer: syz [ 266.201036][ T5096] usb 6-1: SerialNumber: syz [ 266.230041][ T5096] usb 6-1: config 0 descriptor?? [ 266.466052][ T9570] Invalid ELF header magic: != ELF [ 266.981709][ T9576] syzkaller0: entered promiscuous mode [ 266.983621][ T9576] syzkaller0: entered allmulticast mode [ 266.988630][ T9576] TC_ACT_REPEAT abuse ? [ 267.366810][ T9590] syzkaller0: entered promiscuous mode [ 267.373531][ T9590] syzkaller0: entered allmulticast mode [ 267.709122][ T9599] smpboot: CPU 1 is now offline [ 267.761402][ T5096] usb 6-1: USB disconnect, device number 22 [ 267.818806][ T9600] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 267.824620][ T2149] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 267.828385][ T2149] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 267.831100][ T2149] CPU: 0 UID: 0 PID: 2149 Comm: kworker/0:1H Tainted: G L syzkaller #0 PREEMPT(full) [ 267.834492][ T2149] Tainted: [L]=SOFTLOCKUP [ 267.835860][ T2149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.839005][ T2149] Workqueue: events_highpri snd_vmidi_output_work [ 267.841069][ T2149] RIP: 0010:__schedule+0x224f/0x6730 [ 267.842772][ T2149] Code: 0f 85 5f 38 00 00 4d 8b ac 24 d0 0e 00 00 48 c7 c0 00 86 65 94 48 ba 00 00 00 00 00 fc ff df 49 8d 7d 14 48 89 f9 48 c1 e9 03 <0f> b6 0c 11 48 89 fa 83 e2 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 a2 [ 267.848765][ T2149] RSP: 0018:ffffc9000d62f958 EFLAGS: 00010003 [ 267.850670][ T2149] RAX: ffffffff94658600 RBX: 0000000000000001 RCX: 0000000000000002 [ 267.853112][ T2149] RDX: dffffc0000000000 RSI: 1ffffffff1c8d924 RDI: 0000000000000014 [ 267.855591][ T2149] RBP: ffffc9000d62fab0 R08: ffff88802b23c198 R09: fffffbfff224545a [ 267.858054][ T2149] R10: ffffffff9122a2d7 R11: 0000000000000000 R12: ffff88802b33b600 [ 267.860440][ T2149] R13: 0000000000000000 R14: ffff888013a10700 R15: ffff88802b23b600 [ 267.862902][ T2149] FS: 0000000000000000(0000) GS:ffff888096be3000(0000) knlGS:0000000000000000 [ 267.865679][ T2149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.867767][ T2149] CR2: 0000000080001000 CR3: 0000000025e17000 CR4: 0000000000352ef0 [ 267.870252][ T2149] Call Trace: [ 267.871322][ T2149] [ 267.872294][ T2149] ? __pfx___schedule+0x10/0x10 [ 267.873844][ T2149] ? __wake_up+0x3f/0x60 [ 267.875212][ T2149] ? __wake_up+0x3f/0x60 [ 267.876556][ T2149] ? preempt_schedule_thunk+0x16/0x40 [ 267.878258][ T2149] preempt_schedule_common+0x42/0xc0 [ 267.879920][ T2149] preempt_schedule_thunk+0x16/0x40 [ 267.881561][ T2149] _raw_spin_unlock_irqrestore+0x61/0x80 [ 267.883279][ T2149] snd_rawmidi_transmit+0xf1/0x130 [ 267.884837][ T2149] snd_vmidi_output_work+0x111/0x390 [ 267.886469][ T2149] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 267.888311][ T2149] ? rcu_is_watching+0x12/0xc0 [ 267.889857][ T2149] process_one_work+0xa23/0x1940 [ 267.891438][ T2149] ? __pfx_process_one_work+0x10/0x10 [ 267.893156][ T2149] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 267.895001][ T2149] worker_thread+0x5ef/0xe50 [ 267.896467][ T2149] ? __pfx_worker_thread+0x10/0x10 [ 267.898119][ T2149] ? kthread+0x13a/0x450 [ 267.899463][ T2149] ? __pfx_worker_thread+0x10/0x10 [ 267.901083][ T2149] kthread+0x370/0x450 [ 267.902427][ T2149] ? __pfx_kthread+0x10/0x10 [ 267.903897][ T2149] ret_from_fork+0x72b/0xd50 [ 267.905379][ T2149] ? __pfx_ret_from_fork+0x10/0x10 [ 267.906996][ T2149] ? __switch_to+0x800/0x10f0 [ 267.909158][ T2149] ? __pfx_kthread+0x10/0x10 [ 267.910636][ T2149] ret_from_fork_asm+0x1a/0x30 [ 267.912172][ T2149] [ 267.913173][ T2149] Modules linked in: [ 267.914418][ T2149] ---[ end trace 0000000000000000 ]--- [ 267.916526][ T2149] RIP: 0010:__schedule+0x224f/0x6730 [ 267.918565][ T2149] Code: 0f 85 5f 38 00 00 4d 8b ac 24 d0 0e 00 00 48 c7 c0 00 86 65 94 48 ba 00 00 00 00 00 fc ff df 49 8d 7d 14 48 89 f9 48 c1 e9 03 <0f> b6 0c 11 48 89 fa 83 e2 07 83 c2 03 38 ca 7c 08 84 c9 0f 85 a2 [ 267.926023][ T2149] RSP: 0018:ffffc9000d62f958 EFLAGS: 00010003 [ 267.928401][ T2149] RAX: ffffffff94658600 RBX: 0000000000000001 RCX: 0000000000000002 [ 267.931476][ T2149] RDX: dffffc0000000000 RSI: 1ffffffff1c8d924 RDI: 0000000000000014 [ 267.934593][ T2149] RBP: ffffc9000d62fab0 R08: ffff88802b23c198 R09: fffffbfff224545a [ 267.937684][ T2149] R10: ffffffff9122a2d7 R11: 0000000000000000 R12: ffff88802b33b600 [ 267.940794][ T2149] R13: 0000000000000000 R14: ffff888013a10700 R15: ffff88802b23b600 [ 267.943925][ T2149] FS: 0000000000000000(0000) GS:ffff888096be3000(0000) knlGS:0000000000000000 [ 267.947438][ T2149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.950018][ T2149] CR2: 0000000080001000 CR3: 0000000025e17000 CR4: 0000000000352ef0 [ 267.953115][ T2149] Kernel panic - not syncing: Fatal exception [ 269.051940][ T2149] Shutting down cpus with NMI [ 269.054680][ T2149] Kernel Offset: disabled [ 269.056404][ T2149] Rebooting in 86400 seconds..