last executing test programs: 5.994291765s ago: executing program 2 (id=3039): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010000000000f000004000008638", @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x800) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000040)) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000004f00)={0x1, 0x0, [{0xe1}]}) 5.854273157s ago: executing program 2 (id=3041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) 5.549846102s ago: executing program 2 (id=3045): syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b02010200060004"], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80"], 0x94}}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8201, 0x4) 5.390248394s ago: executing program 0 (id=3047): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000e000000000000004aaa44576e25e3000000f295"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x32, &(0x7f0000000140)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat$userfaultfd(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$OCFS2_IOC_UNRESVSP64(0xffffffffffffffff, 0x402c582b, &(0x7f00000003c0)={0x0, 0x1, 0x3, 0x8000000000000000, 0x5, 0x7}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)="e43006ea3eb060409f11616b0ff107c8b5c84a2513725dd800704d068c0a1d6565ec464eaa", 0x0, 0x3}, 0x38) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={0x0, @ethernet={0x1, @multicast}, @sco, @generic={0xb, "511ae47038da8c1b070ccc0b3cd0"}, 0x56, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='gretap0\x00', 0x90, 0xfffffffd, 0xfff9}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40081100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400a5e31000010000000000000000000d00000a140000001100010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x1) io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000480)="245fea90a9d66cbaa5d452969020865560a4e38991faed9bda529dab423d791e09ad7cfe6971191048637ca38ae45ae7d979d675fa9592fa0efb5ce9611ed1e9534d6b643aa9d7087c9effb0ae8a995a626d9f7141227578e20c393c18e0f292fd8fa1a9744a6a75cd2d14d0e38a62f23b895e61c85f06d40457ceed26727407825b334aca366353cfb2d497903c63352e7dde6592390efbc99ef45e2bc8476f88fa776590e1045cb38d390fb002c9b10edb7bf162ff691ebdad79ba9eebae14b5e67c39e192646bbfd509964ca4", 0xce, 0x9, 0x0, 0x3}, &(0x7f0000000580)) 3.929523123s ago: executing program 0 (id=3051): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"fe5790e7a0da19ad98708d92e29a7e82e40798ae8d70cd4d4ca03ea114f532fc3175a5af8bc17ca41c324087a4235bf0db29025f9781be02aad5a5a6a7dd5699632c9cb68fafbf1c1a83c4a516cbffaa25a3d5f2ece0457c4b9b4b3276febfbb353958efa9a8956a1d5bad8267796cde344b6116c36a8500bc1a897acfc40bef6f58a5b2f4e84657cf4c93a5947b016f03ebd11d77b333c0827f168dda2309aa806097c7eaf7e7d23aa309df737e2126cbf011be37ac329b15ba3cb90f069d4f8353a43efa32b64dabd12e2e9952f04614c0b48a37096fdc907f5a53e1469680d27462b8a748c774657b138cf634f157add935bb426fc3c66d9b9ecc45b3b13756145c68f1198876353e12eabc7ef7baa35c8827056f5db369569b0d8729a2ca00a3c8b16e6b3af50d5577b3e92058c65f45d0af8fa3403682b7b67ddc0ac1aeb23a3076bbcf82cb82ef947d69db426521cb68b162612aed50635b58b741f7e2756301f0275e8c3b2342782b3d0e9a28bf50f9acb97bfbbccd0a05bbf8872d416a621d8b0cbe7a7dfd24cdadfb3d27ff6c4323e41a3936761371d769eafa1a6bb993de11d262820503c68cb25faa086fc62c9dbcd19e872303ac1dec681192fc3eba114e434737db8994b38d3ab2103a24d102ae5f700a00a2c2c79d86aa4513adfc648cb7826afc8148da355a4a9e5fdd91d66654dee5d4610d523db2df52567a1f66ae8e910f57b39e8d475ed866969a9394efda78dc4c698c17813f99c48145674bf680fe3496ae5c5be611ef4f70a3a12ed3c08e5f185de3dc2787bc45330efd8c556da0c201f92fc9f7653bd74b3675a24263aa88a6fc7f269446e69441bdb1b3098c7b0fc35edef53ef335c3dce90e118f61f4acd8dc61e48c206f0acc9e64ff846e361f18ef0e91a9df5478086a6cc2b50ccac12452a3ca748b52d78b2c09f9b393da5551fad817ed35eaa53f0e8f85caf217dfcea04ef803b11e653da81f1b47656608a47fb02f8565d5efc648a0d0d4b8c848f4f5120f835246a17f93c983f696a5c8da4d35675b18881949ff7e19dc40ea42ed7b98d6b45963f51ebf7558c05d3cb01f776becc5bbd3051d468bdd9d5ac02c2412f0589c4dfc28eaea3ed18e2190c6871d98bab1d330e0d941faf282ffefdbc51609af3d2da76f22e4065ad51b8703c594706fd25b7813f30d43b8cec53067309d97fb0eab17722d5f92dd945cec21bde40e69e2123ea1389e45d9b879e92f7819f9ec7d679500c37fb1bf7ffb9beab92d5315cdad78366a126e148f27ae6ca1cfa58c6eb4a1032a439ae37d858e964413e6203450ceb7f85795ba5b15bdc8a6b55531ce2f2ccc1ba21080ad287f530211187936114c47258da2ccd4c26122d5ae846c270c92165a29662bdc9332464618c2c00ac179460ec2b7ad9e30cd1cdb4b259f525533f3d3"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0xff, 0x6, 0x1, 0x4a, 0x9d, 0x1, 0x52, 0x2, 0x3, 0xffffffffffffffff}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x7, 0x0, 0xfe, 0x2, 0xa, 0x9, 0xb, 0x20000000006}, {0x2, 0x5, 0x5, 0xc4, 0x7, 0x47, 0xfc, 0x40, 0x5, 0x1, 0x18, 0xdb, 0xc}], 0xf87}) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0xfffffffffffffffc) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x40002, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r4, 0x0) 3.758164017s ago: executing program 0 (id=3052): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) open(&(0x7f0000000040)='./file0\x00', 0x4ea, 0x43) 3.680427504s ago: executing program 0 (id=3053): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r3, 0x2c229c86fd98b2d, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000004}, 0x4044000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79269}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x7, 0x9, 0x597, 0x6d, 0x2, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) 2.758163861s ago: executing program 0 (id=3059): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$packet(0x11, 0x3, 0x300) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x20000010) openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1f, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2.210087485s ago: executing program 2 (id=3064): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x5, 0x1000, 0x5, 0x1, 0x2, 0x10}}, &(0x7f0000000280), 0x279) 2.157379485s ago: executing program 2 (id=3066): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r3) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x20000010) r5 = openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000140)={r7, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000200)={r8, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000240)={r8, 0x80000}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1f, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1.826353671s ago: executing program 0 (id=3067): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4004054) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0) connect(r3, &(0x7f0000000140)=@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4b}}, 0x3}, 0x80) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYRES16], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbef}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) r6 = syz_io_uring_setup(0x231e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20000000}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x8, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x9901, 0x1, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 1.568509853s ago: executing program 3 (id=3068): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x2, 0x6, 0x8}, 0x10) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r3 = syz_io_uring_setup(0x437d, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0xfffffffe, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440)=r2, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000000000000000000000500100004000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1.255629716s ago: executing program 1 (id=3069): r0 = openat$uhid(0xffffff9c, &(0x7f0000000b00), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000001fc0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0xfffffffffffffdf3, 0x101, 0x4002, 0x2, 0x8, 0xfca7}}, 0x11c) 1.255355419s ago: executing program 3 (id=3070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r2], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4044084) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.198684624s ago: executing program 1 (id=3071): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000077c0)=[{{&(0x7f0000004f80)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000006300)=[@ip_ttl={{0x10, 0x0, 0x2, 0x40}}], 0x10}}], 0x1, 0x4008000) sendmmsg$inet(r0, &(0x7f0000004d00), 0x0, 0xf00) 1.130201459s ago: executing program 2 (id=3072): syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b0201020006000400070003"], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80"], 0x94}}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8201, 0x4) 1.060221188s ago: executing program 1 (id=3073): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05033600d3fc220000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.060033684s ago: executing program 3 (id=3074): r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000005c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={r1, 0x1000, &(0x7f00000015c0)=""/4096}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = openat$uhid(0xffffff9c, &(0x7f0000000b00), 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$UHID_CREATE(r2, &(0x7f0000001fc0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0xfffffffffffffdf3, 0x101, 0x4002, 0x2, 0x8, 0xfca7}}, 0x11c) 1.010167565s ago: executing program 3 (id=3075): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xda0, 0x0, 0x1}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8042, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe7, '\x00', "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"}}, 0xfffffea3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r4 = syz_open_pts(r3, 0x900) r5 = dup3(r4, r3, 0x80000) read$watch_queue(r5, &(0x7f0000001d40)=""/4095, 0xfff) chdir(&(0x7f00000003c0)='./bus\x00') chmod(&(0x7f0000000000)='./file0\x00', 0x28c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r6, r8, r9) rmdir(&(0x7f0000000480)='./file0\x00') 868.393126ms ago: executing program 1 (id=3076): mknod$loop(0x0, 0x0, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs/file0\x00', 0x8843, 0x1da) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) read$usbmon(r4, &(0x7f0000007500)=""/4096, 0x1000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="0000000001ec24c7823d4b0000000000000000000000000000000000e997f6fccbe2b0e32bb74b881ac5c8b9a5a6f0aaadb34fdd258be2652b129e53827305c1fa2df4f9abd3e0bdf7ad2fe0daacac8d7b249961e00698f86c5815a5742babf7868a3e1422ffd4c9fd3e3caef2361f4bd1b6e72a4a4ce007c8103e96f10689a4a25955b7683529586e44f2e083a183f36430936147954dc14d4fd09b5aea20c1ae93804afa0ae1dd9c3b017deaf21db8d09da2a94e444f0e321b1d3e975ee4fca73a06bb5c82682a498499f903a4d19ccbf85f3cfee4a635098d590874bc336a0c1755b831a7671e61fd452a2b24c6162d2c85899151a949c80095439219ef7a5389393c496f7d5cee", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x27) r6 = syz_io_uring_setup(0xa6e, &(0x7f0000000240)={0x0, 0x59c4, 0x100, 0x1000, 0x8}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)=0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$pokeuser(0x6, r9, 0xfc, 0x137db) ptrace$pokeuser(0x6, r10, 0xfc, 0x6000003f) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, 0x0, 0x24008840) 61.61063ms ago: executing program 3 (id=3077): r0 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x40000, 0x3a8}, 0x0, &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 61.285877ms ago: executing program 3 (id=3078): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x98, &(0x7f0000000000)={0xffffffffffff4497, 0xf, 0x3}}) (fail_nth: 8) 317.141µs ago: executing program 1 (id=3079): r0 = openat$uhid(0xffffff9c, &(0x7f0000000b00), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000001fc0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0xfffffffffffffdf3, 0x101, 0x4002, 0x2, 0x8, 0xfca7}}, 0x11c) 0s ago: executing program 1 (id=3080): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000080)=[{}], 0x1) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x3, 0x0, 0x0, 0x7, 0x2100}]}}, 0x0, 0x26, 0x0, 0x1, 0x1}, 0x28) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000280)={0x0, 0x0, @pic={0x6, 0x0, 0x8, 0x35, 0xf, 0x3, 0x7, 0x6, 0x40, 0x9, 0x2, 0x3c, 0x6, 0x8, 0x1, 0xfc}}) memfd_create(&(0x7f0000000040)='///4\x00', 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x48) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000001c0)=0x3, 0x4) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000180)='devlink\x00', 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): +0x10/0x10 [ 620.014368][T15472] ? proc_fail_nth_write+0x9f/0x220 [ 620.014390][T15472] ? find_held_lock+0x2b/0x80 [ 620.014410][T15472] ? find_held_lock+0x2b/0x80 [ 620.014426][T15472] ? ksys_write+0x190/0x250 [ 620.014442][T15472] ? __mutex_unlock_slowpath+0x15c/0x790 [ 620.014473][T15472] ? fput+0x79/0x100 [ 620.014492][T15472] ? ksys_write+0x1ac/0x250 [ 620.014511][T15472] __ia32_sys_bpf+0x79/0xf0 [ 620.014526][T15472] ? lockdep_hardirqs_on+0x78/0x100 [ 620.014551][T15472] __do_fast_syscall_32+0xe3/0x8c0 [ 620.014571][T15472] do_fast_syscall_32+0x32/0x70 [ 620.014587][T15472] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.014607][T15472] RIP: 0023:0xf706ef6c [ 620.014623][T15472] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 620.014638][T15472] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 620.014655][T15472] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00000000800005c0 [ 620.014666][T15472] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.014675][T15472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.014685][T15472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.014694][T15472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.014713][T15472] [ 620.061381][T15474] syzkaller0: entered promiscuous mode [ 620.104925][T15479] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2730'. [ 620.106030][T15474] syzkaller0: entered allmulticast mode [ 620.152823][ T41] kauditd_printk_skb: 22 callbacks suppressed [ 620.152836][ T41] audit: type=1326 audit(1774674111.264:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15480 comm="syz.1.2731" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704ef6c code=0x0 [ 620.244325][T15483] capability: warning: `syz.2.2732' uses 32-bit capabilities (legacy support in use) [ 620.309030][T15489] FAULT_INJECTION: forcing a failure. [ 620.309030][T15489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.332307][T15489] CPU: 1 UID: 0 PID: 15489 Comm: syz.3.2734 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.332334][T15489] Tainted: [L]=SOFTLOCKUP [ 620.332340][T15489] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 620.332351][T15489] Call Trace: [ 620.332357][T15489] [ 620.332364][T15489] dump_stack_lvl+0x100/0x190 [ 620.332417][T15489] should_fail_ex.cold+0x5/0xa [ 620.332439][T15489] _copy_from_user+0x2e/0xd0 [ 620.332462][T15489] kvm_arch_vcpu_ioctl+0x2e31/0x5740 [ 620.332482][T15489] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 620.332504][T15489] ? is_bpf_text_address+0x94/0x1a0 [ 620.332532][T15489] ? kernel_text_address+0x8d/0x100 [ 620.332557][T15489] ? __pfx_widen_string+0x10/0x10 [ 620.332580][T15489] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 620.332599][T15489] ? arch_stack_walk+0xa6/0xf0 [ 620.332628][T15489] ? __lock_acquire+0x4a5/0x2630 [ 620.332652][T15489] ? stack_depot_save_flags+0x27/0x9d0 [ 620.332676][T15489] ? __lock_acquire+0x4a5/0x2630 [ 620.332702][T15489] ? lock_acquire+0x1cf/0x380 [ 620.332734][T15489] ? __mutex_lock+0x26a/0x1b90 [ 620.332753][T15489] ? kvm_vcpu_ioctl+0x322/0x1730 [ 620.332781][T15489] ? __pfx___mutex_lock+0x10/0x10 [ 620.332808][T15489] ? tomoyo_path_number_perm+0x46d/0x580 [ 620.332831][T15489] ? kasan_quarantine_put+0x104/0x240 [ 620.332864][T15489] ? kvm_vcpu_ioctl+0x8a0/0x1730 [ 620.332884][T15489] kvm_vcpu_ioctl+0x8a0/0x1730 [ 620.332909][T15489] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 620.332932][T15489] ? tomoyo_path_number_perm+0x188/0x580 [ 620.332953][T15489] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 620.332983][T15489] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 620.333001][T15489] ? do_vfs_ioctl+0x226/0x13e0 [ 620.333021][T15489] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 620.333043][T15489] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 620.333059][T15489] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 620.333081][T15489] ? __fget_files+0x21f/0x3d0 [ 620.333098][T15489] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 620.333113][T15489] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 620.333132][T15489] __do_fast_syscall_32+0xe3/0x8c0 [ 620.333150][T15489] do_fast_syscall_32+0x32/0x70 [ 620.333162][T15489] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.333179][T15489] RIP: 0023:0xf7f52f6c [ 620.333189][T15489] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 620.333221][T15489] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 620.333238][T15489] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c048aeca [ 620.333249][T15489] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.333259][T15489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.333269][T15489] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 620.333278][T15489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.333301][T15489] [ 620.504118][T15493] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 621.058856][T15514] syzkaller0: entered promiscuous mode [ 621.060818][T15514] syzkaller0: entered allmulticast mode [ 622.101305][ T6005] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 622.231159][ T6005] usb 5-1: device descriptor read/64, error -71 [ 622.304779][T15524] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 622.307471][T15524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.310681][T15524] vhci_hcd vhci_hcd.0: Device attached [ 622.319003][T15524] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 622.321821][T15524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.325082][T15524] vhci_hcd vhci_hcd.0: Device attached [ 622.329075][T15524] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 622.331871][T15524] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 622.335547][T15524] vhci_hcd vhci_hcd.0: Device attached [ 622.340197][T15524] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 622.343036][T15524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.346381][T15524] vhci_hcd vhci_hcd.0: Device attached [ 622.351430][T15524] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 622.354044][T15524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.360136][T15524] vhci_hcd vhci_hcd.0: Device attached [ 622.364928][T15524] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 622.367739][T15524] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 622.371291][T15524] vhci_hcd vhci_hcd.0: Device attached [ 622.374680][T15524] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 622.380133][T15524] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(24) [ 622.382469][T15524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.386055][T15524] vhci_hcd vhci_hcd.0: Device attached [ 622.390133][T15524] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(26) [ 622.392973][T15524] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 622.396873][T15524] vhci_hcd vhci_hcd.0: Device attached [ 622.400225][T15524] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 622.413616][T15539] vhci_hcd: connection closed [ 622.414804][T15525] vhci_hcd: connection closed [ 622.415686][T15537] vhci_hcd: connection closed [ 622.418583][T15535] vhci_hcd: connection closed [ 622.420804][T15533] vhci_hcd: connection closed [ 622.423034][T15531] vhci_hcd: connection closed [ 622.425147][T15529] vhci_hcd: connection closed [ 622.427184][T15527] vhci_hcd: connection closed [ 622.429821][ T12] vhci_hcd vhci_hcd.3: stop threads [ 622.434652][ T12] vhci_hcd vhci_hcd.3: release socket [ 622.437067][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 622.439671][ T12] vhci_hcd vhci_hcd.3: stop threads [ 622.442007][ T12] vhci_hcd vhci_hcd.3: release socket [ 622.444399][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 622.446977][ T12] vhci_hcd vhci_hcd.3: stop threads [ 622.449219][ T12] vhci_hcd vhci_hcd.3: release socket [ 622.452347][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 622.454909][ T12] vhci_hcd vhci_hcd.3: stop threads [ 622.457095][ T12] vhci_hcd vhci_hcd.3: release socket [ 622.459372][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 622.462031][ T12] vhci_hcd vhci_hcd.3: stop threads [ 622.464251][ T12] vhci_hcd vhci_hcd.3: release socket [ 622.466548][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 622.469119][ T12] vhci_hcd vhci_hcd.3: stop threads [ 622.471768][ T12] vhci_hcd vhci_hcd.3: release socket [ 622.474126][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 622.476599][ T12] vhci_hcd vhci_hcd.3: stop threads [ 622.478711][ T12] vhci_hcd vhci_hcd.3: release socket [ 622.481077][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 622.481315][ T6005] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 622.483567][ T12] vhci_hcd vhci_hcd.3: stop threads [ 622.487862][ T12] vhci_hcd vhci_hcd.3: release socket [ 622.490154][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 622.501200][ T7498] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 622.618957][ T6005] usb 5-1: device descriptor read/64, error -71 [ 622.643200][T15545] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 622.645908][T15545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.649253][T15545] vhci_hcd vhci_hcd.0: Device attached [ 622.655027][T15545] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 622.657712][T15545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.660895][T15545] vhci_hcd vhci_hcd.0: Device attached [ 622.666214][T15545] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 622.669048][T15545] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 622.672464][T15545] vhci_hcd vhci_hcd.0: Device attached [ 622.678168][T15545] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 622.680984][T15545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.684546][T15545] vhci_hcd vhci_hcd.0: Device attached [ 622.701879][T15545] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 622.704752][T15545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.708040][T15545] vhci_hcd vhci_hcd.0: Device attached [ 622.713288][T15545] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20) [ 622.715674][T15545] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 622.718884][T15545] vhci_hcd vhci_hcd.0: Device attached [ 622.722928][T15545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 622.727466][T15545] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(24) [ 622.729593][T15545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.732726][T15545] vhci_hcd vhci_hcd.0: Device attached [ 622.736495][T15545] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(26) [ 622.738489][T15545] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 622.741185][T15545] vhci_hcd vhci_hcd.0: Device attached [ 622.741310][ T6005] usb usb5-port1: attempt power cycle [ 622.744554][T15545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 622.766566][T15559] vhci_hcd: connection closed [ 622.766741][T13435] vhci_hcd vhci_hcd.1: stop threads [ 622.770036][T15557] vhci_hcd: connection closed [ 622.770158][T15552] vhci_hcd: connection closed [ 622.770214][T15555] vhci_hcd: connection closed [ 622.770295][T15550] vhci_hcd: connection closed [ 622.771096][T15548] vhci_hcd: connection closed [ 622.772279][T15546] vhci_hcd: connection closed [ 622.772784][T15561] vhci_hcd: connection closed [ 622.781083][T13435] vhci_hcd vhci_hcd.1: release socket [ 622.784496][T13435] vhci_hcd vhci_hcd.1: disconnect device [ 622.786625][T13435] vhci_hcd vhci_hcd.1: stop threads [ 622.788892][T13435] vhci_hcd vhci_hcd.1: release socket [ 622.791262][T13435] vhci_hcd vhci_hcd.1: disconnect device [ 622.793894][T13435] vhci_hcd vhci_hcd.1: stop threads [ 622.796098][T13435] vhci_hcd vhci_hcd.1: release socket [ 622.798419][T13435] vhci_hcd vhci_hcd.1: disconnect device [ 622.800916][T13435] vhci_hcd vhci_hcd.1: stop threads [ 622.803432][T13435] vhci_hcd vhci_hcd.1: release socket [ 622.805697][T13435] vhci_hcd vhci_hcd.1: disconnect device [ 622.808087][T13435] vhci_hcd vhci_hcd.1: stop threads [ 622.810232][T13435] vhci_hcd vhci_hcd.1: release socket [ 622.812871][T13435] vhci_hcd vhci_hcd.1: disconnect device [ 622.815794][T13435] vhci_hcd vhci_hcd.1: stop threads [ 622.818026][T13435] vhci_hcd vhci_hcd.1: release socket [ 622.820402][T13435] vhci_hcd vhci_hcd.1: disconnect device [ 622.823949][T13435] vhci_hcd vhci_hcd.1: stop threads [ 622.826158][T13435] vhci_hcd vhci_hcd.1: release socket [ 622.827891][T13435] vhci_hcd vhci_hcd.1: disconnect device [ 622.830033][T13435] vhci_hcd vhci_hcd.1: stop threads [ 622.832331][T13435] vhci_hcd vhci_hcd.1: release socket [ 622.834673][T13435] vhci_hcd vhci_hcd.1: disconnect device [ 622.973303][T15564] FAULT_INJECTION: forcing a failure. [ 622.973303][T15564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.977834][T15564] CPU: 2 UID: 0 PID: 15564 Comm: syz.3.2749 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.977853][T15564] Tainted: [L]=SOFTLOCKUP [ 622.977857][T15564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 622.977865][T15564] Call Trace: [ 622.977871][T15564] [ 622.977877][T15564] dump_stack_lvl+0x100/0x190 [ 622.977898][T15564] should_fail_ex.cold+0x5/0xa [ 622.977912][T15564] _copy_to_user+0x32/0xd0 [ 622.977928][T15564] simple_read_from_buffer+0xcb/0x170 [ 622.977947][T15564] proc_fail_nth_read+0x1af/0x230 [ 622.977962][T15564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.977976][T15564] ? rw_verify_area+0xce/0x6d0 [ 622.977992][T15564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.978006][T15564] vfs_read+0x1e4/0xb30 [ 622.978019][T15564] ? __pfx_vfs_read+0x10/0x10 [ 622.978028][T15564] ? find_held_lock+0x2b/0x80 [ 622.978039][T15564] ? __fget_files+0x215/0x3d0 [ 622.978052][T15564] ? __fget_files+0x21f/0x3d0 [ 622.978067][T15564] ksys_read+0x12a/0x250 [ 622.978077][T15564] ? __pfx_ksys_read+0x10/0x10 [ 622.978091][T15564] do_int80_emulation+0x141/0x6b0 [ 622.978106][T15564] asm_int80_emulation+0x1a/0x20 [ 622.978117][T15564] RIP: 0023:0xf7155cab [ 622.978127][T15564] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 622.978138][T15564] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 622.978149][T15564] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f54165d0 [ 622.978156][T15564] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 622.978162][T15564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 622.978169][T15564] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 622.978175][T15564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 622.978189][T15564] [ 623.081167][ T6005] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 623.101819][ T6005] usb 5-1: device descriptor read/8, error -71 [ 623.491135][ T6005] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 624.061822][ T6005] usb 5-1: device descriptor read/8, error -71 [ 624.099453][T15582] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2756'. [ 624.171378][ T6005] usb usb5-port1: unable to enumerate USB device [ 624.401294][T14539] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 624.964205][T15596] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2761'. [ 625.129034][T15605] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2758'. [ 625.970693][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2765'. [ 626.038932][T15614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 626.041864][T15614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 626.046990][T15614] vhci_hcd vhci_hcd.0: Device attached [ 626.052991][T15614] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 626.056181][T15614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 626.063088][T15614] vhci_hcd vhci_hcd.0: Device attached [ 626.067626][T15614] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 626.070674][T15614] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 626.075254][T15614] vhci_hcd vhci_hcd.0: Device attached [ 626.089245][T15614] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 626.092268][T15614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 626.096411][T15614] vhci_hcd vhci_hcd.0: Device attached [ 626.100749][T15614] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 626.103461][T15614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 626.108073][T15614] vhci_hcd vhci_hcd.0: Device attached [ 626.150403][T15614] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 626.152551][T15614] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 626.158551][T15614] vhci_hcd vhci_hcd.0: Device attached [ 626.161662][T15614] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 626.171861][T15614] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(24) [ 626.174453][T15614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 626.177946][T15614] vhci_hcd vhci_hcd.0: Device attached [ 626.199660][T15614] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(26) [ 626.202008][T15614] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 626.211243][T15614] vhci_hcd vhci_hcd.0: Device attached [ 626.252091][T15614] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 626.277082][T15632] vhci_hcd: connection closed [ 626.277285][T15627] vhci_hcd: connection closed [ 626.277415][T15635] vhci_hcd: connection closed [ 626.278800][T15623] vhci_hcd: connection closed [ 626.279725][T15621] vhci_hcd: connection closed [ 626.289994][ T153] vhci_hcd vhci_hcd.2: stop threads [ 626.301964][ T153] vhci_hcd vhci_hcd.2: release socket [ 626.303327][T15617] vhci_hcd: connection closed [ 626.303956][T15619] vhci_hcd: connection closed [ 626.304943][T15615] vhci_hcd: connection closed [ 626.323849][ T153] vhci_hcd vhci_hcd.2: disconnect device [ 626.371147][ T153] vhci_hcd vhci_hcd.2: stop threads [ 626.373383][ T153] vhci_hcd vhci_hcd.2: release socket [ 626.375615][ T153] vhci_hcd vhci_hcd.2: disconnect device [ 626.378073][ T153] vhci_hcd vhci_hcd.2: stop threads [ 626.380175][ T153] vhci_hcd vhci_hcd.2: release socket [ 626.383053][ T153] vhci_hcd vhci_hcd.2: disconnect device [ 626.383361][ T10] usb 41-1: new low-speed USB device number 11 using vhci_hcd [ 626.385464][ T153] vhci_hcd vhci_hcd.2: stop threads [ 626.387862][T15616] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 626.389815][ T153] vhci_hcd vhci_hcd.2: release socket [ 626.396745][ T153] vhci_hcd vhci_hcd.2: disconnect device [ 626.493928][ T153] vhci_hcd vhci_hcd.2: stop threads [ 626.496123][ T153] vhci_hcd vhci_hcd.2: release socket [ 626.501249][ T153] vhci_hcd vhci_hcd.2: disconnect device [ 626.523646][ T153] vhci_hcd vhci_hcd.2: stop threads [ 626.525408][ T153] vhci_hcd vhci_hcd.2: release socket [ 626.527205][ T153] vhci_hcd vhci_hcd.2: disconnect device [ 626.528213][T15638] macvlan0: entered promiscuous mode [ 626.532729][ T153] vhci_hcd vhci_hcd.2: stop threads [ 626.534609][ T153] vhci_hcd vhci_hcd.2: release socket [ 626.537556][ T153] vhci_hcd vhci_hcd.2: disconnect device [ 626.539771][ T153] vhci_hcd vhci_hcd.2: stop threads [ 626.542450][ T153] vhci_hcd vhci_hcd.2: release socket [ 626.544604][ T153] vhci_hcd vhci_hcd.2: disconnect device [ 626.562338][T15638] dummy0: entered promiscuous mode [ 626.605602][T15638] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 626.653153][T15638] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 626.660196][T15642] xt_addrtype: ipv6 does not support BROADCAST matching [ 626.674187][T15638] hsr1: entered promiscuous mode [ 626.704753][T15638] hsr1: entered allmulticast mode [ 626.708294][T15638] macvlan0: entered allmulticast mode [ 626.737076][T15638] dummy0: entered allmulticast mode [ 627.265159][T15651] loop3: detected capacity change from 0 to 2640 [ 627.268323][T15651] buffer_io_error: 138 callbacks suppressed [ 627.268334][T15651] Buffer I/O error on dev loop3, logical block 0, async page read [ 627.274409][T15651] Buffer I/O error on dev loop3, logical block 0, async page read [ 627.291218][T15651] Buffer I/O error on dev loop3, logical block 0, async page read [ 627.295415][T15651] Buffer I/O error on dev loop3, logical block 0, async page read [ 627.299009][T15651] Buffer I/O error on dev loop3, logical block 0, async page read [ 627.304049][T15651] Buffer I/O error on dev loop3, logical block 0, async page read [ 627.307854][T15651] Buffer I/O error on dev loop3, logical block 0, async page read [ 627.310668][T15651] Buffer I/O error on dev loop3, logical block 0, async page read [ 627.314052][T15651] ldm_validate_partition_table(): Disk read failed. [ 627.316530][T15651] Buffer I/O error on dev loop3, logical block 0, async page read [ 627.320772][T15651] Buffer I/O error on dev loop3, logical block 0, async page read [ 627.323694][T15651] Dev loop3: unable to read RDB block 0 [ 627.325624][T15651] loop3: unable to read partition table [ 627.327830][T15651] loop_reread_partitions: partition scan of loop3 (3Ÿ ¾‚³˜) failed (rc=-5) [ 627.791347][ T6028] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 627.991239][ T6028] usb 7-1: Using ep0 maxpacket: 16 [ 628.013823][ T6028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.039856][ T6028] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 628.331077][ T6028] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 628.341250][ T6028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.349739][ T6028] usb 7-1: config 0 descriptor?? [ 628.444184][ T6028] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 628.837416][T15673] syzkaller0: entered promiscuous mode [ 628.839193][T15673] syzkaller0: entered allmulticast mode [ 628.896087][T15674] CUSE: unknown device info "" [ 628.910478][T15674] CUSE: unknown device info "Ö" [ 628.932490][T15674] CUSE: unknown device info "" [ 628.934212][T15674] CUSE: unknown device info "ÿÿ" [ 628.935856][T15674] CUSE: unknown device info "ðÿÿÿ" [ 628.937607][T15674] CUSE: unknown device info "" [ 628.939276][T15674] CUSE: unknown device info "" [ 628.940956][T15674] CUSE: unknown device info "" [ 628.947021][T15676] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 628.951537][T15676] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 628.955363][T15676] vhci_hcd vhci_hcd.0: Device attached [ 628.959849][T15676] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 628.962171][T15676] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 628.962638][T15676] vhci_hcd vhci_hcd.0: Device attached [ 628.964571][T15674] CUSE: unknown device info "" [ 628.967903][T15674] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 628.974712][T15676] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 628.975227][T15674] CUSE: unknown device info "ÿÿÿÿ" [ 628.977068][T15676] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 628.978703][T15674] CUSE: unknown device info "" [ 628.981609][T15676] vhci_hcd vhci_hcd.0: Device attached [ 628.984626][T15676] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 628.986715][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.988749][T15676] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 628.991726][T15674] CUSE: unknown device info "€" [ 628.993705][T15676] vhci_hcd vhci_hcd.0: Device attached [ 628.994980][T15674] CUSE: DEVNAME unspecified [ 629.000444][T15676] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 629.002863][T15676] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 629.005931][T15676] vhci_hcd vhci_hcd.0: Device attached [ 629.009424][T15676] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 629.011975][T15676] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 629.015143][T15676] vhci_hcd vhci_hcd.0: Device attached [ 629.018082][T15676] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 629.022650][T15676] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(24) [ 629.025150][T15676] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 629.028443][T15676] vhci_hcd vhci_hcd.0: Device attached [ 629.032202][T15676] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(26) [ 629.035396][T15676] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 629.038616][T15676] vhci_hcd vhci_hcd.0: Device attached [ 629.042725][T15676] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 629.055353][T15692] vhci_hcd: connection closed [ 629.055637][T13435] vhci_hcd vhci_hcd.0: stop threads [ 629.055954][T15696] tmpfs: Bad value for 'mpol' [ 629.057442][T13435] vhci_hcd vhci_hcd.0: release socket [ 629.061278][T15690] vhci_hcd: connection closed [ 629.061748][T15684] vhci_hcd: connection closed [ 629.062333][T15677] vhci_hcd: connection closed [ 629.062477][T15681] vhci_hcd: connection closed [ 629.062576][T15686] vhci_hcd: connection closed [ 629.062595][T15679] vhci_hcd: connection closed [ 629.062792][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 629.080113][T15688] vhci_hcd: connection closed [ 629.084406][T13435] vhci_hcd vhci_hcd.0: stop threads [ 629.088521][T13435] vhci_hcd vhci_hcd.0: release socket [ 629.090794][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 629.095102][T13435] vhci_hcd vhci_hcd.0: stop threads [ 629.097278][T13435] vhci_hcd vhci_hcd.0: release socket [ 629.099552][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 629.103368][T13435] vhci_hcd vhci_hcd.0: stop threads [ 629.105544][T13435] vhci_hcd vhci_hcd.0: release socket [ 629.107815][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 629.109560][T15698] tmpfs: Bad value for 'mpol' [ 629.112548][T13435] vhci_hcd vhci_hcd.0: stop threads [ 629.114470][T13435] vhci_hcd vhci_hcd.0: release socket [ 629.116704][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 629.119250][T13435] vhci_hcd vhci_hcd.0: stop threads [ 629.121574][T13435] vhci_hcd vhci_hcd.0: release socket [ 629.124360][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 629.126847][T13435] vhci_hcd vhci_hcd.0: stop threads [ 629.129024][T13435] vhci_hcd vhci_hcd.0: release socket [ 629.131376][ T6028] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 629.134668][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 629.137256][T13435] vhci_hcd vhci_hcd.0: stop threads [ 629.139390][T13435] vhci_hcd vhci_hcd.0: release socket [ 629.142638][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 629.727371][T15710] FAULT_INJECTION: forcing a failure. [ 629.727371][T15710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.733451][T15710] CPU: 1 UID: 0 PID: 15710 Comm: syz.3.2786 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.733471][T15710] Tainted: [L]=SOFTLOCKUP [ 629.733475][T15710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 629.733482][T15710] Call Trace: [ 629.733486][T15710] [ 629.733491][T15710] dump_stack_lvl+0x100/0x190 [ 629.733511][T15710] should_fail_ex.cold+0x5/0xa [ 629.733531][T15710] _copy_to_user+0x32/0xd0 [ 629.733546][T15710] simple_read_from_buffer+0xcb/0x170 [ 629.733565][T15710] proc_fail_nth_read+0x1af/0x230 [ 629.733580][T15710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.733595][T15710] ? rw_verify_area+0xce/0x6d0 [ 629.733611][T15710] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.733625][T15710] vfs_read+0x1e4/0xb30 [ 629.733637][T15710] ? __pfx_vfs_read+0x10/0x10 [ 629.733646][T15710] ? find_held_lock+0x2b/0x80 [ 629.733658][T15710] ? __fget_files+0x215/0x3d0 [ 629.733671][T15710] ? __fget_files+0x21f/0x3d0 [ 629.733686][T15710] ksys_read+0x12a/0x250 [ 629.733696][T15710] ? __pfx_ksys_read+0x10/0x10 [ 629.733710][T15710] do_int80_emulation+0x141/0x6b0 [ 629.733724][T15710] asm_int80_emulation+0x1a/0x20 [ 629.733735][T15710] RIP: 0023:0xf7155cab [ 629.733747][T15710] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 629.733758][T15710] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 629.733769][T15710] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54165d0 [ 629.733776][T15710] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 629.733783][T15710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 629.733789][T15710] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 629.733795][T15710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.733809][T15710] [ 630.231256][ T7498] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 630.254968][ T1326] usb 7-1: USB disconnect, device number 53 [ 630.332638][T15716] Falling back ldisc for ttyS3. [ 630.401233][ T7498] usb 8-1: Using ep0 maxpacket: 16 [ 630.404414][ T7498] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.407869][ T7498] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 630.413597][ T7498] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 630.417146][ T7498] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.427247][ T7498] usb 8-1: config 0 descriptor?? [ 630.434341][ T7498] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 630.611606][T15743] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 630.614097][T15743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.628238][T15745] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2792'. [ 630.630170][T15743] vhci_hcd vhci_hcd.0: Device attached [ 630.651245][T15743] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 630.653467][T15743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.655983][T15743] vhci_hcd vhci_hcd.0: Device attached [ 630.669273][T15743] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 630.671425][T15743] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 630.674317][T15743] vhci_hcd vhci_hcd.0: Device attached [ 630.699108][T15743] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 630.701373][T15743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.705799][T15743] vhci_hcd vhci_hcd.0: Device attached [ 630.718455][T15743] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 630.720719][T15743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.724195][T15743] vhci_hcd vhci_hcd.0: Device attached [ 630.744912][T15743] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 630.747107][T15743] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 630.749829][T15743] vhci_hcd vhci_hcd.0: Device attached [ 630.753031][T15743] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 630.760940][T15743] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(24) [ 630.763410][T15743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.767109][T15743] vhci_hcd vhci_hcd.0: Device attached [ 630.778085][T15743] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(26) [ 630.780952][T15743] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 630.784624][T15743] vhci_hcd vhci_hcd.0: Device attached [ 630.788080][T15743] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 630.802739][T15760] vhci_hcd: connection closed [ 630.802974][T15758] vhci_hcd: connection closed [ 630.803677][ T12] vhci_hcd vhci_hcd.2: stop threads [ 630.805133][T15756] vhci_hcd: connection closed [ 630.809309][T15754] vhci_hcd: connection closed [ 630.811416][T15744] vhci_hcd: connection closed [ 630.811879][T15748] vhci_hcd: connection closed [ 630.813675][T15750] vhci_hcd: connection closed [ 630.815148][ T12] vhci_hcd vhci_hcd.2: release socket [ 630.815210][T15752] vhci_hcd: connection closed [ 630.833147][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 630.840429][ T12] vhci_hcd vhci_hcd.2: stop threads [ 630.857839][ T12] vhci_hcd vhci_hcd.2: release socket [ 630.866042][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 630.871869][ T12] vhci_hcd vhci_hcd.2: stop threads [ 630.873580][ T12] vhci_hcd vhci_hcd.2: release socket [ 630.875336][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 630.877274][ T12] vhci_hcd vhci_hcd.2: stop threads [ 630.878935][ T12] vhci_hcd vhci_hcd.2: release socket [ 630.880698][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 630.882863][ T12] vhci_hcd vhci_hcd.2: stop threads [ 630.884528][ T12] vhci_hcd vhci_hcd.2: release socket [ 630.886298][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 630.888203][ T12] vhci_hcd vhci_hcd.2: stop threads [ 630.889866][ T12] vhci_hcd vhci_hcd.2: release socket [ 630.891044][ T7498] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 630.894482][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 630.896414][ T12] vhci_hcd vhci_hcd.2: stop threads [ 630.898064][ T12] vhci_hcd vhci_hcd.2: release socket [ 630.899813][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 630.903813][ T12] vhci_hcd vhci_hcd.2: stop threads [ 630.905587][ T12] vhci_hcd vhci_hcd.2: release socket [ 630.907337][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 631.061119][ T7498] usb 6-1: Using ep0 maxpacket: 16 [ 631.068007][ T7498] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.072403][ T7498] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 631.077401][ T7498] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 631.081398][ T7498] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.086628][ T7498] usb 6-1: config 0 descriptor?? [ 631.091344][ T7498] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 631.521405][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 631.595605][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2795'. [ 631.649592][T15771] random: crng reseeded on system resumption [ 632.435331][T15785] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 632.438106][T15785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 632.441243][T15785] vhci_hcd vhci_hcd.0: Device attached [ 632.446141][T15785] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 632.448407][T15785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 632.452934][T15785] vhci_hcd vhci_hcd.0: Device attached [ 632.456480][T15785] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 632.458663][T15785] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 632.462542][T15785] vhci_hcd vhci_hcd.0: Device attached [ 632.467263][T15785] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 632.470074][T15785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 632.474040][T15785] vhci_hcd vhci_hcd.0: Device attached [ 632.478478][T15785] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 632.480711][T15785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 632.483231][T15785] vhci_hcd vhci_hcd.0: Device attached [ 632.486478][T15785] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 632.488779][T15785] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 632.491851][T15785] vhci_hcd vhci_hcd.0: Device attached [ 632.494370][T15785] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 632.498263][T15785] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(24) [ 632.500465][T15785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 632.503783][T15785] vhci_hcd vhci_hcd.0: Device attached [ 632.506804][T15785] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(26) [ 632.508798][T15785] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 632.511864][T15785] vhci_hcd vhci_hcd.0: Device attached [ 632.514405][T15785] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 632.525056][T15800] vhci_hcd: connection closed [ 632.525158][T15798] vhci_hcd: connection closed [ 632.525334][T15796] vhci_hcd: connection closed [ 632.525547][T15792] vhci_hcd: connection closed [ 632.527310][T15794] vhci_hcd: connection closed [ 632.531117][T15790] vhci_hcd: connection closed [ 632.532077][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 632.533972][T15788] vhci_hcd: connection closed [ 632.535467][ T1142] vhci_hcd vhci_hcd.2: release socket [ 632.535621][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 632.537872][T15786] vhci_hcd: connection closed [ 632.539339][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 632.547034][ T1142] vhci_hcd vhci_hcd.2: release socket [ 632.549096][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 632.551524][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 632.553324][ T1142] vhci_hcd vhci_hcd.2: release socket [ 632.555379][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 632.557563][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 632.559272][ T1142] vhci_hcd vhci_hcd.2: release socket [ 632.561292][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 632.563218][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 632.564823][ T1142] vhci_hcd vhci_hcd.2: release socket [ 632.566535][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 632.568425][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 632.570105][ T1142] vhci_hcd vhci_hcd.2: release socket [ 632.572393][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 632.574243][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 632.575826][ T1142] vhci_hcd vhci_hcd.2: release socket [ 632.577614][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 632.579926][ T1142] vhci_hcd vhci_hcd.2: stop threads [ 632.581837][ T1142] vhci_hcd vhci_hcd.2: release socket [ 632.583542][ T1142] vhci_hcd vhci_hcd.2: disconnect device [ 632.591270][ T40] usb 42-1: enqueue for inactive port 0 [ 632.731516][T15806] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 632.838944][T13193] usb 8-1: USB disconnect, device number 46 [ 632.858331][T15811] random: crng reseeded on system resumption [ 633.081773][ T40] usb usb42-port1: attempt power cycle [ 633.731249][ T6005] usb 6-1: USB disconnect, device number 54 [ 633.813995][T15826] netlink: 'syz.3.2811': attribute type 25 has an invalid length. [ 633.935479][T15830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 633.937568][T15830] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2810'. [ 634.111658][ T40] usb usb42-port1: unable to enumerate USB device [ 634.119298][T15841] random: crng reseeded on system resumption [ 634.241514][T15843] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 634.244153][T15843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 634.246825][T15843] vhci_hcd vhci_hcd.0: Device attached [ 634.263327][T15843] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 634.266150][T15843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 634.270018][T15843] vhci_hcd vhci_hcd.0: Device attached [ 634.274270][T15843] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 634.276887][T15843] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 634.279644][T15843] vhci_hcd vhci_hcd.0: Device attached [ 634.284174][T15843] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 634.286804][T15843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 634.289560][T15843] vhci_hcd vhci_hcd.0: Device attached [ 634.293845][T15843] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 634.296378][T15843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 634.298950][T15843] vhci_hcd vhci_hcd.0: Device attached [ 634.302742][T15843] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 634.305277][T15843] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 634.308602][T15843] vhci_hcd vhci_hcd.0: Device attached [ 634.311572][T15843] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 634.316755][T15843] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(24) [ 634.319575][T15843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 634.323416][T15843] vhci_hcd vhci_hcd.0: Device attached [ 634.327394][T15843] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(26) [ 634.329953][T15843] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 634.334111][T15843] vhci_hcd vhci_hcd.0: Device attached [ 634.337251][T15843] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 634.352805][T15856] vhci_hcd: connection closed [ 634.353089][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 634.353118][T15854] vhci_hcd: connection closed [ 634.353231][T15852] vhci_hcd: connection closed [ 634.353364][T15850] vhci_hcd: connection closed [ 634.353550][T15848] vhci_hcd: connection closed [ 634.354333][T15858] vhci_hcd: connection closed [ 634.355791][T15846] vhci_hcd: connection closed [ 634.368848][T15844] vhci_hcd: connection closed [ 634.371095][ T1142] vhci_hcd vhci_hcd.0: release socket [ 634.374693][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 634.377073][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 634.378891][ T1142] vhci_hcd vhci_hcd.0: release socket [ 634.380781][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 634.382838][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 634.384820][ T1142] vhci_hcd vhci_hcd.0: release socket [ 634.386687][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 634.388720][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 634.390457][ T1142] vhci_hcd vhci_hcd.0: release socket [ 634.393067][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 634.395043][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 634.396836][ T1142] vhci_hcd vhci_hcd.0: release socket [ 634.398586][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 634.400784][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 634.402829][ T1142] vhci_hcd vhci_hcd.0: release socket [ 634.404639][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 634.406714][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 634.408434][ T1142] vhci_hcd vhci_hcd.0: release socket [ 634.410240][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 634.414465][ T1142] vhci_hcd vhci_hcd.0: stop threads [ 634.416280][ T1142] vhci_hcd vhci_hcd.0: release socket [ 634.418150][ T1142] vhci_hcd vhci_hcd.0: disconnect device [ 634.421121][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 634.421342][ T1326] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 634.591249][ T1326] usb 7-1: Using ep0 maxpacket: 16 [ 634.594979][ T1326] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.598345][ T1326] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 634.602911][ T1326] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 634.605964][ T1326] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.610580][ T1326] usb 7-1: config 0 descriptor?? [ 634.614469][ T1326] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 634.926608][T15869] FAULT_INJECTION: forcing a failure. [ 634.926608][T15869] name failslab, interval 1, probability 0, space 0, times 0 [ 634.932613][T15869] CPU: 2 UID: 0 PID: 15869 Comm: syz.0.2819 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.932642][T15869] Tainted: [L]=SOFTLOCKUP [ 634.932648][T15869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 634.932659][T15869] Call Trace: [ 634.932667][T15869] [ 634.932675][T15869] dump_stack_lvl+0x100/0x190 [ 634.932707][T15869] should_fail_ex.cold+0x5/0xa [ 634.932729][T15869] ? tomoyo_realpath_from_path+0xb6/0x690 [ 634.932756][T15869] should_failslab+0xc2/0x120 [ 634.932776][T15869] __kmalloc_noprof+0xe0/0x850 [ 634.932815][T15869] tomoyo_realpath_from_path+0xb6/0x690 [ 634.932846][T15869] tomoyo_path_number_perm+0x23c/0x580 [ 634.932867][T15869] ? tomoyo_path_number_perm+0x22e/0x580 [ 634.932889][T15869] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 634.932937][T15869] ? find_held_lock+0x2b/0x80 [ 634.932956][T15869] ? hook_file_ioctl_common+0x146/0x410 [ 634.932979][T15869] ? __fget_files+0x215/0x3d0 [ 634.933001][T15869] ? __fget_files+0x21f/0x3d0 [ 634.933024][T15869] security_file_ioctl_compat+0xd3/0x230 [ 634.933050][T15869] __ia32_compat_sys_ioctl+0xc2/0x360 [ 634.933080][T15869] __do_fast_syscall_32+0xe3/0x8c0 [ 634.933105][T15869] do_fast_syscall_32+0x32/0x70 [ 634.933124][T15869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 634.933148][T15869] RIP: 0023:0xf706ef6c [ 634.933163][T15869] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 634.933180][T15869] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 634.933200][T15869] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 634.933211][T15869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 634.933221][T15869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 634.933232][T15869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.933242][T15869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 634.933267][T15869] [ 634.933277][T15869] ERROR: Out of memory at tomoyo_realpath_from_path. [ 635.421110][ T6005] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 635.551219][ T6005] usb 5-1: device descriptor read/64, error -71 [ 635.787598][T15875] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 635.790329][T15875] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 635.794169][T15875] vhci_hcd vhci_hcd.0: Device attached [ 635.801246][ T6005] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 635.808016][T15875] random: crng reseeded on system resumption [ 635.824239][T15875] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 635.931145][ T6005] usb 5-1: device descriptor read/64, error -71 [ 636.041290][ T6005] usb usb5-port1: attempt power cycle [ 636.071171][T13193] usb 44-1: SetAddress Request (10) to port 0 [ 636.073442][T13193] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 636.381096][ T6005] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 636.401521][ T6005] usb 5-1: device descriptor read/8, error -71 [ 636.436568][T15876] vhci_hcd: connection reset by peer [ 636.438499][ T153] vhci_hcd vhci_hcd.3: stop threads [ 636.440845][ T153] vhci_hcd vhci_hcd.3: release socket [ 636.443426][ T153] vhci_hcd vhci_hcd.3: disconnect device [ 636.641131][ T6005] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 636.661992][ T6005] usb 5-1: device descriptor read/8, error -71 [ 636.781430][ T6005] usb usb5-port1: unable to enumerate USB device [ 636.990600][ T1326] usb 7-1: USB disconnect, device number 54 [ 637.085605][T15885] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 637.088348][T15885] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 637.092637][T15885] vhci_hcd vhci_hcd.0: Device attached [ 637.226591][T15892] random: crng reseeded on system resumption [ 637.381086][ T6028] usb 40-1: SetAddress Request (22) to port 0 [ 637.383655][ T6028] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 637.426983][T15897] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 637.429149][T15897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 637.433181][T15897] vhci_hcd vhci_hcd.0: Device attached [ 637.448126][T15897] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 637.450139][T15897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 637.452871][T15897] vhci_hcd vhci_hcd.0: Device attached [ 637.455892][T15897] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 637.457988][T15897] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 637.460441][T15897] vhci_hcd vhci_hcd.0: Device attached [ 637.463798][T15897] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 637.465888][T15897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 637.468305][T15897] vhci_hcd vhci_hcd.0: Device attached [ 637.471685][T15897] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 637.474450][T15897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 637.477223][T15897] vhci_hcd vhci_hcd.0: Device attached [ 637.481261][T15897] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(20) [ 637.483411][T15897] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 637.485987][T15897] vhci_hcd vhci_hcd.0: Device attached [ 637.488412][T15897] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 637.493410][T15897] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(24) [ 637.495524][T15897] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 637.497979][T15897] vhci_hcd vhci_hcd.0: Device attached [ 637.501496][T15897] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(26) [ 637.503608][T15897] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 637.505986][T15897] vhci_hcd vhci_hcd.0: Device attached [ 637.508438][T15897] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 637.524111][T15912] vhci_hcd: connection closed [ 637.524348][T15910] vhci_hcd: connection closed [ 637.524423][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 637.530553][T15908] vhci_hcd: connection closed [ 637.530629][T15906] vhci_hcd: connection closed [ 637.530937][T15902] vhci_hcd: connection closed [ 637.531127][T15898] vhci_hcd: connection closed [ 637.531909][ T1142] vhci_hcd vhci_hcd.3: release socket [ 637.531932][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 637.532898][T15904] vhci_hcd: connection closed [ 637.534482][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 637.536473][T15900] vhci_hcd: connection closed [ 637.538013][ T1142] vhci_hcd vhci_hcd.3: release socket [ 637.549582][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 637.551873][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 637.553682][ T1142] vhci_hcd vhci_hcd.3: release socket [ 637.555878][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 637.558524][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 637.561169][ T1142] vhci_hcd vhci_hcd.3: release socket [ 637.563580][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 637.566176][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 637.568465][ T1142] vhci_hcd vhci_hcd.3: release socket [ 637.572531][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 637.574675][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 637.576754][ T1142] vhci_hcd vhci_hcd.3: release socket [ 637.578984][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 637.581434][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 637.583549][ T1142] vhci_hcd vhci_hcd.3: release socket [ 637.585775][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 637.587956][ T1142] vhci_hcd vhci_hcd.3: stop threads [ 637.589933][ T1142] vhci_hcd vhci_hcd.3: release socket [ 637.592772][ T1142] vhci_hcd vhci_hcd.3: disconnect device [ 637.659960][T15886] vhci_hcd: connection reset by peer [ 637.662637][T13435] vhci_hcd vhci_hcd.1: stop threads [ 637.664466][T13435] vhci_hcd vhci_hcd.1: release socket [ 637.666394][T13435] vhci_hcd vhci_hcd.1: disconnect device [ 637.955108][T15916] mkiss: ax0: crc mode is auto. [ 638.083692][T15920] openvswitch: netlink: IP tunnel dst address not specified [ 638.697198][T15923] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.700785][T15923] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.898446][T15923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.937004][T15923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.185042][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2833'. [ 639.297730][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.300804][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.306208][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.310696][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.497796][T15937] random: crng reseeded on system resumption [ 639.991213][ T1326] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 640.941126][ T1326] usb 5-1: device descriptor read/64, error -71 [ 641.191095][ T1326] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 641.321205][ T1326] usb 5-1: device descriptor read/64, error -71 [ 641.431428][ T1326] usb usb5-port1: attempt power cycle [ 641.773360][ T1326] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 641.802029][ T1326] usb 5-1: device descriptor read/8, error -71 [ 642.051104][ T1326] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 642.071925][ T1326] usb 5-1: device descriptor read/8, error -71 [ 642.091138][T13193] usb 44-1: device descriptor read/8, error -110 [ 642.271259][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 643.093949][ T1326] usb usb5-port1: unable to enumerate USB device [ 643.262268][T13193] usb usb44-port1: attempt power cycle [ 643.281118][ T6028] usb 40-1: device descriptor read/8, error -110 [ 643.661197][ T1326] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 643.842085][T13193] usb usb44-port1: unable to enumerate USB device [ 643.871370][ T829] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 644.021051][ T829] usb 6-1: Using ep0 maxpacket: 16 [ 644.025156][ T829] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 644.029630][ T829] usb 6-1: config 0 interface 0 has no altsetting 0 [ 644.035388][ T829] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 644.039107][ T829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.042876][ T829] usb 6-1: Product: syz [ 644.044676][ T829] usb 6-1: Manufacturer: syz [ 644.046587][ T829] usb 6-1: SerialNumber: syz [ 644.050537][ T829] usb 6-1: config 0 descriptor?? [ 644.232566][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 644.236369][ T1326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 644.242645][ T1326] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 644.246270][ T1326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.248849][ T1326] usb 5-1: Product: syz [ 644.250559][ T1326] usb 5-1: Manufacturer: syz [ 644.252637][ T1326] usb 5-1: SerialNumber: syz [ 644.260150][T15979] FAULT_INJECTION: forcing a failure. [ 644.260150][T15979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.263488][ T1326] usb 5-1: config 0 descriptor?? [ 644.266535][T15979] CPU: 3 UID: 0 PID: 15979 Comm: syz.1.2848 Tainted: G L syzkaller #0 PREEMPT(full) [ 644.266562][T15979] Tainted: [L]=SOFTLOCKUP [ 644.266568][T15979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 644.266578][T15979] Call Trace: [ 644.266585][T15979] [ 644.266592][T15979] dump_stack_lvl+0x100/0x190 [ 644.266625][T15979] should_fail_ex.cold+0x5/0xa [ 644.266647][T15979] _copy_from_user+0x2e/0xd0 [ 644.266670][T15979] raw_alloc_io_data+0x32/0x1c0 [ 644.266694][T15979] raw_ioctl+0x223/0x2b80 [ 644.266728][T15979] ? __pfx_raw_ioctl+0x10/0x10 [ 644.266752][T15979] ? __pfx_raw_ioctl+0x10/0x10 [ 644.266772][T15979] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 644.266802][T15979] __do_fast_syscall_32+0xe3/0x8c0 [ 644.266824][T15979] do_fast_syscall_32+0x32/0x70 [ 644.266842][T15979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 644.266864][T15979] RIP: 0023:0xf704ef6c [ 644.266878][T15979] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 644.266896][T15979] RSP: 002b:00000000f543c4b4 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 644.266914][T15979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085507 [ 644.266925][T15979] RDX: 00000000f543c4f8 RSI: 00000000f7412ff4 RDI: 0000000000000000 [ 644.266935][T15979] RBP: 00000000f543d518 R08: 0000000000000000 R09: 0000000000000000 [ 644.266945][T15979] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 644.266955][T15979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 644.266980][T15979] [ 644.272562][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 644.275594][ T1326] hub 5-1:0.0: bad descriptor, ignoring hub [ 644.294320][ T829] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input16 [ 644.294840][ T1326] hub 5-1:0.0: probe with driver hub failed with error -5 [ 644.305939][ T829] imon:send_packet: packet tx failed (-71) [ 644.313139][ T1326] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input18 [ 644.345158][ T829] imon 6-1:0.0: panel buttons/knobs setup failed qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x245000) [ 644.391069][ T829] rc_core: IR keymap rc-imon-pad not found [ 644.393637][ T829] Registered IR keymap rc-empty [ 644.395800][ T829] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 644.400084][ T829] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 644.406773][ T829] imon:send_packet: packet tx failed (-71) [ 644.421553][ T829] imon 6-1:0.0: remote input dev register failed [ 644.424602][ T1106] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 644.425750][ T829] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 644.429331][ T1106] ata1: failed to read log page 10h (errno=-5) [ 644.436908][ T1106] ata1.00: exception Emask 0x1 SAct 0x8000000 SErr 0x0 action 0x0 [ 644.442060][ T1106] ata1.00: irq_stat 0x41000000 [ 644.445028][ T1106] ata1.00: failed command: READ FPDMA QUEUED [ 644.447893][ T1106] ata1.00: cmd 60/28:d8:6e:32:01/12:00:00:00:00/40 tag 27 ncq dma 2379776 in [ 644.447893][ T1106] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 644.451330][ T829] imon 6-1:0.0: unable to initialize intf0, err 0 [ 644.456539][ T829] imon:imon_probe: failed to initialize context! [ 644.457794][ T1106] ata1.00: status: { DRDY } [ 644.458914][ T829] imon 6-1:0.0: unable to register, err -19 [ 644.460811][ T1106] ata1.00: error: { ABRT } [ 644.466233][ T1106] ata1.00: configured for UDMA/100 [ 644.467952][ T829] usb 6-1: USB disconnect, device number 55 [ 644.471791][ T6028] usb usb40-port1: attempt power cycle [ 644.486071][ T1106] sd 0:0:0:0: [sda] tag#27 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 644.490101][ T1106] sd 0:0:0:0: [sda] tag#27 Sense Key : Aborted Command [current] [ 644.493608][ T1106] sd 0:0:0:0: [sda] tag#27 Add. Sense: No additional sense information [ 644.571075][ T1106] sd 0:0:0:0: [sda] tag#27 CDB: Read(10) 28 00 00 01 32 6e 00 12 28 00 [ 644.574129][ T1106] blk_print_req_error: 140 callbacks suppressed [ 644.574142][ T1106] I/O error, dev sda, sector 78446 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 644.579963][ T1106] ata1: EH complete [ 644.614375][T15991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'. [ 644.723698][ T842] usb 5-1: USB disconnect, device number 56 [ 645.031738][ T6028] usb usb40-port1: unable to enumerate USB device [ 645.071232][ T829] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 645.242599][ T829] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.246474][ T829] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 645.251438][ T829] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 645.254695][ T829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.258129][ T829] usb 6-1: Product: syz [ 645.259940][ T829] usb 6-1: Manufacturer: syz [ 645.263007][ T829] usb 6-1: SerialNumber: syz [ 645.272469][ T829] usb 6-1: config 0 descriptor?? [ 645.552709][T16006] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2852'. [ 646.984282][T16025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 646.985920][T16025] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2861'. [ 647.628648][T16029] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 647.750043][T16031] syzkaller0: entered promiscuous mode [ 647.752021][T16031] syzkaller0: entered allmulticast mode [ 647.970343][ T829] usb 6-1: USB disconnect, device number 56 [ 648.273987][T16034] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 648.276630][T16034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 648.279944][T16034] vhci_hcd vhci_hcd.0: Device attached [ 648.283916][T16034] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 648.286721][T16034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 648.290147][T16034] vhci_hcd vhci_hcd.0: Device attached [ 648.293797][T16034] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 648.296368][T16034] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 648.299502][T16034] vhci_hcd vhci_hcd.0: Device attached [ 648.305730][T16034] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 648.307889][T16034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 648.312716][T16034] vhci_hcd vhci_hcd.0: Device attached [ 648.318434][T16034] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 648.320908][T16034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 648.325567][T16034] vhci_hcd vhci_hcd.0: Device attached [ 648.331338][T16034] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(20) [ 648.333785][T16034] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 648.347331][T16034] vhci_hcd vhci_hcd.0: Device attached [ 648.354273][T16034] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 648.364628][T16034] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(24) [ 648.366767][T16034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 648.370518][T16034] vhci_hcd vhci_hcd.0: Device attached [ 648.374323][T16034] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 648.388690][T16049] vhci_hcd: connection closed [ 648.388985][ T13] vhci_hcd vhci_hcd.1: stop threads [ 648.393307][T16047] vhci_hcd: connection closed [ 648.393517][T16041] vhci_hcd: connection closed [ 648.394186][T16038] vhci_hcd: connection closed [ 648.395579][T16035] vhci_hcd: connection closed [ 648.395745][T16045] vhci_hcd: connection closed [ 648.397175][ T13] vhci_hcd vhci_hcd.1: release socket [ 648.399333][T16043] vhci_hcd: connection closed [ 648.401535][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 648.409293][ T13] vhci_hcd vhci_hcd.1: stop threads [ 648.412059][ T13] vhci_hcd vhci_hcd.1: release socket [ 648.414578][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 648.417223][ T13] vhci_hcd vhci_hcd.1: stop threads [ 648.419474][ T13] vhci_hcd vhci_hcd.1: release socket [ 648.423892][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 648.426656][ T13] vhci_hcd vhci_hcd.1: stop threads [ 648.429252][ T13] vhci_hcd vhci_hcd.1: release socket [ 648.432961][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 648.436205][ T13] vhci_hcd vhci_hcd.1: stop threads [ 648.438649][ T13] vhci_hcd vhci_hcd.1: release socket [ 648.441914][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 648.444593][ T13] vhci_hcd vhci_hcd.1: stop threads [ 648.446730][ T13] vhci_hcd vhci_hcd.1: release socket [ 648.449261][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 648.451980][ T13] vhci_hcd vhci_hcd.1: stop threads [ 648.454193][ T13] vhci_hcd vhci_hcd.1: release socket [ 648.457387][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 648.461163][ T829] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 648.940228][T16055] FAULT_INJECTION: forcing a failure. [ 648.940228][T16055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.946221][T16055] CPU: 1 UID: 0 PID: 16055 Comm: syz.1.2868 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.946250][T16055] Tainted: [L]=SOFTLOCKUP [ 648.946255][T16055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 648.946265][T16055] Call Trace: [ 648.946271][T16055] [ 648.946277][T16055] dump_stack_lvl+0x100/0x190 [ 648.946306][T16055] should_fail_ex.cold+0x5/0xa [ 648.946326][T16055] _copy_from_user+0x2e/0xd0 [ 648.946347][T16055] get_compat_msghdr+0xb3/0x4b0 [ 648.946370][T16055] ? __pfx_get_compat_msghdr+0x10/0x10 [ 648.946404][T16055] ___sys_sendmsg+0x1b6/0x1e0 [ 648.946424][T16055] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.946470][T16055] __sys_sendmsg+0x170/0x220 [ 648.946492][T16055] ? __pfx___sys_sendmsg+0x10/0x10 [ 648.946519][T16055] ? __pfx_ksys_write+0x10/0x10 [ 648.946544][T16055] __do_fast_syscall_32+0xe3/0x8c0 [ 648.946563][T16055] do_fast_syscall_32+0x32/0x70 [ 648.946586][T16055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 648.946607][T16055] RIP: 0023:0xf704ef6c [ 648.946620][T16055] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 648.946634][T16055] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 648.946651][T16055] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 648.946661][T16055] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.946670][T16055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 648.946684][T16055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.946693][T16055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.946714][T16055] [ 649.593164][T16074] syzkaller0: entered promiscuous mode [ 649.595183][T16074] syzkaller0: entered allmulticast mode [ 649.791138][ T1326] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 649.952677][ T1326] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.956066][ T1326] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 650.082359][T16079] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 650.084991][T16079] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 650.107885][T16084] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 650.110197][T16084] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 650.123452][T16082] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(12) [ 650.126148][T16082] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 650.138022][T16079] vhci_hcd vhci_hcd.0: Device attached [ 650.146123][T16084] vhci_hcd vhci_hcd.0: Device attached [ 650.149612][T16082] vhci_hcd vhci_hcd.0: Device attached [ 650.368147][T16091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 650.401820][T16079] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 650.404669][T16079] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 650.413922][T16079] vhci_hcd vhci_hcd.0: Device attached [ 650.425433][T16082] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 650.428278][T16082] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 650.436606][T16091] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(27) [ 650.438921][T16091] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 650.441657][T16084] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(22) [ 650.443776][T16084] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 650.455060][T16091] vhci_hcd vhci_hcd.0: Device attached [ 650.462226][T16084] vhci_hcd vhci_hcd.0: Device attached [ 650.465798][T16082] vhci_hcd vhci_hcd.0: Device attached [ 650.489226][T16100] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 650.531182][ T6028] usb 37-1: new low-speed USB device number 15 using vhci_hcd [ 650.756385][T16096] vhci_hcd: connection closed [ 650.756602][T13435] vhci_hcd vhci_hcd.0: stop threads [ 650.760074][T13435] vhci_hcd vhci_hcd.0: release socket [ 650.761864][T16095] vhci_hcd: connection closed [ 650.762340][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 650.766354][T13435] vhci_hcd vhci_hcd.0: stop threads [ 650.768280][T13435] vhci_hcd vhci_hcd.0: release socket [ 650.770205][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 650.780744][T16094] vhci_hcd: connection closed [ 650.781050][T13435] vhci_hcd vhci_hcd.0: stop threads [ 650.784469][T13435] vhci_hcd vhci_hcd.0: release socket [ 650.786231][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 650.788725][T16087] vhci_hcd: connection closed [ 650.788939][T13435] vhci_hcd vhci_hcd.0: stop threads [ 650.792592][T16086] vhci_hcd: connection closed [ 650.792687][T13435] vhci_hcd vhci_hcd.0: release socket [ 650.796286][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 650.798620][T13435] vhci_hcd vhci_hcd.0: stop threads [ 650.800443][T13435] vhci_hcd vhci_hcd.0: release socket [ 650.801217][T16092] vhci_hcd: connection closed [ 650.802620][T16085] vhci_hcd: connection reset by peer [ 650.802816][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 650.808399][T13435] vhci_hcd vhci_hcd.0: stop threads [ 650.810061][T13435] vhci_hcd vhci_hcd.0: release socket [ 650.811900][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 650.812431][ T1326] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 650.813760][T13435] vhci_hcd vhci_hcd.0: stop threads [ 650.817865][ T1326] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.819087][T13435] vhci_hcd vhci_hcd.0: release socket [ 650.819219][T13435] vhci_hcd vhci_hcd.0: disconnect device [ 650.827890][ T1326] usb 7-1: Product: syz [ 650.829722][ T1326] usb 7-1: Manufacturer: syz [ 650.831818][ T1326] usb 7-1: SerialNumber: syz [ 650.836272][ T1326] usb 7-1: config 0 descriptor?? [ 651.102859][T16114] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2873'. [ 651.541161][ T1326] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 651.571175][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 651.691091][ T1326] usb 6-1: Using ep0 maxpacket: 32 [ 651.694040][ T1326] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 651.700383][ T1326] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 651.703496][ T1326] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 651.706085][ T1326] usb 6-1: Product: syz [ 651.707477][ T1326] usb 6-1: Manufacturer: syz [ 651.709075][ T1326] usb 6-1: SerialNumber: syz [ 651.711878][ T1326] usb 6-1: config 0 descriptor?? [ 651.714034][T16120] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 651.718321][ T1326] hub 6-1:0.0: bad descriptor, ignoring hub [ 651.720738][ T1326] hub 6-1:0.0: probe with driver hub failed with error -5 [ 651.731135][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 651.734421][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 651.738097][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 651.742247][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 651.745554][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.748119][ T10] usb 5-1: Product: syz [ 651.749566][ T10] usb 5-1: Manufacturer: syz [ 651.751546][ T10] usb 5-1: SerialNumber: syz [ 651.756681][ T10] usb 5-1: config 0 descriptor?? [ 651.973375][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 651.976559][ T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input19 [ 651.985903][ T10] imon:send_packet: packet tx failed (-71) [ 652.017397][ T10] imon 5-1:0.0: panel buttons/knobs setup failed [ 652.037493][ T50] usb 6-1: USB disconnect, device number 57 [ 652.205771][ T10] rc_core: IR keymap rc-imon-pad not found [ 652.207668][ T10] Registered IR keymap rc-empty [ 652.209416][ T10] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 652.395007][ T40] usb 7-1: USB disconnect, device number 55 [ 653.025866][ T10] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 653.030547][ T10] imon:send_packet: packet tx failed (-71) [ 653.051447][ T10] imon 5-1:0.0: remote input dev register failed [ 653.054576][ T10] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 653.300292][ T10] imon 5-1:0.0: unable to initialize intf0, err 0 [ 653.302425][ T10] imon:imon_probe: failed to initialize context! [ 653.304531][ T10] imon 5-1:0.0: unable to register, err -19 [ 653.308038][ T10] usb 5-1: USB disconnect, device number 57 [ 653.432522][T16135] ubi16: attaching mtd0 [ 653.435834][T16135] ubi16: scanning is finished [ 653.437536][T16135] ubi16: empty MTD device detected [ 653.945967][T16150] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 653.948809][T16150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 653.953006][T16150] vhci_hcd vhci_hcd.0: Device attached [ 653.957816][T16150] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 653.960680][T16150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 653.963892][T16150] vhci_hcd vhci_hcd.0: Device attached [ 653.967518][T16150] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 653.970078][T16150] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 653.973610][T16150] vhci_hcd vhci_hcd.0: Device attached [ 653.978331][T16150] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 653.981087][T16150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 653.984652][T16150] vhci_hcd vhci_hcd.0: Device attached [ 653.987859][T16150] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 653.989994][T16150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 653.993112][T16150] vhci_hcd vhci_hcd.0: Device attached [ 653.996149][T16150] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 653.998517][T16150] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 654.001481][T16150] vhci_hcd vhci_hcd.0: Device attached [ 654.003676][T16135] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 654.004114][T16150] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 654.006196][T16135] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 654.012617][T16135] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 654.014922][T16135] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 654.017481][T16135] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 654.018314][T16150] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(24) [ 654.019925][T16135] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 654.022123][T16150] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 654.023458][T16150] vhci_hcd vhci_hcd.0: Device attached [ 654.025406][T16135] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 194658254 [ 654.032830][T16135] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 654.037806][T16163] ubi16: background thread "ubi_bgt16d" started, PID 16163 [ 654.048931][T16150] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 654.103102][T16161] vhci_hcd: connection closed [ 654.103292][T16157] vhci_hcd: connection closed [ 654.105413][T16155] vhci_hcd: connection closed [ 654.107546][T16153] vhci_hcd: connection closed [ 654.109928][ T214] vhci_hcd vhci_hcd.0: stop threads [ 654.110048][T16166] vhci_hcd: connection closed [ 654.113611][ T214] vhci_hcd vhci_hcd.0: release socket [ 654.113721][T16159] vhci_hcd: connection closed [ 654.115859][ T214] vhci_hcd vhci_hcd.0: disconnect device [ 654.117153][T16151] vhci_hcd: connection closed [ 654.122930][ T214] vhci_hcd vhci_hcd.0: stop threads [ 654.126172][ T214] vhci_hcd vhci_hcd.0: release socket [ 654.128494][ T214] vhci_hcd vhci_hcd.0: disconnect device [ 654.130877][ T214] vhci_hcd vhci_hcd.0: stop threads [ 654.141691][ T214] vhci_hcd vhci_hcd.0: release socket [ 654.143545][ T214] vhci_hcd vhci_hcd.0: disconnect device [ 654.145467][ T214] vhci_hcd vhci_hcd.0: stop threads [ 654.147099][ T214] vhci_hcd vhci_hcd.0: release socket [ 654.162514][ T214] vhci_hcd vhci_hcd.0: disconnect device [ 654.165488][ T214] vhci_hcd vhci_hcd.0: stop threads [ 654.167147][ T214] vhci_hcd vhci_hcd.0: release socket [ 654.170930][ T214] vhci_hcd vhci_hcd.0: disconnect device [ 654.175163][ T214] vhci_hcd vhci_hcd.0: stop threads [ 654.176852][ T214] vhci_hcd vhci_hcd.0: release socket [ 654.180685][ T214] vhci_hcd vhci_hcd.0: disconnect device [ 654.192384][ T214] vhci_hcd vhci_hcd.0: stop threads [ 654.195048][ T214] vhci_hcd vhci_hcd.0: release socket [ 654.197781][ T214] vhci_hcd vhci_hcd.0: disconnect device [ 654.201028][T16175] random: crng reseeded on system resumption [ 654.207117][T16175] FAULT_INJECTION: forcing a failure. [ 654.207117][T16175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.211484][T16175] CPU: 1 UID: 0 PID: 16175 Comm: syz.3.2890 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.211502][T16175] Tainted: [L]=SOFTLOCKUP [ 654.211506][T16175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 654.211513][T16175] Call Trace: [ 654.211517][T16175] [ 654.211522][T16175] dump_stack_lvl+0x100/0x190 [ 654.211542][T16175] should_fail_ex.cold+0x5/0xa [ 654.211556][T16175] _copy_from_user+0x2e/0xd0 [ 654.211571][T16175] memdup_user+0x6b/0xe0 [ 654.211582][T16175] strndup_user+0x78/0xe0 [ 654.211593][T16175] __ia32_sys_mount+0x17f/0x310 [ 654.211609][T16175] ? __pfx___ia32_sys_mount+0x10/0x10 [ 654.211622][T16175] ? __pfx_ksys_write+0x10/0x10 [ 654.211636][T16175] __do_fast_syscall_32+0xe3/0x8c0 [ 654.211650][T16175] do_fast_syscall_32+0x32/0x70 [ 654.211662][T16175] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 654.211676][T16175] RIP: 0023:0xf7f52f6c [ 654.211686][T16175] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 654.211697][T16175] RSP: 002b:00000000f53d450c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 654.211708][T16175] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000000 [ 654.211715][T16175] RDX: 0000000080000200 RSI: 000000000021000d RDI: 0000000000000000 [ 654.211721][T16175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 654.211728][T16175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.211734][T16175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 654.211747][T16175] [ 655.461379][T16191] random: crng reseeded on system resumption [ 655.685410][ T63] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 655.718831][ T6028] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 656.041132][ T829] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 656.065955][T16202] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 656.068929][T16202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 656.081307][T16202] vhci_hcd vhci_hcd.0: Device attached [ 656.101921][T16202] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 656.104880][T16202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 656.108366][T16202] vhci_hcd vhci_hcd.0: Device attached [ 656.113402][T16202] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 656.116205][T16202] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 656.119658][T16202] vhci_hcd vhci_hcd.0: Device attached [ 656.124611][T16202] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 656.127411][T16202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 656.130863][T16202] vhci_hcd vhci_hcd.0: Device attached [ 656.135398][T16202] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 656.138218][T16202] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 656.141834][T16202] vhci_hcd vhci_hcd.0: Device attached [ 656.146130][T16202] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 656.148272][T16202] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 656.150835][T16202] vhci_hcd vhci_hcd.0: Device attached [ 656.153612][T16202] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 656.157923][T16202] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(24) [ 656.160729][T16202] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 656.164464][T16202] vhci_hcd vhci_hcd.0: Device attached [ 656.167913][T16202] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 656.191138][ T829] usb 8-1: Using ep0 maxpacket: 16 [ 656.199319][ T829] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 656.203986][ T829] usb 8-1: config 0 interface 0 has no altsetting 0 [ 656.208982][ T829] usb 8-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 656.212923][ T829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.216253][ T829] usb 8-1: Product: syz [ 656.218359][ T829] usb 8-1: Manufacturer: syz [ 656.220355][ T829] usb 8-1: SerialNumber: syz [ 656.230354][ T829] usb 8-1: config 0 descriptor?? [ 656.274461][T16215] vhci_hcd: connection closed [ 656.275003][ T13] vhci_hcd vhci_hcd.0: stop threads [ 656.282106][T16213] vhci_hcd: connection closed [ 656.282840][T16211] vhci_hcd: connection closed [ 656.285437][T16207] vhci_hcd: connection closed [ 656.286583][ T13] vhci_hcd vhci_hcd.0: release socket [ 656.291167][T16205] vhci_hcd: connection closed [ 656.292416][T16203] vhci_hcd: connection closed [ 656.301641][T16209] vhci_hcd: connection closed [ 656.305803][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 656.309464][ T13] vhci_hcd vhci_hcd.0: stop threads [ 656.311513][ T13] vhci_hcd vhci_hcd.0: release socket [ 656.313725][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 656.316156][ T13] vhci_hcd vhci_hcd.0: stop threads [ 656.319656][ T13] vhci_hcd vhci_hcd.0: release socket [ 656.326350][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 656.328612][ T13] vhci_hcd vhci_hcd.0: stop threads [ 656.330425][ T13] vhci_hcd vhci_hcd.0: release socket [ 656.338681][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 656.341118][ T13] vhci_hcd vhci_hcd.0: stop threads [ 656.343154][ T13] vhci_hcd vhci_hcd.0: release socket [ 656.345378][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 656.347496][ T13] vhci_hcd vhci_hcd.0: stop threads [ 656.349291][ T13] vhci_hcd vhci_hcd.0: release socket [ 656.352550][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 656.355173][ T13] vhci_hcd vhci_hcd.0: stop threads [ 656.357552][ T13] vhci_hcd vhci_hcd.0: release socket [ 656.359949][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 656.431176][ T6028] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 656.446425][ C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 656.451889][ T829] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input21 [ 656.503597][ T829] imon:send_packet: packet tx failed (-71) [ 656.551209][ T829] imon 8-1:0.0: panel buttons/knobs setup failed [ 656.611225][ T829] rc_core: IR keymap rc-imon-pad not found [ 656.614147][ T829] Registered IR keymap rc-empty [ 656.616320][ T829] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 656.620628][ T829] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 656.624958][ T829] imon:send_packet: packet tx failed (-71) [ 656.641164][ T829] imon 8-1:0.0: remote input dev register failed [ 656.645316][ T829] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 656.731900][ T829] imon 8-1:0.0: unable to initialize intf0, err 0 [ 656.741145][ T829] imon:imon_probe: failed to initialize context! [ 656.743579][ T829] imon 8-1:0.0: unable to register, err -19 [ 656.758911][ T829] usb 8-1: USB disconnect, device number 47 [ 657.498090][ T41] audit: type=1326 audit(1774674148.604:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16236 comm="syz.3.2908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 657.506803][ T41] audit: type=1326 audit(1774674148.614:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16236 comm="syz.3.2908" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 657.517412][ T41] audit: type=1326 audit(1774674148.614:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16236 comm="syz.3.2908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 657.527166][ T41] audit: type=1326 audit(1774674148.614:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16236 comm="syz.3.2908" exe="/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 657.580390][ T41] audit: type=1326 audit(1774674148.614:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16236 comm="syz.3.2908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 657.594618][ T41] audit: type=1326 audit(1774674148.624:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16236 comm="syz.3.2908" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 657.603316][ T41] audit: type=1326 audit(1774674148.624:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16236 comm="syz.3.2908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 657.612437][ T41] audit: type=1326 audit(1774674148.624:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16236 comm="syz.3.2908" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 657.621105][ T41] audit: type=1326 audit(1774674148.624:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16236 comm="syz.3.2908" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 657.628974][ T41] audit: type=1326 audit(1774674148.624:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16236 comm="syz.3.2908" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 657.657078][ T842] usb usb38-port1: attempt power cycle [ 658.021142][ T6005] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 658.072035][T16259] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 658.074168][T16259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.076607][T16259] vhci_hcd vhci_hcd.0: Device attached [ 658.100928][T16259] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 658.103283][T16259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.107449][T16259] vhci_hcd vhci_hcd.0: Device attached [ 658.120641][T16259] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 658.122919][T16259] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 658.127279][T16259] vhci_hcd vhci_hcd.0: Device attached [ 658.138729][T16259] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 658.140910][T16259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.145369][T16259] vhci_hcd vhci_hcd.0: Device attached [ 658.153927][T16259] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 658.156043][T16259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.160485][T16259] vhci_hcd vhci_hcd.0: Device attached [ 658.181122][ T6005] usb 6-1: Using ep0 maxpacket: 16 [ 658.196105][T16259] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 658.198941][T16259] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 658.203841][ T6005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.207926][ T6005] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 658.211151][T16259] vhci_hcd vhci_hcd.0: Device attached [ 658.214901][ T6005] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 658.220463][ T6005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.231516][ T6005] usb 6-1: config 0 descriptor?? [ 658.236656][ T6005] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 658.290866][T16259] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(22) [ 658.293767][T16259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.297485][T16259] vhci_hcd vhci_hcd.0: Device attached [ 658.301209][ T842] usb 38-1: SetAddress Request (21) to port 0 [ 658.303224][T16259] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(24) [ 658.306077][T16259] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 658.309465][T16259] vhci_hcd vhci_hcd.0: Device attached [ 658.313143][T16259] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 658.321688][ T842] usb 38-1: new SuperSpeed USB device number 21 using vhci_hcd [ 658.340646][T16276] vhci_hcd: connection closed [ 658.340757][T16274] vhci_hcd: connection closed [ 658.341018][T16270] vhci_hcd: connection closed [ 658.343116][T16271] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 658.345823][T16268] vhci_hcd: connection closed [ 658.346993][T16260] vhci_hcd: connection closed [ 658.348968][T16264] vhci_hcd: connection closed [ 658.351263][ T153] vhci_hcd vhci_hcd.0: stop threads [ 658.351383][T16266] vhci_hcd: connection closed [ 658.352409][T16262] vhci_hcd: connection closed [ 658.354436][ T153] vhci_hcd vhci_hcd.0: release socket [ 658.363585][ T153] vhci_hcd vhci_hcd.0: disconnect device [ 658.365945][ T153] vhci_hcd vhci_hcd.0: stop threads [ 658.368042][ T153] vhci_hcd vhci_hcd.0: release socket [ 658.370347][ T153] vhci_hcd vhci_hcd.0: disconnect device [ 658.373633][ T153] vhci_hcd vhci_hcd.0: stop threads [ 658.375824][ T153] vhci_hcd vhci_hcd.0: release socket [ 658.378079][ T153] vhci_hcd vhci_hcd.0: disconnect device [ 658.380611][ T153] vhci_hcd vhci_hcd.0: stop threads [ 658.382964][ T153] vhci_hcd vhci_hcd.0: release socket [ 658.385374][ T153] vhci_hcd vhci_hcd.0: disconnect device [ 658.388688][ T153] vhci_hcd vhci_hcd.0: stop threads [ 658.390921][ T153] vhci_hcd vhci_hcd.0: release socket [ 658.394144][ T153] vhci_hcd vhci_hcd.0: disconnect device [ 658.397202][ T153] vhci_hcd vhci_hcd.0: stop threads [ 658.399330][ T153] vhci_hcd vhci_hcd.0: release socket [ 658.401677][ T153] vhci_hcd vhci_hcd.0: disconnect device [ 658.404271][ T153] vhci_hcd vhci_hcd.0: stop threads [ 658.406395][ T153] vhci_hcd vhci_hcd.0: release socket [ 658.408763][ T153] vhci_hcd vhci_hcd.0: disconnect device [ 658.412600][ T153] vhci_hcd vhci_hcd.0: stop threads [ 658.414753][ T153] vhci_hcd vhci_hcd.0: release socket [ 658.417043][ T153] vhci_hcd vhci_hcd.0: disconnect device [ 659.692928][ T63] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 659.699422][ T63] Bluetooth: hci0: Injecting HCI hardware error event [ 659.703953][T14975] Bluetooth: hci0: hardware error 0x00 [ 660.139762][T16319] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 660.142823][T16319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 660.146210][T16319] vhci_hcd vhci_hcd.0: Device attached [ 660.154468][T16319] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 660.157885][T16319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 660.162539][T16319] vhci_hcd vhci_hcd.0: Device attached [ 660.169729][T16319] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 660.173454][T16319] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 660.177229][T16319] vhci_hcd vhci_hcd.0: Device attached [ 660.185320][T16319] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 660.188165][T16319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 660.191555][T16319] vhci_hcd vhci_hcd.0: Device attached [ 660.199492][T16319] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 660.202158][T16319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 660.205525][T16319] vhci_hcd vhci_hcd.0: Device attached [ 660.221221][T16319] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 660.223627][T16319] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 660.231253][T16319] vhci_hcd vhci_hcd.0: Device attached [ 660.241159][T16319] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(22) [ 660.243325][T16319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 660.245825][T16319] vhci_hcd vhci_hcd.0: Device attached [ 660.271154][T16319] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(24) [ 660.273507][T16319] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 660.277069][T16319] vhci_hcd vhci_hcd.0: Device attached [ 660.279941][T16319] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 660.302379][T16335] vhci_hcd: connection closed [ 660.302668][T16333] vhci_hcd: connection closed [ 660.303368][ T12] vhci_hcd vhci_hcd.2: stop threads [ 660.304332][T16322] vhci_hcd: connection closed [ 660.305857][ T12] vhci_hcd vhci_hcd.2: release socket [ 660.307823][T16324] vhci_hcd: connection closed [ 660.309257][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 660.315019][ T12] vhci_hcd vhci_hcd.2: stop threads [ 660.315085][T16320] vhci_hcd: connection closed [ 660.316922][ T12] vhci_hcd vhci_hcd.2: release socket [ 660.317116][T16331] vhci_hcd: connection closed [ 660.321369][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 660.322116][T16327] vhci_hcd: connection closed [ 660.326024][T16329] vhci_hcd: connection closed [ 660.328685][ T12] vhci_hcd vhci_hcd.2: stop threads [ 660.332157][ T12] vhci_hcd vhci_hcd.2: release socket [ 660.337308][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 660.361171][ T12] vhci_hcd vhci_hcd.2: stop threads [ 660.362907][ T12] vhci_hcd vhci_hcd.2: release socket [ 660.364650][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 660.371070][ T12] vhci_hcd vhci_hcd.2: stop threads [ 660.373139][ T12] vhci_hcd vhci_hcd.2: release socket [ 660.375147][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 660.381005][ T12] vhci_hcd vhci_hcd.2: stop threads [ 660.382747][ T12] vhci_hcd vhci_hcd.2: release socket [ 660.384788][ T6004] usb 41-1: new low-speed USB device number 12 using vhci_hcd [ 660.387011][ T6004] usb 41-1: enqueue for inactive port 0 [ 660.391189][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 660.401087][ T12] vhci_hcd vhci_hcd.2: stop threads [ 660.403353][ T12] vhci_hcd vhci_hcd.2: release socket [ 660.405805][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 660.412738][ T12] vhci_hcd vhci_hcd.2: stop threads [ 660.415292][ T12] vhci_hcd vhci_hcd.2: release socket [ 660.420011][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 660.461134][ T6004] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 660.502907][T16326] macvlan2: left promiscuous mode [ 660.504795][T16326] macvlan2: left allmulticast mode [ 660.508577][T16326] hsr1: left promiscuous mode [ 660.510410][T16326] hsr1: left allmulticast mode [ 660.513116][T16326] macvlan0: left allmulticast mode [ 660.515067][T16326] dummy0: left allmulticast mode [ 660.687428][ T6005] usb 6-1: USB disconnect, device number 58 [ 661.631106][ T829] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 661.742094][ T10] usb usb42-port1: attempt power cycle [ 661.771235][T14975] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 661.781198][ T829] usb 6-1: Using ep0 maxpacket: 16 [ 661.785150][ T829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.789112][ T829] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 661.794564][ T829] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 661.798402][ T829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.803502][ T829] usb 6-1: config 0 descriptor?? [ 661.813032][ T829] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 662.321530][ T10] usb usb42-port1: unable to enumerate USB device [ 663.371203][ T842] usb 38-1: device descriptor read/8, error -110 [ 663.491273][ T842] usb usb38-port1: unable to enumerate USB device [ 663.561091][ T6028] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 663.729609][T16404] bridge0: port 3(erspan0) entered blocking state [ 663.742386][T16404] bridge0: port 3(erspan0) entered disabled state [ 663.752229][T16404] erspan0: entered allmulticast mode [ 663.780037][T16404] erspan0: entered promiscuous mode [ 664.042241][T16405] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2951'. [ 664.045153][T16405] IPv6: NLM_F_CREATE should be specified when creating new route [ 664.099987][T16409] FAULT_INJECTION: forcing a failure. [ 664.099987][T16409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.106330][T16409] CPU: 2 UID: 0 PID: 16409 Comm: syz.0.2953 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.106358][T16409] Tainted: [L]=SOFTLOCKUP [ 664.106364][T16409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 664.106374][T16409] Call Trace: [ 664.106380][T16409] [ 664.106387][T16409] dump_stack_lvl+0x100/0x190 [ 664.106417][T16409] should_fail_ex.cold+0x5/0xa [ 664.106438][T16409] _copy_from_user+0x2e/0xd0 [ 664.106461][T16409] kvm_arch_vcpu_ioctl+0x2e31/0x5740 [ 664.106479][T16409] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 664.106499][T16409] ? is_bpf_text_address+0x94/0x1a0 [ 664.106646][T16409] ? kernel_text_address+0x8d/0x100 [ 664.106669][T16409] ? __pfx_widen_string+0x10/0x10 [ 664.106692][T16409] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 664.106710][T16409] ? arch_stack_walk+0xa6/0xf0 [ 664.106739][T16409] ? __lock_acquire+0x4a5/0x2630 [ 664.106762][T16409] ? stack_depot_save_flags+0x27/0x9d0 [ 664.106783][T16409] ? __lock_acquire+0x4a5/0x2630 [ 664.106809][T16409] ? lock_acquire+0x1cf/0x380 [ 664.106839][T16409] ? __mutex_lock+0x26a/0x1b90 [ 664.106857][T16409] ? kvm_vcpu_ioctl+0x322/0x1730 [ 664.106884][T16409] ? __pfx___mutex_lock+0x10/0x10 [ 664.106910][T16409] ? tomoyo_path_number_perm+0x46d/0x580 [ 664.106937][T16409] ? kasan_quarantine_put+0x104/0x240 [ 664.106971][T16409] ? kvm_vcpu_ioctl+0x8a0/0x1730 [ 664.106990][T16409] kvm_vcpu_ioctl+0x8a0/0x1730 [ 664.107014][T16409] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 664.107036][T16409] ? tomoyo_path_number_perm+0x188/0x580 [ 664.107057][T16409] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 664.107087][T16409] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 664.107106][T16409] ? do_vfs_ioctl+0x226/0x13e0 [ 664.107131][T16409] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 664.107166][T16409] kvm_vcpu_compat_ioctl+0x20f/0x3c0 [ 664.107190][T16409] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 664.107213][T16409] ? __fget_files+0x21f/0x3d0 [ 664.107235][T16409] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 664.107258][T16409] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 664.107286][T16409] __do_fast_syscall_32+0xe3/0x8c0 [ 664.107306][T16409] do_fast_syscall_32+0x32/0x70 [ 664.107323][T16409] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.107345][T16409] RIP: 0023:0xf706ef6c [ 664.107359][T16409] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 664.107375][T16409] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 664.107391][T16409] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c048aeca [ 664.107402][T16409] RDX: 0000000080000580 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.107414][T16409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 664.107423][T16409] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 664.107433][T16409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.107457][T16409] [ 664.292287][ T1326] usb 6-1: USB disconnect, device number 59 [ 664.299233][T16409] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2953'. [ 664.314888][T16409] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2953'. [ 664.319198][T16409] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2953'. [ 664.323643][T16409] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2953'. [ 664.350352][T16409] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2953'. [ 664.354677][T16409] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2953'. [ 664.358434][T16409] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2953'. [ 664.369760][T16409] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2953'. [ 664.373514][T16409] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2953'. [ 665.457686][T16428] delete_channel: no stack [ 665.921335][ T842] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 666.088827][ T842] usb 6-1: Using ep0 maxpacket: 16 [ 666.101400][ T842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.104742][ T842] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 666.109310][ T842] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 666.118491][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.129931][ T842] usb 6-1: config 0 descriptor?? [ 666.137610][ T842] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 666.163886][T16452] overlayfs: overlapping lowerdir path [ 666.238203][T16455] FAULT_INJECTION: forcing a failure. [ 666.238203][T16455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.242590][T16455] CPU: 3 UID: 0 PID: 16455 Comm: syz.2.2967 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.242609][T16455] Tainted: [L]=SOFTLOCKUP [ 666.242614][T16455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 666.242620][T16455] Call Trace: [ 666.242625][T16455] [ 666.242630][T16455] dump_stack_lvl+0x100/0x190 [ 666.242657][T16455] should_fail_ex.cold+0x5/0xa [ 666.242677][T16455] strncpy_from_user+0x3b/0x2d0 [ 666.242698][T16455] do_getname+0x78/0x390 [ 666.242723][T16455] do_sys_openat2+0xc5/0x1e0 [ 666.242747][T16455] ? __pfx_do_sys_openat2+0x10/0x10 [ 666.242771][T16455] ? __fget_files+0x21f/0x3d0 [ 666.242791][T16455] __ia32_sys_creat+0xcb/0x120 [ 666.242815][T16455] ? __pfx___ia32_sys_creat+0x10/0x10 [ 666.242835][T16455] ? ksys_write+0x1ac/0x250 [ 666.242852][T16455] ? __do_fast_syscall_32+0x94/0x8c0 [ 666.242865][T16455] __do_fast_syscall_32+0xe3/0x8c0 [ 666.242878][T16455] do_fast_syscall_32+0x32/0x70 [ 666.242889][T16455] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 666.242905][T16455] RIP: 0023:0xf7f85f6c [ 666.242915][T16455] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 666.242925][T16455] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000008 [ 666.242936][T16455] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000003f00 [ 666.242943][T16455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 666.242950][T16455] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.242956][T16455] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 666.242962][T16455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.242975][T16455] [ 668.516550][T16475] ubi: mtd0 is already attached to ubi16 [ 668.549354][ T7498] usb 6-1: USB disconnect, device number 60 [ 668.991484][ T7498] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 669.585007][T16498] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 669.588682][T16498] overlayfs: failed to set xattr on upper [ 669.590786][T16498] overlayfs: ...falling back to redirect_dir=nofollow. [ 669.593303][T16498] overlayfs: ...falling back to index=off. [ 669.595785][T16498] overlayfs: ...falling back to uuid=null. [ 669.660443][T16503] __nla_validate_parse: 145 callbacks suppressed [ 669.660459][T16503] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2982'. [ 669.668588][ T829] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 669.725194][T16505] ubi: mtd0 is already attached to ubi16 [ 669.859939][ T829] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 669.863396][ T829] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.869254][ T829] usb 7-1: config 0 has no interface number 0 [ 669.886664][ T829] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 669.892212][ T829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.895890][ T829] usb 7-1: Product: syz [ 669.897707][ T829] usb 7-1: Manufacturer: syz [ 669.899274][ T829] usb 7-1: SerialNumber: syz [ 669.963526][ T829] usb 7-1: config 0 descriptor?? [ 670.013057][ T829] uvcvideo 7-1:0.64: probe with driver uvcvideo failed with error -22 [ 670.296743][T16509] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2979'. [ 671.943444][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2991'. [ 672.117681][T16542] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 672.120757][T16542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 672.124727][T16542] vhci_hcd vhci_hcd.0: Device attached [ 672.130433][T16542] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 672.133329][T16542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 672.144330][T16542] vhci_hcd vhci_hcd.0: Device attached [ 672.148608][T16542] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 672.151395][T16542] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 672.155647][T16542] vhci_hcd vhci_hcd.0: Device attached [ 672.160581][T16542] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 672.163424][T16542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 672.166943][T16542] vhci_hcd vhci_hcd.0: Device attached [ 672.172115][T16542] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18) [ 672.174832][T16542] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 672.178353][T16542] vhci_hcd vhci_hcd.0: Device attached [ 672.181926][T16542] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 672.187335][T16542] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(22) [ 672.190105][T16542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 672.193819][T16542] vhci_hcd vhci_hcd.0: Device attached [ 672.199093][T16542] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(24) [ 672.201848][T16542] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 672.204368][T16542] vhci_hcd vhci_hcd.0: Device attached [ 672.206808][T16542] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 672.237032][T16558] vhci_hcd: connection closed [ 672.237256][T16555] vhci_hcd: connection closed [ 672.237294][T16551] vhci_hcd: connection closed [ 672.237456][T16544] vhci_hcd: connection closed [ 672.238362][T16547] vhci_hcd: connection closed [ 672.239430][T16549] vhci_hcd: connection closed [ 672.241660][ T12] vhci_hcd vhci_hcd.3: stop threads [ 672.241693][T16553] vhci_hcd: connection closed [ 672.253822][ T12] vhci_hcd vhci_hcd.3: release socket [ 672.257209][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 672.264101][ T12] vhci_hcd vhci_hcd.3: stop threads [ 672.266373][ T12] vhci_hcd vhci_hcd.3: release socket [ 672.270630][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 672.273975][ T12] vhci_hcd vhci_hcd.3: stop threads [ 672.277601][ T12] vhci_hcd vhci_hcd.3: release socket [ 672.280052][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 672.282954][ T12] vhci_hcd vhci_hcd.3: stop threads [ 672.285143][ T12] vhci_hcd vhci_hcd.3: release socket [ 672.287214][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 672.290884][ T12] vhci_hcd vhci_hcd.3: stop threads [ 672.293896][ T12] vhci_hcd vhci_hcd.3: release socket [ 672.296425][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 672.301204][ T6005] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 672.304157][ T12] vhci_hcd vhci_hcd.3: stop threads [ 672.306793][ T12] vhci_hcd vhci_hcd.3: release socket [ 672.309494][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 672.313424][ T12] vhci_hcd vhci_hcd.3: stop threads [ 672.315267][ T12] vhci_hcd vhci_hcd.3: release socket [ 672.317285][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 672.424458][ T6028] usb 7-1: USB disconnect, device number 56 [ 673.053694][T16584] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 673.056047][T16584] overlayfs: failed to set xattr on upper [ 673.057867][T16584] overlayfs: ...falling back to redirect_dir=nofollow. [ 673.060233][T16584] overlayfs: ...falling back to index=off. [ 673.063445][T16584] overlayfs: ...falling back to uuid=null. [ 673.331099][ T40] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 673.381188][ T7498] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 673.482577][ T40] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 673.485243][ T40] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.488546][ T40] usb 8-1: config 0 has no interface number 0 [ 673.492204][ T40] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 673.495167][ T40] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.497846][ T40] usb 8-1: Product: syz [ 673.499284][ T40] usb 8-1: Manufacturer: syz [ 673.501284][ T40] usb 8-1: SerialNumber: syz [ 673.504319][ T40] usb 8-1: config 0 descriptor?? [ 673.508715][ T40] uvcvideo 8-1:0.64: probe with driver uvcvideo failed with error -22 [ 673.541114][ T7498] usb 6-1: Using ep0 maxpacket: 16 [ 673.544458][ T7498] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.548089][ T7498] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 673.552432][ T7498] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 673.555936][ T7498] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.560643][ T7498] usb 6-1: config 0 descriptor?? [ 673.564896][ T7498] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 673.683465][T16596] ubi: mtd0 is already attached to ubi16 [ 673.760756][T16599] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3007'. [ 674.225449][T16603] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3010'. [ 674.938541][T16620] Bluetooth: MGMT ver 1.23 [ 675.989578][ T6005] usb 6-1: USB disconnect, device number 62 [ 676.131418][T16630] all (unregistering): Released all slaves [ 676.136931][ T40] usb 8-1: USB disconnect, device number 48 [ 677.481169][ T6028] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 677.658179][ T6028] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 677.661284][ T6028] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.664696][ T6028] usb 8-1: config 0 has no interface number 0 [ 677.687044][ T6028] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 677.690361][ T6028] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.696580][ T6028] usb 8-1: Product: syz [ 677.698074][ T6028] usb 8-1: Manufacturer: syz [ 677.707463][ T6028] usb 8-1: SerialNumber: syz [ 677.743050][ T6028] usb 8-1: config 0 descriptor?? [ 677.803000][ T6028] uvcvideo 8-1:0.64: probe with driver uvcvideo failed with error -22 [ 678.075168][T16663] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3027'. [ 678.145442][T16661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 678.146872][T16661] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3028'. [ 678.484494][T16667] FAULT_INJECTION: forcing a failure. [ 678.484494][T16667] name failslab, interval 1, probability 0, space 0, times 0 [ 678.491700][T16667] CPU: 1 UID: 0 PID: 16667 Comm: syz.0.3031 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.491720][T16667] Tainted: [L]=SOFTLOCKUP [ 678.491724][T16667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 678.491731][T16667] Call Trace: [ 678.491735][T16667] [ 678.491740][T16667] dump_stack_lvl+0x100/0x190 [ 678.491762][T16667] should_fail_ex.cold+0x5/0xa [ 678.491776][T16667] should_failslab+0xc2/0x120 [ 678.491789][T16667] __kvmalloc_node_noprof+0xfa/0xa00 [ 678.491806][T16667] ? simple_xattr_alloc+0x4a/0xa0 [ 678.491824][T16667] simple_xattr_alloc+0x4a/0xa0 [ 678.491840][T16667] simple_xattr_set+0x3d/0x3e0 [ 678.491856][T16667] shmem_xattr_handler_set+0x318/0x3b0 [ 678.491872][T16667] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 678.491884][T16667] __vfs_setxattr+0x175/0x1e0 [ 678.491897][T16667] ? __pfx___vfs_setxattr+0x10/0x10 [ 678.491908][T16667] ? apparmor_capable+0x1d7/0x4d0 [ 678.491923][T16667] __vfs_setxattr_noperm+0x127/0x660 [ 678.491938][T16667] __vfs_setxattr_locked+0x127/0x2b0 [ 678.491950][T16667] ? up_write+0x290/0x4f0 [ 678.491967][T16667] vfs_setxattr+0x14a/0x390 [ 678.491980][T16667] ? __pfx_vfs_setxattr+0x10/0x10 [ 678.491994][T16667] ? find_held_lock+0x2b/0x80 [ 678.492004][T16667] ? mnt_get_write_access+0x52/0x2f0 [ 678.492021][T16667] ovl_check_setxattr+0x18e/0x370 [ 678.492072][T16667] ovl_set_impure+0x140/0x1e0 [ 678.492086][T16667] ovl_lookup_layers+0x2436/0x2ac0 [ 678.492108][T16667] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 678.492129][T16667] ? find_held_lock+0x2b/0x80 [ 678.492139][T16667] ? d_alloc_parallel+0xb4e/0x14e0 [ 678.492158][T16667] ovl_lookup+0x4a8/0x6b0 [ 678.492172][T16667] ? d_alloc_parallel+0x864/0x14e0 [ 678.492189][T16667] ? __pfx_ovl_lookup+0x10/0x10 [ 678.492211][T16667] ? lockdep_init_map_type+0x5c/0x250 [ 678.492231][T16667] __lookup_slow+0x251/0x460 [ 678.492247][T16667] ? __pfx___lookup_slow+0x10/0x10 [ 678.492274][T16667] lookup_slow+0x50/0x70 [ 678.492289][T16667] path_lookupat+0x5e8/0xc40 [ 678.492308][T16667] filename_lookup+0x202/0x590 [ 678.492321][T16667] ? __pfx_filename_lookup+0x10/0x10 [ 678.492342][T16667] ? strncpy_from_user+0x19d/0x2d0 [ 678.492357][T16667] ? do_getname+0x191/0x390 [ 678.492373][T16667] __ia32_sys_name_to_handle_at+0x1cc/0x2d0 [ 678.492389][T16667] ? __pfx___ia32_sys_name_to_handle_at+0x10/0x10 [ 678.492407][T16667] __do_fast_syscall_32+0xe3/0x8c0 [ 678.492421][T16667] do_fast_syscall_32+0x32/0x70 [ 678.492433][T16667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 678.492447][T16667] RIP: 0023:0xf706ef6c [ 678.492457][T16667] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 678.492472][T16667] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000155 [ 678.492483][T16667] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 678.492490][T16667] RDX: 0000000080000180 RSI: 0000000080000280 RDI: 0000000000000200 [ 678.492496][T16667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 678.492502][T16667] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 678.492509][T16667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 678.492523][T16667] [ 679.061231][T16675] batman_adv: batadv0: Adding interface: gretap1 [ 679.063336][T16675] batman_adv: batadv0: Interface activated: gretap1 [ 679.111312][T14975] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 679.786543][T16677] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3034'. [ 680.100825][ T6028] usb 8-1: USB disconnect, device number 49 [ 680.852137][T16697] tipc: Enabling of bearer rejected, failed to enable media [ 681.188004][T16706] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3043'. [ 681.442010][T13193] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 682.408655][T16723] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 682.410953][T16723] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 682.414153][T16723] vhci_hcd vhci_hcd.0: Device attached [ 682.419488][T16723] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 682.421937][T16723] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 682.424961][T16723] vhci_hcd vhci_hcd.0: Device attached [ 682.428586][T16723] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 682.430958][T16723] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 682.434092][T16723] vhci_hcd vhci_hcd.0: Device attached [ 682.437230][T16723] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 682.439259][T16723] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 682.441882][T16723] vhci_hcd vhci_hcd.0: Device attached [ 682.445528][T16723] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 682.447635][T16723] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 682.450013][T16723] vhci_hcd vhci_hcd.0: Device attached [ 682.454775][T16723] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(19) [ 682.457293][T16723] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 682.459785][T16723] vhci_hcd vhci_hcd.0: Device attached [ 682.464298][T16723] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 682.468924][T16723] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(23) [ 682.471038][T16723] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 682.473515][T16723] vhci_hcd vhci_hcd.0: Device attached [ 682.476800][T16723] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(25) [ 682.478860][T16723] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 682.481406][T16723] vhci_hcd vhci_hcd.0: Device attached [ 682.484267][T16723] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 682.511044][T16738] vhci_hcd: connection closed [ 682.511242][T16736] vhci_hcd: connection closed [ 682.511261][ T153] vhci_hcd vhci_hcd.3: stop threads [ 682.511934][T16728] vhci_hcd: connection closed [ 682.512071][T16726] vhci_hcd: connection closed [ 682.513003][T16730] vhci_hcd: connection closed [ 682.514459][T16724] vhci_hcd: connection closed [ 682.516205][T16734] vhci_hcd: connection closed [ 682.517897][ T153] vhci_hcd vhci_hcd.3: release socket [ 682.519440][T16732] vhci_hcd: connection closed [ 682.521063][ T153] vhci_hcd vhci_hcd.3: disconnect device [ 682.529574][ T153] vhci_hcd vhci_hcd.3: stop threads [ 682.531950][ T153] vhci_hcd vhci_hcd.3: release socket [ 682.534018][ T153] vhci_hcd vhci_hcd.3: disconnect device [ 682.536357][ T153] vhci_hcd vhci_hcd.3: stop threads [ 682.538177][ T153] vhci_hcd vhci_hcd.3: release socket [ 682.540045][ T153] vhci_hcd vhci_hcd.3: disconnect device [ 682.542453][ T153] vhci_hcd vhci_hcd.3: stop threads [ 682.544327][ T153] vhci_hcd vhci_hcd.3: release socket [ 682.546322][ T153] vhci_hcd vhci_hcd.3: disconnect device [ 682.548386][ T153] vhci_hcd vhci_hcd.3: stop threads [ 682.550138][ T153] vhci_hcd vhci_hcd.3: release socket [ 682.553024][ T153] vhci_hcd vhci_hcd.3: disconnect device [ 682.555162][ T153] vhci_hcd vhci_hcd.3: stop threads [ 682.556972][ T153] vhci_hcd vhci_hcd.3: release socket [ 682.558971][ T153] vhci_hcd vhci_hcd.3: disconnect device [ 682.561384][ T153] vhci_hcd vhci_hcd.3: stop threads [ 682.563244][ T153] vhci_hcd vhci_hcd.3: release socket [ 682.564998][ T153] vhci_hcd vhci_hcd.3: disconnect device [ 682.567001][ T153] vhci_hcd vhci_hcd.3: stop threads [ 682.568702][ T153] vhci_hcd vhci_hcd.3: release socket [ 682.570463][ T153] vhci_hcd vhci_hcd.3: disconnect device [ 682.602655][ T40] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 682.702599][T13193] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 682.705333][T13193] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.708426][T13193] usb 7-1: config 0 has no interface number 0 [ 682.712277][T13193] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 682.715200][T13193] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.717649][T13193] usb 7-1: Product: syz [ 682.719001][T13193] usb 7-1: Manufacturer: syz [ 682.720529][T13193] usb 7-1: SerialNumber: syz [ 682.725644][T13193] usb 7-1: config 0 descriptor?? [ 682.729389][T13193] uvcvideo 7-1:0.64: probe with driver uvcvideo failed with error -22 [ 682.916105][T16745] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 683.041757][T16749] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3045'. [ 683.079735][T16753] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3054'. [ 683.086445][T16753] overlayfs: missing 'workdir' [ 683.108492][T16752] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3055'. [ 683.131176][ T63] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 683.138187][ T63] Bluetooth: hci2: Injecting HCI hardware error event [ 683.181718][T16757] ubi: mtd0 is already attached to ubi16 [ 683.212737][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 683.216579][T14975] Bluetooth: hci2: hardware error 0x00 [ 683.363110][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'. [ 684.370485][ T6005] usb 7-1: USB disconnect, device number 57 [ 684.571011][T16791] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3066'. [ 685.183132][T16798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3068'. [ 685.206428][T16799] xt_CT: You must specify a L4 protocol and not use inversions on it [ 685.291160][T14975] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 685.539806][T16804] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3070'. [ 685.708679][T16819] evm: overlay not supported [ 685.781086][ T6028] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 685.942731][ T6028] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 685.946220][ T6028] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.951098][ T6028] usb 7-1: config 0 has no interface number 0 [ 685.956212][ T6028] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 685.960071][ T6028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.963724][ T6028] usb 7-1: Product: syz [ 685.965625][ T6028] usb 7-1: Manufacturer: syz [ 685.967648][ T6028] usb 7-1: SerialNumber: syz [ 685.978941][ T6028] usb 7-1: config 0 descriptor?? [ 685.985219][ T6028] uvcvideo 7-1:0.64: probe with driver uvcvideo failed with error -22 [ 686.673237][T16829] 0xffffffffffff4497-0xffffffffffff44a6 : "" [ 686.677135][T16829] mtd: partition "" is out of reach -- disabled [ 686.682851][T16829] FAULT_INJECTION: forcing a failure. [ 686.682851][T16829] name failslab, interval 1, probability 0, space 0, times 0 [ 686.689032][T16829] CPU: 0 UID: 0 PID: 16829 Comm: syz.3.3078 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.689073][T16829] Tainted: [L]=SOFTLOCKUP [ 686.689081][T16829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 686.689092][T16829] Call Trace: [ 686.689099][T16829] [ 686.689107][T16829] dump_stack_lvl+0x100/0x190 [ 686.689139][T16829] should_fail_ex.cold+0x5/0xa [ 686.689161][T16829] should_failslab+0xc2/0x120 [ 686.689179][T16829] __kmalloc_cache_noprof+0x7a/0x6f0 [ 686.689200][T16829] ? device_add+0xd3a/0x1950 [ 686.689221][T16829] ? __pfx___debug_object_init+0x10/0x10 [ 686.689246][T16829] device_add+0xd3a/0x1950 [ 686.689268][T16829] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 686.689286][T16829] ? lockdep_init_map_type+0x5c/0x250 [ 686.689307][T16829] ? __pfx_device_add+0x10/0x10 [ 686.689327][T16829] ? lockdep_init_map_type+0x5c/0x250 [ 686.689351][T16829] ? __init_waitqueue_head+0xca/0x150 [ 686.689385][T16829] add_mtd_device+0x928/0x17a0 [ 686.689421][T16829] ? __pfx_add_mtd_device+0x10/0x10 [ 686.689453][T16829] mtd_add_partition+0x30a/0x660 [ 686.689474][T16829] ? __pfx_mtd_add_partition+0x10/0x10 [ 686.689492][T16829] ? __might_fault+0xc5/0x140 [ 686.689517][T16829] ? __might_fault+0xc5/0x140 [ 686.689550][T16829] mtdchar_blkpg_ioctl+0x207/0x250 [ 686.689569][T16829] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 686.689613][T16829] mtdchar_compat_ioctl+0x3d6/0x440 [ 686.689636][T16829] ? find_held_lock+0x2b/0x80 [ 686.689653][T16829] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 686.689683][T16829] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 686.689705][T16829] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 686.689736][T16829] __do_fast_syscall_32+0xe3/0x8c0 [ 686.689759][T16829] do_fast_syscall_32+0x32/0x70 [ 686.689778][T16829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 686.689797][T16829] RIP: 0023:0xf7f52f6c [ 686.689811][T16829] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 686.689828][T16829] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 686.689846][T16829] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000001269 [ 686.689857][T16829] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 686.689868][T16829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 686.689878][T16829] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 686.689888][T16829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 686.689912][T16829] [ 686.690662][T16829] ------------[ cut here ]------------ [ 686.781229][T16829] !list_empty(&mtd->part.node) [ 686.781240][T16829] WARNING: drivers/mtd/mtdpart.c:37 at release_mtd_partition+0x71/0x90, CPU#0: syz.3.3078/16829 [ 686.786466][T16829] Modules linked in: [ 686.788516][T16829] CPU: 0 UID: 0 PID: 16829 Comm: syz.3.3078 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.792941][T16829] Tainted: [L]=SOFTLOCKUP [ 686.794531][T16829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 686.798066][T16829] RIP: 0010:release_mtd_partition+0x71/0x90 [ 686.800211][T16829] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 3f 24 dc fb 48 89 df 5b 5d e9 35 24 dc fb e8 90 9e 7c fb 90 <0f> 0b 90 eb c2 e8 25 35 e8 fb eb db 48 89 ef e8 1b 35 e8 fb eb a5 [ 686.807624][T16829] RSP: 0000:ffffc9000438f9c0 EFLAGS: 00010293 [ 686.810159][T16829] RAX: 0000000000000000 RBX: ffff8880136ee000 RCX: ffffffff8b892df3 [ 686.812816][T16829] RDX: ffff88802a0124c0 RSI: ffffffff868ba510 RDI: ffff8880136ee000 [ 686.815338][T16829] RBP: ffff8880136ee698 R08: 0000000000000005 R09: 0000000000000000 [ 686.818056][T16829] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 686.820722][T16829] R13: dffffc0000000000 R14: ffff88802443e5a0 R15: 0000000000000000 [ 686.823550][T16829] FS: 0000000000000000(0000) GS:ffff888097143000(0063) knlGS:00000000f5416b40 [ 686.826393][T16829] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 686.828511][T16829] CR2: 00000000f739fe30 CR3: 0000000053aa2000 CR4: 0000000000352ef0 [ 686.831205][T16829] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0400000000000081 [ 686.833842][T16829] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 686.836456][T16829] Call Trace: [ 686.837545][T16829] [ 686.838503][T16829] mtd_release+0xa0/0xd0 [ 686.839880][T16829] ? __pfx_mtd_release+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 686.841700][T16829] device_release+0xd2/0x270 [ 686.843387][T16829] kobject_put+0x1f7/0x640 [ 686.844844][T16829] put_device+0x1f/0x30 [ 686.846273][T16829] add_mtd_device+0xbd7/0x17a0 [ 686.847949][T16829] ? __pfx_add_mtd_device+0x10/0x10 [ 686.849743][T16829] mtd_add_partition+0x30a/0x660 [ 686.851637][T16829] ? __pfx_mtd_add_partition+0x10/0x10 [ 686.853549][T16829] ? __might_fault+0xc5/0x140 [ 686.855054][T16829] ? __might_fault+0xc5/0x140 [ 686.856573][T16829] mtdchar_blkpg_ioctl+0x207/0x250 [ 686.858631][T16829] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 686.860690][T16829] mtdchar_compat_ioctl+0x3d6/0x440 [ 686.863303][T16829] ? find_held_lock+0x2b/0x80 [ 686.865518][T16829] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 686.867752][T16829] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 686.870362][T16829] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 686.872908][T16829] __do_fast_syscall_32+0xe3/0x8c0 [ 686.874776][T16829] do_fast_syscall_32+0x32/0x70 [ 686.876430][T16829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 686.878746][T16829] RIP: 0023:0xf7f52f6c [ 686.880487][T16829] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 686.888755][T16829] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 686.893224][T16829] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000001269 [ 686.897297][T16829] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 686.900756][T16829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 686.904151][T16829] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 686.906773][T16829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 686.909570][T16829] [ 686.910742][T16829] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 686.913701][T16829] CPU: 0 UID: 0 PID: 16829 Comm: syz.3.3078 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.917575][T16829] Tainted: [L]=SOFTLOCKUP [ 686.918977][T16829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 686.922163][T16829] Call Trace: [ 686.923239][T16829] [ 686.924467][T16829] dump_stack_lvl+0x100/0x190 [ 686.926448][T16829] vpanic+0x552/0x970 [ 686.927852][T16829] ? __pfx_vpanic+0x10/0x10 [ 686.929812][T16829] panic+0xd1/0xe0 [ 686.931713][T16829] ? __pfx_panic+0x10/0x10 [ 686.933497][T16829] ? check_panic_on_warn+0x1f/0x90 [ 686.935921][T16829] check_panic_on_warn.cold+0x19/0x34 [ 686.938229][T16829] ? release_mtd_partition+0x71/0x90 [ 686.940504][T16829] __warn.cold+0x191/0x348 [ 686.942445][T16829] __report_bug+0x296/0x3d0 [ 686.944439][T16829] ? release_mtd_partition+0x71/0x90 [ 686.946718][T16829] ? __pfx___report_bug+0x10/0x10 [ 686.948947][T16829] ? dump_stack_lvl+0x16c/0x190 [ 686.951329][T16829] ? dump_stack_lvl+0x176/0x190 [ 686.953614][T16829] ? delete_node+0x20a/0x8f0 [ 686.955619][T16829] ? release_mtd_partition+0x71/0x90 [ 686.957885][T16829] report_bug+0xb2/0x220 [ 686.959722][T16829] ? release_mtd_partition+0x71/0x90 [ 686.962004][T16829] handle_bug+0x16a/0x2a0 [ 686.963861][T16829] exc_invalid_op+0x17/0x50 [ 686.965811][T16829] asm_exc_invalid_op+0x1a/0x20 [ 686.967893][T16829] RIP: 0010:release_mtd_partition+0x71/0x90 [ 686.970421][T16829] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 3f 24 dc fb 48 89 df 5b 5d e9 35 24 dc fb e8 90 9e 7c fb 90 <0f> 0b 90 eb c2 e8 25 35 e8 fb eb db 48 89 ef e8 1b 35 e8 fb eb a5 [ 686.978814][T16829] RSP: 0000:ffffc9000438f9c0 EFLAGS: 00010293 [ 686.981510][T16829] RAX: 0000000000000000 RBX: ffff8880136ee000 RCX: ffffffff8b892df3 [ 686.985034][T16829] RDX: ffff88802a0124c0 RSI: ffffffff868ba510 RDI: ffff8880136ee000 [ 686.988518][T16829] RBP: ffff8880136ee698 R08: 0000000000000005 R09: 0000000000000000 [ 686.991764][T16829] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 686.995637][T16829] R13: dffffc0000000000 R14: ffff88802443e5a0 R15: 0000000000000000 [ 686.999133][T16829] ? delete_node+0x2f3/0x8f0 [ 687.001095][T16829] ? release_mtd_partition+0x70/0x90 [ 687.003335][T16829] mtd_release+0xa0/0xd0 [ 687.005105][T16829] ? __pfx_mtd_release+0x10/0x10 [ 687.007134][T16829] device_release+0xd2/0x270 [ 687.009071][T16829] kobject_put+0x1f7/0x640 [ 687.011222][T16829] put_device+0x1f/0x30 [ 687.013010][T16829] add_mtd_device+0xbd7/0x17a0 [ 687.015041][T16829] ? __pfx_add_mtd_device+0x10/0x10 [ 687.017215][T16829] mtd_add_partition+0x30a/0x660 [ 687.019278][T16829] ? __pfx_mtd_add_partition+0x10/0x10 [ 687.021822][T16829] ? __might_fault+0xc5/0x140 [ 687.024083][T16829] ? __might_fault+0xc5/0x140 [ 687.026197][T16829] mtdchar_blkpg_ioctl+0x207/0x250 [ 687.028356][T16829] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 687.030628][T16829] mtdchar_compat_ioctl+0x3d6/0x440 [ 687.033083][T16829] ? find_held_lock+0x2b/0x80 [ 687.035075][T16829] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 687.037620][T16829] ? __pfx_mtdchar_compat_ioctl+0x10/0x10 [ 687.040108][T16829] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 687.042405][T16829] __do_fast_syscall_32+0xe3/0x8c0 [ 687.044702][T16829] do_fast_syscall_32+0x32/0x70 [ 687.047078][T16829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 687.049981][T16829] RIP: 0023:0xf7f52f6c [ 687.052010][T16829] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 687.059915][T16829] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 687.063363][T16829] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000001269 [ 687.066654][T16829] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 687.070163][T16829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 687.073538][T16829] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 687.077055][T16829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 687.080353][T16829] [ 687.082502][T16829] Kernel Offset: disabled [ 687.084391][T16829] Rebooting in 86400 seconds..